@suronai/sdk 0.1.34 → 0.1.36

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@suronai/sdk",
-  "version": "0.1.34",
+  "version": "0.1.36",
   "description": "App SDK for Suron — await vault() to load secrets",
   "type": "module",
   "main": "./src/index.js",

package/src/vault.js

@@ -118,15 +118,15 @@ export async function vault(options = {}) {
 
   let privateKey = await fetchKey(apiUrl, requestId);
   decryptEnv(privateKey, configPath);
-  privateKey = "";
-  // Note: JS strings are immutable — there is no way to scrub the value from
-  // heap memory. The reference is dropped here and will be GC'd normally.
+  // JS strings are immutable — assigning "" does not overwrite heap memory.
+  // The reference is dropped here so the GC can reclaim it normally.
+  privateKey = ""; // drop reference
 }
 
 /**
  * Drop-in safe wrapper around vault().
- * Handles all known Suron errors with a console.error + process.exit(1).
- * Unknown errors are re-thrown so the caller still sees them.
+ * Handles all known Suron errors (including SuronRateLimitError) with
+ * a console.error + process.exit(1). Unknown errors are re-thrown.
  *
  * Usage:
  *   import { config } from "@suronai/sdk";
@@ -139,10 +139,11 @@ export async function config(options = {}) {
   try {
     await vault(options);
   } catch (err) {
-    if (err instanceof SuronDeniedError)      { console.error("[suron] Boot denied.");        process.exit(1); }
-    if (err instanceof SuronTimeoutError)     { console.error("[suron] Approval timed out."); process.exit(1); }
-    if (err instanceof SuronConfigError)      { console.error("[suron]", err.message);        process.exit(1); }
-    if (err instanceof SuronAppNotFoundError) { console.error("[suron]", err.message);        process.exit(1); }
+    if (err instanceof SuronDeniedError)      { console.error("[suron] Boot denied.");                    process.exit(1); }
+    if (err instanceof SuronTimeoutError)     { console.error("[suron] Approval timed out.");             process.exit(1); }
+    if (err instanceof SuronRateLimitError)   { console.error("[suron]", err.message);                    process.exit(1); }
+    if (err instanceof SuronConfigError)      { console.error("[suron]", err.message);                    process.exit(1); }
+    if (err instanceof SuronAppNotFoundError) { console.error("[suron]", err.message);                    process.exit(1); }
     throw err;
   }
 }