/** * Token storage constants — the single source for the storage key so the * memory/localStorage/cookie adapters never drift apart. */ export declare const TOKEN_STORAGE_KEY: "cms_access_token"; /** * Refresh-token cookie key. Stored as an httpOnly cookie (parallel to the access * token) so the SDK can silently rotate the access token when it expires. */ export declare const REFRESH_TOKEN_STORAGE_KEY: "cms_refresh_token"; /** Cookie adapter defaults (overridable via `credentials.cookie`). */ export declare const COOKIE_DEFAULTS: { readonly MAX_AGE_SECONDS: number; readonly PATH: "/"; readonly SECURE: true; readonly SAME_SITE: "Lax"; readonly HTTP_ONLY: true; }; /** Pinia persistence keys (versioned for schema migration). */ export declare const STORE_PERSIST_KEY: { readonly AUTH: "cms-auth-v1"; readonly AUTHZ: "cms-authz-v1"; readonly CONTENT: "cms-content-v1"; readonly RULES: "cms-rules-v1"; readonly EXECUTIONS: "cms-executions-v1"; readonly SETTINGS: "cms-settings-v1"; readonly LLM: "cms-llm-v1"; readonly LLM_PROVIDERS: "cms-llm-providers-v1"; readonly BARS: "cms-bars-v1"; readonly HISTORY: "cms-history-v1"; readonly KALSHI: "cms-kalshi-v1"; readonly GOV: "cms-gov-v1"; readonly PEOPLE: "cms-people-v1"; }; /** * Internal cookie persistence (replaces pinia-plugin-persistedstate). * * Each persisted state → its own cookie `${PERSIST_KEY.}.${field}`. * The common `/api/cms-sdk/persist` endpoint may only set keys in * `PERSIST_ALLOWED_KEYS` (single source of truth, shared by the plugin + the * endpoint). The token key is always excluded as a belt-and-suspenders guard. */ export declare const PERSIST_PREFIX: "cms-persist-"; export declare const PERSIST_KEY: { readonly AUTH: "cms-persist-auth"; }; /** Max bytes per persisted cookie value (~4KB cookie cap, with headroom). */ export declare const PERSIST_MAX_BYTES = 3500; /** Allowlist of cookie keys the persist endpoint may set. */ export declare const PERSIST_ALLOWED_KEYS: readonly ["cms-persist-auth.authUser"]; /** * Storage backend names accepted by `TokenManager`. Kept in sync with * `IStorageName` in `core/credentials/credential.type.ts`. The * `httpOnlyBridge` value is the recommended production backend (delegates * to a Nuxt server route). */ export declare const STORAGE_NAME: { readonly MEMORY: "memory"; readonly LOCAL_STORAGE: "localStorage"; readonly COOKIE: "cookie"; readonly HTTP_ONLY_BRIDGE: "httpOnlyBridge"; }; export type StorageName = (typeof STORAGE_NAME)[keyof typeof STORAGE_NAME]; /** * `Cookie SameSite` values (RFC 6265). Used by `cookieStorage` and the * SDK Nuxt module when setting the httpOnly access-token cookie. Mirrors * the `CookieSameSite` type in `core/credentials/storages/cookieStorage.ts`. */ export declare const COOKIE_SAME_SITE: { readonly STRICT: "Strict"; readonly LAX: "Lax"; readonly NONE: "None"; }; export type CookieSameSite = (typeof COOKIE_SAME_SITE)[keyof typeof COOKIE_SAME_SITE]; //# sourceMappingURL=storage.constant.d.ts.map