@printobserver/sdk 0.2.0 → 0.4.0

package/dist/client.d.ts

@@ -24,9 +24,12 @@ export interface ClientOptions {
     /** Who this client acts as. */
     actor: Actor;
     /**
-     * What authenticates to it. This server requires none of its API callers; a
-     * credential is for a deployment that has put something in front of it that
-     * does.
+     * What authenticates to it. The supervisor serves no versioned operation to a
+     * caller that does not present a credential it admits — the operator's, whose
+     * verifier it is configured with and which `printobserver credential issue`
+     * issues, or the one a supervision turn is handed — and a call it refuses for
+     * that throws `Refused` with status 401. A call whose actor is not the
+     * identity that credential is throws it with status 403.
      */
     credential?: string;
 }

package/dist/client.js

@@ -115,7 +115,9 @@ function refusalText(said) {
 /** The policy's own refusal, as the answer to it carries it. */
 function rejection(status, said) {
     const answer = document(status, said);
-    const decision = answer.record.decision;
+    // An action's answer carries its decision in its record; a spool command's
+    // carries it at the top.
+    const decision = "record" in answer ? answer.record.decision : answer.decision;
     if (typeof decision !== "object" || !("rejected" in decision)) {
         return new Unreadable(status, "the supervisor refused this action and answered a record whose decision is not a refusal");
     }