@qlever-llc/trellis 0.7.0 → 0.8.0-rc.3

package/script/js/packages/trellis/auth/schemas.d.ts

@@ -1,158 +0,0 @@
-import type { StaticDecode } from "typebox";
-import { Type } from "typebox";
-export declare const LoginQuerySchema: Type.TObject<{
-    provider: Type.TOptional<Type.TString>;
-    redirectTo: Type.TString;
-    sessionKey: Type.TString;
-    sig: Type.TString;
-    contract: Type.TString;
-    context: Type.TOptional<Type.TString>;
-}>;
-export type LoginQuery = StaticDecode<typeof LoginQuerySchema>;
-export declare const SentinelCredsSchema: Type.TObject<{
-    jwt: Type.TString;
-    seed: Type.TString;
-}>;
-export type SentinelCreds = StaticDecode<typeof SentinelCredsSchema>;
-export declare const ClientTransportEndpointsSchema: Type.TObject<{
-    natsServers: Type.TArray<Type.TString>;
-}>;
-export type ClientTransportEndpoints = StaticDecode<typeof ClientTransportEndpointsSchema>;
-export declare const ClientTransportsSchema: Type.TObject<{
-    native: Type.TOptional<Type.TObject<{
-        natsServers: Type.TArray<Type.TString>;
-    }>>;
-    websocket: Type.TOptional<Type.TObject<{
-        natsServers: Type.TArray<Type.TString>;
-    }>>;
-}>;
-export type ClientTransports = StaticDecode<typeof ClientTransportsSchema>;
-export declare const ApprovalDecisionSchema: Type.TUnion<[Type.TLiteral<"approved">, Type.TLiteral<"denied">]>;
-export type ApprovalDecision = StaticDecode<typeof ApprovalDecisionSchema>;
-export declare const ContractApprovalSchema: Type.TObject<{
-    contractDigest: Type.TString;
-    contractId: Type.TString;
-    displayName: Type.TString;
-    description: Type.TString;
-    kind: Type.TOptional<Type.TString>;
-    capabilities: Type.TArray<Type.TString>;
-}>;
-export type ContractApproval = StaticDecode<typeof ContractApprovalSchema>;
-export declare const BindRequestSchema: Type.TObject<{
-    authToken: Type.TString;
-    sessionKey: Type.TString;
-    sig: Type.TString;
-}>;
-export type BindRequest = StaticDecode<typeof BindRequestSchema>;
-export declare const BindSuccessResponseSchema: Type.TObject<{
-    status: Type.TLiteral<"bound">;
-    bindingToken: Type.TString;
-    inboxPrefix: Type.TString;
-    expires: Type.TString;
-    sentinel: Type.TObject<{
-        jwt: Type.TString;
-        seed: Type.TString;
-    }>;
-    transports: Type.TObject<{
-        native: Type.TOptional<Type.TObject<{
-            natsServers: Type.TArray<Type.TString>;
-        }>>;
-        websocket: Type.TOptional<Type.TObject<{
-            natsServers: Type.TArray<Type.TString>;
-        }>>;
-    }>;
-}>;
-export declare const BindInsufficientCapabilitiesResponseSchema: Type.TObject<{
-    status: Type.TLiteral<"insufficient_capabilities">;
-    approval: Type.TObject<{
-        contractDigest: Type.TString;
-        contractId: Type.TString;
-        displayName: Type.TString;
-        description: Type.TString;
-        kind: Type.TOptional<Type.TString>;
-        capabilities: Type.TArray<Type.TString>;
-    }>;
-    missingCapabilities: Type.TArray<Type.TString>;
-    userCapabilities: Type.TArray<Type.TString>;
-}>;
-export declare const BindResponseSchema: Type.TUnion<[Type.TObject<{
-    status: Type.TLiteral<"bound">;
-    bindingToken: Type.TString;
-    inboxPrefix: Type.TString;
-    expires: Type.TString;
-    sentinel: Type.TObject<{
-        jwt: Type.TString;
-        seed: Type.TString;
-    }>;
-    transports: Type.TObject<{
-        native: Type.TOptional<Type.TObject<{
-            natsServers: Type.TArray<Type.TString>;
-        }>>;
-        websocket: Type.TOptional<Type.TObject<{
-            natsServers: Type.TArray<Type.TString>;
-        }>>;
-    }>;
-}>, Type.TObject<{
-    status: Type.TLiteral<"insufficient_capabilities">;
-    approval: Type.TObject<{
-        contractDigest: Type.TString;
-        contractId: Type.TString;
-        displayName: Type.TString;
-        description: Type.TString;
-        kind: Type.TOptional<Type.TString>;
-        capabilities: Type.TArray<Type.TString>;
-    }>;
-    missingCapabilities: Type.TArray<Type.TString>;
-    userCapabilities: Type.TArray<Type.TString>;
-}>]>;
-export type BindResponse = StaticDecode<typeof BindResponseSchema>;
-export type BindSuccessResponse = StaticDecode<typeof BindSuccessResponseSchema>;
-export type BindInsufficientCapabilitiesResponse = StaticDecode<typeof BindInsufficientCapabilitiesResponseSchema>;
-export declare const AuthStartRequestSchema: Type.TObject<{
-    provider: Type.TOptional<Type.TString>;
-    redirectTo: Type.TString;
-    sessionKey: Type.TString;
-    sig: Type.TString;
-    contract: Type.TObject<{}>;
-    context: Type.TOptional<Type.TObject<{}>>;
-}>;
-export declare const AuthStartFlowResponseSchema: Type.TObject<{
-    status: Type.TLiteral<"flow_started">;
-    flowId: Type.TString;
-    loginUrl: Type.TString;
-}>;
-export declare const AuthStartResponseSchema: Type.TUnion<[Type.TObject<{
-    status: Type.TLiteral<"bound">;
-    bindingToken: Type.TString;
-    inboxPrefix: Type.TString;
-    expires: Type.TString;
-    sentinel: Type.TObject<{
-        jwt: Type.TString;
-        seed: Type.TString;
-    }>;
-    transports: Type.TObject<{
-        native: Type.TOptional<Type.TObject<{
-            natsServers: Type.TArray<Type.TString>;
-        }>>;
-        websocket: Type.TOptional<Type.TObject<{
-            natsServers: Type.TArray<Type.TString>;
-        }>>;
-    }>;
-}>, Type.TObject<{
-    status: Type.TLiteral<"flow_started">;
-    flowId: Type.TString;
-    loginUrl: Type.TString;
-}>]>;
-export type AuthStartRequest = StaticDecode<typeof AuthStartRequestSchema>;
-export type AuthStartFlowResponse = StaticDecode<typeof AuthStartFlowResponseSchema>;
-export type AuthStartResponse = StaticDecode<typeof AuthStartResponseSchema>;
-export declare const NatsAuthTokenV1Schema: Type.TObject<{
-    v: Type.TLiteral<1>;
-    sessionKey: Type.TString;
-    sig: Type.TString;
-    bindingToken: Type.TOptional<Type.TString>;
-    iat: Type.TOptional<Type.TInteger>;
-    contractDigest: Type.TOptional<Type.TString>;
-}>;
-export type NatsAuthTokenV1 = StaticDecode<typeof NatsAuthTokenV1Schema>;
-//# sourceMappingURL=schemas.d.ts.map

package/script/js/packages/trellis/auth/schemas.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"schemas.d.ts","sourceRoot":"","sources":["../../../../../../auth/schemas.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAC5C,OAAO,EAAE,IAAI,EAAE,MAAM,SAAS,CAAC;AAU/B,eAAO,MAAM,gBAAgB;;;;;;;EAOM,CAAC;AAEpC,MAAM,MAAM,UAAU,GAAG,YAAY,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAI/D,eAAO,MAAM,mBAAmB;;;EAG9B,CAAC;AAEH,MAAM,MAAM,aAAa,GAAG,YAAY,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAErE,eAAO,MAAM,8BAA8B;;EAEzC,CAAC;AAEH,MAAM,MAAM,wBAAwB,GAAG,YAAY,CACjD,OAAO,8BAA8B,CACtC,CAAC;AAEF,eAAO,MAAM,sBAAsB;;;;;;;EAGjC,CAAC;AAEH,MAAM,MAAM,gBAAgB,GAAG,YAAY,CAAC,OAAO,sBAAsB,CAAC,CAAC;AAE3E,eAAO,MAAM,sBAAsB,mEAGjC,CAAC;AAEH,MAAM,MAAM,gBAAgB,GAAG,YAAY,CAAC,OAAO,sBAAsB,CAAC,CAAC;AAE3E,eAAO,MAAM,sBAAsB;;;;;;;EASjC,CAAC;AAEH,MAAM,MAAM,gBAAgB,GAAG,YAAY,CAAC,OAAO,sBAAsB,CAAC,CAAC;AAE3E,eAAO,MAAM,iBAAiB;;;;EAIK,CAAC;AAEpC,MAAM,MAAM,WAAW,GAAG,YAAY,CAAC,OAAO,iBAAiB,CAAC,CAAC;AAEjE,eAAO,MAAM,yBAAyB;;;;;;;;;;;;;;;;;EAOpC,CAAC;AAEH,eAAO,MAAM,0CAA0C;;;;;;;;;;;;EAKrD,CAAC;AAEH,eAAO,MAAM,kBAAkB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;IAG7B,CAAC;AAEH,MAAM,MAAM,YAAY,GAAG,YAAY,CAAC,OAAO,kBAAkB,CAAC,CAAC;AACnE,MAAM,MAAM,mBAAmB,GAAG,YAAY,CAC5C,OAAO,yBAAyB,CACjC,CAAC;AACF,MAAM,MAAM,oCAAoC,GAAG,YAAY,CAC7D,OAAO,0CAA0C,CAClD,CAAC;AAEF,eAAO,MAAM,sBAAsB;;;;;;;EAOA,CAAC;AAEpC,eAAO,MAAM,2BAA2B;;;;EAItC,CAAC;AAEH,eAAO,MAAM,uBAAuB;;;;;;;;;;;;;;;;;;;;;IAGlC,CAAC;AAEH,MAAM,MAAM,gBAAgB,GAAG,YAAY,CAAC,OAAO,sBAAsB,CAAC,CAAC;AAC3E,MAAM,MAAM,qBAAqB,GAAG,YAAY,CAC9C,OAAO,2BAA2B,CACnC,CAAC;AACF,MAAM,MAAM,iBAAiB,GAAG,YAAY,CAAC,OAAO,uBAAuB,CAAC,CAAC;AAE7E,eAAO,MAAM,qBAAqB;;;;;;;EAOC,CAAC;AAEpC,MAAM,MAAM,eAAe,GAAG,YAAY,CAAC,OAAO,qBAAqB,CAAC,CAAC"}

package/script/js/packages/trellis/auth/schemas.js

@@ -1,92 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.NatsAuthTokenV1Schema = exports.AuthStartResponseSchema = exports.AuthStartFlowResponseSchema = exports.AuthStartRequestSchema = exports.BindResponseSchema = exports.BindInsufficientCapabilitiesResponseSchema = exports.BindSuccessResponseSchema = exports.BindRequestSchema = exports.ContractApprovalSchema = exports.ApprovalDecisionSchema = exports.ClientTransportsSchema = exports.ClientTransportEndpointsSchema = exports.SentinelCredsSchema = exports.LoginQuerySchema = void 0;
-const typebox_1 = require("typebox");
-const SessionKeySchema = typebox_1.Type.String({
-    pattern: "^[A-Za-z0-9_-]{43}$",
-});
-const SignatureSchema = typebox_1.Type.String({
-    pattern: "^[A-Za-z0-9_-]{86}$",
-});
-exports.LoginQuerySchema = typebox_1.Type.Object({
-    provider: typebox_1.Type.Optional(typebox_1.Type.String({ minLength: 1 })),
-    redirectTo: typebox_1.Type.String(),
-    sessionKey: SessionKeySchema,
-    sig: SignatureSchema,
-    contract: typebox_1.Type.String({ minLength: 1 }),
-    context: typebox_1.Type.Optional(typebox_1.Type.String({ minLength: 1 })),
-}, { additionalProperties: false });
-const OpenObjectSchema = typebox_1.Type.Object({}, { additionalProperties: true });
-exports.SentinelCredsSchema = typebox_1.Type.Object({
-    jwt: typebox_1.Type.String(),
-    seed: typebox_1.Type.String(),
-});
-exports.ClientTransportEndpointsSchema = typebox_1.Type.Object({
-    natsServers: typebox_1.Type.Array(typebox_1.Type.String({ minLength: 1 }), { minItems: 1 }),
-});
-exports.ClientTransportsSchema = typebox_1.Type.Object({
-    native: typebox_1.Type.Optional(exports.ClientTransportEndpointsSchema),
-    websocket: typebox_1.Type.Optional(exports.ClientTransportEndpointsSchema),
-});
-exports.ApprovalDecisionSchema = typebox_1.Type.Union([
-    typebox_1.Type.Literal("approved"),
-    typebox_1.Type.Literal("denied"),
-]);
-exports.ContractApprovalSchema = typebox_1.Type.Object({
-    contractDigest: typebox_1.Type.String(),
-    contractId: typebox_1.Type.String(),
-    displayName: typebox_1.Type.String(),
-    description: typebox_1.Type.String(),
-    // Preserve legacy persisted approval records written before `kind` was removed
-    // from the public flow state shape.
-    kind: typebox_1.Type.Optional(typebox_1.Type.String({ minLength: 1 })),
-    capabilities: typebox_1.Type.Array(typebox_1.Type.String()),
-});
-exports.BindRequestSchema = typebox_1.Type.Object({
-    authToken: typebox_1.Type.String(),
-    sessionKey: SessionKeySchema,
-    sig: SignatureSchema,
-}, { additionalProperties: false });
-exports.BindSuccessResponseSchema = typebox_1.Type.Object({
-    status: typebox_1.Type.Literal("bound"),
-    bindingToken: typebox_1.Type.String(),
-    inboxPrefix: typebox_1.Type.String(),
-    expires: typebox_1.Type.String({ format: "date-time" }),
-    sentinel: exports.SentinelCredsSchema,
-    transports: exports.ClientTransportsSchema,
-});
-exports.BindInsufficientCapabilitiesResponseSchema = typebox_1.Type.Object({
-    status: typebox_1.Type.Literal("insufficient_capabilities"),
-    approval: exports.ContractApprovalSchema,
-    missingCapabilities: typebox_1.Type.Array(typebox_1.Type.String()),
-    userCapabilities: typebox_1.Type.Array(typebox_1.Type.String()),
-});
-exports.BindResponseSchema = typebox_1.Type.Union([
-    exports.BindSuccessResponseSchema,
-    exports.BindInsufficientCapabilitiesResponseSchema,
-]);
-exports.AuthStartRequestSchema = typebox_1.Type.Object({
-    provider: typebox_1.Type.Optional(typebox_1.Type.String({ minLength: 1 })),
-    redirectTo: typebox_1.Type.String(),
-    sessionKey: SessionKeySchema,
-    sig: SignatureSchema,
-    contract: OpenObjectSchema,
-    context: typebox_1.Type.Optional(OpenObjectSchema),
-}, { additionalProperties: false });
-exports.AuthStartFlowResponseSchema = typebox_1.Type.Object({
-    status: typebox_1.Type.Literal("flow_started"),
-    flowId: typebox_1.Type.String({ minLength: 1 }),
-    loginUrl: typebox_1.Type.String({ minLength: 1 }),
-});
-exports.AuthStartResponseSchema = typebox_1.Type.Union([
-    exports.BindSuccessResponseSchema,
-    exports.AuthStartFlowResponseSchema,
-]);
-exports.NatsAuthTokenV1Schema = typebox_1.Type.Object({
-    v: typebox_1.Type.Literal(1),
-    sessionKey: SessionKeySchema,
-    sig: SignatureSchema,
-    bindingToken: typebox_1.Type.Optional(typebox_1.Type.String()),
-    iat: typebox_1.Type.Optional(typebox_1.Type.Integer()),
-    contractDigest: typebox_1.Type.Optional(typebox_1.Type.String()),
-}, { additionalProperties: false });

package/script/js/packages/trellis/auth/session_auth.d.ts

@@ -1,19 +0,0 @@
-import { type Authenticator } from "@nats-io/nats-core";
-export type NatsConnectOptions = {
-    authenticator: Authenticator;
-    inboxPrefix: string;
-};
-export type TrellisAuth = {
-    sessionKey: string;
-    sign: (data: Uint8Array) => Promise<Uint8Array>;
-    oauthInitSig: (redirectTo: string, context?: unknown) => Promise<string>;
-    bindSig: (authToken: string) => Promise<string>;
-    natsConnectSigForBindingToken: (bindingToken: string) => Promise<string>;
-    natsConnectSigForIat: (iat: number) => Promise<string>;
-    createProof: (subject: string, payloadHash: Uint8Array) => Promise<string>;
-    natsConnectOptions: () => Promise<NatsConnectOptions>;
-};
-export declare function createAuth(opts: {
-    sessionKeySeed: string;
-}): Promise<TrellisAuth>;
-//# sourceMappingURL=session_auth.d.ts.map

package/script/js/packages/trellis/auth/session_auth.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"session_auth.d.ts","sourceRoot":"","sources":["../../../../../../auth/session_auth.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAoBxD,MAAM,MAAM,kBAAkB,GAAG;IAC/B,aAAa,EAAE,aAAa,CAAC;IAC7B,WAAW,EAAE,MAAM,CAAC;CACrB,CAAC;AAEF,MAAM,MAAM,WAAW,GAAG;IACxB,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,CAAC,IAAI,EAAE,UAAU,KAAK,OAAO,CAAC,UAAU,CAAC,CAAC;IAEhD,YAAY,EAAE,CAAC,UAAU,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,OAAO,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;IACzE,OAAO,EAAE,CAAC,SAAS,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;IAChD,6BAA6B,EAAE,CAAC,YAAY,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;IACzE,oBAAoB,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;IAEvD,WAAW,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,UAAU,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;IAC3E,kBAAkB,EAAE,MAAM,OAAO,CAAC,kBAAkB,CAAC,CAAC;CACvD,CAAC;AAEF,wBAAsB,UAAU,CAC9B,IAAI,EAAE;IAAE,cAAc,EAAE,MAAM,CAAA;CAAE,GAC/B,OAAO,CAAC,WAAW,CAAC,CA6DtB"}

package/script/js/packages/trellis/auth/session_auth.js

@@ -1,59 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.createAuth = createAuth;
-const node_buffer_1 = require("node:buffer");
-const node_crypto_1 = require("node:crypto");
-const keys_ts_1 = require("./keys.js");
-const proof_ts_1 = require("./proof.js");
-const utils_ts_1 = require("./utils.js");
-async function createAuth(opts) {
-    const seed = (0, utils_ts_1.base64urlDecode)(opts.sessionKeySeed);
-    const privateKey = await (0, keys_ts_1.importEd25519PrivateKeyFromSeedBase64url)(opts.sessionKeySeed);
-    const sessionKey = await (0, keys_ts_1.publicKeyBase64urlFromPrivateKey)(privateKey);
-    const reconnectKey = (0, node_crypto_1.createPrivateKey)({
-        key: node_buffer_1.Buffer.from((0, keys_ts_1.pkcs8FromEd25519Seed)(seed)),
-        format: "der",
-        type: "pkcs8",
-    });
-    const sign = async (data) => {
-        const sig = await crypto.subtle.sign({ name: "Ed25519" }, privateKey, (0, utils_ts_1.toArrayBuffer)(data));
-        return new Uint8Array(sig);
-    };
-    const signDomainHash = async (prefix, value) => {
-        const digest = await (0, utils_ts_1.sha256)((0, utils_ts_1.utf8)(`${prefix}:${value}`));
-        const sigBytes = await sign(digest);
-        return (0, utils_ts_1.base64urlEncode)(sigBytes);
-    };
-    const signOauthInit = async (redirectTo, context) => {
-        const canonicalContext = (0, utils_ts_1.canonicalizeJsonValue)(context ?? null);
-        return await signDomainHash("oauth-init", `${redirectTo}:${canonicalContext}`);
-    };
-    const buildServiceNatsAuthToken = (iat) => {
-        const digest = (0, node_crypto_1.createHash)("sha256").update(`nats-connect:${iat}`, "utf8").digest();
-        const sig = (0, node_crypto_1.sign)(null, digest, reconnectKey);
-        return {
-            v: 1,
-            sessionKey,
-            iat,
-            sig: (0, utils_ts_1.base64urlEncode)(new Uint8Array(sig)),
-        };
-    };
-    return {
-        sessionKey,
-        sign,
-        oauthInitSig: signOauthInit,
-        bindSig: (authToken) => signDomainHash("bind", authToken),
-        natsConnectSigForBindingToken: (bindingToken) => signDomainHash("nats-connect", bindingToken),
-        natsConnectSigForIat: (iat) => signDomainHash("nats-connect", String(iat)),
-        createProof: (subject, payloadHash) => (0, proof_ts_1.createProof)(privateKey, { sessionKey, subject, payloadHash }),
-        natsConnectOptions: async () => {
-            return {
-                authenticator: () => {
-                    const authToken = buildServiceNatsAuthToken(Math.floor(Date.now() / 1000));
-                    return { auth_token: JSON.stringify(authToken) };
-                },
-                inboxPrefix: `_INBOX.${sessionKey.slice(0, 16)}`,
-            };
-        },
-    };
-}

package/script/js/packages/trellis/auth/trellis_id.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"trellis_id.d.ts","sourceRoot":"","sources":["../../../../../../auth/trellis_id.ts"],"names":[],"mappings":"AAEA,wBAAsB,qBAAqB,CAAC,MAAM,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAGvF"}

package/script/js/packages/trellis/auth/types.d.ts

@@ -1,8 +0,0 @@
-export type NatsAuthTokenV1 = {
-    v: 1;
-    sessionKey: string;
-    sig: string;
-    bindingToken?: string;
-    iat?: number;
-};
-//# sourceMappingURL=types.d.ts.map

package/script/js/packages/trellis/auth/types.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../../../../auth/types.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,eAAe,GAAG;IAC5B,CAAC,EAAE,CAAC,CAAC;IACL,UAAU,EAAE,MAAM,CAAC;IACnB,GAAG,EAAE,MAAM,CAAC;IACZ,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,GAAG,CAAC,EAAE,MAAM,CAAC;CACd,CAAC"}

package/script/js/packages/trellis/auth/utils.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"utils.d.ts","sourceRoot":"","sources":["../../../../../../auth/utils.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,SAAS,GACjB,IAAI,GACJ,OAAO,GACP,MAAM,GACN,MAAM,GACN,SAAS,EAAE,GACX;IAAE,CAAC,GAAG,EAAE,MAAM,GAAG,SAAS,CAAA;CAAE,CAAC;AAEjC,wBAAgB,IAAI,CAAC,CAAC,EAAE,MAAM,GAAG,UAAU,CAE1C;AAED,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,SAAS,GAAG,MAAM,CAWzD;AAED,wBAAgB,aAAa,CAAC,IAAI,EAAE,UAAU,GAAG,WAAW,CAQ3D;AAED,wBAAgB,eAAe,CAAC,IAAI,EAAE,UAAU,GAAG,MAAM,CAGxD;AAED,wBAAgB,eAAe,CAAC,CAAC,EAAE,MAAM,GAAG,UAAU,CAQrD;AAED,wBAAsB,MAAM,CAAC,IAAI,EAAE,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC,CAGlE;AAmBD,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAE5D"}

package/script/js/packages/trellis/auth/utils.js

@@ -1,77 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.utf8 = utf8;
-exports.canonicalizeJson = canonicalizeJson;
-exports.toArrayBuffer = toArrayBuffer;
-exports.base64urlEncode = base64urlEncode;
-exports.base64urlDecode = base64urlDecode;
-exports.sha256 = sha256;
-exports.canonicalizeJsonValue = canonicalizeJsonValue;
-function utf8(s) {
-    return new TextEncoder().encode(s);
-}
-function canonicalizeJson(value) {
-    if (value === null)
-        return "null";
-    if (typeof value === "boolean")
-        return value ? "true" : "false";
-    if (typeof value === "number")
-        return JSON.stringify(value);
-    if (typeof value === "string")
-        return JSON.stringify(value);
-    if (Array.isArray(value)) {
-        return `[${value.map(canonicalizeJson).join(",")}]`;
-    }
-    const keys = Object.keys(value).sort();
-    return `{${keys.map((key) => `${JSON.stringify(key)}:${canonicalizeJson(value[key])}`).join(",")}}`;
-}
-function toArrayBuffer(data) {
-    const buf = data.buffer;
-    if (buf instanceof ArrayBuffer) {
-        return buf.slice(data.byteOffset, data.byteOffset + data.byteLength);
-    }
-    const copy = new Uint8Array(data.byteLength);
-    copy.set(data);
-    return copy.buffer;
-}
-function base64urlEncode(data) {
-    const b64 = btoa(String.fromCharCode(...data));
-    return b64.replace(/\+/g, "-").replace(/\//g, "_").replace(/=+$/g, "");
-}
-function base64urlDecode(s) {
-    const normalized = s.replace(/-/g, "+").replace(/_/g, "/");
-    const padLen = (4 - (normalized.length % 4)) % 4;
-    const padded = normalized + "=".repeat(padLen);
-    const bin = atob(padded);
-    const out = new Uint8Array(bin.length);
-    for (let i = 0; i < bin.length; i++)
-        out[i] = bin.charCodeAt(i);
-    return out;
-}
-async function sha256(data) {
-    const digest = await crypto.subtle.digest("SHA-256", toArrayBuffer(data));
-    return new Uint8Array(digest);
-}
-function canonicalizeUnknownJsonValue(value) {
-    if (value === null)
-        return "null";
-    if (typeof value === "boolean")
-        return value ? "true" : "false";
-    if (typeof value === "number") {
-        if (!Number.isFinite(value))
-            throw new Error("JSON numbers must be finite");
-        return JSON.stringify(value);
-    }
-    if (typeof value === "string")
-        return JSON.stringify(value);
-    if (Array.isArray(value))
-        return `[${value.map(canonicalizeUnknownJsonValue).join(",")}]`;
-    if (typeof value === "object") {
-        const keys = Object.keys(value).sort();
-        return `{${keys.map((key) => `${JSON.stringify(key)}:${canonicalizeUnknownJsonValue(value[key])}`).join(",")}}`;
-    }
-    throw new Error("Value is not JSON-serializable");
-}
-function canonicalizeJsonValue(value) {
-    return canonicalizeUnknownJsonValue(value);
-}

package/script/js/packages/trellis/auth.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../../../../../auth.ts"],"names":[],"mappings":"AAAA,cAAc,eAAe,CAAC"}

package/script/js/packages/trellis/client.d.ts

@@ -1,33 +0,0 @@
-import type { NatsConnection } from "@nats-io/nats-core";
-import type { TrellisAPI } from "./contracts.ts";
-import type { LoggerLike } from "./globals.ts";
-import type { TrellisAuth } from "./trellis.ts";
-import { Trellis } from "./trellis.ts";
-type NoResponderRetryOpts = {
-    maxAttempts?: number;
-    baseDelayMs?: number;
-};
-export type ClientOpts = {
-    /**
-     * Logical name for this client instance (used for logs and consumer names).
-     * Defaults to "client".
-     */
-    name?: string;
-    log?: LoggerLike;
-    timeout?: number;
-    stream?: string;
-    noResponderRetry?: NoResponderRetryOpts;
-};
-type ClientContract<TApi> = {
-    API: {
-        owned?: TApi;
-        trellis?: TApi;
-    };
-};
-/**
- * Create a Trellis client typed from a contract module's derived outbound surface.
- */
-export declare function createClient<TApi extends TrellisAPI>(contract: ClientContract<TApi>, nats: NatsConnection, auth: TrellisAuth, opts?: ClientOpts): Trellis<TApi>;
-export declare function createCoreClient(nats: NatsConnection, auth: TrellisAuth, opts?: ClientOpts): Promise<Trellis<TrellisAPI>>;
-export {};
-//# sourceMappingURL=client.d.ts.map

package/script/js/packages/trellis/client.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../../../../../client.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AACzD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AAEjD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAC/C,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAChD,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AAavC,KAAK,oBAAoB,GAAG;IAC1B,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB,CAAC;AAEF,MAAM,MAAM,UAAU,GAAG;IACvB;;;OAGG;IACH,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,GAAG,CAAC,EAAE,UAAU,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,gBAAgB,CAAC,EAAE,oBAAoB,CAAC;CACzC,CAAC;AAEF,KAAK,cAAc,CAAC,IAAI,IAAI;IAC1B,GAAG,EAAE;QACH,KAAK,CAAC,EAAE,IAAI,CAAC;QACb,OAAO,CAAC,EAAE,IAAI,CAAC;KAChB,CAAC;CACH,CAAC;AAEF;;GAEG;AACH,wBAAgB,YAAY,CAAC,IAAI,SAAS,UAAU,EAClD,QAAQ,EAAE,cAAc,CAAC,IAAI,CAAC,EAC9B,IAAI,EAAE,cAAc,EACpB,IAAI,EAAE,WAAW,EACjB,IAAI,CAAC,EAAE,UAAU,GAChB,OAAO,CAAC,IAAI,CAAC,CAkBf;AAqBD,wBAAsB,gBAAgB,CACpC,IAAI,EAAE,cAAc,EACpB,IAAI,EAAE,WAAW,EACjB,IAAI,CAAC,EAAE,UAAU,GAChB,OAAO,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAc9B"}

package/script/js/packages/trellis/client.js

@@ -1,67 +0,0 @@
-"use strict";
-var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    var desc = Object.getOwnPropertyDescriptor(m, k);
-    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
-      desc = { enumerable: true, get: function() { return m[k]; } };
-    }
-    Object.defineProperty(o, k2, desc);
-}) : (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    o[k2] = m[k];
-}));
-var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
-    Object.defineProperty(o, "default", { enumerable: true, value: v });
-}) : function(o, v) {
-    o["default"] = v;
-});
-var __importStar = (this && this.__importStar) || function (mod) {
-    if (mod && mod.__esModule) return mod;
-    var result = {};
-    if (mod != null) for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
-    __setModuleDefault(result, mod);
-    return result;
-};
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.createClient = createClient;
-exports.createCoreClient = createCoreClient;
-const trellis_ts_1 = require("./trellis.js");
-/**
- * Create a Trellis client typed from a contract module's derived outbound surface.
- */
-function createClient(contract, nats, auth, opts) {
-    const api = contract.API.trellis ?? contract.API.owned;
-    if (!api) {
-        throw new Error("Contract is missing an owned or trellis API view");
-    }
-    return new trellis_ts_1.Trellis(opts?.name ?? "client", nats, auth, {
-        log: opts?.log,
-        timeout: opts?.timeout,
-        stream: opts?.stream,
-        noResponderRetry: opts?.noResponderRetry,
-        api,
-    });
-}
-async function loadCoreApi() {
-    try {
-        const mod = await Promise.resolve().then(() => __importStar(require("./sdk/core.js")));
-        const api = mod.core?.API.trellis ?? mod.API?.trellis;
-        if (api) {
-            return api;
-        }
-    }
-    catch (error) {
-        throw new Error("Failed to load the Trellis core SDK. Generate the core SDK first or use createClient(contract, ...) with an explicit contract API.", { cause: error });
-    }
-    throw new Error("Failed to load the Trellis core SDK API surface. Use createClient(contract, ...) with an explicit contract API if you do not need the generated core SDK.");
-}
-async function createCoreClient(nats, auth, opts) {
-    const api = await loadCoreApi();
-    return new trellis_ts_1.Trellis(opts?.name ?? "client", nats, auth, {
-        log: opts?.log,
-        timeout: opts?.timeout,
-        stream: opts?.stream,
-        noResponderRetry: opts?.noResponderRetry,
-        api,
-    });
-}

package/script/js/packages/trellis/client_connect.d.ts

@@ -1,53 +0,0 @@
-import type { ClientOpts } from "./client.ts";
-import type { TrellisAPI, TrellisContractV1 } from "./contracts.ts";
-import { type RuntimeTransport } from "./runtime_transport.ts";
-import { Trellis } from "./trellis.ts";
-import { type SessionKeyHandle } from "./auth/browser/session.ts";
-type ClientContract<TApi extends TrellisAPI = TrellisAPI> = {
-    CONTRACT: TrellisContractV1;
-    API: {
-        trellis: TApi;
-    };
-};
-type BrowserClientAuthOptions = {
-    mode?: "browser";
-    handle?: SessionKeyHandle;
-    provider?: string;
-    redirectTo?: string;
-    landingPath?: string;
-    context?: unknown;
-    currentUrl?: URL | string;
-};
-type SessionKeyClientAuthOptions = {
-    mode: "session_key";
-    sessionKeySeed: string;
-    provider?: string;
-    redirectTo: string;
-    context?: unknown;
-    flowId?: string;
-};
-export type ClientAuthOptions = BrowserClientAuthOptions | SessionKeyClientAuthOptions;
-export type ClientAuthRequiredContext = {
-    loginUrl: string;
-    sessionKey: string;
-    mode: "browser" | "session_key";
-};
-export type ClientAuthContinuation = {
-    flowId: string;
-} | void;
-export type TrellisClientConnectArgs<TApi extends TrellisAPI = TrellisAPI> = ClientOpts & {
-    trellisUrl: string;
-    contract: ClientContract<TApi>;
-    auth?: ClientAuthOptions;
-    onAuthRequired?: (ctx: ClientAuthRequiredContext) => Promise<ClientAuthContinuation> | ClientAuthContinuation;
-};
-type ClientConnectDeps = {
-    loadTransport(): Promise<RuntimeTransport>;
-    now(): number;
-};
-export declare function connectClientWithDeps<TApi extends TrellisAPI>(args: TrellisClientConnectArgs<TApi>, deps: ClientConnectDeps): Promise<Trellis<TApi>>;
-export declare class TrellisClient {
-    static connect<TApi extends TrellisAPI>(args: TrellisClientConnectArgs<TApi>): Promise<Trellis<TApi>>;
-}
-export {};
-//# sourceMappingURL=client_connect.d.ts.map

package/script/js/packages/trellis/client_connect.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"client_connect.d.ts","sourceRoot":"","sources":["../../../../../client_connect.ts"],"names":[],"mappings":"AAqBA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAC9C,OAAO,KAAK,EAAE,UAAU,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AACpE,OAAO,EAGL,KAAK,gBAAgB,EACtB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AAGvC,OAAO,EACL,KAAK,gBAAgB,EAItB,MAAM,2BAA2B,CAAC;AAEnC,KAAK,cAAc,CAAC,IAAI,SAAS,UAAU,GAAG,UAAU,IAAI;IAC1D,QAAQ,EAAE,iBAAiB,CAAC;IAC5B,GAAG,EAAE;QACH,OAAO,EAAE,IAAI,CAAC;KACf,CAAC;CACH,CAAC;AAEF,KAAK,wBAAwB,GAAG;IAC9B,IAAI,CAAC,EAAE,SAAS,CAAC;IACjB,MAAM,CAAC,EAAE,gBAAgB,CAAC;IAC1B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,UAAU,CAAC,EAAE,GAAG,GAAG,MAAM,CAAC;CAC3B,CAAC;AAEF,KAAK,2BAA2B,GAAG;IACjC,IAAI,EAAE,aAAa,CAAC;IACpB,cAAc,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB,CAAC;AAEF,MAAM,MAAM,iBAAiB,GAAG,wBAAwB,GAAG,2BAA2B,CAAC;AAEvF,MAAM,MAAM,yBAAyB,GAAG;IACtC,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,SAAS,GAAG,aAAa,CAAC;CACjC,CAAC;AAEF,MAAM,MAAM,sBAAsB,GAAG;IAAE,MAAM,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,CAAC;AAE/D,MAAM,MAAM,wBAAwB,CAAC,IAAI,SAAS,UAAU,GAAG,UAAU,IACrE,UAAU,GACV;IACA,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,cAAc,CAAC,IAAI,CAAC,CAAC;IAC/B,IAAI,CAAC,EAAE,iBAAiB,CAAC;IACzB,cAAc,CAAC,EAAE,CACf,GAAG,EAAE,yBAAyB,KAC3B,OAAO,CAAC,sBAAsB,CAAC,GAAG,sBAAsB,CAAC;CAC/D,CAAC;AAqBJ,KAAK,iBAAiB,GAAG;IACvB,aAAa,IAAI,OAAO,CAAC,gBAAgB,CAAC,CAAC;IAC3C,GAAG,IAAI,MAAM,CAAC;CACf,CAAC;AAqPF,wBAAsB,qBAAqB,CAAC,IAAI,SAAS,UAAU,EACjE,IAAI,EAAE,wBAAwB,CAAC,IAAI,CAAC,EACpC,IAAI,EAAE,iBAAiB,GACtB,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CA6EtB;AAgFH,qBAAa,aAAa;IACxB,MAAM,CAAC,OAAO,CAAC,IAAI,SAAS,UAAU,EACpC,IAAI,EAAE,wBAAwB,CAAC,IAAI,CAAC,GACnC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;CAG1B"}