@lucern/sdk 0.2.0-alpha.6 → 0.2.0-alpha.8

package/dist/lib/platform/sdk/controlObjectOwnership.js

@@ -1,220 +0,0 @@
-/** All recognized control object kinds in the ownership model. */
-export const CONTROL_OBJECT_KINDS = [
-    "tenant",
-    "workspace",
-    "principal",
-    "tool",
-    "pack",
-    "ontology",
-    "belief",
-    "policy_rule",
-];
-/** Canonical ownership scopes: platform, tenant, workspace, or resource. */
-export const CONTROL_OBJECT_OWNER_SCOPES = [
-    "platform",
-    "tenant",
-    "workspace",
-    "resource",
-];
-/** UI surfaces authorized to edit control objects. */
-export const CONTROL_OBJECT_EDIT_SURFACES = [
-    "platform_admin",
-    "tenant_admin",
-    "workspace_admin",
-    "graph_worktree",
-];
-/** Rules governing how control object configuration flows through the scope hierarchy. */
-export const CONTROL_OBJECT_INHERITANCE_RULES = [
-    "none",
-    "platform_seed_to_tenant",
-    "tenant_default_to_workspace",
-    "workspace_narrowing_only",
-    "pack_overlay_to_tenant",
-    "topic_lineage_to_resource",
-];
-/** Scope of impact when a control object is modified. */
-export const CONTROL_OBJECT_BLAST_RADII = [
-    "platform",
-    "tenant",
-    "workspace",
-    "resource",
-];
-function defineCases(cases) {
-    return cases;
-}
-/** Static ownership matrix mapping each control object kind to its ownership cases. */
-export const CONTROL_OBJECT_OWNERSHIP_MATRIX = {
-    tenant: defineCases([
-        {
-            caseKey: "platform-record",
-            caseLabel: "Platform Record",
-            kind: "tenant",
-            canonicalOwnerScope: "platform",
-            editSurface: "platform_admin",
-            inheritanceRule: "none",
-            blastRadius: "tenant",
-        },
-    ]),
-    workspace: defineCases([
-        {
-            caseKey: "tenant-workspace",
-            caseLabel: "Tenant Workspace",
-            kind: "workspace",
-            canonicalOwnerScope: "tenant",
-            editSurface: "tenant_admin",
-            inheritanceRule: "tenant_default_to_workspace",
-            blastRadius: "workspace",
-        },
-    ]),
-    principal: defineCases([
-        {
-            caseKey: "tenant-principal",
-            caseLabel: "Tenant Principal",
-            kind: "principal",
-            canonicalOwnerScope: "tenant",
-            editSurface: "tenant_admin",
-            inheritanceRule: "workspace_narrowing_only",
-            blastRadius: "resource",
-        },
-    ]),
-    tool: defineCases([
-        {
-            caseKey: "platform-core",
-            caseLabel: "Platform Core",
-            kind: "tool",
-            canonicalOwnerScope: "platform",
-            editSurface: "platform_admin",
-            inheritanceRule: "platform_seed_to_tenant",
-            blastRadius: "platform",
-        },
-        {
-            caseKey: "tenant-custom",
-            caseLabel: "Tenant Custom",
-            kind: "tool",
-            canonicalOwnerScope: "tenant",
-            editSurface: "tenant_admin",
-            inheritanceRule: "tenant_default_to_workspace",
-            blastRadius: "tenant",
-        },
-    ]),
-    pack: defineCases([
-        {
-            caseKey: "platform-definition",
-            caseLabel: "Platform Definition",
-            kind: "pack",
-            canonicalOwnerScope: "platform",
-            editSurface: "platform_admin",
-            inheritanceRule: "platform_seed_to_tenant",
-            blastRadius: "platform",
-        },
-        {
-            caseKey: "tenant-installation",
-            caseLabel: "Tenant Installation",
-            kind: "pack",
-            canonicalOwnerScope: "tenant",
-            editSurface: "tenant_admin",
-            inheritanceRule: "platform_seed_to_tenant",
-            blastRadius: "tenant",
-        },
-    ]),
-    ontology: defineCases([
-        {
-            caseKey: "platform-base",
-            caseLabel: "Platform Base",
-            kind: "ontology",
-            canonicalOwnerScope: "platform",
-            editSurface: "platform_admin",
-            inheritanceRule: "platform_seed_to_tenant",
-            blastRadius: "platform",
-        },
-        {
-            caseKey: "pack-overlay",
-            caseLabel: "Pack Overlay",
-            kind: "ontology",
-            canonicalOwnerScope: "platform",
-            editSurface: "platform_admin",
-            inheritanceRule: "pack_overlay_to_tenant",
-            blastRadius: "platform",
-        },
-        {
-            caseKey: "tenant-extension",
-            caseLabel: "Tenant Extension",
-            kind: "ontology",
-            canonicalOwnerScope: "tenant",
-            editSurface: "tenant_admin",
-            inheritanceRule: "topic_lineage_to_resource",
-            blastRadius: "tenant",
-        },
-    ]),
-    belief: defineCases([
-        {
-            caseKey: "topic-resource",
-            caseLabel: "Topic Resource",
-            kind: "belief",
-            canonicalOwnerScope: "resource",
-            editSurface: "graph_worktree",
-            inheritanceRule: "topic_lineage_to_resource",
-            blastRadius: "resource",
-        },
-    ]),
-    policy_rule: defineCases([
-        {
-            caseKey: "platform-baseline",
-            caseLabel: "Platform Baseline",
-            kind: "policy_rule",
-            canonicalOwnerScope: "platform",
-            editSurface: "platform_admin",
-            inheritanceRule: "platform_seed_to_tenant",
-            blastRadius: "platform",
-        },
-        {
-            caseKey: "tenant-bundle",
-            caseLabel: "Tenant Bundle",
-            kind: "policy_rule",
-            canonicalOwnerScope: "tenant",
-            editSurface: "tenant_admin",
-            inheritanceRule: "tenant_default_to_workspace",
-            blastRadius: "tenant",
-        },
-        {
-            caseKey: "workspace-override",
-            caseLabel: "Workspace Override",
-            kind: "policy_rule",
-            canonicalOwnerScope: "workspace",
-            editSurface: "workspace_admin",
-            inheritanceRule: "none",
-            blastRadius: "workspace",
-        },
-    ]),
-};
-function flattenOwnershipMatrix(matrix) {
-    return CONTROL_OBJECT_KINDS.flatMap((kind) => [...matrix[kind]]);
-}
-/** Flattened array of all ownership cases across all control object kinds. */
-export const CONTROL_OBJECT_OWNERSHIP_ROWS = Object.freeze(flattenOwnershipMatrix(CONTROL_OBJECT_OWNERSHIP_MATRIX));
-/** The canonical ownership contract exposed by the SDK. */
-export const CONTROL_OBJECT_OWNERSHIP_CONTRACT = {
-    version: "1.0.0",
-    kinds: CONTROL_OBJECT_KINDS,
-    ownerScopes: CONTROL_OBJECT_OWNER_SCOPES,
-    editSurfaces: CONTROL_OBJECT_EDIT_SURFACES,
-    inheritanceRules: CONTROL_OBJECT_INHERITANCE_RULES,
-    blastRadii: CONTROL_OBJECT_BLAST_RADII,
-    matrix: CONTROL_OBJECT_OWNERSHIP_MATRIX,
-    rows: CONTROL_OBJECT_OWNERSHIP_ROWS,
-};
-/**
- * List ownership cases for one control-object kind or the full matrix.
- */
-export function listControlObjectOwnershipCases(kind) {
-    if (!kind) {
-        return CONTROL_OBJECT_OWNERSHIP_ROWS;
-    }
-    return CONTROL_OBJECT_OWNERSHIP_MATRIX[kind];
-}
-/**
- * Get a specific ownership case by kind and case key.
- */
-export function getControlObjectOwnershipCase(kind, caseKey) {
-    return CONTROL_OBJECT_OWNERSHIP_MATRIX[kind].find((ownershipCase) => ownershipCase.caseKey === caseKey);
-}

package/dist/lib/platform/sdk/coreClient.js

@@ -1,366 +0,0 @@
-/**
- * Structured error thrown when a platform API request fails.
- *
- * Includes HTTP status, machine-readable error code, optional invariant
- * reference, and actionable suggestions for common failure modes.
- */
-export class LucernApiError extends Error {
-    code;
-    status;
-    invariant;
-    suggestion;
-    details;
-    requestId;
-    correlationId;
-    policyTraceId;
-    constructor(args) {
-        super(args.message);
-        this.name = "LucernApiError";
-        this.code = args.code;
-        this.status = args.status;
-        this.invariant = args.invariant;
-        this.suggestion = args.suggestion;
-        this.details = args.details;
-        this.requestId = args.requestId;
-        this.correlationId = args.correlationId;
-        this.policyTraceId = args.policyTraceId;
-    }
-}
-/**
- * Serialize a gateway query object into a URL query string.
- */
-export function toQueryString(scope) {
-    const params = new URLSearchParams();
-    if (scope.tenantId) {
-        params.set("tenantId", scope.tenantId);
-    }
-    if (scope.workspaceId) {
-        params.set("workspaceId", scope.workspaceId);
-    }
-    for (const [key, value] of Object.entries(scope)) {
-        if (key === "tenantId" || key === "workspaceId") {
-            continue;
-        }
-        if (value === undefined) {
-            continue;
-        }
-        params.set(key, String(value));
-    }
-    const serialized = params.toString();
-    return serialized.length > 0 ? `?${serialized}` : "";
-}
-function fillRandomBytes(length) {
-    const bytes = new Uint8Array(length);
-    if (typeof globalThis.crypto?.getRandomValues === "function") {
-        globalThis.crypto.getRandomValues(bytes);
-        return bytes;
-    }
-    for (let index = 0; index < length; index += 1) {
-        bytes[index] = Math.floor(Math.random() * 256);
-    }
-    return bytes;
-}
-function generatePortableRequestId() {
-    if (typeof globalThis.crypto?.randomUUID === "function") {
-        return globalThis.crypto.randomUUID();
-    }
-    const bytes = fillRandomBytes(16);
-    bytes[6] = (bytes[6] & 0x0f) | 0x40;
-    bytes[8] = (bytes[8] & 0x3f) | 0x80;
-    const hex = Array.from(bytes, (value) => value.toString(16).padStart(2, "0"));
-    return `${hex.slice(0, 4).join("")}-${hex.slice(4, 6).join("")}-${hex.slice(6, 8).join("")}-${hex.slice(8, 10).join("")}-${hex.slice(10).join("")}`;
-}
-/**
- * Generate a random idempotency key for retry-safe writes.
- */
-export function randomIdempotencyKey() {
-    return generatePortableRequestId();
-}
-function isRetryableStatus(status) {
-    return status >= 500 || status === 408 || status === 429;
-}
-function fallbackErrorCode(status) {
-    if (status === 401) {
-        return "AUTHENTICATION_REQUIRED";
-    }
-    if (status === 403) {
-        return "FORBIDDEN";
-    }
-    if (status === 404) {
-        return "NOT_FOUND";
-    }
-    if (status === 408) {
-        return "UPSTREAM_ERROR";
-    }
-    if (status === 409) {
-        return "CONFLICT";
-    }
-    if (status === 429) {
-        return "RATE_LIMIT_EXCEEDED";
-    }
-    if (status >= 500) {
-        return "UPSTREAM_ERROR";
-    }
-    return "INTERNAL_ERROR";
-}
-function delay(ms) {
-    return new Promise((resolve) => setTimeout(resolve, ms));
-}
-function parseRetryAfterMs(value) {
-    if (!value) {
-        return null;
-    }
-    const trimmed = value.trim();
-    if (!trimmed) {
-        return null;
-    }
-    const numeric = Number(trimmed);
-    if (Number.isFinite(numeric)) {
-        return Math.max(0, Math.round(numeric * 1000));
-    }
-    const parsedDate = Date.parse(trimmed);
-    if (Number.isFinite(parsedDate)) {
-        return Math.max(0, parsedDate - Date.now());
-    }
-    return null;
-}
-function computeRetryDelayMs(args) {
-    const baseDelay = args.status === 429
-        ? Math.max(args.retryAfterMs ?? 0, Math.min(1000 * 2 ** args.attempt, 10_000))
-        : Math.min(1000 * 2 ** args.attempt, 4000);
-    if (args.status !== 429) {
-        return baseDelay;
-    }
-    const jitterWindow = Math.max(250, Math.round(baseDelay * 0.25));
-    return baseDelay + Math.round(Math.random() * jitterWindow);
-}
-function timeoutError(timeoutMs) {
-    const error = new Error(`Request timed out after ${timeoutMs}ms`);
-    error.name = "AbortError";
-    return error;
-}
-function readPolicySummaryFromDetails(details) {
-    if (!details || typeof details !== "object" || Array.isArray(details)) {
-        return null;
-    }
-    const directSummary = details.summary;
-    if (typeof directSummary === "string" && directSummary.trim().length > 0) {
-        return directSummary.trim();
-    }
-    const policy = details.policy;
-    if (!policy || typeof policy !== "object" || Array.isArray(policy)) {
-        return null;
-    }
-    const explanation = policy.explanation;
-    if (!explanation || typeof explanation !== "object" || Array.isArray(explanation)) {
-        return null;
-    }
-    const nestedSummary = explanation.summary;
-    if (typeof nestedSummary === "string" && nestedSummary.trim().length > 0) {
-        return nestedSummary.trim();
-    }
-    return null;
-}
-/**
- * Create the transport client used by all SDK modules.
- */
-export function createGatewayRequestClient(config = {}) {
-    const fetchImpl = config.fetchImpl ?? fetch;
-    const baseUrl = config.baseUrl?.replace(/\/+$/, "") ?? "";
-    const maxRetries = config.maxRetries ?? 2;
-    const requestIdFactory = config.requestIdFactory ?? (() => generatePortableRequestId());
-    async function resolveAuthHeaders() {
-        if (!config.getAuthHeaders) {
-            return {};
-        }
-        return await config.getAuthHeaders();
-    }
-    async function fetchWithTimeout(url, init, timeoutMs) {
-        const controller = new AbortController();
-        const timer = setTimeout(() => controller.abort(), timeoutMs);
-        try {
-            return await fetchImpl(url, { ...init, signal: controller.signal });
-        }
-        catch (error) {
-            if (controller.signal.aborted) {
-                throw timeoutError(timeoutMs);
-            }
-            throw error;
-        }
-        finally {
-            clearTimeout(timer);
-        }
-    }
-    async function parsePayload(response) {
-        const text = await response.text();
-        if (!text) {
-            return null;
-        }
-        try {
-            return JSON.parse(text);
-        }
-        catch {
-            return null;
-        }
-    }
-    function resolveTimeoutMs(method, requestTimeoutMs) {
-        if (typeof requestTimeoutMs === "number") {
-            return requestTimeoutMs;
-        }
-        const methodTimeoutMs = config.timeoutMsByMethod?.[method];
-        if (typeof methodTimeoutMs === "number") {
-            return methodTimeoutMs;
-        }
-        return config.timeoutMs ?? 15_000;
-    }
-    function buildApiError(args) {
-        const failure = args.failure;
-        const legacyError = failure && typeof failure.error === "object" && failure.error !== null
-            ? failure.error
-            : failure?.legacyError;
-        const correlationId = failure?.correlationId ??
-            args.response.headers.get("x-lucern-correlation-id")?.trim() ??
-            args.requestId;
-        const policyTraceId = failure?.policyTraceId ??
-            args.response.headers.get("x-lucern-policy-trace-id")?.trim() ??
-            null;
-        const details = failure?.details ?? legacyError?.details;
-        const policySummary = readPolicySummaryFromDetails(details);
-        return new LucernApiError({
-            code: failure?.code ?? legacyError?.code ?? fallbackErrorCode(args.response.status),
-            message: policySummary ??
-                (typeof failure?.error === "string"
-                    ? failure.error
-                    : legacyError?.message ??
-                        (args.response.ok
-                            ? "Platform API returned an invalid success payload."
-                            : "Platform API request failed.")),
-            status: args.response.status,
-            invariant: failure?.invariant,
-            suggestion: failure?.suggestion,
-            details,
-            requestId: args.requestId,
-            correlationId,
-            policyTraceId,
-        });
-    }
-    async function request(args) {
-        const authHeaders = await resolveAuthHeaders();
-        const method = args.method ?? "GET";
-        const timeoutMs = resolveTimeoutMs(method, args.timeoutMs);
-        const headers = new Headers({
-            "content-type": "application/json",
-            ...authHeaders,
-        });
-        if (args.idempotencyKey) {
-            headers.set("idempotency-key", args.idempotencyKey);
-        }
-        const requestId = headers.get("x-correlation-id")?.trim() ||
-            headers.get("x-request-id")?.trim() ||
-            args.requestId ||
-            requestIdFactory();
-        if (!headers.has("x-correlation-id") && !headers.has("x-request-id")) {
-            headers.set("x-correlation-id", requestId);
-        }
-        const url = `${baseUrl}${args.path}`;
-        const serializedBody = args.body ? JSON.stringify(args.body) : undefined;
-        const init = {
-            method,
-            headers,
-            body: serializedBody,
-        };
-        let lastError;
-        for (let attempt = 0; attempt <= maxRetries; attempt++) {
-            const hookRequestContext = {
-                requestId,
-                attempt,
-                maxRetries,
-                method,
-                path: args.path,
-                url,
-                headers: new Headers(headers),
-                body: serializedBody,
-                timeoutMs,
-            };
-            await config.onRequest?.(hookRequestContext);
-            const startedAt = Date.now();
-            try {
-                const response = await fetchWithTimeout(url, init, timeoutMs);
-                const responseClone = response.clone();
-                const payload = await parsePayload(response);
-                const retryAfterMs = parseRetryAfterMs(response.headers.get("Retry-After"));
-                if (!response.ok || !payload?.success) {
-                    const failure = payload && !payload.success ? payload : null;
-                    const apiError = buildApiError({
-                        requestId,
-                        response,
-                        failure,
-                    });
-                    const willRetry = attempt < maxRetries && isRetryableStatus(response.status);
-                    await config.onResponse?.({
-                        ...hookRequestContext,
-                        durationMs: Date.now() - startedAt,
-                        status: response.status,
-                        response: responseClone,
-                        error: apiError,
-                        correlationId: apiError.correlationId ?? requestId,
-                        policyTraceId: apiError.policyTraceId ?? null,
-                        retryAfterMs,
-                        willRetry,
-                    });
-                    if (willRetry) {
-                        lastError = apiError;
-                        await delay(computeRetryDelayMs({
-                            attempt,
-                            status: response.status,
-                            retryAfterMs,
-                        }));
-                        continue;
-                    }
-                    throw apiError;
-                }
-                const successPayload = payload;
-                await config.onResponse?.({
-                    ...hookRequestContext,
-                    durationMs: Date.now() - startedAt,
-                    status: response.status,
-                    response: responseClone,
-                    correlationId: successPayload.correlationId ??
-                        response.headers.get("x-lucern-correlation-id")?.trim() ??
-                        requestId,
-                    policyTraceId: successPayload.policyTraceId ??
-                        response.headers.get("x-lucern-policy-trace-id")?.trim() ??
-                        null,
-                    idempotentReplay: successPayload.idempotentReplay,
-                    retryAfterMs,
-                    willRetry: false,
-                });
-                return successPayload;
-            }
-            catch (fetchError) {
-                if (fetchError instanceof LucernApiError) {
-                    throw fetchError;
-                }
-                const willRetry = attempt < maxRetries;
-                await config.onResponse?.({
-                    ...hookRequestContext,
-                    durationMs: Date.now() - startedAt,
-                    error: fetchError,
-                    correlationId: requestId,
-                    policyTraceId: null,
-                    willRetry,
-                });
-                lastError = fetchError;
-                if (willRetry) {
-                    await delay(computeRetryDelayMs({ attempt }));
-                }
-            }
-        }
-        throw lastError instanceof Error
-            ? lastError
-            : new Error("Platform API request failed after retries.");
-    }
-    return {
-        request,
-    };
-}