@terminal3/t3n-sdk 2.5.0 → 2.7.0

package/dist/index.d.ts

@@ -730,17 +730,17 @@ interface DataGetResponse {
     payload_hex: string;
 }
 /**
- * The signed action envelope sent to `POST /api/org-data/execute`.
+ * Legacy direct-route org-data envelope shape retained for compatibility.
  *
- * Field order matches `node/service/src/org_data.rs::OrgDataSignedAction`
- * and `SignableEnvelope`.  The `signature` field is the EIP-191
- * personal_sign over the canonical JSON of the eight fields above it.
+ * This mirrors the removed `/api/user-contract/execute` body format from
+ * the transitional transport. New callers should use `OrgDataClient`,
+ * which now dispatches through authenticated `/api/rpc` +
+ * `action.execute` instead.
  */
 interface OrgDataActionWire {
     nonce: string;
     user_did: string;
     authenticator_id: string;
-    org_did: string;
     contract_id: string;
     function: string;
     args_hash: string;
@@ -1918,31 +1918,22 @@ interface BuildPayrollInvocationOpts {
 declare function buildPayrollInvocation(opts: BuildPayrollInvocationOpts): PayrollInvocation;
 
 /**
- * OrgDataClient — user-signed org-data dispatch client.
- *
- * Implements the two-step flow that `node/service/src/org_data.rs`
- * defines:
+ * OrgDataClient — typed wrapper over the existing authenticated
+ * `/api/rpc` + `action.execute` pipeline.
  *
- * 1. `POST /api/org-data/nonce` — fetch a single-use replay nonce.
- * 2. `POST /api/org-data/execute` — submit a signed envelope whose
- *    EIP-191 signature covers the canonical JSON of the eight
- *    `SignableEnvelope` fields, in the exact field-declaration order
- *    used by the Rust struct (see `org_data.rs` lines 104–117).
+ * Unlike the removed direct `/api/user-contract/*` transport, this
+ * client reuses Trinity's normal session-backed ETH auth flow:
  *
- * The `args_hash` is `hex(sha256(JSON.stringify(args)))` — the same
- * binding the Rust harness (`org_data_client.rs`) computes.
+ * 1. `auth.handshake`
+ * 2. `auth.authenticate`
+ * 3. `action.execute`
  *
- * `authenticator_id` is `"eth:0x<40 lowercase hex>"` derived
- * deterministically from the caller's ETH secret key.
+ * The class keeps its public constructor stable for callers that
+ * already have an ETH secret key and expected DID, but internally it
+ * owns a lazily-authenticated `T3nClient` instance rather than
+ * constructing one-shot signed HTTP envelopes per call.
  */
 
-/**
- * Options accepted by {@link executeOrgDataAction}.
- */
-interface ExecuteOrgDataActionOptions {
-    /** Envelope TTL in seconds. Defaults to {@link DEFAULT_ENVELOPE_TTL_SECS}. */
-    ttlSecs?: number;
-}
 interface CreatePolicyInput {
     orgDid: string;
     initialAdminDid: string;
@@ -2009,31 +2000,46 @@ interface DataGetInput {
     /** Hex-encoded entry ID (32 hex chars). */
     entryId: string;
 }
+interface ExecuteOrgDataActionOptions {
+    /**
+     * Deprecated. The direct signed-envelope transport used this as the
+     * envelope expiry window; the session-backed RPC path ignores it.
+     */
+    ttlSecs?: number;
+}
 /**
  * Options used when constructing an {@link OrgDataClient}.
  */
-interface OrgDataClientOptions {
-    /** Envelope TTL in seconds applied to every call. Default: 300. */
-    ttlSecs?: number;
+interface OrgDataClientOptions extends ExecuteOrgDataActionOptions {
+    /** Optional preloaded WASM component for tests or shared callers. */
+    wasmComponent?: WasmComponent;
+    /** Optional transport override, primarily for tests. */
+    transport?: Transport;
+    /**
+     * Optional handler overrides. If `EthSign` is omitted, the client
+     * uses the supplied `ethSecret` to satisfy Trinity's existing ETH
+     * auth challenge flow automatically.
+     */
+    handlers?: GuestToHostHandlers;
 }
 /**
- * Client for the user-authenticated org-data dispatch API.
+ * Client for session-authenticated org-data contract execution.
  *
  * Constructed with the node's base URL, the caller's 32-byte ETH secret
- * key, and the caller's DID (`did:t3n:<40-hex>`).  Every method
- * transparently fetches a fresh nonce, signs the envelope with EIP-191,
- * and posts to `/api/org-data/execute`.
- *
- * The signing key must be the same key registered as an authenticator
- * (`eth:0x<addr>`) for `userDid` in the DID registry — the service
- * verifies this binding before dispatching any contract call.
+ * key, and the caller's DID (`did:t3n:<40-hex>`).  The first method call
+ * lazily creates a `T3nClient`, completes ETH session auth, verifies that
+ * the authenticated DID matches `userDid`, and then reuses that session for
+ * subsequent contract calls.
  */
 declare class OrgDataClient {
     private readonly baseUrl;
     private readonly ethSecret;
     private readonly userDid;
     private readonly opts;
+    private clientPromise;
     constructor(baseUrl: string, ethSecret: Uint8Array, userDid: string, opts?: OrgDataClientOptions);
+    private getAuthenticatedClient;
+    private initialiseClient;
     private call;
     /**
      * Initialise the data-tier policy for an existing organisation.