@qlever-llc/trellis 0.5.1 → 0.6.0

package/esm/trellis/_sdk/activity/types.d.ts

@@ -0,0 +1,96 @@
+export declare const CONTRACT_ID: "trellis.activity@v1";
+export declare const CONTRACT_DIGEST: "mP5-UZveN1iEWgDwCvoVBwtz7sgxWwPnHY1rJr4cT6Q";
+export type ActivityGetInput = {
+    id: string;
+};
+export type ActivityGetOutput = {
+    entry: {
+        actor?: string;
+        id: string;
+        kind: ("auth.connect" | "auth.disconnect" | "auth.session_revoked" | "auth.connection_kicked");
+        metadata?: {
+            [k: string]: unknown;
+        };
+        occurredAt: string;
+        principalId: string;
+        principalLabel: string;
+        principalOrigin: string;
+        sessionKey?: string;
+        summary: string;
+        userNkey?: string;
+    };
+};
+export type ActivityHealthInput = {};
+export type ActivityHealthOutput = {
+    checks: Array<{
+        error?: string;
+        latencyMs: number;
+        name: string;
+        status: ("ok" | "failed");
+    }>;
+    service: string;
+    status: ("healthy" | "unhealthy" | "degraded");
+    timestamp: string;
+};
+export type ActivityListInput = {
+    kind?: ("auth.connect" | "auth.disconnect" | "auth.session_revoked" | "auth.connection_kicked");
+    limit?: number;
+};
+export type ActivityListOutput = {
+    entries: Array<{
+        actor?: string;
+        id: string;
+        kind: ("auth.connect" | "auth.disconnect" | "auth.session_revoked" | "auth.connection_kicked");
+        metadata?: {
+            [k: string]: unknown;
+        };
+        occurredAt: string;
+        principalId: string;
+        principalLabel: string;
+        principalOrigin: string;
+        sessionKey?: string;
+        summary: string;
+        userNkey?: string;
+    }>;
+};
+export type ActivityRecordedEvent = {
+    actor?: string;
+    header: {
+        id: string;
+        time: string;
+    };
+    id: string;
+    kind: ("auth.connect" | "auth.disconnect" | "auth.session_revoked" | "auth.connection_kicked");
+    metadata?: {
+        [k: string]: unknown;
+    };
+    occurredAt: string;
+    principalId: string;
+    principalLabel: string;
+    principalOrigin: string;
+    sessionKey?: string;
+    summary: string;
+    userNkey?: string;
+};
+export interface RpcMap {
+    "Activity.Get": {
+        input: ActivityGetInput;
+        output: ActivityGetOutput;
+    };
+    "Activity.Health": {
+        input: ActivityHealthInput;
+        output: ActivityHealthOutput;
+    };
+    "Activity.List": {
+        input: ActivityListInput;
+        output: ActivityListOutput;
+    };
+}
+export interface EventMap {
+    "Activity.Recorded": {
+        event: ActivityRecordedEvent;
+    };
+}
+export interface SubjectMap {
+}
+//# sourceMappingURL=types.d.ts.map

package/esm/trellis/_sdk/activity/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AACA,eAAO,MAAM,WAAW,uBAAiC,CAAC;AAC1D,eAAO,MAAM,eAAe,+CAAyD,CAAC;AAEtF,MAAM,MAAM,gBAAgB,GAAG;IAAE,EAAE,EAAE,MAAM,CAAC;CAAE,CAAC;AAC/C,MAAM,MAAM,iBAAiB,GAAG;IAAE,KAAK,EAAE;QAAE,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,EAAE,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,CAAC,cAAc,GAAG,iBAAiB,GAAG,sBAAsB,GAAG,wBAAwB,CAAC,CAAC;QAAC,QAAQ,CAAC,EAAE;YAAE,CAAC,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC;SAAE,CAAC;QAAC,UAAU,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,CAAC;QAAC,cAAc,EAAE,MAAM,CAAC;QAAC,eAAe,EAAE,MAAM,CAAC;QAAC,UAAU,CAAC,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;KAAE,CAAC;CAAE,CAAC;AAErW,MAAM,MAAM,mBAAmB,GAAG,EAAI,CAAC;AACvC,MAAM,MAAM,oBAAoB,GAAG;IAAE,MAAM,EAAE,KAAK,CAAC;QAAE,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,CAAC,IAAI,GAAG,QAAQ,CAAC,CAAC;KAAE,CAAC,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,CAAC,SAAS,GAAG,WAAW,GAAG,UAAU,CAAC,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;CAAE,CAAC;AAE3N,MAAM,MAAM,iBAAiB,GAAG;IAAE,IAAI,CAAC,EAAE,CAAC,cAAc,GAAG,iBAAiB,GAAG,sBAAsB,GAAG,wBAAwB,CAAC,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAC;CAAE,CAAC;AACrJ,MAAM,MAAM,kBAAkB,GAAG;IAAE,OAAO,EAAE,KAAK,CAAC;QAAE,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,EAAE,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,CAAC,cAAc,GAAG,iBAAiB,GAAG,sBAAsB,GAAG,wBAAwB,CAAC,CAAC;QAAC,QAAQ,CAAC,EAAE;YAAE,CAAC,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC;SAAE,CAAC;QAAC,UAAU,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,CAAC;QAAC,cAAc,EAAE,MAAM,CAAC;QAAC,eAAe,EAAE,MAAM,CAAC;QAAC,UAAU,CAAC,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;KAAE,CAAC,CAAC;CAAE,CAAC;AAE/W,MAAM,MAAM,qBAAqB,GAAG;IAAE,KAAK,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;KAAE,CAAC;IAAC,EAAE,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,CAAC,cAAc,GAAG,iBAAiB,GAAG,sBAAsB,GAAG,wBAAwB,CAAC,CAAC;IAAC,QAAQ,CAAC,EAAE;QAAE,CAAC,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC;KAAE,CAAC;IAAC,UAAU,EAAE,MAAM,CAAC;IAAC,WAAW,EAAE,MAAM,CAAC;IAAC,cAAc,EAAE,MAAM,CAAC;IAAC,eAAe,EAAE,MAAM,CAAC;IAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;CAAE,CAAC;AAEpY,MAAM,WAAW,MAAM;IACrB,cAAc,EAAE;QAAE,KAAK,EAAE,gBAAgB,CAAC;QAAC,MAAM,EAAE,iBAAiB,CAAC;KAAE,CAAC;IACxE,iBAAiB,EAAE;QAAE,KAAK,EAAE,mBAAmB,CAAC;QAAC,MAAM,EAAE,oBAAoB,CAAC;KAAE,CAAC;IACjF,eAAe,EAAE;QAAE,KAAK,EAAE,iBAAiB,CAAC;QAAC,MAAM,EAAE,kBAAkB,CAAC;KAAE,CAAC;CAC5E;AAED,MAAM,WAAW,QAAQ;IACvB,mBAAmB,EAAE;QAAE,KAAK,EAAE,qBAAqB,CAAC;KAAE,CAAC;CACxD;AAED,MAAM,WAAW,UAAU;CAC1B"}

package/esm/trellis/_sdk/activity/types.js

@@ -0,0 +1,3 @@
+// Generated from ./generated/contracts/manifests/trellis.activity@v1.json
+export const CONTRACT_ID = "trellis.activity@v1";
+export const CONTRACT_DIGEST = "mP5-UZveN1iEWgDwCvoVBwtz7sgxWwPnHY1rJr4cT6Q";

package/esm/trellis/_sdk/auth/_dnt.polyfills.d.ts

@@ -0,0 +1,12 @@
+declare global {
+    interface Object {
+        /**
+         * Determines whether an object has a property with the specified name.
+         * @param o An object.
+         * @param v A property name.
+         */
+        hasOwn(o: object, v: PropertyKey): boolean;
+    }
+}
+export {};
+//# sourceMappingURL=_dnt.polyfills.d.ts.map

package/esm/trellis/_sdk/auth/_dnt.polyfills.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"_dnt.polyfills.d.ts","sourceRoot":"","sources":["../src/_dnt.polyfills.ts"],"names":[],"mappings":"AAeA,OAAO,CAAC,MAAM,CAAC;IACb,UAAU,MAAM;QACd;;;;WAIG;QACH,MAAM,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC;KAC5C;CACF;AAED,OAAO,EAAE,CAAC"}

package/esm/trellis/_sdk/auth/_dnt.polyfills.js

@@ -0,0 +1,15 @@
+// https://github.com/tc39/proposal-accessible-object-hasownproperty/blob/main/polyfill.js
+if (!Object.hasOwn) {
+    Object.defineProperty(Object, "hasOwn", {
+        value: function (object, property) {
+            if (object == null) {
+                throw new TypeError("Cannot convert undefined or null to object");
+            }
+            return Object.prototype.hasOwnProperty.call(Object(object), property);
+        },
+        configurable: true,
+        enumerable: false,
+        writable: true,
+    });
+}
+export {};

package/esm/trellis/_sdk/auth/api.d.ts

@@ -0,0 +1,10 @@
+export declare const OWNED_API: TrellisAPI;
+export declare const API: {
+    readonly owned: TrellisAPI;
+    readonly used: TrellisAPI;
+    readonly trellis: TrellisAPI;
+};
+export type OwnedApi = typeof API.owned;
+export type Api = typeof API.trellis;
+export type ApiViews = typeof API;
+//# sourceMappingURL=api.d.ts.map

package/esm/trellis/_sdk/auth/api.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"api.d.ts","sourceRoot":"","sources":["../src/api.ts"],"names":[],"mappings":"AAMA,eAAO,MAAM,SAAS,YA2VA,CAAC;AAIvB,eAAO,MAAM,GAAG;;;;CAIN,CAAC;AAEX,MAAM,MAAM,QAAQ,GAAG,OAAO,GAAG,CAAC,KAAK,CAAC;AACxC,MAAM,MAAM,GAAG,GAAG,OAAO,GAAG,CAAC,OAAO,CAAC;AACrC,MAAM,MAAM,QAAQ,GAAG,OAAO,GAAG,CAAC"}

package/esm/trellis/_sdk/auth/api.js

@@ -0,0 +1,354 @@
+import { schema } from "../../../contracts/mod.js";
+import { SCHEMAS } from "./schemas.js";
+export const OWNED_API = {
+    rpc: {
+        "Auth.ActivateWorkload": {
+            subject: "rpc.v1.Auth.ActivateWorkload",
+            input: schema(SCHEMAS.rpc["Auth.ActivateWorkload"].input),
+            output: schema(SCHEMAS.rpc["Auth.ActivateWorkload"].output),
+            callerCapabilities: [],
+            errors: ["AuthError", "ValidationError", "UnexpectedError"],
+        },
+        "Auth.ClearLoginPortalSelection": {
+            subject: "rpc.v1.Auth.ClearLoginPortalSelection",
+            input: schema(SCHEMAS.rpc["Auth.ClearLoginPortalSelection"].input),
+            output: schema(SCHEMAS.rpc["Auth.ClearLoginPortalSelection"].output),
+            callerCapabilities: ["admin"],
+            errors: ["AuthError", "ValidationError", "UnexpectedError"],
+        },
+        "Auth.ClearWorkloadPortalSelection": {
+            subject: "rpc.v1.Auth.ClearWorkloadPortalSelection",
+            input: schema(SCHEMAS.rpc["Auth.ClearWorkloadPortalSelection"].input),
+            output: schema(SCHEMAS.rpc["Auth.ClearWorkloadPortalSelection"].output),
+            callerCapabilities: ["admin"],
+            errors: ["AuthError", "ValidationError", "UnexpectedError"],
+        },
+        "Auth.CreatePortal": {
+            subject: "rpc.v1.Auth.CreatePortal",
+            input: schema(SCHEMAS.rpc["Auth.CreatePortal"].input),
+            output: schema(SCHEMAS.rpc["Auth.CreatePortal"].output),
+            callerCapabilities: ["admin"],
+            errors: ["AuthError", "ValidationError", "UnexpectedError"],
+        },
+        "Auth.CreateWorkloadProfile": {
+            subject: "rpc.v1.Auth.CreateWorkloadProfile",
+            input: schema(SCHEMAS.rpc["Auth.CreateWorkloadProfile"].input),
+            output: schema(SCHEMAS.rpc["Auth.CreateWorkloadProfile"].output),
+            callerCapabilities: ["admin"],
+            errors: ["AuthError", "ValidationError", "UnexpectedError"],
+        },
+        "Auth.DecideWorkloadActivationReview": {
+            subject: "rpc.v1.Auth.DecideWorkloadActivationReview",
+            input: schema(SCHEMAS.rpc["Auth.DecideWorkloadActivationReview"].input),
+            output: schema(SCHEMAS.rpc["Auth.DecideWorkloadActivationReview"].output),
+            callerCapabilities: ["admin", "workload.review"],
+            errors: ["AuthError", "ValidationError", "UnexpectedError"],
+        },
+        "Auth.DisablePortal": {
+            subject: "rpc.v1.Auth.DisablePortal",
+            input: schema(SCHEMAS.rpc["Auth.DisablePortal"].input),
+            output: schema(SCHEMAS.rpc["Auth.DisablePortal"].output),
+            callerCapabilities: ["admin"],
+            errors: ["AuthError", "ValidationError", "UnexpectedError"],
+        },
+        "Auth.DisableWorkloadInstance": {
+            subject: "rpc.v1.Auth.DisableWorkloadInstance",
+            input: schema(SCHEMAS.rpc["Auth.DisableWorkloadInstance"].input),
+            output: schema(SCHEMAS.rpc["Auth.DisableWorkloadInstance"].output),
+            callerCapabilities: ["admin"],
+            errors: ["AuthError", "ValidationError", "UnexpectedError"],
+        },
+        "Auth.DisableWorkloadProfile": {
+            subject: "rpc.v1.Auth.DisableWorkloadProfile",
+            input: schema(SCHEMAS.rpc["Auth.DisableWorkloadProfile"].input),
+            output: schema(SCHEMAS.rpc["Auth.DisableWorkloadProfile"].output),
+            callerCapabilities: ["admin"],
+            errors: ["AuthError", "ValidationError", "UnexpectedError"],
+        },
+        "Auth.GetInstalledContract": {
+            subject: "rpc.v1.Auth.GetInstalledContract",
+            input: schema(SCHEMAS.rpc["Auth.GetInstalledContract"].input),
+            output: schema(SCHEMAS.rpc["Auth.GetInstalledContract"].output),
+            callerCapabilities: ["admin"],
+            errors: ["AuthError", "ValidationError", "UnexpectedError"],
+        },
+        "Auth.GetLoginPortalDefault": {
+            subject: "rpc.v1.Auth.GetLoginPortalDefault",
+            input: schema(SCHEMAS.rpc["Auth.GetLoginPortalDefault"].input),
+            output: schema(SCHEMAS.rpc["Auth.GetLoginPortalDefault"].output),
+            callerCapabilities: ["admin"],
+            errors: ["AuthError", "ValidationError", "UnexpectedError"],
+        },
+        "Auth.GetWorkloadActivationStatus": {
+            subject: "rpc.v1.Auth.GetWorkloadActivationStatus",
+            input: schema(SCHEMAS.rpc["Auth.GetWorkloadActivationStatus"].input),
+            output: schema(SCHEMAS.rpc["Auth.GetWorkloadActivationStatus"].output),
+            callerCapabilities: [],
+            errors: ["AuthError", "ValidationError", "UnexpectedError"],
+        },
+        "Auth.GetWorkloadConnectInfo": {
+            subject: "rpc.v1.Auth.GetWorkloadConnectInfo",
+            input: schema(SCHEMAS.rpc["Auth.GetWorkloadConnectInfo"].input),
+            output: schema(SCHEMAS.rpc["Auth.GetWorkloadConnectInfo"].output),
+            callerCapabilities: [],
+            errors: ["AuthError", "ValidationError", "UnexpectedError"],
+        },
+        "Auth.GetWorkloadPortalDefault": {
+            subject: "rpc.v1.Auth.GetWorkloadPortalDefault",
+            input: schema(SCHEMAS.rpc["Auth.GetWorkloadPortalDefault"].input),
+            output: schema(SCHEMAS.rpc["Auth.GetWorkloadPortalDefault"].output),
+            callerCapabilities: ["admin"],
+            errors: ["AuthError", "ValidationError", "UnexpectedError"],
+        },
+        "Auth.Health": {
+            subject: "rpc.v1.Auth.Health",
+            input: schema(SCHEMAS.rpc["Auth.Health"].input),
+            output: schema(SCHEMAS.rpc["Auth.Health"].output),
+            callerCapabilities: [],
+            errors: ["UnexpectedError"],
+        },
+        "Auth.InstallService": {
+            subject: "rpc.v1.Auth.InstallService",
+            input: schema(SCHEMAS.rpc["Auth.InstallService"].input),
+            output: schema(SCHEMAS.rpc["Auth.InstallService"].output),
+            callerCapabilities: ["admin"],
+            errors: ["AuthError", "ValidationError", "UnexpectedError"],
+        },
+        "Auth.KickConnection": {
+            subject: "rpc.v1.Auth.KickConnection",
+            input: schema(SCHEMAS.rpc["Auth.KickConnection"].input),
+            output: schema(SCHEMAS.rpc["Auth.KickConnection"].output),
+            callerCapabilities: ["admin"],
+            errors: ["AuthError", "ValidationError", "UnexpectedError"],
+        },
+        "Auth.ListApprovals": {
+            subject: "rpc.v1.Auth.ListApprovals",
+            input: schema(SCHEMAS.rpc["Auth.ListApprovals"].input),
+            output: schema(SCHEMAS.rpc["Auth.ListApprovals"].output),
+            callerCapabilities: [],
+            errors: ["AuthError", "ValidationError", "UnexpectedError"],
+        },
+        "Auth.ListConnections": {
+            subject: "rpc.v1.Auth.ListConnections",
+            input: schema(SCHEMAS.rpc["Auth.ListConnections"].input),
+            output: schema(SCHEMAS.rpc["Auth.ListConnections"].output),
+            callerCapabilities: ["admin"],
+            errors: ["AuthError", "ValidationError", "UnexpectedError"],
+        },
+        "Auth.ListInstalledContracts": {
+            subject: "rpc.v1.Auth.ListInstalledContracts",
+            input: schema(SCHEMAS.rpc["Auth.ListInstalledContracts"].input),
+            output: schema(SCHEMAS.rpc["Auth.ListInstalledContracts"].output),
+            callerCapabilities: ["admin"],
+            errors: ["AuthError", "ValidationError", "UnexpectedError"],
+        },
+        "Auth.ListLoginPortalSelections": {
+            subject: "rpc.v1.Auth.ListLoginPortalSelections",
+            input: schema(SCHEMAS.rpc["Auth.ListLoginPortalSelections"].input),
+            output: schema(SCHEMAS.rpc["Auth.ListLoginPortalSelections"].output),
+            callerCapabilities: ["admin"],
+            errors: ["AuthError", "ValidationError", "UnexpectedError"],
+        },
+        "Auth.ListPortals": {
+            subject: "rpc.v1.Auth.ListPortals",
+            input: schema(SCHEMAS.rpc["Auth.ListPortals"].input),
+            output: schema(SCHEMAS.rpc["Auth.ListPortals"].output),
+            callerCapabilities: ["admin"],
+            errors: ["AuthError", "ValidationError", "UnexpectedError"],
+        },
+        "Auth.ListServices": {
+            subject: "rpc.v1.Auth.ListServices",
+            input: schema(SCHEMAS.rpc["Auth.ListServices"].input),
+            output: schema(SCHEMAS.rpc["Auth.ListServices"].output),
+            callerCapabilities: ["admin"],
+            errors: ["AuthError", "ValidationError", "UnexpectedError"],
+        },
+        "Auth.ListSessions": {
+            subject: "rpc.v1.Auth.ListSessions",
+            input: schema(SCHEMAS.rpc["Auth.ListSessions"].input),
+            output: schema(SCHEMAS.rpc["Auth.ListSessions"].output),
+            callerCapabilities: ["admin"],
+            errors: ["AuthError", "ValidationError", "UnexpectedError"],
+        },
+        "Auth.ListUsers": {
+            subject: "rpc.v1.Auth.ListUsers",
+            input: schema(SCHEMAS.rpc["Auth.ListUsers"].input),
+            output: schema(SCHEMAS.rpc["Auth.ListUsers"].output),
+            callerCapabilities: ["admin"],
+            errors: ["AuthError", "ValidationError", "UnexpectedError"],
+        },
+        "Auth.ListWorkloadActivationReviews": {
+            subject: "rpc.v1.Auth.ListWorkloadActivationReviews",
+            input: schema(SCHEMAS.rpc["Auth.ListWorkloadActivationReviews"].input),
+            output: schema(SCHEMAS.rpc["Auth.ListWorkloadActivationReviews"].output),
+            callerCapabilities: ["admin"],
+            errors: ["AuthError", "ValidationError", "UnexpectedError"],
+        },
+        "Auth.ListWorkloadActivations": {
+            subject: "rpc.v1.Auth.ListWorkloadActivations",
+            input: schema(SCHEMAS.rpc["Auth.ListWorkloadActivations"].input),
+            output: schema(SCHEMAS.rpc["Auth.ListWorkloadActivations"].output),
+            callerCapabilities: ["admin"],
+            errors: ["AuthError", "ValidationError", "UnexpectedError"],
+        },
+        "Auth.ListWorkloadInstances": {
+            subject: "rpc.v1.Auth.ListWorkloadInstances",
+            input: schema(SCHEMAS.rpc["Auth.ListWorkloadInstances"].input),
+            output: schema(SCHEMAS.rpc["Auth.ListWorkloadInstances"].output),
+            callerCapabilities: ["admin"],
+            errors: ["AuthError", "ValidationError", "UnexpectedError"],
+        },
+        "Auth.ListWorkloadPortalSelections": {
+            subject: "rpc.v1.Auth.ListWorkloadPortalSelections",
+            input: schema(SCHEMAS.rpc["Auth.ListWorkloadPortalSelections"].input),
+            output: schema(SCHEMAS.rpc["Auth.ListWorkloadPortalSelections"].output),
+            callerCapabilities: ["admin"],
+            errors: ["AuthError", "ValidationError", "UnexpectedError"],
+        },
+        "Auth.ListWorkloadProfiles": {
+            subject: "rpc.v1.Auth.ListWorkloadProfiles",
+            input: schema(SCHEMAS.rpc["Auth.ListWorkloadProfiles"].input),
+            output: schema(SCHEMAS.rpc["Auth.ListWorkloadProfiles"].output),
+            callerCapabilities: ["admin"],
+            errors: ["AuthError", "ValidationError", "UnexpectedError"],
+        },
+        "Auth.Logout": {
+            subject: "rpc.v1.Auth.Logout",
+            input: schema(SCHEMAS.rpc["Auth.Logout"].input),
+            output: schema(SCHEMAS.rpc["Auth.Logout"].output),
+            callerCapabilities: [],
+            errors: ["AuthError", "UnexpectedError"],
+        },
+        "Auth.Me": {
+            subject: "rpc.v1.Auth.Me",
+            input: schema(SCHEMAS.rpc["Auth.Me"].input),
+            output: schema(SCHEMAS.rpc["Auth.Me"].output),
+            callerCapabilities: [],
+            errors: ["AuthError", "UnexpectedError"],
+        },
+        "Auth.ProvisionWorkloadInstance": {
+            subject: "rpc.v1.Auth.ProvisionWorkloadInstance",
+            input: schema(SCHEMAS.rpc["Auth.ProvisionWorkloadInstance"].input),
+            output: schema(SCHEMAS.rpc["Auth.ProvisionWorkloadInstance"].output),
+            callerCapabilities: ["admin"],
+            errors: ["AuthError", "ValidationError", "UnexpectedError"],
+        },
+        "Auth.RenewBindingToken": {
+            subject: "rpc.v1.Auth.RenewBindingToken",
+            input: schema(SCHEMAS.rpc["Auth.RenewBindingToken"].input),
+            output: schema(SCHEMAS.rpc["Auth.RenewBindingToken"].output),
+            callerCapabilities: [],
+            errors: ["AuthError", "UnexpectedError"],
+        },
+        "Auth.RevokeApproval": {
+            subject: "rpc.v1.Auth.RevokeApproval",
+            input: schema(SCHEMAS.rpc["Auth.RevokeApproval"].input),
+            output: schema(SCHEMAS.rpc["Auth.RevokeApproval"].output),
+            callerCapabilities: [],
+            errors: ["AuthError", "ValidationError", "UnexpectedError"],
+        },
+        "Auth.RevokeSession": {
+            subject: "rpc.v1.Auth.RevokeSession",
+            input: schema(SCHEMAS.rpc["Auth.RevokeSession"].input),
+            output: schema(SCHEMAS.rpc["Auth.RevokeSession"].output),
+            callerCapabilities: ["admin"],
+            errors: ["AuthError", "ValidationError", "UnexpectedError"],
+        },
+        "Auth.RevokeWorkloadActivation": {
+            subject: "rpc.v1.Auth.RevokeWorkloadActivation",
+            input: schema(SCHEMAS.rpc["Auth.RevokeWorkloadActivation"].input),
+            output: schema(SCHEMAS.rpc["Auth.RevokeWorkloadActivation"].output),
+            callerCapabilities: ["admin"],
+            errors: ["AuthError", "ValidationError", "UnexpectedError"],
+        },
+        "Auth.SetLoginPortalDefault": {
+            subject: "rpc.v1.Auth.SetLoginPortalDefault",
+            input: schema(SCHEMAS.rpc["Auth.SetLoginPortalDefault"].input),
+            output: schema(SCHEMAS.rpc["Auth.SetLoginPortalDefault"].output),
+            callerCapabilities: ["admin"],
+            errors: ["AuthError", "ValidationError", "UnexpectedError"],
+        },
+        "Auth.SetLoginPortalSelection": {
+            subject: "rpc.v1.Auth.SetLoginPortalSelection",
+            input: schema(SCHEMAS.rpc["Auth.SetLoginPortalSelection"].input),
+            output: schema(SCHEMAS.rpc["Auth.SetLoginPortalSelection"].output),
+            callerCapabilities: ["admin"],
+            errors: ["AuthError", "ValidationError", "UnexpectedError"],
+        },
+        "Auth.SetWorkloadPortalDefault": {
+            subject: "rpc.v1.Auth.SetWorkloadPortalDefault",
+            input: schema(SCHEMAS.rpc["Auth.SetWorkloadPortalDefault"].input),
+            output: schema(SCHEMAS.rpc["Auth.SetWorkloadPortalDefault"].output),
+            callerCapabilities: ["admin"],
+            errors: ["AuthError", "ValidationError", "UnexpectedError"],
+        },
+        "Auth.SetWorkloadPortalSelection": {
+            subject: "rpc.v1.Auth.SetWorkloadPortalSelection",
+            input: schema(SCHEMAS.rpc["Auth.SetWorkloadPortalSelection"].input),
+            output: schema(SCHEMAS.rpc["Auth.SetWorkloadPortalSelection"].output),
+            callerCapabilities: ["admin"],
+            errors: ["AuthError", "ValidationError", "UnexpectedError"],
+        },
+        "Auth.UpdateUser": {
+            subject: "rpc.v1.Auth.UpdateUser",
+            input: schema(SCHEMAS.rpc["Auth.UpdateUser"].input),
+            output: schema(SCHEMAS.rpc["Auth.UpdateUser"].output),
+            callerCapabilities: ["admin"],
+            errors: ["AuthError", "ValidationError", "UnexpectedError"],
+        },
+        "Auth.UpgradeServiceContract": {
+            subject: "rpc.v1.Auth.UpgradeServiceContract",
+            input: schema(SCHEMAS.rpc["Auth.UpgradeServiceContract"].input),
+            output: schema(SCHEMAS.rpc["Auth.UpgradeServiceContract"].output),
+            callerCapabilities: ["admin"],
+            errors: ["AuthError", "ValidationError", "UnexpectedError"],
+        },
+        "Auth.ValidateRequest": {
+            subject: "rpc.v1.Auth.ValidateRequest",
+            input: schema(SCHEMAS.rpc["Auth.ValidateRequest"].input),
+            output: schema(SCHEMAS.rpc["Auth.ValidateRequest"].output),
+            callerCapabilities: ["service"],
+            errors: ["AuthError", "ValidationError", "UnexpectedError"],
+        },
+    },
+    operations: {},
+    events: {
+        "Auth.Connect": {
+            subject: "events.v1.Auth.Connect",
+            event: schema(SCHEMAS.events["Auth.Connect"].event),
+            publishCapabilities: ["service:events:auth"],
+            subscribeCapabilities: ["service:events:auth"],
+        },
+        "Auth.ConnectionKicked": {
+            subject: "events.v1.Auth.ConnectionKicked",
+            event: schema(SCHEMAS.events["Auth.ConnectionKicked"].event),
+            publishCapabilities: ["service:events:auth"],
+            subscribeCapabilities: ["service:events:auth"],
+        },
+        "Auth.Disconnect": {
+            subject: "events.v1.Auth.Disconnect",
+            event: schema(SCHEMAS.events["Auth.Disconnect"].event),
+            publishCapabilities: ["service:events:auth"],
+            subscribeCapabilities: ["service:events:auth"],
+        },
+        "Auth.SessionRevoked": {
+            subject: "events.v1.Auth.SessionRevoked",
+            event: schema(SCHEMAS.events["Auth.SessionRevoked"].event),
+            publishCapabilities: ["service:events:auth"],
+            subscribeCapabilities: ["service:events:auth"],
+        },
+        "Auth.WorkloadActivationReviewRequested": {
+            subject: "events.v1.Auth.WorkloadActivationReviewRequested",
+            event: schema(SCHEMAS.events["Auth.WorkloadActivationReviewRequested"].event),
+            publishCapabilities: ["service:events:auth"],
+            subscribeCapabilities: ["workload.review"],
+        },
+    },
+    subjects: {},
+};
+const EMPTY_API = { rpc: {}, operations: {}, events: {}, subjects: {} };
+export const API = {
+    owned: OWNED_API,
+    used: EMPTY_API,
+    trellis: OWNED_API,
+};

package/esm/trellis/_sdk/auth/contract.d.ts

@@ -0,0 +1,28 @@
+import type { ContractDependencyUse, SdkContractModule, TrellisContractV1, UseSpec } from "../../../contracts/mod.js";
+import { API } from "./api.js";
+export declare const CONTRACT_ID: "trellis.auth@v1";
+export declare const CONTRACT_DIGEST: "Nf__I64IhjOU59OwMTk0w6r0AuN8O9WDMmNQ-YM3oqk";
+export declare const CONTRACT: TrellisContractV1;
+declare const DEFAULT_AUTH_RPC_CALL: readonly ["Auth.Me", "Auth.Logout", "Auth.RenewBindingToken"];
+type AuthOwnedApi = typeof API.owned;
+type AuthUseSpec = UseSpec<AuthOwnedApi>;
+type DefaultAuthRpcCall = typeof DEFAULT_AUTH_RPC_CALL;
+type WithDefaultAuthRpcCall<TSpec extends AuthUseSpec | undefined> = TSpec extends {
+    rpc?: {
+        call?: infer TCall extends readonly string[];
+    };
+} ? readonly [...DefaultAuthRpcCall, ...TCall] : DefaultAuthRpcCall;
+type WithDefaultAuthUseSpec<TSpec extends AuthUseSpec | undefined> = (TSpec extends AuthUseSpec ? Omit<TSpec, "rpc"> : {}) & {
+    rpc: {
+        call: WithDefaultAuthRpcCall<TSpec>;
+    };
+};
+type AuthUseDefaultsFn = <const TSpec extends AuthUseSpec | undefined = undefined>(spec?: TSpec) => ContractDependencyUse<typeof CONTRACT_ID, AuthOwnedApi, WithDefaultAuthUseSpec<TSpec>>;
+type AuthModule = SdkContractModule<typeof CONTRACT_ID, typeof API.owned> & {
+    useDefaults: AuthUseDefaultsFn;
+};
+export declare const auth: AuthModule;
+export declare const use: any;
+export declare const useDefaults: any;
+export {};
+//# sourceMappingURL=contract.d.ts.map

package/esm/trellis/_sdk/auth/contract.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"contract.d.ts","sourceRoot":"","sources":["../src/contract.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,qBAAqB,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,OAAO,EAAE,MAAM,+BAA+B,CAAC;AAC1H,OAAO,EAAE,GAAG,EAAE,MAAM,UAAU,CAAC;AAI/B,eAAO,MAAM,WAAW,mBAA6B,CAAC;AACtD,eAAO,MAAM,eAAe,+CAAyD,CAAC;AACtF,eAAO,MAAM,QAAQ,EAAo91E,iBAAiB,CAAC;AA2B3/1E,QAAA,MAAM,qBAAqB,+DAIjB,CAAC;AAEX,KAAK,YAAY,GAAG,OAAO,GAAG,CAAC,KAAK,CAAC;AACrC,KAAK,WAAW,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC;AACzC,KAAK,kBAAkB,GAAG,OAAO,qBAAqB,CAAC;AACvD,KAAK,sBAAsB,CAAC,KAAK,SAAS,WAAW,GAAG,SAAS,IAC/D,KAAK,SAAS;IAAE,GAAG,CAAC,EAAE;QAAE,IAAI,CAAC,EAAE,MAAM,KAAK,SAAS,SAAS,MAAM,EAAE,CAAA;KAAE,CAAA;CAAE,GACpE,SAAS,CAAC,GAAG,kBAAkB,EAAE,GAAG,KAAK,CAAC,GAC1C,kBAAkB,CAAC;AACzB,KAAK,sBAAsB,CAAC,KAAK,SAAS,WAAW,GAAG,SAAS,IAC/D,CAAC,KAAK,SAAS,WAAW,GAAG,IAAI,CAAC,KAAK,EAAE,KAAK,CAAC,GAAG,EAAE,CAAC,GAAG;IACtD,GAAG,EAAE;QACH,IAAI,EAAE,sBAAsB,CAAC,KAAK,CAAC,CAAC;KACrC,CAAC;CACH,CAAC;AACJ,KAAK,iBAAiB,GAAG,CACvB,KAAK,CAAC,KAAK,SAAS,WAAW,GAAG,SAAS,GAAG,SAAS,EACvD,IAAI,CAAC,EAAE,KAAK,KAAK,qBAAqB,CACtC,OAAO,WAAW,EAClB,YAAY,EACZ,sBAAsB,CAAC,KAAK,CAAC,CAC9B,CAAC;AACF,KAAK,UAAU,GAAG,iBAAiB,CAAC,OAAO,WAAW,EAAE,OAAO,GAAG,CAAC,KAAK,CAAC,GAAG;IAC1E,WAAW,EAAE,iBAAiB,CAAC;CAChC,CAAC;AAmBF,eAAO,MAAM,IAAI,EAAE,UAwClB,CAAC;AAEF,eAAO,MAAM,GAAG,KAAW,CAAC;AAC5B,eAAO,MAAM,WAAW,KAAmB,CAAC"}