@substrat-run/control-plane-client 0.1.0 → 0.1.2

package/dist/transport.js

@@ -0,0 +1,222 @@
+import { problemDetail } from '@substrat-run/contracts';
+import { DEV_ACTOR_HEADER, SERVICE_TOKEN_HEADER } from './headers.js';
+/** A non-2xx (or unreachable) control-plane response. `status` is 0 on a transport error. */
+export class ControlPlaneError extends Error {
+    status;
+    probe;
+    constructor(status, message, 
+    /**
+     * The provider's own answer, when the plane refused a connect because the credential
+     * was rejected upstream (#605, 422). Carried so a console can show WHY — "Scrive:
+     * No valid access credentials were provided" — instead of a generic save failure.
+     */
+    probe, detail = {}) {
+        super(message, 'cause' in detail ? { cause: detail.cause } : undefined);
+        this.status = status;
+        this.probe = probe;
+        this.name = 'ControlPlaneError';
+        this.body = detail.body;
+        this.statusText = detail.statusText;
+        this.headers = detail.headers;
+        this.url = detail.url;
+        this.malformed = detail.malformed === true;
+    }
+    /** The refusal's raw body text; `undefined` for an error the transport did not read off a response. */
+    body;
+    statusText;
+    headers;
+    url;
+    /** True for a 2xx answer that was not the JSON the route promises. */
+    malformed;
+}
+/**
+ * Whether a failed call proves it changed nothing (#2010): the plane or the deployment behind it
+ * refused it (a 4xx), or that deployment does not have the route (501). Any other failure — a
+ * 502 that lost the deployment's answer, another 5xx, a malformed 2xx, a transport error
+ * (status 0), or no status at all — may follow a write that landed, so what it did is unknown
+ * and the caller reads the state before retrying. Takes any error carrying a numeric `status`,
+ * so an app's own error class for the same responses reads the same way.
+ */
+export function provesNothingChanged(error) {
+    const status = error?.status;
+    return typeof status === 'number' && ((status >= 400 && status < 500) || status === 501);
+}
+/**
+ * The caller built a request the client refuses to send — today, one that would carry two
+ * credentials. A mistake in how the client was used, raised BEFORE anything leaves, so it is
+ * not a `ControlPlaneError` (no plane answered, none was found unreachable) and not a
+ * `TypeError` either: `fetch` itself throws `TypeError` for a network failure, and a caller
+ * that retries on transport errors must be able to tell the two apart by class.
+ */
+export class ControlPlaneUsageError extends Error {
+    constructor(message) {
+        super(message);
+        this.name = 'ControlPlaneUsageError';
+    }
+}
+export class ControlPlaneTransport {
+    baseUrl;
+    actor;
+    serviceToken;
+    fetchImpl;
+    credentials;
+    extraHeaders;
+    contentType;
+    onResponse;
+    constructor(options) {
+        this.baseUrl = options.baseUrl.replace(/\/$/, '');
+        this.actor = options.actor;
+        this.serviceToken = options.serviceToken;
+        this.credentials = options.credentials;
+        this.extraHeaders = options.headers;
+        this.contentType = options.contentType === undefined ? 'application/json' : options.contentType;
+        this.onResponse = options.onResponse;
+        // Resolved at CALL time, and called as a function on the global: workerd throws
+        // "Illegal invocation" if `fetch` is called with a `this` other than the global scope
+        // (which `this.fetchImpl(...)` would otherwise set to this instance), and reading
+        // `globalThis.fetch` per call — rather than binding it once here — lets a caller swap it
+        // afterwards. An injected fetch is used as-is.
+        this.fetchImpl = options.fetch ?? ((input, init) => globalThis.fetch(input, init));
+    }
+    /**
+     * One request on the wire, exactly as `send` makes it, and nothing more: the base URL, the
+     * credential and the headers are applied, and the `Response` comes back whatever its status.
+     * A `fetch` rejection propagates unchanged. For a caller that owns its own reading of
+     * the answer — a retry loop, a multipart upload — and wants the transport's addressing and
+     * credentials without its error policy.
+     */
+    async request(path, init) {
+        const res = await this.fetchImpl(`${this.baseUrl}${path}`, {
+            ...init,
+            ...(this.credentials ? { credentials: this.credentials } : {}),
+            headers: this.headersFor(init?.headers),
+        });
+        this.onResponse?.({ status: res.status, headers: res.headers });
+        return res;
+    }
+    /**
+     * The headers one request goes out with, merged through the `Headers` API so that names
+     * compare case-insensitively and every `HeadersInit` shape — a record, a tuple array or a
+     * `Headers` instance — is read the same way. Spreading the call's headers as if they were a
+     * record dropped a `Headers` instance's entries altogether, and let `Content-Type` and
+     * `content-type` ride side by side. Lowest first: the `headers` option, the transport's own
+     * credential, the content type, then the call's own.
+     */
+    headersFor(call) {
+        const merged = new Headers(this.extraHeaders);
+        // One credential per request (#980): a service token identifies the caller as
+        // the plane's service actor and is checked BEFORE the dev-actor stub, so the
+        // actor header would be ignored there — and a dev-only header has no business
+        // leaving a production caller at all. Without a token, the actor header IS the
+        // (local, UNSAFE) credential.
+        //
+        // That holds against the `headers` option too: a client that has a credential of its own
+        // drops BOTH credential headers from the option before applying it, so a stale entry for
+        // the OTHER header cannot ride beside the one the client chose. (Setting only the chosen
+        // one would leave, say, an `x-platform-actor` from the map next to the token.) A client
+        // with none — the CLI, which hands over a resolved map — passes the map through as it is.
+        if (this.serviceToken || this.actor !== null) {
+            merged.delete(SERVICE_TOKEN_HEADER);
+            merged.delete(DEV_ACTOR_HEADER);
+        }
+        if (this.serviceToken)
+            merged.set(SERVICE_TOKEN_HEADER, this.serviceToken);
+        else if (this.actor !== null)
+            merged.set(DEV_ACTOR_HEADER, this.actor);
+        if (this.contentType !== null)
+            merged.set('content-type', this.contentType);
+        // A call that names a credential of its own REPLACES the client's: the other credential
+        // header goes with it, so the request still carries exactly one. (Merging the call's header
+        // over the client's would send both whenever they differ in which header they use.)
+        const callHeaders = new Headers(call);
+        if (callHeaders.has(SERVICE_TOKEN_HEADER) || callHeaders.has(DEV_ACTOR_HEADER)) {
+            merged.delete(SERVICE_TOKEN_HEADER);
+            merged.delete(DEV_ACTOR_HEADER);
+        }
+        callHeaders.forEach((value, name) => merged.set(name, value));
+        // Whatever way it was assembled, two credentials never leave together: a call that names
+        // both, or an option map that carries both to a client with none of its own, is refused
+        // here, before anything is sent, rather than left for the plane to pick between.
+        if (merged.has(SERVICE_TOKEN_HEADER) && merged.has(DEV_ACTOR_HEADER)) {
+            throw new ControlPlaneUsageError(`a request names two credentials (${SERVICE_TOKEN_HEADER} and ${DEV_ACTOR_HEADER}) — send exactly one`);
+        }
+        return Object.fromEntries(merged.entries());
+    }
+    /** The full URL a path is requested at — for a message that names it. */
+    urlFor(path) {
+        return `${this.baseUrl}${path}`;
+    }
+    /**
+     * One request, and the one place a failure is read: a transport error or a non-2xx answer
+     * throws `ControlPlaneError`, so what comes back is always a successful `Response`. A 404
+     * is handed back as-is when the caller allows it.
+     */
+    async send(path, init, allow404 = false) {
+        let res;
+        try {
+            res = await this.request(path, init);
+        }
+        catch (e) {
+            // A refused request is the caller's mistake, not an unreachable plane: it never left.
+            if (e instanceof ControlPlaneUsageError)
+                throw e;
+            // A transport failure (control plane down) must fail closed, not silently
+            // pass — a vertical that cannot reach the authority does not get to run.
+            throw new ControlPlaneError(0, `control plane unreachable: ${e.message}`, undefined, {
+                cause: e,
+                url: this.urlFor(path),
+            });
+        }
+        if (res.status === 404 && allow404)
+            return res;
+        if (!res.ok) {
+            // `problemDetail` is the one reading of a failed body (#971): the RFC 9457
+            // `detail` first, the deprecated `error` duplicate second, both against the
+            // published schema — so this works either way, and keeps working the day the
+            // duplicate is deleted. The status line is the fallback only when the body
+            // said nothing readable.
+            const text = await res.text().catch(() => undefined);
+            let body = null;
+            try {
+                body = JSON.parse(text ?? '');
+            }
+            catch {
+                // Not JSON, or unreadable: `problemDetail(null)` is undefined and the status line speaks.
+            }
+            // A connect the provider refused carries the provider's own answer beside the
+            // sentence (#605) — read off the same parse, so no caller re-reads the body for it.
+            const probe = body !== null && typeof body === 'object' ? body.probe : undefined;
+            throw new ControlPlaneError(res.status, problemDetail(body) ?? `${res.status} ${res.statusText}`, probe, { body: text, statusText: res.statusText, headers: res.headers, url: this.urlFor(path) });
+        }
+        return res;
+    }
+    async call(path, init, allow404 = false) {
+        const res = await this.send(path, init, allow404);
+        if (res.status === 404 && allow404)
+            return undefined;
+        return res.status === 204 ? undefined : (await res.json());
+    }
+    /**
+     * A JSON answer, read from its text so a 2xx that is not JSON says what it was: a
+     * `ControlPlaneError` flagged `malformed`, carrying the `body` and `url` — the common
+     * misconfiguration being a base URL that points at a web page rather than the API. Unlike
+     * `call`, no status is special-cased: a 204 is an empty body, which is not JSON.
+     */
+    async read(path, init) {
+        const res = await this.send(path, init);
+        const text = await res.text();
+        try {
+            return JSON.parse(text);
+        }
+        catch {
+            const url = this.urlFor(path);
+            throw new ControlPlaneError(res.status, `got a non-JSON response from ${url}`, undefined, {
+                body: text,
+                headers: res.headers,
+                url,
+                malformed: true,
+            });
+        }
+    }
+}
+//# sourceMappingURL=transport.js.map

package/dist/transport.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"transport.js","sourceRoot":"","sources":["../src/transport.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAC;AAGxD,OAAO,EAAE,gBAAgB,EAAE,oBAAoB,EAAE,MAAM,cAAc,CAAC;AA0EtE,6FAA6F;AAC7F,MAAM,OAAO,iBAAkB,SAAQ,KAAK;IAE/B,MAAM;IAON,KAAK;IARhB,YACW,MAAc,EACvB,OAAe;IACf;;;;OAIG;IACM,KAAuB,EAChC,MAAM,GAA4B,EAAE;QAEpC,KAAK,CAAC,OAAO,EAAE,OAAO,IAAI,MAAM,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;sBAV/D,MAAM;qBAON,KAAK;QAId,IAAI,CAAC,IAAI,GAAG,mBAAmB,CAAC;QAChC,IAAI,CAAC,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC;QACxB,IAAI,CAAC,UAAU,GAAG,MAAM,CAAC,UAAU,CAAC;QACpC,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC;QAC9B,IAAI,CAAC,GAAG,GAAG,MAAM,CAAC,GAAG,CAAC;QACtB,IAAI,CAAC,SAAS,GAAG,MAAM,CAAC,SAAS,KAAK,IAAI,CAAC;IAC7C,CAAC;IAED,uGAAuG;IAC9F,IAAI,CAAqB;IACzB,UAAU,CAAqB;IAC/B,OAAO,CAAsB;IAC7B,GAAG,CAAqB;IACjC,sEAAsE;IAC7D,SAAS,CAAU;CAC7B;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,oBAAoB,CAAC,KAAc;IACjD,MAAM,MAAM,GAAI,KAAqC,EAAE,MAAM,CAAC;IAC9D,OAAO,OAAO,MAAM,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,IAAI,GAAG,IAAI,MAAM,GAAG,GAAG,CAAC,IAAI,MAAM,KAAK,GAAG,CAAC,CAAC;AAC3F,CAAC;AAED;;;;;;GAMG;AACH,MAAM,OAAO,sBAAuB,SAAQ,KAAK;IAC/C,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,wBAAwB,CAAC;IACvC,CAAC;CACF;AAED,MAAM,OAAO,qBAAqB;IACf,OAAO,CAAS;IAChB,KAAK,CAAgB;IACrB,YAAY,CAAU;IACtB,SAAS,CAA0B;IACnC,WAAW,CAAsB;IACjC,YAAY,CAA0B;IACtC,WAAW,CAAgB;IAC3B,UAAU,CAA8C;IAEzE,YAAY,OAAqC;QAC/C,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QAClD,IAAI,CAAC,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC;QAC3B,IAAI,CAAC,YAAY,GAAG,OAAO,CAAC,YAAY,CAAC;QACzC,IAAI,CAAC,WAAW,GAAG,OAAO,CAAC,WAAW,CAAC;QACvC,IAAI,CAAC,YAAY,GAAG,OAAO,CAAC,OAAO,CAAC;QACpC,IAAI,CAAC,WAAW,GAAG,OAAO,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC;QAChG,IAAI,CAAC,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC;QACrC,gFAAgF;QAChF,sFAAsF;QACtF,kFAAkF;QAClF,yFAAyF;QACzF,+CAA+C;QAC/C,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,KAAK,IAAI,CAAC,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,UAAU,CAAC,KAAK,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC;IACrF,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,OAAO,CAAC,IAAY,EAAE,IAAkB;QAC5C,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,OAAO,GAAG,IAAI,EAAE,EAAE;YACzD,GAAG,IAAI;YACP,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC9D,OAAO,EAAE,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,OAAO,CAAC;SACxC,CAAC,CAAC;QACH,IAAI,CAAC,UAAU,EAAE,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;QAChE,OAAO,GAAG,CAAC;IACb,CAAC;IAED;;;;;;;OAOG;IACK,UAAU,CAAC,IAA6B;QAC9C,MAAM,MAAM,GAAG,IAAI,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QAC9C,8EAA8E;QAC9E,6EAA6E;QAC7E,8EAA8E;QAC9E,+EAA+E;QAC/E,8BAA8B;QAC9B,EAAE;QACF,yFAAyF;QACzF,yFAAyF;QACzF,yFAAyF;QACzF,wFAAwF;QACxF,0FAA0F;QAC1F,IAAI,IAAI,CAAC,YAAY,IAAI,IAAI,CAAC,KAAK,KAAK,IAAI,EAAE,CAAC;YAC7C,MAAM,CAAC,MAAM,CAAC,oBAAoB,CAAC,CAAC;YACpC,MAAM,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC;QAClC,CAAC;QACD,IAAI,IAAI,CAAC,YAAY;YAAE,MAAM,CAAC,GAAG,CAAC,oBAAoB,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC;aACtE,IAAI,IAAI,CAAC,KAAK,KAAK,IAAI;YAAE,MAAM,CAAC,GAAG,CAAC,gBAAgB,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;QACvE,IAAI,IAAI,CAAC,WAAW,KAAK,IAAI;YAAE,MAAM,CAAC,GAAG,CAAC,cAAc,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC;QAC5E,wFAAwF;QACxF,4FAA4F;QAC5F,oFAAoF;QACpF,MAAM,WAAW,GAAG,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;QACtC,IAAI,WAAW,CAAC,GAAG,CAAC,oBAAoB,CAAC,IAAI,WAAW,CAAC,GAAG,CAAC,gBAAgB,CAAC,EAAE,CAAC;YAC/E,MAAM,CAAC,MAAM,CAAC,oBAAoB,CAAC,CAAC;YACpC,MAAM,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC;QAClC,CAAC;QACD,WAAW,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC;QAC9D,yFAAyF;QACzF,wFAAwF;QACxF,iFAAiF;QACjF,IAAI,MAAM,CAAC,GAAG,CAAC,oBAAoB,CAAC,IAAI,MAAM,CAAC,GAAG,CAAC,gBAAgB,CAAC,EAAE,CAAC;YACrE,MAAM,IAAI,sBAAsB,CAC9B,oCAAoC,oBAAoB,QAAQ,gBAAgB,sBAAsB,CACvG,CAAC;QACJ,CAAC;QACD,OAAO,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC;IAC9C,CAAC;IAED,yEAAyE;IACzE,MAAM,CAAC,IAAY;QACjB,OAAO,GAAG,IAAI,CAAC,OAAO,GAAG,IAAI,EAAE,CAAC;IAClC,CAAC;IAED;;;;OAIG;IACO,KAAK,CAAC,IAAI,CAAC,IAAY,EAAE,IAAkB,EAAE,QAAQ,GAAG,KAAK;QACrE,IAAI,GAAa,CAAC;QAClB,IAAI,CAAC;YACH,GAAG,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QACvC,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,sFAAsF;YACtF,IAAI,CAAC,YAAY,sBAAsB;gBAAE,MAAM,CAAC,CAAC;YACjD,0EAA0E;YAC1E,yEAAyE;YACzE,MAAM,IAAI,iBAAiB,CAAC,CAAC,EAAE,8BAA+B,CAAW,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE;gBAC9F,KAAK,EAAE,CAAC;gBACR,GAAG,EAAE,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC;aACvB,CAAC,CAAC;QACL,CAAC;QACD,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,IAAI,QAAQ;YAAE,OAAO,GAAG,CAAC;QAC/C,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YACZ,2EAA2E;YAC3E,4EAA4E;YAC5E,6EAA6E;YAC7E,2EAA2E;YAC3E,yBAAyB;YACzB,MAAM,IAAI,GAAuB,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;YACzE,IAAI,IAAI,GAAY,IAAI,CAAC;YACzB,IAAI,CAAC;gBACH,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;YAChC,CAAC;YAAC,MAAM,CAAC;gBACP,0FAA0F;YAC5F,CAAC;YACD,8EAA8E;YAC9E,oFAAoF;YACpF,MAAM,KAAK,GACT,IAAI,KAAK,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAE,IAAoC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;YACtG,MAAM,IAAI,iBAAiB,CACzB,GAAG,CAAC,MAAM,EACV,aAAa,CAAC,IAAI,CAAC,IAAI,GAAG,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,UAAU,EAAE,EACxD,KAAK,EACL,EAAE,IAAI,EAAE,IAAI,EAAE,UAAU,EAAE,GAAG,CAAC,UAAU,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,GAAG,EAAE,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CACzF,CAAC;QACJ,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC;IAES,KAAK,CAAC,IAAI,CAAI,IAAY,EAAE,IAAkB,EAAE,QAAQ,GAAG,KAAK;QACxE,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAC;QAClD,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,IAAI,QAAQ;YAAE,OAAO,SAAc,CAAC;QAC1D,OAAO,GAAG,CAAC,MAAM,KAAK,GAAG,CAAC,CAAC,CAAE,SAAe,CAAC,CAAC,CAAE,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAO,CAAC;IAC3E,CAAC;IAED;;;;;OAKG;IACO,KAAK,CAAC,IAAI,CAAI,IAAY,EAAE,IAAkB;QACtD,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QACxC,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;QAC9B,IAAI,CAAC;YACH,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAM,CAAC;QAC/B,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;YAC9B,MAAM,IAAI,iBAAiB,CAAC,GAAG,CAAC,MAAM,EAAE,gCAAgC,GAAG,EAAE,EAAE,SAAS,EAAE;gBACxF,IAAI,EAAE,IAAI;gBACV,OAAO,EAAE,GAAG,CAAC,OAAO;gBACpB,GAAG;gBACH,SAAS,EAAE,IAAI;aAChB,CAAC,CAAC;QACL,CAAC;IACH,CAAC;CACF"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@substrat-run/control-plane-client",
-  "version": "0.1.0",
+  "version": "0.1.2",
   "description": "The typed HTTP client for the Substrat control-plane API — one transport (credentials, problem documents, ControlPlaneError) for the CLI, the console and a vertical's connect seam",
   "license": "Apache-2.0",
   "repository": {
@@ -22,23 +22,23 @@
     "dist",
     "LICENSE"
   ],
-  "scripts": {
-    "build": "tsc -p tsconfig.json",
-    "typecheck": "tsc -p tsconfig.json --noEmit && tsc -p tsconfig.test.json --noEmit",
-    "test": "vitest run"
-  },
   "dependencies": {
-    "@substrat-run/contracts": "workspace:^"
+    "@substrat-run/contracts": "^0.137.0"
   },
   "devDependencies": {
-    "@types/node": "catalog:",
-    "typescript": "catalog:",
-    "vitest": "catalog:"
+    "@types/node": "^22.20.4",
+    "typescript": "^7.0.0",
+    "vitest": "^3.2.7"
   },
   "publishConfig": {
     "access": "public"
   },
   "engines": {
     "node": ">=20"
+  },
+  "scripts": {
+    "build": "tsc -p tsconfig.json",
+    "typecheck": "tsc -p tsconfig.json --noEmit && tsc -p tsconfig.test.json --noEmit",
+    "test": "vitest run"
   }
-}
+}