@north-light/sdk 0.3.459 → 0.3.460

package/dist/crtr.d.ts

@@ -12,9 +12,12 @@ export type CrtrOutcome = {
  | {
     kind: 'not_joined';
     joinStep: string;
-} | {
+}
+/** `unsettled`: crtr may have acted before it failed (it timed out), so the caller cannot assume nothing changed. */
+ | {
     kind: 'failed';
     message: string;
+    unsettled?: true;
 };
 export declare const parseJson: (text: string) => unknown;
 /** Runs `crtr <argv>` once: execFile, no shell, the caller's environment. */

package/dist/crtr.js

@@ -32,7 +32,7 @@ export function runCrtr(argv, timeoutMs) {
             if (!err)
                 return resolve({ kind: 'ok', stdout });
             if (err.killed)
-                return resolve({ kind: 'failed', message: `crtr did not answer within ${seconds(timeoutMs)}.` });
+                return resolve({ kind: 'failed', message: `crtr did not answer within ${seconds(timeoutMs)}.`, unsettled: true });
             const bodies = [errorBody(stdout), errorBody(stderr)];
             const notJoined = bodies.find((body) => (text(body?.error) ?? text(body?.code)) === 'not_joined');
             if (notJoined)

package/dist/keygen-command.js

@@ -64,10 +64,13 @@ async function addKey(app, publicJwk, timeoutMs) {
     const answer = parseJson(outcome.stdout);
     if (typeof answer?.kid !== 'string') {
         const last = outcome.stdout.split('\n').map((line) => line.trim()).filter(Boolean).at(-1);
-        return { kind: 'failed', message: `crtr answered without the added key: ${last ?? '(no output)'}` };
+        return { kind: 'failed', message: `crtr answered without the added key: ${last ?? '(no output)'}`, unsettled: true };
     }
     return { kind: 'added', kid: answer.kid, created: answer.created !== false };
 }
+/** Removes a key file keygen wrote for a key that no app holds, so a rerun is not refused over it. */
+const discardKey = (path) => unlink(path).catch(() => undefined);
+const discarded = (path) => `Removed ${path}, and the public key printed above is not on any app, so don't add it. Fix the above and run keygen again.`;
 /** The `crouter-sdk keygen` command. Returns the process exit code. */
 export async function runKeygen(argv, options = {}) {
     const { path, app, yes } = parseArgs(argv);
@@ -114,11 +117,18 @@ export async function runKeygen(argv, options = {}) {
         return 0;
     }
     if (outcome.kind === 'not_joined') {
-        say([...notJoinedLines('the key was not added', outcome.joinStep), ...manualSteps(path)]);
+        await discardKey(path);
+        say([...notJoinedLines('the key was not added', outcome.joinStep), discarded(path)]);
         return 2;
     }
     if (outcome.kind === 'failed') {
-        say([`Couldn't add the key: ${outcome.message}`, ...manualSteps(path)]);
+        // A timeout may have landed the key, so keep the file; any other refusal means no app holds this key.
+        if (outcome.unsettled) {
+            say([`Couldn't add the key: ${outcome.message}`, ...manualSteps(path)]);
+            return 2;
+        }
+        await discardKey(path);
+        say([`Couldn't add the key: ${outcome.message}`, discarded(path)]);
         return 2;
     }
     say([

package/dist/version.d.ts

@@ -1,5 +1,5 @@
 /** This SDK's release version. Informational only: compatibility is the contract level, not this number. */
-export declare const SDK_VERSION = "0.3.459";
+export declare const SDK_VERSION = "0.3.460";
 /** The release sent in `Crouter-Minimum-Runtime-Version` on every request. It is frozen, so a runtime from before the
  *  contract level existed (which only knows this header) refuses this SDK, while every later runtime accepts it. */
 export declare const LEGACY_FLOOR = "0.3.423";

package/dist/version.js

@@ -1,6 +1,6 @@
 // SDK_VERSION is written by scripts/release-version.mjs on every release; do not edit by hand.
 /** This SDK's release version. Informational only: compatibility is the contract level, not this number. */
-export const SDK_VERSION = '0.3.459';
+export const SDK_VERSION = '0.3.460';
 // LEGACY_FLOOR is written once by `scripts/contract.mjs release`, at the first release that carries the contract level
 // (the `0.0.0` placeholder is replaced there and never again); do not edit by hand.
 /** The release sent in `Crouter-Minimum-Runtime-Version` on every request. It is frozen, so a runtime from before the

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@north-light/sdk",
-  "version": "0.3.459",
+  "version": "0.3.460",
   "crouterContract": "1.5",
   "description": "Typed Node and browser client for running crouter agents through the crtrd /v1 API.",
   "type": "module",
@@ -41,8 +41,8 @@
     "prepublishOnly": "node -e \"if (process.env.npm_config_tag !== 'next') { console.error('@north-light/sdk publishes only with --tag next; scripts/promote-sdk.mjs is the only mover of latest.'); process.exit(1); }\""
   },
   "dependencies": {
-    "@north-light/api": "0.3.459",
-    "@north-light/identity": "0.3.459",
+    "@north-light/api": "0.3.460",
+    "@north-light/identity": "0.3.460",
     "jose": "^6.2.1"
   },
   "peerDependencies": {