@crouter/api 0.3.392 → 0.3.394

package/dist/api/dto/grants.d.ts

@@ -1,5 +1,13 @@
 /** A provider's setup state for the account (directory spec, "Provider setup state"). */
 export type SetupState = 'not_started' | 'pending' | 'ready' | 'failed';
+/** One provider the grantee requires, as the directory's grant sync carried it. */
+export interface ProviderDependency {
+    state: SetupState;
+    /** The provider's own sentence for `pending` and `failed` (its `message_pending` / `message_failed`); absent for `not_started` and `ready`. */
+    message?: string;
+    /** Absolute URL of the directory's setup page for this provider and this app (`<issuer>/connect/setup/<provider>?client_id=<grantee>`); the app may append `return_to` (its own registered redirect origin) so Continue brings the person back. */
+    next: string;
+}
 export interface GrantGetDTO {
     sub: string;
     grantee: string;
@@ -13,6 +21,6 @@ export interface GrantGetDTO {
     }[];
     spend_cap: number | null;
     payer: 'user';
-    /** `{ <provider id>: <setup state> }` as the directory's grant sync carried it; `{}` when the grantee has none. The daemon performs no `requires` check: an app polls this and refuses its own operation with `provider_setup_pending`. */
-    dependencies: Record<string, SetupState>;
+    /** `{ <provider id>: ProviderDependency }` as the directory's grant sync carried it; `{}` when the grantee has none. The daemon performs no `requires` check: an app polls this and refuses its own operation with `provider_setup_pending`. When an entry's `state` is not `ready`, show its `message` (the provider's own sentence, when it has one) and send the person to its `next` (the directory's setup page) — never copy the provider's prose into the app. */
+    dependencies: Record<string, ProviderDependency>;
 }

package/dist/api/error-codes.js

@@ -18,7 +18,7 @@ export const errorCodes = {
     user_denied: { type: 'permission_error', status: 403, retryable: false },
     provider_refused: { type: 'permission_error', status: 403, retryable: false },
     provider_not_connected: { type: 'permission_error', status: 403, retryable: false },
-    // An app refusing its own operation because a provider in its `requires` is not `ready`; details `{ provider, state, next }`, `next` = `<issuer>/connect/setup/<provider>`. The daemon never raises it (it only carries `dependencies`).
+    // An app refusing its own operation because a provider in its `requires` is not `ready`; details `{ provider, state, message?, next }`, copied from `grant.get`'s `dependencies[provider]` entry (`next` = `<issuer>/connect/setup/<provider>?client_id=<grantee>`). The daemon never raises it (it only carries `dependencies`).
     provider_setup_pending: { type: 'permission_error', status: 403, retryable: false },
     question_pages_off: { type: 'permission_error', status: 403, retryable: false },
     isolated_run: { type: 'permission_error', status: 403, retryable: false },

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@crouter/api",
-  "version": "0.3.392",
+  "version": "0.3.394",
   "description": "Typed crtrd /v1 API contract — DTOs, route builders, the error contract, the CrtrClient, and the command-plugin manifest format. Zero runtime dependencies.",
   "type": "module",
   "main": "./dist/api/index.js",