@lucern/sdk 1.0.28 → 1.0.30

package/dist/coreClient.d.ts

@@ -1,22 +1,24 @@
 import { type LucernTelemetryExporter } from "@lucern/transport-core";
 import { type LucernSdkAuthContextInput } from "./authContext";
-import type { JsonObject, JsonValue } from "./types";
+import type { JsonValue } from "./types";
 /** Tenant and workspace identifiers used to scope gateway requests. */
-export type GatewayScope = {
+export interface GatewayScope {
     tenantId?: string;
     workspaceId?: string;
-};
+}
 /** Successful response envelope from the platform gateway with correlation metadata. */
-export type PlatformGatewaySuccess<T> = {
-    success: true;
-    data: T;
+export interface PlatformGatewaySuccess<T> {
     correlationId: string;
-    policyTraceId: string | null;
+    data: T;
     idempotentReplay: boolean;
-};
+    policyTraceId: string | null;
+    success: true;
+}
 /** Failed response envelope with structured error codes and optional invariant references. */
-export type PlatformGatewayFailure = {
-    success: false;
+export interface PlatformGatewayFailure {
+    code?: string;
+    correlationId: string;
+    details?: JsonValue;
     /**
      * Error string is the canonical envelope field.
      * Object form is legacy-only compatibility for older gateway responses.
@@ -26,18 +28,16 @@ export type PlatformGatewayFailure = {
         message: string;
         details?: JsonValue;
     };
-    code?: string;
     invariant?: string | null;
-    suggestion?: string | null;
-    details?: JsonValue;
     legacyError?: {
         code: string;
         message: string;
         details?: JsonValue;
     };
-    correlationId: string;
     policyTraceId: string | null;
-};
+    success: false;
+    suggestion?: string | null;
+}
 /** Discriminated union of success and failure gateway responses. */
 export type PlatformGatewayEnvelope<T> = PlatformGatewaySuccess<T> | PlatformGatewayFailure;
 export declare class GatewayTimeoutError extends Error {
@@ -87,17 +87,17 @@ export declare class LucernApiError extends Error {
 export type GatewayHttpMethod = "GET" | "POST" | "PUT" | "PATCH" | "DELETE";
 type FetchLike = (input: RequestInfo | URL, init?: RequestInit) => Promise<Response>;
 /** Context passed to the `onRequest` hook before each gateway request attempt. */
-export type GatewayRequestHookContext = {
-    requestId: string;
+export interface GatewayRequestHookContext {
     attempt: number;
+    body?: string;
+    headers: Headers;
     maxRetries: number;
     method: GatewayHttpMethod;
     path: string;
-    url: string;
-    headers: Headers;
-    body?: string;
+    requestId: string;
     timeoutMs: number;
-};
+    url: string;
+}
 /** Context passed to the `onResponse` hook after each gateway request attempt (including retries and failures). */
 export type GatewayResponseHookContext = GatewayRequestHookContext & {
     durationMs: number;
@@ -117,56 +117,56 @@ export type GatewayClientEnvironment = "sandbox" | "production";
  * Most developers should use {@link createLucernClient} instead, which wraps
  * this config with higher-level conveniences like `apiKey` and `environment`.
  */
-export type GatewayClientConfig = {
-    baseUrl?: string;
-    fetchImpl?: FetchLike;
+export interface GatewayClientConfig {
     /** Lucern tenant API key or service API key. Sent as `x-lucern-key`. */
     apiKey?: string;
     /**
-     * Lucern platform session token. This is not a Clerk JWT.
-     * Server-side tenant proxies should normally send `apiKey` plus `clerkId`.
+     * Canonical Master Control identity tuple applied to every SDK request.
+     * Use this for tenant/workspace-scoped graph and identity operations.
      */
-    userToken?: string;
-    /** Gateway environment label for legacy sandbox/production routing. */
-    environment?: GatewayClientEnvironment;
+    authContext?: LucernSdkAuthContextInput | (() => Promise<LucernSdkAuthContextInput | undefined>) | (() => LucernSdkAuthContextInput | undefined);
+    baseUrl?: string;
     /** Clerk subject for the current end user. */
     clerkId?: string;
-    /** Optional explicit user subject. Defaults to `clerkId` when omitted. */
-    userId?: string;
     /** Optional deployment host hint for front-door routing. */
     deploymentHost?: string;
+    /** Gateway environment label for legacy sandbox/production routing. */
+    environment?: GatewayClientEnvironment;
+    fetchImpl?: FetchLike;
     getAuthHeaders?: (() => Promise<Record<string, string>>) | (() => Record<string, string>);
-    /**
-     * Canonical Master Control identity tuple applied to every SDK request.
-     * Use this for tenant/workspace-scoped graph and identity operations.
-     */
-    authContext?: LucernSdkAuthContextInput | (() => Promise<LucernSdkAuthContextInput | undefined>) | (() => LucernSdkAuthContextInput | undefined);
-    /** When true, requests fail before fetch if `authContext` is absent. */
-    requireCanonicalAuthContext?: boolean;
     /** Max retries for transient errors (5xx, network). Defaults to 2. */
     maxRetries?: number;
-    /** Request timeout in ms. Defaults to 15000. */
-    timeoutMs?: number;
-    /** Optional timeout overrides by HTTP method. */
-    timeoutMsByMethod?: Partial<Record<GatewayHttpMethod, number>>;
+    /** Invoked before each request attempt, including retries. */
+    onRequest?: ((context: GatewayRequestHookContext) => void) | ((context: GatewayRequestHookContext) => Promise<void>);
+    /** Invoked after each request attempt, including retries and failures. */
+    onResponse?: ((context: GatewayResponseHookContext) => void) | ((context: GatewayResponseHookContext) => Promise<void>);
     /** Optional request ID factory used for correlation headers. */
     requestIdFactory?: () => string;
+    /** When true, requests fail before fetch if `authContext` is absent. */
+    requireCanonicalAuthContext?: boolean;
+    /** Set false to disable SDK operational telemetry even when env is present. */
+    telemetryEnabled?: boolean;
     /**
      * Optional operational telemetry sink. When omitted, the SDK resolves an
      * Axiom exporter from Infisical-injected environment variables if present.
      */
     telemetryExporter?: LucernTelemetryExporter | null;
-    /** Set false to disable SDK operational telemetry even when env is present. */
-    telemetryEnabled?: boolean;
-    /** Invoked before each request attempt, including retries. */
-    onRequest?: ((context: GatewayRequestHookContext) => void) | ((context: GatewayRequestHookContext) => Promise<void>);
-    /** Invoked after each request attempt, including retries and failures. */
-    onResponse?: ((context: GatewayResponseHookContext) => void) | ((context: GatewayResponseHookContext) => Promise<void>);
-};
+    /** Request timeout in ms. Defaults to 15000. */
+    timeoutMs?: number;
+    /** Optional timeout overrides by HTTP method. */
+    timeoutMsByMethod?: Partial<Record<GatewayHttpMethod, number>>;
+    /** Optional explicit user subject. Defaults to `clerkId` when omitted. */
+    userId?: string;
+    /**
+     * Lucern platform session token. This is not a Clerk JWT.
+     * Server-side tenant proxies should normally send `apiKey` plus `clerkId`.
+     */
+    userToken?: string;
+}
 /**
  * Serialize a gateway query object into a URL query string.
  */
-export declare function toQueryString(scope: GatewayScope & Record<string, string | number | boolean | undefined>): string;
+export declare function toQueryString(scope: object): string;
 declare function generatePortableRequestId(): string;
 /**
  * Generate a random idempotency key for retry-safe writes.
@@ -179,7 +179,7 @@ export declare function createGatewayRequestClient(config?: GatewayClientConfig)
     request: <T>(args: {
         path: string;
         method?: GatewayHttpMethod;
-        body?: JsonObject;
+        body?: unknown;
         idempotencyKey?: string;
         requestId?: string;
         timeoutMs?: number;