@mdbase-dev/connect-protocol 0.1.0-beta.126 → 0.1.0-beta.147

package/dist/connect-problems.generated.js

@@ -3,8 +3,11 @@ export const CONNECT_PROBLEM_VERSION = 1;
 export const CONNECT_PROBLEM_CATALOG = {
     "access_denied": { category: "authorization", recovery: "reauthorize" },
     "access_paused": { category: "availability", recovery: "resume_connector_access" },
+    "application_authorization_issuance_disabled": { category: "authorization", recovery: "reauthorize" },
     "application_declaration_mismatch": { category: "authorization", recovery: "reauthorize" },
     "application_identity_unavailable": { category: "compatibility", recovery: "upgrade_application" },
+    "application_reauthorization_required": { category: "authorization", recovery: "reauthorize" },
+    "application_semantic_version_mismatch": { category: "authorization", recovery: "reauthorize" },
     "approval_window_blocked": { category: "authorization", recovery: "reauthorize" },
     "authority_authorization_changed": { category: "authorization", recovery: "reauthorize" },
     "authorization_binding_incompatible": { category: "compatibility", recovery: "upgrade_application" },
@@ -16,6 +19,7 @@ export const CONNECT_PROBLEM_CATALOG = {
     "capability_contract_incompatible": { category: "compatibility", recovery: "upgrade_application" },
     "change_cursor_reset": { category: "conflict", recovery: "refresh" },
     "collection_access_denied": { category: "authorization", recovery: "reauthorize" },
+    "collection_claimed_by_newer_runtime": { category: "compatibility", recovery: "upgrade_connector" },
     "collection_configuration_invalid": { category: "validation", recovery: "repair_collection" },
     "collection_contracts_missing": { category: "compatibility", recovery: "choose_collection" },
     "collection_incompatible": { category: "compatibility", recovery: "choose_collection" },
@@ -26,6 +30,7 @@ export const CONNECT_PROBLEM_CATALOG = {
     "collection_not_ready": { category: "selection", recovery: "choose_collection" },
     "collection_not_selected": { category: "selection", recovery: "choose_collection" },
     "collection_type_registry_invalid": { category: "validation", recovery: "repair_collection" },
+    "collection_unavailable": { category: "availability", recovery: "choose_collection" },
     "collection_version_unsupported": { category: "compatibility", recovery: "upgrade_collection" },
     "concurrent_modification": { category: "conflict", recovery: "refresh" },
     "connector_busy": { category: "availability", recovery: "retry" },
@@ -66,6 +71,7 @@ export const CONNECT_PROBLEM_CATALOG = {
     "invalid_push_payload": { category: "validation", recovery: "fix_request" },
     "invalid_push_subscription": { category: "validation", recovery: "fix_request" },
     "invalid_read_cursor": { category: "validation", recovery: "fix_request" },
+    "invalid_replica": { category: "authorization", recovery: "reauthorize" },
     "invalid_request": { category: "validation", recovery: "fix_request" },
     "invalid_token_response": { category: "integrity", recovery: "contact_support" },
     "legacy_scope_reauthorization_required": { category: "authorization", recovery: "reauthorize" },
@@ -79,6 +85,7 @@ export const CONNECT_PROBLEM_CATALOG = {
     "not_authorized": { category: "authorization", recovery: "reauthorize" },
     "not_remote_authority": { category: "compatibility", recovery: "choose_collection" },
     "notification_criterion_not_declared": { category: "validation", recovery: "fix_request" },
+    "notification_grant_reauthorization_required": { category: "authorization", recovery: "reauthorize" },
     "notification_reauthorization_required": { category: "authorization", recovery: "reauthorize" },
     "notification_registration_failed": { category: "availability", recovery: "retry" },
     "notification_unregistration_failed": { category: "availability", recovery: "retry" },
@@ -88,6 +95,7 @@ export const CONNECT_PROBLEM_CATALOG = {
     "operation_failed": { category: "internal", recovery: "contact_support" },
     "operation_invalid": { category: "validation", recovery: "fix_request" },
     "operation_outcome_unknown": { category: "conflict", recovery: "resolve_outcome" },
+    "origin_denied": { category: "authorization", recovery: "reauthorize" },
     "path_occupied": { category: "conflict", recovery: "resolve_conflict" },
     "pending_mutation_unresolved": { category: "conflict", recovery: "resolve_outcome" },
     "query_snapshot_changed": { category: "conflict", recovery: "refresh" },
@@ -102,8 +110,11 @@ export const CONNECT_PROBLEM_CATALOG = {
     "registry_schema_incompatible": { category: "compatibility", recovery: "upgrade_connector" },
     "relay_authorization_expired": { category: "authorization", recovery: "reauthorize" },
     "relay_unavailable": { category: "availability", recovery: "retry" },
+    "replica_scope_denied": { category: "authorization", recovery: "reauthorize" },
     "sandbox_unsupported": { category: "compatibility", recovery: "fix_request" },
+    "scope_changed": { category: "authorization", recovery: "reauthorize" },
     "scope_denied": { category: "authorization", recovery: "reauthorize" },
+    "scope_epoch_stale": { category: "authorization", recovery: "reauthorize" },
     "session_destroyed": { category: "cancellation", recovery: "none" },
     "session_not_started": { category: "validation", recovery: "fix_request" },
     "session_starting": { category: "availability", recovery: "retry" },
@@ -112,6 +123,7 @@ export const CONNECT_PROBLEM_CATALOG = {
     "sync_failed": { category: "availability", recovery: "retry" },
     "temporarily_unavailable": { category: "availability", recovery: "retry" },
     "timeout": { category: "availability", recovery: "retry" },
+    "timer_grant_unavailable": { category: "authorization", recovery: "reauthorize" },
     "token_exchange_failed": { category: "availability", recovery: "retry" },
     "transport_protocol_incompatible": { category: "compatibility", recovery: "upgrade_connector" },
     "type_pack_provision_failed": { category: "validation", recovery: "repair_collection" },
@@ -289,6 +301,17 @@ const CONNECT_PROBLEM_DETAIL_SCHEMAS = {
             }
         }
     },
+    "collection_unavailable": {
+        "type": "object",
+        "required": [
+            "reason"
+        ],
+        "properties": {
+            "reason": {
+                "type": "string"
+            }
+        }
+    },
     "collection_version_unsupported": {
         "type": "object",
         "required": [

package/dist/index.d.ts

@@ -1,13 +1,15 @@
 import type { ConnectProblem } from "./connect-problems.generated.js";
 import type { JsonObject, QueryRecord } from "./records.js";
 export * from "./records.js";
-import type { ApplicationFileRequirement, LegacyApplicationFileRequirement, CollectionFileDescriptor, FileCapability } from "./files.js";
+import type { NotificationCriterion } from "./application-declaration.js";
+export type { NotificationCriterion, NativeNotificationDelivery, ApplicationNotifications, CanonicalApplicationRequirements, MdbaseWebAppManifest, MdbasePortableAppManifest, MdbaseAppManifest, ApplicationRequirements, LegacyApplicationRequirements, LegacyMdbaseWebAppManifest, LegacyMdbasePortableAppManifest, LegacyMdbaseAppManifest, ApplicationProvisions } from "./application-declaration.js";
+import type { CollectionFileDescriptor, FileCapability } from "./files.js";
 import type { CollectionOperation } from "./operations.js";
-import type { ApplicationCapabilityRequirements, LegacyApplicationCapabilityRequirements } from "./capabilities.js";
-import type { ContractRequirement, ContractSetupChoice, TypePackProvision } from "./type-packs.js";
-import { type ConfigurationProvision, type ConfigurationRequirement } from "./collection-setup.js";
+import type { ContractSetupChoice } from "./type-packs.js";
 import type { ApplicationAuthorizationProof } from "./application-authorization.js";
 export * from "./connect-problems.generated.js";
+export { MdbaseConnectError, connectError, connectProblem, type ConnectErrorContext } from "./authorization-errors.js";
+export { semanticContractVersion, authorizationOperations, authorizationFiles, validateAuthorizationSelection, declaredOperations, retainedCapabilities, DEFAULT_OPERATIONS, type MdbaseApplicationManifest, type MdbaseApplicationRequirements, type MdbaseApplicationCapabilityRequirements, type MdbaseApplicationCapabilityId } from "./application-contract.js";
 export * from "./files.js";
 export * from "./operations.js";
 export * from "./change-events.generated.js";
@@ -28,6 +30,8 @@ export declare const CONTRACT_SETUP_CAPABILITY: "contract-setup-v1";
 export declare const FILE_RELAY_CAPABILITY: "file-relay-v1";
 export declare const PROTOCOL_USAGE_REPORT_CAPABILITY: "protocol-usage-report-v1";
 export declare const POLICY_FRESHNESS_LEASE_CAPABILITY: "policy-freshness-lease-v1";
+/** Opt-in raw account-bound next policy projection; never a legacy default. */
+export declare const NEXT_ACCOUNT_CAPABILITY: "next_account_v1";
 /** Advertised beta capabilities are intentionally broader than the beta baseline. */
 export declare const RELAY_REQUIRED_CAPABILITIES: readonly ["application-authorization-v4", "authorization-activation", "encrypted-relay", "policy-ack"];
 export declare const MINIMUM_CONNECTOR_VERSION: "0.1.0-beta.33";
@@ -62,81 +66,6 @@ export declare const CONNECT_SCHEMA_IDS: {
     readonly files: "https://mdbase.dev/connect/schemas/files.v1.json";
     readonly sync: "https://mdbase.dev/connect/schemas/sync.v1.json";
 };
-export interface NotificationCriterion {
-    /** Stable, manifest-owned identifier selected by an installation. */
-    id: string;
-    /** Runtime event contract evaluated at the collection authority. */
-    event: ContractRequirement;
-    /** Canonical mdbase CEL. Event content never leaves the authority for evaluation. */
-    if?: {
-        $expr: string;
-    };
-    debounce?: string;
-    minimum_interval?: string;
-    /** Static Web Push copy. Dynamic record content is intentionally unsupported. */
-    presentation: {
-        title: string;
-        body?: string;
-        tag?: string;
-    };
-}
-export type NativeNotificationDelivery = {
-    /**
-     * Connect sends through FCM using revocable, least-privilege authority
-     * granted by the application's Firebase project.
-     */
-    mode: "managed_fcm";
-    firebase_project_id: string;
-} | {
-    /**
-     * Connect sends a signed, content-free signal to infrastructure operated
-     * by the application developer. That infrastructure owns APNs/FCM.
-     */
-    mode: "webhook";
-    url: string;
-};
-export interface ApplicationNotifications {
-    criteria: NotificationCriterion[];
-    /** Optional native delivery route. Web Push registration remains independent. */
-    native_delivery?: NativeNotificationDelivery;
-}
-/**
- * The declaration bundled with an application build and registered inline.
- *
- * `id` is stable presentation metadata rather than proof of a publisher. Each
- * exact declaration is independently identified and authorized by Connect.
- */
-export type CanonicalApplicationRequirements = Omit<ApplicationRequirements, "access" | "contracts"> & {
-    access: "full_collection";
-    contracts: [];
-};
-interface MdbaseAppManifestBase {
-    manifest_version: 1;
-    id: string;
-    name: string;
-    requirements: CanonicalApplicationRequirements;
-    provisions?: ApplicationProvisions;
-    notifications?: ApplicationNotifications;
-}
-export interface MdbaseWebAppManifest extends MdbaseAppManifestBase {
-    /** Omitted by existing v1 declarations; explicit `web` is equivalent. */
-    distribution?: "web";
-    homepage: string;
-    icon?: string;
-    redirect_uris: string[];
-}
-export interface MdbasePortableAppManifest extends MdbaseAppManifestBase {
-    /**
-     * A downloaded, publisher-unverified application opened from a local file.
-     * Portable declarations use device authorization and never claim a web origin.
-     */
-    distribution: "portable";
-    /** Optional HTTPS page where the user can inspect the project or source. */
-    project_url?: string;
-    /** Optional HTTPS icon on the project URL's origin. */
-    icon?: string;
-}
-export type MdbaseAppManifest = MdbaseWebAppManifest | MdbasePortableAppManifest;
 export interface NotificationSignal {
     /** Stable idempotency key generated by the collection authority. */
     signal_id: string;
@@ -166,43 +95,7 @@ export interface NotificationWebhook {
     connection_id: string;
     notification: MdbaseNotification;
 }
-export interface ApplicationRequirements {
-    contracts: ContractRequirement[];
-    /** Collection extension values required before the application is ready. */
-    configuration?: ConfigurationRequirement[];
-    /** Versioned semantic intent compiled by Connect into exact operations. */
-    capabilities?: ApplicationCapabilityRequirements;
-    /**
-     * Collection boundary request. New declarations must explicitly use
-     * `full_collection`; omitted and `contract` remain parseable only for legacy
-     * diagnosis and reauthorization.
-     */
-    access?: "contract" | "full_collection";
-    /** Restrict authorization to durable provider-backed collections. */
-    collection_kind?: "hosted";
-    /** Explicit identity consent. Omission discloses no account metadata. */
-    people?: import("./people.js").ApplicationPeopleRequirement;
-    /** First-class non-Markdown file access requested independently of records. */
-    files?: ApplicationFileRequirement;
-}
 export { PEOPLE_PERMISSIONS, approvedPeoplePermissions, type AccountIdentity, type AccountProfile, type CurrentAccountResponse, type CollectionMemberProfile, type ApplicationPeopleRequirement, type PeoplePermission } from "./people.js";
-export type LegacyApplicationRequirements = Omit<ApplicationRequirements, "capabilities" | "files" | "access" | "people"> & {
-    access: "full_collection";
-    capabilities?: LegacyApplicationCapabilityRequirements;
-    files?: LegacyApplicationFileRequirement;
-};
-export type LegacyMdbaseWebAppManifest = Omit<MdbaseWebAppManifest, "requirements"> & {
-    requirements: LegacyApplicationRequirements;
-};
-export type LegacyMdbasePortableAppManifest = Omit<MdbasePortableAppManifest, "requirements"> & {
-    requirements: LegacyApplicationRequirements;
-};
-export type LegacyMdbaseAppManifest = LegacyMdbaseWebAppManifest | LegacyMdbasePortableAppManifest;
-export interface ApplicationProvisions {
-    type_packs: TypePackProvision[];
-    /** Narrow semantic changes that may satisfy configuration requirements. */
-    configuration?: ConfigurationProvision[];
-}
 export interface GrantScope {
     /** Legacy scope only; canonical grants use an empty array and discover contracts through resources and semantic selectors. */
     contracts: CollectionContractDescriptor[];
@@ -249,6 +142,8 @@ export type MdbaseOperationResponse<Result = unknown> = {
     problem: ConnectProblem;
 };
 export interface GrantPolicy {
+    /** Consenting account UUID; mandatory only in negotiated next_account_v1 mode. */
+    account_id?: string;
     /** Complete normalized JSON evidence; never independent operation authority. */
     application_declaration?: unknown;
     id: string;

package/dist/index.js

@@ -2,6 +2,8 @@ import { FRESH_APPLICATION_AUTHORIZATION_CAPABILITIES } from "./capabilities.js"
 export * from "./records.js";
 import { YAML_DOCUMENT_RECORDS_CAPABILITY } from "./collection-setup.js";
 export * from "./connect-problems.generated.js";
+export { MdbaseConnectError, connectError, connectProblem } from "./authorization-errors.js";
+export { semanticContractVersion, authorizationOperations, authorizationFiles, validateAuthorizationSelection, declaredOperations, retainedCapabilities, DEFAULT_OPERATIONS } from "./application-contract.js";
 export * from "./files.js";
 export * from "./operations.js";
 export * from "./change-events.generated.js";
@@ -22,6 +24,8 @@ export const CONTRACT_SETUP_CAPABILITY = "contract-setup-v1";
 export const FILE_RELAY_CAPABILITY = "file-relay-v1";
 export const PROTOCOL_USAGE_REPORT_CAPABILITY = "protocol-usage-report-v1";
 export const POLICY_FRESHNESS_LEASE_CAPABILITY = "policy-freshness-lease-v1";
+/** Opt-in raw account-bound next policy projection; never a legacy default. */
+export const NEXT_ACCOUNT_CAPABILITY = "next_account_v1";
 /** Advertised beta capabilities are intentionally broader than the beta baseline. */
 export const RELAY_REQUIRED_CAPABILITIES = [
     "application-authorization-v4",

package/dist/manifest-validators.generated.d.ts

@@ -0,0 +1,13 @@
+export declare const appManifestValidator: typeof validate20;
+declare function validate20(data: any, { instancePath, parentData, parentDataProperty, rootData, dynamicAnchors }?: {
+    dynamicAnchors?: {} | undefined;
+    instancePath?: string | undefined;
+    rootData?: any;
+}): boolean;
+export declare const legacyAppManifestValidator: typeof validate47;
+declare function validate47(data: any, { instancePath, parentData, parentDataProperty, rootData, dynamicAnchors }?: {
+    dynamicAnchors?: {} | undefined;
+    instancePath?: string | undefined;
+    rootData?: any;
+}): boolean;
+export {};