@lessly/sdk-app 97.3.0 → 97.4.0

package/CHANGELOG.md

@@ -125,8 +125,9 @@ before this point lives in that package.
 The publish pipeline appends its machine-rendered block for the release being
 built below this line. It is not committed back to the repo, so in a git
 checkout this section is empty — see the note at the top.
-## 97.3.0 (minor)
+## 97.4.0 (minor)
 
-### mail
-- added `mail_email_list`
+### *
+- runtime update
+- documentation update
 

package/dist/_types/index.d.ts

@@ -1,7 +1,8 @@
 export { createLesslyApp } from './runtime/createLesslyApp.js';
 export type { LesslyClientBase } from './runtime/createLesslyApp.js';
 export { connectStream } from './runtime/connectStream.js';
-export { LesslyApiError, isAccessDenied, isEntitlementError, upgradeUrl } from './runtime/errors.js';
+export { LesslyApiError, isAccessDenied, accessDenialKind, isEntitlementError, upgradeUrl } from './runtime/errors.js';
+export type { AccessDenialKind } from './runtime/errors.js';
 export { accessReason } from './runtime/access-reason.js';
 export { platformApiBaseUrl } from './runtime/platform-base-url.js';
 export { operations } from './runtime/operations.js';

package/dist/_types/runtime/errors.d.ts

@@ -1,14 +1,18 @@
+export type AccessDenialKind = 'role_denied' | 'no_tool_permission' | 'operation_uncatalogued';
 export declare class LesslyApiError extends Error {
     readonly status: number;
     readonly code: string | null;
     readonly body: unknown;
-    /** True iff this is the gateway refusing the call over the caller's access. See ACCESS_DENIED_CODES. */
+    /** True for the three neutral gateway 403 refusals. See `isAccessDenied`. */
     readonly accessDenied: boolean;
     constructor(status: number, code: string | null, message: string, body: unknown);
 }
 export declare function parseErrorBody(body: unknown, status: number): LesslyApiError;
 /**
- * True iff `err` is the gateway refusing a call over the caller's access.
+ * True for the gateway's `role_denied`, `no_tool_permission`, and `operation_uncatalogued` 403s.
+ * The first two are permission decisions; `operation_uncatalogued` is a catalog/rollout state.
+ * Render all three as the same neutral state. Use `accessDenialKind` only when diagnostics need
+ * to distinguish the catalog case.
  *
  * Deliberately structural after the `instanceof` fast path: an App is composed into the shell
  * through Module Federation and `@lessly/sdk-app` is not a shared singleton, so the error a
@@ -16,6 +20,13 @@ export declare function parseErrorBody(body: unknown, status: number): LesslyApi
  * report false there and an App would render a red crash for an ordinary permission refusal.
  */
 export declare function isAccessDenied(err: unknown): boolean;
+/**
+ * The exact gateway access-refusal code at HTTP 403, or null for any other error.
+ * Structural like `isAccessDenied`, because an App may catch an error from another SDK copy.
+ * Use the kind for telemetry or developer-only catalog diagnostics, never to vary user-facing
+ * denial copy: `operation_uncatalogued` gets the same neutral state as the permission codes.
+ */
+export declare function accessDenialKind(err: unknown): AccessDenialKind | null;
 /**
  * True iff `err` is billing refusing the call over the organization's plan (trial cap reached,
  * a class closed on a trial, billing or budget paused). Inside the Workspace shell the shell

package/dist/index.cjs

@@ -10,7 +10,7 @@ var LesslyApiError = class extends Error {
   status;
   code;
   body;
-  /** True iff this is the gateway refusing the call over the caller's access. See ACCESS_DENIED_CODES. */
+  /** True for the three neutral gateway 403 refusals. See `isAccessDenied`. */
   accessDenied;
   constructor(status, code, message, body) {
     super(message);
@@ -33,6 +33,19 @@ function isAccessDenied(err) {
   const { status, code } = err;
   return status === 403 && typeof code === "string" && ACCESS_DENIED_CODES.has(code);
 }
+function accessDenialKind(err) {
+  if (typeof err !== "object" || err === null) return null;
+  const { status, code } = err;
+  if (status !== 403) return null;
+  switch (code) {
+    case "role_denied":
+    case "no_tool_permission":
+    case "operation_uncatalogued":
+      return code;
+    default:
+      return null;
+  }
+}
 var ENTITLEMENT_ERRORS = /* @__PURE__ */ new Set(["entitlement_exhausted", "entitlement_unavailable"]);
 function entitlementRefusal(err) {
   if (typeof err !== "object" || err === null) return null;
@@ -12854,6 +12867,7 @@ var operations2 = operations;
 var compositions2 = compositions;
 
 exports.LesslyApiError = LesslyApiError;
+exports.accessDenialKind = accessDenialKind;
 exports.accessReason = accessReason;
 exports.compositions = compositions2;
 exports.connectStream = connectStream;