@qlever-llc/trellis 0.7.0-rc.5 → 0.7.0

package/esm/contract_support/protocol.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"protocol.d.ts","sourceRoot":"","sources":["../../src/contract_support/protocol.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,EAAE,EAAE,KAAK,MAAM,EAAE,MAAM,SAAS,CAAC;AAmB5C,eAAO,MAAM,wBAAwB;;;;;;EAMF,CAAC;AAEpC,MAAM,MAAM,kBAAkB,GAAG,MAAM,CAAC,OAAO,wBAAwB,CAAC,CAAC;AAEzE,eAAO,MAAM,2BAA2B;;;;;;EAML,CAAC;AAEpC,MAAM,MAAM,qBAAqB,GAAG,MAAM,CAAC,OAAO,2BAA2B,CAAC,CAAC;AAE/E,eAAO,MAAM,4BAA4B;;;;;;;;;;;;;;;;EAgBN,CAAC;AAEpC,MAAM,MAAM,sBAAsB,GAAG,MAAM,CACzC,OAAO,4BAA4B,CACpC,CAAC;AAEF,eAAO,MAAM,uBAAuB;;EAED,CAAC;AAEpC,MAAM,MAAM,iBAAiB,GAAG,MAAM,CAAC,OAAO,uBAAuB,CAAC,CAAC;AAEvE,eAAO,MAAM,8BAA8B;;;;;;;;;;;;;;;EAWR,CAAC;AAEpC,MAAM,MAAM,wBAAwB,GAAG,MAAM,CAC3C,OAAO,8BAA8B,CACtC,CAAC;AAEF,eAAO,MAAM,0BAA0B;;;;;;;;;;;;;;;;;EAKJ,CAAC;AAEpC,MAAM,MAAM,oBAAoB,GAAG,MAAM,CAAC,OAAO,0BAA0B,CAAC,CAAC;AAE7E,eAAO,MAAM,uBAAuB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAWlC,CAAC;AAEH,MAAM,MAAM,iBAAiB,GAAG,MAAM,CAAC,OAAO,uBAAuB,CAAC,CAAC;AAEvE,eAAO,MAAM,uBAAuB;;;;;EAKlC,CAAC;AAEH,MAAM,MAAM,iBAAiB,GAAG,MAAM,CAAC,OAAO,uBAAuB,CAAC,CAAC;AAEvE,eAAO,MAAM,0BAA0B;;;;;EAKrC,CAAC;AAEH,MAAM,MAAM,oBAAoB,GAAG,MAAM,CAAC,OAAO,0BAA0B,CAAC,CAAC;AAE7E,eAAO,MAAM,2BAA2B;;;;;;;;;;;;;;;;EAgBtC,CAAC;AAEH,MAAM,MAAM,qBAAqB,GAAG,MAAM,CAAC,OAAO,2BAA2B,CAAC,CAAC;AAE/E,eAAO,MAAM,sBAAsB;;;;;;;;;;;;;;;;;;;EAejC,CAAC;AAEH,MAAM,MAAM,gBAAgB,GAAG,MAAM,CAAC,OAAO,sBAAsB,CAAC,CAAC;AAErE,eAAO,MAAM,yBAAyB;;;;;;;;;;;;;;;;;;;;;;EAGpC,CAAC;AAEH,MAAM,MAAM,mBAAmB,GAAG,MAAM,CAAC,OAAO,yBAAyB,CAAC,CAAC;AAE3E,eAAO,MAAM,8BAA8B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAWzC,CAAC;AAEH,MAAM,MAAM,wBAAwB,GAAG,MAAM,CAC3C,OAAO,8BAA8B,CACtC,CAAC;AAEF,eAAO,MAAM,8BAA8B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAIzC,CAAC;AAEH,MAAM,MAAM,wBAAwB,GAAG,MAAM,CAC3C,OAAO,8BAA8B,CACtC,CAAC;AAEF,eAAO,MAAM,aAAa,iCAIsB,CAAC;AAEjD,eAAO,MAAM,iBAAiB;;;;;EAK5B,CAAC;AAEH,MAAM,MAAM,WAAW,GAAG,MAAM,CAAC,OAAO,iBAAiB,CAAC,CAAC;AAE3D,eAAO,MAAM,eAAe;;;;;;EAM1B,CAAC;AAEH,MAAM,MAAM,SAAS,GAAG,MAAM,CAAC,OAAO,eAAe,CAAC,CAAC"}

package/esm/contract_support/protocol.js

@@ -0,0 +1,145 @@
+import Type from "typebox";
+function parseIsoDate(value) {
+    const parsed = new Date(value);
+    if (Number.isNaN(parsed.getTime()) || parsed.toISOString() !== value) {
+        throw new TypeError(`Expected canonical ISO 8601 UTC date-time string, received '${value}'`);
+    }
+    return parsed;
+}
+function formatIsoDate(value) {
+    if (!(value instanceof Date) || Number.isNaN(value.getTime())) {
+        throw new TypeError("Expected a valid Date instance");
+    }
+    return value.toISOString();
+}
+export const ContractKvResourceSchema = Type.Object({
+    purpose: Type.String({ minLength: 1 }),
+    required: Type.Optional(Type.Boolean({ default: true })),
+    history: Type.Optional(Type.Integer({ minimum: 1, default: 1 })),
+    ttlMs: Type.Optional(Type.Integer({ minimum: 0, default: 0 })),
+    maxValueBytes: Type.Optional(Type.Integer({ minimum: 1 })),
+}, { additionalProperties: false });
+export const ContractStoreResourceSchema = Type.Object({
+    purpose: Type.String({ minLength: 1 }),
+    required: Type.Optional(Type.Boolean({ default: true })),
+    ttlMs: Type.Optional(Type.Integer({ minimum: 0, default: 0 })),
+    maxObjectBytes: Type.Optional(Type.Integer({ minimum: 1 })),
+    maxTotalBytes: Type.Optional(Type.Integer({ minimum: 1 })),
+}, { additionalProperties: false });
+export const ContractStreamResourceSchema = Type.Object({
+    purpose: Type.String({ minLength: 1 }),
+    required: Type.Optional(Type.Boolean({ default: true })),
+    retention: Type.Optional(Type.String({ minLength: 1 })),
+    storage: Type.Optional(Type.String({ minLength: 1 })),
+    numReplicas: Type.Optional(Type.Integer({ minimum: 1 })),
+    maxAgeMs: Type.Optional(Type.Integer({ minimum: 0 })),
+    maxBytes: Type.Optional(Type.Integer()),
+    maxMsgs: Type.Optional(Type.Integer()),
+    discard: Type.Optional(Type.String({ minLength: 1 })),
+    subjects: Type.Array(Type.String({ minLength: 1 }), { minItems: 1 }),
+    sources: Type.Optional(Type.Array(Type.Object({
+        fromAlias: Type.String({ minLength: 1 }),
+        filterSubject: Type.Optional(Type.String({ minLength: 1 })),
+        subjectTransformDest: Type.Optional(Type.String({ minLength: 1 })),
+    }, { additionalProperties: false }))),
+}, { additionalProperties: false });
+export const ContractSchemaRefSchema = Type.Object({
+    schema: Type.String({ minLength: 1 }),
+}, { additionalProperties: false });
+export const ContractJobQueueResourceSchema = Type.Object({
+    payload: ContractSchemaRefSchema,
+    result: Type.Optional(ContractSchemaRefSchema),
+    maxDeliver: Type.Optional(Type.Integer({ minimum: 1 })),
+    backoffMs: Type.Optional(Type.Array(Type.Integer({ minimum: 0 }))),
+    ackWaitMs: Type.Optional(Type.Integer({ minimum: 1 })),
+    defaultDeadlineMs: Type.Optional(Type.Integer({ minimum: 1 })),
+    progress: Type.Optional(Type.Boolean()),
+    logs: Type.Optional(Type.Boolean()),
+    dlq: Type.Optional(Type.Boolean()),
+    concurrency: Type.Optional(Type.Integer({ minimum: 1 })),
+}, { additionalProperties: false });
+export const ContractJobsResourceSchema = Type.Object({
+    queues: Type.Record(Type.String({ minLength: 1 }), ContractJobQueueResourceSchema),
+}, { additionalProperties: false });
+export const ContractResourcesSchema = Type.Object({
+    kv: Type.Optional(Type.Record(Type.String({ minLength: 1 }), ContractKvResourceSchema)),
+    store: Type.Optional(Type.Record(Type.String({ minLength: 1 }), ContractStoreResourceSchema)),
+    streams: Type.Optional(Type.Record(Type.String({ minLength: 1 }), ContractStreamResourceSchema)),
+    jobs: Type.Optional(ContractJobsResourceSchema),
+});
+export const KvResourceBindingSchema = Type.Object({
+    bucket: Type.String({ minLength: 1 }),
+    history: Type.Integer({ minimum: 1 }),
+    ttlMs: Type.Integer({ minimum: 0 }),
+    maxValueBytes: Type.Optional(Type.Integer({ minimum: 1 })),
+});
+export const StoreResourceBindingSchema = Type.Object({
+    name: Type.String({ minLength: 1 }),
+    ttlMs: Type.Integer({ minimum: 0 }),
+    maxObjectBytes: Type.Optional(Type.Integer({ minimum: 1 })),
+    maxTotalBytes: Type.Optional(Type.Integer({ minimum: 1 })),
+});
+export const StreamResourceBindingSchema = Type.Object({
+    name: Type.String({ minLength: 1 }),
+    retention: Type.Optional(Type.String({ minLength: 1 })),
+    storage: Type.Optional(Type.String({ minLength: 1 })),
+    numReplicas: Type.Optional(Type.Integer({ minimum: 1 })),
+    maxAgeMs: Type.Optional(Type.Integer({ minimum: 0 })),
+    maxBytes: Type.Optional(Type.Integer()),
+    maxMsgs: Type.Optional(Type.Integer()),
+    discard: Type.Optional(Type.String({ minLength: 1 })),
+    subjects: Type.Array(Type.String({ minLength: 1 }), { minItems: 1 }),
+    sources: Type.Optional(Type.Array(Type.Object({
+        fromAlias: Type.String({ minLength: 1 }),
+        streamName: Type.String({ minLength: 1 }),
+        filterSubject: Type.Optional(Type.String({ minLength: 1 })),
+        subjectTransformDest: Type.Optional(Type.String({ minLength: 1 })),
+    }))),
+});
+export const JobsQueueBindingSchema = Type.Object({
+    queueType: Type.String({ minLength: 1 }),
+    publishPrefix: Type.String({ minLength: 1 }),
+    workSubject: Type.String({ minLength: 1 }),
+    consumerName: Type.String({ minLength: 1 }),
+    payload: ContractSchemaRefSchema,
+    result: Type.Optional(ContractSchemaRefSchema),
+    maxDeliver: Type.Integer({ minimum: 1 }),
+    backoffMs: Type.Array(Type.Integer({ minimum: 0 })),
+    ackWaitMs: Type.Integer({ minimum: 1 }),
+    defaultDeadlineMs: Type.Optional(Type.Integer({ minimum: 1 })),
+    progress: Type.Boolean(),
+    logs: Type.Boolean(),
+    dlq: Type.Boolean(),
+    concurrency: Type.Integer({ minimum: 1 }),
+});
+export const JobsResourceBindingSchema = Type.Object({
+    namespace: Type.String({ minLength: 1 }),
+    queues: Type.Record(Type.String({ minLength: 1 }), JobsQueueBindingSchema),
+});
+export const ContractResourceBindingsSchema = Type.Object({
+    kv: Type.Optional(Type.Record(Type.String({ minLength: 1 }), KvResourceBindingSchema)),
+    store: Type.Optional(Type.Record(Type.String({ minLength: 1 }), StoreResourceBindingSchema)),
+    streams: Type.Optional(Type.Record(Type.String({ minLength: 1 }), StreamResourceBindingSchema)),
+    jobs: Type.Optional(JobsResourceBindingSchema),
+});
+export const InstalledServiceContractSchema = Type.Object({
+    contractId: Type.String({ minLength: 1 }),
+    digest: Type.String({ pattern: "^[A-Za-z0-9_-]+$" }),
+    resources: ContractResourceBindingsSchema,
+});
+export const IsoDateSchema = Type.Codec(Type.String({ format: "date-time" }))
+    .Decode((value) => parseIsoDate(value))
+    .Encode((value) => formatIsoDate(value));
+export const EventHeaderSchema = Type.Object({
+    header: Type.Object({
+        id: Type.String(),
+        time: IsoDateSchema,
+    }),
+});
+export const PaginatedSchema = Type.Object({
+    count: Type.Integer({ minimum: 0 }),
+    offset: Type.Integer({ minimum: 0 }),
+    limit: Type.Integer({ minimum: 0 }),
+    next: Type.Optional(Type.Integer({ minimum: 0 })),
+    prev: Type.Optional(Type.Integer({ minimum: 0 })),
+});

package/esm/contract_support/runtime.d.ts

@@ -0,0 +1,75 @@
+import type { StaticDecode, TSchema } from "typebox";
+import type { BaseError } from "@qlever-llc/result";
+import type { SubjectParam } from "./schema_pointers.js";
+export type Schema<T> = {
+    schema: unknown;
+    readonly __trellisType?: T;
+};
+export type SchemaLike<T = unknown> = TSchema | Schema<T>;
+export type TransportErrorData = {
+    id: string;
+    type: string;
+    message: string;
+    context?: Record<string, unknown>;
+    traceId?: string;
+} & Record<string, unknown>;
+export type RpcErrorClass<TData extends TransportErrorData = TransportErrorData, TError extends BaseError = BaseError> = {
+    fromSerializable(data: TData): TError;
+};
+export type RuntimeRpcErrorDesc<TType extends string = string, TSchema extends SchemaLike | undefined = SchemaLike | undefined, TError extends BaseError = BaseError> = {
+    type: TType;
+    schema?: TSchema;
+    fromSerializable(data: TSchema extends SchemaLike ? InferSchemaType<TSchema> : TransportErrorData): TError;
+};
+export type InferRuntimeRpcError<T extends RuntimeRpcErrorDesc> = T extends RuntimeRpcErrorDesc<string, SchemaLike | undefined, infer TError> ? TError : never;
+export type InferSchemaType<S> = S extends Schema<infer T> ? T : S extends TSchema ? StaticDecode<S> : unknown;
+export declare function schema<T>(raw: unknown): Schema<T>;
+export declare function unwrapSchema(raw: SchemaLike): unknown;
+export type RPCDesc<I extends SchemaLike = SchemaLike, O extends SchemaLike = SchemaLike, E extends readonly string[] | undefined = readonly string[] | undefined, TRuntimeErrors extends readonly RuntimeRpcErrorDesc[] | undefined = readonly RuntimeRpcErrorDesc[] | undefined> = {
+    subject: string;
+    input: I;
+    output: O;
+    callerCapabilities: readonly string[];
+    authRequired?: boolean;
+    errors?: E;
+    runtimeErrors?: TRuntimeErrors;
+    declaredErrorTypes?: readonly string[];
+};
+export type EventDesc<S extends SchemaLike = SchemaLike> = {
+    subject: string;
+    params?: readonly SubjectParam[];
+    event: S;
+    publishCapabilities: readonly string[];
+    subscribeCapabilities: readonly string[];
+};
+export type OperationDesc<I extends SchemaLike = SchemaLike, P extends SchemaLike | undefined = SchemaLike | undefined, O extends SchemaLike | undefined = SchemaLike | undefined> = {
+    subject: string;
+    input: I;
+    progress?: P;
+    output?: O;
+    transfer?: {
+        store: string;
+        key: `/${string}`;
+        contentType?: `/${string}`;
+        metadata?: `/${string}`;
+        expiresInMs?: number;
+        maxBytes?: number;
+    };
+    callerCapabilities: readonly string[];
+    readCapabilities: readonly string[];
+    cancelCapabilities: readonly string[];
+    cancel?: boolean;
+};
+export type SubjectDesc<S extends SchemaLike = SchemaLike> = {
+    subject: string;
+    schema?: S;
+    publishCapabilities: readonly string[];
+    subscribeCapabilities: readonly string[];
+};
+export type TrellisAPI = {
+    rpc: Record<string, RPCDesc>;
+    operations: Record<string, OperationDesc>;
+    events: Record<string, EventDesc>;
+    subjects: Record<string, SubjectDesc>;
+};
+//# sourceMappingURL=runtime.d.ts.map

package/esm/contract_support/runtime.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtime.d.ts","sourceRoot":"","sources":["../../src/contract_support/runtime.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAErD,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AACpD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AAEzD,MAAM,MAAM,MAAM,CAAC,CAAC,IAAI;IACtB,MAAM,EAAE,OAAO,CAAC;IAChB,QAAQ,CAAC,aAAa,CAAC,EAAE,CAAC,CAAC;CAC5B,CAAC;AAEF,MAAM,MAAM,UAAU,CAAC,CAAC,GAAG,OAAO,IAAI,OAAO,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;AAE1D,MAAM,MAAM,kBAAkB,GAAG;IAC/B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAClC,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;AAE5B,MAAM,MAAM,aAAa,CACvB,KAAK,SAAS,kBAAkB,GAAG,kBAAkB,EACrD,MAAM,SAAS,SAAS,GAAG,SAAS,IAClC;IACF,gBAAgB,CAAC,IAAI,EAAE,KAAK,GAAG,MAAM,CAAC;CACvC,CAAC;AAEF,MAAM,MAAM,mBAAmB,CAC7B,KAAK,SAAS,MAAM,GAAG,MAAM,EAC7B,OAAO,SAAS,UAAU,GAAG,SAAS,GAAG,UAAU,GAAG,SAAS,EAC/D,MAAM,SAAS,SAAS,GAAG,SAAS,IAClC;IACF,IAAI,EAAE,KAAK,CAAC;IACZ,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,gBAAgB,CACd,IAAI,EAAE,OAAO,SAAS,UAAU,GAAG,eAAe,CAAC,OAAO,CAAC,GAAG,kBAAkB,GAC/E,MAAM,CAAC;CACX,CAAC;AAEF,MAAM,MAAM,oBAAoB,CAAC,CAAC,SAAS,mBAAmB,IAAI,CAAC,SACjE,mBAAmB,CAAC,MAAM,EAAE,UAAU,GAAG,SAAS,EAAE,MAAM,MAAM,CAAC,GAAG,MAAM,GACxE,KAAK,CAAC;AAEV,MAAM,MAAM,eAAe,CAAC,CAAC,IAAI,CAAC,SAAS,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,GAC1D,CAAC,SAAS,OAAO,GAAG,YAAY,CAAC,CAAC,CAAC,GACnC,OAAO,CAAC;AAEZ,wBAAgB,MAAM,CAAC,CAAC,EAAE,GAAG,EAAE,OAAO,GAAG,MAAM,CAAC,CAAC,CAAC,CAEjD;AAED,wBAAgB,YAAY,CAAC,GAAG,EAAE,UAAU,GAAG,OAAO,CAKrD;AAED,MAAM,MAAM,OAAO,CACjB,CAAC,SAAS,UAAU,GAAG,UAAU,EACjC,CAAC,SAAS,UAAU,GAAG,UAAU,EACjC,CAAC,SAAS,SAAS,MAAM,EAAE,GAAG,SAAS,GAAG,SAAS,MAAM,EAAE,GAAG,SAAS,EACvE,cAAc,SAAS,SAAS,mBAAmB,EAAE,GAAG,SAAS,GAC7D,SAAS,mBAAmB,EAAE,GAC9B,SAAS,IACX;IACF,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,CAAC,CAAC;IACT,MAAM,EAAE,CAAC,CAAC;IACV,kBAAkB,EAAE,SAAS,MAAM,EAAE,CAAC;IACtC,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,MAAM,CAAC,EAAE,CAAC,CAAC;IACX,aAAa,CAAC,EAAE,cAAc,CAAC;IAC/B,kBAAkB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CACxC,CAAC;AAEF,MAAM,MAAM,SAAS,CAAC,CAAC,SAAS,UAAU,GAAG,UAAU,IAAI;IACzD,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,SAAS,YAAY,EAAE,CAAC;IACjC,KAAK,EAAE,CAAC,CAAC;IACT,mBAAmB,EAAE,SAAS,MAAM,EAAE,CAAC;IACvC,qBAAqB,EAAE,SAAS,MAAM,EAAE,CAAC;CAC1C,CAAC;AAEF,MAAM,MAAM,aAAa,CACvB,CAAC,SAAS,UAAU,GAAG,UAAU,EACjC,CAAC,SAAS,UAAU,GAAG,SAAS,GAAG,UAAU,GAAG,SAAS,EACzD,CAAC,SAAS,UAAU,GAAG,SAAS,GAAG,UAAU,GAAG,SAAS,IACvD;IACF,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,CAAC,CAAC;IACT,QAAQ,CAAC,EAAE,CAAC,CAAC;IACb,MAAM,CAAC,EAAE,CAAC,CAAC;IACX,QAAQ,CAAC,EAAE;QACT,KAAK,EAAE,MAAM,CAAC;QACd,GAAG,EAAE,IAAI,MAAM,EAAE,CAAC;QAClB,WAAW,CAAC,EAAE,IAAI,MAAM,EAAE,CAAC;QAC3B,QAAQ,CAAC,EAAE,IAAI,MAAM,EAAE,CAAC;QACxB,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,QAAQ,CAAC,EAAE,MAAM,CAAC;KACnB,CAAC;IACF,kBAAkB,EAAE,SAAS,MAAM,EAAE,CAAC;IACtC,gBAAgB,EAAE,SAAS,MAAM,EAAE,CAAC;IACpC,kBAAkB,EAAE,SAAS,MAAM,EAAE,CAAC;IACtC,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB,CAAC;AAEF,MAAM,MAAM,WAAW,CAAC,CAAC,SAAS,UAAU,GAAG,UAAU,IAAI;IAC3D,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,CAAC,CAAC;IACX,mBAAmB,EAAE,SAAS,MAAM,EAAE,CAAC;IACvC,qBAAqB,EAAE,SAAS,MAAM,EAAE,CAAC;CAC1C,CAAC;AAEF,MAAM,MAAM,UAAU,GAAG;IACvB,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC7B,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC;IAC1C,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;IAClC,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;CACvC,CAAC"}

package/esm/contract_support/schema_pointers.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema_pointers.d.ts","sourceRoot":"","sources":["../../src/contract_support/schema_pointers.ts"],"names":[],"mappings":"AAEA,MAAM,MAAM,YAAY,GAAG,IAAI,MAAM,EAAE,CAAC;AAExC,KAAK,aAAa,GAAG,MAAM,GAAG,MAAM,GAAG,OAAO,GAAG,IAAI,CAAC;AACtD,KAAK,cAAc,GAAG,MAAM,GAAG,MAAM,CAAC;AAEtC,KAAK,aAAa,CAAC,CAAC,IAAI,CAAC,SAAS,MAAM,GAAG,CAAC,SAAS,aAAa,GAAG,KAAK,GACtE,CAAC,SAAS,SAAS,OAAO,EAAE,GAAG,KAAK,GACpC,CAAC,SAAS,IAAI,GAAG,KAAK,GACtB,CAAC,SAAS,QAAQ,GAAG,KAAK,GAC1B,IAAI,GACJ,KAAK,CAAC;AAEV,KAAK,WAAW,CAAC,MAAM,SAAS,MAAM,EAAE,GAAG,SAAS,MAAM,IAAI,MAAM,SAAS,EAAE,GAC3E,IAAI,GAAG,EAAE,GACT,GAAG,MAAM,IAAI,GAAG,EAAE,CAAC;AAEvB,KAAK,GAAG,GAAG,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;AAE7C,KAAK,YAAY,CACf,CAAC,EACD,MAAM,SAAS,MAAM,EACrB,KAAK,SAAS,MAAM,IAClB,KAAK,SAAS,CAAC,GAAG,KAAK,GACvB,aAAa,CAAC,CAAC,CAAC,SAAS,IAAI,GAAG;KAC7B,CAAC,IAAI,OAAO,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,GAC5B,WAAW,CAAC,MAAM,EAAE,CAAC,CAAC,GACtB,YAAY,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,WAAW,CAAC,MAAM,EAAE,CAAC,CAAC,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC;CACxE,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC,CAAC,GAC3B,KAAK,CAAC;AAEV,MAAM,MAAM,WAAW,CAAC,CAAC,IAAI,YAAY,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,SAAS,MAAM,CAAC,GAC/D,CAAC,SAAS,YAAY,GAAG,CAAC,GAC1B,KAAK,GACL,KAAK,CAAC;AAEV,KAAK,kBAAkB,CACrB,CAAC,EACD,MAAM,SAAS,MAAM,EACrB,KAAK,SAAS,MAAM,IAClB,KAAK,SAAS,CAAC,GAAG,KAAK,GACvB,aAAa,CAAC,CAAC,CAAC,SAAS,IAAI,GAAG;KAC7B,CAAC,IAAI,OAAO,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,GAAG,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,cAAc,GACvE,WAAW,CAAC,MAAM,EAAE,CAAC,CAAC,GACtB,kBAAkB,CAClB,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EACjB,WAAW,CAAC,MAAM,EAAE,CAAC,CAAC,EACtB,GAAG,CAAC,KAAK,CAAC,CACX;CACJ,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC,CAAC,GAC3B,KAAK,CAAC;AAEV,MAAM,MAAM,iBAAiB,CAAC,CAAC,IAAI,kBAAkB,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,SAAS,MAAM,CAAC,GAC3E,CAAC,SAAS,YAAY,GAAG,CAAC,GAC1B,KAAK,GACL,KAAK,CAAC;AA6CV,wBAAgB,yBAAyB,CACvC,MAAM,EAAE,OAAO,EACf,OAAO,EAAE,MAAM,GACd,OAAO,GAAG,SAAS,CAOrB;AAED,wBAAgB,sCAAsC,CACpD,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE,OAAO,EACf,QAAQ,EAAE,SAAS,MAAM,EAAE,GAC1B,IAAI,CAmBN"}

package/esm/contracts.d.ts

@@ -0,0 +1,5 @@
+import "./_dnt.polyfills.js";
+export * from "./contract_support/mod.js";
+export { defineAppContract, defineCliContract, defineDeviceContract, definePortalContract, defineServiceContract, } from "./contract.js";
+export type { DefinedContract } from "./contract.js";
+//# sourceMappingURL=contracts.d.ts.map

package/esm/contracts.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"contracts.d.ts","sourceRoot":"","sources":["../src/contracts.ts"],"names":[],"mappings":"AAAA,OAAO,qBAAqB,CAAC;AAC7B,cAAc,2BAA2B,CAAC;AAC1C,OAAO,EACL,iBAAiB,EACjB,iBAAiB,EACjB,oBAAoB,EACpB,oBAAoB,EACpB,qBAAqB,GACtB,MAAM,eAAe,CAAC;AACvB,YAAY,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC"}

package/esm/contracts.js

@@ -0,0 +1,3 @@
+import "./_dnt.polyfills.js";
+export * from "./contract_support/mod.js";
+export { defineAppContract, defineCliContract, defineDeviceContract, definePortalContract, defineServiceContract, } from "./contract.js";

package/esm/device.d.ts

@@ -0,0 +1,48 @@
+import { type NatsConnection } from "@nats-io/nats-core";
+import type { TrellisAPI } from "./contracts.js";
+import { ServiceHealth } from "./health.js";
+import { Trellis } from "./trellis.js";
+type DeviceContract<TApi extends TrellisAPI = TrellisAPI> = {
+    CONTRACT_ID: string;
+    CONTRACT_DIGEST: string;
+    CONTRACT?: {
+        displayName?: string;
+    };
+    API: {
+        trellis: TApi;
+    };
+};
+export type TrellisDeviceConnection<TApi extends TrellisAPI = TrellisAPI> = Trellis<TApi> & {
+    health: ServiceHealth;
+};
+type DeviceConnectTransport = {
+    connect(options: {
+        servers: string | string[];
+        token?: string;
+        authenticator?: unknown;
+        inboxPrefix?: string;
+    }): Promise<NatsConnection>;
+};
+type DeviceConnectDeps = {
+    loadTransport(): Promise<DeviceConnectTransport>;
+    now(): number;
+};
+export type DeviceActivationController = {
+    url: string;
+    waitForOnlineApproval(opts?: {
+        signal?: AbortSignal;
+    }): Promise<void>;
+    acceptConfirmationCode(code: string): Promise<void>;
+};
+export type TrellisDeviceConnectArgs<TApi extends TrellisAPI = TrellisAPI> = {
+    trellisUrl: string;
+    contract: DeviceContract<TApi>;
+    rootSecret: Uint8Array | string;
+    onActivationRequired?(activation: DeviceActivationController): Promise<void>;
+};
+export declare function connectDeviceWithDeps<TApi extends TrellisAPI>(args: TrellisDeviceConnectArgs<TApi>, deps: DeviceConnectDeps): Promise<TrellisDeviceConnection<TApi>>;
+export declare const TrellisDevice: {
+    connect<TApi extends TrellisAPI>(args: TrellisDeviceConnectArgs<TApi>): Promise<TrellisDeviceConnection<TApi>>;
+};
+export {};
+//# sourceMappingURL=device.d.ts.map

package/esm/device.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"device.d.ts","sourceRoot":"","sources":["../src/device.ts"],"names":[],"mappings":"AAAA,OAAO,EAAwC,KAAK,cAAc,EAAE,MAAM,oBAAoB,CAAC;AAiB/F,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AAGjD,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AAIvC,KAAK,cAAc,CAAC,IAAI,SAAS,UAAU,GAAG,UAAU,IAAI;IAC1D,WAAW,EAAE,MAAM,CAAC;IACpB,eAAe,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,EAAE;QACT,WAAW,CAAC,EAAE,MAAM,CAAC;KACtB,CAAC;IACF,GAAG,EAAE;QACH,OAAO,EAAE,IAAI,CAAC;KACf,CAAC;CACH,CAAC;AAEF,MAAM,MAAM,uBAAuB,CAAC,IAAI,SAAS,UAAU,GAAG,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC,GAAG;IAC1F,MAAM,EAAE,aAAa,CAAC;CACvB,CAAC;AAEF,KAAK,sBAAsB,GAAG;IAC5B,OAAO,CAAC,OAAO,EAAE;QACf,OAAO,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;QAC3B,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,aAAa,CAAC,EAAE,OAAO,CAAC;QACxB,WAAW,CAAC,EAAE,MAAM,CAAC;KACtB,GAAG,OAAO,CAAC,cAAc,CAAC,CAAC;CAC7B,CAAC;AAEF,KAAK,iBAAiB,GAAG;IACvB,aAAa,IAAI,OAAO,CAAC,sBAAsB,CAAC,CAAC;IACjD,GAAG,IAAI,MAAM,CAAC;CACf,CAAC;AAWF,MAAM,MAAM,0BAA0B,GAAG;IACvC,GAAG,EAAE,MAAM,CAAC;IACZ,qBAAqB,CAAC,IAAI,CAAC,EAAE;QAAE,MAAM,CAAC,EAAE,WAAW,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACtE,sBAAsB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACrD,CAAC;AAEF,MAAM,MAAM,wBAAwB,CAAC,IAAI,SAAS,UAAU,GAAG,UAAU,IAAI;IAC3E,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,cAAc,CAAC,IAAI,CAAC,CAAC;IAC/B,UAAU,EAAE,UAAU,GAAG,MAAM,CAAC;IAChC,oBAAoB,CAAC,CAAC,UAAU,EAAE,0BAA0B,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAC9E,CAAC;AAsIF,wBAAsB,qBAAqB,CAAC,IAAI,SAAS,UAAU,EACjE,IAAI,EAAE,wBAAwB,CAAC,IAAI,CAAC,EACpC,IAAI,EAAE,iBAAiB,GACtB,OAAO,CAAC,uBAAuB,CAAC,IAAI,CAAC,CAAC,CAmLxC;AAED,eAAO,MAAM,aAAa;YAChB,IAAI,SAAS,UAAU,QACvB,wBAAwB,CAAC,IAAI,CAAC,GACnC,OAAO,CAAC,uBAAuB,CAAC,IAAI,CAAC,CAAC;CAG1C,CAAC"}

package/esm/device.js

@@ -0,0 +1,288 @@
+import { jwtAuthenticator } from "@nats-io/nats-core";
+import { Buffer } from "node:buffer";
+import { createHash, createPrivateKey, sign as signBytesSync } from "node:crypto";
+import { buildDeviceActivationPayload, deriveDeviceIdentity, signDeviceWaitRequest, startDeviceActivationRequest, verifyDeviceConfirmationCode, waitForDeviceActivation, } from "./auth/device_activation.js";
+import { importEd25519PrivateKeyFromSeedBase64url, pkcs8FromEd25519Seed, } from "./auth/keys.js";
+import { base64urlDecode, base64urlEncode, toArrayBuffer } from "./auth/utils.js";
+import { loadDefaultRuntimeTransport } from "./runtime_transport.js";
+import { selectRuntimeTransportServers } from "./runtime_transport.js";
+import { ServiceHealth } from "./health.js";
+import { Trellis } from "./trellis.js";
+import { Type } from "typebox";
+import { Value } from "typebox/value";
+const ClientTransportEndpointsSchema = Type.Object({
+    natsServers: Type.Array(Type.String({ minLength: 1 }), { minItems: 1 }),
+});
+const ClientTransportsSchema = Type.Object({
+    native: Type.Optional(ClientTransportEndpointsSchema),
+    websocket: Type.Optional(ClientTransportEndpointsSchema),
+});
+const DeviceBootstrapReadySchema = Type.Object({
+    status: Type.Literal("ready"),
+    connectInfo: Type.Object({
+        instanceId: Type.String({ minLength: 1 }),
+        profileId: Type.String({ minLength: 1 }),
+        contractId: Type.String({ minLength: 1 }),
+        contractDigest: Type.String({ minLength: 1 }),
+        transports: ClientTransportsSchema,
+        transport: Type.Object({
+            sentinel: Type.Object({
+                jwt: Type.String({ minLength: 1 }),
+                seed: Type.String({ minLength: 1 }),
+            }),
+        }),
+        auth: Type.Object({
+            mode: Type.Literal("device_identity"),
+            iatSkewSeconds: Type.Integer({ minimum: 1 }),
+        }),
+    }),
+});
+const DeviceBootstrapActivationRequiredSchema = Type.Object({
+    status: Type.Literal("activation_required"),
+});
+const DeviceBootstrapNotReadySchema = Type.Object({
+    status: Type.Literal("not_ready"),
+    reason: Type.String({ minLength: 1 }),
+});
+function normalizeRootSecret(rootSecret) {
+    if (typeof rootSecret === "string") {
+        const decoded = base64urlDecode(rootSecret.trim());
+        if (decoded.length === 0)
+            throw new Error("rootSecret must not be empty");
+        return decoded;
+    }
+    if (rootSecret.length === 0)
+        throw new Error("rootSecret must not be empty");
+    return rootSecret;
+}
+async function signIdentityBytes(identitySeed, data) {
+    const privateKey = await importEd25519PrivateKeyFromSeedBase64url(base64urlEncode(identitySeed));
+    return new Uint8Array(await crypto.subtle.sign("Ed25519", privateKey, toArrayBuffer(data)));
+}
+function createDeviceNatsAuthTokenAuthenticator(args) {
+    const reconnectKey = createPrivateKey({
+        key: Buffer.from(pkcs8FromEd25519Seed(args.identitySeed)),
+        format: "der",
+        type: "pkcs8",
+    });
+    return () => {
+        const iat = Math.floor(args.now() / 1_000);
+        const digest = createHash("sha256").update(`nats-connect:${iat}`, "utf8").digest();
+        const sig = signBytesSync(null, digest, reconnectKey);
+        return {
+            auth_token: JSON.stringify({
+                v: 1,
+                sessionKey: args.publicIdentityKey,
+                iat,
+                sig: base64urlEncode(new Uint8Array(sig)),
+                contractDigest: args.contractDigest,
+            }),
+        };
+    };
+}
+const defaultDeps = {
+    loadTransport: loadDefaultRuntimeTransport,
+    now: () => Date.now(),
+};
+function activationRequiredError() {
+    return new Error("Device activation required but no activation handler was provided");
+}
+function isConnectInfoUnavailable(error) {
+    const message = error instanceof Error ? error.message : String(error);
+    return message.includes("404") || message.includes("unknown_device") || message.includes("activation_required");
+}
+async function fetchDeviceBootstrap(args) {
+    const request = await signDeviceWaitRequest({
+        publicIdentityKey: args.publicIdentityKey,
+        nonce: "connect-info",
+        identitySeed: args.identitySeed,
+        contractDigest: args.contractDigest,
+        iat: args.iat,
+    });
+    const bootstrapRequest = {
+        publicIdentityKey: request.publicIdentityKey,
+        contractDigest: request.contractDigest,
+        iat: request.iat,
+        sig: request.sig,
+    };
+    const response = await fetch(new URL("/bootstrap/device", args.trellisUrl), {
+        method: "POST",
+        headers: { "Content-Type": "application/json" },
+        body: JSON.stringify(bootstrapRequest),
+    });
+    if (!response.ok) {
+        throw new Error(`Device bootstrap failed: ${response.status} ${await response.text()}`);
+    }
+    const payload = await response.json();
+    if (Value.Check(DeviceBootstrapReadySchema, payload))
+        return payload;
+    if (Value.Check(DeviceBootstrapActivationRequiredSchema, payload))
+        return payload;
+    if (Value.Check(DeviceBootstrapNotReadySchema, payload))
+        return payload;
+    throw new Error("Device bootstrap returned an invalid response");
+}
+export async function connectDeviceWithDeps(args, deps) {
+    const rootSecret = normalizeRootSecret(args.rootSecret);
+    const identity = await deriveDeviceIdentity(rootSecret);
+    const contractDigest = args.contract.CONTRACT_DIGEST;
+    let connectInfo = null;
+    try {
+        const bootstrap = await fetchDeviceBootstrap({
+            trellisUrl: args.trellisUrl,
+            publicIdentityKey: identity.publicIdentityKey,
+            identitySeed: identity.identitySeed,
+            contractDigest,
+        });
+        if (bootstrap.status === "ready") {
+            connectInfo = bootstrap.connectInfo;
+        }
+        else if (bootstrap.status === "not_ready") {
+            throw new Error(bootstrap.reason);
+        }
+    }
+    catch (error) {
+        if (!isConnectInfoUnavailable(error))
+            throw error;
+    }
+    if (!connectInfo) {
+        if (!args.onActivationRequired)
+            throw activationRequiredError();
+        const nonce = crypto.randomUUID();
+        const payload = await buildDeviceActivationPayload({
+            activationKey: identity.activationKey,
+            publicIdentityKey: identity.publicIdentityKey,
+            nonce,
+        });
+        const activationUrl = (await startDeviceActivationRequest({
+            trellisUrl: args.trellisUrl,
+            payload,
+        })).activationUrl;
+        let activationCompleted = false;
+        let onlineConnectInfo = null;
+        await args.onActivationRequired({
+            url: activationUrl,
+            waitForOnlineApproval: async (opts) => {
+                if (activationCompleted)
+                    return;
+                const activation = await waitForDeviceActivation({
+                    trellisUrl: args.trellisUrl,
+                    publicIdentityKey: identity.publicIdentityKey,
+                    nonce,
+                    identitySeed: identity.identitySeed,
+                    contractDigest,
+                    signal: opts?.signal,
+                });
+                onlineConnectInfo = activation.connectInfo;
+                activationCompleted = true;
+            },
+            acceptConfirmationCode: async (code) => {
+                if (activationCompleted)
+                    return;
+                const ok = await verifyDeviceConfirmationCode({
+                    activationKey: identity.activationKey,
+                    publicIdentityKey: identity.publicIdentityKey,
+                    nonce,
+                    confirmationCode: code,
+                });
+                if (!ok) {
+                    throw new Error("Invalid device confirmation code");
+                }
+                activationCompleted = true;
+            },
+        });
+        if (!activationCompleted) {
+            throw new Error("Device activation did not complete");
+        }
+        if (onlineConnectInfo) {
+            connectInfo = onlineConnectInfo;
+        }
+        else {
+            const bootstrap = await fetchDeviceBootstrap({
+                trellisUrl: args.trellisUrl,
+                publicIdentityKey: identity.publicIdentityKey,
+                identitySeed: identity.identitySeed,
+                contractDigest,
+            });
+            if (bootstrap.status !== "ready") {
+                throw new Error(`Device bootstrap is not ready: ${bootstrap.status}`);
+            }
+            connectInfo = bootstrap.connectInfo;
+        }
+    }
+    if (!connectInfo) {
+        throw new Error("Device bootstrap did not return runtime connect info");
+    }
+    const transport = await deps.loadTransport();
+    const nc = await transport.connect({
+        servers: selectRuntimeTransportServers(connectInfo.transports),
+        inboxPrefix: `_INBOX.${identity.publicIdentityKey.slice(0, 16)}`,
+        authenticator: [
+            createDeviceNatsAuthTokenAuthenticator({
+                publicIdentityKey: identity.publicIdentityKey,
+                identitySeed: identity.identitySeed,
+                contractDigest,
+                now: deps.now,
+            }),
+            jwtAuthenticator(connectInfo.transport.sentinel.jwt, new TextEncoder().encode(connectInfo.transport.sentinel.seed)),
+        ],
+    });
+    const trellis = new Trellis(args.contract.CONTRACT_ID, nc, {
+        sessionKey: identity.publicIdentityKey,
+        sign: (data) => signIdentityBytes(identity.identitySeed, data),
+    }, {
+        api: args.contract.API.trellis,
+    });
+    const health = new ServiceHealth({
+        serviceName: args.contract.CONTRACT?.displayName ?? args.contract.CONTRACT_ID,
+        kind: "device",
+        instanceId: connectInfo.instanceId,
+        contractId: connectInfo.contractId,
+        contractDigest: connectInfo.contractDigest,
+        publishIntervalMs: 30_000,
+    });
+    health.setInfo({
+        info: {
+            profileId: connectInfo.profileId,
+        },
+    });
+    health.add("nats", () => ({
+        status: nc.isClosed() ? "failed" : "ok",
+        ...(nc.isClosed() ? { summary: "NATS connection closed" } : {}),
+    }));
+    const heartbeatEventEnabled = Boolean(args.contract.API.trellis.events?.["Health.Heartbeat"]);
+    let heartbeatTimer;
+    let publishingHeartbeat = false;
+    const stopHeartbeat = () => {
+        if (heartbeatTimer !== undefined) {
+            clearInterval(heartbeatTimer);
+            heartbeatTimer = undefined;
+        }
+    };
+    const publishHeartbeat = async () => {
+        if (!heartbeatEventEnabled || publishingHeartbeat) {
+            return;
+        }
+        publishingHeartbeat = true;
+        try {
+            const heartbeat = await health.heartbeat();
+            await trellis.publish("Health.Heartbeat", heartbeat);
+        }
+        finally {
+            publishingHeartbeat = false;
+        }
+    };
+    if (heartbeatEventEnabled) {
+        await publishHeartbeat();
+        heartbeatTimer = setInterval(() => {
+            void publishHeartbeat();
+        }, health.publishIntervalMs);
+        void nc.closed().finally(stopHeartbeat);
+    }
+    return Object.assign(trellis, { health });
+}
+export const TrellisDevice = {
+    connect(args) {
+        return connectDeviceWithDeps(args, defaultDeps);
+    },
+};

package/esm/env.d.ts

@@ -0,0 +1,2 @@
+export { getEnv } from "./telemetry/env.js";
+//# sourceMappingURL=env.d.ts.map

package/esm/env.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"env.d.ts","sourceRoot":"","sources":["../src/env.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC"}

package/esm/env.js

@@ -0,0 +1 @@
+export { getEnv } from "./telemetry/env.js";

package/esm/errors/AuthError.d.ts

@@ -0,0 +1,30 @@
+import Type, { type Static } from "typebox";
+import { TrellisError } from "./TrellisError.js";
+export declare const AuthErrorDataSchema: Type.TObject<{
+    id: Type.TString;
+    type: Type.TLiteral<"AuthError">;
+    message: Type.TString;
+    reason: Type.TUnion<[Type.TLiteral<"invalid_request">, Type.TLiteral<"missing_session_key">, Type.TLiteral<"missing_proof">, Type.TLiteral<"session_not_found">, Type.TLiteral<"session_expired">, Type.TLiteral<"invalid_signature">, Type.TLiteral<"user_not_found">, Type.TLiteral<"user_inactive">, Type.TLiteral<"unknown_device">, Type.TLiteral<"device_profile_not_found">, Type.TLiteral<"device_profile_disabled">, Type.TLiteral<"device_activation_revoked">, Type.TLiteral<"unknown_service">, Type.TLiteral<"service_disabled">, Type.TLiteral<"iat_out_of_range">, Type.TLiteral<"invalid_binding_token">, Type.TLiteral<"session_corrupted">, Type.TLiteral<"session_already_bound">, Type.TLiteral<"authtoken_already_used">, Type.TLiteral<"oauth_session_key_mismatch">, Type.TLiteral<"service_role_on_user">, Type.TLiteral<"reply_subject_mismatch">, Type.TLiteral<"insufficient_permissions">, Type.TLiteral<"forbidden">, Type.TLiteral<"missing_flow_id">, Type.TLiteral<"missing_profile_id">, Type.TLiteral<"device_activation_flow_not_found">, Type.TLiteral<"device_activation_flow_expired">, Type.TLiteral<"device_activation_rejected">, Type.TLiteral<"device_identity_key_mismatch">, Type.TLiteral<"invalid_device_qr_mac">]>;
+    context: Type.TOptional<Type.TRecord<"^.*$", Type.TUnknown>>;
+    traceId: Type.TOptional<Type.TString>;
+}>;
+export type AuthErrorData = Static<typeof AuthErrorDataSchema>;
+/**
+ * Error for authentication and authorization failures.
+ */
+export declare class AuthError extends TrellisError<AuthErrorData> {
+    readonly name: "AuthError";
+    readonly reason: AuthErrorData["reason"];
+    constructor(options: ErrorOptions & {
+        reason: AuthErrorData["reason"];
+        context?: Record<string, unknown>;
+        id?: string;
+    });
+    /**
+     * Serializes error to a plain object.
+     *
+     * @returns Plain object representation of the error
+     */
+    toSerializable(): AuthErrorData;
+}
+//# sourceMappingURL=AuthError.d.ts.map

package/esm/errors/AuthError.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"AuthError.d.ts","sourceRoot":"","sources":["../../src/errors/AuthError.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,EAAE,EAAE,KAAK,MAAM,EAAE,MAAM,SAAS,CAAC;AAC5C,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAEjD,eAAO,MAAM,mBAAmB;;;;;;;EAuC9B,CAAC;AACH,MAAM,MAAM,aAAa,GAAG,MAAM,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAE/D;;GAEG;AACH,qBAAa,SAAU,SAAQ,YAAY,CAAC,aAAa,CAAC;IACxD,SAAkB,IAAI,cAAwB;IAC9C,QAAQ,CAAC,MAAM,EAAE,aAAa,CAAC,QAAQ,CAAC,CAAC;gBAGvC,OAAO,EAAE,YAAY,GAAG;QACtB,MAAM,EAAE,aAAa,CAAC,QAAQ,CAAC,CAAC;QAChC,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAClC,EAAE,CAAC,EAAE,MAAM,CAAC;KACb;IAOH;;;;OAIG;IACM,cAAc,IAAI,aAAa;CAOzC"}