@lucern/sdk 0.3.0-alpha.5 → 0.3.0-alpha.7

package/CHANGELOG.md

@@ -5,6 +5,9 @@ All notable changes to `@lucern/sdk` will be documented in this file.
 ## [Unreleased]
 - No unreleased changes yet.
 
+## [0.3.0-alpha.7] - 2026-05-03
+- Rebuild the coherent Lucern package line after Campaign 1 SDK hardening fixes.
+
 ## [0.2.0-alpha.5] - 2026-04-18
 - Refresh publish from current stackos source under EK-16 T4.
 - Version-numbering note: 0.2.0-alpha.2 through 0.2.0-alpha.5 were published from earlier stackos source on 2026-04-12 by pete_c. This release (alpha.5) is the first to ship the current April 18 source — 56 commits of accumulated changes from the code-separation track.

package/dist/adminClient.d.ts

@@ -153,11 +153,11 @@ declare function createAdminClient(config?: AdminClientConfig): {
     /**
      * Get the control-object ownership contract.
      */
-    getControlObjectOwnership(): Promise<PlatformGatewaySuccess<ControlObjectOwnershipContract>>;
+    getControlObjectOwnership: () => Promise<PlatformGatewaySuccess<ControlObjectOwnershipContract>>;
     /**
      * @deprecated Use getControlObjectOwnership.
      */
-    getControlObjectOwnershipContract(): Promise<PlatformGatewaySuccess<ControlObjectOwnershipContract>>;
+    getControlObjectOwnershipContract: () => Promise<PlatformGatewaySuccess<ControlObjectOwnershipContract>>;
     /**
      * List workspaces for the current admin scope.
      */
@@ -190,33 +190,33 @@ declare function createAdminClient(config?: AdminClientConfig): {
     /**
      * Create a membership.
      */
-    createMembership(input: GatewayScope & {
+    createMembership: (input: GatewayScope & {
         membershipId?: string;
         principalId: string;
         role: "platform_admin" | "tenant_admin" | "workspace_admin" | "editor" | "viewer" | "auditor" | "service_agent";
         status?: "active" | "invited" | "revoked" | "expired";
         source?: "bootstrap" | "manual" | "sync" | "sso" | "api" | "scim" | "invitation";
-    }, idempotencyKey?: string): Promise<PlatformGatewaySuccess<unknown>>;
+    }, idempotencyKey?: string) => Promise<PlatformGatewaySuccess<unknown>>;
     /**
      * Update a membership.
      */
-    updateMembership(input: GatewayScope & {
+    updateMembership: (input: GatewayScope & {
         membershipId?: string;
         principalId: string;
         role: "platform_admin" | "tenant_admin" | "workspace_admin" | "editor" | "viewer" | "auditor" | "service_agent";
         status?: "active" | "invited" | "revoked" | "expired";
         source?: "bootstrap" | "manual" | "sync" | "sso" | "api" | "scim" | "invitation";
-    }, idempotencyKey?: string): Promise<PlatformGatewaySuccess<unknown>>;
+    }, idempotencyKey?: string) => Promise<PlatformGatewaySuccess<unknown>>;
     /**
      * @deprecated Use createMembership or updateMembership.
      */
-    upsertMembership(input: GatewayScope & {
+    upsertMembership: (input: GatewayScope & {
         membershipId?: string;
         principalId: string;
         role: "platform_admin" | "tenant_admin" | "workspace_admin" | "editor" | "viewer" | "auditor" | "service_agent";
         status?: "active" | "invited" | "revoked" | "expired";
         source?: "bootstrap" | "manual" | "sync" | "sso" | "api" | "scim" | "invitation";
-    }, idempotencyKey?: string): Promise<PlatformGatewaySuccess<unknown>>;
+    }, idempotencyKey?: string) => Promise<PlatformGatewaySuccess<unknown>>;
     /**
      * List tenant API keys in the current admin scope.
      */

package/dist/adminClient.js

@@ -232,9 +232,7 @@ function generatePortableRequestId() {
     8
   ).join("")}-${hex.slice(8, 10).join("")}-${hex.slice(10).join("")}`;
 }
-function randomIdempotencyKey() {
-  return generatePortableRequestId();
-}
+var randomIdempotencyKey = generatePortableRequestId;
 function isRetryableStatus(status) {
   return status >= 500 || status === 408 || status === 429;
 }
@@ -299,8 +297,11 @@ function timeoutError(timeoutMs) {
   error.name = "AbortError";
   return error;
 }
+function isRecord(value) {
+  return value !== null && typeof value === "object" && !Array.isArray(value);
+}
 function readPolicySummaryFromDetails(details) {
-  if (!details || typeof details !== "object" || Array.isArray(details)) {
+  if (!isRecord(details)) {
     return null;
   }
   const directSummary = details.summary;
@@ -308,11 +309,11 @@ function readPolicySummaryFromDetails(details) {
     return directSummary.trim();
   }
   const policy = details.policy;
-  if (!policy || typeof policy !== "object" || Array.isArray(policy)) {
+  if (!isRecord(policy)) {
     return null;
   }
   const explanation = policy.explanation;
-  if (!explanation || typeof explanation !== "object" || Array.isArray(explanation)) {
+  if (!isRecord(explanation)) {
     return null;
   }
   const nestedSummary = explanation.summary;
@@ -376,11 +377,11 @@ function createGatewayRequestClient(config = {}) {
     if (!text) {
       return null;
     }
-    try {
-      return JSON.parse(text);
-    } catch {
+    const parsed = tryParseGatewayEnvelopeJson(text);
+    if (!parsed.ok) {
       return null;
     }
+    return isRecord(parsed.value) ? parsed.value : null;
   }
   function resolveTimeoutMs(method, requestTimeoutMs) {
     if (typeof requestTimeoutMs === "number") {
@@ -392,16 +393,31 @@ function createGatewayRequestClient(config = {}) {
     }
     return config.timeoutMs ?? 15e3;
   }
+  function tryParseGatewayEnvelopeJson(text) {
+    const trimmed = text.trim();
+    if (!trimmed.startsWith("{") && !trimmed.startsWith("[")) {
+      return { ok: false, reason: "non-json" };
+    }
+    try {
+      return { ok: true, value: JSON.parse(trimmed) };
+    } catch (error) {
+      if (error instanceof SyntaxError) {
+        return { ok: false, reason: "invalid-json", error };
+      }
+      throw error;
+    }
+  }
   function buildApiError(args) {
     const failure = args.failure;
-    const legacyError = failure && typeof failure.error === "object" && failure.error !== null ? failure.error : failure?.legacyError;
+    const legacyError = failure && isRecord(failure.error) ? failure.error : failure?.legacyError;
     const correlationId = failure?.correlationId ?? args.response.headers.get("x-lucern-correlation-id")?.trim() ?? args.requestId;
     const policyTraceId = failure?.policyTraceId ?? args.response.headers.get("x-lucern-policy-trace-id")?.trim() ?? null;
     const details = failure?.details ?? legacyError?.details;
     const policySummary = readPolicySummaryFromDetails(details);
+    const failureMessage = typeof failure?.error === "string" ? failure.error : legacyError?.message;
     return new LucernApiError({
       code: failure?.code ?? legacyError?.code ?? fallbackErrorCode(args.response.status),
-      message: policySummary ?? (typeof failure?.error === "string" ? failure.error : legacyError?.message ?? (args.response.ok ? "Platform API returned an invalid success payload." : "Platform API request failed.")),
+      message: policySummary ?? failureMessage ?? (args.response.ok ? "Platform API returned an invalid success payload." : "Platform API request failed."),
       status: args.response.status,
       invariant: failure?.invariant,
       suggestion: failure?.suggestion,
@@ -533,7 +549,10 @@ function createListResult(items, legacyKey) {
     total: items.length
   };
   if (legacyKey) {
-    result[legacyKey] = items;
+    return {
+      ...result,
+      [legacyKey]: items
+    };
   }
   return result;
 }
@@ -571,6 +590,17 @@ function asTenantVaultSecretArray(data) {
 }
 function createAdminClient(config = {}) {
   const gateway = createGatewayRequestClient(config);
+  const getControlObjectOwnership = async () => gateway.request({
+    path: "/api/platform/v1/admin/control-ownership"
+  });
+  const createMembership = async (input, idempotencyKey) => gateway.request({
+    path: "/api/platform/v1/memberships",
+    method: "POST",
+    body: input,
+    idempotencyKey: idempotencyKey ?? randomIdempotencyKey()
+  });
+  const updateMembership = createMembership;
+  const upsertMembership = createMembership;
   return {
     /**
      * List tenants visible to the current principal.
@@ -602,19 +632,11 @@ function createAdminClient(config = {}) {
     /**
      * Get the control-object ownership contract.
      */
-    async getControlObjectOwnership() {
-      return gateway.request({
-        path: "/api/platform/v1/admin/control-ownership"
-      });
-    },
+    getControlObjectOwnership,
     /**
      * @deprecated Use getControlObjectOwnership.
      */
-    async getControlObjectOwnershipContract() {
-      return gateway.request({
-        path: "/api/platform/v1/admin/control-ownership"
-      });
-    },
+    getControlObjectOwnershipContract: getControlObjectOwnership,
     /**
      * List workspaces for the current admin scope.
      */
@@ -661,26 +683,15 @@ function createAdminClient(config = {}) {
     /**
      * Create a membership.
      */
-    async createMembership(input, idempotencyKey) {
-      return gateway.request({
-        path: "/api/platform/v1/memberships",
-        method: "POST",
-        body: input,
-        idempotencyKey: idempotencyKey ?? randomIdempotencyKey()
-      });
-    },
+    createMembership,
     /**
      * Update a membership.
      */
-    async updateMembership(input, idempotencyKey) {
-      return this.createMembership(input, idempotencyKey);
-    },
+    updateMembership,
     /**
      * @deprecated Use createMembership or updateMembership.
      */
-    async upsertMembership(input, idempotencyKey) {
-      return this.createMembership(input, idempotencyKey);
-    },
+    upsertMembership,
     /**
      * List tenant API keys in the current admin scope.
      */