@qlever-llc/trellis 0.7.0-rc.5 → 0.7.0

package/script/js/packages/trellis/contract_support/protocol.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"protocol.d.ts","sourceRoot":"","sources":["../../../../../../contract_support/protocol.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,EAAE,EAAE,KAAK,MAAM,EAAE,MAAM,SAAS,CAAC;AAmB5C,eAAO,MAAM,wBAAwB;;;;;;EAMF,CAAC;AAEpC,MAAM,MAAM,kBAAkB,GAAG,MAAM,CAAC,OAAO,wBAAwB,CAAC,CAAC;AAEzE,eAAO,MAAM,2BAA2B;;;;;;EAML,CAAC;AAEpC,MAAM,MAAM,qBAAqB,GAAG,MAAM,CAAC,OAAO,2BAA2B,CAAC,CAAC;AAE/E,eAAO,MAAM,4BAA4B;;;;;;;;;;;;;;;;EAgBN,CAAC;AAEpC,MAAM,MAAM,sBAAsB,GAAG,MAAM,CACzC,OAAO,4BAA4B,CACpC,CAAC;AAEF,eAAO,MAAM,uBAAuB;;EAED,CAAC;AAEpC,MAAM,MAAM,iBAAiB,GAAG,MAAM,CAAC,OAAO,uBAAuB,CAAC,CAAC;AAEvE,eAAO,MAAM,8BAA8B;;;;;;;;;;;;;;;EAWR,CAAC;AAEpC,MAAM,MAAM,wBAAwB,GAAG,MAAM,CAC3C,OAAO,8BAA8B,CACtC,CAAC;AAEF,eAAO,MAAM,0BAA0B;;;;;;;;;;;;;;;;;EAKJ,CAAC;AAEpC,MAAM,MAAM,oBAAoB,GAAG,MAAM,CAAC,OAAO,0BAA0B,CAAC,CAAC;AAE7E,eAAO,MAAM,uBAAuB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAWlC,CAAC;AAEH,MAAM,MAAM,iBAAiB,GAAG,MAAM,CAAC,OAAO,uBAAuB,CAAC,CAAC;AAEvE,eAAO,MAAM,uBAAuB;;;;;EAKlC,CAAC;AAEH,MAAM,MAAM,iBAAiB,GAAG,MAAM,CAAC,OAAO,uBAAuB,CAAC,CAAC;AAEvE,eAAO,MAAM,0BAA0B;;;;;EAKrC,CAAC;AAEH,MAAM,MAAM,oBAAoB,GAAG,MAAM,CAAC,OAAO,0BAA0B,CAAC,CAAC;AAE7E,eAAO,MAAM,2BAA2B;;;;;;;;;;;;;;;;EAgBtC,CAAC;AAEH,MAAM,MAAM,qBAAqB,GAAG,MAAM,CAAC,OAAO,2BAA2B,CAAC,CAAC;AAE/E,eAAO,MAAM,sBAAsB;;;;;;;;;;;;;;;;;;;EAejC,CAAC;AAEH,MAAM,MAAM,gBAAgB,GAAG,MAAM,CAAC,OAAO,sBAAsB,CAAC,CAAC;AAErE,eAAO,MAAM,yBAAyB;;;;;;;;;;;;;;;;;;;;;;EAGpC,CAAC;AAEH,MAAM,MAAM,mBAAmB,GAAG,MAAM,CAAC,OAAO,yBAAyB,CAAC,CAAC;AAE3E,eAAO,MAAM,8BAA8B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAWzC,CAAC;AAEH,MAAM,MAAM,wBAAwB,GAAG,MAAM,CAC3C,OAAO,8BAA8B,CACtC,CAAC;AAEF,eAAO,MAAM,8BAA8B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAIzC,CAAC;AAEH,MAAM,MAAM,wBAAwB,GAAG,MAAM,CAC3C,OAAO,8BAA8B,CACtC,CAAC;AAEF,eAAO,MAAM,aAAa,iCAIsB,CAAC;AAEjD,eAAO,MAAM,iBAAiB;;;;;EAK5B,CAAC;AAEH,MAAM,MAAM,WAAW,GAAG,MAAM,CAAC,OAAO,iBAAiB,CAAC,CAAC;AAE3D,eAAO,MAAM,eAAe;;;;;;EAM1B,CAAC;AAEH,MAAM,MAAM,SAAS,GAAG,MAAM,CAAC,OAAO,eAAe,CAAC,CAAC"}

package/script/js/packages/trellis/contract_support/protocol.js

@@ -0,0 +1,151 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.PaginatedSchema = exports.EventHeaderSchema = exports.IsoDateSchema = exports.InstalledServiceContractSchema = exports.ContractResourceBindingsSchema = exports.JobsResourceBindingSchema = exports.JobsQueueBindingSchema = exports.StreamResourceBindingSchema = exports.StoreResourceBindingSchema = exports.KvResourceBindingSchema = exports.ContractResourcesSchema = exports.ContractJobsResourceSchema = exports.ContractJobQueueResourceSchema = exports.ContractSchemaRefSchema = exports.ContractStreamResourceSchema = exports.ContractStoreResourceSchema = exports.ContractKvResourceSchema = void 0;
+const typebox_1 = __importDefault(require("typebox"));
+function parseIsoDate(value) {
+    const parsed = new Date(value);
+    if (Number.isNaN(parsed.getTime()) || parsed.toISOString() !== value) {
+        throw new TypeError(`Expected canonical ISO 8601 UTC date-time string, received '${value}'`);
+    }
+    return parsed;
+}
+function formatIsoDate(value) {
+    if (!(value instanceof Date) || Number.isNaN(value.getTime())) {
+        throw new TypeError("Expected a valid Date instance");
+    }
+    return value.toISOString();
+}
+exports.ContractKvResourceSchema = typebox_1.default.Object({
+    purpose: typebox_1.default.String({ minLength: 1 }),
+    required: typebox_1.default.Optional(typebox_1.default.Boolean({ default: true })),
+    history: typebox_1.default.Optional(typebox_1.default.Integer({ minimum: 1, default: 1 })),
+    ttlMs: typebox_1.default.Optional(typebox_1.default.Integer({ minimum: 0, default: 0 })),
+    maxValueBytes: typebox_1.default.Optional(typebox_1.default.Integer({ minimum: 1 })),
+}, { additionalProperties: false });
+exports.ContractStoreResourceSchema = typebox_1.default.Object({
+    purpose: typebox_1.default.String({ minLength: 1 }),
+    required: typebox_1.default.Optional(typebox_1.default.Boolean({ default: true })),
+    ttlMs: typebox_1.default.Optional(typebox_1.default.Integer({ minimum: 0, default: 0 })),
+    maxObjectBytes: typebox_1.default.Optional(typebox_1.default.Integer({ minimum: 1 })),
+    maxTotalBytes: typebox_1.default.Optional(typebox_1.default.Integer({ minimum: 1 })),
+}, { additionalProperties: false });
+exports.ContractStreamResourceSchema = typebox_1.default.Object({
+    purpose: typebox_1.default.String({ minLength: 1 }),
+    required: typebox_1.default.Optional(typebox_1.default.Boolean({ default: true })),
+    retention: typebox_1.default.Optional(typebox_1.default.String({ minLength: 1 })),
+    storage: typebox_1.default.Optional(typebox_1.default.String({ minLength: 1 })),
+    numReplicas: typebox_1.default.Optional(typebox_1.default.Integer({ minimum: 1 })),
+    maxAgeMs: typebox_1.default.Optional(typebox_1.default.Integer({ minimum: 0 })),
+    maxBytes: typebox_1.default.Optional(typebox_1.default.Integer()),
+    maxMsgs: typebox_1.default.Optional(typebox_1.default.Integer()),
+    discard: typebox_1.default.Optional(typebox_1.default.String({ minLength: 1 })),
+    subjects: typebox_1.default.Array(typebox_1.default.String({ minLength: 1 }), { minItems: 1 }),
+    sources: typebox_1.default.Optional(typebox_1.default.Array(typebox_1.default.Object({
+        fromAlias: typebox_1.default.String({ minLength: 1 }),
+        filterSubject: typebox_1.default.Optional(typebox_1.default.String({ minLength: 1 })),
+        subjectTransformDest: typebox_1.default.Optional(typebox_1.default.String({ minLength: 1 })),
+    }, { additionalProperties: false }))),
+}, { additionalProperties: false });
+exports.ContractSchemaRefSchema = typebox_1.default.Object({
+    schema: typebox_1.default.String({ minLength: 1 }),
+}, { additionalProperties: false });
+exports.ContractJobQueueResourceSchema = typebox_1.default.Object({
+    payload: exports.ContractSchemaRefSchema,
+    result: typebox_1.default.Optional(exports.ContractSchemaRefSchema),
+    maxDeliver: typebox_1.default.Optional(typebox_1.default.Integer({ minimum: 1 })),
+    backoffMs: typebox_1.default.Optional(typebox_1.default.Array(typebox_1.default.Integer({ minimum: 0 }))),
+    ackWaitMs: typebox_1.default.Optional(typebox_1.default.Integer({ minimum: 1 })),
+    defaultDeadlineMs: typebox_1.default.Optional(typebox_1.default.Integer({ minimum: 1 })),
+    progress: typebox_1.default.Optional(typebox_1.default.Boolean()),
+    logs: typebox_1.default.Optional(typebox_1.default.Boolean()),
+    dlq: typebox_1.default.Optional(typebox_1.default.Boolean()),
+    concurrency: typebox_1.default.Optional(typebox_1.default.Integer({ minimum: 1 })),
+}, { additionalProperties: false });
+exports.ContractJobsResourceSchema = typebox_1.default.Object({
+    queues: typebox_1.default.Record(typebox_1.default.String({ minLength: 1 }), exports.ContractJobQueueResourceSchema),
+}, { additionalProperties: false });
+exports.ContractResourcesSchema = typebox_1.default.Object({
+    kv: typebox_1.default.Optional(typebox_1.default.Record(typebox_1.default.String({ minLength: 1 }), exports.ContractKvResourceSchema)),
+    store: typebox_1.default.Optional(typebox_1.default.Record(typebox_1.default.String({ minLength: 1 }), exports.ContractStoreResourceSchema)),
+    streams: typebox_1.default.Optional(typebox_1.default.Record(typebox_1.default.String({ minLength: 1 }), exports.ContractStreamResourceSchema)),
+    jobs: typebox_1.default.Optional(exports.ContractJobsResourceSchema),
+});
+exports.KvResourceBindingSchema = typebox_1.default.Object({
+    bucket: typebox_1.default.String({ minLength: 1 }),
+    history: typebox_1.default.Integer({ minimum: 1 }),
+    ttlMs: typebox_1.default.Integer({ minimum: 0 }),
+    maxValueBytes: typebox_1.default.Optional(typebox_1.default.Integer({ minimum: 1 })),
+});
+exports.StoreResourceBindingSchema = typebox_1.default.Object({
+    name: typebox_1.default.String({ minLength: 1 }),
+    ttlMs: typebox_1.default.Integer({ minimum: 0 }),
+    maxObjectBytes: typebox_1.default.Optional(typebox_1.default.Integer({ minimum: 1 })),
+    maxTotalBytes: typebox_1.default.Optional(typebox_1.default.Integer({ minimum: 1 })),
+});
+exports.StreamResourceBindingSchema = typebox_1.default.Object({
+    name: typebox_1.default.String({ minLength: 1 }),
+    retention: typebox_1.default.Optional(typebox_1.default.String({ minLength: 1 })),
+    storage: typebox_1.default.Optional(typebox_1.default.String({ minLength: 1 })),
+    numReplicas: typebox_1.default.Optional(typebox_1.default.Integer({ minimum: 1 })),
+    maxAgeMs: typebox_1.default.Optional(typebox_1.default.Integer({ minimum: 0 })),
+    maxBytes: typebox_1.default.Optional(typebox_1.default.Integer()),
+    maxMsgs: typebox_1.default.Optional(typebox_1.default.Integer()),
+    discard: typebox_1.default.Optional(typebox_1.default.String({ minLength: 1 })),
+    subjects: typebox_1.default.Array(typebox_1.default.String({ minLength: 1 }), { minItems: 1 }),
+    sources: typebox_1.default.Optional(typebox_1.default.Array(typebox_1.default.Object({
+        fromAlias: typebox_1.default.String({ minLength: 1 }),
+        streamName: typebox_1.default.String({ minLength: 1 }),
+        filterSubject: typebox_1.default.Optional(typebox_1.default.String({ minLength: 1 })),
+        subjectTransformDest: typebox_1.default.Optional(typebox_1.default.String({ minLength: 1 })),
+    }))),
+});
+exports.JobsQueueBindingSchema = typebox_1.default.Object({
+    queueType: typebox_1.default.String({ minLength: 1 }),
+    publishPrefix: typebox_1.default.String({ minLength: 1 }),
+    workSubject: typebox_1.default.String({ minLength: 1 }),
+    consumerName: typebox_1.default.String({ minLength: 1 }),
+    payload: exports.ContractSchemaRefSchema,
+    result: typebox_1.default.Optional(exports.ContractSchemaRefSchema),
+    maxDeliver: typebox_1.default.Integer({ minimum: 1 }),
+    backoffMs: typebox_1.default.Array(typebox_1.default.Integer({ minimum: 0 })),
+    ackWaitMs: typebox_1.default.Integer({ minimum: 1 }),
+    defaultDeadlineMs: typebox_1.default.Optional(typebox_1.default.Integer({ minimum: 1 })),
+    progress: typebox_1.default.Boolean(),
+    logs: typebox_1.default.Boolean(),
+    dlq: typebox_1.default.Boolean(),
+    concurrency: typebox_1.default.Integer({ minimum: 1 }),
+});
+exports.JobsResourceBindingSchema = typebox_1.default.Object({
+    namespace: typebox_1.default.String({ minLength: 1 }),
+    queues: typebox_1.default.Record(typebox_1.default.String({ minLength: 1 }), exports.JobsQueueBindingSchema),
+});
+exports.ContractResourceBindingsSchema = typebox_1.default.Object({
+    kv: typebox_1.default.Optional(typebox_1.default.Record(typebox_1.default.String({ minLength: 1 }), exports.KvResourceBindingSchema)),
+    store: typebox_1.default.Optional(typebox_1.default.Record(typebox_1.default.String({ minLength: 1 }), exports.StoreResourceBindingSchema)),
+    streams: typebox_1.default.Optional(typebox_1.default.Record(typebox_1.default.String({ minLength: 1 }), exports.StreamResourceBindingSchema)),
+    jobs: typebox_1.default.Optional(exports.JobsResourceBindingSchema),
+});
+exports.InstalledServiceContractSchema = typebox_1.default.Object({
+    contractId: typebox_1.default.String({ minLength: 1 }),
+    digest: typebox_1.default.String({ pattern: "^[A-Za-z0-9_-]+$" }),
+    resources: exports.ContractResourceBindingsSchema,
+});
+exports.IsoDateSchema = typebox_1.default.Codec(typebox_1.default.String({ format: "date-time" }))
+    .Decode((value) => parseIsoDate(value))
+    .Encode((value) => formatIsoDate(value));
+exports.EventHeaderSchema = typebox_1.default.Object({
+    header: typebox_1.default.Object({
+        id: typebox_1.default.String(),
+        time: exports.IsoDateSchema,
+    }),
+});
+exports.PaginatedSchema = typebox_1.default.Object({
+    count: typebox_1.default.Integer({ minimum: 0 }),
+    offset: typebox_1.default.Integer({ minimum: 0 }),
+    limit: typebox_1.default.Integer({ minimum: 0 }),
+    next: typebox_1.default.Optional(typebox_1.default.Integer({ minimum: 0 })),
+    prev: typebox_1.default.Optional(typebox_1.default.Integer({ minimum: 0 })),
+});

package/script/js/packages/trellis/contract_support/runtime.d.ts

@@ -0,0 +1,75 @@
+import type { StaticDecode, TSchema } from "typebox";
+import type { BaseError } from "@qlever-llc/result";
+import type { SubjectParam } from "./schema_pointers.ts";
+export type Schema<T> = {
+    schema: unknown;
+    readonly __trellisType?: T;
+};
+export type SchemaLike<T = unknown> = TSchema | Schema<T>;
+export type TransportErrorData = {
+    id: string;
+    type: string;
+    message: string;
+    context?: Record<string, unknown>;
+    traceId?: string;
+} & Record<string, unknown>;
+export type RpcErrorClass<TData extends TransportErrorData = TransportErrorData, TError extends BaseError = BaseError> = {
+    fromSerializable(data: TData): TError;
+};
+export type RuntimeRpcErrorDesc<TType extends string = string, TSchema extends SchemaLike | undefined = SchemaLike | undefined, TError extends BaseError = BaseError> = {
+    type: TType;
+    schema?: TSchema;
+    fromSerializable(data: TSchema extends SchemaLike ? InferSchemaType<TSchema> : TransportErrorData): TError;
+};
+export type InferRuntimeRpcError<T extends RuntimeRpcErrorDesc> = T extends RuntimeRpcErrorDesc<string, SchemaLike | undefined, infer TError> ? TError : never;
+export type InferSchemaType<S> = S extends Schema<infer T> ? T : S extends TSchema ? StaticDecode<S> : unknown;
+export declare function schema<T>(raw: unknown): Schema<T>;
+export declare function unwrapSchema(raw: SchemaLike): unknown;
+export type RPCDesc<I extends SchemaLike = SchemaLike, O extends SchemaLike = SchemaLike, E extends readonly string[] | undefined = readonly string[] | undefined, TRuntimeErrors extends readonly RuntimeRpcErrorDesc[] | undefined = readonly RuntimeRpcErrorDesc[] | undefined> = {
+    subject: string;
+    input: I;
+    output: O;
+    callerCapabilities: readonly string[];
+    authRequired?: boolean;
+    errors?: E;
+    runtimeErrors?: TRuntimeErrors;
+    declaredErrorTypes?: readonly string[];
+};
+export type EventDesc<S extends SchemaLike = SchemaLike> = {
+    subject: string;
+    params?: readonly SubjectParam[];
+    event: S;
+    publishCapabilities: readonly string[];
+    subscribeCapabilities: readonly string[];
+};
+export type OperationDesc<I extends SchemaLike = SchemaLike, P extends SchemaLike | undefined = SchemaLike | undefined, O extends SchemaLike | undefined = SchemaLike | undefined> = {
+    subject: string;
+    input: I;
+    progress?: P;
+    output?: O;
+    transfer?: {
+        store: string;
+        key: `/${string}`;
+        contentType?: `/${string}`;
+        metadata?: `/${string}`;
+        expiresInMs?: number;
+        maxBytes?: number;
+    };
+    callerCapabilities: readonly string[];
+    readCapabilities: readonly string[];
+    cancelCapabilities: readonly string[];
+    cancel?: boolean;
+};
+export type SubjectDesc<S extends SchemaLike = SchemaLike> = {
+    subject: string;
+    schema?: S;
+    publishCapabilities: readonly string[];
+    subscribeCapabilities: readonly string[];
+};
+export type TrellisAPI = {
+    rpc: Record<string, RPCDesc>;
+    operations: Record<string, OperationDesc>;
+    events: Record<string, EventDesc>;
+    subjects: Record<string, SubjectDesc>;
+};
+//# sourceMappingURL=runtime.d.ts.map

package/script/js/packages/trellis/contract_support/runtime.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtime.d.ts","sourceRoot":"","sources":["../../../../../../contract_support/runtime.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAErD,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AACpD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AAEzD,MAAM,MAAM,MAAM,CAAC,CAAC,IAAI;IACtB,MAAM,EAAE,OAAO,CAAC;IAChB,QAAQ,CAAC,aAAa,CAAC,EAAE,CAAC,CAAC;CAC5B,CAAC;AAEF,MAAM,MAAM,UAAU,CAAC,CAAC,GAAG,OAAO,IAAI,OAAO,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;AAE1D,MAAM,MAAM,kBAAkB,GAAG;IAC/B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAClC,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;AAE5B,MAAM,MAAM,aAAa,CACvB,KAAK,SAAS,kBAAkB,GAAG,kBAAkB,EACrD,MAAM,SAAS,SAAS,GAAG,SAAS,IAClC;IACF,gBAAgB,CAAC,IAAI,EAAE,KAAK,GAAG,MAAM,CAAC;CACvC,CAAC;AAEF,MAAM,MAAM,mBAAmB,CAC7B,KAAK,SAAS,MAAM,GAAG,MAAM,EAC7B,OAAO,SAAS,UAAU,GAAG,SAAS,GAAG,UAAU,GAAG,SAAS,EAC/D,MAAM,SAAS,SAAS,GAAG,SAAS,IAClC;IACF,IAAI,EAAE,KAAK,CAAC;IACZ,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,gBAAgB,CACd,IAAI,EAAE,OAAO,SAAS,UAAU,GAAG,eAAe,CAAC,OAAO,CAAC,GAAG,kBAAkB,GAC/E,MAAM,CAAC;CACX,CAAC;AAEF,MAAM,MAAM,oBAAoB,CAAC,CAAC,SAAS,mBAAmB,IAAI,CAAC,SACjE,mBAAmB,CAAC,MAAM,EAAE,UAAU,GAAG,SAAS,EAAE,MAAM,MAAM,CAAC,GAAG,MAAM,GACxE,KAAK,CAAC;AAEV,MAAM,MAAM,eAAe,CAAC,CAAC,IAAI,CAAC,SAAS,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,GAC1D,CAAC,SAAS,OAAO,GAAG,YAAY,CAAC,CAAC,CAAC,GACnC,OAAO,CAAC;AAEZ,wBAAgB,MAAM,CAAC,CAAC,EAAE,GAAG,EAAE,OAAO,GAAG,MAAM,CAAC,CAAC,CAAC,CAEjD;AAED,wBAAgB,YAAY,CAAC,GAAG,EAAE,UAAU,GAAG,OAAO,CAKrD;AAED,MAAM,MAAM,OAAO,CACjB,CAAC,SAAS,UAAU,GAAG,UAAU,EACjC,CAAC,SAAS,UAAU,GAAG,UAAU,EACjC,CAAC,SAAS,SAAS,MAAM,EAAE,GAAG,SAAS,GAAG,SAAS,MAAM,EAAE,GAAG,SAAS,EACvE,cAAc,SAAS,SAAS,mBAAmB,EAAE,GAAG,SAAS,GAC7D,SAAS,mBAAmB,EAAE,GAC9B,SAAS,IACX;IACF,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,CAAC,CAAC;IACT,MAAM,EAAE,CAAC,CAAC;IACV,kBAAkB,EAAE,SAAS,MAAM,EAAE,CAAC;IACtC,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,MAAM,CAAC,EAAE,CAAC,CAAC;IACX,aAAa,CAAC,EAAE,cAAc,CAAC;IAC/B,kBAAkB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CACxC,CAAC;AAEF,MAAM,MAAM,SAAS,CAAC,CAAC,SAAS,UAAU,GAAG,UAAU,IAAI;IACzD,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,SAAS,YAAY,EAAE,CAAC;IACjC,KAAK,EAAE,CAAC,CAAC;IACT,mBAAmB,EAAE,SAAS,MAAM,EAAE,CAAC;IACvC,qBAAqB,EAAE,SAAS,MAAM,EAAE,CAAC;CAC1C,CAAC;AAEF,MAAM,MAAM,aAAa,CACvB,CAAC,SAAS,UAAU,GAAG,UAAU,EACjC,CAAC,SAAS,UAAU,GAAG,SAAS,GAAG,UAAU,GAAG,SAAS,EACzD,CAAC,SAAS,UAAU,GAAG,SAAS,GAAG,UAAU,GAAG,SAAS,IACvD;IACF,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,CAAC,CAAC;IACT,QAAQ,CAAC,EAAE,CAAC,CAAC;IACb,MAAM,CAAC,EAAE,CAAC,CAAC;IACX,QAAQ,CAAC,EAAE;QACT,KAAK,EAAE,MAAM,CAAC;QACd,GAAG,EAAE,IAAI,MAAM,EAAE,CAAC;QAClB,WAAW,CAAC,EAAE,IAAI,MAAM,EAAE,CAAC;QAC3B,QAAQ,CAAC,EAAE,IAAI,MAAM,EAAE,CAAC;QACxB,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,QAAQ,CAAC,EAAE,MAAM,CAAC;KACnB,CAAC;IACF,kBAAkB,EAAE,SAAS,MAAM,EAAE,CAAC;IACtC,gBAAgB,EAAE,SAAS,MAAM,EAAE,CAAC;IACpC,kBAAkB,EAAE,SAAS,MAAM,EAAE,CAAC;IACtC,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB,CAAC;AAEF,MAAM,MAAM,WAAW,CAAC,CAAC,SAAS,UAAU,GAAG,UAAU,IAAI;IAC3D,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,CAAC,CAAC;IACX,mBAAmB,EAAE,SAAS,MAAM,EAAE,CAAC;IACvC,qBAAqB,EAAE,SAAS,MAAM,EAAE,CAAC;CAC1C,CAAC;AAEF,MAAM,MAAM,UAAU,GAAG;IACvB,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC7B,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC;IAC1C,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;IAClC,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;CACvC,CAAC"}

package/script/js/packages/trellis/contract_support/schema_pointers.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema_pointers.d.ts","sourceRoot":"","sources":["../../../../../../contract_support/schema_pointers.ts"],"names":[],"mappings":"AAEA,MAAM,MAAM,YAAY,GAAG,IAAI,MAAM,EAAE,CAAC;AAExC,KAAK,aAAa,GAAG,MAAM,GAAG,MAAM,GAAG,OAAO,GAAG,IAAI,CAAC;AACtD,KAAK,cAAc,GAAG,MAAM,GAAG,MAAM,CAAC;AAEtC,KAAK,aAAa,CAAC,CAAC,IAAI,CAAC,SAAS,MAAM,GAAG,CAAC,SAAS,aAAa,GAAG,KAAK,GACtE,CAAC,SAAS,SAAS,OAAO,EAAE,GAAG,KAAK,GACpC,CAAC,SAAS,IAAI,GAAG,KAAK,GACtB,CAAC,SAAS,QAAQ,GAAG,KAAK,GAC1B,IAAI,GACJ,KAAK,CAAC;AAEV,KAAK,WAAW,CAAC,MAAM,SAAS,MAAM,EAAE,GAAG,SAAS,MAAM,IAAI,MAAM,SAAS,EAAE,GAC3E,IAAI,GAAG,EAAE,GACT,GAAG,MAAM,IAAI,GAAG,EAAE,CAAC;AAEvB,KAAK,GAAG,GAAG,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;AAE7C,KAAK,YAAY,CACf,CAAC,EACD,MAAM,SAAS,MAAM,EACrB,KAAK,SAAS,MAAM,IAClB,KAAK,SAAS,CAAC,GAAG,KAAK,GACvB,aAAa,CAAC,CAAC,CAAC,SAAS,IAAI,GAAG;KAC7B,CAAC,IAAI,OAAO,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,GAC5B,WAAW,CAAC,MAAM,EAAE,CAAC,CAAC,GACtB,YAAY,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,WAAW,CAAC,MAAM,EAAE,CAAC,CAAC,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC;CACxE,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC,CAAC,GAC3B,KAAK,CAAC;AAEV,MAAM,MAAM,WAAW,CAAC,CAAC,IAAI,YAAY,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,SAAS,MAAM,CAAC,GAC/D,CAAC,SAAS,YAAY,GAAG,CAAC,GAC1B,KAAK,GACL,KAAK,CAAC;AAEV,KAAK,kBAAkB,CACrB,CAAC,EACD,MAAM,SAAS,MAAM,EACrB,KAAK,SAAS,MAAM,IAClB,KAAK,SAAS,CAAC,GAAG,KAAK,GACvB,aAAa,CAAC,CAAC,CAAC,SAAS,IAAI,GAAG;KAC7B,CAAC,IAAI,OAAO,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,GAAG,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,cAAc,GACvE,WAAW,CAAC,MAAM,EAAE,CAAC,CAAC,GACtB,kBAAkB,CAClB,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EACjB,WAAW,CAAC,MAAM,EAAE,CAAC,CAAC,EACtB,GAAG,CAAC,KAAK,CAAC,CACX;CACJ,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC,CAAC,GAC3B,KAAK,CAAC;AAEV,MAAM,MAAM,iBAAiB,CAAC,CAAC,IAAI,kBAAkB,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,SAAS,MAAM,CAAC,GAC3E,CAAC,SAAS,YAAY,GAAG,CAAC,GAC1B,KAAK,GACL,KAAK,CAAC;AA6CV,wBAAgB,yBAAyB,CACvC,MAAM,EAAE,OAAO,EACf,OAAO,EAAE,MAAM,GACd,OAAO,GAAG,SAAS,CAOrB;AAED,wBAAgB,sCAAsC,CACpD,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE,OAAO,EACf,QAAQ,EAAE,SAAS,MAAM,EAAE,GAC1B,IAAI,CAmBN"}

package/script/js/packages/trellis/contracts.d.ts

@@ -0,0 +1,4 @@
+export * from "./contract_support/mod.ts";
+export { defineAppContract, defineCliContract, defineDeviceContract, definePortalContract, defineServiceContract, } from "./contract.ts";
+export type { DefinedContract } from "./contract.ts";
+//# sourceMappingURL=contracts.d.ts.map

package/script/js/packages/trellis/contracts.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"contracts.d.ts","sourceRoot":"","sources":["../../../../../contracts.ts"],"names":[],"mappings":"AAAA,cAAc,2BAA2B,CAAC;AAC1C,OAAO,EACL,iBAAiB,EACjB,iBAAiB,EACjB,oBAAoB,EACpB,oBAAoB,EACpB,qBAAqB,GACtB,MAAM,eAAe,CAAC;AACvB,YAAY,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC"}

package/script/js/packages/trellis/contracts.js

@@ -0,0 +1,24 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.defineServiceContract = exports.definePortalContract = exports.defineDeviceContract = exports.defineCliContract = exports.defineAppContract = void 0;
+__exportStar(require("./contract_support/mod.js"), exports);
+var contract_ts_1 = require("./contract.js");
+Object.defineProperty(exports, "defineAppContract", { enumerable: true, get: function () { return contract_ts_1.defineAppContract; } });
+Object.defineProperty(exports, "defineCliContract", { enumerable: true, get: function () { return contract_ts_1.defineCliContract; } });
+Object.defineProperty(exports, "defineDeviceContract", { enumerable: true, get: function () { return contract_ts_1.defineDeviceContract; } });
+Object.defineProperty(exports, "definePortalContract", { enumerable: true, get: function () { return contract_ts_1.definePortalContract; } });
+Object.defineProperty(exports, "defineServiceContract", { enumerable: true, get: function () { return contract_ts_1.defineServiceContract; } });

package/script/js/packages/trellis/device.d.ts

@@ -0,0 +1,48 @@
+import { type NatsConnection } from "@nats-io/nats-core";
+import type { TrellisAPI } from "./contracts.ts";
+import { ServiceHealth } from "./health.ts";
+import { Trellis } from "./trellis.ts";
+type DeviceContract<TApi extends TrellisAPI = TrellisAPI> = {
+    CONTRACT_ID: string;
+    CONTRACT_DIGEST: string;
+    CONTRACT?: {
+        displayName?: string;
+    };
+    API: {
+        trellis: TApi;
+    };
+};
+export type TrellisDeviceConnection<TApi extends TrellisAPI = TrellisAPI> = Trellis<TApi> & {
+    health: ServiceHealth;
+};
+type DeviceConnectTransport = {
+    connect(options: {
+        servers: string | string[];
+        token?: string;
+        authenticator?: unknown;
+        inboxPrefix?: string;
+    }): Promise<NatsConnection>;
+};
+type DeviceConnectDeps = {
+    loadTransport(): Promise<DeviceConnectTransport>;
+    now(): number;
+};
+export type DeviceActivationController = {
+    url: string;
+    waitForOnlineApproval(opts?: {
+        signal?: AbortSignal;
+    }): Promise<void>;
+    acceptConfirmationCode(code: string): Promise<void>;
+};
+export type TrellisDeviceConnectArgs<TApi extends TrellisAPI = TrellisAPI> = {
+    trellisUrl: string;
+    contract: DeviceContract<TApi>;
+    rootSecret: Uint8Array | string;
+    onActivationRequired?(activation: DeviceActivationController): Promise<void>;
+};
+export declare function connectDeviceWithDeps<TApi extends TrellisAPI>(args: TrellisDeviceConnectArgs<TApi>, deps: DeviceConnectDeps): Promise<TrellisDeviceConnection<TApi>>;
+export declare const TrellisDevice: {
+    connect<TApi extends TrellisAPI>(args: TrellisDeviceConnectArgs<TApi>): Promise<TrellisDeviceConnection<TApi>>;
+};
+export {};
+//# sourceMappingURL=device.d.ts.map

package/script/js/packages/trellis/device.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"device.d.ts","sourceRoot":"","sources":["../../../../../device.ts"],"names":[],"mappings":"AAAA,OAAO,EAAwC,KAAK,cAAc,EAAE,MAAM,oBAAoB,CAAC;AAiB/F,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AAGjD,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AAIvC,KAAK,cAAc,CAAC,IAAI,SAAS,UAAU,GAAG,UAAU,IAAI;IAC1D,WAAW,EAAE,MAAM,CAAC;IACpB,eAAe,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,EAAE;QACT,WAAW,CAAC,EAAE,MAAM,CAAC;KACtB,CAAC;IACF,GAAG,EAAE;QACH,OAAO,EAAE,IAAI,CAAC;KACf,CAAC;CACH,CAAC;AAEF,MAAM,MAAM,uBAAuB,CAAC,IAAI,SAAS,UAAU,GAAG,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC,GAAG;IAC1F,MAAM,EAAE,aAAa,CAAC;CACvB,CAAC;AAEF,KAAK,sBAAsB,GAAG;IAC5B,OAAO,CAAC,OAAO,EAAE;QACf,OAAO,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;QAC3B,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,aAAa,CAAC,EAAE,OAAO,CAAC;QACxB,WAAW,CAAC,EAAE,MAAM,CAAC;KACtB,GAAG,OAAO,CAAC,cAAc,CAAC,CAAC;CAC7B,CAAC;AAEF,KAAK,iBAAiB,GAAG;IACvB,aAAa,IAAI,OAAO,CAAC,sBAAsB,CAAC,CAAC;IACjD,GAAG,IAAI,MAAM,CAAC;CACf,CAAC;AAWF,MAAM,MAAM,0BAA0B,GAAG;IACvC,GAAG,EAAE,MAAM,CAAC;IACZ,qBAAqB,CAAC,IAAI,CAAC,EAAE;QAAE,MAAM,CAAC,EAAE,WAAW,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACtE,sBAAsB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACrD,CAAC;AAEF,MAAM,MAAM,wBAAwB,CAAC,IAAI,SAAS,UAAU,GAAG,UAAU,IAAI;IAC3E,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,cAAc,CAAC,IAAI,CAAC,CAAC;IAC/B,UAAU,EAAE,UAAU,GAAG,MAAM,CAAC;IAChC,oBAAoB,CAAC,CAAC,UAAU,EAAE,0BAA0B,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAC9E,CAAC;AAsIF,wBAAsB,qBAAqB,CAAC,IAAI,SAAS,UAAU,EACjE,IAAI,EAAE,wBAAwB,CAAC,IAAI,CAAC,EACpC,IAAI,EAAE,iBAAiB,GACtB,OAAO,CAAC,uBAAuB,CAAC,IAAI,CAAC,CAAC,CAmLxC;AAED,eAAO,MAAM,aAAa;YAChB,IAAI,SAAS,UAAU,QACvB,wBAAwB,CAAC,IAAI,CAAC,GACnC,OAAO,CAAC,uBAAuB,CAAC,IAAI,CAAC,CAAC;CAG1C,CAAC"}

package/script/js/packages/trellis/device.js

@@ -0,0 +1,292 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.TrellisDevice = void 0;
+exports.connectDeviceWithDeps = connectDeviceWithDeps;
+const nats_core_1 = require("@nats-io/nats-core");
+const node_buffer_1 = require("node:buffer");
+const node_crypto_1 = require("node:crypto");
+const device_activation_ts_1 = require("./auth/device_activation.js");
+const keys_ts_1 = require("./auth/keys.js");
+const utils_ts_1 = require("./auth/utils.js");
+const runtime_transport_ts_1 = require("./runtime_transport.js");
+const runtime_transport_ts_2 = require("./runtime_transport.js");
+const health_ts_1 = require("./health.js");
+const trellis_ts_1 = require("./trellis.js");
+const typebox_1 = require("typebox");
+const value_1 = require("typebox/value");
+const ClientTransportEndpointsSchema = typebox_1.Type.Object({
+    natsServers: typebox_1.Type.Array(typebox_1.Type.String({ minLength: 1 }), { minItems: 1 }),
+});
+const ClientTransportsSchema = typebox_1.Type.Object({
+    native: typebox_1.Type.Optional(ClientTransportEndpointsSchema),
+    websocket: typebox_1.Type.Optional(ClientTransportEndpointsSchema),
+});
+const DeviceBootstrapReadySchema = typebox_1.Type.Object({
+    status: typebox_1.Type.Literal("ready"),
+    connectInfo: typebox_1.Type.Object({
+        instanceId: typebox_1.Type.String({ minLength: 1 }),
+        profileId: typebox_1.Type.String({ minLength: 1 }),
+        contractId: typebox_1.Type.String({ minLength: 1 }),
+        contractDigest: typebox_1.Type.String({ minLength: 1 }),
+        transports: ClientTransportsSchema,
+        transport: typebox_1.Type.Object({
+            sentinel: typebox_1.Type.Object({
+                jwt: typebox_1.Type.String({ minLength: 1 }),
+                seed: typebox_1.Type.String({ minLength: 1 }),
+            }),
+        }),
+        auth: typebox_1.Type.Object({
+            mode: typebox_1.Type.Literal("device_identity"),
+            iatSkewSeconds: typebox_1.Type.Integer({ minimum: 1 }),
+        }),
+    }),
+});
+const DeviceBootstrapActivationRequiredSchema = typebox_1.Type.Object({
+    status: typebox_1.Type.Literal("activation_required"),
+});
+const DeviceBootstrapNotReadySchema = typebox_1.Type.Object({
+    status: typebox_1.Type.Literal("not_ready"),
+    reason: typebox_1.Type.String({ minLength: 1 }),
+});
+function normalizeRootSecret(rootSecret) {
+    if (typeof rootSecret === "string") {
+        const decoded = (0, utils_ts_1.base64urlDecode)(rootSecret.trim());
+        if (decoded.length === 0)
+            throw new Error("rootSecret must not be empty");
+        return decoded;
+    }
+    if (rootSecret.length === 0)
+        throw new Error("rootSecret must not be empty");
+    return rootSecret;
+}
+async function signIdentityBytes(identitySeed, data) {
+    const privateKey = await (0, keys_ts_1.importEd25519PrivateKeyFromSeedBase64url)((0, utils_ts_1.base64urlEncode)(identitySeed));
+    return new Uint8Array(await crypto.subtle.sign("Ed25519", privateKey, (0, utils_ts_1.toArrayBuffer)(data)));
+}
+function createDeviceNatsAuthTokenAuthenticator(args) {
+    const reconnectKey = (0, node_crypto_1.createPrivateKey)({
+        key: node_buffer_1.Buffer.from((0, keys_ts_1.pkcs8FromEd25519Seed)(args.identitySeed)),
+        format: "der",
+        type: "pkcs8",
+    });
+    return () => {
+        const iat = Math.floor(args.now() / 1_000);
+        const digest = (0, node_crypto_1.createHash)("sha256").update(`nats-connect:${iat}`, "utf8").digest();
+        const sig = (0, node_crypto_1.sign)(null, digest, reconnectKey);
+        return {
+            auth_token: JSON.stringify({
+                v: 1,
+                sessionKey: args.publicIdentityKey,
+                iat,
+                sig: (0, utils_ts_1.base64urlEncode)(new Uint8Array(sig)),
+                contractDigest: args.contractDigest,
+            }),
+        };
+    };
+}
+const defaultDeps = {
+    loadTransport: runtime_transport_ts_1.loadDefaultRuntimeTransport,
+    now: () => Date.now(),
+};
+function activationRequiredError() {
+    return new Error("Device activation required but no activation handler was provided");
+}
+function isConnectInfoUnavailable(error) {
+    const message = error instanceof Error ? error.message : String(error);
+    return message.includes("404") || message.includes("unknown_device") || message.includes("activation_required");
+}
+async function fetchDeviceBootstrap(args) {
+    const request = await (0, device_activation_ts_1.signDeviceWaitRequest)({
+        publicIdentityKey: args.publicIdentityKey,
+        nonce: "connect-info",
+        identitySeed: args.identitySeed,
+        contractDigest: args.contractDigest,
+        iat: args.iat,
+    });
+    const bootstrapRequest = {
+        publicIdentityKey: request.publicIdentityKey,
+        contractDigest: request.contractDigest,
+        iat: request.iat,
+        sig: request.sig,
+    };
+    const response = await fetch(new URL("/bootstrap/device", args.trellisUrl), {
+        method: "POST",
+        headers: { "Content-Type": "application/json" },
+        body: JSON.stringify(bootstrapRequest),
+    });
+    if (!response.ok) {
+        throw new Error(`Device bootstrap failed: ${response.status} ${await response.text()}`);
+    }
+    const payload = await response.json();
+    if (value_1.Value.Check(DeviceBootstrapReadySchema, payload))
+        return payload;
+    if (value_1.Value.Check(DeviceBootstrapActivationRequiredSchema, payload))
+        return payload;
+    if (value_1.Value.Check(DeviceBootstrapNotReadySchema, payload))
+        return payload;
+    throw new Error("Device bootstrap returned an invalid response");
+}
+async function connectDeviceWithDeps(args, deps) {
+    const rootSecret = normalizeRootSecret(args.rootSecret);
+    const identity = await (0, device_activation_ts_1.deriveDeviceIdentity)(rootSecret);
+    const contractDigest = args.contract.CONTRACT_DIGEST;
+    let connectInfo = null;
+    try {
+        const bootstrap = await fetchDeviceBootstrap({
+            trellisUrl: args.trellisUrl,
+            publicIdentityKey: identity.publicIdentityKey,
+            identitySeed: identity.identitySeed,
+            contractDigest,
+        });
+        if (bootstrap.status === "ready") {
+            connectInfo = bootstrap.connectInfo;
+        }
+        else if (bootstrap.status === "not_ready") {
+            throw new Error(bootstrap.reason);
+        }
+    }
+    catch (error) {
+        if (!isConnectInfoUnavailable(error))
+            throw error;
+    }
+    if (!connectInfo) {
+        if (!args.onActivationRequired)
+            throw activationRequiredError();
+        const nonce = crypto.randomUUID();
+        const payload = await (0, device_activation_ts_1.buildDeviceActivationPayload)({
+            activationKey: identity.activationKey,
+            publicIdentityKey: identity.publicIdentityKey,
+            nonce,
+        });
+        const activationUrl = (await (0, device_activation_ts_1.startDeviceActivationRequest)({
+            trellisUrl: args.trellisUrl,
+            payload,
+        })).activationUrl;
+        let activationCompleted = false;
+        let onlineConnectInfo = null;
+        await args.onActivationRequired({
+            url: activationUrl,
+            waitForOnlineApproval: async (opts) => {
+                if (activationCompleted)
+                    return;
+                const activation = await (0, device_activation_ts_1.waitForDeviceActivation)({
+                    trellisUrl: args.trellisUrl,
+                    publicIdentityKey: identity.publicIdentityKey,
+                    nonce,
+                    identitySeed: identity.identitySeed,
+                    contractDigest,
+                    signal: opts?.signal,
+                });
+                onlineConnectInfo = activation.connectInfo;
+                activationCompleted = true;
+            },
+            acceptConfirmationCode: async (code) => {
+                if (activationCompleted)
+                    return;
+                const ok = await (0, device_activation_ts_1.verifyDeviceConfirmationCode)({
+                    activationKey: identity.activationKey,
+                    publicIdentityKey: identity.publicIdentityKey,
+                    nonce,
+                    confirmationCode: code,
+                });
+                if (!ok) {
+                    throw new Error("Invalid device confirmation code");
+                }
+                activationCompleted = true;
+            },
+        });
+        if (!activationCompleted) {
+            throw new Error("Device activation did not complete");
+        }
+        if (onlineConnectInfo) {
+            connectInfo = onlineConnectInfo;
+        }
+        else {
+            const bootstrap = await fetchDeviceBootstrap({
+                trellisUrl: args.trellisUrl,
+                publicIdentityKey: identity.publicIdentityKey,
+                identitySeed: identity.identitySeed,
+                contractDigest,
+            });
+            if (bootstrap.status !== "ready") {
+                throw new Error(`Device bootstrap is not ready: ${bootstrap.status}`);
+            }
+            connectInfo = bootstrap.connectInfo;
+        }
+    }
+    if (!connectInfo) {
+        throw new Error("Device bootstrap did not return runtime connect info");
+    }
+    const transport = await deps.loadTransport();
+    const nc = await transport.connect({
+        servers: (0, runtime_transport_ts_2.selectRuntimeTransportServers)(connectInfo.transports),
+        inboxPrefix: `_INBOX.${identity.publicIdentityKey.slice(0, 16)}`,
+        authenticator: [
+            createDeviceNatsAuthTokenAuthenticator({
+                publicIdentityKey: identity.publicIdentityKey,
+                identitySeed: identity.identitySeed,
+                contractDigest,
+                now: deps.now,
+            }),
+            (0, nats_core_1.jwtAuthenticator)(connectInfo.transport.sentinel.jwt, new TextEncoder().encode(connectInfo.transport.sentinel.seed)),
+        ],
+    });
+    const trellis = new trellis_ts_1.Trellis(args.contract.CONTRACT_ID, nc, {
+        sessionKey: identity.publicIdentityKey,
+        sign: (data) => signIdentityBytes(identity.identitySeed, data),
+    }, {
+        api: args.contract.API.trellis,
+    });
+    const health = new health_ts_1.ServiceHealth({
+        serviceName: args.contract.CONTRACT?.displayName ?? args.contract.CONTRACT_ID,
+        kind: "device",
+        instanceId: connectInfo.instanceId,
+        contractId: connectInfo.contractId,
+        contractDigest: connectInfo.contractDigest,
+        publishIntervalMs: 30_000,
+    });
+    health.setInfo({
+        info: {
+            profileId: connectInfo.profileId,
+        },
+    });
+    health.add("nats", () => ({
+        status: nc.isClosed() ? "failed" : "ok",
+        ...(nc.isClosed() ? { summary: "NATS connection closed" } : {}),
+    }));
+    const heartbeatEventEnabled = Boolean(args.contract.API.trellis.events?.["Health.Heartbeat"]);
+    let heartbeatTimer;
+    let publishingHeartbeat = false;
+    const stopHeartbeat = () => {
+        if (heartbeatTimer !== undefined) {
+            clearInterval(heartbeatTimer);
+            heartbeatTimer = undefined;
+        }
+    };
+    const publishHeartbeat = async () => {
+        if (!heartbeatEventEnabled || publishingHeartbeat) {
+            return;
+        }
+        publishingHeartbeat = true;
+        try {
+            const heartbeat = await health.heartbeat();
+            await trellis.publish("Health.Heartbeat", heartbeat);
+        }
+        finally {
+            publishingHeartbeat = false;
+        }
+    };
+    if (heartbeatEventEnabled) {
+        await publishHeartbeat();
+        heartbeatTimer = setInterval(() => {
+            void publishHeartbeat();
+        }, health.publishIntervalMs);
+        void nc.closed().finally(stopHeartbeat);
+    }
+    return Object.assign(trellis, { health });
+}
+exports.TrellisDevice = {
+    connect(args) {
+        return connectDeviceWithDeps(args, defaultDeps);
+    },
+};