@qlever-llc/trellis 0.7.0-rc.5 → 0.7.0

package/esm/auth/schemas.d.ts

@@ -14,6 +14,19 @@ export declare const SentinelCredsSchema: Type.TObject<{
     seed: Type.TString;
 }>;
 export type SentinelCreds = StaticDecode<typeof SentinelCredsSchema>;
+export declare const ClientTransportEndpointsSchema: Type.TObject<{
+    natsServers: Type.TArray<Type.TString>;
+}>;
+export type ClientTransportEndpoints = StaticDecode<typeof ClientTransportEndpointsSchema>;
+export declare const ClientTransportsSchema: Type.TObject<{
+    native: Type.TOptional<Type.TObject<{
+        natsServers: Type.TArray<Type.TString>;
+    }>>;
+    websocket: Type.TOptional<Type.TObject<{
+        natsServers: Type.TArray<Type.TString>;
+    }>>;
+}>;
+export type ClientTransports = StaticDecode<typeof ClientTransportsSchema>;
 export declare const ApprovalDecisionSchema: Type.TUnion<[Type.TLiteral<"approved">, Type.TLiteral<"denied">]>;
 export type ApprovalDecision = StaticDecode<typeof ApprovalDecisionSchema>;
 export declare const ContractApprovalSchema: Type.TObject<{
@@ -40,7 +53,14 @@ export declare const BindSuccessResponseSchema: Type.TObject<{
         jwt: Type.TString;
         seed: Type.TString;
     }>;
-    natsServers: Type.TArray<Type.TString>;
+    transports: Type.TObject<{
+        native: Type.TOptional<Type.TObject<{
+            natsServers: Type.TArray<Type.TString>;
+        }>>;
+        websocket: Type.TOptional<Type.TObject<{
+            natsServers: Type.TArray<Type.TString>;
+        }>>;
+    }>;
 }>;
 export declare const BindInsufficientCapabilitiesResponseSchema: Type.TObject<{
     status: Type.TLiteral<"insufficient_capabilities">;
@@ -64,7 +84,14 @@ export declare const BindResponseSchema: Type.TUnion<[Type.TObject<{
         jwt: Type.TString;
         seed: Type.TString;
     }>;
-    natsServers: Type.TArray<Type.TString>;
+    transports: Type.TObject<{
+        native: Type.TOptional<Type.TObject<{
+            natsServers: Type.TArray<Type.TString>;
+        }>>;
+        websocket: Type.TOptional<Type.TObject<{
+            natsServers: Type.TArray<Type.TString>;
+        }>>;
+    }>;
 }>, Type.TObject<{
     status: Type.TLiteral<"insufficient_capabilities">;
     approval: Type.TObject<{
@@ -81,6 +108,44 @@ export declare const BindResponseSchema: Type.TUnion<[Type.TObject<{
 export type BindResponse = StaticDecode<typeof BindResponseSchema>;
 export type BindSuccessResponse = StaticDecode<typeof BindSuccessResponseSchema>;
 export type BindInsufficientCapabilitiesResponse = StaticDecode<typeof BindInsufficientCapabilitiesResponseSchema>;
+export declare const AuthStartRequestSchema: Type.TObject<{
+    provider: Type.TOptional<Type.TString>;
+    redirectTo: Type.TString;
+    sessionKey: Type.TString;
+    sig: Type.TString;
+    contract: Type.TObject<{}>;
+    context: Type.TOptional<Type.TObject<{}>>;
+}>;
+export declare const AuthStartFlowResponseSchema: Type.TObject<{
+    status: Type.TLiteral<"flow_started">;
+    flowId: Type.TString;
+    loginUrl: Type.TString;
+}>;
+export declare const AuthStartResponseSchema: Type.TUnion<[Type.TObject<{
+    status: Type.TLiteral<"bound">;
+    bindingToken: Type.TString;
+    inboxPrefix: Type.TString;
+    expires: Type.TString;
+    sentinel: Type.TObject<{
+        jwt: Type.TString;
+        seed: Type.TString;
+    }>;
+    transports: Type.TObject<{
+        native: Type.TOptional<Type.TObject<{
+            natsServers: Type.TArray<Type.TString>;
+        }>>;
+        websocket: Type.TOptional<Type.TObject<{
+            natsServers: Type.TArray<Type.TString>;
+        }>>;
+    }>;
+}>, Type.TObject<{
+    status: Type.TLiteral<"flow_started">;
+    flowId: Type.TString;
+    loginUrl: Type.TString;
+}>]>;
+export type AuthStartRequest = StaticDecode<typeof AuthStartRequestSchema>;
+export type AuthStartFlowResponse = StaticDecode<typeof AuthStartFlowResponseSchema>;
+export type AuthStartResponse = StaticDecode<typeof AuthStartResponseSchema>;
 export declare const NatsAuthTokenV1Schema: Type.TObject<{
     v: Type.TLiteral<1>;
     sessionKey: Type.TString;

package/esm/auth/schemas.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"schemas.d.ts","sourceRoot":"","sources":["../../src/auth/schemas.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAC5C,OAAO,EAAE,IAAI,EAAE,MAAM,SAAS,CAAC;AAU/B,eAAO,MAAM,gBAAgB;;;;;;;EAOM,CAAC;AAEpC,MAAM,MAAM,UAAU,GAAG,YAAY,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAE/D,eAAO,MAAM,mBAAmB;;;EAGG,CAAC;AAEpC,MAAM,MAAM,aAAa,GAAG,YAAY,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAErE,eAAO,MAAM,sBAAsB,mEAGjC,CAAC;AAEH,MAAM,MAAM,gBAAgB,GAAG,YAAY,CAAC,OAAO,sBAAsB,CAAC,CAAC;AAE3E,eAAO,MAAM,sBAAsB;;;;;;;EASA,CAAC;AAEpC,MAAM,MAAM,gBAAgB,GAAG,YAAY,CAAC,OAAO,sBAAsB,CAAC,CAAC;AAE3E,eAAO,MAAM,iBAAiB;;;;EAIK,CAAC;AAEpC,MAAM,MAAM,WAAW,GAAG,YAAY,CAAC,OAAO,iBAAiB,CAAC,CAAC;AAEjE,eAAO,MAAM,yBAAyB;;;;;;;;;;EAOH,CAAC;AAEpC,eAAO,MAAM,0CAA0C;;;;;;;;;;;;EAKpB,CAAC;AAEpC,eAAO,MAAM,kBAAkB;;;;;;;;;;;;;;;;;;;;;;IAG7B,CAAC;AAEH,MAAM,MAAM,YAAY,GAAG,YAAY,CAAC,OAAO,kBAAkB,CAAC,CAAC;AACnE,MAAM,MAAM,mBAAmB,GAAG,YAAY,CAAC,OAAO,yBAAyB,CAAC,CAAC;AACjF,MAAM,MAAM,oCAAoC,GAAG,YAAY,CAC7D,OAAO,0CAA0C,CAClD,CAAC;AAEF,eAAO,MAAM,qBAAqB;;;;;;;EAOC,CAAC;AAEpC,MAAM,MAAM,eAAe,GAAG,YAAY,CAAC,OAAO,qBAAqB,CAAC,CAAC"}
+{"version":3,"file":"schemas.d.ts","sourceRoot":"","sources":["../../src/auth/schemas.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAC5C,OAAO,EAAE,IAAI,EAAE,MAAM,SAAS,CAAC;AAU/B,eAAO,MAAM,gBAAgB;;;;;;;EAOM,CAAC;AAEpC,MAAM,MAAM,UAAU,GAAG,YAAY,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAI/D,eAAO,MAAM,mBAAmB;;;EAG9B,CAAC;AAEH,MAAM,MAAM,aAAa,GAAG,YAAY,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAErE,eAAO,MAAM,8BAA8B;;EAEzC,CAAC;AAEH,MAAM,MAAM,wBAAwB,GAAG,YAAY,CACjD,OAAO,8BAA8B,CACtC,CAAC;AAEF,eAAO,MAAM,sBAAsB;;;;;;;EAGjC,CAAC;AAEH,MAAM,MAAM,gBAAgB,GAAG,YAAY,CAAC,OAAO,sBAAsB,CAAC,CAAC;AAE3E,eAAO,MAAM,sBAAsB,mEAGjC,CAAC;AAEH,MAAM,MAAM,gBAAgB,GAAG,YAAY,CAAC,OAAO,sBAAsB,CAAC,CAAC;AAE3E,eAAO,MAAM,sBAAsB;;;;;;;EASjC,CAAC;AAEH,MAAM,MAAM,gBAAgB,GAAG,YAAY,CAAC,OAAO,sBAAsB,CAAC,CAAC;AAE3E,eAAO,MAAM,iBAAiB;;;;EAIK,CAAC;AAEpC,MAAM,MAAM,WAAW,GAAG,YAAY,CAAC,OAAO,iBAAiB,CAAC,CAAC;AAEjE,eAAO,MAAM,yBAAyB;;;;;;;;;;;;;;;;;EAOpC,CAAC;AAEH,eAAO,MAAM,0CAA0C;;;;;;;;;;;;EAKrD,CAAC;AAEH,eAAO,MAAM,kBAAkB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;IAG7B,CAAC;AAEH,MAAM,MAAM,YAAY,GAAG,YAAY,CAAC,OAAO,kBAAkB,CAAC,CAAC;AACnE,MAAM,MAAM,mBAAmB,GAAG,YAAY,CAC5C,OAAO,yBAAyB,CACjC,CAAC;AACF,MAAM,MAAM,oCAAoC,GAAG,YAAY,CAC7D,OAAO,0CAA0C,CAClD,CAAC;AAEF,eAAO,MAAM,sBAAsB;;;;;;;EAOA,CAAC;AAEpC,eAAO,MAAM,2BAA2B;;;;EAItC,CAAC;AAEH,eAAO,MAAM,uBAAuB;;;;;;;;;;;;;;;;;;;;;IAGlC,CAAC;AAEH,MAAM,MAAM,gBAAgB,GAAG,YAAY,CAAC,OAAO,sBAAsB,CAAC,CAAC;AAC3E,MAAM,MAAM,qBAAqB,GAAG,YAAY,CAC9C,OAAO,2BAA2B,CACnC,CAAC;AACF,MAAM,MAAM,iBAAiB,GAAG,YAAY,CAAC,OAAO,uBAAuB,CAAC,CAAC;AAE7E,eAAO,MAAM,qBAAqB;;;;;;;EAOC,CAAC;AAEpC,MAAM,MAAM,eAAe,GAAG,YAAY,CAAC,OAAO,qBAAqB,CAAC,CAAC"}

package/esm/auth/schemas.js

@@ -13,10 +13,18 @@ export const LoginQuerySchema = Type.Object({
     contract: Type.String({ minLength: 1 }),
     context: Type.Optional(Type.String({ minLength: 1 })),
 }, { additionalProperties: false });
+const OpenObjectSchema = Type.Object({}, { additionalProperties: true });
 export const SentinelCredsSchema = Type.Object({
     jwt: Type.String(),
     seed: Type.String(),
-}, { additionalProperties: false });
+});
+export const ClientTransportEndpointsSchema = Type.Object({
+    natsServers: Type.Array(Type.String({ minLength: 1 }), { minItems: 1 }),
+});
+export const ClientTransportsSchema = Type.Object({
+    native: Type.Optional(ClientTransportEndpointsSchema),
+    websocket: Type.Optional(ClientTransportEndpointsSchema),
+});
 export const ApprovalDecisionSchema = Type.Union([
     Type.Literal("approved"),
     Type.Literal("denied"),
@@ -30,7 +38,7 @@ export const ContractApprovalSchema = Type.Object({
     // from the public flow state shape.
     kind: Type.Optional(Type.String({ minLength: 1 })),
     capabilities: Type.Array(Type.String()),
-}, { additionalProperties: false });
+});
 export const BindRequestSchema = Type.Object({
     authToken: Type.String(),
     sessionKey: SessionKeySchema,
@@ -42,18 +50,35 @@ export const BindSuccessResponseSchema = Type.Object({
     inboxPrefix: Type.String(),
     expires: Type.String({ format: "date-time" }),
     sentinel: SentinelCredsSchema,
-    natsServers: Type.Array(Type.String()),
-}, { additionalProperties: false });
+    transports: ClientTransportsSchema,
+});
 export const BindInsufficientCapabilitiesResponseSchema = Type.Object({
     status: Type.Literal("insufficient_capabilities"),
     approval: ContractApprovalSchema,
     missingCapabilities: Type.Array(Type.String()),
     userCapabilities: Type.Array(Type.String()),
-}, { additionalProperties: false });
+});
 export const BindResponseSchema = Type.Union([
     BindSuccessResponseSchema,
     BindInsufficientCapabilitiesResponseSchema,
 ]);
+export const AuthStartRequestSchema = Type.Object({
+    provider: Type.Optional(Type.String({ minLength: 1 })),
+    redirectTo: Type.String(),
+    sessionKey: SessionKeySchema,
+    sig: SignatureSchema,
+    contract: OpenObjectSchema,
+    context: Type.Optional(OpenObjectSchema),
+}, { additionalProperties: false });
+export const AuthStartFlowResponseSchema = Type.Object({
+    status: Type.Literal("flow_started"),
+    flowId: Type.String({ minLength: 1 }),
+    loginUrl: Type.String({ minLength: 1 }),
+});
+export const AuthStartResponseSchema = Type.Union([
+    BindSuccessResponseSchema,
+    AuthStartFlowResponseSchema,
+]);
 export const NatsAuthTokenV1Schema = Type.Object({
     v: Type.Literal(1),
     sessionKey: SessionKeySchema,

package/esm/auth/session_auth.d.ts

@@ -1,6 +1,6 @@
-import type { NatsAuthTokenV1 } from "./types.js";
+import { type Authenticator } from "@nats-io/nats-core";
 export type NatsConnectOptions = {
-    token: string;
+    authenticator: Authenticator;
     inboxPrefix: string;
 };
 export type TrellisAuth = {
@@ -11,7 +11,6 @@ export type TrellisAuth = {
     natsConnectSigForBindingToken: (bindingToken: string) => Promise<string>;
     natsConnectSigForIat: (iat: number) => Promise<string>;
     createProof: (subject: string, payloadHash: Uint8Array) => Promise<string>;
-    createNatsAuthTokenForService: (iat: number) => Promise<NatsAuthTokenV1>;
     natsConnectOptions: () => Promise<NatsConnectOptions>;
 };
 export declare function createAuth(opts: {

package/esm/auth/session_auth.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"session_auth.d.ts","sourceRoot":"","sources":["../../src/auth/session_auth.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAElD,MAAM,MAAM,kBAAkB,GAAG;IAC/B,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,CAAC;CACrB,CAAC;AAEF,MAAM,MAAM,WAAW,GAAG;IACxB,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,CAAC,IAAI,EAAE,UAAU,KAAK,OAAO,CAAC,UAAU,CAAC,CAAC;IAEhD,YAAY,EAAE,CAAC,UAAU,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,OAAO,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;IACzE,OAAO,EAAE,CAAC,SAAS,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;IAChD,6BAA6B,EAAE,CAAC,YAAY,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;IACzE,oBAAoB,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;IAEvD,WAAW,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,UAAU,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;IAC3E,6BAA6B,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC,eAAe,CAAC,CAAC;IACzE,kBAAkB,EAAE,MAAM,OAAO,CAAC,kBAAkB,CAAC,CAAC;CACvD,CAAC;AAEF,wBAAsB,UAAU,CAC9B,IAAI,EAAE;IAAE,cAAc,EAAE,MAAM,CAAA;CAAE,GAC/B,OAAO,CAAC,WAAW,CAAC,CAgDtB"}
+{"version":3,"file":"session_auth.d.ts","sourceRoot":"","sources":["../../src/auth/session_auth.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAoBxD,MAAM,MAAM,kBAAkB,GAAG;IAC/B,aAAa,EAAE,aAAa,CAAC;IAC7B,WAAW,EAAE,MAAM,CAAC;CACrB,CAAC;AAEF,MAAM,MAAM,WAAW,GAAG;IACxB,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,CAAC,IAAI,EAAE,UAAU,KAAK,OAAO,CAAC,UAAU,CAAC,CAAC;IAEhD,YAAY,EAAE,CAAC,UAAU,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,OAAO,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;IACzE,OAAO,EAAE,CAAC,SAAS,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;IAChD,6BAA6B,EAAE,CAAC,YAAY,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;IACzE,oBAAoB,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;IAEvD,WAAW,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,UAAU,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;IAC3E,kBAAkB,EAAE,MAAM,OAAO,CAAC,kBAAkB,CAAC,CAAC;CACvD,CAAC;AAEF,wBAAsB,UAAU,CAC9B,IAAI,EAAE;IAAE,cAAc,EAAE,MAAM,CAAA;CAAE,GAC/B,OAAO,CAAC,WAAW,CAAC,CA6DtB"}

package/esm/auth/session_auth.js

@@ -1,9 +1,17 @@
-import { importEd25519PrivateKeyFromSeedBase64url, publicKeyBase64urlFromPrivateKey, } from "./keys.js";
+import { Buffer } from "node:buffer";
+import { createHash, createPrivateKey, sign as signBytesSync } from "node:crypto";
+import { importEd25519PrivateKeyFromSeedBase64url, pkcs8FromEd25519Seed, publicKeyBase64urlFromPrivateKey, } from "./keys.js";
 import { createProof } from "./proof.js";
-import { base64urlEncode, canonicalizeJsonValue, sha256, toArrayBuffer, utf8 } from "./utils.js";
+import { base64urlDecode, base64urlEncode, canonicalizeJsonValue, sha256, toArrayBuffer, utf8, } from "./utils.js";
 export async function createAuth(opts) {
+    const seed = base64urlDecode(opts.sessionKeySeed);
     const privateKey = await importEd25519PrivateKeyFromSeedBase64url(opts.sessionKeySeed);
     const sessionKey = await publicKeyBase64urlFromPrivateKey(privateKey);
+    const reconnectKey = createPrivateKey({
+        key: Buffer.from(pkcs8FromEd25519Seed(seed)),
+        format: "der",
+        type: "pkcs8",
+    });
     const sign = async (data) => {
         const sig = await crypto.subtle.sign({ name: "Ed25519" }, privateKey, toArrayBuffer(data));
         return new Uint8Array(sig);
@@ -17,6 +25,16 @@ export async function createAuth(opts) {
         const canonicalContext = canonicalizeJsonValue(context ?? null);
         return await signDomainHash("oauth-init", `${redirectTo}:${canonicalContext}`);
     };
+    const buildServiceNatsAuthToken = (iat) => {
+        const digest = createHash("sha256").update(`nats-connect:${iat}`, "utf8").digest();
+        const sig = signBytesSync(null, digest, reconnectKey);
+        return {
+            v: 1,
+            sessionKey,
+            iat,
+            sig: base64urlEncode(new Uint8Array(sig)),
+        };
+    };
     return {
         sessionKey,
         sign,
@@ -25,16 +43,12 @@ export async function createAuth(opts) {
         natsConnectSigForBindingToken: (bindingToken) => signDomainHash("nats-connect", bindingToken),
         natsConnectSigForIat: (iat) => signDomainHash("nats-connect", String(iat)),
         createProof: (subject, payloadHash) => createProof(privateKey, { sessionKey, subject, payloadHash }),
-        createNatsAuthTokenForService: async (iat) => {
-            const sig = await signDomainHash("nats-connect", String(iat));
-            return { v: 1, sessionKey, iat, sig };
-        },
         natsConnectOptions: async () => {
-            const iat = Math.floor(Date.now() / 1000);
-            const sig = await signDomainHash("nats-connect", String(iat));
-            const authToken = { v: 1, sessionKey, iat, sig };
             return {
-                token: JSON.stringify(authToken),
+                authenticator: () => {
+                    const authToken = buildServiceNatsAuthToken(Math.floor(Date.now() / 1000));
+                    return { auth_token: JSON.stringify(authToken) };
+                },
                 inboxPrefix: `_INBOX.${sessionKey.slice(0, 16)}`,
             };
         },

package/esm/auth.d.ts

@@ -0,0 +1,3 @@
+import "./_dnt.polyfills.js";
+export * from "./auth/mod.js";
+//# sourceMappingURL=auth.d.ts.map

package/esm/auth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../src/auth.ts"],"names":[],"mappings":"AAAA,OAAO,qBAAqB,CAAC;AAC7B,cAAc,eAAe,CAAC"}

package/esm/auth.js

@@ -0,0 +1,2 @@
+import "./_dnt.polyfills.js";
+export * from "./auth/mod.js";

package/esm/browser.d.ts

@@ -0,0 +1,6 @@
+/**
+ * Browser-safe compatibility alias for @qlever-llc/trellis.
+ */
+import "./_dnt.polyfills.js";
+export * from "./index.js";
+//# sourceMappingURL=browser.d.ts.map

package/esm/browser.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"browser.d.ts","sourceRoot":"","sources":["../src/browser.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,OAAO,qBAAqB,CAAC;AAG7B,cAAc,YAAY,CAAC"}

package/esm/browser.js

@@ -0,0 +1,5 @@
+/**
+ * Browser-safe compatibility alias for @qlever-llc/trellis.
+ */
+import "./_dnt.polyfills.js";
+export * from "./index.js";

package/esm/client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../src/client.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AACzD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AAEjD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAC/C,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAChD,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AAavC,KAAK,oBAAoB,GAAG;IAC1B,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB,CAAC;AAEF,MAAM,MAAM,UAAU,GAAG;IACvB;;;OAGG;IACH,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,GAAG,CAAC,EAAE,UAAU,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,gBAAgB,CAAC,EAAE,oBAAoB,CAAC;CACzC,CAAC;AAEF,KAAK,cAAc,CAAC,IAAI,IAAI;IAC1B,GAAG,EAAE;QACH,KAAK,CAAC,EAAE,IAAI,CAAC;QACb,OAAO,CAAC,EAAE,IAAI,CAAC;KAChB,CAAC;CACH,CAAC;AAEF;;GAEG;AACH,wBAAgB,YAAY,CAAC,IAAI,SAAS,UAAU,EAClD,QAAQ,EAAE,cAAc,CAAC,IAAI,CAAC,EAC9B,IAAI,EAAE,cAAc,EACpB,IAAI,EAAE,WAAW,EACjB,IAAI,CAAC,EAAE,UAAU,GAChB,OAAO,CAAC,IAAI,CAAC,CAkBf;AAqBD,wBAAsB,gBAAgB,CACpC,IAAI,EAAE,cAAc,EACpB,IAAI,EAAE,WAAW,EACjB,IAAI,CAAC,EAAE,UAAU,GAChB,OAAO,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAc9B"}

package/esm/client_connect.d.ts

@@ -0,0 +1,53 @@
+import type { ClientOpts } from "./client.js";
+import type { TrellisAPI, TrellisContractV1 } from "./contracts.js";
+import { type RuntimeTransport } from "./runtime_transport.js";
+import { Trellis } from "./trellis.js";
+import { type SessionKeyHandle } from "./auth/browser/session.js";
+type ClientContract<TApi extends TrellisAPI = TrellisAPI> = {
+    CONTRACT: TrellisContractV1;
+    API: {
+        trellis: TApi;
+    };
+};
+type BrowserClientAuthOptions = {
+    mode?: "browser";
+    handle?: SessionKeyHandle;
+    provider?: string;
+    redirectTo?: string;
+    landingPath?: string;
+    context?: unknown;
+    currentUrl?: URL | string;
+};
+type SessionKeyClientAuthOptions = {
+    mode: "session_key";
+    sessionKeySeed: string;
+    provider?: string;
+    redirectTo: string;
+    context?: unknown;
+    flowId?: string;
+};
+export type ClientAuthOptions = BrowserClientAuthOptions | SessionKeyClientAuthOptions;
+export type ClientAuthRequiredContext = {
+    loginUrl: string;
+    sessionKey: string;
+    mode: "browser" | "session_key";
+};
+export type ClientAuthContinuation = {
+    flowId: string;
+} | void;
+export type TrellisClientConnectArgs<TApi extends TrellisAPI = TrellisAPI> = ClientOpts & {
+    trellisUrl: string;
+    contract: ClientContract<TApi>;
+    auth?: ClientAuthOptions;
+    onAuthRequired?: (ctx: ClientAuthRequiredContext) => Promise<ClientAuthContinuation> | ClientAuthContinuation;
+};
+type ClientConnectDeps = {
+    loadTransport(): Promise<RuntimeTransport>;
+    now(): number;
+};
+export declare function connectClientWithDeps<TApi extends TrellisAPI>(args: TrellisClientConnectArgs<TApi>, deps: ClientConnectDeps): Promise<Trellis<TApi>>;
+export declare class TrellisClient {
+    static connect<TApi extends TrellisAPI>(args: TrellisClientConnectArgs<TApi>): Promise<Trellis<TApi>>;
+}
+export {};
+//# sourceMappingURL=client_connect.d.ts.map

package/esm/client_connect.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"client_connect.d.ts","sourceRoot":"","sources":["../src/client_connect.ts"],"names":[],"mappings":"AAsBA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAC9C,OAAO,KAAK,EAAE,UAAU,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AACpE,OAAO,EAGL,KAAK,gBAAgB,EACtB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AAGvC,OAAO,EACL,KAAK,gBAAgB,EAItB,MAAM,2BAA2B,CAAC;AAEnC,KAAK,cAAc,CAAC,IAAI,SAAS,UAAU,GAAG,UAAU,IAAI;IAC1D,QAAQ,EAAE,iBAAiB,CAAC;IAC5B,GAAG,EAAE;QACH,OAAO,EAAE,IAAI,CAAC;KACf,CAAC;CACH,CAAC;AAEF,KAAK,wBAAwB,GAAG;IAC9B,IAAI,CAAC,EAAE,SAAS,CAAC;IACjB,MAAM,CAAC,EAAE,gBAAgB,CAAC;IAC1B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,UAAU,CAAC,EAAE,GAAG,GAAG,MAAM,CAAC;CAC3B,CAAC;AAEF,KAAK,2BAA2B,GAAG;IACjC,IAAI,EAAE,aAAa,CAAC;IACpB,cAAc,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB,CAAC;AAEF,MAAM,MAAM,iBAAiB,GAAG,wBAAwB,GAAG,2BAA2B,CAAC;AAEvF,MAAM,MAAM,yBAAyB,GAAG;IACtC,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,SAAS,GAAG,aAAa,CAAC;CACjC,CAAC;AAEF,MAAM,MAAM,sBAAsB,GAAG;IAAE,MAAM,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,CAAC;AAE/D,MAAM,MAAM,wBAAwB,CAAC,IAAI,SAAS,UAAU,GAAG,UAAU,IACrE,UAAU,GACV;IACA,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,cAAc,CAAC,IAAI,CAAC,CAAC;IAC/B,IAAI,CAAC,EAAE,iBAAiB,CAAC;IACzB,cAAc,CAAC,EAAE,CACf,GAAG,EAAE,yBAAyB,KAC3B,OAAO,CAAC,sBAAsB,CAAC,GAAG,sBAAsB,CAAC;CAC/D,CAAC;AAqBJ,KAAK,iBAAiB,GAAG;IACvB,aAAa,IAAI,OAAO,CAAC,gBAAgB,CAAC,CAAC;IAC3C,GAAG,IAAI,MAAM,CAAC;CACf,CAAC;AAqPF,wBAAsB,qBAAqB,CAAC,IAAI,SAAS,UAAU,EACjE,IAAI,EAAE,wBAAwB,CAAC,IAAI,CAAC,EACpC,IAAI,EAAE,iBAAiB,GACtB,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CA6EtB;AAgFH,qBAAa,aAAa;IACxB,MAAM,CAAC,OAAO,CAAC,IAAI,SAAS,UAAU,EACpC,IAAI,EAAE,wBAAwB,CAAC,IAAI,CAAC,GACnC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;CAG1B"}