@net-mesh/core 0.19.0 → 0.20.2

package/errors.d.ts

@@ -39,6 +39,17 @@ export declare class RpcCodecError extends RpcError {
 export declare class RpcCancelledError extends RpcError {
     constructor(detail?: string);
 }
+/**
+ * v0.4 capability-auth gate denied the call. The target's signed
+ * `CapabilityAnnouncement` either does not list the requested
+ * `nrpc:<service>` tag, or it lists the tag with allow-lists the
+ * caller does not match. Terminal — NOT retried by the default
+ * retry policy. Only a fresh (more permissive) announcement from
+ * the target can change the verdict.
+ */
+export declare class RpcCapabilityDeniedError extends RpcError {
+    constructor(detail?: string);
+}
 /**
  * Inspect an error's message prefix and return a typed error if it
  * matches the napi binding's contract. Non-matching errors are

package/errors.js

@@ -17,7 +17,7 @@
 // Prefixes mirror `ERR_*_PREFIX` in `bindings/node/src/cortex.rs`
 // and `bindings/node/src/mesh_rpc.rs`. Keep the strings in lockstep.
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.RpcCancelledError = exports.RpcCodecError = exports.RpcTransportError = exports.RpcServerError = exports.RpcTimeoutError = exports.RpcNoRouteError = exports.RpcError = exports.NetDbError = exports.CortexError = void 0;
+exports.RpcCapabilityDeniedError = exports.RpcCancelledError = exports.RpcCodecError = exports.RpcTransportError = exports.RpcServerError = exports.RpcTimeoutError = exports.RpcNoRouteError = exports.RpcError = exports.NetDbError = exports.CortexError = void 0;
 exports.classifyError = classifyError;
 exports.extractMessage = extractMessage;
 const ERR_CORTEX_PREFIX = 'cortex:';
@@ -43,14 +43,15 @@ exports.NetDbError = NetDbError;
 // the napi binding's mesh_rpc.rs::nrpc_err_from_inner emits each
 // variant under a stable kind segment after the `nrpc:` prefix:
 //
-//   nrpc:no_route       -> RpcNoRouteError
-//   nrpc:timeout        -> RpcTimeoutError
-//   nrpc:server_error   -> RpcServerError
-//   nrpc:transport      -> RpcTransportError
-//   nrpc:codec_encode   -> RpcCodecError(direction='encode')
-//   nrpc:codec_decode   -> RpcCodecError(direction='decode')
-//   nrpc:cancelled      -> RpcCancelledError
-//   nrpc:* (anything else) -> RpcError (the base class)
+//   nrpc:no_route           -> RpcNoRouteError
+//   nrpc:timeout            -> RpcTimeoutError
+//   nrpc:server_error       -> RpcServerError
+//   nrpc:transport          -> RpcTransportError
+//   nrpc:codec_encode       -> RpcCodecError(direction='encode')
+//   nrpc:codec_decode       -> RpcCodecError(direction='decode')
+//   nrpc:cancelled          -> RpcCancelledError
+//   nrpc:capability_denied  -> RpcCapabilityDeniedError
+//   nrpc:* (anything else)  -> RpcError (the base class)
 //
 // Catch with `instanceof RpcError` for "any nRPC failure", or
 // drill down to a concrete subclass for specific handling. The
@@ -138,6 +139,22 @@ class RpcCancelledError extends RpcError {
     }
 }
 exports.RpcCancelledError = RpcCancelledError;
+/**
+ * v0.4 capability-auth gate denied the call. The target's signed
+ * `CapabilityAnnouncement` either does not list the requested
+ * `nrpc:<service>` tag, or it lists the tag with allow-lists the
+ * caller does not match. Terminal — NOT retried by the default
+ * retry policy. Only a fresh (more permissive) announcement from
+ * the target can change the verdict.
+ */
+class RpcCapabilityDeniedError extends RpcError {
+    constructor(detail) {
+        super(detail ?? 'rpc capability denied');
+        this.name = 'RpcCapabilityDeniedError';
+        Object.setPrototypeOf(this, RpcCapabilityDeniedError.prototype);
+    }
+}
+exports.RpcCapabilityDeniedError = RpcCapabilityDeniedError;
 /**
  * Inspect an error's message prefix and return a typed error if it
  * matches the napi binding's contract. Non-matching errors are
@@ -203,6 +220,8 @@ function classifyRpcError(msg) {
             return new RpcCodecError(msg, 'decode');
         case 'cancelled':
             return new RpcCancelledError(msg);
+        case 'capability_denied':
+            return new RpcCapabilityDeniedError(msg);
         default:
             return new RpcError(msg);
     }

package/mesh_rpc.js

@@ -316,11 +316,14 @@ function defaultRetryable(err) {
         case 'RpcNoRouteError':
         case 'RpcCodecError':
         case 'RpcCancelledError':
+        case 'RpcCapabilityDeniedError':
             // Cancellation is caller-driven — retrying defeats the
             // point. Pinned by `RpcCancelledError`'s class docstring;
             // pre-TS-migration the predicate fell through to the
             // generic `nrpc:` "retry by default" branch and silently
-            // re-issued cancelled calls.
+            // re-issued cancelled calls. CapabilityDenied is a signed
+            // policy verdict from the target — retry can't change it
+            // until the target publishes a more permissive announcement.
             return false;
         case 'RpcTimeoutError':
         case 'RpcTransportError':
@@ -348,6 +351,8 @@ function defaultRetryable(err) {
         return false;
     if (msg.startsWith('nrpc:cancelled:'))
         return false;
+    if (msg.startsWith('nrpc:capability_denied:'))
+        return false;
     if (msg.startsWith('nrpc:server_error:')) {
         const status = parseStatusFromMessage(msg);
         return (status === STATUS_INTERNAL ||

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@net-mesh/core",
-  "version": "0.19.0",
+  "version": "0.20.2",
   "description": "High-performance, schema-agnostic event bus for AI runtime workloads",
   "main": "index.js",
   "types": "index.d.ts",
@@ -83,13 +83,13 @@
     "node": ">=20"
   },
   "optionalDependencies": {
-    "@net-mesh/core-win32-x64-msvc": "0.19.0",
-    "@net-mesh/core-win32-arm64-msvc": "0.19.0",
-    "@net-mesh/core-darwin-x64": "0.19.0",
-    "@net-mesh/core-darwin-arm64": "0.19.0",
-    "@net-mesh/core-linux-x64-gnu": "0.19.0",
-    "@net-mesh/core-linux-x64-musl": "0.19.0",
-    "@net-mesh/core-linux-arm64-gnu": "0.19.0",
-    "@net-mesh/core-linux-arm64-musl": "0.19.0"
+    "@net-mesh/core-win32-x64-msvc": "0.20.2",
+    "@net-mesh/core-win32-arm64-msvc": "0.20.2",
+    "@net-mesh/core-darwin-x64": "0.20.2",
+    "@net-mesh/core-darwin-arm64": "0.20.2",
+    "@net-mesh/core-linux-x64-gnu": "0.20.2",
+    "@net-mesh/core-linux-x64-musl": "0.20.2",
+    "@net-mesh/core-linux-arm64-gnu": "0.20.2",
+    "@net-mesh/core-linux-arm64-musl": "0.20.2"
   }
 }