@tinycloud/operations 0.4.0-beta.8 → 0.4.0

package/dist/{contract-xMIIMtpF.d.cts → contract-BRwWJpPs.d.cts}

@@ -1,4 +1,4 @@
-declare const OPERATION_ERROR_CODES: readonly ["INPUT_INVALID", "OPERATION_NOT_FOUND", "OPERATION_VERSION_UNSUPPORTED", "PROFILE_NOT_FOUND", "PROFILE_POSTURE_NOT_ALLOWED", "PROFILE_OWNER_OPT_IN_REQUIRED", "SESSION_NOT_FOUND", "PERMISSION_HINT_INVALID", "DELEGATION_ARTIFACT_INVALID", "DELEGATION_EXPIRED", "DELEGATION_AUDIENCE_MISMATCH", "DELEGATION_HOST_MISMATCH", "DELEGATION_REJECTED", "ENCRYPTION_NETWORK_UNRESOLVED", "NODE_UNREACHABLE", "NODE_ERROR", "KV_NOT_FOUND", "KV_PRECONDITION_FAILED", "KV_CONFLICT", "KV_RESPONSE_TOO_LARGE", "SQL_QUERY_INVALID", "SQL_EXECUTION_FAILED", "SQL_RESULT_LIMIT_EXCEEDED", "SQL_VALUE_UNSAFE", "SECRET_READ_FAILED", "SECRET_DECRYPT_FAILED", "OUTPUT_INVALID", "INTERNAL_ERROR"];
+declare const OPERATION_ERROR_CODES: readonly ["INPUT_INVALID", "OPERATION_NOT_FOUND", "OPERATION_VERSION_UNSUPPORTED", "PROFILE_NOT_FOUND", "PROFILE_POSTURE_NOT_ALLOWED", "PROFILE_OWNER_OPT_IN_REQUIRED", "AUTH_REQUIRED", "PERMISSION_DENIED", "SESSION_NOT_FOUND", "PERMISSION_HINT_INVALID", "DELEGATION_ARTIFACT_INVALID", "DELEGATION_EXPIRED", "DELEGATION_AUDIENCE_MISMATCH", "DELEGATION_HOST_MISMATCH", "DELEGATION_REJECTED", "ENCRYPTION_NETWORK_UNRESOLVED", "NODE_UNREACHABLE", "NODE_ERROR", "STORAGE_QUOTA_EXCEEDED", "KV_NOT_FOUND", "KV_PRECONDITION_FAILED", "KV_CONFLICT", "KV_RESPONSE_TOO_LARGE", "SQL_QUERY_INVALID", "SQL_EXECUTION_FAILED", "SQL_RESULT_LIMIT_EXCEEDED", "SQL_VALUE_UNSAFE", "SECRET_READ_FAILED", "SECRET_DECRYPT_FAILED", "OUTPUT_INVALID", "INTERNAL_ERROR"];
 type OperationErrorCode = (typeof OPERATION_ERROR_CODES)[number];
 interface OperationError {
     readonly code: OperationErrorCode;
@@ -25,6 +25,24 @@ interface OperationContextSummary {
     readonly ownerDid?: string;
     readonly space?: string;
 }
+/**
+ * Why a stored grant was not used. A fixed vocabulary: diagnostics never
+ * carry exception text, node responses, URLs or other stored transport data.
+ * `unbound`: the record has no valid request binding where one is required;
+ * `outside_request`: its signed authority exceeds its binding.
+ */
+declare const STORED_GRANT_SKIP_REASONS: readonly ["malformed", "unbound", "outside_request", "host_mismatch", "expired", "cid_mismatch", "authority_invalid", "proof_missing", "proof_invalid", "owner_mismatch", "audience_mismatch", "resources_mismatch", "unsupported", "activation_rejected", "invalid"];
+type StoredGrantSkipReason = typeof STORED_GRANT_SKIP_REASONS[number];
+/**
+ * A non-fatal diagnostic attached to a result. `STORED_GRANT_SKIPPED`: a
+ * stored grant failed validation and gave no authority; `grantCid` is present
+ * only when the stored CID is the CID of the stored authorization bytes.
+ */
+interface OperationWarning {
+    readonly code: "STORED_GRANT_SKIPPED";
+    readonly reason: StoredGrantSkipReason;
+    readonly grantCid?: string;
+}
 /**
  * Capability details are finalized by the authority/artifacts increment. The
  * kernel intentionally preserves them as canonical operation-owned data.
@@ -58,6 +76,7 @@ interface OperationOkResult<O> {
     readonly operation: OperationRef;
     readonly context: OperationContextSummary;
     readonly output: O;
+    readonly warnings?: readonly OperationWarning[];
 }
 interface OperationAuthorityRequiredResult {
     readonly status: "authority_required";
@@ -67,6 +86,7 @@ interface OperationAuthorityRequiredResult {
     readonly request: PermissionRequestArtifact;
     readonly approval: ApprovalAction;
     readonly retry: RetryDescriptor;
+    readonly warnings?: readonly OperationWarning[];
 }
 interface OperationSetupRequiredResult {
     readonly status: "setup_required";
@@ -74,12 +94,14 @@ interface OperationSetupRequiredResult {
     readonly context: OperationContextSummary;
     readonly setup: SetupAction;
     readonly retry: RetryDescriptor;
+    readonly warnings?: readonly OperationWarning[];
 }
 interface OperationErrorResult {
     readonly status: "error";
     readonly operation: OperationRef;
     readonly context: OperationContextSummary;
     readonly error: OperationError;
+    readonly warnings?: readonly OperationWarning[];
 }
 type OperationResult<O> = OperationOkResult<O> | OperationAuthorityRequiredResult | OperationSetupRequiredResult | OperationErrorResult;
 /**
@@ -100,4 +122,4 @@ interface InvocationTarget {
     readonly privateKey?: string;
 }
 
-export type { InvocationTarget as I, OperationOperatorType as O, TinyCloudPosture as T, OperationResult as a, OperationContextSummary as b };
+export type { InvocationTarget as I, OperationOperatorType as O, StoredGrantSkipReason as S, TinyCloudPosture as T, OperationResult as a, OperationContextSummary as b };

package/dist/{contract-xMIIMtpF.d.ts → contract-BRwWJpPs.d.ts}

@@ -1,4 +1,4 @@
-declare const OPERATION_ERROR_CODES: readonly ["INPUT_INVALID", "OPERATION_NOT_FOUND", "OPERATION_VERSION_UNSUPPORTED", "PROFILE_NOT_FOUND", "PROFILE_POSTURE_NOT_ALLOWED", "PROFILE_OWNER_OPT_IN_REQUIRED", "SESSION_NOT_FOUND", "PERMISSION_HINT_INVALID", "DELEGATION_ARTIFACT_INVALID", "DELEGATION_EXPIRED", "DELEGATION_AUDIENCE_MISMATCH", "DELEGATION_HOST_MISMATCH", "DELEGATION_REJECTED", "ENCRYPTION_NETWORK_UNRESOLVED", "NODE_UNREACHABLE", "NODE_ERROR", "KV_NOT_FOUND", "KV_PRECONDITION_FAILED", "KV_CONFLICT", "KV_RESPONSE_TOO_LARGE", "SQL_QUERY_INVALID", "SQL_EXECUTION_FAILED", "SQL_RESULT_LIMIT_EXCEEDED", "SQL_VALUE_UNSAFE", "SECRET_READ_FAILED", "SECRET_DECRYPT_FAILED", "OUTPUT_INVALID", "INTERNAL_ERROR"];
+declare const OPERATION_ERROR_CODES: readonly ["INPUT_INVALID", "OPERATION_NOT_FOUND", "OPERATION_VERSION_UNSUPPORTED", "PROFILE_NOT_FOUND", "PROFILE_POSTURE_NOT_ALLOWED", "PROFILE_OWNER_OPT_IN_REQUIRED", "AUTH_REQUIRED", "PERMISSION_DENIED", "SESSION_NOT_FOUND", "PERMISSION_HINT_INVALID", "DELEGATION_ARTIFACT_INVALID", "DELEGATION_EXPIRED", "DELEGATION_AUDIENCE_MISMATCH", "DELEGATION_HOST_MISMATCH", "DELEGATION_REJECTED", "ENCRYPTION_NETWORK_UNRESOLVED", "NODE_UNREACHABLE", "NODE_ERROR", "STORAGE_QUOTA_EXCEEDED", "KV_NOT_FOUND", "KV_PRECONDITION_FAILED", "KV_CONFLICT", "KV_RESPONSE_TOO_LARGE", "SQL_QUERY_INVALID", "SQL_EXECUTION_FAILED", "SQL_RESULT_LIMIT_EXCEEDED", "SQL_VALUE_UNSAFE", "SECRET_READ_FAILED", "SECRET_DECRYPT_FAILED", "OUTPUT_INVALID", "INTERNAL_ERROR"];
 type OperationErrorCode = (typeof OPERATION_ERROR_CODES)[number];
 interface OperationError {
     readonly code: OperationErrorCode;
@@ -25,6 +25,24 @@ interface OperationContextSummary {
     readonly ownerDid?: string;
     readonly space?: string;
 }
+/**
+ * Why a stored grant was not used. A fixed vocabulary: diagnostics never
+ * carry exception text, node responses, URLs or other stored transport data.
+ * `unbound`: the record has no valid request binding where one is required;
+ * `outside_request`: its signed authority exceeds its binding.
+ */
+declare const STORED_GRANT_SKIP_REASONS: readonly ["malformed", "unbound", "outside_request", "host_mismatch", "expired", "cid_mismatch", "authority_invalid", "proof_missing", "proof_invalid", "owner_mismatch", "audience_mismatch", "resources_mismatch", "unsupported", "activation_rejected", "invalid"];
+type StoredGrantSkipReason = typeof STORED_GRANT_SKIP_REASONS[number];
+/**
+ * A non-fatal diagnostic attached to a result. `STORED_GRANT_SKIPPED`: a
+ * stored grant failed validation and gave no authority; `grantCid` is present
+ * only when the stored CID is the CID of the stored authorization bytes.
+ */
+interface OperationWarning {
+    readonly code: "STORED_GRANT_SKIPPED";
+    readonly reason: StoredGrantSkipReason;
+    readonly grantCid?: string;
+}
 /**
  * Capability details are finalized by the authority/artifacts increment. The
  * kernel intentionally preserves them as canonical operation-owned data.
@@ -58,6 +76,7 @@ interface OperationOkResult<O> {
     readonly operation: OperationRef;
     readonly context: OperationContextSummary;
     readonly output: O;
+    readonly warnings?: readonly OperationWarning[];
 }
 interface OperationAuthorityRequiredResult {
     readonly status: "authority_required";
@@ -67,6 +86,7 @@ interface OperationAuthorityRequiredResult {
     readonly request: PermissionRequestArtifact;
     readonly approval: ApprovalAction;
     readonly retry: RetryDescriptor;
+    readonly warnings?: readonly OperationWarning[];
 }
 interface OperationSetupRequiredResult {
     readonly status: "setup_required";
@@ -74,12 +94,14 @@ interface OperationSetupRequiredResult {
     readonly context: OperationContextSummary;
     readonly setup: SetupAction;
     readonly retry: RetryDescriptor;
+    readonly warnings?: readonly OperationWarning[];
 }
 interface OperationErrorResult {
     readonly status: "error";
     readonly operation: OperationRef;
     readonly context: OperationContextSummary;
     readonly error: OperationError;
+    readonly warnings?: readonly OperationWarning[];
 }
 type OperationResult<O> = OperationOkResult<O> | OperationAuthorityRequiredResult | OperationSetupRequiredResult | OperationErrorResult;
 /**
@@ -100,4 +122,4 @@ interface InvocationTarget {
     readonly privateKey?: string;
 }
 
-export type { InvocationTarget as I, OperationOperatorType as O, TinyCloudPosture as T, OperationResult as a, OperationContextSummary as b };
+export type { InvocationTarget as I, OperationOperatorType as O, StoredGrantSkipReason as S, TinyCloudPosture as T, OperationResult as a, OperationContextSummary as b };