Deployment

Package CI

The SDK repository runs:

pnpm typecheck
pnpm test
pnpm build:sdk
pnpm build:docs

The test suite covers:

• Request URLs, methods, body encoding, and header behavior
• Auth token providers and per-request overrides
• Response mappers and forbidden internal field drops
• Error translation for trust graph and structured validation errors
• Canonical JSON, graph key IDs, and DER ECDSA signing
• In-process integration against the trust graph Fastify app when source is available

The in-process server integration test runs automatically when the authnc-trust-graph source is adjacent to this repo, as it is in the local workspace. In standalone CI it is skipped unless TRUST_GRAPH_SERVER_SRC points at a checked-out authnc-trust-graph/src directory.

Docs hosting

The docs use the same stack as the AuthenSee docs repo:

• Next static export
• Fumadocs
• Tailwind
• GitHub Pages deployment from out/

The repository is currently private, so Pages is private-auth gated. Making the docs public-facing requires a deliberate repo visibility or separate public docs hosting decision.

Environments

Staging:    https://trust-staging.rebellion.systems
Production: https://trust.rebellion.systems

Release notes

Keep releases explicit because SDK behavior is security-sensitive:

• API additions: minor version
• Type-only additions: patch version unless they affect inference materially
• Runtime behavior changes, auth behavior changes, or signature format changes: major version