@cortexkit/claustrum-client 0.6.1 → 0.7.0

package/README.md

@@ -23,6 +23,11 @@ credential caching, refresh, account scheduling, and retry policy.
   as a version older than every real one.
 • Unknown server error classes are bounded to `transient`; callers must retry them
   rather than treating a forward-compatible class as permanent.
+• `listScoped` rows always carry `providerIds` (a required field since 0.6.0, so code
+  that builds rows by hand, such as test fixtures, must set it). An empty array means
+  no provider ids are set. Since 0.6.2 a daemon too old to send the field decodes the
+  same way, so a newer client still lists against an older daemon. `authMethod` stays
+  optional.
 
 The client sends `consumerIdentity: null` for every managed request so inherited
 `SUBC_MODULE_ID` and `SUBC_LAUNCH_NONCE` cannot impersonate a supervising host.

package/dist/wire.d.ts

@@ -206,8 +206,14 @@ export interface ScopedInventoryRow {
     readonly categories: readonly string[];
     readonly credentialType: string;
     readonly serves: readonly string[];
-    /** Operator-assigned catalog ids, always present, including an empty set. */
+    /**
+     * Operator-assigned catalog ids; empty when none are set. Always present on this type.
+     * A daemon older than the field omits it from the wire, and that decodes as empty,
+     * which is also what an unmapped credential reports.
+     */
     readonly providerIds: readonly string[];
+    /** Operator assertion, unknown when absent; pricing owns the vocabulary. */
+    readonly planTier?: string;
     readonly authMethod?: 'apikey' | 'chatgpt' | 'antigravity' | 'oauth';
     /**
      * Which provider protocol this credential speaks. Absent for static keys.

package/dist/wire.js

@@ -401,6 +401,11 @@ export function decodeScopedInventory(response, logUnknownClass) {
                 : undefined;
         if (createdAtMs === undefined)
             throw asCredentialError(response, 'invalid_response', logUnknownClass);
+        // A negative end assertion refuses trailing newlines too; JavaScript's $ accepts one.
+        const planTier = row.plan_tier;
+        if (planTier !== undefined && (typeof planTier !== 'string' || !/^[a-z][a-z0-9_]{0,31}(?![\s\S])/.test(planTier))) {
+            throw asCredentialError(response, 'invalid_response', logUnknownClass);
+        }
         const authMethod = row.auth_method;
         if (authMethod !== undefined &&
             authMethod !== 'apikey' && authMethod !== 'chatgpt' &&
@@ -418,8 +423,13 @@ export function decodeScopedInventory(response, logUnknownClass) {
             categories: strings(row.categories),
             credentialType: row.type,
             serves: strings(row.serves),
-            providerIds: strings(row.provider_ids),
+            // ABSENT DECODES AS EMPTY, PRESENT MUST BE AN ARRAY. Daemons before provider ids
+            // existed omit the key, and refusing that would fail the whole listing against a
+            // still-supported daemon. Absent and empty mean the same thing to every consumer:
+            // no ids set. A present non-array is a malformed reply and still refuses.
+            providerIds: row.provider_ids === undefined ? [] : strings(row.provider_ids),
             authMethod,
+            planTier,
             state: row.state,
             refreshAdapter: row.refresh_adapter,
             recordVersion,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cortexkit/claustrum-client",
-  "version": "0.6.1",
+  "version": "0.7.0",
   "license": "MIT",
   "repository": {
     "type": "git",