@tinycloud/operations 0.3.4-beta.0 → 0.3.4-beta.2

package/dist/cli-runtime.cjs

@@ -1256,10 +1256,14 @@ async function responseError(service, message, response) {
     }
   } catch {
   }
-  return wrapError(
+  const error = wrapError(
     service,
     new Error(`${message}: ${response.status} ${detail}`)
   );
+  return {
+    ...error,
+    meta: { ...error.meta, status: response.status, statusText: response.statusText }
+  };
 }
 function isAbortError(error) {
   return error instanceof DOMException && error.name === "AbortError";
@@ -3079,7 +3083,7 @@ var init_dist2 = __esm({
           return err(
             storageQuotaExceededError(
               "kv",
-              `Storage quota exceeded for key "${key}": ${errorText}`,
+              `Storage quota exceeded for key ${JSON.stringify(key)}: ${errorText}`,
               {
                 status: response.status,
                 ...quotaInfo ? { usedBytes: quotaInfo.usedBytes, limitBytes: quotaInfo.limitBytes } : {}
@@ -3092,7 +3096,7 @@ var init_dist2 = __esm({
           return err(
             storageLimitReachedError(
               "kv",
-              `Storage limit reached for key "${key}": ${errorText}`,
+              `Storage limit reached for key ${JSON.stringify(key)}: ${errorText}`,
               {
                 status: response.status,
                 ...quotaInfo ? { usedBytes: quotaInfo.usedBytes, limitBytes: quotaInfo.limitBytes } : {}
@@ -3378,12 +3382,11 @@ var init_dist2 = __esm({
           if (!response.ok) {
             const errorText = await response.text();
             if (response.status === 401 || response.status === 403) {
-              const { resource, action: requiredAction } = parseAuthError(errorText);
-              return err(authUnauthorizedError("kv", errorText, {
-                status: response.status,
-                ...requiredAction && { requiredAction },
-                ...resource && { resource }
-              }));
+              return this.authorizationFailure(
+                `Failed to batch read ${keys.length} key(s)`,
+                response,
+                errorText
+              );
             }
             if (response.status === 413) {
               return err(serviceError(
@@ -3482,23 +3485,39 @@ var init_dist2 = __esm({
         } catch {
         }
         if (response.status === 401 || response.status === 403) {
-          const { resource, action } = parseAuthError(errorText);
-          return err(authUnauthorizedError("kv", errorText, {
-            status: response.status,
-            ...action && { requiredAction: action },
-            ...resource && { resource }
-          }));
+          return this.authorizationFailure(
+            `Failed to create signed read URL for key ${JSON.stringify(key)}`,
+            response,
+            errorText
+          );
         }
         const code = response.status === 400 ? ErrorCodes.INVALID_INPUT : ErrorCodes.NETWORK_ERROR;
         return err(
           serviceError(
             code,
-            `Failed to create signed read URL for key "${key}": ${response.status} - ${errorText}`,
+            `Failed to create signed read URL for key ${JSON.stringify(key)}: ${response.status} - ${errorText}`,
             "kv",
             { meta: { status: response.status, statusText: response.statusText } }
           )
         );
       }
+      /**
+       * AUTH_UNAUTHORIZED for a 401/403 response. The message keeps the HTTP
+       * status and the server text (`<context>: <status> - <text>`, the same
+       * shape as every other KV failure) so callers that rethrow only the message
+       * still see the status; `meta.status` carries it for typed callers.
+       * Resource/ability hints are parsed from the raw body, never the message.
+       */
+      authorizationFailure(context, response, errorText, extraMeta = {}) {
+        const { resource, action } = parseAuthError(errorText);
+        const detail = errorText.trim().length > 0 ? errorText : response.statusText || "authorization failed";
+        return err(authUnauthorizedError("kv", `${context}: ${response.status} - ${detail}`, {
+          status: response.status,
+          ...action && { requiredAction: action },
+          ...resource && { resource },
+          ...extraMeta
+        }));
+      }
       normalizeSignedReadUrlResponse(data) {
         if (!data || typeof data !== "object") {
           return void 0;
@@ -3541,14 +3560,13 @@ var init_dist2 = __esm({
             if (!response.ok) {
               if (response.status === 401 || response.status === 403) {
                 const errorText2 = await response.text();
-                const { resource, action } = parseAuthError(errorText2);
                 const permissionHint = parsePermissionHintFromErrorText(errorText2);
-                return err(authUnauthorizedError("kv", errorText2, {
-                  status: response.status,
-                  ...action && { requiredAction: action },
-                  ...resource && { resource },
-                  ...permissionHint === void 0 ? {} : { permissionHint }
-                }));
+                return this.authorizationFailure(
+                  `Failed to get key ${JSON.stringify(key)}`,
+                  response,
+                  errorText2,
+                  permissionHint === void 0 ? {} : { permissionHint }
+                );
               }
               if (response.status === 404) {
                 return this.classifyNotFound(response, key);
@@ -3557,7 +3575,7 @@ var init_dist2 = __esm({
               if (response.status === 413) {
                 return err(serviceError(
                   ErrorCodes.KV_RESPONSE_TOO_LARGE,
-                  `KV value at key "${key}" exceeds the requested response limit`,
+                  `KV value at key ${JSON.stringify(key)} exceeds the requested response limit`,
                   "kv",
                   { meta: { status: response.status, statusText: response.statusText } }
                 ));
@@ -3565,7 +3583,7 @@ var init_dist2 = __esm({
               return err(
                 serviceError(
                   ErrorCodes.NETWORK_ERROR,
-                  `Failed to get key "${key}": ${response.status} - ${errorText}`,
+                  `Failed to get key ${JSON.stringify(key)}: ${response.status} - ${errorText}`,
                   "kv",
                   { meta: { status: response.status, statusText: response.statusText } }
                 )
@@ -3621,21 +3639,18 @@ var init_dist2 = __esm({
               }
             );
             if (response.status === 401 || response.status === 403) {
-              const errorText = await response.text();
-              const message = errorText.trim().length > 0 ? errorText : `Failed to put key "${key}": ${response.status} - ${response.statusText || "authorization failed"}`;
-              const { resource, action: requiredAction } = parseAuthError(errorText);
-              return err(authUnauthorizedError("kv", message, {
-                status: response.status,
-                ...requiredAction && { requiredAction },
-                ...resource && { resource }
-              }));
+              return this.authorizationFailure(
+                `Failed to put key ${JSON.stringify(key)}`,
+                response,
+                await response.text()
+              );
             }
             if (!response.ok) {
               const errorText = await response.text();
               if (response.status === 412) {
                 return err(serviceError(
                   ErrorCodes.KV_PRECONDITION_FAILED,
-                  `KV precondition failed for key "${key}"`,
+                  `KV precondition failed for key ${JSON.stringify(key)}`,
                   "kv",
                   { meta: { status: response.status, statusText: response.statusText } }
                 ));
@@ -3643,7 +3658,7 @@ var init_dist2 = __esm({
               if (response.status === 503 && (options?.ifMatch !== void 0 || options?.ifNoneMatch !== void 0)) {
                 return err(serviceError(
                   ErrorCodes.KV_CONFLICT,
-                  `Concurrent KV update conflicted for key "${key}"`,
+                  `Concurrent KV update conflicted for key ${JSON.stringify(key)}`,
                   "kv",
                   { meta: { status: response.status, statusText: response.statusText } }
                 ));
@@ -3659,7 +3674,7 @@ var init_dist2 = __esm({
               return err(
                 serviceError(
                   ErrorCodes.KV_WRITE_FAILED,
-                  `Failed to put key "${key}": ${response.status} - ${errorText}`,
+                  `Failed to put key ${JSON.stringify(key)}: ${response.status} - ${errorText}`,
                   "kv",
                   { meta: { status: response.status, statusText: response.statusText } }
                 )
@@ -3753,12 +3768,11 @@ var init_dist2 = __esm({
                 );
               }
               if (response.status === 401 || response.status === 403) {
-                const { resource, action } = parseAuthError(errorText);
-                return err(authUnauthorizedError("kv", errorText, {
-                  status: response.status,
-                  ...action && { requiredAction: action },
-                  ...resource && { resource }
-                }));
+                return this.authorizationFailure(
+                  `Failed to batch put ${items.length} key(s)`,
+                  response,
+                  errorText
+                );
               }
               const quotaError = this.handleQuotaErrorResponse(
                 response,
@@ -3879,13 +3893,11 @@ var init_dist2 = __esm({
             );
             if (!response.ok) {
               if (response.status === 401) {
-                const errorText2 = await response.text();
-                const { resource, action } = parseAuthError(errorText2);
-                return err(authUnauthorizedError("kv", errorText2, {
-                  status: response.status,
-                  ...action && { requiredAction: action },
-                  ...resource && { resource }
-                }));
+                return this.authorizationFailure(
+                  "Failed to list keys",
+                  response,
+                  await response.text()
+                );
               }
               const errorText = await response.text();
               return err(
@@ -3934,13 +3946,11 @@ var init_dist2 = __esm({
             );
             if (!response.ok) {
               if (response.status === 401) {
-                const errorText2 = await response.text();
-                const { resource, action } = parseAuthError(errorText2);
-                return err(authUnauthorizedError("kv", errorText2, {
-                  status: response.status,
-                  ...action && { requiredAction: action },
-                  ...resource && { resource }
-                }));
+                return this.authorizationFailure(
+                  `Failed to delete key ${JSON.stringify(key)}`,
+                  response,
+                  await response.text()
+                );
               }
               if (response.status === 404) {
                 return this.classifyNotFound(response, key);
@@ -3949,7 +3959,7 @@ var init_dist2 = __esm({
               if (response.status === 412) {
                 return err(serviceError(
                   ErrorCodes.KV_PRECONDITION_FAILED,
-                  `KV precondition failed for key "${key}"`,
+                  `KV precondition failed for key ${JSON.stringify(key)}`,
                   "kv",
                   { meta: { status: response.status, statusText: response.statusText } }
                 ));
@@ -3957,7 +3967,7 @@ var init_dist2 = __esm({
               if (response.status === 503 && options?.ifMatch !== void 0) {
                 return err(serviceError(
                   ErrorCodes.KV_CONFLICT,
-                  `Concurrent KV delete conflicted for key "${key}"`,
+                  `Concurrent KV delete conflicted for key ${JSON.stringify(key)}`,
                   "kv",
                   { meta: { status: response.status, statusText: response.statusText } }
                 ));
@@ -3965,7 +3975,7 @@ var init_dist2 = __esm({
               return err(
                 serviceError(
                   ErrorCodes.NETWORK_ERROR,
-                  `Failed to delete key "${key}": ${response.status} - ${errorText}`,
+                  `Failed to delete key ${JSON.stringify(key)}: ${response.status} - ${errorText}`,
                   "kv",
                   { meta: { status: response.status, statusText: response.statusText } }
                 )
@@ -3998,13 +4008,11 @@ var init_dist2 = __esm({
             );
             if (!response.ok) {
               if (response.status === 401) {
-                const errorText2 = await response.text();
-                const { resource, action } = parseAuthError(errorText2);
-                return err(authUnauthorizedError("kv", errorText2, {
-                  status: response.status,
-                  ...action && { requiredAction: action },
-                  ...resource && { resource }
-                }));
+                return this.authorizationFailure(
+                  `Failed to get metadata for key ${JSON.stringify(key)}`,
+                  response,
+                  await response.text()
+                );
               }
               if (response.status === 404) {
                 return this.classifyNotFound(response, key);
@@ -4013,7 +4021,7 @@ var init_dist2 = __esm({
               return err(
                 serviceError(
                   ErrorCodes.NETWORK_ERROR,
-                  `Failed to get metadata for key "${key}": ${response.status} - ${errorText}`,
+                  `Failed to get metadata for key ${JSON.stringify(key)}: ${response.status} - ${errorText}`,
                   "kv",
                   { meta: { status: response.status, statusText: response.statusText } }
                 )
@@ -7220,9 +7228,12 @@ async function acquireProfileLock(profile, options) {
   const staleAfterMs = options.staleAfterMs ?? DEFAULT_STALE_LOCK_MS;
   const startedAt = Date.now();
   const lockPath = profileLockPath(profile);
-  await (0, import_promises.mkdir)(profilePath(profile), { recursive: true, mode: PRIVATE_DIR_MODE });
-  for (const directory of [tinycloudHomePath(), profilesPath(), profilePath(profile)]) {
-    await (0, import_promises.chmod)(directory, PRIVATE_DIR_MODE);
+  const directory = profilePath(profile);
+  await (0, import_promises.mkdir)(directory, { recursive: true, mode: PRIVATE_DIR_MODE });
+  for (const path of [tinycloudHomePath(), profilesPath(), directory]) {
+    await (0, import_promises.chmod)(path, PRIVATE_DIR_MODE).catch((error) => {
+      if (path !== directory || !isErrno(error, "ENOENT")) throw error;
+    });
   }
   while (true) {
     const token = (0, import_node_crypto.randomUUID)();
@@ -7245,7 +7256,9 @@ async function publishProfileLock(profile, lockPath, token) {
     await (0, import_promises.mkdir)(lockPath, { mode: PRIVATE_DIR_MODE });
   } catch (error) {
     if (isErrno(error, "EEXIST")) return false;
-    throw error;
+    if (!isErrno(error, "ENOENT")) throw error;
+    await (0, import_promises.mkdir)(profilePath(profile), { recursive: true, mode: PRIVATE_DIR_MODE });
+    return false;
   }
   await waitForTestBarrier(TEST_LOCK_PUBLISH_BARRIER_DIR, profile);
   const staged = (0, import_node_path.join)((0, import_node_path.dirname)(lockPath), `.lock-owner-${token}.tmp`);