@ultrst-armada/kloks 1.2.1 → 1.3.0

package/packages/backend/dist/srkl/index.d.ts

@@ -96,6 +96,38 @@ interface AdaptedStorageConnection {
     s3Region?: string;
     s3Endpoint?: string;
 }
+interface KeyMaterial {
+    secretHex: string;
+    cipher: 'aes-256-gcm';
+    envelope: 'salt_iv_tag_ciphertext';
+}
+interface SrklVaultAccessResponse {
+    success: boolean;
+    appId: string;
+    workspaceId: string;
+    workspaceName: string;
+    folderPrefix: string;
+    storageProvider: 'backblaze_b2' | 'cloudflare_r2' | 'aws_s3' | string;
+    presignedUrl: string;
+    keyMaterial: KeyMaterial;
+    supportedServices: string[];
+    expiresAt: string;
+    ttlSeconds: number;
+}
+interface ServiceAccountEntry {
+    id: string;
+    serviceId: string;
+    name: string;
+    credentials: Record<string, any>;
+    status?: string;
+    lastSync?: string;
+    metadata?: Record<string, any>;
+    createdAt?: string;
+    updatedAt?: string;
+}
+interface CredentialRegistryMap {
+    [serviceId: string]: ServiceAccountEntry[];
+}
 
 /**
  * @file SrklClient.ts
@@ -188,4 +220,79 @@ interface UseSrklServicesResult {
 }
 declare function useSrklServices(options: UseSrklServicesOptions): UseSrklServicesResult;
 
-export { type AdaptedStorageConnection, type AppAccountManifest, type AppServiceDeclaration, CANONICAL_SRKL_URL, type EcosystemAccount, type EcosystemAccountsRequest, type EcosystemAccountsResponse, type EcosystemServiceCategory, SrklClient, type SrklClientOptions, type SrklEcosystemQueryOptions, type SrklEcosystemResponse, type SrklServiceAccount, type UseSrklServicesOptions, type UseSrklServicesResult, createSrklClient, getPrimarySrklDeploymentUrl, getSrklAccounts, srklListBackblazeBuckets, useSrklServices };
+declare function hexToBytes(hex: string): Uint8Array;
+/**
+ * Decrypt an AES-256-GCM vault envelope in browser memory using Web Crypto API.
+ */
+declare function decryptVaultBufferInBrowser(envelopeBuffer: ArrayBuffer | Uint8Array, secretHex: string): Promise<Uint8Array>;
+
+declare class SrklCredentialRegistry {
+    private registry;
+    constructor();
+    /**
+     * Populate the in-memory registry directly from an initialized sql.js Database instance.
+     * Performs the set intersection: DB.services ∩ DEPM.supported_services.
+     */
+    populateFromSqlite(db: any, supportedServices: string[]): void;
+    /**
+     * Register a service account in volatile memory (for manual entry or synced accounts)
+     */
+    registerServiceAccount(account: ServiceAccountEntry): void;
+    getAccountsForService(serviceId: string): ServiceAccountEntry[];
+    getPrimaryAccount(serviceId: string): ServiceAccountEntry | null;
+    hasCredentials(serviceId: string): boolean;
+    listAvailableServices(): string[];
+    toMap(): CredentialRegistryMap;
+    clear(): void;
+}
+declare const globalCredentialRegistry: SrklCredentialRegistry;
+
+interface VaultAccessClientOptions {
+    srklApiBaseUrl: string;
+    appId: string;
+    supportedServices: string[];
+}
+declare class SrklVaultAccessClient {
+    private readonly options;
+    private registry;
+    private activeGrant;
+    private sqlEngine;
+    constructor(options: VaultAccessClientOptions);
+    /**
+     * Initialize sql.js engine (WASM).
+     * Consumers can pass pre-loaded initSqlJs or let this load from window or CDN.
+     */
+    initSqlEngine(customInitSqlJs?: any): Promise<any>;
+    /**
+     * Full pipeline: Authorize → Presigned URL → Direct Download → Decrypt → SQLite Query → Registry.
+     */
+    loadCredentials(userSessionToken: string, workspaceId?: string, customInitSqlJs?: any): Promise<SrklCredentialRegistry>;
+    getRegistry(): SrklCredentialRegistry;
+    getActiveGrant(): SrklVaultAccessResponse | null;
+    clear(): void;
+}
+
+declare function syncSrklAccounts(userId: string, sessionToken: string, srklUrl?: string): Promise<{
+    success: boolean;
+    accounts?: any[];
+    error?: string;
+    sourceUrl?: string;
+}>;
+
+declare const srklService: {
+    name: string;
+    description: string;
+    runtime: {
+        VaultAccessClient: typeof SrklVaultAccessClient;
+        CredentialRegistry: typeof SrklCredentialRegistry;
+        decryptVaultBufferInBrowser: typeof decryptVaultBufferInBrowser;
+        hexToBytes: typeof hexToBytes;
+    };
+    deployment: {
+        target: string;
+        supportedEngines: string[];
+        version: string;
+    };
+};
+
+export { type AdaptedStorageConnection, type AppAccountManifest, type AppServiceDeclaration, CANONICAL_SRKL_URL, type CredentialRegistryMap, type EcosystemAccount, type EcosystemAccountsRequest, type EcosystemAccountsResponse, type EcosystemServiceCategory, type KeyMaterial, type ServiceAccountEntry, SrklClient, type SrklClientOptions, SrklCredentialRegistry, type SrklEcosystemQueryOptions, type SrklEcosystemResponse, type SrklServiceAccount, SrklVaultAccessClient, type SrklVaultAccessResponse, type UseSrklServicesOptions, type UseSrklServicesResult, type VaultAccessClientOptions, createSrklClient, decryptVaultBufferInBrowser, getPrimarySrklDeploymentUrl, getSrklAccounts, globalCredentialRegistry, hexToBytes, srklListBackblazeBuckets, srklService, syncSrklAccounts, useSrklServices };

package/packages/backend/dist/srkl/index.js

@@ -1,19 +1,33 @@
 import {
   CANONICAL_SRKL_URL,
   SrklClient,
+  SrklCredentialRegistry,
+  SrklVaultAccessClient,
   createSrklClient,
+  decryptVaultBufferInBrowser,
   getPrimarySrklDeploymentUrl,
   getSrklAccounts,
+  globalCredentialRegistry,
+  hexToBytes,
   srklListBackblazeBuckets,
+  srklService,
+  syncSrklAccounts,
   useSrklServices
-} from "../chunk-MN54ZIKZ.js";
+} from "../chunk-KX3OTBQ3.js";
 import "../chunk-4QEMALXF.js";
 export {
   CANONICAL_SRKL_URL,
   SrklClient,
+  SrklCredentialRegistry,
+  SrklVaultAccessClient,
   createSrklClient,
+  decryptVaultBufferInBrowser,
   getPrimarySrklDeploymentUrl,
   getSrklAccounts,
+  globalCredentialRegistry,
+  hexToBytes,
   srklListBackblazeBuckets,
+  srklService,
+  syncSrklAccounts,
   useSrklServices
 };

package/packages/state-graph/dist/index.js

@@ -13,7 +13,6 @@ import {
   SkipoExecutionEngine,
   useCommand
 } from "./chunk-ZTHBPV24.js";
-import "./chunk-RHRXPY2U.js";
 import {
   AttractionEngine,
   GhostInferenceEngine,
@@ -23,12 +22,23 @@ import {
   getBeamPoints,
   useMagneticTraces
 } from "./chunk-JXDJZSFW.js";
+import "./chunk-RHRXPY2U.js";
 import {
   ConnectionRuleStore,
   HandleTypeRegistry,
   WireTypeRegistry,
   initializeDefaultGraphRules
 } from "./chunk-TZOL3RN7.js";
+import "./chunk-Q5I42UX7.js";
+import {
+  LifecycleCycleError,
+  LifecycleGraph,
+  SKIPO_STATE,
+  SkipoStateEngine,
+  useLifecycleScope,
+  useSkipoBind,
+  useSkipoState
+} from "./chunk-SHIBCPGQ.js";
 import {
   CommandApi,
   GhostStore,
@@ -56,16 +66,6 @@ import {
 import {
   CompatibilityMatrix
 } from "./chunk-ISFNY7EZ.js";
-import "./chunk-Q5I42UX7.js";
-import {
-  LifecycleCycleError,
-  LifecycleGraph,
-  SKIPO_STATE,
-  SkipoStateEngine,
-  useLifecycleScope,
-  useSkipoBind,
-  useSkipoState
-} from "./chunk-SHIBCPGQ.js";
 import "./chunk-3RG5ZIWI.js";
 
 // ../../node_modules/.pnpm/@ultrst-armada+krnl@1.0.0/node_modules/@ultrst-armada/krnl/packages/core/dist/index.js

package/packages/backend/dist/chunk-P4HL4C6V.js

@@ -1,149 +0,0 @@
-import {
-  createService,
-  createServiceDefinition,
-  createServiceProxy
-} from "./chunk-IPP4VURQ.js";
-
-// src/services/ServiceBoundary.ts
-function createLocalService(definition) {
-  return createService(createServiceDefinition(definition));
-}
-function createRemoteService(definition, adapter, endpoint) {
-  return createServiceProxy(definition, adapter, endpoint);
-}
-
-// src/services/CompositeBackend.ts
-var CompositeBackend = class {
-  id;
-  name;
-  version;
-  services = /* @__PURE__ */ new Map();
-  capabilitiesList = [];
-  constructor(name, version = "1.0.0") {
-    this.name = name;
-    this.id = `backend-${name}`;
-    this.version = version;
-  }
-  registerService(service) {
-    this.services.set(service.name, service);
-    return this;
-  }
-  getService(name) {
-    return this.services.get(name);
-  }
-  getServices() {
-    return Array.from(this.services.values());
-  }
-  registerCapability(capability) {
-    if (!this.capabilitiesList.includes(capability)) {
-      this.capabilitiesList.push(capability);
-    }
-    return this;
-  }
-  async start() {
-    for (const service of this.services.values()) {
-      await service.start();
-    }
-  }
-  async stop() {
-    for (const service of this.services.values()) {
-      await service.stop();
-    }
-  }
-  async call(op, input, ctx) {
-    const firstDot = op.indexOf(".");
-    if (firstDot === -1) {
-      throw new Error(`[CompositeBackend] Invalid operation '${op}'. Expected 'service.operation'.`);
-    }
-    const serviceName = op.slice(0, firstDot);
-    const operationName = op.slice(firstDot + 1);
-    const service = this.services.get(serviceName);
-    if (!service) {
-      throw new Error(`[CompositeBackend] Service '${serviceName}' not registered in '${this.name}'.`);
-    }
-    return await service.call(operationName, input, ctx);
-  }
-  getState() {
-    const aggregated = {};
-    for (const [name, service] of this.services) {
-      aggregated[name] = service.getState();
-    }
-    return Object.freeze(aggregated);
-  }
-  setState(_mutation) {
-  }
-  on(event, handler) {
-    const [serviceName, eventName] = event.split(".");
-    const service = this.services.get(serviceName);
-    if (!service) return () => {
-    };
-    return service.on(eventName, handler);
-  }
-  emit(event, payload) {
-    const [serviceName, eventName] = event.split(".");
-    const service = this.services.get(serviceName);
-    if (service) {
-      service.emit(eventName, payload);
-    }
-  }
-  getDefinition() {
-    const ops = {};
-    for (const service of this.services.values()) {
-      const def = service.getDefinition();
-      for (const [opKey, opDef] of Object.entries(def.operations)) {
-        ops[`${service.name}.${opKey}`] = opDef;
-      }
-    }
-    return {
-      id: this.id,
-      name: this.name,
-      version: this.version,
-      operations: ops,
-      capabilities: this.capabilitiesList.map((c) => ({
-        id: c,
-        name: c,
-        protocols: ["http", "ws", "udp", "p2p"]
-      })),
-      protocols: ["http", "ws", "udp", "p2p"]
-    };
-  }
-};
-
-// src/services/EndpointGenerator.ts
-var EndpointGenerator = class {
-  static generateEndpoints(backend, basePort = 8e3) {
-    const def = backend.getDefinition();
-    const ops = Object.keys(def.operations);
-    return {
-      httpRoutes: ops.map((op) => `/api/${op.replace(".", "/")}`),
-      wsChannels: ops.map((op) => `channel:${op}`),
-      udpEndpoints: [`udp://127.0.0.1:${basePort}`],
-      p2pBindings: ops.map((op) => `p2p://${backend.name}/${op}`)
-    };
-  }
-  static generateDescriptors(backend, host = "127.0.0.1", port = 8080) {
-    return [
-      { protocol: "http", address: host, port, capabilities: ["requestResponse"] },
-      { protocol: "ws", address: host, port, capabilities: ["requestResponse", "pubSub"] },
-      { protocol: "udp", address: host, port, capabilities: ["datagram"] },
-      { protocol: "p2p", address: `p2p://${backend.name}`, capabilities: ["peerToPeer"] }
-    ];
-  }
-};
-
-// src/services/ServiceGenerators.ts
-function createBackend(name) {
-  return new CompositeBackend(name);
-}
-function createCompositeService(name) {
-  return new CompositeBackend(name);
-}
-
-export {
-  createLocalService,
-  createRemoteService,
-  CompositeBackend,
-  EndpointGenerator,
-  createBackend,
-  createCompositeService
-};

package/packages/backend/dist/{chunk-OYQKQAEF.js → chunk-CU7RZBMF.js}

@@ -1,3 +1,7 @@
+import {
+  createService,
+  createServiceDefinition
+} from "./chunk-IPP4VURQ.js";
 import {
   StorageAdapterFactory
 } from "./chunk-J2J24JVC.js";
@@ -13,10 +17,6 @@ import {
   ExecutableBackendFacade,
   WorkerExecutionBoundary
 } from "./chunk-QGHDJGYS.js";
-import {
-  createService,
-  createServiceDefinition
-} from "./chunk-IPP4VURQ.js";
 
 // src/krnl-services.ts
 var AuthServiceDefinition = createServiceDefinition({