@terminal3/t3n-sdk 2.5.0 → 2.7.0

package/dist/src/client/org-data.d.ts

@@ -1,46 +1,25 @@
 /**
- * OrgDataClient — user-signed org-data dispatch client.
+ * OrgDataClient — typed wrapper over the existing authenticated
+ * `/api/rpc` + `action.execute` pipeline.
  *
- * Implements the two-step flow that `node/service/src/org_data.rs`
- * defines:
+ * Unlike the removed direct `/api/user-contract/*` transport, this
+ * client reuses Trinity's normal session-backed ETH auth flow:
  *
- * 1. `POST /api/org-data/nonce` — fetch a single-use replay nonce.
- * 2. `POST /api/org-data/execute` — submit a signed envelope whose
- *    EIP-191 signature covers the canonical JSON of the eight
- *    `SignableEnvelope` fields, in the exact field-declaration order
- *    used by the Rust struct (see `org_data.rs` lines 104–117).
+ * 1. `auth.handshake`
+ * 2. `auth.authenticate`
+ * 3. `action.execute`
  *
- * The `args_hash` is `hex(sha256(JSON.stringify(args)))` — the same
- * binding the Rust harness (`org_data_client.rs`) computes.
- *
- * `authenticator_id` is `"eth:0x<40 lowercase hex>"` derived
- * deterministically from the caller's ETH secret key.
+ * The class keeps its public constructor stable for callers that
+ * already have an ETH secret key and expected DID, but internally it
+ * owns a lazily-authenticated `T3nClient` instance rather than
+ * constructing one-shot signed HTTP envelopes per call.
  */
+import type { Transport } from "./transport";
+import { T3nClient } from "./t3n-client";
+import type { WasmComponent } from "../wasm";
+import { type GuestToHostHandlers } from "../types";
 import type { OrgContractGrants, OrgPolicyMeta, OrgWriters, DataListResponse, DataGetResponse, MutationResponse, UserGrant } from "../types/org-data";
-/**
- * Derive the `"eth:0x<40 lowercase hex>"` authenticator string
- * deterministically from a 32-byte ETH secret key.
- *
- * Mirrors `authenticator_id_from_eth_secret` in
- * `node/tests/harness/src/org_data_client.rs`.
- */
-declare function authenticatorIdFromEthSecret(ethSecret: Uint8Array): string;
-/**
- * Options accepted by {@link executeOrgDataAction}.
- */
-export interface ExecuteOrgDataActionOptions {
-    /** Envelope TTL in seconds. Defaults to {@link DEFAULT_ENVELOPE_TTL_SECS}. */
-    ttlSecs?: number;
-}
-/**
- * Sign and dispatch a user-authenticated org-data action.
- *
- * `args` MUST contain an `org_did` field matching `orgDid` — the
- * service verifies envelope-vs-args binding before dispatching.
- *
- * Returns the contract's JSON response on success.
- */
-declare function executeOrgDataAction(baseUrl: string, ethSecret: Uint8Array, userDid: string, orgDid: string, functionName: string, args: Record<string, unknown>, opts?: ExecuteOrgDataActionOptions): Promise<unknown>;
+declare function executeOrgDataAction(client: T3nClient, baseUrl: string, functionName: string, args: Record<string, unknown>): Promise<unknown>;
 export interface CreatePolicyInput {
     orgDid: string;
     initialAdminDid: string;
@@ -107,31 +86,46 @@ export interface DataGetInput {
     /** Hex-encoded entry ID (32 hex chars). */
     entryId: string;
 }
+export interface ExecuteOrgDataActionOptions {
+    /**
+     * Deprecated. The direct signed-envelope transport used this as the
+     * envelope expiry window; the session-backed RPC path ignores it.
+     */
+    ttlSecs?: number;
+}
 /**
  * Options used when constructing an {@link OrgDataClient}.
  */
-export interface OrgDataClientOptions {
-    /** Envelope TTL in seconds applied to every call. Default: 300. */
-    ttlSecs?: number;
+export interface OrgDataClientOptions extends ExecuteOrgDataActionOptions {
+    /** Optional preloaded WASM component for tests or shared callers. */
+    wasmComponent?: WasmComponent;
+    /** Optional transport override, primarily for tests. */
+    transport?: Transport;
+    /**
+     * Optional handler overrides. If `EthSign` is omitted, the client
+     * uses the supplied `ethSecret` to satisfy Trinity's existing ETH
+     * auth challenge flow automatically.
+     */
+    handlers?: GuestToHostHandlers;
 }
 /**
- * Client for the user-authenticated org-data dispatch API.
+ * Client for session-authenticated org-data contract execution.
  *
  * Constructed with the node's base URL, the caller's 32-byte ETH secret
- * key, and the caller's DID (`did:t3n:<40-hex>`).  Every method
- * transparently fetches a fresh nonce, signs the envelope with EIP-191,
- * and posts to `/api/org-data/execute`.
- *
- * The signing key must be the same key registered as an authenticator
- * (`eth:0x<addr>`) for `userDid` in the DID registry — the service
- * verifies this binding before dispatching any contract call.
+ * key, and the caller's DID (`did:t3n:<40-hex>`).  The first method call
+ * lazily creates a `T3nClient`, completes ETH session auth, verifies that
+ * the authenticated DID matches `userDid`, and then reuses that session for
+ * subsequent contract calls.
  */
 export declare class OrgDataClient {
     private readonly baseUrl;
     private readonly ethSecret;
     private readonly userDid;
     private readonly opts;
+    private clientPromise;
     constructor(baseUrl: string, ethSecret: Uint8Array, userDid: string, opts?: OrgDataClientOptions);
+    private getAuthenticatedClient;
+    private initialiseClient;
     private call;
     /**
      * Initialise the data-tier policy for an existing organisation.
@@ -198,4 +192,4 @@ export declare class OrgDataClient {
     /** Retrieve a single data entry by entry ID (admin-only). */
     dataGet(input: DataGetInput): Promise<DataGetResponse>;
 }
-export { executeOrgDataAction, authenticatorIdFromEthSecret };
+export { executeOrgDataAction };

package/dist/src/types/org-data.d.ts

@@ -128,17 +128,17 @@ export interface DataGetResponse {
     payload_hex: string;
 }
 /**
- * The signed action envelope sent to `POST /api/org-data/execute`.
+ * Legacy direct-route org-data envelope shape retained for compatibility.
  *
- * Field order matches `node/service/src/org_data.rs::OrgDataSignedAction`
- * and `SignableEnvelope`.  The `signature` field is the EIP-191
- * personal_sign over the canonical JSON of the eight fields above it.
+ * This mirrors the removed `/api/user-contract/execute` body format from
+ * the transitional transport. New callers should use `OrgDataClient`,
+ * which now dispatches through authenticated `/api/rpc` +
+ * `action.execute` instead.
  */
 export interface OrgDataActionWire {
     nonce: string;
     user_did: string;
     authenticator_id: string;
-    org_did: string;
     contract_id: string;
     function: string;
     args_hash: string;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@terminal3/t3n-sdk",
-  "version": "2.5.0",
+  "version": "2.7.0",
   "type": "module",
   "description": "T3n TypeScript SDK - A minimal SDK that mirrors the server's RPC handler approach",
   "main": "dist/index.js",
@@ -108,13 +108,5 @@
     "@noble/hashes": "^2.2.0",
     "canonicalize": "^3.0.0",
     "ethers": "^6.16.0"
-  },
-  "pnpm": {
-    "overrides": {
-      "rollup": ">=4.59.0",
-      "esbuild": ">=0.25.0",
-      "minimatch": ">=9.0.7",
-      "postcss": ">=8.5.10"
-    }
   }
-}
+}