@north-light/sdk 0.3.450 → 0.3.452

package/dist/client.d.ts

@@ -63,6 +63,14 @@ export interface CrouterOptions {
     /** On a cold socket, run `crtr sys daemon start` and retry once. Node only. Defaults to true for a socket, false for `baseURL`. */
     autostart?: boolean;
 }
+/** The namespaces of `Crouter` that only the owner's own daemon serves. A person's app listener answers them `404 unknown operation`. */
+export type OwnerOnly = 'nodes' | 'bash' | 'canvas' | 'crons' | 'structuredRequests' | 'customObjects' | 'human' | 'models' | 'system' | 'auth';
+/** What an app reaches on a person's runtime (the app listener): `Crouter` without the owner-daemon namespaces, `files.download`
+ *  only, and `profiles.list` only. `Crouter` is assignable to it, so a function that takes `AppClient` takes either. */
+export type AppClient = Omit<Crouter, OwnerOnly | 'files' | 'profiles'> & {
+    readonly files: Pick<Files, 'download'>;
+    readonly profiles: Pick<Crouter['profiles'], 'list'>;
+};
 /**
  * The client, and the only class an application constructs. Each namespace below wraps a
  * family of daemon routes; `request` is the escape hatch for a route with no wrapper.

package/dist/index.d.ts

@@ -1,5 +1,5 @@
 export { Crouter as default, Crouter } from './client.js';
-export type { CrouterOptions } from './client.js';
+export type { AppClient, CrouterOptions, OwnerOnly } from './client.js';
 export { NodeStream } from './resources/node-stream.js';
 export { RunStream } from './resources/run-stream.js';
 export { CustomObjects } from './resources/custom-objects.js';

package/dist/oauth/index.d.ts

@@ -1,6 +1,6 @@
 import { type JWK } from 'jose';
 import { type IdTokenClaims } from '@north-light/identity';
-import { Crouter, type CrouterOptions } from '../client.js';
+import { type AppClient, type CrouterOptions } from '../client.js';
 import { RunWatcher, type RunWatchOptions } from '../resources/run-watcher.js';
 import { GrantWatcher, type GrantWatchOptions } from '../resources/grant-watcher.js';
 import { type Refusal } from './refusal.js';
@@ -104,9 +104,14 @@ export interface OAuth2Options {
      */
     timeoutMs?: number;
 }
-/** A runtime client on one person's stored connection (`oauth.client(userId)`): a `Crouter` that refreshes its
- *  token through the `OAuth2Client`'s store, plus whose connection it is and the runtime it calls. */
-export declare class ConnectedCrouter extends Crouter {
+/** The class `ConnectedCrouter` extends: `Crouter`'s implementation under the type of what a person's app listener serves. */
+declare const AppCrouter: new (options: CrouterOptions) => AppClient;
+/** A runtime client on one person's stored connection (`oauth.client(userId)`): an `AppClient` that refreshes its
+ *  token through the `OAuth2Client`'s store, plus whose connection it is and the runtime it calls. It offers only what
+ *  the person's app listener serves. The owner-daemon namespaces (`nodes`, `crons`, `canvas`, …) are absent from its
+ *  type and throw `CrouterError` if reached anyway; `files` is `download` only and `profiles` is `list` only.
+ *  `request` still sends any route. */
+export declare class ConnectedCrouter extends AppCrouter {
     /** The person whose connection this client uses (`user:<id>`). */
     readonly userId: string;
     /** The person's runtime URL this client calls, as the stored connection named it. */

package/dist/oauth/index.js

@@ -62,9 +62,15 @@ function httpsUrl(value) {
         return undefined;
     }
 }
-/** A runtime client on one person's stored connection (`oauth.client(userId)`): a `Crouter` that refreshes its
- *  token through the `OAuth2Client`'s store, plus whose connection it is and the runtime it calls. */
-export class ConnectedCrouter extends Crouter {
+const OWNER_ONLY = ['nodes', 'bash', 'canvas', 'crons', 'structuredRequests', 'customObjects', 'human', 'models', 'system', 'auth'];
+/** The class `ConnectedCrouter` extends: `Crouter`'s implementation under the type of what a person's app listener serves. */
+const AppCrouter = Crouter;
+/** A runtime client on one person's stored connection (`oauth.client(userId)`): an `AppClient` that refreshes its
+ *  token through the `OAuth2Client`'s store, plus whose connection it is and the runtime it calls. It offers only what
+ *  the person's app listener serves. The owner-daemon namespaces (`nodes`, `crons`, `canvas`, …) are absent from its
+ *  type and throw `CrouterError` if reached anyway; `files` is `download` only and `profiles` is `list` only.
+ *  `request` still sends any route. */
+export class ConnectedCrouter extends AppCrouter {
     /** The person whose connection this client uses (`user:<id>`). */
     userId;
     /** The person's runtime URL this client calls, as the stored connection named it. */
@@ -73,6 +79,14 @@ export class ConnectedCrouter extends Crouter {
         super({ ...options, baseURL: connection.runtimeUrl });
         this.userId = connection.userId;
         this.runtimeUrl = connection.runtimeUrl;
+        for (const name of OWNER_ONLY) {
+            Object.defineProperty(this, name, { configurable: true, get() {
+                    throw new CrouterError(`client.${name} is not served on an app's runtime connection; it belongs to the owner's own daemon (new Crouter() on its socket)`);
+                } });
+        }
+        const { files, profiles } = this;
+        Object.defineProperty(this, 'files', { value: { download: files.download.bind(files) } });
+        Object.defineProperty(this, 'profiles', { value: { list: profiles.list } });
     }
 }
 /** The default deadline of one directory operation (`OAuth2Options.timeoutMs`): a discovery read is forgotten when it passes. */

package/dist/resources/forward.d.ts

@@ -1,7 +1,7 @@
-import type { Crouter } from '../client.js';
+import type { AppClient } from '../client.js';
 /** Native EventSource sends Last-Event-ID on reconnect; it takes precedence over the URL cursor. */
 export declare function cursorFromRequest(request: Request): number;
-export declare function forwardRunEvents(crouter: Crouter, runId: string, options: {
+export declare function forwardRunEvents(crouter: AppClient, runId: string, options: {
     after: number;
     signal?: AbortSignal;
 }): Response;

package/dist/resources/grant-watcher.d.ts

@@ -1,5 +1,5 @@
 import type { GrantGetDTO } from '@north-light/api';
-import type { Crouter } from '../client.js';
+import type { AppClient } from '../client.js';
 /** One grant reading `GrantWatcher` hands to `onChanged`. `previous` is the grant last delivered for this user in this
  *  process, or `null` on the first delivery (also after a restart, or after the user left and re-entered `users()`). */
 export interface GrantChanged {
@@ -46,7 +46,7 @@ export declare class GrantWatcher {
     /** Users whose last held read answered at once with the same version: their next turn pauses first. */
     private readonly unheld;
     private readonly follower;
-    constructor(open: (userId: string) => Promise<Crouter>, options: GrantWatchOptions);
+    constructor(open: (userId: string) => Promise<AppClient>, options: GrantWatchOptions);
     /** Read `users()` and begin following; sweeps repeat every `sweepMs` until `stop()`. Resolves after the first sweep. */
     start(): Promise<void>;
     /** Sweep now instead of waiting for `sweepMs`, for example right after the app starts waiting on someone. */

package/dist/resources/run-watcher.d.ts

@@ -1,4 +1,4 @@
-import type { Crouter } from '../client.js';
+import type { AppClient } from '../client.js';
 import type { RunActivity, RunObject } from './runs.js';
 /** A run the app is still waiting on: whose runtime holds it, and its id. `pending()` returns these from the app's own rows. */
 export interface PendingRun {
@@ -87,7 +87,7 @@ export declare class RunWatcher {
     /** Runs that rested and were delivered: re-read only on sweeps. */
     private readonly resting;
     private readonly follower;
-    constructor(open: (userId: string) => Promise<Crouter>, options: RunWatchOptions);
+    constructor(open: (userId: string) => Promise<AppClient>, options: RunWatchOptions);
     private get running();
     /** Read `pending()` and begin following; sweeps repeat every `sweepMs` until `stop()`. Resolves after the first sweep. */
     start(): Promise<void>;

package/dist/version.d.ts

@@ -1,5 +1,5 @@
 /** This SDK's release version. Informational only: compatibility is the contract level, not this number. */
-export declare const SDK_VERSION = "0.3.450";
+export declare const SDK_VERSION = "0.3.452";
 /** The release sent in `Crouter-Minimum-Runtime-Version` on every request. It is frozen, so a runtime from before the
  *  contract level existed (which only knows this header) refuses this SDK, while every later runtime accepts it. */
 export declare const LEGACY_FLOOR = "0.3.423";

package/dist/version.js

@@ -1,6 +1,6 @@
 // SDK_VERSION is written by scripts/release-version.mjs on every release; do not edit by hand.
 /** This SDK's release version. Informational only: compatibility is the contract level, not this number. */
-export const SDK_VERSION = '0.3.450';
+export const SDK_VERSION = '0.3.452';
 // LEGACY_FLOOR is written once by `scripts/contract.mjs release`, at the first release that carries the contract level
 // (the `0.0.0` placeholder is replaced there and never again); do not edit by hand.
 /** The release sent in `Crouter-Minimum-Runtime-Version` on every request. It is frozen, so a runtime from before the

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@north-light/sdk",
-  "version": "0.3.450",
-  "crouterContract": "1.2",
+  "version": "0.3.452",
+  "crouterContract": "1.3",
   "description": "Typed Node and browser client for running crouter agents through the crtrd /v1 API.",
   "type": "module",
   "main": "./dist/index.js",
@@ -41,8 +41,8 @@
     "prepublishOnly": "node -e \"if (process.env.npm_config_tag !== 'next') { console.error('@north-light/sdk publishes only with --tag next; scripts/promote-sdk.mjs is the only mover of latest.'); process.exit(1); }\""
   },
   "dependencies": {
-    "@north-light/api": "0.3.450",
-    "@north-light/identity": "0.3.450",
+    "@north-light/api": "0.3.452",
+    "@north-light/identity": "0.3.452",
     "jose": "^6.2.1"
   },
   "peerDependencies": {