@zshannon/streamstore 0.22.3

package/dist/cjs/types.js

@@ -0,0 +1,129 @@
+"use strict";
+/**
+ * S2 SDK Types
+ *
+ * All public SDK types are defined here. Types use camelCase field names
+ * for idiomatic JavaScript/TypeScript usage.
+ *
+ * Generated types (snake_case, matching API wire format) are available
+ * from "./generated/types.gen.js" as the `API` namespace.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AppendInput = exports.MAX_APPEND_BYTES = exports.MAX_APPEND_RECORDS = exports.AppendRecord = void 0;
+const error_js_1 = require("./error.js");
+const utils_js_1 = require("./utils.js");
+const textEncoder = new TextEncoder();
+/**
+ * Factory functions for creating AppendRecord instances.
+ */
+var AppendRecord;
+(function (AppendRecord) {
+    /**
+     * Create a string-format append record with pre-calculated metered size.
+     */
+    function string(params) {
+        // Create record with placeholder, then calculate actual size
+        const record = {
+            body: params.body,
+            headers: params.headers,
+            timestamp: params.timestamp,
+            meteredBytes: 0,
+        };
+        // Safe to cast: we're setting a readonly property during construction
+        record.meteredBytes =
+            (0, utils_js_1.meteredBytes)(record);
+        return record;
+    }
+    AppendRecord.string = string;
+    /**
+     * Create a bytes-format append record with pre-calculated metered size.
+     */
+    function bytes(params) {
+        // Create record with placeholder, then calculate actual size
+        const record = {
+            body: params.body,
+            headers: params.headers,
+            timestamp: params.timestamp,
+            meteredBytes: 0,
+        };
+        // Safe to cast: we're setting a readonly property during construction
+        record.meteredBytes =
+            (0, utils_js_1.meteredBytes)(record);
+        return record;
+    }
+    AppendRecord.bytes = bytes;
+    /**
+     * Create a fence command record.
+     */
+    function fence(fencingToken, timestamp) {
+        return string({
+            body: fencingToken,
+            headers: [["", "fence"]],
+            timestamp,
+        });
+    }
+    AppendRecord.fence = fence;
+    /**
+     * Create a trim command record.
+     */
+    function trim(seqNum, timestamp) {
+        const buffer = new Uint8Array(8);
+        const view = new DataView(buffer.buffer);
+        view.setBigUint64(0, BigInt(seqNum), false);
+        return bytes({
+            body: buffer,
+            headers: [[textEncoder.encode(""), textEncoder.encode("trim")]],
+            timestamp,
+        });
+    }
+    AppendRecord.trim = trim;
+})(AppendRecord || (exports.AppendRecord = AppendRecord = {}));
+// =============================================================================
+// Append Input
+// =============================================================================
+/** Maximum number of records in a single append batch. */
+exports.MAX_APPEND_RECORDS = 1000;
+/** Maximum total metered bytes for records in a single append batch (1 MiB). */
+exports.MAX_APPEND_BYTES = 1024 * 1024;
+/**
+ * Factory functions for creating AppendInput instances.
+ */
+var AppendInput;
+(function (AppendInput) {
+    /**
+     * Create an AppendInput with validation.
+     *
+     * @throws {S2Error} If validation fails (empty, too many records, or too large)
+     */
+    function create(records, options) {
+        if (records.length === 0) {
+            throw new error_js_1.S2Error({
+                message: "AppendInput must contain at least one record",
+                origin: "sdk",
+            });
+        }
+        if (records.length > exports.MAX_APPEND_RECORDS) {
+            throw new error_js_1.S2Error({
+                message: `AppendInput cannot contain more than ${exports.MAX_APPEND_RECORDS} records (got ${records.length})`,
+                origin: "sdk",
+            });
+        }
+        const totalBytes = records.reduce((sum, r) => sum + r.meteredBytes, 0);
+        if (totalBytes > exports.MAX_APPEND_BYTES) {
+            throw new error_js_1.S2Error({
+                message: `AppendInput exceeds maximum of ${exports.MAX_APPEND_BYTES} bytes (got ${totalBytes} bytes)`,
+                origin: "sdk",
+            });
+        }
+        return {
+            records,
+            matchSeqNum: options?.matchSeqNum === undefined
+                ? undefined
+                : Math.floor(options.matchSeqNum),
+            fencingToken: options?.fencingToken,
+            meteredBytes: totalBytes,
+        };
+    }
+    AppendInput.create = create;
+})(AppendInput || (exports.AppendInput = AppendInput = {}));
+//# sourceMappingURL=types.js.map

package/dist/cjs/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/types.ts"],"names":[],"mappings":";AAAA;;;;;;;;GAQG;;;AAEH,yCAAqC;AAGrC,yCAAmE;AAoDnE,MAAM,WAAW,GAAG,IAAI,WAAW,EAAE,CAAC;AAEtC;;GAEG;AACH,IAAiB,YAAY,CA0E5B;AA1ED,WAAiB,YAAY;IAC5B;;OAEG;IACH,SAAgB,MAAM,CAAC,MAItB;QACA,6DAA6D;QAC7D,MAAM,MAAM,GAAuB;YAClC,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,YAAY,EAAE,CAAC;SACf,CAAC;QACF,sEAAsE;QACrE,MAAmC,CAAC,YAAY;YAChD,IAAA,uBAAqB,EAAC,MAAM,CAAC,CAAC;QAC/B,OAAO,MAAM,CAAC;IACf,CAAC;IAhBe,mBAAM,SAgBrB,CAAA;IAED;;OAEG;IACH,SAAgB,KAAK,CAAC,MAIrB;QACA,6DAA6D;QAC7D,MAAM,MAAM,GAAsB;YACjC,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,YAAY,EAAE,CAAC;SACf,CAAC;QACF,sEAAsE;QACrE,MAAmC,CAAC,YAAY;YAChD,IAAA,uBAAqB,EAAC,MAAM,CAAC,CAAC;QAC/B,OAAO,MAAM,CAAC;IACf,CAAC;IAhBe,kBAAK,QAgBpB,CAAA;IAED;;OAEG;IACH,SAAgB,KAAK,CACpB,YAAoB,EACpB,SAAyB;QAEzB,OAAO,MAAM,CAAC;YACb,IAAI,EAAE,YAAY;YAClB,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC;YACxB,SAAS;SACT,CAAC,CAAC;IACJ,CAAC;IATe,kBAAK,QASpB,CAAA;IAED;;OAEG;IACH,SAAgB,IAAI,CACnB,MAAc,EACd,SAAyB;QAEzB,MAAM,MAAM,GAAG,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC;QACjC,MAAM,IAAI,GAAG,IAAI,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QACzC,IAAI,CAAC,YAAY,CAAC,CAAC,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,KAAK,CAAC,CAAC;QAE5C,OAAO,KAAK,CAAC;YACZ,IAAI,EAAE,MAAM;YACZ,OAAO,EAAE,CAAC,CAAC,WAAW,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,WAAW,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;YAC/D,SAAS;SACT,CAAC,CAAC;IACJ,CAAC;IAbe,iBAAI,OAanB,CAAA;AACF,CAAC,EA1EgB,YAAY,4BAAZ,YAAY,QA0E5B;AAoBD,gFAAgF;AAChF,eAAe;AACf,gFAAgF;AAEhF,0DAA0D;AAC7C,QAAA,kBAAkB,GAAG,IAAI,CAAC;AAEvC,gFAAgF;AACnE,QAAA,gBAAgB,GAAG,IAAI,GAAG,IAAI,CAAC;AAc5C;;GAEG;AACH,IAAiB,WAAW,CA6C3B;AA7CD,WAAiB,WAAW;IAC3B;;;;OAIG;IACH,SAAgB,MAAM,CACrB,OAAoC,EACpC,OAGC;QAED,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC1B,MAAM,IAAI,kBAAO,CAAC;gBACjB,OAAO,EAAE,8CAA8C;gBACvD,MAAM,EAAE,KAAK;aACb,CAAC,CAAC;QACJ,CAAC;QAED,IAAI,OAAO,CAAC,MAAM,GAAG,0BAAkB,EAAE,CAAC;YACzC,MAAM,IAAI,kBAAO,CAAC;gBACjB,OAAO,EAAE,wCAAwC,0BAAkB,iBAAiB,OAAO,CAAC,MAAM,GAAG;gBACrG,MAAM,EAAE,KAAK;aACb,CAAC,CAAC;QACJ,CAAC;QAED,MAAM,UAAU,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,CAAC,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC;QACvE,IAAI,UAAU,GAAG,wBAAgB,EAAE,CAAC;YACnC,MAAM,IAAI,kBAAO,CAAC;gBACjB,OAAO,EAAE,kCAAkC,wBAAgB,eAAe,UAAU,SAAS;gBAC7F,MAAM,EAAE,KAAK;aACb,CAAC,CAAC;QACJ,CAAC;QAED,OAAO;YACN,OAAO;YACP,WAAW,EACV,OAAO,EAAE,WAAW,KAAK,SAAS;gBACjC,CAAC,CAAC,SAAS;gBACX,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC;YACnC,YAAY,EAAE,OAAO,EAAE,YAAY;YACnC,YAAY,EAAE,UAAU;SACxB,CAAC;IACH,CAAC;IAtCe,kBAAM,SAsCrB,CAAA;AACF,CAAC,EA7CgB,WAAW,2BAAX,WAAW,QA6C3B"}

package/dist/cjs/utils.d.ts

@@ -0,0 +1,25 @@
+import type { AppendRecord, ReadRecord } from "./lib/stream/types.js";
+/**
+ * Calculate the UTF-8 byte length of a string.
+ * Handles all Unicode characters including surrogate pairs correctly.
+ *
+ * @param str The string to measure
+ * @returns The byte length when encoded as UTF-8
+ */
+export declare function utf8ByteLength(str: string): number;
+/**
+ * Calculate the metered size in bytes of a record (append or read).
+ * This includes the body and headers, but not metadata like timestamp.
+ *
+ * This function calculates how many bytes the record will occupy
+ * after being received and deserialized as raw bytes on the S2 side.
+ * For strings, it calculates UTF-8 byte length. For Uint8Array, it uses
+ * the array length directly (same value as would be used when encoding
+ * to base64 for transmission).
+ *
+ * @param record The record to measure
+ * @returns The size in bytes
+ */
+export declare function meteredBytes<Format extends "string" | "bytes">(record: AppendRecord | ReadRecord<Format>): number;
+export declare function computeAppendRecordFormat(record: AppendRecord): "string" | "bytes";
+//# sourceMappingURL=utils.d.ts.map

package/dist/cjs/utils.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"utils.d.ts","sourceRoot":"","sources":["../../src/utils.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AAEtE;;;;;;GAMG;AACH,wBAAgB,cAAc,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAiClD;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,YAAY,CAAC,MAAM,SAAS,QAAQ,GAAG,OAAO,EAC7D,MAAM,EAAE,YAAY,GAAG,UAAU,CAAC,MAAM,CAAC,GACvC,MAAM,CAgCR;AAED,wBAAgB,yBAAyB,CACxC,MAAM,EAAE,YAAY,GAClB,QAAQ,GAAG,OAAO,CAiBpB"}

package/dist/cjs/utils.js

@@ -0,0 +1,108 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.utf8ByteLength = utf8ByteLength;
+exports.meteredBytes = meteredBytes;
+exports.computeAppendRecordFormat = computeAppendRecordFormat;
+/**
+ * Calculate the UTF-8 byte length of a string.
+ * Handles all Unicode characters including surrogate pairs correctly.
+ *
+ * @param str The string to measure
+ * @returns The byte length when encoded as UTF-8
+ */
+function utf8ByteLength(str) {
+    let bytes = 0;
+    for (let i = 0; i < str.length; i++) {
+        const code = str.charCodeAt(i);
+        if (code <= 0x7f) {
+            bytes += 1;
+        }
+        else if (code <= 0x7ff) {
+            bytes += 2;
+        }
+        else if (code >= 0xd800 && code <= 0xdbff) {
+            // high surrogate
+            if (i + 1 < str.length) {
+                const next = str.charCodeAt(i + 1);
+                if (next >= 0xdc00 && next <= 0xdfff) {
+                    // valid surrogate pair → 4 bytes in UTF-8
+                    bytes += 4;
+                    i++; // skip low surrogate
+                }
+                else {
+                    // unpaired high surrogate → treat as 3 bytes (replacement-style)
+                    bytes += 3;
+                }
+            }
+            else {
+                // unpaired high surrogate at end of string
+                bytes += 3;
+            }
+        }
+        else if (code >= 0xdc00 && code <= 0xdfff) {
+            // lone low surrogate — treat as 3 bytes
+            bytes += 3;
+        }
+        else {
+            bytes += 3;
+        }
+    }
+    return bytes;
+}
+/**
+ * Calculate the metered size in bytes of a record (append or read).
+ * This includes the body and headers, but not metadata like timestamp.
+ *
+ * This function calculates how many bytes the record will occupy
+ * after being received and deserialized as raw bytes on the S2 side.
+ * For strings, it calculates UTF-8 byte length. For Uint8Array, it uses
+ * the array length directly (same value as would be used when encoding
+ * to base64 for transmission).
+ *
+ * @param record The record to measure
+ * @returns The size in bytes
+ */
+function meteredBytes(record) {
+    // Calculate header size based on actual data types
+    let numHeaders = 0;
+    let headersSize = 0;
+    if (record.headers) {
+        if (Array.isArray(record.headers)) {
+            numHeaders = record.headers.length;
+            headersSize = record.headers.reduce((sum, [k, v]) => {
+                // Infer format from key type: string = UTF-8 bytes, Uint8Array = byte length
+                const keySize = typeof k === "string" ? utf8ByteLength(k) : k.length;
+                const valueSize = typeof v === "string" ? utf8ByteLength(v) : v.length;
+                return sum + keySize + valueSize;
+            }, 0);
+        }
+        else {
+            // Record<string, string> format (only for string format)
+            const entries = Object.entries(record.headers);
+            numHeaders = entries.length;
+            headersSize = entries.reduce((sum, [k, v]) => {
+                return sum + utf8ByteLength(k) + utf8ByteLength(v);
+            }, 0);
+        }
+    }
+    // Calculate body size based on actual data type
+    const bodySize = record.body
+        ? typeof record.body === "string"
+            ? utf8ByteLength(record.body)
+            : record.body.length
+        : 0;
+    return 8 + 2 * numHeaders + headersSize + bodySize;
+}
+function computeAppendRecordFormat(record) {
+    let result = "string";
+    if (record.body && typeof record.body !== "string") {
+        result = "bytes";
+    }
+    if (record.headers &&
+        Array.isArray(record.headers) &&
+        record.headers.some(([k, v]) => typeof k !== "string" || typeof v !== "string")) {
+        result = "bytes";
+    }
+    return result;
+}
+//# sourceMappingURL=utils.js.map

package/dist/cjs/utils.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"utils.js","sourceRoot":"","sources":["../../src/utils.ts"],"names":[],"mappings":";;AASA,wCAiCC;AAeD,oCAkCC;AAED,8DAmBC;AA9GD;;;;;;GAMG;AACH,SAAgB,cAAc,CAAC,GAAW;IACzC,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACrC,MAAM,IAAI,GAAG,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;QAE/B,IAAI,IAAI,IAAI,IAAI,EAAE,CAAC;YAClB,KAAK,IAAI,CAAC,CAAC;QACZ,CAAC;aAAM,IAAI,IAAI,IAAI,KAAK,EAAE,CAAC;YAC1B,KAAK,IAAI,CAAC,CAAC;QACZ,CAAC;aAAM,IAAI,IAAI,IAAI,MAAM,IAAI,IAAI,IAAI,MAAM,EAAE,CAAC;YAC7C,iBAAiB;YACjB,IAAI,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC;gBACxB,MAAM,IAAI,GAAG,GAAG,CAAC,UAAU,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;gBACnC,IAAI,IAAI,IAAI,MAAM,IAAI,IAAI,IAAI,MAAM,EAAE,CAAC;oBACtC,0CAA0C;oBAC1C,KAAK,IAAI,CAAC,CAAC;oBACX,CAAC,EAAE,CAAC,CAAC,qBAAqB;gBAC3B,CAAC;qBAAM,CAAC;oBACP,iEAAiE;oBACjE,KAAK,IAAI,CAAC,CAAC;gBACZ,CAAC;YACF,CAAC;iBAAM,CAAC;gBACP,2CAA2C;gBAC3C,KAAK,IAAI,CAAC,CAAC;YACZ,CAAC;QACF,CAAC;aAAM,IAAI,IAAI,IAAI,MAAM,IAAI,IAAI,IAAI,MAAM,EAAE,CAAC;YAC7C,wCAAwC;YACxC,KAAK,IAAI,CAAC,CAAC;QACZ,CAAC;aAAM,CAAC;YACP,KAAK,IAAI,CAAC,CAAC;QACZ,CAAC;IACF,CAAC;IACD,OAAO,KAAK,CAAC;AACd,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,SAAgB,YAAY,CAC3B,MAAyC;IAEzC,mDAAmD;IACnD,IAAI,UAAU,GAAG,CAAC,CAAC;IACnB,IAAI,WAAW,GAAG,CAAC,CAAC;IAEpB,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;YACnC,UAAU,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC;YACnC,WAAW,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE;gBACnD,6EAA6E;gBAC7E,MAAM,OAAO,GAAG,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;gBACrE,MAAM,SAAS,GAAG,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;gBACvE,OAAO,GAAG,GAAG,OAAO,GAAG,SAAS,CAAC;YAClC,CAAC,EAAE,CAAC,CAAC,CAAC;QACP,CAAC;aAAM,CAAC;YACP,yDAAyD;YACzD,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;YAC/C,UAAU,GAAG,OAAO,CAAC,MAAM,CAAC;YAC5B,WAAW,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE;gBAC5C,OAAO,GAAG,GAAG,cAAc,CAAC,CAAC,CAAC,GAAG,cAAc,CAAC,CAAC,CAAC,CAAC;YACpD,CAAC,EAAE,CAAC,CAAC,CAAC;QACP,CAAC;IACF,CAAC;IAED,gDAAgD;IAChD,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI;QAC3B,CAAC,CAAC,OAAO,MAAM,CAAC,IAAI,KAAK,QAAQ;YAChC,CAAC,CAAC,cAAc,CAAC,MAAM,CAAC,IAAI,CAAC;YAC7B,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM;QACrB,CAAC,CAAC,CAAC,CAAC;IAEL,OAAO,CAAC,GAAG,CAAC,GAAG,UAAU,GAAG,WAAW,GAAG,QAAQ,CAAC;AACpD,CAAC;AAED,SAAgB,yBAAyB,CACxC,MAAoB;IAEpB,IAAI,MAAM,GAAuB,QAAQ,CAAC;IAE1C,IAAI,MAAM,CAAC,IAAI,IAAI,OAAO,MAAM,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;QACpD,MAAM,GAAG,OAAO,CAAC;IAClB,CAAC;IACD,IACC,MAAM,CAAC,OAAO;QACd,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC;QAC7B,MAAM,CAAC,OAAO,CAAC,IAAI,CAClB,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,OAAO,CAAC,KAAK,QAAQ,CAC1D,EACA,CAAC;QACF,MAAM,GAAG,OAAO,CAAC;IAClB,CAAC;IAED,OAAO,MAAM,CAAC;AACf,CAAC"}

package/dist/cjs/version.d.ts

@@ -0,0 +1,8 @@
+/**
+ * Library version.
+ *
+ * This file is auto-generated from package.json by scripts/generate-version.ts.
+ * Do not edit manually.
+ */
+export declare const VERSION = "0.22.2";
+//# sourceMappingURL=version.d.ts.map

package/dist/cjs/version.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"version.d.ts","sourceRoot":"","sources":["../../src/version.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,eAAO,MAAM,OAAO,WAAW,CAAC"}

package/dist/cjs/version.js

@@ -0,0 +1,11 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.VERSION = void 0;
+/**
+ * Library version.
+ *
+ * This file is auto-generated from package.json by scripts/generate-version.ts.
+ * Do not edit manually.
+ */
+exports.VERSION = "0.22.2";
+//# sourceMappingURL=version.js.map

package/dist/cjs/version.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"version.js","sourceRoot":"","sources":["../../src/version.ts"],"names":[],"mappings":";;;AAAA;;;;;GAKG;AACU,QAAA,OAAO,GAAG,QAAQ,CAAC"}

package/dist/esm/accessTokens.d.ts

@@ -0,0 +1,51 @@
+import type { RetryConfig, S2RequestOptions } from "./common.js";
+import type { Client } from "./generated/client/types.gen.js";
+import type * as Types from "./types.js";
+/**
+ * Account-scoped helper for listing, issuing, and revoking access tokens.
+ *
+ * Acquire via {@link S2.accessTokens}. Use {@link S2AccessTokens.listAll} for async iteration.
+ */
+export declare class S2AccessTokens {
+    readonly client: Client;
+    private readonly retryConfig?;
+    constructor(client: Client, retryConfig?: RetryConfig);
+    /**
+     * List access tokens.
+     *
+     * @param args.prefix Filter to IDs beginning with this prefix
+     * @param args.startAfter Filter to IDs lexicographically after this value
+     * @param args.limit Max results (up to 1000)
+     */
+    list(args?: Types.ListAccessTokensInput, options?: S2RequestOptions): Promise<Types.ListAccessTokensResponse>;
+    /**
+     * List all access tokens with automatic pagination.
+     * Returns a lazy async iterable that fetches pages as needed.
+     *
+     * @param args - Optional filtering options: `prefix` to filter by ID prefix, `limit` for max results per page
+     *
+     * @example
+     * ```ts
+     * for await (const token of s2.accessTokens.listAll({ prefix: "service-" })) {
+     *   console.log(token.id);
+     * }
+     * ```
+     */
+    listAll(args?: Types.ListAllAccessTokensInput, options?: S2RequestOptions): AsyncIterable<Types.AccessTokenInfo>;
+    /**
+     * Issue a new access token.
+     *
+     * @param args.id Unique token ID (1-96 bytes)
+     * @param args.scope Token scope (operations and resource sets)
+     * @param args.autoPrefixStreams Namespace stream names by configured prefix scope
+     * @param args.expiresAt Expiration time (Date or RFC 3339 string); defaults to requestor's token expiry
+     */
+    issue(args: Types.IssueAccessTokenInput, options?: S2RequestOptions): Promise<Types.IssueAccessTokenResponse>;
+    /**
+     * Revoke an access token by ID.
+     *
+     * @param args.id Token ID to revoke
+     */
+    revoke(args: Types.RevokeAccessTokenInput, options?: S2RequestOptions): Promise<void>;
+}
+//# sourceMappingURL=accessTokens.d.ts.map

package/dist/esm/accessTokens.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"accessTokens.d.ts","sourceRoot":"","sources":["../../src/accessTokens.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAEjE,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,iCAAiC,CAAC;AAS9D,OAAO,KAAK,KAAK,KAAK,MAAM,YAAY,CAAC;AA4BzC;;;;GAIG;AACH,qBAAa,cAAc;IAC1B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAc;gBAE/B,MAAM,EAAE,MAAM,EAAE,WAAW,CAAC,EAAE,WAAW;IAKrD;;;;;;OAMG;IACU,IAAI,CAChB,IAAI,CAAC,EAAE,KAAK,CAAC,qBAAqB,EAClC,OAAO,CAAC,EAAE,gBAAgB,GACxB,OAAO,CAAC,KAAK,CAAC,wBAAwB,CAAC;IAiB1C;;;;;;;;;;;;OAYG;IACI,OAAO,CACb,IAAI,CAAC,EAAE,KAAK,CAAC,wBAAwB,EACrC,OAAO,CAAC,EAAE,gBAAgB,GACxB,aAAa,CAAC,KAAK,CAAC,eAAe,CAAC;IAYvC;;;;;;;OAOG;IACU,KAAK,CACjB,IAAI,EAAE,KAAK,CAAC,qBAAqB,EACjC,OAAO,CAAC,EAAE,gBAAgB,GACxB,OAAO,CAAC,KAAK,CAAC,wBAAwB,CAAC;IAkB1C;;;;OAIG;IACU,MAAM,CAClB,IAAI,EAAE,KAAK,CAAC,sBAAsB,EAClC,OAAO,CAAC,EAAE,gBAAgB,GACxB,OAAO,CAAC,IAAI,CAAC;CAWhB"}

package/dist/esm/accessTokens.js

@@ -0,0 +1,123 @@
+import { withS2Data } from "./error.js";
+import { issueAccessToken, listAccessTokens, revokeAccessToken, } from "./generated/index.js";
+import { toCamelCase, toSnakeCase } from "./internal/case-transform.js";
+import { paginate } from "./lib/paginate.js";
+import { withRetries } from "./lib/retry.js";
+/** Convert expiresAt input (Date, milliseconds, or string) to RFC 3339 string for API. */
+function toISOString(value) {
+    if (value === null)
+        return null;
+    if (value === undefined)
+        return undefined;
+    if (value instanceof Date)
+        return value.toISOString();
+    if (typeof value === "number")
+        return new Date(value).toISOString();
+    return value;
+}
+/** Convert expiresAt from API (ISO string) to Date. */
+function toDate(value) {
+    if (value === null)
+        return null;
+    if (value === undefined)
+        return undefined;
+    return new Date(value);
+}
+/** Transform AccessTokenInfo response: convert expiresAt to Date. */
+function transformTokenInfo(token) {
+    return {
+        ...token,
+        expiresAt: toDate(token.expiresAt),
+    };
+}
+/**
+ * Account-scoped helper for listing, issuing, and revoking access tokens.
+ *
+ * Acquire via {@link S2.accessTokens}. Use {@link S2AccessTokens.listAll} for async iteration.
+ */
+export class S2AccessTokens {
+    client;
+    retryConfig;
+    constructor(client, retryConfig) {
+        this.client = client;
+        this.retryConfig = retryConfig;
+    }
+    /**
+     * List access tokens.
+     *
+     * @param args.prefix Filter to IDs beginning with this prefix
+     * @param args.startAfter Filter to IDs lexicographically after this value
+     * @param args.limit Max results (up to 1000)
+     */
+    async list(args, options) {
+        const response = await withRetries(this.retryConfig, async () => {
+            return await withS2Data(() => listAccessTokens({
+                client: this.client,
+                query: toSnakeCase(args),
+                ...options,
+            }));
+        });
+        const camelCased = toCamelCase(response);
+        return {
+            ...camelCased,
+            accessTokens: camelCased.accessTokens.map(transformTokenInfo),
+        };
+    }
+    /**
+     * List all access tokens with automatic pagination.
+     * Returns a lazy async iterable that fetches pages as needed.
+     *
+     * @param args - Optional filtering options: `prefix` to filter by ID prefix, `limit` for max results per page
+     *
+     * @example
+     * ```ts
+     * for await (const token of s2.accessTokens.listAll({ prefix: "service-" })) {
+     *   console.log(token.id);
+     * }
+     * ```
+     */
+    listAll(args, options) {
+        return paginate((a) => this.list(a, options).then((r) => ({
+            items: r.accessTokens,
+            hasMore: r.hasMore,
+        })), args ?? {}, (token) => token.id);
+    }
+    /**
+     * Issue a new access token.
+     *
+     * @param args.id Unique token ID (1-96 bytes)
+     * @param args.scope Token scope (operations and resource sets)
+     * @param args.autoPrefixStreams Namespace stream names by configured prefix scope
+     * @param args.expiresAt Expiration time (Date or RFC 3339 string); defaults to requestor's token expiry
+     */
+    async issue(args, options) {
+        // Convert Date to ISO string for API
+        const apiArgs = {
+            ...args,
+            expiresAt: toISOString(args.expiresAt),
+        };
+        const response = await withRetries(this.retryConfig, async () => {
+            return await withS2Data(() => issueAccessToken({
+                client: this.client,
+                body: toSnakeCase(apiArgs),
+                ...options,
+            }));
+        });
+        return toCamelCase(response);
+    }
+    /**
+     * Revoke an access token by ID.
+     *
+     * @param args.id Token ID to revoke
+     */
+    async revoke(args, options) {
+        await withRetries(this.retryConfig, async () => {
+            return await withS2Data(() => revokeAccessToken({
+                client: this.client,
+                path: args,
+                ...options,
+            }));
+        });
+    }
+}
+//# sourceMappingURL=accessTokens.js.map

package/dist/esm/accessTokens.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"accessTokens.js","sourceRoot":"","sources":["../../src/accessTokens.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAExC,OAAO,EACN,gBAAgB,EAChB,gBAAgB,EAChB,iBAAiB,GACjB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AACxE,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAC7C,OAAO,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAG7C,0FAA0F;AAC1F,SAAS,WAAW,CACnB,KAAgD;IAEhD,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAChC,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC1C,IAAI,KAAK,YAAY,IAAI;QAAE,OAAO,KAAK,CAAC,WAAW,EAAE,CAAC;IACtD,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC;IACpE,OAAO,KAAK,CAAC;AACd,CAAC;AAED,uDAAuD;AACvD,SAAS,MAAM,CAAC,KAAgC;IAC/C,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAChC,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC1C,OAAO,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC;AACxB,CAAC;AAED,qEAAqE;AACrE,SAAS,kBAAkB,CAAC,KAAU;IACrC,OAAO;QACN,GAAG,KAAK;QACR,SAAS,EAAE,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC;KAClC,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,OAAO,cAAc;IACjB,MAAM,CAAS;IACP,WAAW,CAAe;IAE3C,YAAY,MAAc,EAAE,WAAyB;QACpD,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,WAAW,GAAG,WAAW,CAAC;IAChC,CAAC;IAED;;;;;;OAMG;IACI,KAAK,CAAC,IAAI,CAChB,IAAkC,EAClC,OAA0B;QAE1B,MAAM,QAAQ,GAAG,MAAM,WAAW,CAAC,IAAI,CAAC,WAAW,EAAE,KAAK,IAAI,EAAE;YAC/D,OAAO,MAAM,UAAU,CAAC,GAAG,EAAE,CAC5B,gBAAgB,CAAC;gBAChB,MAAM,EAAE,IAAI,CAAC,MAAM;gBACnB,KAAK,EAAE,WAAW,CAAC,IAAI,CAAC;gBACxB,GAAG,OAAO;aACV,CAAC,CACF,CAAC;QACH,CAAC,CAAC,CAAC;QACH,MAAM,UAAU,GAAG,WAAW,CAAM,QAAQ,CAAC,CAAC;QAC9C,OAAO;YACN,GAAG,UAAU;YACb,YAAY,EAAE,UAAU,CAAC,YAAY,CAAC,GAAG,CAAC,kBAAkB,CAAC;SAC7D,CAAC;IACH,CAAC;IAED;;;;;;;;;;;;OAYG;IACI,OAAO,CACb,IAAqC,EACrC,OAA0B;QAE1B,OAAO,QAAQ,CACd,CAAC,CAAC,EAAE,EAAE,CACL,IAAI,CAAC,IAAI,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YAClC,KAAK,EAAE,CAAC,CAAC,YAAY;YACrB,OAAO,EAAE,CAAC,CAAC,OAAO;SAClB,CAAC,CAAC,EACJ,IAAI,IAAI,EAAE,EACV,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,CACnB,CAAC;IACH,CAAC;IAED;;;;;;;OAOG;IACI,KAAK,CAAC,KAAK,CACjB,IAAiC,EACjC,OAA0B;QAE1B,qCAAqC;QACrC,MAAM,OAAO,GAAG;YACf,GAAG,IAAI;YACP,SAAS,EAAE,WAAW,CAAC,IAAI,CAAC,SAAS,CAAC;SACtC,CAAC;QACF,MAAM,QAAQ,GAAG,MAAM,WAAW,CAAC,IAAI,CAAC,WAAW,EAAE,KAAK,IAAI,EAAE;YAC/D,OAAO,MAAM,UAAU,CAAC,GAAG,EAAE,CAC5B,gBAAgB,CAAC;gBAChB,MAAM,EAAE,IAAI,CAAC,MAAM;gBACnB,IAAI,EAAE,WAAW,CAAC,OAAO,CAAC;gBAC1B,GAAG,OAAO;aACV,CAAC,CACF,CAAC;QACH,CAAC,CAAC,CAAC;QACH,OAAO,WAAW,CAAiC,QAAQ,CAAC,CAAC;IAC9D,CAAC;IAED;;;;OAIG;IACI,KAAK,CAAC,MAAM,CAClB,IAAkC,EAClC,OAA0B;QAE1B,MAAM,WAAW,CAAC,IAAI,CAAC,WAAW,EAAE,KAAK,IAAI,EAAE;YAC9C,OAAO,MAAM,UAAU,CAAC,GAAG,EAAE,CAC5B,iBAAiB,CAAC;gBACjB,MAAM,EAAE,IAAI,CAAC,MAAM;gBACnB,IAAI,EAAE,IAAI;gBACV,GAAG,OAAO;aACV,CAAC,CACF,CAAC;QACH,CAAC,CAAC,CAAC;IACJ,CAAC;CACD"}

package/dist/esm/auth/biscuit.d.ts

@@ -0,0 +1,42 @@
+export type BiscuitTokenOptions = {
+    /** P256 private key as base58-encoded 32 bytes */
+    privateKey: string;
+    /** Public key to bind the token to (base58). If not provided, derives from privateKey. */
+    publicKey?: string;
+    /** Token expiry in seconds from now (default: 3600 = 1 hour) */
+    expiresIn?: number;
+    /** Operation groups to grant (default: all read+write) */
+    opGroups?: Array<{
+        level: string;
+        access: string;
+    }>;
+    /** Basin scope (default: prefix "" = all basins) */
+    basinScope?: {
+        type: "prefix" | "exact" | "none";
+        value: string;
+    };
+    /** Stream scope (default: prefix "" = all streams) */
+    streamScope?: {
+        type: "prefix" | "exact" | "none";
+        value: string;
+    };
+    /** Access token scope (default: prefix "" = all tokens) */
+    accessTokenScope?: {
+        type: "prefix" | "exact" | "none";
+        value: string;
+    };
+};
+/**
+ * Creates an admin Biscuit token from a root private key.
+ * This enables bootstrap mode where the admin can operate without a pre-existing token.
+ *
+ * @returns Base64-encoded Biscuit token
+ */
+export declare function createBiscuitToken(options: BiscuitTokenOptions): Promise<string>;
+/**
+ * Derives the public key from a private key.
+ * @param privateKey Base58-encoded P256 private key (32 bytes)
+ * @returns Base58-encoded compressed public key (33 bytes)
+ */
+export declare function derivePublicKey(privateKey: string): string;
+//# sourceMappingURL=biscuit.d.ts.map

package/dist/esm/auth/biscuit.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"biscuit.d.ts","sourceRoot":"","sources":["../../../src/auth/biscuit.ts"],"names":[],"mappings":"AAkBA,MAAM,MAAM,mBAAmB,GAAG;IACjC,kDAAkD;IAClD,UAAU,EAAE,MAAM,CAAC;IACnB,0FAA0F;IAC1F,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,gEAAgE;IAChE,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,0DAA0D;IAC1D,QAAQ,CAAC,EAAE,KAAK,CAAC;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACpD,oDAAoD;IACpD,UAAU,CAAC,EAAE;QAAE,IAAI,EAAE,QAAQ,GAAG,OAAO,GAAG,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC;IAClE,sDAAsD;IACtD,WAAW,CAAC,EAAE;QAAE,IAAI,EAAE,QAAQ,GAAG,OAAO,GAAG,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC;IACnE,2DAA2D;IAC3D,gBAAgB,CAAC,EAAE;QAAE,IAAI,EAAE,QAAQ,GAAG,OAAO,GAAG,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC;CACxE,CAAC;AAEF;;;;;GAKG;AACH,wBAAsB,kBAAkB,CAAC,OAAO,EAAE,mBAAmB,GAAG,OAAO,CAAC,MAAM,CAAC,CAyDtF;AAED;;;;GAIG;AACH,wBAAgB,eAAe,CAAC,UAAU,EAAE,MAAM,GAAG,MAAM,CAE1D"}

package/dist/esm/auth/biscuit.js

@@ -0,0 +1,68 @@
+import { base64 } from "@scure/base";
+import { SigningKey } from "./signing-key.js";
+// Dynamic import for biscuit-wasm to handle WASM initialization
+let biscuitModule = null;
+let initPromise = null;
+async function getBiscuit() {
+    if (!biscuitModule) {
+        biscuitModule = await import("@biscuit-auth/biscuit-wasm");
+        if (!initPromise) {
+            initPromise = Promise.resolve(biscuitModule.init());
+        }
+        await initPromise;
+    }
+    return biscuitModule;
+}
+/**
+ * Creates an admin Biscuit token from a root private key.
+ * This enables bootstrap mode where the admin can operate without a pre-existing token.
+ *
+ * @returns Base64-encoded Biscuit token
+ */
+export async function createBiscuitToken(options) {
+    const { privateKey, publicKey: providedPublicKey, expiresIn = 3600, opGroups = [
+        { level: "account", access: "read" },
+        { level: "account", access: "write" },
+        { level: "basin", access: "read" },
+        { level: "basin", access: "write" },
+        { level: "stream", access: "read" },
+        { level: "stream", access: "write" },
+    ], basinScope = { type: "prefix", value: "" }, streamScope = { type: "prefix", value: "" }, accessTokenScope = { type: "prefix", value: "" }, } = options;
+    const biscuit = await getBiscuit();
+    // Use SigningKey for validation and key derivation
+    const signingKey = SigningKey.fromBase58(privateKey);
+    const privateKeyBytes = signingKey.getPrivateKeyBytes();
+    const publicKeyBase58 = providedPublicKey ?? signingKey.publicKeyBase58();
+    // Create Biscuit private key (P256 = secp256r1)
+    const biscuitPrivateKey = biscuit.PrivateKey.fromBytes(privateKeyBytes, biscuit.SignatureAlgorithm.Secp256r1);
+    // Build the token
+    const expiresTs = Math.floor(Date.now() / 1000) + expiresIn;
+    const builder = biscuit.biscuit `
+		public_key(${publicKeyBase58});
+		expires(${expiresTs});
+	`;
+    builder.merge(biscuit.block `
+		check if time($t), $t < ${expiresTs};
+	`);
+    for (const { level, access } of opGroups) {
+        builder.merge(biscuit.block `
+			op_group(${level}, ${access});
+		`);
+    }
+    builder.merge(biscuit.block `
+		basin_scope(${basinScope.type}, ${basinScope.value});
+		stream_scope(${streamScope.type}, ${streamScope.value});
+		access_token_scope(${accessTokenScope.type}, ${accessTokenScope.value});
+	`);
+    const token = builder.build(biscuitPrivateKey);
+    return base64.encode(token.toBytes());
+}
+/**
+ * Derives the public key from a private key.
+ * @param privateKey Base58-encoded P256 private key (32 bytes)
+ * @returns Base58-encoded compressed public key (33 bytes)
+ */
+export function derivePublicKey(privateKey) {
+    return SigningKey.fromBase58(privateKey).publicKeyBase58();
+}
+//# sourceMappingURL=biscuit.js.map

package/dist/esm/auth/biscuit.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"biscuit.js","sourceRoot":"","sources":["../../../src/auth/biscuit.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AACrC,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAE9C,gEAAgE;AAChE,IAAI,aAAa,GAAuD,IAAI,CAAC;AAC7E,IAAI,WAAW,GAAyB,IAAI,CAAC;AAE7C,KAAK,UAAU,UAAU;IACxB,IAAI,CAAC,aAAa,EAAE,CAAC;QACpB,aAAa,GAAG,MAAM,MAAM,CAAC,4BAA4B,CAAC,CAAC;QAC3D,IAAI,CAAC,WAAW,EAAE,CAAC;YAClB,WAAW,GAAG,OAAO,CAAC,OAAO,CAAC,aAAa,CAAC,IAAI,EAAE,CAAC,CAAC;QACrD,CAAC;QACD,MAAM,WAAW,CAAC;IACnB,CAAC;IACD,OAAO,aAAa,CAAC;AACtB,CAAC;AAmBD;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,OAA4B;IACpE,MAAM,EACL,UAAU,EACV,SAAS,EAAE,iBAAiB,EAC5B,SAAS,GAAG,IAAI,EAChB,QAAQ,GAAG;QACV,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE;QACpC,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE;QACrC,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE;QAClC,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE;QACnC,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE;QACnC,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE;KACpC,EACD,UAAU,GAAG,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,EAAE,EAAE,EAC1C,WAAW,GAAG,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,EAAE,EAAE,EAC3C,gBAAgB,GAAG,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,EAAE,EAAE,GAChD,GAAG,OAAO,CAAC;IAEZ,MAAM,OAAO,GAAG,MAAM,UAAU,EAAE,CAAC;IAEnC,mDAAmD;IACnD,MAAM,UAAU,GAAG,UAAU,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC;IACrD,MAAM,eAAe,GAAG,UAAU,CAAC,kBAAkB,EAAE,CAAC;IACxD,MAAM,eAAe,GAAG,iBAAiB,IAAI,UAAU,CAAC,eAAe,EAAE,CAAC;IAE1E,gDAAgD;IAChD,MAAM,iBAAiB,GAAG,OAAO,CAAC,UAAU,CAAC,SAAS,CACrD,eAAe,EACf,OAAO,CAAC,kBAAkB,CAAC,SAAS,CACpC,CAAC;IAEF,kBAAkB;IAClB,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,GAAG,SAAS,CAAC;IAE5D,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAA;eACjB,eAAe;YAClB,SAAS;EACnB,CAAC;IAEF,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAA;4BACA,SAAS;EACnC,CAAC,CAAC;IAEH,KAAK,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,QAAQ,EAAE,CAAC;QAC1C,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAA;cACf,KAAK,KAAK,MAAM;GAC3B,CAAC,CAAC;IACJ,CAAC;IAED,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAA;gBACZ,UAAU,CAAC,IAAI,KAAK,UAAU,CAAC,KAAK;iBACnC,WAAW,CAAC,IAAI,KAAK,WAAW,CAAC,KAAK;uBAChC,gBAAgB,CAAC,IAAI,KAAK,gBAAgB,CAAC,KAAK;EACrE,CAAC,CAAC;IAEH,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC;IAC/C,OAAO,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;AACvC,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,eAAe,CAAC,UAAkB;IACjD,OAAO,UAAU,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC,eAAe,EAAE,CAAC;AAC5D,CAAC"}

package/dist/esm/auth/index.d.ts

@@ -0,0 +1,5 @@
+export { createBiscuitToken, derivePublicKey, type BiscuitTokenOptions } from "./biscuit.js";
+export { signRequest, signHeaders, type SignRequestOptions, type SignHeadersOptions } from "./sign.js";
+export { createPkiAuth, type PkiAuthConfig, type PkiAuthContext } from "./pki-auth.js";
+export { SigningKey } from "./signing-key.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/esm/auth/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/auth/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,eAAe,EAAE,KAAK,mBAAmB,EAAE,MAAM,cAAc,CAAC;AAC7F,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,KAAK,kBAAkB,EAAE,KAAK,kBAAkB,EAAE,MAAM,WAAW,CAAC;AACvG,OAAO,EAAE,aAAa,EAAE,KAAK,aAAa,EAAE,KAAK,cAAc,EAAE,MAAM,eAAe,CAAC;AACvF,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC"}

package/dist/esm/auth/index.js

@@ -0,0 +1,5 @@
+export { createBiscuitToken, derivePublicKey } from "./biscuit.js";
+export { signRequest, signHeaders } from "./sign.js";
+export { createPkiAuth } from "./pki-auth.js";
+export { SigningKey } from "./signing-key.js";
+//# sourceMappingURL=index.js.map

package/dist/esm/auth/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/auth/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,eAAe,EAA4B,MAAM,cAAc,CAAC;AAC7F,OAAO,EAAE,WAAW,EAAE,WAAW,EAAoD,MAAM,WAAW,CAAC;AACvG,OAAO,EAAE,aAAa,EAA2C,MAAM,eAAe,CAAC;AACvF,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC"}