@run402/sdk 4.96.0 → 4.97.0

package/dist/namespaces/credentials.d.ts

@@ -66,9 +66,9 @@ export declare class Credentials {
      * (`POST /projects/v1/:project_id/credentials`).
      *
      * Requires owner membership on the project's owning org PLUS a fresh
-     * step-up, and a delegate can never satisfy it — a scoped agent credential
+     * step-up, and a grant key can never satisfy it — a scoped agent credential
      * must not be able to escalate itself into a permanent root. If you are
-     * running unattended and hold only a delegate, use {@link mintToken}.
+     * running unattended and hold only a grant key, use {@link mintToken}.
      *
      * The returned `secret` is shown ONCE. Persist it before doing anything
      * else; there is no read that returns it, only `rotate()` for a new one.
@@ -117,8 +117,8 @@ export declare class Credentials {
      * Mint a SHORT-LIVED project token (`POST /projects/v1/:project_id/tokens`).
      *
      * This is the cold-restart recovery path, and the one credential call a
-     * delegate CAN make with no human present: an agent that lost its local
-     * state but still holds a delegate gets back to work unattended. There is no
+     * grant key CAN make with no human present: an agent that lost its local
+     * state but still holds a grant key gets back to work unattended. There is no
      * step-up, because there is nobody to prompt; what it hands back expires, so
      * it cannot become a durable root.
      *

package/dist/namespaces/credentials.js

@@ -13,9 +13,9 @@ export class Credentials {
      * (`POST /projects/v1/:project_id/credentials`).
      *
      * Requires owner membership on the project's owning org PLUS a fresh
-     * step-up, and a delegate can never satisfy it — a scoped agent credential
+     * step-up, and a grant key can never satisfy it — a scoped agent credential
      * must not be able to escalate itself into a permanent root. If you are
-     * running unattended and hold only a delegate, use {@link mintToken}.
+     * running unattended and hold only a grant key, use {@link mintToken}.
      *
      * The returned `secret` is shown ONCE. Persist it before doing anything
      * else; there is no read that returns it, only `rotate()` for a new one.
@@ -105,8 +105,8 @@ export class Credentials {
      * Mint a SHORT-LIVED project token (`POST /projects/v1/:project_id/tokens`).
      *
      * This is the cold-restart recovery path, and the one credential call a
-     * delegate CAN make with no human present: an agent that lost its local
-     * state but still holds a delegate gets back to work unattended. There is no
+     * grant key CAN make with no human present: an agent that lost its local
+     * state but still holds a grant key gets back to work unattended. There is no
      * step-up, because there is nobody to prompt; what it hands back expires, so
      * it cannot become a durable root.
      *

package/dist/namespaces/deploy.js

@@ -20,7 +20,7 @@
  */
 import { normalizeEdgeEvidence } from "./edge-evidence.js";
 import { isCiSessionCredentials } from "../ci-credentials.js";
-import { isDelegateCredentials } from "../delegate-credentials.js";
+import { isGrantKeyCredentials } from "../grant-key-credentials.js";
 import { isKnownBinaryContent, isUtf8StringSource } from "../validation.js";
 import { assertCiDeployableSpec } from "./ci.js";
 import { ROUTE_PRICING_NETWORKS, ROUTE_HTTP_METHODS, isModernPlanMigrationDiff, normalizeDeployResolveRequest, } from "./deploy.types.js";
@@ -4062,11 +4062,11 @@ async function uploadInlineCas(client, projectId, bytes, contentType) {
  * recovery.
  */
 async function apikeyHeaders(client, projectId) {
-    // A CI session and a delegate both already authorize these routes via
+    // A CI session and a grant key both already authorize these routes via
     // `Authorization: Bearer`, supplied by the kernel's getAuth. Attaching an
     // apikey beside a bearer mixes credential families on one request, which the
     // kernel explicitly forbids — so stand down and let the bearer carry it.
-    if (isCiClient(client) || isDelegateClient(client))
+    if (isCiClient(client) || isGrantKeyClient(client))
         return {};
     const project = await client.getProject(projectId);
     if (project?.anon_key)
@@ -4122,8 +4122,8 @@ async function mintedAnonToken(client, projectId) {
 function isCiClient(client) {
     return isCiSessionCredentials(client.credentials);
 }
-function isDelegateClient(client) {
-    return isDelegateCredentials(client.credentials);
+function isGrantKeyClient(client) {
+    return isGrantKeyCredentials(client.credentials);
 }
 function makeEmitter(cb) {
     if (!cb)