@fabrika/provider-contract 0.0.25 → 0.2.0

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "@fabrika/provider-contract",
-	"version": "0.0.25",
+	"version": "0.2.0",
 	"type": "module",
 	"repository": {
 		"type": "git",
@@ -26,6 +26,6 @@
 		"test": "bun test"
 	},
 	"dependencies": {
-		"@fabrika/auth-core": "^0.0.25"
+		"@fabrika/auth-core": "^0.2.0"
 	}
 }

package/src/control.ts

@@ -164,6 +164,18 @@ export class ProviderNamespaceError extends Error {
 	}
 }
 
+/**
+ * A provider-managed secret write the provider refuses on the app's own terms — a value naming a
+ * service the app does not own, say. `message` carries the secret's name and the offending host,
+ * never the value, so core may hand it to the caller as a 4xx.
+ */
+export class ProviderSecretError extends Error {
+	constructor(message: string, readonly code: string) {
+		super(message)
+		this.name = 'ProviderSecretError'
+	}
+}
+
 /** Persist a canonical namespace target immediately after one external mutation succeeds. */
 export interface ProviderNamespaceEvents {
 	checkpoint(namespace: ProviderDeploymentNamespace): Promise<void>
@@ -212,12 +224,26 @@ export interface ProviderNamespaceFact {
 	readonly resource?: true
 }
 
+/**
+ * One public host this namespace's own entry point answers on, with the listener port that publishes it.
+ *
+ * Only the provider knows how a host comes to exist — Zerops generates one per published HTTP port — and
+ * core knows which of them an application environment already claims, so the provider names them and core
+ * marks them. A namespace whose domains are bound out of band names none: the provider cannot see them.
+ */
+export interface ProviderNamespaceHost {
+	readonly host: string
+	readonly port: number
+}
+
 /** Provider-owned operator copy for a planned or persisted namespace. */
 export interface ProviderNamespacePresentation {
 	readonly preset: string
 	readonly title: string
 	readonly facts: readonly ProviderNamespaceFact[]
 	readonly instructions: readonly string[]
+	/** The hosts this namespace can serve, so an operator can name one as an environment's domain. */
+	readonly hosts?: readonly ProviderNamespaceHost[]
 }
 
 /** A mutation-free preview that can be submitted unchanged to namespace creation. */