sh3-core 0.22.1 → 0.22.2

package/dist/api.d.ts

@@ -55,6 +55,7 @@ export declare const capabilities: {
     readonly hotInstall: boolean;
 };
 export type { ServerShard, ServerShardContext, TenantDocumentAPI } from './server-shard/types';
+export type { ApiKeyPublic as ServerApiKeyPublic } from './server-shard/types';
 export type { Verb, VerbContext, Sh3Api, VerbSchema, PortableJSONSchema, DispatchToTerminalResult, } from './verbs/types';
 export type { Scrollback } from './shell-shard/scrollback.svelte';
 export type { SessionClient } from './shell-shard/session-client.svelte';

package/dist/server-shard/types.d.ts

@@ -12,6 +12,19 @@
  */
 import type { DocumentMeta } from '../documents/types';
 import type { SyncPolicy, ConflictFile } from '../documents/sync-types';
+/** Public shape of an API key — never includes the secret value. */
+export interface ApiKeyPublic {
+    id: string;
+    label: string;
+    scopeId: string | null;
+    ownerUserId: string | null;
+    mintedByShardId: string | null;
+    scopes: string[];
+    peerRole?: 'primary' | 'replica';
+    peerId?: string;
+    createdAt: string;
+    expiresAt?: string;
+}
 /**
  * Per-tenant document API exposed to server shards via
  * `ServerShardContext.documents(tenantId)`. Every method is
@@ -95,6 +108,49 @@ export interface ServerShardContext {
      * Absent => 'primary' behavior at the store.
      */
     setPeerRole(tenant: string, role: 'primary' | 'replica'): void;
+    /**
+     * Redeem a consent ticket and return the freshly-minted key.
+     *
+     * The browser side of your shard calls `POST /api/keys/consent` to issue
+     * a ticket bound to the user's session. The server side hands the
+     * ticket to this method to mint the key. The ticket carries the
+     * `(scopeId, userId, shardId, label, scopes, expiresIn?)` from consent
+     * — none of those are caller-controlled here, so a shard cannot escalate
+     * its own scopes or mint for a different tenant.
+     *
+     * The caller's `scopeId` is read from the Hono request context (`c`) and
+     * must match the scope recorded on the ticket; mismatches return `null`
+     * (same as expired / unknown ticket — probe-resistant).
+     *
+     * The returned `key` is the full secret string. Return it to the user
+     * exactly once and never persist it server-side; subsequent calls only
+     * see `key.id` via `listKeys`.
+     *
+     * @param c The Hono request context for the route handler.
+     * @param ticket The opaque token issued by /api/keys/consent.
+     * @returns `{ id, key }` on success, `null` on invalid / expired / scope-mismatch.
+     */
+    redeemKeyTicket(c: unknown, ticket: string): Promise<{
+        id: string;
+        key: string;
+    } | null>;
+    /**
+     * List API keys this shard has minted for the calling caller's scope.
+     * Filtered to `mintedByShardId === ctx.shardId`. Other shards' keys are
+     * invisible. Returns an empty array if the caller has no scope.
+     */
+    listKeys(c: unknown): Promise<ApiKeyPublic[]>;
+    /**
+     * Revoke an API key by id. Only revokes keys minted by this shard
+     * (`mintedByShardId === ctx.shardId`) for the calling caller's scope.
+     * Attempting to revoke another shard's key or a key in a different
+     * tenant returns `false` without raising.
+     *
+     * Successful revocations fire `onKeyRevoked` on the client side via
+     * the existing SSE channel — same path the browser-driven DELETE
+     * already takes.
+     */
+    revokeKey(c: unknown, id: string): Promise<boolean>;
     /**
      * Translate an SH3 document path to a real filesystem path on the host.
      *

package/dist/version.d.ts

@@ -1,2 +1,2 @@
 /** Auto-generated from package.json — do not edit manually. */
-export declare const VERSION = "0.22.1";
+export declare const VERSION = "0.22.2";

package/dist/version.js

@@ -1,2 +1,2 @@
 /** Auto-generated from package.json — do not edit manually. */
-export const VERSION = '0.22.1';
+export const VERSION = '0.22.2';

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "sh3-core",
-  "version": "0.22.1",
+  "version": "0.22.2",
   "type": "module",
   "files": [
     "dist"