@koolbase/core 11.2.0 → 11.4.0

package/dist/cjs/errors.js

@@ -1,6 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.KoolbaseOfflineBaselineUnavailableError = exports.KoolbaseUnauthenticatedError = exports.KoolbaseError = void 0;
+exports.KoolbaseOfflineBaselineUnavailableError = exports.KoolbasePlanLimitError = exports.KoolbaseUnauthenticatedError = exports.KoolbaseError = void 0;
 /**
  * The root of every error the SDK raises.
  *
@@ -75,6 +75,25 @@ exports.KoolbaseUnauthenticatedError = KoolbaseUnauthenticatedError;
  * updates are conflict-safe and some quietly are not, which is a worse guarantee
  * than a clear refusal.
  */
+/**
+ * The project's plan does not allow this — a 402 carrying which resource, the
+ * limit, and the plan.
+ *
+ * Shared rather than per-domain: creating a collection, uploading an object
+ * and deploying a function can all hit it, and an app showing an upgrade
+ * prompt wants one type to catch.
+ */
+class KoolbasePlanLimitError extends KoolbaseError {
+    constructor(message, resource, limit, plan) {
+        super(message ?? 'This exceeds your plan limit', 'plan_limit_reached');
+        this.resource = resource;
+        this.limit = limit;
+        this.plan = plan;
+        this.name = 'KoolbasePlanLimitError';
+        Object.setPrototypeOf(this, KoolbasePlanLimitError.prototype);
+    }
+}
+exports.KoolbasePlanLimitError = KoolbasePlanLimitError;
 class KoolbaseOfflineBaselineUnavailableError extends KoolbaseError {
     constructor(message) {
         super(message, 'offline_baseline_unavailable');

package/dist/cjs/storage-errors.d.ts

@@ -84,6 +84,16 @@ export declare class KoolbaseStoragePermissionError extends KoolbaseStorageError
  * failure: presign again and send the same bytes. Worth catching rather than
  * showing "upload failed" to someone whose file was fine.
  */
+/**
+ * Minting a presigned upload URL failed. The message carries the underlying
+ * reason — a misconfigured bucket, or the object store refusing.
+ *
+ * Not the user's doing, and not a retry they can fix: distinct from
+ * KoolbaseUploadExpiredError, which is a retry that will work.
+ */
+export declare class KoolbaseUploadURLFailedError extends KoolbaseStorageError {
+    constructor(message?: string);
+}
 export declare class KoolbaseUploadExpiredError extends KoolbaseStorageError {
     constructor(message?: string);
 }

package/dist/cjs/storage-errors.js

@@ -1,6 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.KoolbaseStorageMetadataInvalidError = exports.KoolbaseStorageMimeTypeError = exports.KoolbaseStorageFileTooLargeError = exports.KoolbaseStorageQuotaError = exports.KoolbaseCapBelowUsageError = exports.KoolbaseUploadExpiredError = exports.KoolbaseStoragePermissionError = exports.KoolbaseStorageValidationError = exports.KoolbaseStorageNotFoundError = exports.KoolbaseStorageConflictError = exports.KoolbaseStorageError = void 0;
+exports.KoolbaseStorageMetadataInvalidError = exports.KoolbaseStorageMimeTypeError = exports.KoolbaseStorageFileTooLargeError = exports.KoolbaseStorageQuotaError = exports.KoolbaseCapBelowUsageError = exports.KoolbaseUploadExpiredError = exports.KoolbaseUploadURLFailedError = exports.KoolbaseStoragePermissionError = exports.KoolbaseStorageValidationError = exports.KoolbaseStorageNotFoundError = exports.KoolbaseStorageConflictError = exports.KoolbaseStorageError = void 0;
 exports.koolbaseStorageError = koolbaseStorageError;
 exports.koolbaseStorageErrorFromResponse = koolbaseStorageErrorFromResponse;
 const errors_js_1 = require("./errors.js");
@@ -114,6 +114,21 @@ exports.KoolbaseStoragePermissionError = KoolbaseStoragePermissionError;
  * failure: presign again and send the same bytes. Worth catching rather than
  * showing "upload failed" to someone whose file was fine.
  */
+/**
+ * Minting a presigned upload URL failed. The message carries the underlying
+ * reason — a misconfigured bucket, or the object store refusing.
+ *
+ * Not the user's doing, and not a retry they can fix: distinct from
+ * KoolbaseUploadExpiredError, which is a retry that will work.
+ */
+class KoolbaseUploadURLFailedError extends KoolbaseStorageError {
+    constructor(message) {
+        super(message ?? 'Could not create an upload URL', 'upload_url_failed');
+        this.name = 'KoolbaseUploadURLFailedError';
+        Object.setPrototypeOf(this, KoolbaseUploadURLFailedError.prototype);
+    }
+}
+exports.KoolbaseUploadURLFailedError = KoolbaseUploadURLFailedError;
 class KoolbaseUploadExpiredError extends KoolbaseStorageError {
     constructor(message) {
         super(message ?? 'This upload is past the confirmation window — please re-upload', 'upload_expired');
@@ -235,6 +250,10 @@ function koolbaseStorageError(status, body, fallbackMessage = 'Storage request f
     switch (code) {
         case 'path_conflict':
             return new KoolbaseStorageConflictError(message, body?.path);
+        case 'plan_limit_reached': {
+            const d = (body?.details ?? {});
+            return new errors_js_1.KoolbasePlanLimitError(message, d.resource, d.limit, d.plan);
+        }
         case 'quota_exceeded':
             return new KoolbaseStorageQuotaError(message);
         case 'upload_expired':
@@ -247,6 +266,8 @@ function koolbaseStorageError(status, body, fallbackMessage = 'Storage request f
             return new KoolbaseStorageMimeTypeError(message);
         case 'metadata_invalid':
             return new KoolbaseStorageMetadataInvalidError(message, body?.detail);
+        case 'upload_url_failed':
+            return new KoolbaseUploadURLFailedError(message);
     }
     // ─── status fallback (pre-code servers or uncoded paths) ───
     switch (status) {

package/dist/esm/auth-errors.d.ts

@@ -217,6 +217,29 @@ export declare class LastCredentialError extends KoolbaseAuthError {
 export declare class HideRequiresVerificationError extends KoolbaseAuthError {
     constructor(message?: string);
 }
+/**
+ * The API key's scope is below what the operation requires.
+ *
+ * Scopes rank read < write < admin. Not a credential problem — the key is
+ * valid, and a different key or a dashboard session is needed. Worth its own
+ * type so an app does not tell someone to sign in again when signing in will
+ * not help.
+ */
+export declare class InsufficientScopeError extends KoolbaseAuthError {
+    constructor(message?: string);
+}
+/** The provider is not connected to this account. */
+export declare class IdentityNotFoundError extends KoolbaseAuthError {
+    constructor(message?: string);
+}
+/**
+ * Connecting a Google or Apple identity that another account already holds.
+ * Distinct from AccountExistsError, which is about the email; this is about
+ * the provider identity itself.
+ */
+export declare class ProviderIdentityAlreadyLinkedError extends KoolbaseAuthError {
+    constructor(message?: string);
+}
 export declare class MalformedSessionResponseError extends KoolbaseAuthError {
     constructor(missing: string);
 }

package/dist/esm/auth-errors.js

@@ -370,6 +370,41 @@ export class HideRequiresVerificationError extends KoolbaseAuthError {
         Object.setPrototypeOf(this, HideRequiresVerificationError.prototype);
     }
 }
+/**
+ * The API key's scope is below what the operation requires.
+ *
+ * Scopes rank read < write < admin. Not a credential problem — the key is
+ * valid, and a different key or a dashboard session is needed. Worth its own
+ * type so an app does not tell someone to sign in again when signing in will
+ * not help.
+ */
+export class InsufficientScopeError extends KoolbaseAuthError {
+    constructor(message) {
+        super(message ?? "This key's scope does not permit this operation", 'insufficient_scope');
+        this.name = 'InsufficientScopeError';
+        Object.setPrototypeOf(this, InsufficientScopeError.prototype);
+    }
+}
+/** The provider is not connected to this account. */
+export class IdentityNotFoundError extends KoolbaseAuthError {
+    constructor(message) {
+        super(message ?? 'That provider is not connected to your account', 'identity_not_found');
+        this.name = 'IdentityNotFoundError';
+        Object.setPrototypeOf(this, IdentityNotFoundError.prototype);
+    }
+}
+/**
+ * Connecting a Google or Apple identity that another account already holds.
+ * Distinct from AccountExistsError, which is about the email; this is about
+ * the provider identity itself.
+ */
+export class ProviderIdentityAlreadyLinkedError extends KoolbaseAuthError {
+    constructor(message) {
+        super(message ?? 'That provider identity is already linked to another account', 'provider_identity_already_linked');
+        this.name = 'ProviderIdentityAlreadyLinkedError';
+        Object.setPrototypeOf(this, ProviderIdentityAlreadyLinkedError.prototype);
+    }
+}
 export class MalformedSessionResponseError extends KoolbaseAuthError {
     constructor(missing) {
         super(`The server returned a session without ${missing}. This is a protocol error, not a credential problem.`, 'malformed_session_response');

package/dist/esm/auth.d.ts

@@ -154,6 +154,21 @@ export declare class KoolbaseAuth {
     private _doRefresh;
     logout(): Promise<boolean>;
     forgotPassword(email: string): Promise<void>;
+    /**
+     * Ask for a new verification email, with no session.
+     *
+     * For the state a project with verified contact required creates:
+     * registered, unverified, refused at login, and holding a link that may
+     * never have arrived or has since expired. `resendVerificationEmail()`
+     * cannot help there — it needs a session the user cannot get.
+     *
+     * Returns nothing, and throws only on a malformed request, because the
+     * server answers identically whether the address has an account, has none,
+     * or is already verified. Anything else would let anyone discover who has
+     * signed up. So there is no "we sent it" to report: show the same "check
+     * your email" either way.
+     */
+    resendVerificationEmailToAddress(email: string): Promise<void>;
     resetPassword(token: string, password: string): Promise<void>;
     /**
      * Complete email verification with a token from a verification link.

package/dist/esm/auth.js

@@ -1,5 +1,5 @@
 import { RestoreResult, } from './types.js';
-import { AccountLockedError, EmailAlreadyInUseError, InvalidCredentialsError, InvalidPhoneNumberError, KoolbaseAuthError, OtpExpiredError, OtpInvalidError, OtpMaxAttemptsError, OtpRateLimitError, PhoneAlreadyLinkedError, MalformedSessionResponseError, AccountExistsError, ContactNotVerifiedError, CurrentPasswordIncorrectError, HideRequiresVerificationError, InsufficientAuthorityError, LastCredentialError, OAuthOnlyAccountError, SessionRequiredError, SignupsDisabledError, TokenAlreadyUsedError, TokenExpiredError, UnsupportedOAuthProviderError, RateLimitError, VerificationResendCooldownError, VerificationResendDailyCapError, SessionExpiredError, SmsConfigMissingError, TokenRevokedError, UnlockTokenInvalidError, UserDisabledError, WeakPasswordError, AppleEmailRequiredError, AppleSignInNotConfiguredError, InvalidAppleTokenError, OAuthEmailConflictError, GoogleEmailRequiredError, GoogleSignInNotConfiguredError, InvalidGoogleTokenError, } from './auth-errors.js';
+import { AccountLockedError, EmailAlreadyInUseError, InvalidCredentialsError, InvalidPhoneNumberError, KoolbaseAuthError, OtpExpiredError, OtpInvalidError, OtpMaxAttemptsError, OtpRateLimitError, PhoneAlreadyLinkedError, IdentityNotFoundError, InsufficientScopeError, MalformedSessionResponseError, ProviderIdentityAlreadyLinkedError, AccountExistsError, ContactNotVerifiedError, CurrentPasswordIncorrectError, HideRequiresVerificationError, InsufficientAuthorityError, LastCredentialError, OAuthOnlyAccountError, SessionRequiredError, SignupsDisabledError, TokenAlreadyUsedError, TokenExpiredError, UnsupportedOAuthProviderError, RateLimitError, VerificationResendCooldownError, VerificationResendDailyCapError, SessionExpiredError, SmsConfigMissingError, UnlockTokenInvalidError, UserDisabledError, WeakPasswordError, AppleEmailRequiredError, AppleSignInNotConfiguredError, InvalidAppleTokenError, OAuthEmailConflictError, GoogleEmailRequiredError, GoogleSignInNotConfiguredError, InvalidGoogleTokenError, } from './auth-errors.js';
 import { getPlatform } from './platform.js';
 import { DeviceMetadata } from './device-metadata.js';
 export class KoolbaseAuth {
@@ -195,9 +195,16 @@ export class KoolbaseAuth {
             return RestoreResult.Restored;
         }
         catch (e) {
-            if (e instanceof SessionExpiredError ||
-                e instanceof TokenRevokedError ||
-                e instanceof InvalidCredentialsError) {
+            // Only a refresh the server refused clears the stored session, and
+            // only because the refresh token is the last credential there is — once
+            // it is rejected there is nothing left to try.
+            //
+            // InvalidCredentialsError used to be in this list. It means "these
+            // credentials are wrong", which during a restore points at the project
+            // key or the request rather than the user's session — and deleting the
+            // refresh token on that reading signs someone out with no way back.
+            // Nothing reaches here with it today; it stays out so nothing does.
+            if (e instanceof SessionExpiredError) {
                 await this.clearSessionInternal();
                 return RestoreResult.Expired;
             }
@@ -509,6 +516,27 @@ export class KoolbaseAuth {
         });
         await this.checkResponse(res);
     }
+    /**
+     * Ask for a new verification email, with no session.
+     *
+     * For the state a project with verified contact required creates:
+     * registered, unverified, refused at login, and holding a link that may
+     * never have arrived or has since expired. `resendVerificationEmail()`
+     * cannot help there — it needs a session the user cannot get.
+     *
+     * Returns nothing, and throws only on a malformed request, because the
+     * server answers identically whether the address has an account, has none,
+     * or is already verified. Anything else would let anyone discover who has
+     * signed up. So there is no "we sent it" to report: show the same "check
+     * your email" either way.
+     */
+    async resendVerificationEmailToAddress(email) {
+        const res = await this.authRequest('/v1/sdk/auth/resend-verification/by-email', {
+            method: 'POST',
+            body: { email },
+        });
+        await this.checkResponse(res);
+    }
     async resetPassword(token, password) {
         const res = await this.authRequest('/v1/sdk/auth/password-reset/confirm', {
             method: 'POST',
@@ -788,8 +816,6 @@ export class KoolbaseAuth {
             case 'invalid_refresh_token':
                 // Refresh token rejected — the session is unrecoverable; re-login.
                 throw new SessionExpiredError();
-            case 'token_revoked':
-                throw new TokenRevokedError();
             case 'invalid_unlock_token':
                 throw new UnlockTokenInvalidError();
             case 'rate_limit':
@@ -828,6 +854,12 @@ export class KoolbaseAuth {
                 throw new OAuthOnlyAccountError(msg || undefined);
             case 'unsupported_oauth_provider':
                 throw new UnsupportedOAuthProviderError(msg || undefined);
+            case 'identity_not_found':
+                throw new IdentityNotFoundError(msg || undefined);
+            case 'provider_identity_already_linked':
+                throw new ProviderIdentityAlreadyLinkedError(msg || undefined);
+            case 'insufficient_scope':
+                throw new InsufficientScopeError(msg || undefined);
             // Authority
             case 'session_required':
                 throw new SessionRequiredError(msg || undefined);
@@ -860,11 +892,6 @@ export class KoolbaseAuth {
         if (msg.includes('invalid or expired unlock token')) {
             throw new UnlockTokenInvalidError();
         }
-        if (msg.includes('session revoked') ||
-            msg.includes('token revoked') ||
-            msg.includes('session has been revoked')) {
-            throw new TokenRevokedError();
-        }
         throw new KoolbaseAuthError(msg || `Request failed: ${res.status}`, code || `http_${res.status}`);
     }
     /**

package/dist/esm/database-errors.d.ts

@@ -49,6 +49,137 @@ export declare class KoolbaseDataError extends KoolbaseError {
  * nobody asked to change. Narrow the filter, or add a unique constraint over
  * the fields you are matching on so the ambiguity cannot arise.
  */
+/**
+ * The record changed between reading it and writing it.
+ *
+ * Optimistic concurrency: a write carrying a revision is refused when the
+ * server has moved on, rather than overwriting whatever happened in between.
+ * The refusal carries the server's current record and both revisions, so
+ * resolving needs no second fetch — and cannot race one.
+ *
+ * Distinct from KoolbaseConflict, which models a queued OFFLINE write and
+ * carries a baseline as well, because a change composed hours ago needs its
+ * original context to be resolvable. Here the caller still has their data in
+ * hand.
+ *
+ * Until 11.3.0 this arrived as a generic data error and the details had to be
+ * dug out of an untyped bag — the information the server went to the trouble
+ * of attaching, unreachable in practice.
+ */
+/** A vector field with that name already exists on the collection. */
+/**
+ * A seed or import operation was refused. The code says which stage:
+ * invalid_seed_file (the file itself, with a "problems" list in details),
+ * seed_key_not_unique (the key does not identify rows uniquely),
+ * seed_needs_decision (conflicts need a choice before proceeding), or
+ * seed_conflicts_require_force (overwriting would discard the target's
+ * version of rows that changed on both sides — details carry the rows).
+ *
+ * One class with the code distinguishing them, rather than four: these are
+ * dashboard and CLI operations, and a caller handling one handles them the
+ * same way — show the reason and let a human decide.
+ */
+export declare class KoolbaseSeedError extends KoolbaseDataError {
+    constructor(message: string, code: string);
+}
+/** A project slug that another project already holds. */
+export declare class KoolbaseSlugTakenError extends KoolbaseDataError {
+    constructor(message?: string);
+}
+/** An invitation that has been revoked or has expired. */
+export declare class KoolbaseInvitationInvalidError extends KoolbaseDataError {
+    constructor(message?: string);
+}
+/** The project id in the request is not valid. */
+export declare class KoolbaseProjectInvalidError extends KoolbaseDataError {
+    constructor(message?: string);
+}
+/** The request body could not be decoded. */
+export declare class KoolbaseInvalidBodyError extends KoolbaseDataError {
+    constructor(message?: string);
+}
+/**
+ * The request asked for no change — an update with nothing to update.
+ */
+export declare class KoolbaseNoChangesError extends KoolbaseDataError {
+    constructor(message?: string);
+}
+/**
+ * Something already exists, or something is in the wrong state, where the
+ * server did not say more than that.
+ *
+ * Carries whichever generic code arrived — conflict, duplicate,
+ * state_conflict — rather than four classes for codes that differ only in
+ * spelling. A caller who needs to branch finely is being underserved by the
+ * server, not by this.
+ */
+export declare class KoolbaseStateConflictError extends KoolbaseDataError {
+    constructor(message: string, code: string);
+}
+export declare class KoolbaseVectorFieldExistsError extends KoolbaseDataError {
+    constructor(message?: string);
+}
+/**
+ * A backfill was asked for on a field that embeds nothing automatically.
+ * Set provider, model and source_field on the field first.
+ */
+export declare class KoolbaseFieldNotAutoEmbedError extends KoolbaseDataError {
+    constructor(message?: string);
+}
+/**
+ * Embedding config is partial. Provider, model and source_field are set
+ * together or cleared together — half a configuration is refused rather than
+ * half-applied, which would embed against a model nobody chose.
+ */
+export declare class KoolbaseInvalidEmbeddingConfigError extends KoolbaseDataError {
+    constructor(message?: string);
+}
+/**
+ * The project has no embedding provider configured. Embedding runs on the
+ * project's own Gemini or OpenAI key.
+ */
+export declare class KoolbaseProviderNotConfiguredError extends KoolbaseDataError {
+    constructor(message?: string);
+}
+/** The configured provider's credentials were rejected by the provider. */
+export declare class KoolbaseProviderInvalidError extends KoolbaseDataError {
+    constructor(message?: string);
+}
+export declare class KoolbaseRevisionMismatchError extends KoolbaseDataError {
+    readonly expectedRevision?: number | undefined;
+    readonly currentRevision?: number | undefined;
+    /** The record as the server holds it now. */
+    readonly current?: Record<string, unknown> | undefined;
+    constructor(message?: string, expectedRevision?: number | undefined, currentRevision?: number | undefined, 
+    /** The record as the server holds it now. */
+    current?: Record<string, unknown> | undefined);
+}
+/**
+ * The same idempotency key sent with different data.
+ *
+ * Refused rather than replayed: the two requests do not agree, so neither
+ * answer is safe. Usually a key reused by accident across two operations.
+ */
+export declare class KoolbaseIdempotencyKeyReusedError extends KoolbaseDataError {
+    /**
+     * Carries its code: the database package calls this idempotency_key_reused
+     * and fiscal calls it idempotency_conflict, and an error reporting a code
+     * the server did not send is a small lie that apps branching on e.code act
+     * on.
+     */
+    constructor(message?: string, code?: string);
+}
+/** A batch write failed for a reason the server did not classify further. */
+export declare class KoolbaseBatchFailedError extends KoolbaseDataError {
+    constructor(message?: string);
+}
+/**
+ * Creating a unique constraint over data that already breaks it. details
+ * carry the offending values, so they can be shown rather than hunted for.
+ */
+export declare class KoolbaseDuplicateValuesError extends KoolbaseDataError {
+    constructor(message?: string);
+}
 export declare class KoolbaseAmbiguousMatchError extends KoolbaseDataError {
     constructor(message?: string);
 }