@run402/sdk 3.7.13 → 3.8.0

package/dist/project-auth-classification.js

@@ -0,0 +1,135 @@
+export const PROJECT_OPERATION_AUTH_CLASSIFICATIONS = [
+    {
+        operation: "projects.list",
+        scope: "project",
+        plane: "control",
+        authModes: ["principal", "delegate"],
+        defaultAuthMode: "principal",
+        requiresProjectId: false,
+        mayUseLocalCredentialCache: false,
+    },
+    {
+        operation: "projects.get",
+        scope: "project",
+        plane: "control",
+        authModes: ["principal", "delegate"],
+        defaultAuthMode: "principal",
+        requiresProjectId: true,
+        mayUseLocalCredentialCache: false,
+    },
+    {
+        operation: "projects.use",
+        scope: "project",
+        plane: "control",
+        authModes: ["principal", "delegate"],
+        defaultAuthMode: "principal",
+        requiresProjectId: true,
+        mayUseLocalCredentialCache: false,
+    },
+    {
+        operation: "projects.keys",
+        scope: "project",
+        plane: "local",
+        authModes: ["project_credential"],
+        defaultAuthMode: "project_credential",
+        requiresProjectId: true,
+        mayUseLocalCredentialCache: true,
+        localCredentialMissCode: "PROJECT_CREDENTIAL_NOT_FOUND",
+    },
+    {
+        operation: "projects.sql",
+        scope: "project",
+        plane: "data",
+        authModes: ["service_key"],
+        defaultAuthMode: "project_credential",
+        requiresProjectId: true,
+        mayUseLocalCredentialCache: true,
+        localCredentialMissCode: "PROJECT_CREDENTIAL_NOT_FOUND",
+    },
+    {
+        operation: "projects.rest",
+        scope: "project",
+        plane: "data",
+        authModes: ["anon_key", "service_key"],
+        defaultAuthMode: "project_credential",
+        requiresProjectId: true,
+        mayUseLocalCredentialCache: true,
+        localCredentialMissCode: "PROJECT_CREDENTIAL_NOT_FOUND",
+    },
+    {
+        operation: "domains.add",
+        scope: "project",
+        plane: "control",
+        authModes: ["principal", "delegate", "service_key"],
+        defaultAuthMode: "principal",
+        requiresProjectId: true,
+        mayUseLocalCredentialCache: false,
+    },
+    {
+        operation: "domains.list",
+        scope: "project",
+        plane: "control",
+        authModes: ["principal", "delegate", "service_key"],
+        defaultAuthMode: "principal",
+        requiresProjectId: true,
+        mayUseLocalCredentialCache: false,
+    },
+    {
+        operation: "domains.status",
+        scope: "project",
+        plane: "control",
+        authModes: ["principal", "delegate", "service_key"],
+        defaultAuthMode: "principal",
+        requiresProjectId: true,
+        mayUseLocalCredentialCache: false,
+    },
+    {
+        operation: "domains.delete",
+        scope: "project",
+        plane: "control",
+        authModes: ["principal", "delegate", "service_key"],
+        defaultAuthMode: "principal",
+        requiresProjectId: true,
+        mayUseLocalCredentialCache: false,
+    },
+    {
+        operation: "functions.*",
+        scope: "project",
+        plane: "control",
+        authModes: ["service_key"],
+        defaultAuthMode: "project_credential",
+        requiresProjectId: true,
+        mayUseLocalCredentialCache: true,
+        localCredentialMissCode: "PROJECT_CREDENTIAL_NOT_FOUND",
+    },
+    {
+        operation: "assets.*",
+        scope: "project",
+        plane: "data",
+        authModes: ["service_key"],
+        defaultAuthMode: "project_credential",
+        requiresProjectId: true,
+        mayUseLocalCredentialCache: true,
+        localCredentialMissCode: "PROJECT_CREDENTIAL_NOT_FOUND",
+    },
+    {
+        operation: "jobs.*",
+        scope: "project",
+        plane: "control",
+        authModes: ["service_key"],
+        defaultAuthMode: "project_credential",
+        requiresProjectId: true,
+        mayUseLocalCredentialCache: true,
+        localCredentialMissCode: "PROJECT_CREDENTIAL_NOT_FOUND",
+    },
+];
+export function projectOperationAuthClassification(operation) {
+    return PROJECT_OPERATION_AUTH_CLASSIFICATIONS.find((entry) => {
+        if (entry.operation === operation)
+            return true;
+        if (entry.operation.endsWith(".*"))
+            return operation.startsWith(entry.operation.slice(0, -1));
+        return false;
+    }) ?? null;
+}
+//# sourceMappingURL=project-auth-classification.js.map

package/dist/project-auth-classification.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"project-auth-classification.js","sourceRoot":"","sources":["../src/project-auth-classification.ts"],"names":[],"mappings":"AAmBA,MAAM,CAAC,MAAM,sCAAsC,GAAG;IACpD;QACE,SAAS,EAAE,eAAe;QAC1B,KAAK,EAAE,SAAS;QAChB,KAAK,EAAE,SAAS;QAChB,SAAS,EAAE,CAAC,WAAW,EAAE,UAAU,CAAC;QACpC,eAAe,EAAE,WAAW;QAC5B,iBAAiB,EAAE,KAAK;QACxB,0BAA0B,EAAE,KAAK;KAClC;IACD;QACE,SAAS,EAAE,cAAc;QACzB,KAAK,EAAE,SAAS;QAChB,KAAK,EAAE,SAAS;QAChB,SAAS,EAAE,CAAC,WAAW,EAAE,UAAU,CAAC;QACpC,eAAe,EAAE,WAAW;QAC5B,iBAAiB,EAAE,IAAI;QACvB,0BAA0B,EAAE,KAAK;KAClC;IACD;QACE,SAAS,EAAE,cAAc;QACzB,KAAK,EAAE,SAAS;QAChB,KAAK,EAAE,SAAS;QAChB,SAAS,EAAE,CAAC,WAAW,EAAE,UAAU,CAAC;QACpC,eAAe,EAAE,WAAW;QAC5B,iBAAiB,EAAE,IAAI;QACvB,0BAA0B,EAAE,KAAK;KAClC;IACD;QACE,SAAS,EAAE,eAAe;QAC1B,KAAK,EAAE,SAAS;QAChB,KAAK,EAAE,OAAO;QACd,SAAS,EAAE,CAAC,oBAAoB,CAAC;QACjC,eAAe,EAAE,oBAAoB;QACrC,iBAAiB,EAAE,IAAI;QACvB,0BAA0B,EAAE,IAAI;QAChC,uBAAuB,EAAE,8BAA8B;KACxD;IACD;QACE,SAAS,EAAE,cAAc;QACzB,KAAK,EAAE,SAAS;QAChB,KAAK,EAAE,MAAM;QACb,SAAS,EAAE,CAAC,aAAa,CAAC;QAC1B,eAAe,EAAE,oBAAoB;QACrC,iBAAiB,EAAE,IAAI;QACvB,0BAA0B,EAAE,IAAI;QAChC,uBAAuB,EAAE,8BAA8B;KACxD;IACD;QACE,SAAS,EAAE,eAAe;QAC1B,KAAK,EAAE,SAAS;QAChB,KAAK,EAAE,MAAM;QACb,SAAS,EAAE,CAAC,UAAU,EAAE,aAAa,CAAC;QACtC,eAAe,EAAE,oBAAoB;QACrC,iBAAiB,EAAE,IAAI;QACvB,0BAA0B,EAAE,IAAI;QAChC,uBAAuB,EAAE,8BAA8B;KACxD;IACD;QACE,SAAS,EAAE,aAAa;QACxB,KAAK,EAAE,SAAS;QAChB,KAAK,EAAE,SAAS;QAChB,SAAS,EAAE,CAAC,WAAW,EAAE,UAAU,EAAE,aAAa,CAAC;QACnD,eAAe,EAAE,WAAW;QAC5B,iBAAiB,EAAE,IAAI;QACvB,0BAA0B,EAAE,KAAK;KAClC;IACD;QACE,SAAS,EAAE,cAAc;QACzB,KAAK,EAAE,SAAS;QAChB,KAAK,EAAE,SAAS;QAChB,SAAS,EAAE,CAAC,WAAW,EAAE,UAAU,EAAE,aAAa,CAAC;QACnD,eAAe,EAAE,WAAW;QAC5B,iBAAiB,EAAE,IAAI;QACvB,0BAA0B,EAAE,KAAK;KAClC;IACD;QACE,SAAS,EAAE,gBAAgB;QAC3B,KAAK,EAAE,SAAS;QAChB,KAAK,EAAE,SAAS;QAChB,SAAS,EAAE,CAAC,WAAW,EAAE,UAAU,EAAE,aAAa,CAAC;QACnD,eAAe,EAAE,WAAW;QAC5B,iBAAiB,EAAE,IAAI;QACvB,0BAA0B,EAAE,KAAK;KAClC;IACD;QACE,SAAS,EAAE,gBAAgB;QAC3B,KAAK,EAAE,SAAS;QAChB,KAAK,EAAE,SAAS;QAChB,SAAS,EAAE,CAAC,WAAW,EAAE,UAAU,EAAE,aAAa,CAAC;QACnD,eAAe,EAAE,WAAW;QAC5B,iBAAiB,EAAE,IAAI;QACvB,0BAA0B,EAAE,KAAK;KAClC;IACD;QACE,SAAS,EAAE,aAAa;QACxB,KAAK,EAAE,SAAS;QAChB,KAAK,EAAE,SAAS;QAChB,SAAS,EAAE,CAAC,aAAa,CAAC;QAC1B,eAAe,EAAE,oBAAoB;QACrC,iBAAiB,EAAE,IAAI;QACvB,0BAA0B,EAAE,IAAI;QAChC,uBAAuB,EAAE,8BAA8B;KACxD;IACD;QACE,SAAS,EAAE,UAAU;QACrB,KAAK,EAAE,SAAS;QAChB,KAAK,EAAE,MAAM;QACb,SAAS,EAAE,CAAC,aAAa,CAAC;QAC1B,eAAe,EAAE,oBAAoB;QACrC,iBAAiB,EAAE,IAAI;QACvB,0BAA0B,EAAE,IAAI;QAChC,uBAAuB,EAAE,8BAA8B;KACxD;IACD;QACE,SAAS,EAAE,QAAQ;QACnB,KAAK,EAAE,SAAS;QAChB,KAAK,EAAE,SAAS;QAChB,SAAS,EAAE,CAAC,aAAa,CAAC;QAC1B,eAAe,EAAE,oBAAoB;QACrC,iBAAiB,EAAE,IAAI;QACvB,0BAA0B,EAAE,IAAI;QAChC,uBAAuB,EAAE,8BAA8B;KACxD;CAC+D,CAAC;AAEnE,MAAM,UAAU,kCAAkC,CAAC,SAAiB;IAClE,OAAO,sCAAsC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE;QAC3D,IAAI,KAAK,CAAC,SAAS,KAAK,SAAS;YAAE,OAAO,IAAI,CAAC;QAC/C,IAAI,KAAK,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC;YAAE,OAAO,SAAS,CAAC,UAAU,CAAC,KAAK,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QAC9F,OAAO,KAAK,CAAC;IACf,CAAC,CAAC,IAAI,IAAI,CAAC;AACb,CAAC"}

package/dist/project-credentials.d.ts

@@ -0,0 +1,4 @@
+import type { ProjectKeys } from "./credentials.js";
+import type { Client } from "./kernel.js";
+export declare function requireProjectCredentials(client: Client, projectId: string, context: string): Promise<ProjectKeys>;
+//# sourceMappingURL=project-credentials.d.ts.map

package/dist/project-credentials.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"project-credentials.d.ts","sourceRoot":"","sources":["../src/project-credentials.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AACpD,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAG1C,wBAAsB,yBAAyB,CAC7C,MAAM,EAAE,MAAM,EACd,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,MAAM,GACd,OAAO,CAAC,WAAW,CAAC,CAKtB"}

package/dist/project-credentials.js

@@ -0,0 +1,9 @@
+import { ProjectCredentialNotFound } from "./errors.js";
+export async function requireProjectCredentials(client, projectId, context) {
+    const project = await client.getProjectCredentials(projectId);
+    if (project)
+        return project;
+    const info = client.credentials.getProjectCredentialCacheInfo?.();
+    throw new ProjectCredentialNotFound(projectId, context, (info ?? {}));
+}
+//# sourceMappingURL=project-credentials.js.map

package/dist/project-credentials.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"project-credentials.js","sourceRoot":"","sources":["../src/project-credentials.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,yBAAyB,EAAE,MAAM,aAAa,CAAC;AAExD,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAC7C,MAAc,EACd,SAAiB,EACjB,OAAe;IAEf,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,qBAAqB,CAAC,SAAS,CAAC,CAAC;IAC9D,IAAI,OAAO;QAAE,OAAO,OAAO,CAAC;IAC5B,MAAM,IAAI,GAAG,MAAM,CAAC,WAAW,CAAC,6BAA6B,EAAE,EAAE,CAAC;IAClE,MAAM,IAAI,yBAAyB,CAAC,SAAS,EAAE,OAAO,EAAE,CAAC,IAAI,IAAI,EAAE,CAAuC,CAAC,CAAC;AAC9G,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@run402/sdk",
-  "version": "3.7.13",
+  "version": "3.8.0",
   "description": "Typed TypeScript client for the Run402 API. Kernel shared by the run402-mcp server, the run402 CLI, and user-deployed run402 functions.",
   "type": "module",
   "main": "dist/index.js",