@hasna/loops 0.4.28 → 0.4.29

package/dist/api/index.d.ts

@@ -1,5 +1,8 @@
 #!/usr/bin/env bun
+import { type CircuitBreakerThreshold } from "../lib/advancement.js";
 import type { LoopStorageContract } from "../lib/storage/contract.js";
+import { type RoutePolicy } from "../lib/auth/route-policy.js";
+import type { TenantAuthContext, TenantAuthDecision } from "../lib/auth/tenant-auth.js";
 /** The serve OpenAPI document (source of the generated SDK), version-synced. */
 export declare function openApiDocument(): Record<string, unknown>;
 export declare function apiStatus(): {
@@ -7,23 +10,12 @@ export declare function apiStatus(): {
     service: string;
     status: import("../index.js").LoopDeploymentStatus;
 };
-/**
- * Framework-agnostic API-key verifier shape (matches
- * `@hasna/contracts/auth` `ApiKeyVerifier`). Kept structural so the api module
- * has no hard dependency on the auth package: the serve entry injects the real
- * verifier built from the vendored kit's client + the HMAC signing secret.
- */
 export interface ApiAuthenticator {
-    authenticate(headers: Headers, context?: {
-        method?: string | null;
-        path?: string | null;
-        requiredScopes?: readonly string[];
-    }): Promise<{
-        ok: boolean;
-        status: number;
-        reason?: string;
-        message?: string;
-    }>;
+    authenticate(headers: Headers, context: {
+        method: string;
+        path: string;
+        policy: RoutePolicy;
+    }): Promise<TenantAuthDecision>;
 }
 export interface LoopsApiServerOptions {
     host?: string;
@@ -33,21 +25,30 @@ export interface LoopsApiServerOptions {
     evidenceLimitBytes?: number;
     importLimitBytes?: number;
     now?: () => Date;
+    random?: () => number;
+    circuitBreakerThreshold?: CircuitBreakerThreshold;
     /**
      * API-key verifier (from `@hasna/contracts/auth`). When present, every
      * request outside the open foundation probes (`/health`, `/ready`,
-     * `/version`, `/status`) must present a valid `loops:*` scoped key. This is
+     * `/version`, `/openapi.json`) must present a valid `loops:*` scoped key. This is
      * the internet-facing auth path (no bearer token, no loopback bypass).
      */
     authenticator?: ApiAuthenticator;
+    withTenantStorage?: <T>(principal: TenantAuthContext, fn: (storage: LoopStorageContract) => Promise<T>) => Promise<T>;
     /**
      * Readiness probe. Should prove the storage backend is reachable AND fully
-     * migrated. Returns `{ ready, detail? }`. Defaults to a storage list probe.
+     * migrated. Returns a stable public code only. Defaults to a storage list probe.
      */
     readyCheck?: () => Promise<{
         ready: boolean;
-        detail?: string;
+        code?: "storage_unconfigured" | "storage_unreachable" | "auth_unreachable" | "unsafe_database_role" | "pending_migrations" | "unknown_migrations" | "migration_checksum_mismatch";
     }>;
 }
+export declare function contractHealthResponse(env?: Record<string, string | undefined>): {
+    status: "ok";
+    version: string;
+    mode: "local" | "cloud";
+};
 export declare function createLoopsApiServer(opts?: LoopsApiServerOptions): Bun.Server<undefined>;
+export declare function logApiCommandFailure(error: unknown): void;
 export declare function main(argv?: string[]): Promise<void>;