@parmana/sdk 1.1.0

package/dist/client/TrustRecordApi.d.ts

@@ -0,0 +1,19 @@
+/**
+ * Parmana Trust Record API.
+ *
+ * Retrieve Execution Trust Records.
+ */
+import type { ExecutionTrustRecord } from "../models/index.js";
+import type { Transport } from "../config/Transport.js";
+/**
+ * Trust Record API.
+ */
+export declare class TrustRecordApi {
+    private readonly transport;
+    constructor(transport: Transport);
+    /**
+     * Retrieve an Execution Trust Record.
+     */
+    get(businessTransactionId: string): Promise<ExecutionTrustRecord>;
+}
+//# sourceMappingURL=TrustRecordApi.d.ts.map

package/dist/client/TrustRecordApi.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"TrustRecordApi.d.ts","sourceRoot":"","sources":["../../src/client/TrustRecordApi.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,EACV,oBAAoB,EACrB,MAAM,oBAAoB,CAAC;AAE5B,OAAO,KAAK,EACV,SAAS,EACV,MAAM,wBAAwB,CAAC;AAEhC;;GAEG;AACH,qBAAa,cAAc;IAEvB,OAAO,CAAC,QAAQ,CAAC,SAAS;gBAAT,SAAS,EAAE,SAAS;IAGvC;;OAEG;IACU,GAAG,CACd,qBAAqB,EAAE,MAAM,GAC5B,OAAO,CAAC,oBAAoB,CAAC;CASjC"}

package/dist/client/TrustRecordApi.js

@@ -0,0 +1,25 @@
+/**
+ * Parmana Trust Record API.
+ *
+ * Retrieve Execution Trust Records.
+ */
+/**
+ * Trust Record API.
+ */
+export class TrustRecordApi {
+    transport;
+    constructor(transport) {
+        this.transport = transport;
+    }
+    /**
+     * Retrieve an Execution Trust Record.
+     */
+    async get(businessTransactionId) {
+        const response = await this.transport.send({
+            method: "GET",
+            path: `/trust-records/${businessTransactionId}`,
+        });
+        return response.body;
+    }
+}
+//# sourceMappingURL=TrustRecordApi.js.map

package/dist/client/TrustRecordApi.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"TrustRecordApi.js","sourceRoot":"","sources":["../../src/client/TrustRecordApi.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAUH;;GAEG;AACH,MAAM,OAAO,cAAc;IAEN;IADnB,YACmB,SAAoB;QAApB,cAAS,GAAT,SAAS,CAAW;IACpC,CAAC;IAEJ;;OAEG;IACI,KAAK,CAAC,GAAG,CACd,qBAA6B;QAE7B,MAAM,QAAQ,GACZ,MAAM,IAAI,CAAC,SAAS,CAAC,IAAI,CAAuB;YAC9C,MAAM,EAAE,KAAK;YACb,IAAI,EAAE,kBAAkB,qBAAqB,EAAE;SAChD,CAAC,CAAC;QAEL,OAAO,QAAQ,CAAC,IAAI,CAAC;IACvB,CAAC;CACF"}

package/dist/client/VerificationApi.d.ts

@@ -0,0 +1,27 @@
+/**
+ * Parmana SDK
+ *
+ * Verification API.
+ */
+import type { Verification } from "../models/index.js";
+import type { Transport } from "../config/Transport.js";
+export declare class VerificationApi {
+    private readonly transport;
+    constructor(transport: Transport);
+    /**
+     * Runs a fresh verification of an Execution Trust Record. Maps to
+     * POST /verify. Each call re-verifies the record and appends a new
+     * Verification to its history, distinct from getLatest() (GET
+     * /verification/:id), which reads the most recent one without
+     * re-verifying.
+     */
+    verify(businessTransactionId: string): Promise<Verification>;
+    /**
+     * Returns the latest Verification for a
+     * Business Transaction, without performing a
+     * fresh verification. Maps to GET
+     * /verification/:id.
+     */
+    getLatest(businessTransactionId: string): Promise<Verification>;
+}
+//# sourceMappingURL=VerificationApi.d.ts.map

package/dist/client/VerificationApi.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"VerificationApi.d.ts","sourceRoot":"","sources":["../../src/client/VerificationApi.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,EACV,YAAY,EACb,MAAM,oBAAoB,CAAC;AAE5B,OAAO,KAAK,EACV,SAAS,EACV,MAAM,wBAAwB,CAAC;AAEhC,qBAAa,eAAe;IAExB,OAAO,CAAC,QAAQ,CAAC,SAAS;gBAAT,SAAS,EAAE,SAAS;IAGvC;;;;;;OAMG;IACU,MAAM,CACjB,qBAAqB,EAAE,MAAM,GAC5B,OAAO,CAAC,YAAY,CAAC;IAaxB;;;;;OAKG;IACU,SAAS,CACpB,qBAAqB,EAAE,MAAM,GAC5B,OAAO,CAAC,YAAY,CAAC;CASzB"}

package/dist/client/VerificationApi.js

@@ -0,0 +1,42 @@
+/**
+ * Parmana SDK
+ *
+ * Verification API.
+ */
+export class VerificationApi {
+    transport;
+    constructor(transport) {
+        this.transport = transport;
+    }
+    /**
+     * Runs a fresh verification of an Execution Trust Record. Maps to
+     * POST /verify. Each call re-verifies the record and appends a new
+     * Verification to its history, distinct from getLatest() (GET
+     * /verification/:id), which reads the most recent one without
+     * re-verifying.
+     */
+    async verify(businessTransactionId) {
+        const response = await this.transport.send({
+            method: "POST",
+            path: "/verify",
+            body: {
+                businessTransactionId,
+            },
+        });
+        return response.body;
+    }
+    /**
+     * Returns the latest Verification for a
+     * Business Transaction, without performing a
+     * fresh verification. Maps to GET
+     * /verification/:id.
+     */
+    async getLatest(businessTransactionId) {
+        const response = await this.transport.send({
+            path: `/verification/${businessTransactionId}`,
+            method: "GET",
+        });
+        return response.body;
+    }
+}
+//# sourceMappingURL=VerificationApi.js.map

package/dist/client/VerificationApi.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"VerificationApi.js","sourceRoot":"","sources":["../../src/client/VerificationApi.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAUH,MAAM,OAAO,eAAe;IAEP;IADnB,YACmB,SAAoB;QAApB,cAAS,GAAT,SAAS,CAAW;IACpC,CAAC;IAEJ;;;;;;OAMG;IACI,KAAK,CAAC,MAAM,CACjB,qBAA6B;QAE7B,MAAM,QAAQ,GACZ,MAAM,IAAI,CAAC,SAAS,CAAC,IAAI,CAAe;YACtC,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,SAAS;YACf,IAAI,EAAE;gBACJ,qBAAqB;aACtB;SACF,CAAC,CAAC;QAEL,OAAO,QAAQ,CAAC,IAAI,CAAC;IACvB,CAAC;IAED;;;;;OAKG;IACI,KAAK,CAAC,SAAS,CACpB,qBAA6B;QAE7B,MAAM,QAAQ,GACZ,MAAM,IAAI,CAAC,SAAS,CAAC,IAAI,CAAe;YACtC,IAAI,EAAE,iBAAiB,qBAAqB,EAAE;YAC9C,MAAM,EAAE,KAAK;SACd,CAAC,CAAC;QAEL,OAAO,QAAQ,CAAC,IAAI,CAAC;IACvB,CAAC;CACF"}

package/dist/config/Configuration.d.ts

@@ -0,0 +1,66 @@
+/**
+ * Parmana SDK
+ *
+ * Canonical SDK configuration.
+ *
+ * Configuration defines how the SDK communicates with
+ * the Parmana Runtime.
+ *
+ * Configuration does NOT define:
+ * - policy behavior
+ * - runtime behavior
+ * - authorization rules
+ * - execution behavior
+ * - verification behavior
+ */
+import type { RetryPolicy } from "./RetryPolicy.js";
+import type { Transport } from "./Transport.js";
+/**
+ * Immutable SDK configuration.
+ *
+ * The Parmana Runtime gates every route except GET /health, GET /ready,
+ * GET /openapi.yaml, and GET /documentation behind a caller bearer key
+ * (packages/api/src/middleware/caller-auth.ts). See apiKey below and
+ * /api-reference/authentication.
+ */
+export interface Configuration {
+    /**
+     * Parmana Runtime endpoint.
+     *
+     * Example:
+     * https://runtime.example.com
+     */
+    readonly endpoint: string;
+    /**
+     * Caller bearer key, minted by scripts/generate-api-key.ts.
+     *
+     * Sent as `Authorization: Bearer <apiKey>` on every request. Omit only
+     * against a Runtime started with PARMANA_AUTH_DISABLED=true (local
+     * development only); every other deployment rejects an unauthenticated
+     * request with a 401 before a Business Transaction is even
+     * constructed.
+     */
+    readonly apiKey?: string;
+    /**
+     * Request timeout (milliseconds).
+     *
+     * Default:
+     * 30000
+     */
+    readonly timeout?: number;
+    /**
+     * Retry configuration.
+     */
+    readonly retryPolicy?: RetryPolicy;
+    /**
+     * Transport implementation.
+     *
+     * If omitted, the SDK uses its default HTTP transport.
+     */
+    readonly transport?: Transport;
+    /**
+     * Optional SDK user agent.
+     */
+    readonly userAgent?: string;
+}
+//# sourceMappingURL=Configuration.d.ts.map

package/dist/config/Configuration.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"Configuration.d.ts","sourceRoot":"","sources":["../../src/config/Configuration.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AACpD,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAEhD;;;;;;;GAOG;AACH,MAAM,WAAW,aAAa;IAC5B;;;;;OAKG;IACH,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAE1B;;;;;;;;OAQG;IACH,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IAEzB;;;;;OAKG;IACH,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAE1B;;OAEG;IACH,QAAQ,CAAC,WAAW,CAAC,EAAE,WAAW,CAAC;IAEnC;;;;OAIG;IACH,QAAQ,CAAC,SAAS,CAAC,EAAE,SAAS,CAAC;IAE/B;;OAEG;IACH,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;CAC7B"}

package/dist/config/Configuration.js

@@ -0,0 +1,17 @@
+/**
+ * Parmana SDK
+ *
+ * Canonical SDK configuration.
+ *
+ * Configuration defines how the SDK communicates with
+ * the Parmana Runtime.
+ *
+ * Configuration does NOT define:
+ * - policy behavior
+ * - runtime behavior
+ * - authorization rules
+ * - execution behavior
+ * - verification behavior
+ */
+export {};
+//# sourceMappingURL=Configuration.js.map

package/dist/config/Configuration.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"Configuration.js","sourceRoot":"","sources":["../../src/config/Configuration.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG"}

package/dist/config/RetryPolicy.d.ts

@@ -0,0 +1,66 @@
+/**
+ * Parmana SDK
+ *
+ * Canonical retry policy.
+ *
+ * A RetryPolicy controls how the SDK retries transient
+ * communication failures when interacting with the
+ * Parmana Runtime.
+ *
+ * RetryPolicy does NOT change Runtime behavior.
+ * It affects only SDK communication.
+ */
+/**
+ * Retry backoff strategy.
+ */
+export declare enum RetryStrategy {
+    /**
+     * Constant delay between retry attempts.
+     */
+    FIXED = "FIXED",
+    /**
+     * Exponential backoff.
+     */
+    EXPONENTIAL = "EXPONENTIAL"
+}
+/**
+ * Immutable retry configuration.
+ */
+export interface RetryPolicy {
+    /**
+     * Enables or disables retries.
+     *
+     * Default:
+     * false
+     */
+    readonly enabled?: boolean;
+    /**
+     * Maximum retry attempts.
+     *
+     * Default:
+     * 0
+     */
+    readonly maxAttempts?: number;
+    /**
+     * Initial retry delay in milliseconds.
+     *
+     * Default:
+     * 1000
+     */
+    readonly initialDelayMs?: number;
+    /**
+     * Maximum delay between retries.
+     *
+     * Default:
+     * 30000
+     */
+    readonly maxDelayMs?: number;
+    /**
+     * Retry backoff strategy.
+     *
+     * Default:
+     * EXPONENTIAL
+     */
+    readonly strategy?: RetryStrategy;
+}
+//# sourceMappingURL=RetryPolicy.d.ts.map

package/dist/config/RetryPolicy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"RetryPolicy.d.ts","sourceRoot":"","sources":["../../src/config/RetryPolicy.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH;;GAEG;AACH,oBAAY,aAAa;IACvB;;OAEG;IACH,KAAK,UAAU;IAEf;;OAEG;IACH,WAAW,gBAAgB;CAC5B;AAED;;GAEG;AACH,MAAM,WAAW,WAAW;IAC1B;;;;;OAKG;IACH,QAAQ,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC;IAE3B;;;;;OAKG;IACH,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAE9B;;;;;OAKG;IACH,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;IAEjC;;;;;OAKG;IACH,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAE7B;;;;;OAKG;IACH,QAAQ,CAAC,QAAQ,CAAC,EAAE,aAAa,CAAC;CACnC"}

package/dist/config/RetryPolicy.js

@@ -0,0 +1,27 @@
+/**
+ * Parmana SDK
+ *
+ * Canonical retry policy.
+ *
+ * A RetryPolicy controls how the SDK retries transient
+ * communication failures when interacting with the
+ * Parmana Runtime.
+ *
+ * RetryPolicy does NOT change Runtime behavior.
+ * It affects only SDK communication.
+ */
+/**
+ * Retry backoff strategy.
+ */
+export var RetryStrategy;
+(function (RetryStrategy) {
+    /**
+     * Constant delay between retry attempts.
+     */
+    RetryStrategy["FIXED"] = "FIXED";
+    /**
+     * Exponential backoff.
+     */
+    RetryStrategy["EXPONENTIAL"] = "EXPONENTIAL";
+})(RetryStrategy || (RetryStrategy = {}));
+//# sourceMappingURL=RetryPolicy.js.map

package/dist/config/RetryPolicy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"RetryPolicy.js","sourceRoot":"","sources":["../../src/config/RetryPolicy.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH;;GAEG;AACH,MAAM,CAAN,IAAY,aAUX;AAVD,WAAY,aAAa;IACvB;;OAEG;IACH,gCAAe,CAAA;IAEf;;OAEG;IACH,4CAA2B,CAAA;AAC7B,CAAC,EAVW,aAAa,KAAb,aAAa,QAUxB"}

package/dist/config/Transport.d.ts

@@ -0,0 +1,80 @@
+/**
+ * Parmana SDK
+ *
+ * Canonical transport abstraction.
+ *
+ * A Transport is responsible only for sending requests
+ * to the Parmana Runtime and returning responses.
+ *
+ * It does NOT:
+ * - evaluate policy
+ * - authorize execution
+ * - perform verification
+ * - perform replay
+ * - implement business logic
+ */
+/**
+ * Transport request.
+ */
+export interface TransportRequest {
+    /**
+     * Relative API path.
+     *
+     * Example:
+     * /execute
+     */
+    readonly path: string;
+    /**
+     * HTTP method.
+     */
+    readonly method: "GET" | "POST" | "PUT" | "PATCH" | "DELETE";
+    /**
+     * Optional request body.
+     */
+    readonly body?: unknown;
+    /**
+     * Optional request headers.
+     */
+    readonly headers?: Readonly<Record<string, string>>;
+    /**
+     * HTTP status codes that must be returned as an ordinary
+     * TransportResponse instead of being mapped to a thrown ParmanaError
+     * subclass, because this specific route's response body at that
+     * specific status is not the shared {error, code?} envelope.
+     *
+     * Default: none (every status >= 400 throws). Today exactly one route
+     * needs this: POST /policies/validate returns {valid, errors} — not
+     * {error, code?} — at 400 and 404 (but the shared envelope still
+     * applies to 401, generated by caller-auth middleware before this
+     * route's own handler ever runs). See PolicyApi.validate and
+     * /api-reference/error-handling.
+     */
+    readonly nonThrowingStatuses?: readonly number[];
+}
+/**
+ * Transport response.
+ */
+export interface TransportResponse<T = unknown> {
+    /**
+     * HTTP status code.
+     */
+    readonly status: number;
+    /**
+     * Response headers.
+     */
+    readonly headers: Readonly<Record<string, string>>;
+    /**
+     * Response body.
+     */
+    readonly body: T;
+}
+/**
+ * Canonical SDK transport.
+ */
+export interface Transport {
+    /**
+     * Sends a request to the Parmana Runtime.
+     */
+    send<T = unknown>(request: TransportRequest): Promise<TransportResponse<T>>;
+}
+//# sourceMappingURL=Transport.d.ts.map

package/dist/config/Transport.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"Transport.d.ts","sourceRoot":"","sources":["../../src/config/Transport.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH;;GAEG;AACH,MAAM,WAAW,gBAAgB;IAC/B;;;;;OAKG;IACH,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAEtB;;OAEG;IACH,QAAQ,CAAC,MAAM,EACX,KAAK,GACL,MAAM,GACN,KAAK,GACL,OAAO,GACP,QAAQ,CAAC;IAEb;;OAEG;IACH,QAAQ,CAAC,IAAI,CAAC,EAAE,OAAO,CAAC;IAExB;;OAEG;IACH,QAAQ,CAAC,OAAO,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IAEpD;;;;;;;;;;;;OAYG;IACH,QAAQ,CAAC,mBAAmB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CAClD;AAED;;GAEG;AACH,MAAM,WAAW,iBAAiB,CAAC,CAAC,GAAG,OAAO;IAC5C;;OAEG;IACH,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IAExB;;OAEG;IACH,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IAEnD;;OAEG;IACH,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC;CAClB;AAED;;GAEG;AACH,MAAM,WAAW,SAAS;IACxB;;OAEG;IACH,IAAI,CAAC,CAAC,GAAG,OAAO,EACd,OAAO,EAAE,gBAAgB,GACxB,OAAO,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,CAAC;CAClC"}

package/dist/config/Transport.js

@@ -0,0 +1,17 @@
+/**
+ * Parmana SDK
+ *
+ * Canonical transport abstraction.
+ *
+ * A Transport is responsible only for sending requests
+ * to the Parmana Runtime and returning responses.
+ *
+ * It does NOT:
+ * - evaluate policy
+ * - authorize execution
+ * - perform verification
+ * - perform replay
+ * - implement business logic
+ */
+export {};
+//# sourceMappingURL=Transport.js.map

package/dist/config/Transport.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"Transport.js","sourceRoot":"","sources":["../../src/config/Transport.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG"}

package/dist/errors/AuthenticationError.d.ts

@@ -0,0 +1,12 @@
+import { ParmanaError } from "./ParmanaError.js";
+/**
+ * Raised when the Runtime rejects the request for a missing or invalid
+ * caller bearer key (HTTP 401). See /api-reference/authentication.
+ */
+export declare class AuthenticationError extends ParmanaError {
+    constructor(message: string, options?: {
+        requestId?: string;
+        cause?: unknown;
+    });
+}
+//# sourceMappingURL=AuthenticationError.d.ts.map

package/dist/errors/AuthenticationError.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"AuthenticationError.d.ts","sourceRoot":"","sources":["../../src/errors/AuthenticationError.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,YAAY,EACb,MAAM,mBAAmB,CAAC;AAE3B;;;GAGG;AACH,qBAAa,mBAAoB,SAAQ,YAAY;gBAEjD,OAAO,EAAE,MAAM,EACf,OAAO,CAAC,EAAE;QACR,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,KAAK,CAAC,EAAE,OAAO,CAAC;KACjB;CAkBJ"}

package/dist/errors/AuthenticationError.js

@@ -0,0 +1,21 @@
+import { ErrorCode, ParmanaError, } from "./ParmanaError.js";
+/**
+ * Raised when the Runtime rejects the request for a missing or invalid
+ * caller bearer key (HTTP 401). See /api-reference/authentication.
+ */
+export class AuthenticationError extends ParmanaError {
+    constructor(message, options) {
+        super({
+            code: ErrorCode.AUTHENTICATION_ERROR,
+            message,
+            ...(options?.requestId !== undefined && {
+                requestId: options.requestId,
+            }),
+            ...(options?.cause !== undefined && {
+                cause: options.cause,
+            }),
+        });
+        this.name = "AuthenticationError";
+    }
+}
+//# sourceMappingURL=AuthenticationError.js.map

package/dist/errors/AuthenticationError.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"AuthenticationError.js","sourceRoot":"","sources":["../../src/errors/AuthenticationError.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,SAAS,EACT,YAAY,GACb,MAAM,mBAAmB,CAAC;AAE3B;;;GAGG;AACH,MAAM,OAAO,mBAAoB,SAAQ,YAAY;IACnD,YACE,OAAe,EACf,OAGC;QAED,KAAK,CAAC;YACJ,IAAI,EAAE,SAAS,CAAC,oBAAoB;YAEpC,OAAO;YAEP,GAAG,CAAC,OAAO,EAAE,SAAS,KAAK,SAAS,IAAI;gBACtC,SAAS,EAAE,OAAO,CAAC,SAAS;aAC7B,CAAC;YAEF,GAAG,CAAC,OAAO,EAAE,KAAK,KAAK,SAAS,IAAI;gBAClC,KAAK,EAAE,OAAO,CAAC,KAAK;aACrB,CAAC;SACH,CAAC,CAAC;QAEH,IAAI,CAAC,IAAI,GAAG,qBAAqB,CAAC;IACpC,CAAC;CACF"}

package/dist/errors/AuthorizationError.d.ts

@@ -0,0 +1,31 @@
+import { ParmanaError } from "./ParmanaError.js";
+/**
+ * Raised when the Runtime returns HTTP 403 for a caller that is
+ * authenticated but not permitted to do the specific thing it asked
+ * for. Covers two distinct denials, both intentionally collapsed to
+ * this one SDK error class since both share the same "who you are is
+ * known; you can't do this" shape — distinguish them via `serverCode`/
+ * `message` if needed, not via `instanceof`:
+ * - a caller asserting an authority.principalId it isn't permitted to
+ *   assert (isPrincipalAllowed, packages/api/src/routes/execute.ts and
+ *   transactions.ts) — carries no `code` field of its own.
+ * - a caller invoking a capability (intent.action) it isn't permitted
+ *   to invoke (isCapabilityAllowed.ts) — carries
+ *   `code: "CAPABILITY_NOT_ALLOWED"`, preserved on `serverCode` below.
+ * Distinct from AuthenticationError (401, no valid credential at all).
+ */
+export declare class AuthorizationError extends ParmanaError {
+    /**
+     * The Runtime's own `code` field, when the 403 carried one (currently
+     * only the capability-denied case: "CAPABILITY_NOT_ALLOWED"). Undefined
+     * for the principal-mismatch case, which the Runtime sends with no
+     * `code` at all — see mapHttpErrorResponse.ts for the exact check.
+     */
+    readonly serverCode?: string;
+    constructor(message: string, options?: {
+        requestId?: string;
+        cause?: unknown;
+        serverCode?: string;
+    });
+}
+//# sourceMappingURL=AuthorizationError.d.ts.map

package/dist/errors/AuthorizationError.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"AuthorizationError.d.ts","sourceRoot":"","sources":["../../src/errors/AuthorizationError.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,YAAY,EACb,MAAM,mBAAmB,CAAC;AAE3B;;;;;;;;;;;;;;GAcG;AACH,qBAAa,kBAAmB,SAAQ,YAAY;IAClD;;;;;OAKG;IACH,SAAgB,UAAU,CAAC,EAAE,MAAM,CAAC;gBAGlC,OAAO,EAAE,MAAM,EACf,OAAO,CAAC,EAAE;QACR,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,KAAK,CAAC,EAAE,OAAO,CAAC;QAChB,UAAU,CAAC,EAAE,MAAM,CAAC;KACrB;CAsBJ"}

package/dist/errors/AuthorizationError.js

@@ -0,0 +1,42 @@
+import { ErrorCode, ParmanaError, } from "./ParmanaError.js";
+/**
+ * Raised when the Runtime returns HTTP 403 for a caller that is
+ * authenticated but not permitted to do the specific thing it asked
+ * for. Covers two distinct denials, both intentionally collapsed to
+ * this one SDK error class since both share the same "who you are is
+ * known; you can't do this" shape — distinguish them via `serverCode`/
+ * `message` if needed, not via `instanceof`:
+ * - a caller asserting an authority.principalId it isn't permitted to
+ *   assert (isPrincipalAllowed, packages/api/src/routes/execute.ts and
+ *   transactions.ts) — carries no `code` field of its own.
+ * - a caller invoking a capability (intent.action) it isn't permitted
+ *   to invoke (isCapabilityAllowed.ts) — carries
+ *   `code: "CAPABILITY_NOT_ALLOWED"`, preserved on `serverCode` below.
+ * Distinct from AuthenticationError (401, no valid credential at all).
+ */
+export class AuthorizationError extends ParmanaError {
+    /**
+     * The Runtime's own `code` field, when the 403 carried one (currently
+     * only the capability-denied case: "CAPABILITY_NOT_ALLOWED"). Undefined
+     * for the principal-mismatch case, which the Runtime sends with no
+     * `code` at all — see mapHttpErrorResponse.ts for the exact check.
+     */
+    serverCode;
+    constructor(message, options) {
+        super({
+            code: ErrorCode.AUTHORIZATION_ERROR,
+            message,
+            ...(options?.requestId !== undefined && {
+                requestId: options.requestId,
+            }),
+            ...(options?.cause !== undefined && {
+                cause: options.cause,
+            }),
+        });
+        this.name = "AuthorizationError";
+        if (options?.serverCode !== undefined) {
+            this.serverCode = options.serverCode;
+        }
+    }
+}
+//# sourceMappingURL=AuthorizationError.js.map

package/dist/errors/AuthorizationError.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"AuthorizationError.js","sourceRoot":"","sources":["../../src/errors/AuthorizationError.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,SAAS,EACT,YAAY,GACb,MAAM,mBAAmB,CAAC;AAE3B;;;;;;;;;;;;;;GAcG;AACH,MAAM,OAAO,kBAAmB,SAAQ,YAAY;IAClD;;;;;OAKG;IACa,UAAU,CAAU;IAEpC,YACE,OAAe,EACf,OAIC;QAED,KAAK,CAAC;YACJ,IAAI,EAAE,SAAS,CAAC,mBAAmB;YAEnC,OAAO;YAEP,GAAG,CAAC,OAAO,EAAE,SAAS,KAAK,SAAS,IAAI;gBACtC,SAAS,EAAE,OAAO,CAAC,SAAS;aAC7B,CAAC;YAEF,GAAG,CAAC,OAAO,EAAE,KAAK,KAAK,SAAS,IAAI;gBAClC,KAAK,EAAE,OAAO,CAAC,KAAK;aACrB,CAAC;SACH,CAAC,CAAC;QAEH,IAAI,CAAC,IAAI,GAAG,oBAAoB,CAAC;QAEjC,IAAI,OAAO,EAAE,UAAU,KAAK,SAAS,EAAE,CAAC;YACtC,IAAI,CAAC,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC;QACvC,CAAC;IACH,CAAC;CACF"}

package/dist/errors/ConfigurationError.d.ts

@@ -0,0 +1,11 @@
+import { ParmanaError } from "./ParmanaError.js";
+/**
+ * Raised when SDK configuration is invalid.
+ */
+export declare class ConfigurationError extends ParmanaError {
+    constructor(message: string, options?: {
+        requestId?: string;
+        cause?: unknown;
+    });
+}
+//# sourceMappingURL=ConfigurationError.d.ts.map

package/dist/errors/ConfigurationError.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ConfigurationError.d.ts","sourceRoot":"","sources":["../../src/errors/ConfigurationError.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,YAAY,EACb,MAAM,mBAAmB,CAAC;AAE3B;;GAEG;AACH,qBAAa,kBAAmB,SAAQ,YAAY;gBAEhD,OAAO,EAAE,MAAM,EACf,OAAO,CAAC,EAAE;QACR,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,KAAK,CAAC,EAAE,OAAO,CAAC;KACjB;CAkBJ"}

package/dist/errors/ConfigurationError.js

@@ -0,0 +1,20 @@
+import { ErrorCode, ParmanaError, } from "./ParmanaError.js";
+/**
+ * Raised when SDK configuration is invalid.
+ */
+export class ConfigurationError extends ParmanaError {
+    constructor(message, options) {
+        super({
+            code: ErrorCode.CONFIGURATION_ERROR,
+            message,
+            ...(options?.requestId !== undefined && {
+                requestId: options.requestId,
+            }),
+            ...(options?.cause !== undefined && {
+                cause: options.cause,
+            }),
+        });
+        this.name = "ConfigurationError";
+    }
+}
+//# sourceMappingURL=ConfigurationError.js.map

package/dist/errors/ConfigurationError.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ConfigurationError.js","sourceRoot":"","sources":["../../src/errors/ConfigurationError.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,SAAS,EACT,YAAY,GACb,MAAM,mBAAmB,CAAC;AAE3B;;GAEG;AACH,MAAM,OAAO,kBAAmB,SAAQ,YAAY;IAClD,YACE,OAAe,EACf,OAGC;QAED,KAAK,CAAC;YACJ,IAAI,EAAE,SAAS,CAAC,mBAAmB;YAEnC,OAAO;YAEP,GAAG,CAAC,OAAO,EAAE,SAAS,KAAK,SAAS,IAAI;gBACtC,SAAS,EAAE,OAAO,CAAC,SAAS;aAC7B,CAAC;YAEF,GAAG,CAAC,OAAO,EAAE,KAAK,KAAK,SAAS,IAAI;gBAClC,KAAK,EAAE,OAAO,CAAC,KAAK;aACrB,CAAC;SACH,CAAC,CAAC;QAEH,IAAI,CAAC,IAAI,GAAG,oBAAoB,CAAC;IACnC,CAAC;CACF"}

package/dist/errors/ConflictError.d.ts

@@ -0,0 +1,14 @@
+import { ParmanaError } from "./ParmanaError.js";
+/**
+ * Raised when the Runtime returns HTTP 409: a duplicate
+ * businessTransactionId, or an Execution Trust Record not yet in a state
+ * that permits the requested operation (e.g. Receipt generation before
+ * verification).
+ */
+export declare class ConflictError extends ParmanaError {
+    constructor(message: string, options?: {
+        requestId?: string;
+        cause?: unknown;
+    });
+}
+//# sourceMappingURL=ConflictError.d.ts.map

package/dist/errors/ConflictError.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ConflictError.d.ts","sourceRoot":"","sources":["../../src/errors/ConflictError.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,YAAY,EACb,MAAM,mBAAmB,CAAC;AAE3B;;;;;GAKG;AACH,qBAAa,aAAc,SAAQ,YAAY;gBAE3C,OAAO,EAAE,MAAM,EACf,OAAO,CAAC,EAAE;QACR,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,KAAK,CAAC,EAAE,OAAO,CAAC;KACjB;CAkBJ"}

package/dist/errors/ConflictError.js

@@ -0,0 +1,23 @@
+import { ErrorCode, ParmanaError, } from "./ParmanaError.js";
+/**
+ * Raised when the Runtime returns HTTP 409: a duplicate
+ * businessTransactionId, or an Execution Trust Record not yet in a state
+ * that permits the requested operation (e.g. Receipt generation before
+ * verification).
+ */
+export class ConflictError extends ParmanaError {
+    constructor(message, options) {
+        super({
+            code: ErrorCode.CONFLICT_ERROR,
+            message,
+            ...(options?.requestId !== undefined && {
+                requestId: options.requestId,
+            }),
+            ...(options?.cause !== undefined && {
+                cause: options.cause,
+            }),
+        });
+        this.name = "ConflictError";
+    }
+}
+//# sourceMappingURL=ConflictError.js.map

package/dist/errors/ConflictError.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ConflictError.js","sourceRoot":"","sources":["../../src/errors/ConflictError.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,SAAS,EACT,YAAY,GACb,MAAM,mBAAmB,CAAC;AAE3B;;;;;GAKG;AACH,MAAM,OAAO,aAAc,SAAQ,YAAY;IAC7C,YACE,OAAe,EACf,OAGC;QAED,KAAK,CAAC;YACJ,IAAI,EAAE,SAAS,CAAC,cAAc;YAE9B,OAAO;YAEP,GAAG,CAAC,OAAO,EAAE,SAAS,KAAK,SAAS,IAAI;gBACtC,SAAS,EAAE,OAAO,CAAC,SAAS;aAC7B,CAAC;YAEF,GAAG,CAAC,OAAO,EAAE,KAAK,KAAK,SAAS,IAAI;gBAClC,KAAK,EAAE,OAAO,CAAC,KAAK;aACrB,CAAC;SACH,CAAC,CAAC;QAEH,IAAI,CAAC,IAAI,GAAG,eAAe,CAAC;IAC9B,CAAC;CACF"}