@riffdb/client 0.2.3 → 0.2.5

package/README.md

@@ -7,8 +7,8 @@ compiler IDs, storage keys, or an authorization bypass.
 ## Install
 
 ```bash
-npm install --save-dev @riffdb/cli@0.2.3
-npm install @riffdb/client@0.2.3
+npm install --save-dev @riffdb/cli@0.2.5
+npm install @riffdb/client@0.2.5
 ```
 
 ## Four-step application story

package/conformance-manifest-v1.json

@@ -3,8 +3,10 @@
   "language": "typescript",
   "artifact": "offline-npm-tree",
   "transport": "retained-rust-driver-host",
-  "platforms": ["linux-x86_64"],
-  "corpus_sha256": "69e9fdcbc350308ceda6fbaf1d97ff65ff6b4598dfe3b37693ed9043a05ca764",
+  "platforms": [
+    "linux-x86_64"
+  ],
+  "corpus_sha256": "57db5444d3e92f6e4b911b4db42c4d265c5dc55cae80c8270a5428dbbd7b6b74",
   "remote_tls": "installed",
   "typed_errors": "installed",
   "read_after_commit": "installed",

package/dist/driver.d.ts

@@ -159,6 +159,7 @@ export interface DriverErrorDetails {
     readonly category: string;
     readonly operation?: string;
     readonly symbolPath: ReadonlyArray<string>;
+    readonly authorizationDiagnostic?: string;
     readonly contractLineage?: string;
     readonly contractVersion?: bigint;
     readonly traceId?: string;

package/dist/driver.js

@@ -50,7 +50,14 @@ export class DriverApplicationError extends Error {
     details;
     name = "DriverApplicationError";
     constructor(details) {
-        super(`${details.code}: ${details.message}`);
+        let text = `${details.code}: ${details.message}`;
+        if (details.symbolPath.length > 0) {
+            text += ` (${details.symbolPath.join(".")})`;
+        }
+        if (details.authorizationDiagnostic !== undefined) {
+            text += ` [diagnostic: ${details.authorizationDiagnostic}]`;
+        }
+        super(text);
         this.details = details;
     }
 }
@@ -940,6 +947,17 @@ function decodeBatchResult(response, expectedTotal, requestedCheckpoint) {
     });
     return { items, checkpoint, total };
 }
+const AUTHORIZATION_DIAGNOSTIC_CODES = new Set([
+    "missing_permission",
+    "scan_budget_exceeded",
+    "tenant_scope_mismatch",
+    "partition_scope_mismatch",
+    "field_visibility_denied",
+    "row_policy_denied",
+    "approval_required",
+    "delegation_exceeds_authority",
+    "inactive_or_stale_capability",
+]);
 function decodeError(response) {
     const code = boundedPattern(response.code, /^[A-Z0-9-]{1,64}$/);
     const category = boundedPattern(response.category, /^[a-z_]{1,64}$/);
@@ -950,6 +968,11 @@ function decodeError(response) {
         throw new Error("RiffDB driver returned invalid error context");
     }
     const symbolPath = response.symbol_path.map((value) => boundedPattern(value, SYMBOL));
+    const authorizationDiagnostic = optionalPattern(response.authorization_diagnostic, SYMBOL);
+    if (authorizationDiagnostic !== undefined &&
+        (code !== "RDB-AUTH-0214" || !AUTHORIZATION_DIAGNOSTIC_CODES.has(authorizationDiagnostic))) {
+        throw new Error("RiffDB driver returned invalid error context");
+    }
     const operation = optionalPattern(response.operation, SYMBOL);
     const contractLineage = optionalPattern(response.contract_lineage, SYMBOL);
     const contractVersion = optionalPositiveBigInt(response.contract_version);
@@ -963,6 +986,7 @@ function decodeError(response) {
     return new DriverApplicationError({
         code, category, symbolPath, message, retryability, recoveryAction,
         outcomeUncertain: response.outcome_uncertain,
+        ...(authorizationDiagnostic === undefined ? {} : { authorizationDiagnostic }),
         ...(operation === undefined ? {} : { operation }),
         ...(contractLineage === undefined ? {} : { contractLineage }),
         ...(contractVersion === undefined ? {} : { contractVersion }),
@@ -1113,7 +1137,7 @@ function validateDriverValue(value, depth) {
         BigInt(boundedPattern(item.value, /^[0-9]{1,20}$/));
         return item;
     }
-    if (type === "string" && typeof item.value === "string" && item.value.length <= 262_144)
+    if (type === "string" && typeof item.value === "string" && Buffer.byteLength(item.value, "utf8") <= 1_048_576)
         return item;
     // Byte values use padded Base64 on this bounded JSON protocol. Their
     // canonical decoded size is checked by the generated facade and service;

package/dist/index.js

@@ -1247,13 +1247,13 @@ function encodeDriverValue(value, schema, budgetPath) {
             return { type: "u64", value: parsed.toString() };
         }
         case "string": {
-            const string = expectBoundedString(value, 262_144);
+            const string = expectBoundedString(value, 1_048_576);
             if (schema.maximumBytes !== undefined && new TextEncoder().encode(string).length > schema.maximumBytes && budgetPath !== undefined) {
                 throw new InputBudgetError("individual_value_bytes", budgetPath);
             }
             return { type: "string", value: string };
         }
-        case "cursor": return { type: "string", value: expectBoundedString(value, 262_144) };
+        case "cursor": return { type: "string", value: expectBoundedString(value, 1_048_576) };
         case "uuid":
             if (typeof value !== "string" || !UUID.test(value))
                 throw new Error("invalid generated RiffDB UUID input");
@@ -1481,7 +1481,7 @@ function decodeDriverValue(value, schema) {
         case "string":
         case "cursor":
             if (value.type === "string")
-                return expectBoundedString(value.value, 262_144);
+                return expectBoundedString(value.value, 1_048_576);
             break;
         case "uuid":
             if (value.type === "uuid" && UUID.test(value.value))
@@ -1693,13 +1693,13 @@ function encodeValue(value, schema, budgetPath) {
         case "enum":
             return { $enum: expectSymbol(value) };
         case "string": {
-            const string = expectBoundedString(value, 262_144);
+            const string = expectBoundedString(value, 1_048_576);
             if (schema.maximumBytes !== undefined && new TextEncoder().encode(string).length > schema.maximumBytes && budgetPath !== undefined) {
                 throw new InputBudgetError("individual_value_bytes", budgetPath);
             }
             return string;
         }
-        case "cursor": return expectBoundedString(value, 262_144);
+        case "cursor": return expectBoundedString(value, 1_048_576);
         case "bool":
             if (typeof value !== "boolean")
                 throw new Error("invalid boolean input");
@@ -1790,7 +1790,7 @@ function canonicalValueEncodedLength(value, schema) {
         case "decimal": return 20;
         case "money": return 23;
         case "string":
-        case "cursor": return 6 + new TextEncoder().encode(expectBoundedString(value, 262_144)).byteLength;
+        case "cursor": return 6 + new TextEncoder().encode(expectBoundedString(value, 1_048_576)).byteLength;
         case "bytes": {
             if (!(value instanceof Uint8Array))
                 throw new Error("invalid generated application input");
@@ -1859,7 +1859,7 @@ function decodeTagged(value) {
         case "i64":
         case "u64": return BigInt(expectDecimal(input.value));
         case "string":
-        case "uuid": return expectBoundedString(input.value, 262_144);
+        case "uuid": return expectBoundedString(input.value, 1_048_576);
         case "enum": return expectSymbol(input.name);
         case "date": return Number(expectDecimal(input.days_since_unix_epoch));
         case "timestamp": return createTimestampValue(BigInt(expectDecimal(input.seconds)), nonnegativeNumber(input.nanos));
@@ -2040,6 +2040,8 @@ function normalizeError(input) {
         output.contractVersion = Number(expectDecimal(input.contract_version));
     if (input.operation_symbol !== undefined)
         output.operationSymbol = input.operation_symbol;
+    if (input.authorization_diagnostic !== undefined)
+        output.authorizationDiagnostic = input.authorization_diagnostic;
     if (input.source_span !== undefined) {
         const span = exactObject(input.source_span);
         output.sourceSpan = { start: Number(expectDecimal(span.start)), end: Number(expectDecimal(span.end)) };
@@ -2117,7 +2119,7 @@ function encodeCliReactiveValue(value, schema) {
             return { type: "u64", value: value.toString() };
         case "string":
         case "cursor":
-            return { type: "string", value: expectBoundedString(value, 262_144) };
+            return { type: "string", value: expectBoundedString(value, 1_048_576) };
         case "uuid":
             if (typeof value !== "string" || !UUID.test(value))
                 return fail();

package/dist/operator.js

@@ -22,14 +22,12 @@ export class OperatorError extends Error {
  */
 export class OperatorTransport {
     #socket;
-    #identity;
     #input = Buffer.alloc(0);
     #pending;
     #nextRequest = 1;
     #closed = false;
-    constructor(socket, identity) {
+    constructor(socket) {
         this.#socket = socket;
-        this.#identity = identity;
         socket.on("data", (chunk) => this.#receive(chunk));
         socket.on("error", () => this.#fail(new Error("RiffDB operator session failed")));
         socket.on("close", () => this.#fail(new Error("RiffDB operator session closed")));
@@ -42,7 +40,7 @@ export class OperatorTransport {
             socket.once("connect", () => { socket.off("error", onError); resolve(); });
             socket.once("error", onError);
         });
-        const transport = new OperatorTransport(socket, identity);
+        const transport = new OperatorTransport(socket);
         try {
             const requestId = transport.#requestId("handshake");
             const response = await transport.#request({

package/package.json

@@ -1 +1 @@
-{"description":"First-party application runtime for the Rust-owned RiffDB driver host","engines":{"node":">=22"},"exports":{".":"./dist/index.js","./operator":"./dist/operator.js"},"files":["dist","README.md","conformance-manifest-v1.json"],"license":"MIT OR Apache-2.0","name":"@riffdb/client","repository":{"type":"git","url":"git+https://github.com/riffdb/riffdb.git"},"type":"module","types":"./dist/index.d.ts","version":"0.2.3"}
+{"description":"First-party application runtime for the Rust-owned RiffDB driver host","engines":{"node":">=22"},"exports":{".":"./dist/index.js","./operator":"./dist/operator.js"},"files":["dist","README.md","conformance-manifest-v1.json"],"license":"MIT OR Apache-2.0","name":"@riffdb/client","repository":{"type":"git","url":"git+https://github.com/riffdb/riffdb.git"},"type":"module","types":"./dist/index.d.ts","version":"0.2.5"}