@tillstack/secrets-edge 0.2.1 → 0.3.0

package/dist/index.d.mts

@@ -1,8 +1,25 @@
-import { SecretsClientOptions, SecretsClient } from '@tillstack/secrets-core';
+import { BrokerClient, SecretsClientOptions, SecretsClient } from '@tillstack/secrets-core';
 export * from '@tillstack/secrets-core';
 
 /** Create a TillSecrets client. Pass an explicit `fetch` if the runtime has no
  *  global one. */
 declare function createClient(opts: SecretsClientOptions): SecretsClient;
+interface CreateEdgeBrokerOptions {
+    /** Cloud API base (derives the spend endpoint) — or pass `endpoint` directly. */
+    url?: string;
+    /** Full spend endpoint; overrides `url`. */
+    endpoint?: string;
+    /** Bearer token — a session / `tp_` API key (NOT the `ts_` service token). */
+    token: string;
+    /** Stable agent identity — required by the cloud broker. */
+    agentKey: string;
+    sessionId?: string;
+    timeoutMs?: number;
+    fetch?: typeof fetch;
+}
+/** Create a secretless-broker client for an edge runtime. Edge has no local bridge,
+ *  so this always targets the cloud broker; pass config explicitly (edge runtimes
+ *  have no `process.env`). See `@tillstack/secrets-node` for the auto/bridge mode. */
+declare function createBroker(opts: CreateEdgeBrokerOptions): BrokerClient;
 
-export { createClient, createClient as default };
+export { type CreateEdgeBrokerOptions, createBroker, createClient, createClient as default };

package/dist/index.d.ts

@@ -1,8 +1,25 @@
-import { SecretsClientOptions, SecretsClient } from '@tillstack/secrets-core';
+import { BrokerClient, SecretsClientOptions, SecretsClient } from '@tillstack/secrets-core';
 export * from '@tillstack/secrets-core';
 
 /** Create a TillSecrets client. Pass an explicit `fetch` if the runtime has no
  *  global one. */
 declare function createClient(opts: SecretsClientOptions): SecretsClient;
+interface CreateEdgeBrokerOptions {
+    /** Cloud API base (derives the spend endpoint) — or pass `endpoint` directly. */
+    url?: string;
+    /** Full spend endpoint; overrides `url`. */
+    endpoint?: string;
+    /** Bearer token — a session / `tp_` API key (NOT the `ts_` service token). */
+    token: string;
+    /** Stable agent identity — required by the cloud broker. */
+    agentKey: string;
+    sessionId?: string;
+    timeoutMs?: number;
+    fetch?: typeof fetch;
+}
+/** Create a secretless-broker client for an edge runtime. Edge has no local bridge,
+ *  so this always targets the cloud broker; pass config explicitly (edge runtimes
+ *  have no `process.env`). See `@tillstack/secrets-node` for the auto/bridge mode. */
+declare function createBroker(opts: CreateEdgeBrokerOptions): BrokerClient;
 
-export { createClient, createClient as default };
+export { type CreateEdgeBrokerOptions, createBroker, createClient, createClient as default };

package/dist/index.js

@@ -8,8 +8,17 @@ var secretsCore = require('@tillstack/secrets-core');
 function createClient(opts) {
   return new secretsCore.SecretsClient(opts);
 }
+function createBroker(opts) {
+  const endpoint = opts.endpoint ?? `${(opts.url ?? "https://tilldev.dev").replace(/\/$/, "")}/api/secrets/broker/spend`;
+  const built = { endpoint, token: opts.token, agentKey: opts.agentKey };
+  if (opts.sessionId !== void 0) built.sessionId = opts.sessionId;
+  if (opts.timeoutMs !== void 0) built.timeoutMs = opts.timeoutMs;
+  if (opts.fetch) built.fetch = opts.fetch;
+  return new secretsCore.BrokerClient(built);
+}
 var src_default = createClient;
 
+exports.createBroker = createBroker;
 exports.createClient = createClient;
 exports.default = src_default;
 Object.keys(secretsCore).forEach(function (k) {

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/index.ts"],"names":["SecretsClient"],"mappings":";;;;;;;AAYO,SAAS,aAAa,IAAA,EAA2C;AACtE,EAAA,OAAO,IAAIA,0BAAc,IAAI,CAAA;AAC/B;AAEA,IAAO,WAAA,GAAQ","file":"index.js","sourcesContent":["// @tillstack/secrets-edge — TillSecrets client for edge runtimes.\n//\n//   import { createClient } from '@tillstack/secrets-edge'\n//   const secrets = createClient({ url: env.TILLSECRETS_URL, token: env.TILLSECRETS_TOKEN })\n//   const { secrets: map } = await secrets.pull()\n\nimport { SecretsClient, type SecretsClientOptions } from '@tillstack/secrets-core'\n\nexport * from '@tillstack/secrets-core'\n\n/** Create a TillSecrets client. Pass an explicit `fetch` if the runtime has no\n *  global one. */\nexport function createClient(opts: SecretsClientOptions): SecretsClient {\n  return new SecretsClient(opts)\n}\n\nexport default createClient\n"]}
+{"version":3,"sources":["../src/index.ts"],"names":["SecretsClient","BrokerClient"],"mappings":";;;;;;;AAYO,SAAS,aAAa,IAAA,EAA2C;AACtE,EAAA,OAAO,IAAIA,0BAAc,IAAI,CAAA;AAC/B;AAmBO,SAAS,aAAa,IAAA,EAA6C;AACxE,EAAA,MAAM,QAAA,GAAW,IAAA,CAAK,QAAA,IAAY,CAAA,EAAA,CAAI,IAAA,CAAK,OAAO,qBAAA,EAAuB,OAAA,CAAQ,KAAA,EAAO,EAAE,CAAC,CAAA,yBAAA,CAAA;AAC3F,EAAA,MAAM,KAAA,GAA6B,EAAE,QAAA,EAAU,KAAA,EAAO,KAAK,KAAA,EAAO,QAAA,EAAU,KAAK,QAAA,EAAS;AAC1F,EAAA,IAAI,IAAA,CAAK,SAAA,KAAc,MAAA,EAAW,KAAA,CAAM,YAAY,IAAA,CAAK,SAAA;AACzD,EAAA,IAAI,IAAA,CAAK,SAAA,KAAc,MAAA,EAAW,KAAA,CAAM,YAAY,IAAA,CAAK,SAAA;AACzD,EAAA,IAAI,IAAA,CAAK,KAAA,EAAO,KAAA,CAAM,KAAA,GAAQ,IAAA,CAAK,KAAA;AACnC,EAAA,OAAO,IAAIC,yBAAa,KAAK,CAAA;AAC/B;AAEA,IAAO,WAAA,GAAQ","file":"index.js","sourcesContent":["// @tillstack/secrets-edge — TillSecrets client for edge runtimes.\n//\n//   import { createClient } from '@tillstack/secrets-edge'\n//   const secrets = createClient({ url: env.TILLSECRETS_URL, token: env.TILLSECRETS_TOKEN })\n//   const { secrets: map } = await secrets.pull()\n\nimport { SecretsClient, BrokerClient, type SecretsClientOptions, type BrokerClientOptions } from '@tillstack/secrets-core'\n\nexport * from '@tillstack/secrets-core'\n\n/** Create a TillSecrets client. Pass an explicit `fetch` if the runtime has no\n *  global one. */\nexport function createClient(opts: SecretsClientOptions): SecretsClient {\n  return new SecretsClient(opts)\n}\n\nexport interface CreateEdgeBrokerOptions {\n  /** Cloud API base (derives the spend endpoint) — or pass `endpoint` directly. */\n  url?: string\n  /** Full spend endpoint; overrides `url`. */\n  endpoint?: string\n  /** Bearer token — a session / `tp_` API key (NOT the `ts_` service token). */\n  token: string\n  /** Stable agent identity — required by the cloud broker. */\n  agentKey: string\n  sessionId?: string\n  timeoutMs?: number\n  fetch?: typeof fetch\n}\n\n/** Create a secretless-broker client for an edge runtime. Edge has no local bridge,\n *  so this always targets the cloud broker; pass config explicitly (edge runtimes\n *  have no `process.env`). See `@tillstack/secrets-node` for the auto/bridge mode. */\nexport function createBroker(opts: CreateEdgeBrokerOptions): BrokerClient {\n  const endpoint = opts.endpoint ?? `${(opts.url ?? 'https://tilldev.dev').replace(/\\/$/, '')}/api/secrets/broker/spend`\n  const built: BrokerClientOptions = { endpoint, token: opts.token, agentKey: opts.agentKey }\n  if (opts.sessionId !== undefined) built.sessionId = opts.sessionId\n  if (opts.timeoutMs !== undefined) built.timeoutMs = opts.timeoutMs\n  if (opts.fetch) built.fetch = opts.fetch\n  return new BrokerClient(built)\n}\n\nexport default createClient\n"]}

package/dist/index.mjs

@@ -1,12 +1,20 @@
-import { SecretsClient } from '@tillstack/secrets-core';
+import { SecretsClient, BrokerClient } from '@tillstack/secrets-core';
 export * from '@tillstack/secrets-core';
 
 // src/index.ts
 function createClient(opts) {
   return new SecretsClient(opts);
 }
+function createBroker(opts) {
+  const endpoint = opts.endpoint ?? `${(opts.url ?? "https://tilldev.dev").replace(/\/$/, "")}/api/secrets/broker/spend`;
+  const built = { endpoint, token: opts.token, agentKey: opts.agentKey };
+  if (opts.sessionId !== void 0) built.sessionId = opts.sessionId;
+  if (opts.timeoutMs !== void 0) built.timeoutMs = opts.timeoutMs;
+  if (opts.fetch) built.fetch = opts.fetch;
+  return new BrokerClient(built);
+}
 var src_default = createClient;
 
-export { createClient, src_default as default };
+export { createBroker, createClient, src_default as default };
 //# sourceMappingURL=index.mjs.map
 //# sourceMappingURL=index.mjs.map

package/dist/index.mjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/index.ts"],"names":[],"mappings":";;;;AAYO,SAAS,aAAa,IAAA,EAA2C;AACtE,EAAA,OAAO,IAAI,cAAc,IAAI,CAAA;AAC/B;AAEA,IAAO,WAAA,GAAQ","file":"index.mjs","sourcesContent":["// @tillstack/secrets-edge — TillSecrets client for edge runtimes.\n//\n//   import { createClient } from '@tillstack/secrets-edge'\n//   const secrets = createClient({ url: env.TILLSECRETS_URL, token: env.TILLSECRETS_TOKEN })\n//   const { secrets: map } = await secrets.pull()\n\nimport { SecretsClient, type SecretsClientOptions } from '@tillstack/secrets-core'\n\nexport * from '@tillstack/secrets-core'\n\n/** Create a TillSecrets client. Pass an explicit `fetch` if the runtime has no\n *  global one. */\nexport function createClient(opts: SecretsClientOptions): SecretsClient {\n  return new SecretsClient(opts)\n}\n\nexport default createClient\n"]}
+{"version":3,"sources":["../src/index.ts"],"names":[],"mappings":";;;;AAYO,SAAS,aAAa,IAAA,EAA2C;AACtE,EAAA,OAAO,IAAI,cAAc,IAAI,CAAA;AAC/B;AAmBO,SAAS,aAAa,IAAA,EAA6C;AACxE,EAAA,MAAM,QAAA,GAAW,IAAA,CAAK,QAAA,IAAY,CAAA,EAAA,CAAI,IAAA,CAAK,OAAO,qBAAA,EAAuB,OAAA,CAAQ,KAAA,EAAO,EAAE,CAAC,CAAA,yBAAA,CAAA;AAC3F,EAAA,MAAM,KAAA,GAA6B,EAAE,QAAA,EAAU,KAAA,EAAO,KAAK,KAAA,EAAO,QAAA,EAAU,KAAK,QAAA,EAAS;AAC1F,EAAA,IAAI,IAAA,CAAK,SAAA,KAAc,MAAA,EAAW,KAAA,CAAM,YAAY,IAAA,CAAK,SAAA;AACzD,EAAA,IAAI,IAAA,CAAK,SAAA,KAAc,MAAA,EAAW,KAAA,CAAM,YAAY,IAAA,CAAK,SAAA;AACzD,EAAA,IAAI,IAAA,CAAK,KAAA,EAAO,KAAA,CAAM,KAAA,GAAQ,IAAA,CAAK,KAAA;AACnC,EAAA,OAAO,IAAI,aAAa,KAAK,CAAA;AAC/B;AAEA,IAAO,WAAA,GAAQ","file":"index.mjs","sourcesContent":["// @tillstack/secrets-edge — TillSecrets client for edge runtimes.\n//\n//   import { createClient } from '@tillstack/secrets-edge'\n//   const secrets = createClient({ url: env.TILLSECRETS_URL, token: env.TILLSECRETS_TOKEN })\n//   const { secrets: map } = await secrets.pull()\n\nimport { SecretsClient, BrokerClient, type SecretsClientOptions, type BrokerClientOptions } from '@tillstack/secrets-core'\n\nexport * from '@tillstack/secrets-core'\n\n/** Create a TillSecrets client. Pass an explicit `fetch` if the runtime has no\n *  global one. */\nexport function createClient(opts: SecretsClientOptions): SecretsClient {\n  return new SecretsClient(opts)\n}\n\nexport interface CreateEdgeBrokerOptions {\n  /** Cloud API base (derives the spend endpoint) — or pass `endpoint` directly. */\n  url?: string\n  /** Full spend endpoint; overrides `url`. */\n  endpoint?: string\n  /** Bearer token — a session / `tp_` API key (NOT the `ts_` service token). */\n  token: string\n  /** Stable agent identity — required by the cloud broker. */\n  agentKey: string\n  sessionId?: string\n  timeoutMs?: number\n  fetch?: typeof fetch\n}\n\n/** Create a secretless-broker client for an edge runtime. Edge has no local bridge,\n *  so this always targets the cloud broker; pass config explicitly (edge runtimes\n *  have no `process.env`). See `@tillstack/secrets-node` for the auto/bridge mode. */\nexport function createBroker(opts: CreateEdgeBrokerOptions): BrokerClient {\n  const endpoint = opts.endpoint ?? `${(opts.url ?? 'https://tilldev.dev').replace(/\\/$/, '')}/api/secrets/broker/spend`\n  const built: BrokerClientOptions = { endpoint, token: opts.token, agentKey: opts.agentKey }\n  if (opts.sessionId !== undefined) built.sessionId = opts.sessionId\n  if (opts.timeoutMs !== undefined) built.timeoutMs = opts.timeoutMs\n  if (opts.fetch) built.fetch = opts.fetch\n  return new BrokerClient(built)\n}\n\nexport default createClient\n"]}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@tillstack/secrets-edge",
-  "version": "0.2.1",
+  "version": "0.3.0",
   "description": "TillSecrets client for any edge runtime (Cloudflare Workers, Vercel Edge, Deno, Bun) — pull encrypted config over one authenticated fetch, zero Node built-ins.",
   "main": "./dist/index.js",
   "module": "./dist/index.mjs",
@@ -24,7 +24,7 @@
     "dist"
   ],
   "dependencies": {
-    "@tillstack/secrets-core": "^0.2.1"
+    "@tillstack/secrets-core": "^0.3.0"
   },
   "devDependencies": {
     "tsup": "^8.5.1",