@beacon-build/sdk 3.30.0 → 3.30.1

package/CHANGELOG.md

@@ -1,5 +1,14 @@
 # @beacon-build/sdk Changelog
 
+## 3.30.1
+
+### Patch Changes
+
+- e08b1ea: B1584: the client_credentials boot mint retries a transient refusal (5xx, network error) with bounded backoff and fails fast with the credential remediation only on an authentication refusal; Argus boots through it.
+- Updated dependencies [ec8b69b]
+- Updated dependencies [6a34e77]
+    - @beacon-build/core@3.30.1
+
 ## 3.30.0
 
 ### Minor Changes

package/dist/auth/rotating-jwt-provider.d.ts

@@ -77,11 +77,43 @@ export interface RotatingJwtProviderOptions {
      *  path an ordinary resolution failure already takes, because it bypasses that `.catch()`
      *  entirely and kills the whole process instead of just disabling one feature. */
     onBootMintFailure?: 'exit' | 'throw';
+    /** B1584: bounded backoff retry of a TRANSIENT boot-mint failure (see {@link isTransientMintError}):
+     *  a platform that is still starting (5xx, network error) is the normal case whenever the API and
+     *  its machine callers restart together, so it must not end the boot. Any other failure (an
+     *  authentication refusal, a malformed answer, the B710 timeout) still fails at once. Defaults to
+     *  {@link DEFAULT_BOOT_RETRY}; `false` turns the retry off. */
+    bootRetry?: false | BootRetryOptions;
 }
+export interface BootRetryOptions {
+    /** Total time the retries may take, ms (default 90 s): once the next wait would pass it, give up. */
+    windowMs?: number;
+    /** First wait, ms; doubles per attempt (default 1 s). */
+    initialDelayMs?: number;
+    /** Upper bound of one wait, ms (default 10 s). */
+    maxDelayMs?: number;
+    /** Test seam: the wait (default `setTimeout`). */
+    sleep?: (ms: number) => Promise<void>;
+    /** Test seam: the clock (default `Date.now`). */
+    now?: () => number;
+}
+export declare const DEFAULT_BOOT_RETRY: {
+    readonly windowMs: 90000;
+    readonly initialDelayMs: 1000;
+    readonly maxDelayMs: 10000;
+};
+/**
+ * B1584: the ONE classification of a mint failure as transient (the platform could not answer: retry)
+ * versus an authentication/contract failure (fail fast). A mint function marks a transient failure by
+ * throwing an error with `transient === true` (`ClientCredentialsMintError` does for a 5xx, a 408/429
+ * and a network error); every other error, a plain `Error` included, is not transient.
+ */
+export declare function isTransientMintError(err: unknown): err is Error & {
+    transient: true;
+};
 /**
  * Mint `mintFn` once at boot (fail-fast on failure — exits the process), then keep the
  * token rotating for the life of a long-running daemon on an unref'd timer. Returns a
  * PROVIDER — re-read per request — never a captured string.
  */
-export declare function createRotatingJwtProvider(mintFn: () => Promise<JwtMintResult>, { refreshMs, log, timeoutMs, onBootMintFailure, }: RotatingJwtProviderOptions): Promise<() => string>;
+export declare function createRotatingJwtProvider(mintFn: () => Promise<JwtMintResult>, { refreshMs, log, timeoutMs, onBootMintFailure, bootRetry, }: RotatingJwtProviderOptions): Promise<() => string>;
 //# sourceMappingURL=rotating-jwt-provider.d.ts.map

package/dist/auth/rotating-jwt-provider.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"rotating-jwt-provider.d.ts","sourceRoot":"","sources":["../../src/auth/rotating-jwt-provider.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAyCG;AAEH,MAAM,WAAW,cAAc;IAC3B,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAA;IAC9D,KAAK,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAA;CAClE;AAED;;iFAEiF;AACjF,MAAM,WAAW,aAAa;IAC1B,KAAK,EAAE,MAAM,CAAA;IACb,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CACvC;AAED;;kEAEkE;AAClE,eAAO,MAAM,uBAAuB,QAAS,CAAA;AAE7C,MAAM,WAAW,0BAA0B;IACvC;;mEAE+D;IAC/D,SAAS,EAAE,MAAM,CAAA;IACjB,GAAG,EAAE,cAAc,CAAA;IACnB;;;qCAGiC;IACjC,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB;;;;;;;;;sFASkF;IAClF,iBAAiB,CAAC,EAAE,MAAM,GAAG,OAAO,CAAA;CACvC;AAsDD;;;;GAIG;AACH,wBAAsB,yBAAyB,CAC3C,MAAM,EAAE,MAAM,OAAO,CAAC,aAAa,CAAC,EACpC,EACI,SAAS,EACT,GAAG,EACH,SAAmC,EACnC,iBAA0B,GAC7B,EAAE,0BAA0B,GAC9B,OAAO,CAAC,MAAM,MAAM,CAAC,CAsBvB"}
+{"version":3,"file":"rotating-jwt-provider.d.ts","sourceRoot":"","sources":["../../src/auth/rotating-jwt-provider.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAyCG;AAEH,MAAM,WAAW,cAAc;IAC3B,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAA;IAC9D,KAAK,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAA;CAClE;AAED;;iFAEiF;AACjF,MAAM,WAAW,aAAa;IAC1B,KAAK,EAAE,MAAM,CAAA;IACb,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CACvC;AAED;;kEAEkE;AAClE,eAAO,MAAM,uBAAuB,QAAS,CAAA;AAE7C,MAAM,WAAW,0BAA0B;IACvC;;mEAE+D;IAC/D,SAAS,EAAE,MAAM,CAAA;IACjB,GAAG,EAAE,cAAc,CAAA;IACnB;;;qCAGiC;IACjC,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB;;;;;;;;;sFASkF;IAClF,iBAAiB,CAAC,EAAE,MAAM,GAAG,OAAO,CAAA;IACpC;;;;mEAI+D;IAC/D,SAAS,CAAC,EAAE,KAAK,GAAG,gBAAgB,CAAA;CACvC;AAED,MAAM,WAAW,gBAAgB;IAC7B,qGAAqG;IACrG,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,yDAAyD;IACzD,cAAc,CAAC,EAAE,MAAM,CAAA;IACvB,kDAAkD;IAClD,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,kDAAkD;IAClD,KAAK,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAA;IACrC,iDAAiD;IACjD,GAAG,CAAC,EAAE,MAAM,MAAM,CAAA;CACrB;AAED,eAAO,MAAM,kBAAkB;;;;CAIrB,CAAA;AAEV;;;;;GAKG;AACH,wBAAgB,oBAAoB,CAAC,GAAG,EAAE,OAAO,GAAG,GAAG,IAAI,KAAK,GAAG;IAAE,SAAS,EAAE,IAAI,CAAA;CAAE,CAErF;AAqGD;;;;GAIG;AACH,wBAAsB,yBAAyB,CAC3C,MAAM,EAAE,MAAM,OAAO,CAAC,aAAa,CAAC,EACpC,EACI,SAAS,EACT,GAAG,EACH,SAAmC,EACnC,iBAA0B,EAC1B,SAAc,GACjB,EAAE,0BAA0B,GAC9B,OAAO,CAAC,MAAM,MAAM,CAAC,CAsBvB"}

package/dist/auth/rotating-jwt-provider.js

@@ -44,6 +44,20 @@
  *  the 60s external MCP-client readiness gate observed live, leaving headroom for the rest
  *  of `register()`/`connect()` to run inside that same window. */
 export const DEFAULT_MINT_TIMEOUT_MS = 30_000;
+export const DEFAULT_BOOT_RETRY = {
+    windowMs: 90_000,
+    initialDelayMs: 1_000,
+    maxDelayMs: 10_000,
+};
+/**
+ * B1584: the ONE classification of a mint failure as transient (the platform could not answer: retry)
+ * versus an authentication/contract failure (fail fast). A mint function marks a transient failure by
+ * throwing an error with `transient === true` (`ClientCredentialsMintError` does for a 5xx, a 408/429
+ * and a network error); every other error, a plain `Error` included, is not transient.
+ */
+export function isTransientMintError(err) {
+    return err instanceof Error && err.transient === true;
+}
 /**
  * B710: race `mintFn()` against a timer so a hung network call can never block its caller
  * past `timeoutMs`. The timer is cleared on either outcome (settle-first wins) and never
@@ -65,9 +79,50 @@ function withMintTimeout(mintFn, timeoutMs) {
         });
     });
 }
-async function mintAtBoot(mintFn, log, timeoutMs, onBootMintFailure) {
+/**
+ * B1584: `withMintTimeout(mintFn)` with a bounded exponential-backoff retry of a TRANSIENT failure.
+ * One log line per failed attempt. When the window runs out the error names the real cause - the
+ * authorization server is unavailable (last status, attempts, duration) - and carries none of the
+ * mint function's credential remediation (the credentials were never judged wrong).
+ */
+async function mintWithBootRetry(mintFn, log, timeoutMs, retry) {
+    if (retry === false)
+        return withMintTimeout(mintFn, timeoutMs);
+    const windowMs = retry.windowMs ?? DEFAULT_BOOT_RETRY.windowMs;
+    const initialDelayMs = retry.initialDelayMs ?? DEFAULT_BOOT_RETRY.initialDelayMs;
+    const maxDelayMs = retry.maxDelayMs ?? DEFAULT_BOOT_RETRY.maxDelayMs;
+    const now = retry.now ?? Date.now;
+    const sleep = retry.sleep ?? ((ms) => new Promise((r) => setTimeout(r, ms)));
+    const startedAt = now();
+    for (let attempt = 1;; attempt++) {
+        try {
+            return await withMintTimeout(mintFn, timeoutMs);
+        }
+        catch (err) {
+            if (!isTransientMintError(err))
+                throw err;
+            const status = err.status;
+            const delayMs = Math.min(maxDelayMs, initialDelayMs * 2 ** (attempt - 1));
+            const elapsedMs = now() - startedAt;
+            if (elapsedMs + delayMs > windowMs) {
+                const seconds = Math.round(elapsedMs / 1000);
+                throw new Error(`authorization server unavailable: ${attempt} attempts over ${seconds}s, ` +
+                    `last ${typeof status === 'number' ? `status ${status}` : 'error (no HTTP answer)'}` +
+                    ` - ${err.message}`);
+            }
+            log.info('rotating JWT boot mint attempt failed (transient) - retrying', {
+                attempt,
+                status: typeof status === 'number' ? status : null,
+                error: err.message,
+                retryInMs: delayMs,
+            });
+            await sleep(delayMs);
+        }
+    }
+}
+async function mintAtBoot(mintFn, log, timeoutMs, onBootMintFailure, bootRetry) {
     try {
-        const { token, logContext } = await withMintTimeout(mintFn, timeoutMs);
+        const { token, logContext } = await mintWithBootRetry(mintFn, log, timeoutMs, bootRetry);
         log.info('minted rotating JWT at boot', logContext);
         return token;
     }
@@ -89,8 +144,8 @@ async function mintAtBoot(mintFn, log, timeoutMs, onBootMintFailure) {
  * token rotating for the life of a long-running daemon on an unref'd timer. Returns a
  * PROVIDER — re-read per request — never a captured string.
  */
-export async function createRotatingJwtProvider(mintFn, { refreshMs, log, timeoutMs = DEFAULT_MINT_TIMEOUT_MS, onBootMintFailure = 'exit', }) {
-    let current = await mintAtBoot(mintFn, log, timeoutMs, onBootMintFailure);
+export async function createRotatingJwtProvider(mintFn, { refreshMs, log, timeoutMs = DEFAULT_MINT_TIMEOUT_MS, onBootMintFailure = 'exit', bootRetry = {}, }) {
+    let current = await mintAtBoot(mintFn, log, timeoutMs, onBootMintFailure, bootRetry);
     const timer = setInterval(() => {
         void (async () => {
             try {

package/dist/auth/rotating-jwt-provider.js.map

@@ -1 +1 @@
-{"version":3,"file":"rotating-jwt-provider.js","sourceRoot":"","sources":["../../src/auth/rotating-jwt-provider.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAyCG;AAeH;;kEAEkE;AAClE,MAAM,CAAC,MAAM,uBAAuB,GAAG,MAAM,CAAA;AA0B7C;;;;;GAKG;AACH,SAAS,eAAe,CACpB,MAAoC,EACpC,SAAiB;IAEjB,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACnC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;YAC1B,MAAM,CAAC,IAAI,KAAK,CAAC,4BAA4B,SAAS,IAAI,CAAC,CAAC,CAAA;QAChE,CAAC,EAAE,SAAS,CAAC,CAAA;QACb,KAAK,CAAC,KAAK,EAAE,CAAA;QACb,MAAM,EAAE,CAAC,IAAI,CACT,CAAC,MAAM,EAAE,EAAE;YACP,YAAY,CAAC,KAAK,CAAC,CAAA;YACnB,OAAO,CAAC,MAAM,CAAC,CAAA;QACnB,CAAC,EACD,CAAC,GAAG,EAAE,EAAE;YACJ,YAAY,CAAC,KAAK,CAAC,CAAA;YACnB,MAAM,CAAC,GAAG,CAAC,CAAA;QACf,CAAC,CACJ,CAAA;IACL,CAAC,CAAC,CAAA;AACN,CAAC;AAED,KAAK,UAAU,UAAU,CACrB,MAAoC,EACpC,GAAmB,EACnB,SAAiB,EACjB,iBAAmC;IAEnC,IAAI,CAAC;QACD,MAAM,EAAE,KAAK,EAAE,UAAU,EAAE,GAAG,MAAM,eAAe,CAAC,MAAM,EAAE,SAAS,CAAC,CAAA;QACtE,GAAG,CAAC,IAAI,CAAC,6BAA6B,EAAE,UAAU,CAAC,CAAA;QACnD,OAAO,KAAK,CAAA;IAChB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACX,GAAG,CAAC,KAAK,CAAC,+BAA+B,EAAE;YACvC,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;SAC1D,CAAC,CAAA;QACF,8EAA8E;QAC9E,oFAAoF;QACpF,mFAAmF;QACnF,IAAI,iBAAiB,KAAK,OAAO,EAAE,CAAC;YAChC,MAAM,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAA;QAC7D,CAAC;QACD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IACnB,CAAC;AACL,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAC3C,MAAoC,EACpC,EACI,SAAS,EACT,GAAG,EACH,SAAS,GAAG,uBAAuB,EACnC,iBAAiB,GAAG,MAAM,GACD;IAE7B,IAAI,OAAO,GAAG,MAAM,UAAU,CAAC,MAAM,EAAE,GAAG,EAAE,SAAS,EAAE,iBAAiB,CAAC,CAAA;IAEzE,MAAM,KAAK,GAAG,WAAW,CAAC,GAAG,EAAE;QAC3B,KAAK,CAAC,KAAK,IAAI,EAAE;YACb,IAAI,CAAC;gBACD,MAAM,EAAE,KAAK,EAAE,UAAU,EAAE,GAAG,MAAM,eAAe,CAAC,MAAM,EAAE,SAAS,CAAC,CAAA;gBACtE,OAAO,GAAG,KAAK,CAAA;gBACf,GAAG,CAAC,IAAI,CAAC,oCAAoC,EAAE,UAAU,CAAC,CAAA;YAC9D,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACX,uEAAuE;gBACvE,0EAA0E;gBAC1E,mDAAmD;gBACnD,GAAG,CAAC,KAAK,CAAC,+CAA+C,EAAE;oBACvD,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;iBAC1D,CAAC,CAAA;YACN,CAAC;QACL,CAAC,CAAC,EAAE,CAAA;IACR,CAAC,EAAE,SAAS,CAAC,CAAA;IACb,KAAK,CAAC,KAAK,EAAE,CAAA;IAEb,OAAO,GAAG,EAAE,CAAC,OAAO,CAAA;AACxB,CAAC"}
+{"version":3,"file":"rotating-jwt-provider.js","sourceRoot":"","sources":["../../src/auth/rotating-jwt-provider.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAyCG;AAeH;;kEAEkE;AAClE,MAAM,CAAC,MAAM,uBAAuB,GAAG,MAAM,CAAA;AA6C7C,MAAM,CAAC,MAAM,kBAAkB,GAAG;IAC9B,QAAQ,EAAE,MAAM;IAChB,cAAc,EAAE,KAAK;IACrB,UAAU,EAAE,MAAM;CACZ,CAAA;AAEV;;;;;GAKG;AACH,MAAM,UAAU,oBAAoB,CAAC,GAAY;IAC7C,OAAO,GAAG,YAAY,KAAK,IAAK,GAA+B,CAAC,SAAS,KAAK,IAAI,CAAA;AACtF,CAAC;AAED;;;;;GAKG;AACH,SAAS,eAAe,CACpB,MAAoC,EACpC,SAAiB;IAEjB,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACnC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;YAC1B,MAAM,CAAC,IAAI,KAAK,CAAC,4BAA4B,SAAS,IAAI,CAAC,CAAC,CAAA;QAChE,CAAC,EAAE,SAAS,CAAC,CAAA;QACb,KAAK,CAAC,KAAK,EAAE,CAAA;QACb,MAAM,EAAE,CAAC,IAAI,CACT,CAAC,MAAM,EAAE,EAAE;YACP,YAAY,CAAC,KAAK,CAAC,CAAA;YACnB,OAAO,CAAC,MAAM,CAAC,CAAA;QACnB,CAAC,EACD,CAAC,GAAG,EAAE,EAAE;YACJ,YAAY,CAAC,KAAK,CAAC,CAAA;YACnB,MAAM,CAAC,GAAG,CAAC,CAAA;QACf,CAAC,CACJ,CAAA;IACL,CAAC,CAAC,CAAA;AACN,CAAC;AAED;;;;;GAKG;AACH,KAAK,UAAU,iBAAiB,CAC5B,MAAoC,EACpC,GAAmB,EACnB,SAAiB,EACjB,KAA+B;IAE/B,IAAI,KAAK,KAAK,KAAK;QAAE,OAAO,eAAe,CAAC,MAAM,EAAE,SAAS,CAAC,CAAA;IAC9D,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,IAAI,kBAAkB,CAAC,QAAQ,CAAA;IAC9D,MAAM,cAAc,GAAG,KAAK,CAAC,cAAc,IAAI,kBAAkB,CAAC,cAAc,CAAA;IAChF,MAAM,UAAU,GAAG,KAAK,CAAC,UAAU,IAAI,kBAAkB,CAAC,UAAU,CAAA;IACpE,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAA;IACjC,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,IAAI,CAAC,CAAC,EAAU,EAAE,EAAE,CAAC,IAAI,OAAO,CAAO,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAA;IAC1F,MAAM,SAAS,GAAG,GAAG,EAAE,CAAA;IACvB,KAAK,IAAI,OAAO,GAAG,CAAC,GAAI,OAAO,EAAE,EAAE,CAAC;QAChC,IAAI,CAAC;YACD,OAAO,MAAM,eAAe,CAAC,MAAM,EAAE,SAAS,CAAC,CAAA;QACnD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACX,IAAI,CAAC,oBAAoB,CAAC,GAAG,CAAC;gBAAE,MAAM,GAAG,CAAA;YACzC,MAAM,MAAM,GAAI,GAA4B,CAAC,MAAM,CAAA;YACnD,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,UAAU,EAAE,cAAc,GAAG,CAAC,IAAI,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC,CAAA;YACzE,MAAM,SAAS,GAAG,GAAG,EAAE,GAAG,SAAS,CAAA;YACnC,IAAI,SAAS,GAAG,OAAO,GAAG,QAAQ,EAAE,CAAC;gBACjC,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,GAAG,IAAI,CAAC,CAAA;gBAC5C,MAAM,IAAI,KAAK,CACX,qCAAqC,OAAO,kBAAkB,OAAO,KAAK;oBACtE,QAAQ,OAAO,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,UAAU,MAAM,EAAE,CAAC,CAAC,CAAC,wBAAwB,EAAE;oBACpF,MAAM,GAAG,CAAC,OAAO,EAAE,CAC1B,CAAA;YACL,CAAC;YACD,GAAG,CAAC,IAAI,CAAC,8DAA8D,EAAE;gBACrE,OAAO;gBACP,MAAM,EAAE,OAAO,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI;gBAClD,KAAK,EAAE,GAAG,CAAC,OAAO;gBAClB,SAAS,EAAE,OAAO;aACrB,CAAC,CAAA;YACF,MAAM,KAAK,CAAC,OAAO,CAAC,CAAA;QACxB,CAAC;IACL,CAAC;AACL,CAAC;AAED,KAAK,UAAU,UAAU,CACrB,MAAoC,EACpC,GAAmB,EACnB,SAAiB,EACjB,iBAAmC,EACnC,SAAmC;IAEnC,IAAI,CAAC;QACD,MAAM,EAAE,KAAK,EAAE,UAAU,EAAE,GAAG,MAAM,iBAAiB,CAAC,MAAM,EAAE,GAAG,EAAE,SAAS,EAAE,SAAS,CAAC,CAAA;QACxF,GAAG,CAAC,IAAI,CAAC,6BAA6B,EAAE,UAAU,CAAC,CAAA;QACnD,OAAO,KAAK,CAAA;IAChB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACX,GAAG,CAAC,KAAK,CAAC,+BAA+B,EAAE;YACvC,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;SAC1D,CAAC,CAAA;QACF,8EAA8E;QAC9E,oFAAoF;QACpF,mFAAmF;QACnF,IAAI,iBAAiB,KAAK,OAAO,EAAE,CAAC;YAChC,MAAM,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAA;QAC7D,CAAC;QACD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IACnB,CAAC;AACL,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAC3C,MAAoC,EACpC,EACI,SAAS,EACT,GAAG,EACH,SAAS,GAAG,uBAAuB,EACnC,iBAAiB,GAAG,MAAM,EAC1B,SAAS,GAAG,EAAE,GACW;IAE7B,IAAI,OAAO,GAAG,MAAM,UAAU,CAAC,MAAM,EAAE,GAAG,EAAE,SAAS,EAAE,iBAAiB,EAAE,SAAS,CAAC,CAAA;IAEpF,MAAM,KAAK,GAAG,WAAW,CAAC,GAAG,EAAE;QAC3B,KAAK,CAAC,KAAK,IAAI,EAAE;YACb,IAAI,CAAC;gBACD,MAAM,EAAE,KAAK,EAAE,UAAU,EAAE,GAAG,MAAM,eAAe,CAAC,MAAM,EAAE,SAAS,CAAC,CAAA;gBACtE,OAAO,GAAG,KAAK,CAAA;gBACf,GAAG,CAAC,IAAI,CAAC,oCAAoC,EAAE,UAAU,CAAC,CAAA;YAC9D,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACX,uEAAuE;gBACvE,0EAA0E;gBAC1E,mDAAmD;gBACnD,GAAG,CAAC,KAAK,CAAC,+CAA+C,EAAE;oBACvD,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;iBAC1D,CAAC,CAAA;YACN,CAAC;QACL,CAAC,CAAC,EAAE,CAAA;IACR,CAAC,EAAE,SAAS,CAAC,CAAA;IACb,KAAK,CAAC,KAAK,EAAE,CAAA;IAEb,OAAO,GAAG,EAAE,CAAC,OAAO,CAAA;AACxB,CAAC"}

package/dist/index.auth-and-capture.d.ts

@@ -9,7 +9,7 @@
  * dependency and stays here so `@beacon-build/sdk-internal`'s own Argus-JWT helper (and any
  * other rotating-credential consumer) can build on it without pulling in anything internal.
  */
-export { createRotatingJwtProvider, type RotatingJwtLog, type JwtMintResult, type RotatingJwtProviderOptions, } from './auth/rotating-jwt-provider.js';
+export { createRotatingJwtProvider, isTransientMintError, DEFAULT_BOOT_RETRY, type BootRetryOptions, type RotatingJwtLog, type JwtMintResult, type RotatingJwtProviderOptions, } from './auth/rotating-jwt-provider.js';
 export { CaptureClient, type CapturedEntry, type CapturedToolUse, type CaptureJob, } from './clients/capture.client.js';
 export { KnowledgeClient, type KnowledgeSearchOptions, type KnowledgeNodeGetOptions, type KnowledgeOutlineOptions, type KnowledgeHistoryOptions, type KnowledgeDiffOptions, type KnowledgeCreateNodeInput, type KnowledgePatchInput, type KnowledgeDraftInput, type KnowledgeDecisionInput, type KnowledgeQuestionInput, type KnowledgeLinkInput, type KnowledgeTransitionInput, type KnowledgeSetMasterInput, type KnowledgeApproveDraftsOptions, type KnowledgeContextOptions, type KnowledgeContextResult, type KnowledgeModelOptions, type KnowledgeModelResult, type ModelSchema, type ModelType, type ModelField, type ModelReference, type ModelRelation, type ModelSection, type KnowledgeModelI18nOptions, type KnowledgeModelI18nResult, type ModelI18nLanguage, type ModelTypeText, type TaskModelLinkType, type TaskModelLinkInput, type TaskModelLink, type TaskModelLinkResult, type TaskModelLinkWarning, type NodeTaskLink, type KnowledgeAudience, type KnowledgeMaster, type KnowledgeNodeScope, type KnowledgeListScope, type KnowledgeListSort, type KnowledgeListOptions, type KnowledgeListResult, type KnowledgeNodeSummary, type KnowledgeNodeDegree, type KnowledgeDegreeOptions, type KnowledgeSearchHit, type KnowledgeSearchResult, type KnowledgeSource, type KnowledgeAccess, type KnowledgeAllowedAction, type KnowledgeAllowedActions, type KnowledgeNodeResult, type KnowledgeNodeReference, type KnowledgeNodeSection, type KnowledgeFinding, type KnowledgeRelation, type KnowledgeRelationDirection, type KnowledgeRelationsOptions, type KnowledgeRelationsResult, type KnowledgeOutlineResult, type KnowledgeHistoryVersion, type KnowledgeHistoryEvent, type KnowledgeHistoryResult, type KnowledgeDiffResult, type KnowledgeDiffSection, type KnowledgeTransitionResult, type KnowledgeReviewItem, type KnowledgeWriteBack, type KnowledgeReviewQueueOptions, type KnowledgeReviewQueueResult, type KnowledgeComment, type KnowledgeAddCommentInput, type KnowledgeListCommentsOptions, type KnowledgeApprovalRule, } from './clients/knowledge.client.js';
 //# sourceMappingURL=index.auth-and-capture.d.ts.map

package/dist/index.auth-and-capture.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.auth-and-capture.d.ts","sourceRoot":"","sources":["../src/index.auth-and-capture.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAGH,OAAO,EACH,yBAAyB,EACzB,KAAK,cAAc,EACnB,KAAK,aAAa,EAClB,KAAK,0BAA0B,GAClC,MAAM,iCAAiC,CAAA;AAGxC,OAAO,EACH,aAAa,EACb,KAAK,aAAa,EAClB,KAAK,eAAe,EACpB,KAAK,UAAU,GAClB,MAAM,6BAA6B,CAAA;AAGpC,OAAO,EACH,eAAe,EACf,KAAK,sBAAsB,EAC3B,KAAK,uBAAuB,EAC5B,KAAK,uBAAuB,EAC5B,KAAK,uBAAuB,EAC5B,KAAK,oBAAoB,EACzB,KAAK,wBAAwB,EAC7B,KAAK,mBAAmB,EACxB,KAAK,mBAAmB,EACxB,KAAK,sBAAsB,EAC3B,KAAK,sBAAsB,EAC3B,KAAK,kBAAkB,EACvB,KAAK,wBAAwB,EAC7B,KAAK,uBAAuB,EAC5B,KAAK,6BAA6B,EAElC,KAAK,uBAAuB,EAC5B,KAAK,sBAAsB,EAE3B,KAAK,qBAAqB,EAC1B,KAAK,oBAAoB,EACzB,KAAK,WAAW,EAChB,KAAK,SAAS,EACd,KAAK,UAAU,EACf,KAAK,cAAc,EACnB,KAAK,aAAa,EAClB,KAAK,YAAY,EAEjB,KAAK,yBAAyB,EAC9B,KAAK,wBAAwB,EAC7B,KAAK,iBAAiB,EACtB,KAAK,aAAa,EAElB,KAAK,iBAAiB,EACtB,KAAK,kBAAkB,EACvB,KAAK,aAAa,EAClB,KAAK,mBAAmB,EACxB,KAAK,oBAAoB,EACzB,KAAK,YAAY,EAEjB,KAAK,iBAAiB,EACtB,KAAK,eAAe,EACpB,KAAK,kBAAkB,EACvB,KAAK,kBAAkB,EACvB,KAAK,iBAAiB,EACtB,KAAK,oBAAoB,EACzB,KAAK,mBAAmB,EACxB,KAAK,oBAAoB,EAEzB,KAAK,mBAAmB,EACxB,KAAK,sBAAsB,EAC3B,KAAK,kBAAkB,EACvB,KAAK,qBAAqB,EAC1B,KAAK,eAAe,EACpB,KAAK,eAAe,EACpB,KAAK,sBAAsB,EAC3B,KAAK,uBAAuB,EAC5B,KAAK,mBAAmB,EACxB,KAAK,sBAAsB,EAC3B,KAAK,oBAAoB,EACzB,KAAK,gBAAgB,EACrB,KAAK,iBAAiB,EACtB,KAAK,0BAA0B,EAC/B,KAAK,yBAAyB,EAC9B,KAAK,wBAAwB,EAC7B,KAAK,sBAAsB,EAC3B,KAAK,uBAAuB,EAC5B,KAAK,qBAAqB,EAC1B,KAAK,sBAAsB,EAC3B,KAAK,mBAAmB,EACxB,KAAK,oBAAoB,EACzB,KAAK,yBAAyB,EAC9B,KAAK,mBAAmB,EACxB,KAAK,kBAAkB,EACvB,KAAK,2BAA2B,EAChC,KAAK,0BAA0B,EAC/B,KAAK,gBAAgB,EACrB,KAAK,wBAAwB,EAC7B,KAAK,4BAA4B,EACjC,KAAK,qBAAqB,GAC7B,MAAM,+BAA+B,CAAA"}
+{"version":3,"file":"index.auth-and-capture.d.ts","sourceRoot":"","sources":["../src/index.auth-and-capture.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAGH,OAAO,EACH,yBAAyB,EACzB,oBAAoB,EACpB,kBAAkB,EAClB,KAAK,gBAAgB,EACrB,KAAK,cAAc,EACnB,KAAK,aAAa,EAClB,KAAK,0BAA0B,GAClC,MAAM,iCAAiC,CAAA;AAGxC,OAAO,EACH,aAAa,EACb,KAAK,aAAa,EAClB,KAAK,eAAe,EACpB,KAAK,UAAU,GAClB,MAAM,6BAA6B,CAAA;AAGpC,OAAO,EACH,eAAe,EACf,KAAK,sBAAsB,EAC3B,KAAK,uBAAuB,EAC5B,KAAK,uBAAuB,EAC5B,KAAK,uBAAuB,EAC5B,KAAK,oBAAoB,EACzB,KAAK,wBAAwB,EAC7B,KAAK,mBAAmB,EACxB,KAAK,mBAAmB,EACxB,KAAK,sBAAsB,EAC3B,KAAK,sBAAsB,EAC3B,KAAK,kBAAkB,EACvB,KAAK,wBAAwB,EAC7B,KAAK,uBAAuB,EAC5B,KAAK,6BAA6B,EAElC,KAAK,uBAAuB,EAC5B,KAAK,sBAAsB,EAE3B,KAAK,qBAAqB,EAC1B,KAAK,oBAAoB,EACzB,KAAK,WAAW,EAChB,KAAK,SAAS,EACd,KAAK,UAAU,EACf,KAAK,cAAc,EACnB,KAAK,aAAa,EAClB,KAAK,YAAY,EAEjB,KAAK,yBAAyB,EAC9B,KAAK,wBAAwB,EAC7B,KAAK,iBAAiB,EACtB,KAAK,aAAa,EAElB,KAAK,iBAAiB,EACtB,KAAK,kBAAkB,EACvB,KAAK,aAAa,EAClB,KAAK,mBAAmB,EACxB,KAAK,oBAAoB,EACzB,KAAK,YAAY,EAEjB,KAAK,iBAAiB,EACtB,KAAK,eAAe,EACpB,KAAK,kBAAkB,EACvB,KAAK,kBAAkB,EACvB,KAAK,iBAAiB,EACtB,KAAK,oBAAoB,EACzB,KAAK,mBAAmB,EACxB,KAAK,oBAAoB,EAEzB,KAAK,mBAAmB,EACxB,KAAK,sBAAsB,EAC3B,KAAK,kBAAkB,EACvB,KAAK,qBAAqB,EAC1B,KAAK,eAAe,EACpB,KAAK,eAAe,EACpB,KAAK,sBAAsB,EAC3B,KAAK,uBAAuB,EAC5B,KAAK,mBAAmB,EACxB,KAAK,sBAAsB,EAC3B,KAAK,oBAAoB,EACzB,KAAK,gBAAgB,EACrB,KAAK,iBAAiB,EACtB,KAAK,0BAA0B,EAC/B,KAAK,yBAAyB,EAC9B,KAAK,wBAAwB,EAC7B,KAAK,sBAAsB,EAC3B,KAAK,uBAAuB,EAC5B,KAAK,qBAAqB,EAC1B,KAAK,sBAAsB,EAC3B,KAAK,mBAAmB,EACxB,KAAK,oBAAoB,EACzB,KAAK,yBAAyB,EAC9B,KAAK,mBAAmB,EACxB,KAAK,kBAAkB,EACvB,KAAK,2BAA2B,EAChC,KAAK,0BAA0B,EAC/B,KAAK,gBAAgB,EACrB,KAAK,wBAAwB,EAC7B,KAAK,4BAA4B,EACjC,KAAK,qBAAqB,GAC7B,MAAM,+BAA+B,CAAA"}

package/dist/index.auth-and-capture.js

@@ -10,7 +10,7 @@
  * other rotating-credential consumer) can build on it without pulling in anything internal.
  */
 // ── Rotating JWT provider (C573 — DRY, B468 follow-up) ────────────────────────
-export { createRotatingJwtProvider, } from './auth/rotating-jwt-provider.js';
+export { createRotatingJwtProvider, isTransientMintError, DEFAULT_BOOT_RETRY, } from './auth/rotating-jwt-provider.js';
 // ── Capture client (C958 — DRY: sidecar + portal ingest) ──────────────────────
 export { CaptureClient, } from './clients/capture.client.js';
 // ── Knowledge client (F738) ──────────────────────────────────────────────────

package/dist/index.auth-and-capture.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.auth-and-capture.js","sourceRoot":"","sources":["../src/index.auth-and-capture.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,iFAAiF;AACjF,OAAO,EACH,yBAAyB,GAI5B,MAAM,iCAAiC,CAAA;AAExC,iFAAiF;AACjF,OAAO,EACH,aAAa,GAIhB,MAAM,6BAA6B,CAAA;AAEpC,gFAAgF;AAChF,OAAO,EACH,eAAe,GAgFlB,MAAM,+BAA+B,CAAA"}
+{"version":3,"file":"index.auth-and-capture.js","sourceRoot":"","sources":["../src/index.auth-and-capture.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,iFAAiF;AACjF,OAAO,EACH,yBAAyB,EACzB,oBAAoB,EACpB,kBAAkB,GAKrB,MAAM,iCAAiC,CAAA;AAExC,iFAAiF;AACjF,OAAO,EACH,aAAa,GAIhB,MAAM,6BAA6B,CAAA;AAEpC,gFAAgF;AAChF,OAAO,EACH,eAAe,GAgFlB,MAAM,+BAA+B,CAAA"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@beacon-build/sdk",
-  "version": "3.30.0",
+  "version": "3.30.1",
   "type": "module",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",
@@ -28,7 +28,7 @@
     "@types/react": "^19.2.0",
     "@types/react-dom": "^19.2.0",
     "event-source-polyfill": "^1.0.31",
-    "@beacon-build/core": "3.30.0"
+    "@beacon-build/core": "3.30.1"
   },
   "devDependencies": {
     "@testing-library/react": "^16.3.2",