@fleetless/contracts 5.1.0-next.2 → 5.1.0

package/CHANGELOG.md

@@ -9,18 +9,18 @@ version.
 
 ## [Unreleased]
 
+## [5.1.0] — 2026-09-30
+
 ### Added
 
-- **A cancel can be limited to the bridge's own job.** `cancel`
-  (`cloudCancel`) gains an optional `own_only: boolean`; absent means
-  `false`, today's meaning. With `true` the bridge cancels the named job
-  only if it started it itself: a `job_id` it does not hold — typically an
-  `unknown` job — cancels nothing, where without the flag it cancels every
-  external goal on the action. The cloud sets it on the cancels it sends on
-  its own (a republish's reset and its resend at the next hello), so a
-  republish never stops a goal Fleetless did not start; a user's cancel
-  never sets it. `LATEST_BRIDGE_VERSION` is `6.1.0`, the first bridge that
-  honours it. The protocol stays 5.
+- **`cancelRejectedDetails`** (`CancelRejectedDetails`): the `details` of a
+  `cancel_rejected` refusal, `{ goals }` with at least one `{ job_id,
+  goal_id, return_code }` — every goal the cancel reached, accepted ones
+  included, with its `CancelGoal` return code (`CANCEL_RETURN_CODES`, or
+  `null` when that goal's server did not answer). A consumer parses the
+  refusal instead of reading its shape from prose. Published as the
+  artifact `cancel-rejected-details`. The wire does not change: the cloud
+  already sends this shape.
 
 ## [5.0.0] — 2026-09-30
 

package/artifacts/constants.json

@@ -9,7 +9,7 @@
     }
   ],
   "PROTOCOL_SUNSET_DAYS": 90,
-  "LATEST_BRIDGE_VERSION": "6.1.0",
+  "LATEST_BRIDGE_VERSION": "6.0.0",
   "CLOSE_ROBOT_DELETED": 4004,
   "CLOSE_TOKEN_ROTATED": 4005,
   "JOB_HEARTBEAT_INTERVAL_MS": 1000,

package/artifacts/schema/cancel-rejected-details.schema.json

@@ -0,0 +1,46 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "type": "object",
+  "properties": {
+    "goals": {
+      "minItems": 1,
+      "type": "array",
+      "items": {
+        "type": "object",
+        "properties": {
+          "job_id": {
+            "type": "string",
+            "format": "uuid",
+            "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$"
+          },
+          "goal_id": {
+            "type": "string",
+            "minLength": 1
+          },
+          "return_code": {
+            "anyOf": [
+              {
+                "type": "integer",
+                "minimum": 0,
+                "maximum": 3
+              },
+              {
+                "type": "null"
+              }
+            ]
+          }
+        },
+        "required": [
+          "job_id",
+          "goal_id",
+          "return_code"
+        ],
+        "additionalProperties": false
+      }
+    }
+  },
+  "required": [
+    "goals"
+  ],
+  "additionalProperties": false
+}

package/artifacts/schema/cloud-cancel.schema.json

@@ -28,9 +28,6 @@
           "type": "null"
         }
       ]
-    },
-    "own_only": {
-      "type": "boolean"
     }
   },
   "required": [

package/dist/errors.d.ts

@@ -44,6 +44,25 @@ export declare const parameterInvalidDetails: z.ZodObject<{
     }, z.core.$strip>>;
 }, z.core.$strip>;
 export type ParameterInvalidDetails = z.infer<typeof parameterInvalidDetails>;
+/**
+ * The `details` of a `cancel_rejected` refusal: every goal the cancel reached,
+ * accepted ones included, each with the `CancelGoal` return code its action
+ * server answered — compare `return_code` against `CANCEL_RETURN_CODES`
+ * (`none`, `rejected`, `unknown_goal_id`, `goal_terminated`); it is `null`
+ * when that goal's server did not answer within the bridge's bound. Always at
+ * least one goal: the cloud refuses a cancel only because a goal's server
+ * answered `ERROR_REJECTED`. Pinned here for the reason
+ * `parameterInvalidDetails` is: a caller parses it instead of reading the
+ * shape from prose.
+ */
+export declare const cancelRejectedDetails: z.ZodObject<{
+    goals: z.ZodArray<z.ZodObject<{
+        job_id: z.ZodUUID;
+        goal_id: z.ZodString;
+        return_code: z.ZodNullable<z.ZodNumber>;
+    }, z.core.$strip>>;
+}, z.core.$strip>;
+export type CancelRejectedDetails = z.infer<typeof cancelRejectedDetails>;
 /**
  * The codes in use today. The wire deliberately allows any string — this
  * list is the shared vocabulary, not a closed set, so a new refusal never

package/dist/errors.js

@@ -1,5 +1,6 @@
 // SPDX-License-Identifier: Apache-2.0
 import { z } from 'zod';
+import { bridgeCancelResultEntry } from './protocol.js';
 /**
  * The one error shape of the REST and realtime APIs: a stable
  * machine-readable code plus a human message; validation errors name the
@@ -38,6 +39,20 @@ export const parameterViolation = z.object({
 export const parameterInvalidDetails = z.object({
     violations: z.array(parameterViolation).min(1),
 });
+/**
+ * The `details` of a `cancel_rejected` refusal: every goal the cancel reached,
+ * accepted ones included, each with the `CancelGoal` return code its action
+ * server answered — compare `return_code` against `CANCEL_RETURN_CODES`
+ * (`none`, `rejected`, `unknown_goal_id`, `goal_terminated`); it is `null`
+ * when that goal's server did not answer within the bridge's bound. Always at
+ * least one goal: the cloud refuses a cancel only because a goal's server
+ * answered `ERROR_REJECTED`. Pinned here for the reason
+ * `parameterInvalidDetails` is: a caller parses it instead of reading the
+ * shape from prose.
+ */
+export const cancelRejectedDetails = z.object({
+    goals: z.array(bridgeCancelResultEntry).min(1),
+});
 /**
  * The codes in use today. The wire deliberately allows any string — this
  * list is the shared vocabulary, not a closed set, so a new refusal never

package/dist/index.d.ts

@@ -45,8 +45,8 @@ export { auditActor, auditEvent, auditQuery, auditListResponse, AUDIT_CSV_COLUMN
 export type { AuditActor, AuditEvent, AuditQuery, AuditListResponse } from './audit.js';
 export { alertRowCondition, alertSeverity, alertState, datapointAlertRow, alertListResponse, orgFiringAlertsResponse, orgAlertsQuery, datapointDisplay, putDatapointDisplayRequest, } from './alerts.js';
 export type { AlertRowCondition, AlertSeverity, AlertState, DatapointAlertRow, AlertListResponse, OrgFiringAlertsResponse, OrgAlertsQuery, DatapointDisplay, PutDatapointDisplayRequest, } from './alerts.js';
-export { apiError, parameterViolation, parameterInvalidDetails, ERROR_CODES } from './errors.js';
-export type { ApiError, ParameterViolation, ParameterInvalidDetails, ErrorCode } from './errors.js';
+export { apiError, parameterViolation, parameterInvalidDetails, cancelRejectedDetails, ERROR_CODES } from './errors.js';
+export type { ApiError, ParameterViolation, ParameterInvalidDetails, CancelRejectedDetails, ErrorCode } from './errors.js';
 export { oauthErrorCode, oauthError, oauthRedirectResponse, oauthCodeTokenRequest, oauthRefreshTokenRequest, oauthTokenRequest, oauthTokenResponse, redirectUri, codeChallengeMethod, oauthAuthorizeQuery, dynamicClientRegistrationRequest, MCP_DCR_MAX_REDIRECT_URIS, dynamicClientRegistrationResponse, authorizationServerMetadata, protectedResourceMetadata, } from './oauth.js';
 export type { OauthErrorCode, OauthError, OauthRedirectResponse, OauthCodeTokenRequest, OauthRefreshTokenRequest, OauthTokenRequest, OauthTokenResponse, RedirectUri, OauthAuthorizeQuery, DynamicClientRegistrationRequest, DynamicClientRegistrationResponse, AuthorizationServerMetadata, ProtectedResourceMetadata, } from './oauth.js';
 export { ROUTES, ROUTE_SECTIONS, IN_HANDLER_ROUTES } from './routes.js';

package/dist/index.js

@@ -46,6 +46,6 @@ export { APP_USER_DISPLAY_NAME_MAX, APP_URL_PLACEHOLDERS, MAIL_TEMPLATE_VARIABLE
 export { assetKind, URDF_ASSET_NAME, asset, urdfCompleteness, assetListResponse, assetsClearResponse, missingAssetQuery, assetSyncRequest, assetSyncResponse, assetSyncState, assetSyncStatus, assetFailure, assetFailureKind, assetStoreRefusedDetails, assetSyncBusyDetails, ROBOT_ASSET_STORE_BYTES, } from './assets.js';
 export { auditActor, auditEvent, auditQuery, auditListResponse, AUDIT_CSV_COLUMNS, AUDIT_RETENTION_DAYS } from './audit.js';
 export { alertRowCondition, alertSeverity, alertState, datapointAlertRow, alertListResponse, orgFiringAlertsResponse, orgAlertsQuery, datapointDisplay, putDatapointDisplayRequest, } from './alerts.js';
-export { apiError, parameterViolation, parameterInvalidDetails, ERROR_CODES } from './errors.js';
+export { apiError, parameterViolation, parameterInvalidDetails, cancelRejectedDetails, ERROR_CODES } from './errors.js';
 export { oauthErrorCode, oauthError, oauthRedirectResponse, oauthCodeTokenRequest, oauthRefreshTokenRequest, oauthTokenRequest, oauthTokenResponse, redirectUri, codeChallengeMethod, oauthAuthorizeQuery, dynamicClientRegistrationRequest, MCP_DCR_MAX_REDIRECT_URIS, dynamicClientRegistrationResponse, authorizationServerMetadata, protectedResourceMetadata, } from './oauth.js';
 export { ROUTES, ROUTE_SECTIONS, IN_HANDLER_ROUTES } from './routes.js';

package/dist/protocol.d.ts

@@ -78,7 +78,7 @@ export interface ProtocolVersionEntry {
  */
 export declare const PROTOCOL_VERSIONS: readonly ProtocolVersionEntry[];
 /** The newest bridge package. The cloud mails organisations still below it. */
-export declare const LATEST_BRIDGE_VERSION = "6.1.0";
+export declare const LATEST_BRIDGE_VERSION = "6.0.0";
 export interface ProtocolStatus {
     status: 'current' | 'deprecated' | 'unsupported';
     /** ISO date, or null for a current or unknown version. */
@@ -642,24 +642,12 @@ export type CloudInvoke = z.infer<typeof cloudInvoke>;
  * `request_id` correlates the bridge's `cancel_result`, which carries each
  * goal's `CancelGoal` return code; the cloud answers its caller only from
  * that.
- *
- * `own_only` (fleetless#84) limits a cancel to a job the bridge started
- * itself and holds. `true`: the bridge cancels the named job only if it is
- * its own; a `job_id` it does not hold, or holds as an external goal,
- * cancels **nothing** and is answered `goals: []`. The cloud sets it on the
- * cancels it sends on its own — a republish's reset and that reset's resend
- * at the next hello — so a republish never stops a goal Fleetless did not
- * start. A user's cancel never sets it: only an explicit cancel may reach
- * external goals. Absent means `false`, today's meaning. `true` needs a
- * `job_id`: the bridge refuses `own_only: true` with `job_id: null` as
- * unusable. Bridges before 6.1.0 ignore the key.
  */
 export declare const cloudCancel: z.ZodObject<{
     type: z.ZodLiteral<"cancel">;
     request_id: z.ZodString;
     slug: z.ZodString;
     job_id: z.ZodNullable<z.ZodUUID>;
-    own_only: z.ZodOptional<z.ZodBoolean>;
 }, z.core.$strip>;
 export type CloudCancel = z.infer<typeof cloudCancel>;
 /**

package/dist/protocol.js

@@ -79,7 +79,7 @@ export const PROTOCOL_VERSIONS = [
     { version: 5, bridge_from: '6.0.0', deprecated_at: null },
 ];
 /** The newest bridge package. The cloud mails organisations still below it. */
-export const LATEST_BRIDGE_VERSION = '6.1.0';
+export const LATEST_BRIDGE_VERSION = '6.0.0';
 const DAY_MS = 24 * 60 * 60 * 1000;
 function isoDate(date) {
     return date.toISOString().slice(0, 10);
@@ -481,24 +481,12 @@ export const cloudInvoke = z.object({
  * `request_id` correlates the bridge's `cancel_result`, which carries each
  * goal's `CancelGoal` return code; the cloud answers its caller only from
  * that.
- *
- * `own_only` (fleetless#84) limits a cancel to a job the bridge started
- * itself and holds. `true`: the bridge cancels the named job only if it is
- * its own; a `job_id` it does not hold, or holds as an external goal,
- * cancels **nothing** and is answered `goals: []`. The cloud sets it on the
- * cancels it sends on its own — a republish's reset and that reset's resend
- * at the next hello — so a republish never stops a goal Fleetless did not
- * start. A user's cancel never sets it: only an explicit cancel may reach
- * external goals. Absent means `false`, today's meaning. `true` needs a
- * `job_id`: the bridge refuses `own_only: true` with `job_id: null` as
- * unusable. Bridges before 6.1.0 ignore the key.
  */
 export const cloudCancel = z.object({
     type: z.literal('cancel'),
     request_id: z.string().min(1).max(64),
     slug,
     job_id: z.uuid().nullable(),
-    own_only: z.boolean().optional(),
 });
 /**
  * The ROS 2 `action_msgs/srv/CancelGoal` return codes: `0` `ERROR_NONE` (the

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@fleetless/contracts",
-  "version": "5.1.0-next.2",
+  "version": "5.1.0",
   "description": "Fleetless wire contracts: the bridge-cloud protocol, the REST API schemas and the error codes, as zod schemas with generated JSON Schema and OpenAPI artifacts.",
   "license": "Apache-2.0",
   "author": "Dehne Robotik GmbH",