@riffdb/client 0.2.3 → 0.2.4

package/README.md

@@ -7,8 +7,8 @@ compiler IDs, storage keys, or an authorization bypass.
 ## Install
 
 ```bash
-npm install --save-dev @riffdb/cli@0.2.3
-npm install @riffdb/client@0.2.3
+npm install --save-dev @riffdb/cli@0.2.4
+npm install @riffdb/client@0.2.4
 ```
 
 ## Four-step application story

package/dist/driver.d.ts

@@ -159,6 +159,7 @@ export interface DriverErrorDetails {
     readonly category: string;
     readonly operation?: string;
     readonly symbolPath: ReadonlyArray<string>;
+    readonly authorizationDiagnostic?: string;
     readonly contractLineage?: string;
     readonly contractVersion?: bigint;
     readonly traceId?: string;

package/dist/driver.js

@@ -50,7 +50,14 @@ export class DriverApplicationError extends Error {
     details;
     name = "DriverApplicationError";
     constructor(details) {
-        super(`${details.code}: ${details.message}`);
+        let text = `${details.code}: ${details.message}`;
+        if (details.symbolPath.length > 0) {
+            text += ` (${details.symbolPath.join(".")})`;
+        }
+        if (details.authorizationDiagnostic !== undefined) {
+            text += ` [diagnostic: ${details.authorizationDiagnostic}]`;
+        }
+        super(text);
         this.details = details;
     }
 }
@@ -940,6 +947,17 @@ function decodeBatchResult(response, expectedTotal, requestedCheckpoint) {
     });
     return { items, checkpoint, total };
 }
+const AUTHORIZATION_DIAGNOSTIC_CODES = new Set([
+    "missing_permission",
+    "scan_budget_exceeded",
+    "tenant_scope_mismatch",
+    "partition_scope_mismatch",
+    "field_visibility_denied",
+    "row_policy_denied",
+    "approval_required",
+    "delegation_exceeds_authority",
+    "inactive_or_stale_capability",
+]);
 function decodeError(response) {
     const code = boundedPattern(response.code, /^[A-Z0-9-]{1,64}$/);
     const category = boundedPattern(response.category, /^[a-z_]{1,64}$/);
@@ -950,6 +968,11 @@ function decodeError(response) {
         throw new Error("RiffDB driver returned invalid error context");
     }
     const symbolPath = response.symbol_path.map((value) => boundedPattern(value, SYMBOL));
+    const authorizationDiagnostic = optionalPattern(response.authorization_diagnostic, SYMBOL);
+    if (authorizationDiagnostic !== undefined &&
+        (code !== "RDB-AUTH-0214" || !AUTHORIZATION_DIAGNOSTIC_CODES.has(authorizationDiagnostic))) {
+        throw new Error("RiffDB driver returned invalid error context");
+    }
     const operation = optionalPattern(response.operation, SYMBOL);
     const contractLineage = optionalPattern(response.contract_lineage, SYMBOL);
     const contractVersion = optionalPositiveBigInt(response.contract_version);
@@ -963,6 +986,7 @@ function decodeError(response) {
     return new DriverApplicationError({
         code, category, symbolPath, message, retryability, recoveryAction,
         outcomeUncertain: response.outcome_uncertain,
+        ...(authorizationDiagnostic === undefined ? {} : { authorizationDiagnostic }),
         ...(operation === undefined ? {} : { operation }),
         ...(contractLineage === undefined ? {} : { contractLineage }),
         ...(contractVersion === undefined ? {} : { contractVersion }),

package/dist/index.js

@@ -2040,6 +2040,8 @@ function normalizeError(input) {
         output.contractVersion = Number(expectDecimal(input.contract_version));
     if (input.operation_symbol !== undefined)
         output.operationSymbol = input.operation_symbol;
+    if (input.authorization_diagnostic !== undefined)
+        output.authorizationDiagnostic = input.authorization_diagnostic;
     if (input.source_span !== undefined) {
         const span = exactObject(input.source_span);
         output.sourceSpan = { start: Number(expectDecimal(span.start)), end: Number(expectDecimal(span.end)) };

package/package.json

@@ -1 +1 @@
-{"description":"First-party application runtime for the Rust-owned RiffDB driver host","engines":{"node":">=22"},"exports":{".":"./dist/index.js","./operator":"./dist/operator.js"},"files":["dist","README.md","conformance-manifest-v1.json"],"license":"MIT OR Apache-2.0","name":"@riffdb/client","repository":{"type":"git","url":"git+https://github.com/riffdb/riffdb.git"},"type":"module","types":"./dist/index.d.ts","version":"0.2.3"}
+{"description":"First-party application runtime for the Rust-owned RiffDB driver host","engines":{"node":">=22"},"exports":{".":"./dist/index.js","./operator":"./dist/operator.js"},"files":["dist","README.md","conformance-manifest-v1.json"],"license":"MIT OR Apache-2.0","name":"@riffdb/client","repository":{"type":"git","url":"git+https://github.com/riffdb/riffdb.git"},"type":"module","types":"./dist/index.d.ts","version":"0.2.4"}