@run402/sdk 4.93.1 → 4.94.0

package/dist/namespaces/operator.js

@@ -1,272 +0,0 @@
-/**
- * `operator` namespace — the *human* (email) principal, distinct from the
- * agent's per-wallet SIWX identity.
- *
- * The human authenticates in the browser via an OAuth 2.0 device-authorization
- * grant (RFC 8628, the `aws sso login` model): `deviceStart` returns a
- * user-facing code + URL, the human approves it via the existing magic-link or
- * passkey web flow, and `devicePoll` brokers the resulting operator-session
- * token. `overview` reads the email-union account view with that token, and
- * `revoke` ends the session server-side.
- *
- * Bearer auth is passed explicitly (`opts.token`) rather than sourced from a
- * credential provider, because the operator session is a Node-only on-disk
- * cache (`core/operator-session.ts`) and this namespace stays isomorphic. The
- * `device*` endpoints are unauthenticated (the `device_code` in the body is the
- * credential), so they send no auth headers.
- *
- * Gateway contract: the RFC 8628 device-auth bridge.
- */
-import { ApiError, LocalError, NetworkError } from "../errors.js";
-import { OperatorSession } from "./operator-session.js";
-const POLL_ERROR_CODES = new Set([
-    "authorization_pending",
-    "slow_down",
-    "access_denied",
-    "expired_token",
-]);
-/**
- * Wallet-owned org claim — `r.operator.claimWalletOrg.*`. The isomorphic
- * (raw-proof) seam: `challenge` issues a nonce; `submit` posts the dual proof
- * (control-plane session bearer + a fresh `SIGN-IN-WITH-X` wallet signature). The
- * Node convenience `signWalletOrgClaim` / `claimWalletOrg` in `@run402/sdk/node`
- * runs the whole dance (read session → challenge → sign → submit).
- */
-export class ClaimWalletOrg {
-    client;
-    constructor(client) {
-        this.client = client;
-    }
-    /** Request a single-use challenge nonce the wallet must sign (`POST …/claim-wallet-org/challenge`). */
-    async challenge(input) {
-        if (!input?.wallet) {
-            throw new LocalError("claimWalletOrg.challenge requires { wallet }", "requesting wallet-org claim challenge");
-        }
-        return this.client.request("/agent/v1/operator/claim-wallet-org/challenge", {
-            method: "POST",
-            body: { wallet: input.wallet },
-            ...(input.token ? { headers: { Authorization: `Bearer ${input.token}` }, withAuth: false } : {}),
-            context: "requesting wallet-org claim challenge",
-        });
-    }
-    /**
-     * Execute the claim (`POST …/claim-wallet-org`) carrying both proofs: the
-     * control-plane session bearer (the human) and the `SIGN-IN-WITH-X` wallet
-     * signature. Returns a discriminated {@link ClaimResult}; a `select_org` result
-     * is returned (not thrown). Throws {@link StepUpRequiredError} when the session
-     * is not passkey-fresh, and `ApiError` (`WALLET_PROOF_INVALID`) on a bad proof.
-     */
-    async submit(input) {
-        if (!input?.siwx) {
-            throw new LocalError("claimWalletOrg.submit requires { siwx } (the SIGN-IN-WITH-X proof)", "claiming wallet org");
-        }
-        const headers = { "SIGN-IN-WITH-X": input.siwx };
-        if (input.token)
-            headers.Authorization = `Bearer ${input.token}`;
-        const body = {};
-        if (input.orgId !== undefined)
-            body.org_id = input.orgId;
-        if (input.displayName !== undefined)
-            body.display_name = input.displayName;
-        return this.client.request("/agent/v1/operator/claim-wallet-org", {
-            method: "POST",
-            body,
-            headers,
-            withAuth: !input.token,
-            context: "claiming wallet org",
-        });
-    }
-}
-/**
- * Operator-approval ceremony seams — `r.operator.approval.*`. Isomorphic
- * (raw-request) seams: `requestChallenge` opens a passkey approval scoped to an
- * `(action, target)`; the human approves in the browser; the confirm page
- * redirects to the CLI loopback with a one-time `code`; `exchangeClaimCode`
- * (PKCE) mints the token. The loopback server + PKCE generation live in the
- * Node CLI (`run402 operator approve`).
- */
-export class Approval {
-    client;
-    constructor(client) {
-        this.client = client;
-    }
-    /** Begin a scoped approval (`POST …/write-auth/challenges`). Carries the cp-session bearer. */
-    async requestChallenge(input) {
-        const body = {
-            action: input.action,
-            cli_redirect_uri: input.cliRedirectUri,
-            code_challenge: input.codeChallenge,
-            state: input.state,
-        };
-        if (input.orgId !== undefined)
-            body.org_id = input.orgId;
-        if (input.projectId !== undefined)
-            body.project_id = input.projectId;
-        return this.client.request("/agent/v1/control-plane/write-auth/challenges", {
-            method: "POST",
-            body,
-            ...(input.token
-                ? { headers: { Authorization: `Bearer ${input.token}` }, withAuth: false }
-                : {}),
-            context: "requesting operator approval challenge",
-        });
-    }
-    /**
-     * Exchange the loopback claim `code` (+ PKCE verifier + `state`) for the
-     * approval token (`POST …/write-auth/cli/token`). No `redirect_uri` — it is
-     * bound at challenge time. Unauthenticated (code+verifier are the credential).
-     */
-    async exchangeClaimCode(input) {
-        return this.client.request("/agent/v1/control-plane/write-auth/cli/token", {
-            method: "POST",
-            body: { code: input.code, code_verifier: input.codeVerifier, state: input.state },
-            withAuth: false,
-            context: "exchanging operator approval claim code",
-        });
-    }
-}
-export class Operator {
-    client;
-    /**
-     * The hosted/browser control-plane **session** surface (gateway v1.78):
-     * `r.operator.session.email`, `verifyEmail`, `passkeyVerify`, `whoami`,
-     * `refresh`, `revoke`, and the step-up / authenticator helpers.
-     * The write-capable human login + step-up + authenticators, distinct from the
-     * read-only device/overview methods on this class and the loopback-PKCE
-     * CLI write-login below. See {@link OperatorSession}.
-     */
-    session;
-    /**
-     * Wallet-owned org claim (v1.82): `r.operator.claimWalletOrg.challenge()` +
-     * `.submit()`. The raw dual-proof seam; the Node convenience `claimWalletOrg`
-     * in `@run402/sdk/node` runs the full dance.
-     */
-    claimWalletOrg;
-    /**
-     * Operator-approval (write-auth) ceremony: `r.operator.approval.requestChallenge()`
-     * + `.exchangeClaimCode()`. The Node CLI (`run402 operator approve`) runs the
-     * loopback + PKCE around these isomorphic seams.
-     */
-    approval;
-    constructor(client) {
-        this.client = client;
-        this.session = new OperatorSession(client);
-        this.claimWalletOrg = new ClaimWalletOrg(client);
-        this.approval = new Approval(client);
-    }
-    /**
-     * Begin the device-authorization flow. Unauthenticated. Returns the codes the
-     * CLI prints (`user_code` + `verification_uri`) plus the poll `interval` and
-     * `expires_in`.
-     */
-    async deviceStart(opts = {}) {
-        return this.client.request("/agent/v1/operator/session/device", {
-            method: "POST",
-            body: opts.clientName ? { client_name: opts.clientName } : {},
-            withAuth: false,
-            context: "starting operator device authorization",
-        });
-    }
-    /**
-     * Poll once for approval. Bypasses the kernel's error mapping on purpose: the
-     * RFC 8628 error codes (`authorization_pending`, `slow_down`, ...) are normal
-     * polling states returned as data, not exceptions. Only an unexpected
-     * response shape throws.
-     */
-    async devicePoll(deviceCode) {
-        const url = `${this.client.apiBase}/agent/v1/operator/session/device/token`;
-        let res;
-        try {
-            res = await this.client.fetch(url, {
-                method: "POST",
-                headers: { "Content-Type": "application/json" },
-                body: JSON.stringify({ device_code: deviceCode }),
-            });
-        }
-        catch (err) {
-            throw new NetworkError(`Network error while polling operator device token: ${err.message}`, err, "polling operator device token");
-        }
-        const body = (await res.json().catch(() => null));
-        if (res.ok && body && typeof body.operator_session_token === "string") {
-            return { kind: "approved", session: body };
-        }
-        const error = body && typeof body.error === "string" ? body.error : null;
-        if (error && POLL_ERROR_CODES.has(error)) {
-            return { kind: error };
-        }
-        throw new ApiError(`Unexpected operator device-token response (HTTP ${res.status})`, res.status, body, "polling operator device token");
-    }
-    /**
-     * Fetch the organization overview. With `opts.token` the request carries the
-     * operator-session bearer and returns the email-union; without it the request
-     * falls back to the credential provider's default auth (SIWX) and returns
-     * that wallet's slice. The CLI always passes a token (human-only surface); the
-     * SDK supports both because the gateway endpoint accepts both principals.
-     */
-    async overview(opts = {}) {
-        if (opts.token) {
-            return this.client.request("/agent/v1/operator/overview", {
-                headers: { Authorization: `Bearer ${opts.token}` },
-                withAuth: false,
-                context: "fetching operator overview",
-            });
-        }
-        return this.client.request("/agent/v1/operator/overview", {
-            context: "fetching operator overview",
-        });
-    }
-    /**
-     * Revoke the operator session server-side (the server half of
-     * `operator logout`). Idempotent on the gateway; returns 204. The local cache
-     * is cleared separately by the CLI.
-     */
-    async revoke(opts) {
-        await this.client.request("/agent/v1/operator/session/revoke", {
-            method: "POST",
-            headers: { Authorization: `Bearer ${opts.token}` },
-            withAuth: false,
-            context: "revoking operator session",
-        });
-    }
-    // ── Loopback-PKCE write-login (v1.78, RFC 8252 §7.3) ──────────────────────
-    // The aws-sso-style write login: the CLI starts a `127.0.0.1` server, opens
-    // the browser to the authorize URL (the console runs the passkey ceremony +
-    // approves), receives the code on the loopback redirect, then exchanges it
-    // here for a write-capable, passkey-fresh control-plane session
-    // (`provenance=loopback_pkce`). PKCE generation + the loopback server live in
-    // the Node CLI; these two methods are the isomorphic SDK seam.
-    /**
-     * Build the loopback-PKCE authorize URL the CLI opens in the browser. Pure —
-     * no network, no Node APIs — so it is safe in any runtime. The caller
-     * generates `codeChallenge`/`state`/`nonce` and runs the redirect server.
-     */
-    buildCliAuthorizeUrl(params) {
-        const q = new URLSearchParams({
-            redirect_uri: params.redirectUri,
-            code_challenge: params.codeChallenge,
-            code_challenge_method: "S256",
-            state: params.state,
-            nonce: params.nonce,
-        });
-        return `${this.client.apiBase}/agent/v1/control-plane/cli/authorize?${q.toString()}`;
-    }
-    /**
-     * Exchange the loopback authorization code (+ PKCE verifier) for a
-     * write-capable {@link ControlPlaneSession}. Unauthenticated — the code +
-     * verifier are the credential.
-     */
-    async exchangeCliToken(params) {
-        return this.client.request("/agent/v1/control-plane/cli/token", {
-            method: "POST",
-            body: {
-                code: params.code,
-                code_verifier: params.codeVerifier,
-                redirect_uri: params.redirectUri,
-                state: params.state,
-            },
-            withAuth: false,
-            context: "exchanging CLI authorization code",
-        });
-    }
-}
-//# sourceMappingURL=operator.js.map

package/dist/namespaces/operator.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"operator.js","sourceRoot":"","sources":["../../src/namespaces/operator.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAIH,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAClE,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAiGxD,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAAC;IAC/B,uBAAuB;IACvB,WAAW;IACX,eAAe;IACf,eAAe;CAChB,CAAC,CAAC;AAgFH;;;;;;GAMG;AACH,MAAM,OAAO,cAAc;IACI;IAA7B,YAA6B,MAAc;QAAd,WAAM,GAAN,MAAM,CAAQ;IAAG,CAAC;IAE/C,uGAAuG;IACvG,KAAK,CAAC,SAAS,CAAC,KAA0B;QACxC,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,CAAC;YACnB,MAAM,IAAI,UAAU,CAAC,8CAA8C,EAAE,uCAAuC,CAAC,CAAC;QAChH,CAAC;QACD,OAAO,IAAI,CAAC,MAAM,CAAC,OAAO,CAAiB,+CAA+C,EAAE;YAC1F,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE;YAC9B,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,KAAK,CAAC,KAAK,EAAE,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAChG,OAAO,EAAE,uCAAuC;SACjD,CAAC,CAAC;IACL,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,MAAM,CAAC,KAAuB;QAClC,IAAI,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC;YACjB,MAAM,IAAI,UAAU,CAAC,oEAAoE,EAAE,qBAAqB,CAAC,CAAC;QACpH,CAAC;QACD,MAAM,OAAO,GAA2B,EAAE,gBAAgB,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC;QACzE,IAAI,KAAK,CAAC,KAAK;YAAE,OAAO,CAAC,aAAa,GAAG,UAAU,KAAK,CAAC,KAAK,EAAE,CAAC;QACjE,MAAM,IAAI,GAA4B,EAAE,CAAC;QACzC,IAAI,KAAK,CAAC,KAAK,KAAK,SAAS;YAAE,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC,KAAK,CAAC;QACzD,IAAI,KAAK,CAAC,WAAW,KAAK,SAAS;YAAE,IAAI,CAAC,YAAY,GAAG,KAAK,CAAC,WAAW,CAAC;QAC3E,OAAO,IAAI,CAAC,MAAM,CAAC,OAAO,CAAc,qCAAqC,EAAE;YAC7E,MAAM,EAAE,MAAM;YACd,IAAI;YACJ,OAAO;YACP,QAAQ,EAAE,CAAC,KAAK,CAAC,KAAK;YACtB,OAAO,EAAE,qBAAqB;SAC/B,CAAC,CAAC;IACL,CAAC;CACF;AA4DD;;;;;;;GAOG;AACH,MAAM,OAAO,QAAQ;IACU;IAA7B,YAA6B,MAAc;QAAd,WAAM,GAAN,MAAM,CAAQ;IAAG,CAAC;IAE/C,+FAA+F;IAC/F,KAAK,CAAC,gBAAgB,CAAC,KAA6B;QAClD,MAAM,IAAI,GAA4B;YACpC,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,gBAAgB,EAAE,KAAK,CAAC,cAAc;YACtC,cAAc,EAAE,KAAK,CAAC,aAAa;YACnC,KAAK,EAAE,KAAK,CAAC,KAAK;SACnB,CAAC;QACF,IAAI,KAAK,CAAC,KAAK,KAAK,SAAS;YAAE,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC,KAAK,CAAC;QACzD,IAAI,KAAK,CAAC,SAAS,KAAK,SAAS;YAAE,IAAI,CAAC,UAAU,GAAG,KAAK,CAAC,SAAS,CAAC;QACrE,OAAO,IAAI,CAAC,MAAM,CAAC,OAAO,CACxB,+CAA+C,EAC/C;YACE,MAAM,EAAE,MAAM;YACd,IAAI;YACJ,GAAG,CAAC,KAAK,CAAC,KAAK;gBACb,CAAC,CAAC,EAAE,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,KAAK,CAAC,KAAK,EAAE,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE;gBAC1E,CAAC,CAAC,EAAE,CAAC;YACP,OAAO,EAAE,wCAAwC;SAClD,CACF,CAAC;IACJ,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,iBAAiB,CAAC,KAAyB;QAC/C,OAAO,IAAI,CAAC,MAAM,CAAC,OAAO,CACxB,8CAA8C,EAC9C;YACE,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,aAAa,EAAE,KAAK,CAAC,YAAY,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE;YACjF,QAAQ,EAAE,KAAK;YACf,OAAO,EAAE,yCAAyC;SACnD,CACF,CAAC;IACJ,CAAC;CACF;AAED,MAAM,OAAO,QAAQ;IAyBU;IAxB7B;;;;;;;OAOG;IACM,OAAO,CAAkB;IAElC;;;;OAIG;IACM,cAAc,CAAiB;IAExC;;;;OAIG;IACM,QAAQ,CAAW;IAE5B,YAA6B,MAAc;QAAd,WAAM,GAAN,MAAM,CAAQ;QACzC,IAAI,CAAC,OAAO,GAAG,IAAI,eAAe,CAAC,MAAM,CAAC,CAAC;QAC3C,IAAI,CAAC,cAAc,GAAG,IAAI,cAAc,CAAC,MAAM,CAAC,CAAC;QACjD,IAAI,CAAC,QAAQ,GAAG,IAAI,QAAQ,CAAC,MAAM,CAAC,CAAC;IACvC,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,WAAW,CAAC,OAAgC,EAAE;QAClD,OAAO,IAAI,CAAC,MAAM,CAAC,OAAO,CAAkB,mCAAmC,EAAE;YAC/E,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE;YAC7D,QAAQ,EAAE,KAAK;YACf,OAAO,EAAE,wCAAwC;SAClD,CAAC,CAAC;IACL,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,UAAU,CAAC,UAAkB;QACjC,MAAM,GAAG,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,yCAAyC,CAAC;QAC5E,IAAI,GAAa,CAAC;QAClB,IAAI,CAAC;YACH,GAAG,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE;gBACjC,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;gBAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,WAAW,EAAE,UAAU,EAAE,CAAC;aAClD,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,IAAI,YAAY,CACpB,sDAAuD,GAAa,CAAC,OAAO,EAAE,EAC9E,GAAG,EACH,+BAA+B,CAChC,CAAC;QACJ,CAAC;QACD,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAmC,CAAC;QACpF,IAAI,GAAG,CAAC,EAAE,IAAI,IAAI,IAAI,OAAO,IAAI,CAAC,sBAAsB,KAAK,QAAQ,EAAE,CAAC;YACtE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,IAAuC,EAAE,CAAC;QAChF,CAAC;QACD,MAAM,KAAK,GAAG,IAAI,IAAI,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;QACzE,IAAI,KAAK,IAAI,gBAAgB,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;YACzC,OAAO,EAAE,IAAI,EAAE,KAAsD,EAAE,CAAC;QAC1E,CAAC;QACD,MAAM,IAAI,QAAQ,CAChB,mDAAmD,GAAG,CAAC,MAAM,GAAG,EAChE,GAAG,CAAC,MAAM,EACV,IAAI,EACJ,+BAA+B,CAChC,CAAC;IACJ,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,QAAQ,CAAC,OAA2B,EAAE;QAC1C,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YACf,OAAO,IAAI,CAAC,MAAM,CAAC,OAAO,CAAmB,6BAA6B,EAAE;gBAC1E,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,IAAI,CAAC,KAAK,EAAE,EAAE;gBAClD,QAAQ,EAAE,KAAK;gBACf,OAAO,EAAE,4BAA4B;aACtC,CAAC,CAAC;QACL,CAAC;QACD,OAAO,IAAI,CAAC,MAAM,CAAC,OAAO,CAAmB,6BAA6B,EAAE;YAC1E,OAAO,EAAE,4BAA4B;SACtC,CAAC,CAAC;IACL,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,MAAM,CAAC,IAAuB;QAClC,MAAM,IAAI,CAAC,MAAM,CAAC,OAAO,CAAU,mCAAmC,EAAE;YACtE,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,IAAI,CAAC,KAAK,EAAE,EAAE;YAClD,QAAQ,EAAE,KAAK;YACf,OAAO,EAAE,2BAA2B;SACrC,CAAC,CAAC;IACL,CAAC;IAED,6EAA6E;IAC7E,4EAA4E;IAC5E,4EAA4E;IAC5E,2EAA2E;IAC3E,gEAAgE;IAChE,8EAA8E;IAC9E,+DAA+D;IAE/D;;;;OAIG;IACH,oBAAoB,CAAC,MAA0B;QAC7C,MAAM,CAAC,GAAG,IAAI,eAAe,CAAC;YAC5B,YAAY,EAAE,MAAM,CAAC,WAAW;YAChC,cAAc,EAAE,MAAM,CAAC,aAAa;YACpC,qBAAqB,EAAE,MAAM;YAC7B,KAAK,EAAE,MAAM,CAAC,KAAK;YACnB,KAAK,EAAE,MAAM,CAAC,KAAK;SACpB,CAAC,CAAC;QACH,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,yCAAyC,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC;IACvF,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,gBAAgB,CAAC,MAAwB;QAC7C,OAAO,IAAI,CAAC,MAAM,CAAC,OAAO,CAAsB,mCAAmC,EAAE;YACnF,MAAM,EAAE,MAAM;YACd,IAAI,EAAE;gBACJ,IAAI,EAAE,MAAM,CAAC,IAAI;gBACjB,aAAa,EAAE,MAAM,CAAC,YAAY;gBAClC,YAAY,EAAE,MAAM,CAAC,WAAW;gBAChC,KAAK,EAAE,MAAM,CAAC,KAAK;aACpB;YACD,QAAQ,EAAE,KAAK;YACf,OAAO,EAAE,mCAAmC;SAC7C,CAAC,CAAC;IACL,CAAC;CACF"}

package/dist/node/bearer-claim-key.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"bearer-claim-key.d.ts","sourceRoot":"","sources":["../../src/node/bearer-claim-key.ts"],"names":[],"mappings":"AAsCA,MAAM,MAAM,SAAS,GAAG,SAAS,GAAG,QAAQ,GAAG,MAAM,CAAC;AAEtD,MAAM,WAAW,qBAAqB;IACpC,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,SAAS,CAAC;IAChB,IAAI,EAAE,MAAM,CAAC;IACb,gJAAgJ;IAChJ,WAAW,EAAE,MAAM,CAAC;IACpB,uGAAuG;IACvG,SAAS,EAAE,MAAM,CAAC;IAClB;;;;;;OAMG;IACH,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,4HAA4H;IAC5H,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,2EAA2E;IAC3E,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED;;;;;GAKG;AACH,eAAO,MAAM,oBAAoB,EAAE,SAAS,qBAAqB,EAIhE,CAAC;AAcF,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,SAAS,CAAC;IAChB,QAAQ,EAAE,UAAU,CAAC;IACrB,uGAAuG;IACvG,EAAE,EAAE,MAAM,CAAC;IACX,aAAa,EAAE,UAAU,CAAC;CAC3B;AAED,8EAA8E;AAC9E,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,SAAS,CAAC;IAChB,gBAAgB,EAAE,UAAU,CAAC;IAC7B,UAAU,EAAE,MAAM,CAAC;IACnB,aAAa,EAAE,UAAU,CAAC;CAC3B;AAED,iGAAiG;AACjG,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,QAAQ,CAAC;IACf,eAAe,EAAE,UAAU,CAAC;IAC5B,SAAS,EAAE,MAAM,CAAC;IAClB,aAAa,EAAE,UAAU,CAAC;CAC3B;AAED,sJAAsJ;AACtJ,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,MAAM,CAAC;IACb,eAAe,EAAE,UAAU,CAAC;IAC5B,SAAS,EAAE,MAAM,CAAC;IAClB,aAAa,EAAE,UAAU,CAAC;CAC3B;AASD,wBAAgB,WAAW,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,SAAe,GAAG,UAAU,CAM1E;AAED,+KAA+K;AAC/K,wBAAgB,aAAa,IAAI,MAAM,CAKtC;AAUD;;;;;GAKG;AACH,wBAAgB,kBAAkB,CAAC,SAAS,EAAE,MAAM,EAAE,YAAY,GAAE,UAA6C,GAAG;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,gBAAgB,EAAE,UAAU,CAAC;IAAC,aAAa,EAAE,UAAU,CAAA;CAAE,CAG3L;AAED,sFAAsF;AACtF,wBAAgB,iBAAiB,CAAC,QAAQ,EAAE,MAAM,EAAE,YAAY,GAAE,UAA6C,GAAG;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,eAAe,EAAE,UAAU,CAAC;IAAC,aAAa,EAAE,UAAU,CAAA;CAAE,CAGxL;AAED;;;;;;GAMG;AACH,wBAAgB,qBAAqB,CAAC,QAAQ,EAAE,MAAM,EAAE,YAAY,GAAE,UAA6C,GAAG;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,eAAe,EAAE,UAAU,CAAC;IAAC,aAAa,EAAE,UAAU,CAAA;CAAE,CAG5L;AAED;;;;;;;;GAQG;AACH,wBAAgB,aAAa,CAAC,GAAG,EAAE,MAAM,EAAE,YAAY,EAAE,SAAS,GAAG,aAAa,CA4BjF;AAED;;;;;;GAMG;AACH,wBAAgB,eAAe,CAAC,GAAG,EAAE,MAAM,GAAG,eAAe,CAG5D;AAED,mFAAmF;AACnF,wBAAgB,cAAc,CAAC,GAAG,EAAE,MAAM,GAAG,cAAc,CAG1D;AAED,2GAA2G;AAC3G,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,MAAM,GAAG,kBAAkB,CAGlE;AAID,MAAM,WAAW,cAAc;IAC7B,WAAW,EAAE,UAAU,CAAC;IACxB,QAAQ,EAAE,UAAU,CAAC;IACrB,wGAAwG;IACxG,aAAa,EAAE,MAAM,CAAC;CACvB;AAmBD,iIAAiI;AACjI,wBAAgB,oBAAoB,CAAC,cAAc,EAAE,UAAU,EAAE,YAAY,EAAE,UAAU,GAAG,cAAc,CAEzG;AAED,kNAAkN;AAClN,wBAAgB,mBAAmB,CAAC,aAAa,EAAE,UAAU,EAAE,YAAY,EAAE,UAAU,GAAG,cAAc,CAEvG;AAgBD,kJAAkJ;AAClJ,wBAAgB,0BAA0B,CAAC,aAAa,EAAE,UAAU,EAAE,YAAY,EAAE,UAAU,GAAG,UAAU,CAE1G;AAED,uLAAuL;AACvL,wBAAgB,yBAAyB,CAAC,UAAU,EAAE,UAAU,GAAG,MAAM,CAExE"}

package/dist/node/bearer-claim-key.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"bearer-claim-key.js","sourceRoot":"","sources":["../../src/node/bearer-claim-key.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,OAAO,EAAE,IAAI,EAAE,MAAM,uBAAuB,CAAC;AAC7C,OAAO,EAAE,MAAM,EAAE,MAAM,uBAAuB,CAAC;AAC/C,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AAClE,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAC1C,OAAO,EAAE,aAAa,EAAE,WAAW,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,kCAAkC,CAAC;AAEvG,SAAS,IAAI,CAAC,IAAY,EAAE,OAAe,EAAE,OAAe,EAAE,OAAiB;IAC7E,MAAM,IAAI,UAAU,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;AAC5D,CAAC;AA4BD;;;;;GAKG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAqC;IACpE,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,SAAS,EAAE,SAAS,EAAE,qBAAqB,EAAE,YAAY,EAAE,2BAA2B,EAAE,UAAU,EAAE,uBAAuB,EAAE,UAAU,EAAE,MAAM,EAAE;IAClN,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,QAAQ,EAAE,SAAS,EAAE,mBAAmB,EAAE,YAAY,EAAE,0BAA0B,EAAE,UAAU,EAAE,sBAAsB,EAAE,UAAU,EAAE,MAAM,EAAE;IAC1M,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,aAAa,EAAE,SAAS,EAAE,mBAAmB,EAAE;CAC5G,CAAC;AAEF,MAAM,aAAa,GAA0B,oBAAoB,CAAC,CAAC,CAAE,CAAC;AACtE,MAAM,YAAY,GAA0B,oBAAoB,CAAC,CAAC,CAAE,CAAC;AACrE,MAAM,UAAU,GAA0B,oBAAoB,CAAC,CAAC,CAAE,CAAC;AAEnE,SAAS,YAAY,CAAC,IAAe;IACnC,OAAO,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,UAAU,CAAC;AAC5F,CAAC;AAED,MAAM,cAAc,GAAG,EAAE,CAAC;AAC1B,MAAM,mBAAmB,GAAG,EAAE,CAAC;AAC/B,MAAM,oBAAoB,GAAG,cAAc,GAAG,mBAAmB,CAAC;AAkClE,SAAS,WAAW,CAAC,KAAiB;IACpC,MAAM,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC7E,OAAO,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE,CAAC;AACnG,CAAC;AAED,MAAM,OAAO,GAAG,iEAAiE,CAAC;AAElF,MAAM,UAAU,WAAW,CAAC,IAAY,EAAE,KAAK,GAAG,YAAY;IAC5D,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,IAAI,CAAC,oBAAoB,EAAE,GAAG,KAAK,0BAA0B,EAAE,oBAAoB,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;IACzH,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;IACjD,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC;IAC/B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,EAAE;QAAE,GAAG,CAAC,CAAC,CAAC,GAAG,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAChF,OAAO,GAAG,CAAC;AACb,CAAC;AAED,+KAA+K;AAC/K,MAAM,UAAU,aAAa;IAC3B,MAAM,CAAC,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC;IAC1B,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC;IACnC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC;IACnC,OAAO,WAAW,CAAC,CAAC,CAAC,CAAC;AACxB,CAAC;AAED,iJAAiJ;AACjJ,SAAS,gBAAgB,CAAC,KAA4B,EAAE,OAAe,EAAE,YAAwB;IAC/F,IAAI,YAAY,CAAC,MAAM,KAAK,mBAAmB;QAAE,IAAI,CAAC,GAAG,KAAK,CAAC,WAAW,cAAc,EAAE,gCAAgC,EAAE,cAAc,KAAK,CAAC,IAAI,MAAM,CAAC,CAAC;IAC5J,MAAM,OAAO,GAAG,WAAW,CAAC,OAAO,EAAE,GAAG,KAAK,CAAC,IAAI,KAAK,CAAC,CAAC;IACzD,MAAM,IAAI,GAAG,WAAW,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;IAChD,OAAO,EAAE,GAAG,EAAE,GAAG,KAAK,CAAC,MAAM,GAAG,WAAW,CAAC,IAAI,CAAC,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,aAAa,EAAE,YAAY,EAAE,CAAC;AACxG,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,kBAAkB,CAAC,SAAiB,EAAE,eAA2B,WAAW,CAAC,mBAAmB,CAAC;IAC/G,MAAM,EAAE,GAAG,EAAE,QAAQ,EAAE,aAAa,EAAE,GAAG,gBAAgB,CAAC,aAAa,EAAE,SAAS,EAAE,YAAY,CAAC,CAAC;IAClG,OAAO,EAAE,GAAG,EAAE,gBAAgB,EAAE,QAAQ,EAAE,aAAa,EAAE,CAAC;AAC5D,CAAC;AAED,sFAAsF;AACtF,MAAM,UAAU,iBAAiB,CAAC,QAAgB,EAAE,eAA2B,WAAW,CAAC,mBAAmB,CAAC;IAC7G,MAAM,EAAE,GAAG,EAAE,QAAQ,EAAE,aAAa,EAAE,GAAG,gBAAgB,CAAC,YAAY,EAAE,QAAQ,EAAE,YAAY,CAAC,CAAC;IAChG,OAAO,EAAE,GAAG,EAAE,eAAe,EAAE,QAAQ,EAAE,aAAa,EAAE,CAAC;AAC3D,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,qBAAqB,CAAC,QAAgB,EAAE,eAA2B,WAAW,CAAC,mBAAmB,CAAC;IACjH,MAAM,EAAE,GAAG,EAAE,QAAQ,EAAE,aAAa,EAAE,GAAG,gBAAgB,CAAC,UAAU,EAAE,QAAQ,EAAE,YAAY,CAAC,CAAC;IAC9F,OAAO,EAAE,GAAG,EAAE,eAAe,EAAE,QAAQ,EAAE,aAAa,EAAE,CAAC;AAC3D,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,aAAa,CAAC,GAAW,EAAE,YAAuB;IAChE,MAAM,aAAa,GAAG,YAAY,CAAC,YAAY,CAAC,CAAC;IACjD,MAAM,OAAO,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;IAC3B,MAAM,KAAK,GAAG,oBAAoB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;IAC7E,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,IAAI,CAAC,GAAG,aAAa,CAAC,WAAW,cAAc,EAAE,8DAA8D,aAAa,CAAC,MAAM,GAAG,EAAE,mBAAmB,CAAC,CAAC;IAC/J,CAAC;IACD,IAAI,KAAK,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;QAChC,IAAI,CACF,GAAG,aAAa,CAAC,WAAW,iBAAiB,EAC7C,iBAAiB,KAAK,CAAC,IAAI,gBAAgB,KAAK,CAAC,SAAS,mBAAmB,aAAa,CAAC,SAAS,IAAI,EACxG,mBAAmB,EACnB,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CACvC,CAAC;IACJ,CAAC;IACD,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAChD,IAAI,KAAiB,CAAC;IACtB,IAAI,CAAC;QACH,KAAK,GAAG,aAAa,CAAC,IAAI,EAAE,GAAG,KAAK,CAAC,IAAI,WAAW,CAAC,CAAC;IACxD,CAAC;IAAC,MAAM,CAAC;QACP,IAAI,CAAC,GAAG,KAAK,CAAC,WAAW,cAAc,EAAE,qCAAqC,EAAE,mBAAmB,CAAC,CAAC;IACvG,CAAC;IACD,IAAI,KAAK,CAAC,MAAM,KAAK,oBAAoB,EAAE,CAAC;QAC1C,IAAI,CAAC,GAAG,KAAK,CAAC,WAAW,cAAc,EAAE,sBAAsB,KAAK,CAAC,MAAM,oBAAoB,oBAAoB,EAAE,EAAE,mBAAmB,CAAC,CAAC;IAC9I,CAAC;IACD,MAAM,OAAO,GAAG,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,cAAc,CAAC,CAAC;IAClD,MAAM,YAAY,GAAG,KAAK,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAC;IACpD,OAAO,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,EAAE,EAAE,WAAW,CAAC,OAAO,CAAC,EAAE,aAAa,EAAE,YAAY,EAAE,CAAC;AACxG,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,eAAe,CAAC,GAAW;IACzC,MAAM,MAAM,GAAG,aAAa,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;IAC7C,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,gBAAgB,EAAE,MAAM,CAAC,QAAQ,EAAE,UAAU,EAAE,MAAM,CAAC,EAAE,EAAE,aAAa,EAAE,MAAM,CAAC,aAAa,EAAE,CAAC;AAC5H,CAAC;AAED,mFAAmF;AACnF,MAAM,UAAU,cAAc,CAAC,GAAW;IACxC,MAAM,MAAM,GAAG,aAAa,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;IAC5C,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,eAAe,EAAE,MAAM,CAAC,QAAQ,EAAE,SAAS,EAAE,MAAM,CAAC,EAAE,EAAE,aAAa,EAAE,MAAM,CAAC,aAAa,EAAE,CAAC;AACzH,CAAC;AAED,2GAA2G;AAC3G,MAAM,UAAU,kBAAkB,CAAC,GAAW;IAC5C,MAAM,MAAM,GAAG,aAAa,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IAC1C,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,eAAe,EAAE,MAAM,CAAC,QAAQ,EAAE,SAAS,EAAE,MAAM,CAAC,EAAE,EAAE,aAAa,EAAE,MAAM,CAAC,aAAa,EAAE,CAAC;AACvH,CAAC;AAWD,+MAA+M;AAC/M,SAAS,kBAAkB,CAAC,IAA0B,EAAE,OAAmB,EAAE,YAAwB;IACnG,MAAM,QAAQ,GAAG,SAAS,IAAI,UAAU,CAAC;IACzC,MAAM,QAAQ,GAAG,SAAS,IAAI,UAAU,CAAC;IACzC,MAAM,aAAa,GAAG,SAAS,IAAI,eAAe,CAAC;IACnD,MAAM,UAAU,GAAG,IAAI,CAAC,MAAM,EAAE,YAAY,EAAE,OAAO,EAAE,WAAW,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC,CAAC;IAClF,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,EAAE,YAAY,EAAE,OAAO,EAAE,WAAW,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC,CAAC;IAC/E,MAAM,QAAQ,GAAG,MAAM,CAAC,WAAW,CAAC,WAAW,CAAC,aAAa,CAAC,EAAE,UAAU,CAAC,CAAC,CAAC;IAC7E,yEAAyE;IACzE,4EAA4E;IAC5E,4EAA4E;IAC5E,2EAA2E;IAC3E,+DAA+D;IAC/D,4EAA4E;IAC5E,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,QAAQ,EAAE,OAAO,EAAE,aAAa,EAAE,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;AAC7F,CAAC;AAED,iIAAiI;AACjI,MAAM,UAAU,oBAAoB,CAAC,cAA0B,EAAE,YAAwB;IACvF,OAAO,kBAAkB,CAAC,SAAS,EAAE,cAAc,EAAE,YAAY,CAAC,CAAC;AACrE,CAAC;AAED,kNAAkN;AAClN,MAAM,UAAU,mBAAmB,CAAC,aAAyB,EAAE,YAAwB;IACrF,OAAO,kBAAkB,CAAC,QAAQ,EAAE,aAAa,EAAE,YAAY,CAAC,CAAC;AACnE,CAAC;AAED,+EAA+E;AAC/E,EAAE;AACF,4EAA4E;AAC5E,2EAA2E;AAC3E,0EAA0E;AAC1E,8DAA8D;AAC9D,4EAA4E;AAC5E,4EAA4E;AAC5E,yEAAyE;AACzE,kCAAkC;AAElC,MAAM,qBAAqB,GAAG,4BAA4B,CAAC;AAC3D,MAAM,2BAA2B,GAAG,iCAAiC,CAAC;AAEtE,kJAAkJ;AAClJ,MAAM,UAAU,0BAA0B,CAAC,aAAyB,EAAE,YAAwB;IAC5F,OAAO,IAAI,CAAC,MAAM,EAAE,YAAY,EAAE,aAAa,EAAE,WAAW,CAAC,qBAAqB,CAAC,EAAE,EAAE,CAAC,CAAC;AAC3F,CAAC;AAED,uLAAuL;AACvL,MAAM,UAAU,yBAAyB,CAAC,UAAsB;IAC9D,OAAO,UAAU,CAAC,MAAM,CAAC,WAAW,CAAC,WAAW,CAAC,2BAA2B,CAAC,EAAE,UAAU,CAAC,CAAC,CAAC,CAAC;AAC/F,CAAC"}

package/dist/node/operator-claim.d.ts

@@ -1,49 +0,0 @@
-/** Node-only wallet-owned org claim helpers (v1.82, first-class-orgs). */
-import type { Run402 } from "../index.js";
-import type { ClaimResult } from "../namespaces/operator.js";
-export interface SignWalletOrgClaimOptions {
-    apiBase?: string;
-    allowancePath?: string;
-    /** SIWX chain id; defaults to `eip155:84532`. Not pinned by the gateway (only the nonce is action-bound). */
-    chainId?: string;
-    issuedAt?: string;
-    expirationTime?: string;
-}
-/**
- * Build the `SIGN-IN-WITH-X` wallet proof for a wallet-org claim: a fresh CAIP-122
- * SIWX message carrying the challenge `nonce`, signed by the local allowance.
- * The gateway binds the action/wallet/org/expiry server-side via the nonce, so
- * there is no canonical statement to match (simpler than `signCiDelegation`).
- */
-export declare function signWalletOrgClaim(nonce: string, opts?: SignWalletOrgClaimOptions): string;
-export interface ClaimWalletOrgOptions {
-    /**
-     * The wallet (0x EVM address) whose agent-owned org to claim. Defaults to the
-     * active allowance address — the proof is always signed by the active wallet,
-     * so an override must match the active wallet (select it via `--wallet`).
-     */
-    wallet?: string;
-    /** Org id to claim — supply only on the second round, after a `select_org` result. */
-    orgId?: string;
-    /** Optional label to set on the claimed org. `null`/`""` clears. */
-    displayName?: string | null;
-    /** Override the control-plane session bearer (default: the local live session cache). */
-    token?: string;
-    apiBase?: string;
-    allowancePath?: string;
-    controlPlaneSessionPath?: string;
-    chainId?: string;
-}
-/**
- * Run the full wallet-org claim dance (Node): resolve the human's write-capable
- * control-plane session from the local cache, request a challenge, sign the
- * nonce with the active allowance, and submit both proofs. Returns the
- * discriminated {@link ClaimResult} — a `select_org` result is returned, not
- * thrown; re-invoke with `{ orgId }` to claim a specific org (this re-runs a
- * fresh challenge + signature, which is fine: the nonce is claim-scoped).
- *
- * Does NOT drive the WebAuthn step-up: a stale session surfaces
- * `StepUpRequiredError` for the caller (CLI) to handle.
- */
-export declare function claimWalletOrg(r: Run402, opts?: ClaimWalletOrgOptions): Promise<ClaimResult>;
-//# sourceMappingURL=operator-claim.d.ts.map

package/dist/node/operator-claim.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"operator-claim.d.ts","sourceRoot":"","sources":["../../src/node/operator-claim.ts"],"names":[],"mappings":"AAAA,0EAA0E;AAO1E,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,2BAA2B,CAAC;AAE7D,MAAM,WAAW,yBAAyB;IACxC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,6GAA6G;IAC7G,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAED;;;;;GAKG;AACH,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,GAAE,yBAA8B,GAAG,MAAM,CAyB9F;AAED,MAAM,WAAW,qBAAqB;IACpC;;;;OAIG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,sFAAsF;IACtF,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,oEAAoE;IACpE,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,yFAAyF;IACzF,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,uBAAuB,CAAC,EAAE,MAAM,CAAC;IACjC,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED;;;;;;;;;;GAUG;AACH,wBAAsB,cAAc,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,GAAE,qBAA0B,GAAG,OAAO,CAAC,WAAW,CAAC,CAqCtG"}

package/dist/node/operator-claim.js

@@ -1,77 +0,0 @@
-/** Node-only wallet-owned org claim helpers (v1.82, first-class-orgs). */
-import { readAllowance } from "../../core-dist/allowance.js";
-import { buildSIWxAuthHeaders } from "../../core-dist/allowance-auth.js";
-import { getApiBase } from "../../core-dist/config.js";
-import { loadLiveControlPlaneSession } from "../../core-dist/control-plane-session.js";
-import { LocalError } from "../errors.js";
-/**
- * Build the `SIGN-IN-WITH-X` wallet proof for a wallet-org claim: a fresh CAIP-122
- * SIWX message carrying the challenge `nonce`, signed by the local allowance.
- * The gateway binds the action/wallet/org/expiry server-side via the nonce, so
- * there is no canonical statement to match (simpler than `signCiDelegation`).
- */
-export function signWalletOrgClaim(nonce, opts = {}) {
-    if (!nonce || typeof nonce !== "string") {
-        throw new LocalError("signWalletOrgClaim requires the challenge nonce", "signing wallet-org claim");
-    }
-    const allowance = readAllowance(opts.allowancePath);
-    if (!allowance || !allowance.address || !allowance.privateKey) {
-        throw new LocalError("No local allowance configured. Run `run402 init` or `run402 allowance create` before claiming a wallet org.", "signing wallet-org claim");
-    }
-    const apiBase = opts.apiBase ?? getApiBase();
-    const url = new URL("/agent/v1/operator/claim-wallet-org", apiBase);
-    const now = new Date();
-    const headers = buildSIWxAuthHeaders({
-        allowance,
-        domain: url.hostname,
-        uri: url.toString(),
-        statement: "Claim wallet-owned org",
-        chainId: opts.chainId ?? "eip155:84532",
-        nonce,
-        issuedAt: opts.issuedAt ?? now.toISOString(),
-        expirationTime: opts.expirationTime ?? new Date(now.getTime() + 5 * 60 * 1000).toISOString(),
-    });
-    return headers["SIGN-IN-WITH-X"];
-}
-/**
- * Run the full wallet-org claim dance (Node): resolve the human's write-capable
- * control-plane session from the local cache, request a challenge, sign the
- * nonce with the active allowance, and submit both proofs. Returns the
- * discriminated {@link ClaimResult} — a `select_org` result is returned, not
- * thrown; re-invoke with `{ orgId }` to claim a specific org (this re-runs a
- * fresh challenge + signature, which is fine: the nonce is claim-scoped).
- *
- * Does NOT drive the WebAuthn step-up: a stale session surfaces
- * `StepUpRequiredError` for the caller (CLI) to handle.
- */
-export async function claimWalletOrg(r, opts = {}) {
-    let token = opts.token;
-    if (!token) {
-        const session = loadLiveControlPlaneSession(opts.controlPlaneSessionPath);
-        if (!session) {
-            throw new LocalError("No live control-plane session. Run `run402 operator login --loopback` (write-capable, passkey-fresh) before claiming a wallet org.", "claiming wallet org");
-        }
-        token = session.control_plane_session_token;
-    }
-    let wallet = opts.wallet;
-    if (!wallet) {
-        const allowance = readAllowance(opts.allowancePath);
-        if (!allowance || !allowance.address) {
-            throw new LocalError("No wallet specified and no local allowance address found. Pass { wallet } or run `run402 init`.", "claiming wallet org");
-        }
-        wallet = allowance.address;
-    }
-    const challenge = await r.operator.claimWalletOrg.challenge({ wallet, token });
-    const siwx = signWalletOrgClaim(challenge.nonce, {
-        apiBase: opts.apiBase,
-        allowancePath: opts.allowancePath,
-        chainId: opts.chainId,
-    });
-    return r.operator.claimWalletOrg.submit({
-        token,
-        siwx,
-        orgId: opts.orgId,
-        displayName: opts.displayName,
-    });
-}
-//# sourceMappingURL=operator-claim.js.map

package/dist/node/operator-claim.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"operator-claim.js","sourceRoot":"","sources":["../../src/node/operator-claim.ts"],"names":[],"mappings":"AAAA,0EAA0E;AAE1E,OAAO,EAAE,aAAa,EAAE,MAAM,8BAA8B,CAAC;AAC7D,OAAO,EAAE,oBAAoB,EAAE,MAAM,mCAAmC,CAAC;AACzE,OAAO,EAAE,UAAU,EAAE,MAAM,2BAA2B,CAAC;AACvD,OAAO,EAAE,2BAA2B,EAAE,MAAM,0CAA0C,CAAC;AACvF,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAa1C;;;;;GAKG;AACH,MAAM,UAAU,kBAAkB,CAAC,KAAa,EAAE,OAAkC,EAAE;IACpF,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QACxC,MAAM,IAAI,UAAU,CAAC,iDAAiD,EAAE,0BAA0B,CAAC,CAAC;IACtG,CAAC;IACD,MAAM,SAAS,GAAG,aAAa,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;IACpD,IAAI,CAAC,SAAS,IAAI,CAAC,SAAS,CAAC,OAAO,IAAI,CAAC,SAAS,CAAC,UAAU,EAAE,CAAC;QAC9D,MAAM,IAAI,UAAU,CAClB,6GAA6G,EAC7G,0BAA0B,CAC3B,CAAC;IACJ,CAAC;IACD,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,UAAU,EAAE,CAAC;IAC7C,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,qCAAqC,EAAE,OAAO,CAAC,CAAC;IACpE,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;IACvB,MAAM,OAAO,GAAG,oBAAoB,CAAC;QACnC,SAAS;QACT,MAAM,EAAE,GAAG,CAAC,QAAQ;QACpB,GAAG,EAAE,GAAG,CAAC,QAAQ,EAAE;QACnB,SAAS,EAAE,wBAAwB;QACnC,OAAO,EAAE,IAAI,CAAC,OAAO,IAAI,cAAc;QACvC,KAAK;QACL,QAAQ,EAAE,IAAI,CAAC,QAAQ,IAAI,GAAG,CAAC,WAAW,EAAE;QAC5C,cAAc,EAAE,IAAI,CAAC,cAAc,IAAI,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,WAAW,EAAE;KAC7F,CAAC,CAAC;IACH,OAAO,OAAO,CAAC,gBAAgB,CAAC,CAAC;AACnC,CAAC;AAqBD;;;;;;;;;;GAUG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,CAAS,EAAE,OAA8B,EAAE;IAC9E,IAAI,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC;IACvB,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,OAAO,GAAG,2BAA2B,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC;QAC1E,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,IAAI,UAAU,CAClB,oIAAoI,EACpI,qBAAqB,CACtB,CAAC;QACJ,CAAC;QACD,KAAK,GAAG,OAAO,CAAC,2BAA2B,CAAC;IAC9C,CAAC;IAED,IAAI,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;IACzB,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,SAAS,GAAG,aAAa,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QACpD,IAAI,CAAC,SAAS,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,CAAC;YACrC,MAAM,IAAI,UAAU,CAClB,iGAAiG,EACjG,qBAAqB,CACtB,CAAC;QACJ,CAAC;QACD,MAAM,GAAG,SAAS,CAAC,OAAO,CAAC;IAC7B,CAAC;IAED,MAAM,SAAS,GAAG,MAAM,CAAC,CAAC,QAAQ,CAAC,cAAc,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;IAC/E,MAAM,IAAI,GAAG,kBAAkB,CAAC,SAAS,CAAC,KAAK,EAAE;QAC/C,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,aAAa,EAAE,IAAI,CAAC,aAAa;QACjC,OAAO,EAAE,IAAI,CAAC,OAAO;KACtB,CAAC,CAAC;IACH,OAAO,CAAC,CAAC,QAAQ,CAAC,cAAc,CAAC,MAAM,CAAC;QACtC,KAAK;QACL,IAAI;QACJ,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,WAAW,EAAE,IAAI,CAAC,WAAW;KAC9B,CAAC,CAAC;AACL,CAAC"}