@forgezero/access 0.1.9 → 0.1.11

package/README.md

@@ -555,7 +555,7 @@ Each condition knows which statuses it can produce, so the set a route can answe
 ```text
 assertDeclaredRefusals({ routes: ROUTES, conditions: CONDITIONS });
 // Undeclared refusals:
-//   api/wallet/withdraw can 409 (requireQuota) but does not declare it
+//   api/compute/allocate can 409 (requireQuota) but does not declare it
 ```
 
 ## Effects: what happens once it is decided

package/dist/conditions.d.ts

@@ -88,7 +88,7 @@ export interface RequireStateOptions<K extends string> extends Routes<K> {
 /**
  * The record is in a status this transition accepts, or 409.
  *
- * The guard that stops a withdrawal being approved twice, an invoice being
+ * The guard that stops a allocation being approved twice, an invoice being
  * settled after it was voided, a ceremony activating from a state it never
  * reached. Checking status inside the handler works right up to the second
  * concurrent request, and this at least fails them both loudly and with the
@@ -139,7 +139,7 @@ export interface RequireIdempotencyOptions<K extends string> extends Routes<K> {
  *
  * A retry after a timeout is not a client bug — it is what every HTTP client and
  * every mobile network does. Without a claim the second attempt places a second
- * order, and the user sees one confirmation for two withdrawals.
+ * order, and the user sees one confirmation for two allocations.
  *
  * A replay throws `Settled`, so the caller gets the ORIGINAL answer rather than
  * an error. A 409 would be defensible and useless: a retrying client still would
@@ -217,7 +217,7 @@ export interface RequireBalanceOptions<K extends string> extends Routes<K> {
  * finding that later.
  *
  * This checks AVAILABLE — free of holds — not total. A balance check against
- * total lets two concurrent withdrawals each pass and the second overdraws.
+ * total lets two concurrent allocations each pass and the second overdraws.
  */
 export declare function requireBalance<K extends string>(options: RequireBalanceOptions<K>): Condition<K>;
 export interface RequireQuotaOptions<K extends string> extends Routes<K> {
@@ -232,7 +232,7 @@ export interface RequireQuotaOptions<K extends string> extends Routes<K> {
  * A value cap over a window, which is NOT a rate limit.
  *
  * Rate limiting counts requests and protects the service; a quota counts value
- * and protects the account. One withdrawal of the entire balance passes every
+ * and protects the account. One allocation of the entire balance passes every
  * rate limit ever written. They also fail differently — 429 means slow down,
  * this means the answer will be the same until the window rolls — so they get
  * different codes and the reset time is in the payload.
@@ -252,7 +252,7 @@ export interface RequireApprovalOptions<K extends string> extends Routes<K> {
  *
  * Action factors make the actor prove themselves freshly. This makes a second
  * party sign off, and no amount of the first kind substitutes for the second:
- * that is the entire point of four-eyes on a large withdrawal or a custodian
+ * that is the entire point of four-eyes on a large allocation or a custodian
  * change. Two mechanisms because they answer different questions, and merging
  * them would let a sufficiently authenticated operator approve their own move.
  */
@@ -260,7 +260,7 @@ export declare function requireApproval<K extends string>(options: RequireApprov
 /**
  * Every status a route's conditions can throw is declared in its contract.
  *
- * The drift this catches: somebody adds `requireQuota` to a withdrawal route,
+ * The drift this catches: somebody adds `requireQuota` to a allocation route,
  * the generated client never learns 409 is possible, and the UI renders "an
  * unexpected error occurred" for the one refusal a user can actually act on.
  * Cheap to check, invisible until a customer hits it.

package/dist/conditions.js

@@ -275,7 +275,7 @@ function impactOfDisabling(access, enabledAfter) {
   }
   return broken;
 }
-var VERSION = "0.1.9";
+var VERSION = "0.1.11";
 
 // src/conditions.ts
 function define(condition, routes, refusals, run) {

package/dist/effects.d.ts

@@ -10,7 +10,7 @@ import { type AfterHandler, type RequestContext } from './index';
  *
  * 1. **It cannot fail the request.** The pipeline queues after-handlers and
  *    swallows throws, and these swallow their own too. An audit sink being down
- *    must not turn a successful withdrawal into a 500 — the money already moved.
+ *    must not turn a successful allocation into a 500 — the money already moved.
  *
  * 2. **It runs on refusals as well.** The pipeline calls the chain even when a
  *    `before` threw, because a log missing every denied request is missing
@@ -160,7 +160,7 @@ export interface NotifyOptions<K extends string> extends Routes<K> {
 /**
  * Tell somebody. Queued like every effect, never awaited.
  *
- * `onDenied` exists for one real case: a failed sign-in or a refused withdrawal
+ * `onDenied` exists for one real case: a failed sign-in or a refused allocation
  * is exactly what the account holder wants to hear about, and it is the only
  * signal they get that somebody else has their password.
  */

package/dist/effects.js

@@ -275,7 +275,7 @@ function impactOfDisabling(access, enabledAfter) {
   }
   return broken;
 }
-var VERSION = "0.1.9";
+var VERSION = "0.1.11";
 
 // src/security.ts
 var HEX = Array.from({ length: 256 }, (_, index) => index.toString(16).padStart(2, "0"));

package/dist/elysia.js

@@ -275,7 +275,7 @@ function impactOfDisabling(access, enabledAfter) {
   }
   return broken;
 }
-var VERSION = "0.1.9";
+var VERSION = "0.1.11";
 
 // src/pipeline.ts
 function defineHandlers(routes, handlers) {

package/dist/fetch.js

@@ -275,7 +275,7 @@ function impactOfDisabling(access, enabledAfter) {
   }
   return broken;
 }
-var VERSION = "0.1.9";
+var VERSION = "0.1.11";
 
 // src/pipeline.ts
 function defineHandlers(routes, handlers) {

package/dist/header.js

@@ -275,7 +275,7 @@ function impactOfDisabling(access, enabledAfter) {
   }
   return broken;
 }
-var VERSION = "0.1.9";
+var VERSION = "0.1.11";
 
 // src/principal.ts
 var ATOM = /^[A-Za-z0-9][A-Za-z0-9_.:@/-]{0,255}$/;

package/dist/index.d.ts

@@ -49,7 +49,7 @@ export declare class AccessError extends Error {
  * A condition refusing the request, with the status it deserves.
  *
  * Without this every guard in a `before` chain collapsed to 500, which is a lie:
- * "this withdrawal is already approved" is a 409 the client can act on, and a
+ * "this allocation is already approved" is a 409 the client can act on, and a
  * 500 tells it to retry — which is precisely the wrong thing to do with money.
  *
  * `retryable` is stated rather than inferred from the status. 409 is permanent
@@ -379,4 +379,4 @@ export declare function impactOfDisabling<R extends RouteRegistry>(access: Acces
     available: number;
     required: number;
 }[];
-export declare const VERSION = "0.1.9";
+export declare const VERSION = "0.1.11";

package/dist/index.js

@@ -275,7 +275,7 @@ function impactOfDisabling(access, enabledAfter) {
   }
   return broken;
 }
-var VERSION = "0.1.9";
+var VERSION = "0.1.11";
 export {
   stemOf,
   resolveActionFactors,

package/dist/pipeline.js

@@ -275,7 +275,7 @@ function impactOfDisabling(access, enabledAfter) {
   }
   return broken;
 }
-var VERSION = "0.1.9";
+var VERSION = "0.1.11";
 
 // src/pipeline.ts
 function defineHandlers(routes, handlers) {

package/dist/principal-session.js

@@ -275,7 +275,7 @@ function impactOfDisabling(access, enabledAfter) {
   }
   return broken;
 }
-var VERSION = "0.1.9";
+var VERSION = "0.1.11";
 
 // src/security.ts
 var HEX = Array.from({ length: 256 }, (_, index) => index.toString(16).padStart(2, "0"));

package/dist/principal.js

@@ -275,7 +275,7 @@ function impactOfDisabling(access, enabledAfter) {
   }
   return broken;
 }
-var VERSION = "0.1.9";
+var VERSION = "0.1.11";
 
 // src/principal.ts
 var ATOM = /^[A-Za-z0-9][A-Za-z0-9_.:@/-]{0,255}$/;

package/dist/testing.js

@@ -275,7 +275,7 @@ function impactOfDisabling(access, enabledAfter) {
   }
   return broken;
 }
-var VERSION = "0.1.9";
+var VERSION = "0.1.11";
 
 // src/testing.ts
 function nameOf(policies, route) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@forgezero/access",
-  "version": "0.1.9",
+  "version": "0.1.11",
   "type": "module",
   "publishConfig": {
     "access": "public",