@gnufoo/canaad 0.4.2 → 0.5.0

package/errors.d.ts

@@ -0,0 +1,5 @@
+/** Thrown when an operation is called before `initWasm()` completes. */
+export declare class WasmNotInitializedError extends Error {
+  /** Discriminant for branded error handling — always `'WasmNotInitializedError'`. */
+  readonly kind: 'WasmNotInitializedError';
+}

package/errors.js

@@ -0,0 +1,10 @@
+/** Thrown when an operation is called before `initWasm()` completes. */
+export class WasmNotInitializedError extends Error {
+  /** Discriminant for branded error handling — always `'WasmNotInitializedError'`. */
+  kind = 'WasmNotInitializedError';
+
+  constructor() {
+    super('WASM not initialized. Call initWasm() first.');
+    this.name = 'WasmNotInitializedError';
+  }
+}

package/meta.js

@@ -1,5 +1,11 @@
 import { z } from 'zod';
 
+// AAD spec: tenant field capped at 256 UTF-8 bytes.
+const TENANT_MAX_BYTES = 256;
+// AAD spec: resource field capped at 1024 UTF-8 bytes.
+const RESOURCE_MAX_BYTES = 1024;
+const encoder = new TextEncoder();
+
 const extensionSchema = z.object({
   key: z.string().regex(/^x_[a-z]+_[a-z_]+$/),
   value: z.union([z.string(), z.number().int().nonnegative().max(Number.MAX_SAFE_INTEGER)]),
@@ -22,8 +28,8 @@ export const inputSchema = z.discriminatedUnion('action', [
   }),
   z.object({
     action: z.literal('build'),
-    tenant: z.string().min(1).refine(s => new TextEncoder().encode(s).length <= 256, 'tenant exceeds 256 bytes'),
-    resource: z.string().min(1).refine(s => new TextEncoder().encode(s).length <= 1024, 'resource exceeds 1024 bytes'),
+    tenant: z.string().min(1).refine(s => encoder.encode(s).length <= TENANT_MAX_BYTES, `tenant exceeds ${TENANT_MAX_BYTES} bytes`),
+    resource: z.string().min(1).refine(s => encoder.encode(s).length <= RESOURCE_MAX_BYTES, `resource exceeds ${RESOURCE_MAX_BYTES} bytes`),
     purpose: z.string().min(1),
     timestamp: z.number().int().nonnegative().max(Number.MAX_SAFE_INTEGER).optional(),
     extensions: z.array(extensionSchema).optional(),

package/package.json

@@ -1,8 +1,7 @@
 {
   "name": "@gnufoo/canaad",
-  "version": "0.4.2",
+  "version": "0.5.0",
   "type": "module",
-  "main": "canaad_wasm.js",
   "types": "canaad_wasm.d.ts",
   "exports": {
     ".": {

package/tool.d.ts

@@ -10,3 +10,5 @@ export declare const toolDefinition: typeof meta & {
   /** Dispatches an AAD action to WASM. Requires prior `initWasm()` call. */
   execute(input: CanaadInput): Promise<CanaadOutput>;
 };
+
+export { WasmNotInitializedError } from './errors.js';

package/tool.js

@@ -1,10 +1,9 @@
 import { meta, inputSchema } from './meta.js';
 import { initWasm, isInitialized } from './init.js';
 import { canonicalize, canonicalizeString, hash, validate, AadBuilder } from './canaad_wasm.js';
-
+import { WasmNotInitializedError } from './errors.js';
 const bytesToHex = (bytes) => Array.from(bytes).map(b => b.toString(16).padStart(2, '0')).join('');
 const bytesToBase64 = (bytes) => globalThis.btoa(String.fromCharCode(...bytes));
-
 /**
  * Main tool export. Merges AAD metadata with WASM lifecycle methods and the action dispatcher.
  */
@@ -18,11 +17,9 @@ export const toolDefinition = {
    */
   async execute(rawInput) {
     if (!isInitialized()) {
-      throw new Error('WASM not initialized. Call initWasm() first.');
+      throw new WasmNotInitializedError();
     }
-
     const input = inputSchema.parse(rawInput);
-
     switch (input.action) {
       case 'canonicalize': {
         if (input.outputFormat === 'bytes') {
@@ -50,3 +47,4 @@ export const toolDefinition = {
     }
   },
 };
+export { WasmNotInitializedError } from './errors.js';