@qlever-llc/trellis 0.7.0 → 0.8.0-rc.3

package/script/npm/src/.build/generated-sdk/trellis-core/types.d.ts

@@ -0,0 +1,180 @@
+import type { RpcHandlerFn } from "@qlever-llc/trellis";
+import type { API } from "./api.js";
+export declare const CONTRACT_ID: "trellis.core@v1";
+export declare const CONTRACT_DIGEST: "amyMSJiS9ssGDCgyUwAY5SoACIzEfwwuFyV5rT214zk";
+export type TrellisBindingsGetInput = {
+    contractId?: string;
+    digest?: string;
+};
+export type TrellisBindingsGetOutput = {
+    binding?: {
+        contractId: string;
+        digest: string;
+        resources: {
+            jobs?: {
+                namespace: string;
+                queues: {
+                    [k: string]: {
+                        ackWaitMs: number;
+                        backoffMs: Array<number>;
+                        concurrency: number;
+                        consumerName: string;
+                        defaultDeadlineMs?: number;
+                        dlq: boolean;
+                        logs: boolean;
+                        maxDeliver: number;
+                        payload: {
+                            schema: string;
+                        };
+                        progress: boolean;
+                        publishPrefix: string;
+                        queueType: string;
+                        result?: {
+                            schema: string;
+                        };
+                        workSubject: string;
+                    };
+                };
+                workStream?: string;
+            };
+            kv?: {
+                [k: string]: {
+                    bucket: string;
+                    history: number;
+                    maxValueBytes?: number;
+                    ttlMs: number;
+                };
+            };
+            store?: {
+                [k: string]: {
+                    maxObjectBytes?: number;
+                    maxTotalBytes?: number;
+                    name: string;
+                    ttlMs: number;
+                };
+            };
+        };
+    };
+};
+export type TrellisCatalogInput = {};
+export type TrellisCatalogOutput = {
+    catalog: {
+        contracts: Array<{
+            description: string;
+            digest: string;
+            displayName: string;
+            id: string;
+        }>;
+        format: "trellis.catalog.v1";
+    };
+};
+export type TrellisContractGetInput = {
+    digest: string;
+};
+export type TrellisContractGetOutput = {
+    contract: {
+        description: string;
+        displayName: string;
+        errors?: {
+            [k: string]: {};
+        };
+        events?: {
+            [k: string]: {};
+        };
+        exports?: {
+            schemas?: Array<string>;
+        };
+        format: "trellis.contract.v1";
+        id: string;
+        jobs?: {
+            [k: string]: {
+                ackWaitMs?: number;
+                backoffMs?: Array<number>;
+                concurrency?: number;
+                defaultDeadlineMs?: number;
+                dlq?: boolean;
+                logs?: boolean;
+                maxDeliver?: number;
+                payload: {
+                    schema: string;
+                };
+                progress?: boolean;
+                result?: {
+                    schema: string;
+                };
+            };
+        };
+        kind: ("service" | "app" | "device" | "agent");
+        operations?: {
+            [k: string]: {};
+        };
+        resources?: {
+            kv?: {
+                [k: string]: {
+                    history?: number;
+                    maxValueBytes?: number;
+                    purpose: string;
+                    required?: boolean;
+                    schema: {
+                        schema: string;
+                    };
+                    ttlMs?: number;
+                };
+            };
+            store?: {
+                [k: string]: {
+                    maxObjectBytes?: number;
+                    maxTotalBytes?: number;
+                    purpose: string;
+                    required?: boolean;
+                    ttlMs?: number;
+                };
+            };
+        };
+        rpc?: {
+            [k: string]: {};
+        };
+        schemas?: {
+            [k: string]: ({} | boolean);
+        };
+        state?: {
+            [k: string]: {
+                acceptedVersions?: {
+                    [k: string]: {
+                        schema: string;
+                    };
+                };
+                kind: ("value" | "map");
+                schema: {
+                    schema: string;
+                };
+                stateVersion?: string;
+            };
+        };
+        uses?: {
+            [k: string]: {};
+        };
+    };
+};
+export interface RpcMap {
+    "Trellis.Bindings.Get": {
+        input: TrellisBindingsGetInput;
+        output: TrellisBindingsGetOutput;
+    };
+    "Trellis.Catalog": {
+        input: TrellisCatalogInput;
+        output: TrellisCatalogOutput;
+    };
+    "Trellis.Contract.Get": {
+        input: TrellisContractGetInput;
+        output: TrellisContractGetOutput;
+    };
+}
+export type TrellisBindingsGetHandler = RpcHandlerFn<typeof API.owned, "Trellis.Bindings.Get">;
+export type TrellisCatalogHandler = RpcHandlerFn<typeof API.owned, "Trellis.Catalog">;
+export type TrellisContractGetHandler = RpcHandlerFn<typeof API.owned, "Trellis.Contract.Get">;
+export interface EventMap {
+}
+export interface SubjectMap {
+}
+//# sourceMappingURL=types.d.ts.map

package/script/npm/src/.build/generated-sdk/trellis-core/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../../../../src/.build/generated-sdk/trellis-core/types.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACxD,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,UAAU,CAAC;AAEpC,eAAO,MAAM,WAAW,EAAG,iBAA0B,CAAC;AACtD,eAAO,MAAM,eAAe,EAAG,6CAAsD,CAAC;AAEtF,MAAM,MAAM,uBAAuB,GAAG;IAAE,UAAU,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAC;CAAE,CAAC;AAChF,MAAM,MAAM,wBAAwB,GAAG;IAAE,OAAO,CAAC,EAAE;QAAE,UAAU,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE;YAAE,IAAI,CAAC,EAAE;gBAAE,SAAS,EAAE,MAAM,CAAC;gBAAC,MAAM,EAAE;oBAAE,CAAC,CAAC,EAAE,MAAM,GAAG;wBAAE,SAAS,EAAE,MAAM,CAAC;wBAAC,SAAS,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;wBAAC,WAAW,EAAE,MAAM,CAAC;wBAAC,YAAY,EAAE,MAAM,CAAC;wBAAC,iBAAiB,CAAC,EAAE,MAAM,CAAC;wBAAC,GAAG,EAAE,OAAO,CAAC;wBAAC,IAAI,EAAE,OAAO,CAAC;wBAAC,UAAU,EAAE,MAAM,CAAC;wBAAC,OAAO,EAAE;4BAAE,MAAM,EAAE,MAAM,CAAC;yBAAE,CAAC;wBAAC,QAAQ,EAAE,OAAO,CAAC;wBAAC,aAAa,EAAE,MAAM,CAAC;wBAAC,SAAS,EAAE,MAAM,CAAC;wBAAC,MAAM,CAAC,EAAE;4BAAE,MAAM,EAAE,MAAM,CAAC;yBAAE,CAAC;wBAAC,WAAW,EAAE,MAAM,CAAC;qBAAE,CAAC;iBAAE,CAAC;gBAAC,UAAU,CAAC,EAAE,MAAM,CAAC;aAAE,CAAC;YAAC,EAAE,CAAC,EAAE;gBAAE,CAAC,CAAC,EAAE,MAAM,GAAG;oBAAE,MAAM,EAAE,MAAM,CAAC;oBAAC,OAAO,EAAE,MAAM,CAAC;oBAAC,aAAa,CAAC,EAAE,MAAM,CAAC;oBAAC,KAAK,EAAE,MAAM,CAAC;iBAAE,CAAC;aAAE,CAAC;YAAC,KAAK,CAAC,EAAE;gBAAE,CAAC,CAAC,EAAE,MAAM,GAAG;oBAAE,cAAc,CAAC,EAAE,MAAM,CAAC;oBAAC,aAAa,CAAC,EAAE,MAAM,CAAC;oBAAC,IAAI,EAAE,MAAM,CAAC;oBAAC,KAAK,EAAE,MAAM,CAAC;iBAAE,CAAC;aAAE,CAAC;SAAE,CAAC;KAAE,CAAC;CAAE,CAAC;AAErsB,MAAM,MAAM,mBAAmB,GAAG,EAAI,CAAC;AACvC,MAAM,MAAM,oBAAoB,GAAG;IAAE,OAAO,EAAE;QAAE,SAAS,EAAE,KAAK,CAAC;YAAE,WAAW,EAAE,MAAM,CAAC;YAAC,MAAM,EAAE,MAAM,CAAC;YAAC,WAAW,EAAE,MAAM,CAAC;YAAC,EAAE,EAAE,MAAM,CAAC;SAAE,CAAC,CAAC;QAAC,MAAM,EAAE,oBAAoB,CAAC;KAAE,CAAC;CAAE,CAAC;AAEhL,MAAM,MAAM,uBAAuB,GAAG;IAAE,MAAM,EAAE,MAAM,CAAC;CAAE,CAAC;AAC1D,MAAM,MAAM,wBAAwB,GAAG;IAAE,QAAQ,EAAE;QAAE,WAAW,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE;YAAE,CAAC,CAAC,EAAE,MAAM,GAAG,EAAI,CAAC;SAAE,CAAC;QAAC,MAAM,CAAC,EAAE;YAAE,CAAC,CAAC,EAAE,MAAM,GAAG,EAAI,CAAC;SAAE,CAAC;QAAC,OAAO,CAAC,EAAE;YAAE,OAAO,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;SAAE,CAAC;QAAC,MAAM,EAAE,qBAAqB,CAAC;QAAC,EAAE,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE;YAAE,CAAC,CAAC,EAAE,MAAM,GAAG;gBAAE,SAAS,CAAC,EAAE,MAAM,CAAC;gBAAC,SAAS,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;gBAAC,WAAW,CAAC,EAAE,MAAM,CAAC;gBAAC,iBAAiB,CAAC,EAAE,MAAM,CAAC;gBAAC,GAAG,CAAC,EAAE,OAAO,CAAC;gBAAC,IAAI,CAAC,EAAE,OAAO,CAAC;gBAAC,UAAU,CAAC,EAAE,MAAM,CAAC;gBAAC,OAAO,EAAE;oBAAE,MAAM,EAAE,MAAM,CAAC;iBAAE,CAAC;gBAAC,QAAQ,CAAC,EAAE,OAAO,CAAC;gBAAC,MAAM,CAAC,EAAE;oBAAE,MAAM,EAAE,MAAM,CAAC;iBAAE,CAAC;aAAE,CAAC;SAAE,CAAC;QAAC,IAAI,EAAE,CAAC,SAAS,GAAG,KAAK,GAAG,QAAQ,GAAG,OAAO,CAAC,CAAC;QAAC,UAAU,CAAC,EAAE;YAAE,CAAC,CAAC,EAAE,MAAM,GAAG,EAAI,CAAC;SAAE,CAAC;QAAC,SAAS,CAAC,EAAE;YAAE,EAAE,CAAC,EAAE;gBAAE,CAAC,CAAC,EAAE,MAAM,GAAG;oBAAE,OAAO,CAAC,EAAE,MAAM,CAAC;oBAAC,aAAa,CAAC,EAAE,MAAM,CAAC;oBAAC,OAAO,EAAE,MAAM,CAAC;oBAAC,QAAQ,CAAC,EAAE,OAAO,CAAC;oBAAC,MAAM,EAAE;wBAAE,MAAM,EAAE,MAAM,CAAC;qBAAE,CAAC;oBAAC,KAAK,CAAC,EAAE,MAAM,CAAC;iBAAE,CAAC;aAAE,CAAC;YAAC,KAAK,CAAC,EAAE;gBAAE,CAAC,CAAC,EAAE,MAAM,GAAG;oBAAE,cAAc,CAAC,EAAE,MAAM,CAAC;oBAAC,aAAa,CAAC,EAAE,MAAM,CAAC;oBAAC,OAAO,EAAE,MAAM,CAAC;oBAAC,QAAQ,CAAC,EAAE,OAAO,CAAC;oBAAC,KAAK,CAAC,EAAE,MAAM,CAAC;iBAAE,CAAC;aAAE,CAAC;SAAE,CAAC;QAAC,GAAG,CAAC,EAAE;YAAE,CAAC,CAAC,EAAE,MAAM,GAAG,EAAI,CAAC;SAAE,CAAC;QAAC,OAAO,CAAC,EAAE;YAAE,CAAC,CAAC,EAAE,MAAM,GAAG,CAAC,EAAI,GAAG,OAAO,CAAC,CAAC;SAAE,CAAC;QAAC,KAAK,CAAC,EAAE;YAAE,CAAC,CAAC,EAAE,MAAM,GAAG;gBAAE,gBAAgB,CAAC,EAAE;oBAAE,CAAC,CAAC,EAAE,MAAM,GAAG;wBAAE,MAAM,EAAE,MAAM,CAAC;qBAAE,CAAC;iBAAE,CAAC;gBAAC,IAAI,EAAE,CAAC,OAAO,GAAG,KAAK,CAAC,CAAC;gBAAC,MAAM,EAAE;oBAAE,MAAM,EAAE,MAAM,CAAC;iBAAE,CAAC;gBAAC,YAAY,CAAC,EAAE,MAAM,CAAC;aAAE,CAAC;SAAE,CAAC;QAAC,IAAI,CAAC,EAAE;YAAE,CAAC,CAAC,EAAE,MAAM,GAAG,EAAI,CAAC;SAAE,CAAC;KAAE,CAAC;CAAE,CAAC;AAEhpC,MAAM,WAAW,MAAM;IACrB,sBAAsB,EAAE;QAAE,KAAK,EAAE,uBAAuB,CAAC;QAAC,MAAM,EAAE,wBAAwB,CAAC;KAAE,CAAC;IAC9F,iBAAiB,EAAE;QAAE,KAAK,EAAE,mBAAmB,CAAC;QAAC,MAAM,EAAE,oBAAoB,CAAC;KAAE,CAAC;IACjF,sBAAsB,EAAE;QAAE,KAAK,EAAE,uBAAuB,CAAC;QAAC,MAAM,EAAE,wBAAwB,CAAC;KAAE,CAAC;CAC/F;AAED,MAAM,MAAM,yBAAyB,GAAG,YAAY,CAAC,OAAO,GAAG,CAAC,KAAK,EAAE,sBAAsB,CAAC,CAAC;AAC/F,MAAM,MAAM,qBAAqB,GAAG,YAAY,CAAC,OAAO,GAAG,CAAC,KAAK,EAAE,iBAAiB,CAAC,CAAC;AACtF,MAAM,MAAM,yBAAyB,GAAG,YAAY,CAAC,OAAO,GAAG,CAAC,KAAK,EAAE,sBAAsB,CAAC,CAAC;AAE/F,MAAM,WAAW,QAAQ;CACxB;AAED,MAAM,WAAW,UAAU;CAC1B"}

package/script/npm/src/.build/generated-sdk/trellis-core/types.js

@@ -0,0 +1,5 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.CONTRACT_DIGEST = exports.CONTRACT_ID = void 0;
+exports.CONTRACT_ID = "trellis.core@v1";
+exports.CONTRACT_DIGEST = "amyMSJiS9ssGDCgyUwAY5SoACIzEfwwuFyV5rT214zk";

package/script/npm/src/_dnt.polyfills.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"_dnt.polyfills.d.ts","sourceRoot":"","sources":["../../../src/_dnt.polyfills.ts"],"names":[],"mappings":"AAAA,OAAO,CAAC,MAAM,CAAC;IACb,UAAU,KAAK;QACb,KAAK,CAAC,EAAE,OAAO,CAAC;KACjB;CACF;AAED,OAAO,EAAE,CAAC;AAgBV,OAAO,CAAC,MAAM,CAAC;IACb,UAAU,MAAM;QACd;;;;WAIG;QACH,MAAM,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC;KAC5C;CACF;AAED,OAAO,EAAE,CAAC"}

package/script/npm/src/_dnt.shims.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"_dnt.shims.d.ts","sourceRoot":"","sources":["../../../src/_dnt.shims.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,IAAI,EAAE,MAAM,iBAAiB,CAAC;AAKvC,eAAO,MAAM,aAAa;;CAA2C,CAAC"}

package/script/npm/src/auth/browser/login.d.ts

@@ -0,0 +1,34 @@
+import { type AuthStartResponse, type BindResponse, type BindSuccessResponse } from "../schemas.js";
+import type { SessionKeyHandle } from "./session.js";
+export type { AuthStartFlowResponse, AuthStartRequest, AuthStartResponse, BindResponse, BindSuccessResponse, ContractApproval, SentinelCreds, } from "../schemas.js";
+export type AuthConfig = {
+    authUrl: string;
+};
+export declare function buildLoginUrl(config: AuthConfig, provider: string | undefined, redirectTo: string, handle: SessionKeyHandle, contract: Record<string, unknown>, context?: unknown): Promise<string>;
+export declare function buildLoginUrl(args: {
+    authUrl: string;
+    provider?: string;
+    redirectTo: string;
+    handle: SessionKeyHandle;
+    contract: Record<string, unknown>;
+    context?: unknown;
+}): Promise<string>;
+export declare function buildLoginUrl(args: {
+    config: AuthConfig;
+    provider?: string;
+    redirectTo: string;
+    handle: SessionKeyHandle;
+    contract: Record<string, unknown>;
+    context?: unknown;
+}): Promise<string>;
+export declare function startAuthRequest(args: {
+    authUrl: string;
+    provider?: string;
+    redirectTo: string;
+    handle: SessionKeyHandle;
+    contract: Record<string, unknown>;
+    context?: unknown;
+}): Promise<AuthStartResponse>;
+export declare function isBindSuccessResponse(response: BindResponse): response is BindSuccessResponse;
+export declare function bindFlow(config: AuthConfig, handle: SessionKeyHandle, flowId: string): Promise<BindResponse>;
+//# sourceMappingURL=login.d.ts.map

package/script/npm/src/auth/browser/login.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"login.d.ts","sourceRoot":"","sources":["../../../../../src/auth/browser/login.ts"],"names":[],"mappings":"AACA,OAAO,EAGL,KAAK,iBAAiB,EAEtB,KAAK,YAAY,EAEjB,KAAK,mBAAmB,EAEzB,MAAM,eAAe,CAAC;AACvB,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAGrD,YAAY,EACV,qBAAqB,EACrB,gBAAgB,EAChB,iBAAiB,EACjB,YAAY,EACZ,mBAAmB,EACnB,gBAAgB,EAChB,aAAa,GACd,MAAM,eAAe,CAAC;AAEvB,MAAM,MAAM,UAAU,GAAG;IACvB,OAAO,EAAE,MAAM,CAAC;CACjB,CAAC;AA2BF,wBAAsB,aAAa,CACjC,MAAM,EAAE,UAAU,EAClB,QAAQ,EAAE,MAAM,GAAG,SAAS,EAC5B,UAAU,EAAE,MAAM,EAClB,MAAM,EAAE,gBAAgB,EACxB,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EACjC,OAAO,CAAC,EAAE,OAAO,GAChB,OAAO,CAAC,MAAM,CAAC,CAAC;AACnB,wBAAsB,aAAa,CACjC,IAAI,EAAE;IACJ,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,gBAAgB,CAAC;IACzB,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAClC,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB,GACA,OAAO,CAAC,MAAM,CAAC,CAAC;AACnB,wBAAsB,aAAa,CACjC,IAAI,EAAE;IACJ,MAAM,EAAE,UAAU,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,gBAAgB,CAAC;IACzB,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAClC,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB,GACA,OAAO,CAAC,MAAM,CAAC,CAAC;AA0CnB,wBAAsB,gBAAgB,CAAC,IAAI,EAAE;IAC3C,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,gBAAgB,CAAC;IACzB,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAClC,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAgC7B;AAwCD,wBAAgB,qBAAqB,CACnC,QAAQ,EAAE,YAAY,GACrB,QAAQ,IAAI,mBAAmB,CAEjC;AAED,wBAAsB,QAAQ,CAC5B,MAAM,EAAE,UAAU,EAClB,MAAM,EAAE,gBAAgB,EACxB,MAAM,EAAE,MAAM,GACb,OAAO,CAAC,YAAY,CAAC,CAwBvB"}

package/script/npm/src/auth/browser/login.js

@@ -0,0 +1,104 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.buildLoginUrl = buildLoginUrl;
+exports.startAuthRequest = startAuthRequest;
+exports.isBindSuccessResponse = isBindSuccessResponse;
+exports.bindFlow = bindFlow;
+const value_1 = require("typebox/value");
+const schemas_js_1 = require("../schemas.js");
+const session_js_1 = require("./session.js");
+function contextRecord(value) {
+    if (!value || typeof value !== "object" || Array.isArray(value)) {
+        return undefined;
+    }
+    return value;
+}
+async function buildLoginUrl(argsOrConfig, provider, redirectTo, handle, contract, context) {
+    const resolved = isNestedBuildLoginUrlArgs(argsOrConfig)
+        ? argsOrConfig
+        : isFlatBuildLoginUrlArgs(argsOrConfig)
+            ? {
+                config: { authUrl: argsOrConfig.authUrl },
+                provider: argsOrConfig.provider,
+                redirectTo: argsOrConfig.redirectTo,
+                handle: argsOrConfig.handle,
+                contract: argsOrConfig.contract,
+                context: argsOrConfig.context,
+            }
+            : buildLoginUrlArgsFromPositional(argsOrConfig, provider, redirectTo, handle, contract, context);
+    const response = await startAuthRequest({
+        authUrl: resolved.config.authUrl,
+        provider: resolved.provider,
+        redirectTo: resolved.redirectTo,
+        handle: resolved.handle,
+        contract: resolved.contract,
+        context: resolved.context,
+    });
+    if (response.status !== "flow_started") {
+        throw new Error("Auth request completed without starting a browser flow");
+    }
+    return response.loginUrl;
+}
+async function startAuthRequest(args) {
+    const context = contextRecord(args.context);
+    const sig = await (0, session_js_1.oauthInitSig)(args.handle, args.redirectTo, context, args.provider, args.contract);
+    const request = value_1.Value.Parse(schemas_js_1.AuthStartRequestSchema, {
+        redirectTo: args.redirectTo,
+        sessionKey: (0, session_js_1.getPublicSessionKey)(args.handle),
+        sig,
+        contract: args.contract,
+        ...(args.provider ? { provider: args.provider } : {}),
+        ...(context ? { context } : {}),
+    });
+    const response = await fetch(`${args.authUrl}/auth/requests`, {
+        method: "POST",
+        headers: { "Content-Type": "application/json" },
+        body: JSON.stringify(request),
+    });
+    if (!response.ok) {
+        const text = await response.text();
+        throw new Error(`Auth request failed: ${response.status} ${text}`);
+    }
+    return value_1.Value.Parse(schemas_js_1.AuthStartResponseSchema, await response.json());
+}
+function buildLoginUrlArgsFromPositional(config, provider, redirectTo, handle, contract, context) {
+    if (redirectTo === undefined || handle === undefined || contract === undefined) {
+        throw new TypeError("buildLoginUrl requires redirectTo, handle, and contract");
+    }
+    return {
+        config,
+        provider,
+        redirectTo,
+        handle,
+        contract,
+        context,
+    };
+}
+function isNestedBuildLoginUrlArgs(value) {
+    return "config" in value;
+}
+function isFlatBuildLoginUrlArgs(value) {
+    return "authUrl" in value && "redirectTo" in value && "handle" in value &&
+        "contract" in value;
+}
+function isBindSuccessResponse(response) {
+    return response.status === "bound";
+}
+async function bindFlow(config, handle, flowId) {
+    const sessionKey = (0, session_js_1.getPublicSessionKey)(handle);
+    const sig = await (0, session_js_1.bindFlowSig)(handle, flowId);
+    const response = await fetch(`${config.authUrl}/auth/flow/${encodeURIComponent(flowId)}/bind`, {
+        method: "POST",
+        headers: { "Content-Type": "application/json" },
+        body: JSON.stringify({ sessionKey, sig }),
+    });
+    if (!response.ok) {
+        const text = await response.text();
+        throw new Error(`Bind failed: ${response.status} ${text}`);
+    }
+    const payload = await response.json();
+    if (payload && typeof payload === "object" && payload.status === "expired") {
+        throw new Error("Bind failed: expired");
+    }
+    return value_1.Value.Parse(schemas_js_1.BindResponseSchema, payload);
+}

package/script/npm/src/auth/browser/portal.d.ts

@@ -0,0 +1,11 @@
+import { type PortalFlowState } from "../protocol.js";
+import type { ApprovalDecision } from "../schemas.js";
+import type { AuthConfig } from "./login.js";
+export type { PortalFlowState } from "../protocol.js";
+export type { ApprovalDecision } from "../schemas.js";
+export declare function portalFlowIdFromUrl(url: URL): string | null;
+export declare function fetchPortalFlowState(config: AuthConfig, flowId: string): Promise<PortalFlowState>;
+export declare function portalProviderLoginUrl(config: AuthConfig, providerId: string, flowId: string): string;
+export declare function submitPortalApproval(config: AuthConfig, flowId: string, decision: ApprovalDecision): Promise<PortalFlowState>;
+export declare function portalRedirectLocation(state: PortalFlowState | null): string | null;
+//# sourceMappingURL=portal.d.ts.map

package/script/npm/src/auth/browser/portal.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"portal.d.ts","sourceRoot":"","sources":["../../../../../src/auth/browser/portal.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,eAAe,EAAyB,MAAM,gBAAgB,CAAC;AAC7E,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AACtD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAG7C,YAAY,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AACtD,YAAY,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AAMtD,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,GAAG,GAAG,MAAM,GAAG,IAAI,CAE3D;AAED,wBAAsB,oBAAoB,CACxC,MAAM,EAAE,UAAU,EAClB,MAAM,EAAE,MAAM,GACb,OAAO,CAAC,eAAe,CAAC,CAY1B;AAED,wBAAgB,sBAAsB,CACpC,MAAM,EAAE,UAAU,EAClB,UAAU,EAAE,MAAM,EAClB,MAAM,EAAE,MAAM,GACb,MAAM,CAKR;AAED,wBAAsB,oBAAoB,CACxC,MAAM,EAAE,UAAU,EAClB,MAAM,EAAE,MAAM,EACd,QAAQ,EAAE,gBAAgB,GACzB,OAAO,CAAC,eAAe,CAAC,CAkB1B;AAED,wBAAgB,sBAAsB,CACpC,KAAK,EAAE,eAAe,GAAG,IAAI,GAC5B,MAAM,GAAG,IAAI,CAEf"}

package/script/npm/src/auth/browser/portal.js

@@ -0,0 +1,40 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.portalFlowIdFromUrl = portalFlowIdFromUrl;
+exports.fetchPortalFlowState = fetchPortalFlowState;
+exports.portalProviderLoginUrl = portalProviderLoginUrl;
+exports.submitPortalApproval = submitPortalApproval;
+exports.portalRedirectLocation = portalRedirectLocation;
+const protocol_js_1 = require("../protocol.js");
+const value_1 = require("typebox/value");
+function authBaseUrl(config) {
+    return config.authUrl.replace(/\/$/, "");
+}
+function portalFlowIdFromUrl(url) {
+    return url.searchParams.get("flowId");
+}
+async function fetchPortalFlowState(config, flowId) {
+    const response = await fetch(`${authBaseUrl(config)}/auth/flow/${encodeURIComponent(flowId)}`);
+    if (!response.ok) {
+        throw new Error(`Failed to load portal flow (${response.status})`);
+    }
+    return value_1.Value.Parse(protocol_js_1.PortalFlowStateSchema, await response.json());
+}
+function portalProviderLoginUrl(config, providerId, flowId) {
+    const base = `${authBaseUrl(config)}/auth/login/${encodeURIComponent(providerId)}`;
+    return `${base}?flowId=${encodeURIComponent(flowId)}`;
+}
+async function submitPortalApproval(config, flowId, decision) {
+    const response = await fetch(`${authBaseUrl(config)}/auth/flow/${encodeURIComponent(flowId)}/approval`, {
+        method: "POST",
+        headers: { "content-type": "application/json" },
+        body: JSON.stringify({ approved: decision === "approved" }),
+    });
+    if (!response.ok) {
+        throw new Error(`Approval request failed (${response.status})`);
+    }
+    return value_1.Value.Parse(protocol_js_1.PortalFlowStateSchema, await response.json());
+}
+function portalRedirectLocation(state) {
+    return state?.status === "redirect" ? state.location : null;
+}

package/script/npm/src/auth/browser/session.d.ts

@@ -0,0 +1,18 @@
+export type SessionKeyHandle = {
+    privateKey: CryptoKey;
+    publicKey: CryptoKey;
+    publicKeyRaw: Uint8Array;
+    sessionKey: string;
+};
+export declare function generateSessionKey(): Promise<SessionKeyHandle>;
+export declare function loadSessionKey(): Promise<SessionKeyHandle | null>;
+export declare function getOrCreateSessionKey(): Promise<SessionKeyHandle>;
+export declare function signBytes(handle: SessionKeyHandle, data: Uint8Array): Promise<Uint8Array>;
+export declare function getPublicSessionKey(handle: SessionKeyHandle): string;
+export declare function oauthInitSig(handle: SessionKeyHandle, redirectTo: string, context?: unknown, provider?: string, contract?: Record<string, unknown>): Promise<string>;
+export declare function bindFlowSig(handle: SessionKeyHandle, flowId: string): Promise<string>;
+export declare function natsConnectSigForIat(handle: SessionKeyHandle, iat: number, contractDigest: string): Promise<string>;
+export declare function createRpcProof(handle: SessionKeyHandle, subject: string, payload: Uint8Array): Promise<string>;
+export declare function clearSessionKey(): Promise<void>;
+export declare function hasSessionKey(): Promise<boolean>;
+//# sourceMappingURL=session.d.ts.map

package/script/npm/src/auth/browser/session.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"session.d.ts","sourceRoot":"","sources":["../../../../../src/auth/browser/session.ts"],"names":[],"mappings":"AAgBA,MAAM,MAAM,gBAAgB,GAAG;IAC7B,UAAU,EAAE,SAAS,CAAC;IACtB,SAAS,EAAE,SAAS,CAAC;IACrB,YAAY,EAAE,UAAU,CAAC;IACzB,UAAU,EAAE,MAAM,CAAC;CACpB,CAAC;AAEF,wBAAsB,kBAAkB,IAAI,OAAO,CAAC,gBAAgB,CAAC,CAoBpE;AAED,wBAAsB,cAAc,IAAI,OAAO,CAAC,gBAAgB,GAAG,IAAI,CAAC,CASvE;AAED,wBAAsB,qBAAqB,IAAI,OAAO,CAAC,gBAAgB,CAAC,CAIvE;AAED,wBAAsB,SAAS,CAC7B,MAAM,EAAE,gBAAgB,EACxB,IAAI,EAAE,UAAU,GACf,OAAO,CAAC,UAAU,CAAC,CAOrB;AAED,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,gBAAgB,GAAG,MAAM,CAEpE;AAED,wBAAsB,YAAY,CAChC,MAAM,EAAE,gBAAgB,EACxB,UAAU,EAAE,MAAM,EAClB,OAAO,CAAC,EAAE,OAAO,EACjB,QAAQ,CAAC,EAAE,MAAM,EACjB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GACjC,OAAO,CAAC,MAAM,CAAC,CAUjB;AAED,wBAAsB,WAAW,CAC/B,MAAM,EAAE,gBAAgB,EACxB,MAAM,EAAE,MAAM,GACb,OAAO,CAAC,MAAM,CAAC,CAIjB;AAED,wBAAsB,oBAAoB,CACxC,MAAM,EAAE,gBAAgB,EACxB,GAAG,EAAE,MAAM,EACX,cAAc,EAAE,MAAM,GACrB,OAAO,CAAC,MAAM,CAAC,CAQjB;AAED,wBAAsB,cAAc,CAClC,MAAM,EAAE,gBAAgB,EACxB,OAAO,EAAE,MAAM,EACf,OAAO,EAAE,UAAU,GAClB,OAAO,CAAC,MAAM,CAAC,CAOjB;AAED,wBAAsB,eAAe,IAAI,OAAO,CAAC,IAAI,CAAC,CAErD;AAED,wBAAsB,aAAa,IAAI,OAAO,CAAC,OAAO,CAAC,CAEtD"}

package/script/npm/src/auth/browser/session.js

@@ -0,0 +1,86 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.generateSessionKey = generateSessionKey;
+exports.loadSessionKey = loadSessionKey;
+exports.getOrCreateSessionKey = getOrCreateSessionKey;
+exports.signBytes = signBytes;
+exports.getPublicSessionKey = getPublicSessionKey;
+exports.oauthInitSig = oauthInitSig;
+exports.bindFlowSig = bindFlowSig;
+exports.natsConnectSigForIat = natsConnectSigForIat;
+exports.createRpcProof = createRpcProof;
+exports.clearSessionKey = clearSessionKey;
+exports.hasSessionKey = hasSessionKey;
+const utils_js_1 = require("../utils.js");
+const proof_js_1 = require("../proof.js");
+const session_auth_js_1 = require("../session_auth.js");
+const storage_js_1 = require("./storage.js");
+async function generateSessionKey() {
+    const keyPair = await crypto.subtle.generateKey({ name: "Ed25519" }, false, ["sign", "verify"]);
+    const publicKeyRaw = new Uint8Array(await crypto.subtle.exportKey("raw", keyPair.publicKey));
+    const sessionKey = (0, utils_js_1.base64urlEncode)(publicKeyRaw);
+    await (0, storage_js_1.storeKeyPair)(keyPair, publicKeyRaw);
+    return {
+        privateKey: keyPair.privateKey,
+        publicKey: keyPair.publicKey,
+        publicKeyRaw,
+        sessionKey,
+    };
+}
+async function loadSessionKey() {
+    const stored = await (0, storage_js_1.loadKeyPair)();
+    if (!stored)
+        return null;
+    return {
+        privateKey: stored.privateKey,
+        publicKey: stored.publicKey,
+        publicKeyRaw: stored.publicKeyRaw,
+        sessionKey: (0, utils_js_1.base64urlEncode)(stored.publicKeyRaw),
+    };
+}
+async function getOrCreateSessionKey() {
+    const existing = await loadSessionKey();
+    if (existing)
+        return existing;
+    return await generateSessionKey();
+}
+async function signBytes(handle, data) {
+    const sig = await crypto.subtle.sign({ name: "Ed25519" }, handle.privateKey, (0, utils_js_1.toArrayBuffer)(data));
+    return new Uint8Array(sig);
+}
+function getPublicSessionKey(handle) {
+    return handle.sessionKey;
+}
+async function oauthInitSig(handle, redirectTo, context, provider, contract) {
+    const canonicalContext = (0, utils_js_1.canonicalizeJsonValue)(context ?? null);
+    const payload = contract === undefined
+        ? `${redirectTo}:${canonicalContext}`
+        : `${redirectTo}:${provider ?? ""}:${(0, utils_js_1.canonicalizeJsonValue)(contract)}:${canonicalContext}`;
+    const digest = await (0, utils_js_1.sha256)((0, utils_js_1.utf8)(`oauth-init:${payload}`));
+    const sig = await signBytes(handle, digest);
+    return (0, utils_js_1.base64urlEncode)(sig);
+}
+async function bindFlowSig(handle, flowId) {
+    const digest = await (0, utils_js_1.sha256)((0, utils_js_1.utf8)(`bind-flow:${flowId}`));
+    const sig = await signBytes(handle, digest);
+    return (0, utils_js_1.base64urlEncode)(sig);
+}
+async function natsConnectSigForIat(handle, iat, contractDigest) {
+    const digest = await (0, utils_js_1.sha256)((0, utils_js_1.utf8)(`nats-connect:${(0, session_auth_js_1.buildNatsConnectSignaturePayload)(iat, contractDigest)}`));
+    const sig = await signBytes(handle, digest);
+    return (0, utils_js_1.base64urlEncode)(sig);
+}
+async function createRpcProof(handle, subject, payload) {
+    const payloadHash = await (0, utils_js_1.sha256)(payload);
+    return await (0, proof_js_1.createProof)(handle.privateKey, {
+        sessionKey: handle.sessionKey,
+        subject,
+        payloadHash,
+    });
+}
+async function clearSessionKey() {
+    await (0, storage_js_1.deleteKeyPair)();
+}
+async function hasSessionKey() {
+    return await (0, storage_js_1.hasKeyPair)();
+}

package/script/npm/src/auth/browser/storage.d.ts

@@ -0,0 +1,12 @@
+export type StoredKeyPair = {
+    id: string;
+    privateKey: CryptoKey;
+    publicKey: CryptoKey;
+    publicKeyRaw: Uint8Array;
+    createdAt: number;
+};
+export declare function storeKeyPair(keyPair: CryptoKeyPair, publicKeyRaw: Uint8Array): Promise<void>;
+export declare function loadKeyPair(): Promise<StoredKeyPair | null>;
+export declare function deleteKeyPair(): Promise<void>;
+export declare function hasKeyPair(): Promise<boolean>;
+//# sourceMappingURL=storage.d.ts.map

package/script/npm/src/auth/browser/storage.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"storage.d.ts","sourceRoot":"","sources":["../../../../../src/auth/browser/storage.ts"],"names":[],"mappings":"AAqBA,MAAM,MAAM,aAAa,GAAG;IAC1B,EAAE,EAAE,MAAM,CAAC;IACX,UAAU,EAAE,SAAS,CAAC;IACtB,SAAS,EAAE,SAAS,CAAC;IACrB,YAAY,EAAE,UAAU,CAAC;IACzB,SAAS,EAAE,MAAM,CAAC;CACnB,CAAC;AAEF,wBAAsB,YAAY,CAChC,OAAO,EAAE,aAAa,EACtB,YAAY,EAAE,UAAU,GACvB,OAAO,CAAC,IAAI,CAAC,CAoBf;AAED,wBAAsB,WAAW,IAAI,OAAO,CAAC,aAAa,GAAG,IAAI,CAAC,CAYjE;AAED,wBAAsB,aAAa,IAAI,OAAO,CAAC,IAAI,CAAC,CAYnD;AAED,wBAAsB,UAAU,IAAI,OAAO,CAAC,OAAO,CAAC,CAGnD"}

package/script/npm/src/auth/browser.d.ts

@@ -0,0 +1,14 @@
+/**
+ * @module
+ * Browser-based authentication utilities for session-key based authentication.
+ * Uses WebCrypto API and IndexedDB for secure key storage.
+ */
+import "../_dnt.polyfills.js";
+export { type AuthConfig, type AuthStartFlowResponse, type AuthStartRequest, type AuthStartResponse, bindFlow, type BindResponse, type BindSuccessResponse, buildLoginUrl, isBindSuccessResponse, type SentinelCreds, startAuthRequest, } from "./browser/login.js";
+export { type ApprovalDecision, fetchPortalFlowState, portalFlowIdFromUrl, type PortalFlowState, type PortalFlowState as BrowserPortalFlowState, portalProviderLoginUrl, portalRedirectLocation, submitPortalApproval, } from "./browser/portal.js";
+export { bindFlowSig, clearSessionKey, createRpcProof, generateSessionKey, getOrCreateSessionKey, getPublicSessionKey, hasSessionKey, loadSessionKey, natsConnectSigForIat, type SessionKeyHandle, signBytes, } from "./browser/session.js";
+export { deleteKeyPair, hasKeyPair } from "./browser/storage.js";
+export { type ApprovalDecision as ApprovalDecisionData, ApprovalDecisionSchema, type AuthStartFlowResponse as AuthStartFlowResponseData, AuthStartFlowResponseSchema, type AuthStartRequest as AuthStartRequestData, AuthStartRequestSchema, type AuthStartResponse as AuthStartResponseData, AuthStartResponseSchema, type BindResponse as BindResponseData, BindResponseSchema, type BindSuccessResponse as BindSuccessResponseData, BindSuccessResponseSchema, type ClientTransportEndpoints as ClientTransportEndpointsData, ClientTransportEndpointsSchema, type ClientTransports as ClientTransportsData, ClientTransportsSchema, type ContractApproval as ContractApprovalData, ContractApprovalSchema, type NatsAuthTokenV1 as NatsAuthTokenV1Data, NatsAuthTokenV1Schema, type SentinelCreds as SentinelCredsData, SentinelCredsSchema, } from "./schemas.js";
+export type { NatsAuthTokenV1 } from "./types.js";
+export { base64urlDecode, base64urlEncode, sha256, toArrayBuffer, utf8, } from "./utils.js";
+//# sourceMappingURL=browser.d.ts.map

package/script/npm/src/auth/browser.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"browser.d.ts","sourceRoot":"","sources":["../../../../src/auth/browser.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,sBAAsB,CAAC;AAG9B,OAAO,EACL,KAAK,UAAU,EACf,KAAK,qBAAqB,EAC1B,KAAK,gBAAgB,EACrB,KAAK,iBAAiB,EACtB,QAAQ,EACR,KAAK,YAAY,EACjB,KAAK,mBAAmB,EACxB,aAAa,EACb,qBAAqB,EACrB,KAAK,aAAa,EAClB,gBAAgB,GACjB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EACL,KAAK,gBAAgB,EACrB,oBAAoB,EACpB,mBAAmB,EACnB,KAAK,eAAe,EACpB,KAAK,eAAe,IAAI,sBAAsB,EAC9C,sBAAsB,EACtB,sBAAsB,EACtB,oBAAoB,GACrB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,WAAW,EACX,eAAe,EACf,cAAc,EACd,kBAAkB,EAClB,qBAAqB,EACrB,mBAAmB,EACnB,aAAa,EACb,cAAc,EACd,oBAAoB,EACpB,KAAK,gBAAgB,EACrB,SAAS,GACV,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAC;AACjE,OAAO,EACL,KAAK,gBAAgB,IAAI,oBAAoB,EAC7C,sBAAsB,EACtB,KAAK,qBAAqB,IAAI,yBAAyB,EACvD,2BAA2B,EAC3B,KAAK,gBAAgB,IAAI,oBAAoB,EAC7C,sBAAsB,EACtB,KAAK,iBAAiB,IAAI,qBAAqB,EAC/C,uBAAuB,EACvB,KAAK,YAAY,IAAI,gBAAgB,EACrC,kBAAkB,EAClB,KAAK,mBAAmB,IAAI,uBAAuB,EACnD,yBAAyB,EACzB,KAAK,wBAAwB,IAAI,4BAA4B,EAC7D,8BAA8B,EAC9B,KAAK,gBAAgB,IAAI,oBAAoB,EAC7C,sBAAsB,EACtB,KAAK,gBAAgB,IAAI,oBAAoB,EAC7C,sBAAsB,EACtB,KAAK,eAAe,IAAI,mBAAmB,EAC3C,qBAAqB,EACrB,KAAK,aAAa,IAAI,iBAAiB,EACvC,mBAAmB,GACpB,MAAM,cAAc,CAAC;AAEtB,YAAY,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAClD,OAAO,EACL,eAAe,EACf,eAAe,EACf,MAAM,EACN,aAAa,EACb,IAAI,GACL,MAAM,YAAY,CAAC"}

package/script/npm/src/auth/browser.js

@@ -0,0 +1,52 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.utf8 = exports.toArrayBuffer = exports.sha256 = exports.base64urlEncode = exports.base64urlDecode = exports.SentinelCredsSchema = exports.NatsAuthTokenV1Schema = exports.ContractApprovalSchema = exports.ClientTransportsSchema = exports.ClientTransportEndpointsSchema = exports.BindSuccessResponseSchema = exports.BindResponseSchema = exports.AuthStartResponseSchema = exports.AuthStartRequestSchema = exports.AuthStartFlowResponseSchema = exports.ApprovalDecisionSchema = exports.hasKeyPair = exports.deleteKeyPair = exports.signBytes = exports.natsConnectSigForIat = exports.loadSessionKey = exports.hasSessionKey = exports.getPublicSessionKey = exports.getOrCreateSessionKey = exports.generateSessionKey = exports.createRpcProof = exports.clearSessionKey = exports.bindFlowSig = exports.submitPortalApproval = exports.portalRedirectLocation = exports.portalProviderLoginUrl = exports.portalFlowIdFromUrl = exports.fetchPortalFlowState = exports.startAuthRequest = exports.isBindSuccessResponse = exports.buildLoginUrl = exports.bindFlow = void 0;
+/**
+ * @module
+ * Browser-based authentication utilities for session-key based authentication.
+ * Uses WebCrypto API and IndexedDB for secure key storage.
+ */
+require("../_dnt.polyfills.js");
+var login_js_1 = require("./browser/login.js");
+Object.defineProperty(exports, "bindFlow", { enumerable: true, get: function () { return login_js_1.bindFlow; } });
+Object.defineProperty(exports, "buildLoginUrl", { enumerable: true, get: function () { return login_js_1.buildLoginUrl; } });
+Object.defineProperty(exports, "isBindSuccessResponse", { enumerable: true, get: function () { return login_js_1.isBindSuccessResponse; } });
+Object.defineProperty(exports, "startAuthRequest", { enumerable: true, get: function () { return login_js_1.startAuthRequest; } });
+var portal_js_1 = require("./browser/portal.js");
+Object.defineProperty(exports, "fetchPortalFlowState", { enumerable: true, get: function () { return portal_js_1.fetchPortalFlowState; } });
+Object.defineProperty(exports, "portalFlowIdFromUrl", { enumerable: true, get: function () { return portal_js_1.portalFlowIdFromUrl; } });
+Object.defineProperty(exports, "portalProviderLoginUrl", { enumerable: true, get: function () { return portal_js_1.portalProviderLoginUrl; } });
+Object.defineProperty(exports, "portalRedirectLocation", { enumerable: true, get: function () { return portal_js_1.portalRedirectLocation; } });
+Object.defineProperty(exports, "submitPortalApproval", { enumerable: true, get: function () { return portal_js_1.submitPortalApproval; } });
+var session_js_1 = require("./browser/session.js");
+Object.defineProperty(exports, "bindFlowSig", { enumerable: true, get: function () { return session_js_1.bindFlowSig; } });
+Object.defineProperty(exports, "clearSessionKey", { enumerable: true, get: function () { return session_js_1.clearSessionKey; } });
+Object.defineProperty(exports, "createRpcProof", { enumerable: true, get: function () { return session_js_1.createRpcProof; } });
+Object.defineProperty(exports, "generateSessionKey", { enumerable: true, get: function () { return session_js_1.generateSessionKey; } });
+Object.defineProperty(exports, "getOrCreateSessionKey", { enumerable: true, get: function () { return session_js_1.getOrCreateSessionKey; } });
+Object.defineProperty(exports, "getPublicSessionKey", { enumerable: true, get: function () { return session_js_1.getPublicSessionKey; } });
+Object.defineProperty(exports, "hasSessionKey", { enumerable: true, get: function () { return session_js_1.hasSessionKey; } });
+Object.defineProperty(exports, "loadSessionKey", { enumerable: true, get: function () { return session_js_1.loadSessionKey; } });
+Object.defineProperty(exports, "natsConnectSigForIat", { enumerable: true, get: function () { return session_js_1.natsConnectSigForIat; } });
+Object.defineProperty(exports, "signBytes", { enumerable: true, get: function () { return session_js_1.signBytes; } });
+var storage_js_1 = require("./browser/storage.js");
+Object.defineProperty(exports, "deleteKeyPair", { enumerable: true, get: function () { return storage_js_1.deleteKeyPair; } });
+Object.defineProperty(exports, "hasKeyPair", { enumerable: true, get: function () { return storage_js_1.hasKeyPair; } });
+var schemas_js_1 = require("./schemas.js");
+Object.defineProperty(exports, "ApprovalDecisionSchema", { enumerable: true, get: function () { return schemas_js_1.ApprovalDecisionSchema; } });
+Object.defineProperty(exports, "AuthStartFlowResponseSchema", { enumerable: true, get: function () { return schemas_js_1.AuthStartFlowResponseSchema; } });
+Object.defineProperty(exports, "AuthStartRequestSchema", { enumerable: true, get: function () { return schemas_js_1.AuthStartRequestSchema; } });
+Object.defineProperty(exports, "AuthStartResponseSchema", { enumerable: true, get: function () { return schemas_js_1.AuthStartResponseSchema; } });
+Object.defineProperty(exports, "BindResponseSchema", { enumerable: true, get: function () { return schemas_js_1.BindResponseSchema; } });
+Object.defineProperty(exports, "BindSuccessResponseSchema", { enumerable: true, get: function () { return schemas_js_1.BindSuccessResponseSchema; } });
+Object.defineProperty(exports, "ClientTransportEndpointsSchema", { enumerable: true, get: function () { return schemas_js_1.ClientTransportEndpointsSchema; } });
+Object.defineProperty(exports, "ClientTransportsSchema", { enumerable: true, get: function () { return schemas_js_1.ClientTransportsSchema; } });
+Object.defineProperty(exports, "ContractApprovalSchema", { enumerable: true, get: function () { return schemas_js_1.ContractApprovalSchema; } });
+Object.defineProperty(exports, "NatsAuthTokenV1Schema", { enumerable: true, get: function () { return schemas_js_1.NatsAuthTokenV1Schema; } });
+Object.defineProperty(exports, "SentinelCredsSchema", { enumerable: true, get: function () { return schemas_js_1.SentinelCredsSchema; } });
+var utils_js_1 = require("./utils.js");
+Object.defineProperty(exports, "base64urlDecode", { enumerable: true, get: function () { return utils_js_1.base64urlDecode; } });
+Object.defineProperty(exports, "base64urlEncode", { enumerable: true, get: function () { return utils_js_1.base64urlEncode; } });
+Object.defineProperty(exports, "sha256", { enumerable: true, get: function () { return utils_js_1.sha256; } });
+Object.defineProperty(exports, "toArrayBuffer", { enumerable: true, get: function () { return utils_js_1.toArrayBuffer; } });
+Object.defineProperty(exports, "utf8", { enumerable: true, get: function () { return utils_js_1.utf8; } });