@tinycloud/operations 0.5.0-beta.1 → 0.5.0-beta.3

package/dist/{contract-DfyrluLB.d.cts → contract-zRklonbR.d.cts}

@@ -1,4 +1,4 @@
-declare const OPERATION_ERROR_CODES: readonly ["INPUT_INVALID", "OPERATION_NOT_FOUND", "OPERATION_VERSION_UNSUPPORTED", "PROFILE_NOT_FOUND", "PROFILE_POSTURE_NOT_ALLOWED", "PROFILE_OWNER_OPT_IN_REQUIRED", "AUTH_REQUIRED", "PERMISSION_DENIED", "SESSION_NOT_FOUND", "PERMISSION_HINT_INVALID", "DELEGATION_ARTIFACT_INVALID", "DELEGATION_EXPIRED", "DELEGATION_AUDIENCE_MISMATCH", "DELEGATION_HOST_MISMATCH", "DELEGATION_REJECTED", "ENCRYPTION_NETWORK_UNRESOLVED", "NODE_UNREACHABLE", "NODE_ERROR", "STORAGE_QUOTA_EXCEEDED", "KV_NOT_FOUND", "KV_PRECONDITION_FAILED", "KV_CONFLICT", "KV_RESPONSE_TOO_LARGE", "SQL_QUERY_INVALID", "SQL_EXECUTION_FAILED", "SQL_RESULT_LIMIT_EXCEEDED", "SQL_VALUE_UNSAFE", "SECRET_READ_FAILED", "SECRET_DECRYPT_FAILED", "OUTPUT_INVALID", "INTERNAL_ERROR"];
+declare const OPERATION_ERROR_CODES: readonly ["INPUT_INVALID", "OPERATION_NOT_FOUND", "OPERATION_VERSION_UNSUPPORTED", "PROFILE_NOT_FOUND", "PROFILE_POSTURE_NOT_ALLOWED", "PROFILE_OWNER_OPT_IN_REQUIRED", "PROFILE_MIGRATION_REQUIRED", "AUTH_REQUIRED", "PERMISSION_DENIED", "SESSION_NOT_FOUND", "PERMISSION_HINT_INVALID", "DELEGATION_ARTIFACT_INVALID", "DELEGATION_EXPIRED", "DELEGATION_AUDIENCE_MISMATCH", "DELEGATION_HOST_MISMATCH", "DELEGATION_REJECTED", "ENCRYPTION_NETWORK_UNRESOLVED", "NODE_UNREACHABLE", "NODE_ERROR", "STORAGE_QUOTA_EXCEEDED", "KV_NOT_FOUND", "KV_PRECONDITION_FAILED", "KV_CONFLICT", "KV_RESPONSE_TOO_LARGE", "SQL_QUERY_INVALID", "SQL_EXECUTION_FAILED", "SQL_RESULT_LIMIT_EXCEEDED", "SQL_VALUE_UNSAFE", "SECRET_READ_FAILED", "SECRET_DECRYPT_FAILED", "OUTPUT_INVALID", "INTERNAL_ERROR"];
 type OperationErrorCode = (typeof OPERATION_ERROR_CODES)[number];
 interface OperationError {
     readonly code: OperationErrorCode;
@@ -29,9 +29,12 @@ interface OperationContextSummary {
  * Why a stored grant was not used. A fixed vocabulary: diagnostics never
  * carry exception text, node responses, URLs or other stored transport data.
  * `unbound`: the record has no valid request binding where one is required;
- * `outside_request`: its signed authority exceeds its binding.
+ * `outside_request`: its signed authority exceeds its binding;
+ * `activation_unavailable`: the node could not be reached, timed out, was
+ * rate limited or failed (transport, 408, 429, 5xx) while activating it;
+ * `activation_unauthenticated`: the node answered 401 while activating it.
  */
-declare const STORED_GRANT_SKIP_REASONS: readonly ["malformed", "unbound", "outside_request", "host_mismatch", "expired", "cid_mismatch", "authority_invalid", "proof_missing", "proof_invalid", "owner_mismatch", "audience_mismatch", "resources_mismatch", "unsupported", "activation_rejected", "invalid"];
+declare const STORED_GRANT_SKIP_REASONS: readonly ["malformed", "unbound", "outside_request", "host_mismatch", "expired", "cid_mismatch", "authority_invalid", "proof_missing", "proof_invalid", "owner_mismatch", "audience_mismatch", "resources_mismatch", "unsupported", "activation_rejected", "activation_unavailable", "activation_unauthenticated", "invalid"];
 type StoredGrantSkipReason = typeof STORED_GRANT_SKIP_REASONS[number];
 /**
  * A non-fatal diagnostic attached to a result. `STORED_GRANT_SKIPPED`: a

package/dist/{contract-DfyrluLB.d.ts → contract-zRklonbR.d.ts}

@@ -1,4 +1,4 @@
-declare const OPERATION_ERROR_CODES: readonly ["INPUT_INVALID", "OPERATION_NOT_FOUND", "OPERATION_VERSION_UNSUPPORTED", "PROFILE_NOT_FOUND", "PROFILE_POSTURE_NOT_ALLOWED", "PROFILE_OWNER_OPT_IN_REQUIRED", "AUTH_REQUIRED", "PERMISSION_DENIED", "SESSION_NOT_FOUND", "PERMISSION_HINT_INVALID", "DELEGATION_ARTIFACT_INVALID", "DELEGATION_EXPIRED", "DELEGATION_AUDIENCE_MISMATCH", "DELEGATION_HOST_MISMATCH", "DELEGATION_REJECTED", "ENCRYPTION_NETWORK_UNRESOLVED", "NODE_UNREACHABLE", "NODE_ERROR", "STORAGE_QUOTA_EXCEEDED", "KV_NOT_FOUND", "KV_PRECONDITION_FAILED", "KV_CONFLICT", "KV_RESPONSE_TOO_LARGE", "SQL_QUERY_INVALID", "SQL_EXECUTION_FAILED", "SQL_RESULT_LIMIT_EXCEEDED", "SQL_VALUE_UNSAFE", "SECRET_READ_FAILED", "SECRET_DECRYPT_FAILED", "OUTPUT_INVALID", "INTERNAL_ERROR"];
+declare const OPERATION_ERROR_CODES: readonly ["INPUT_INVALID", "OPERATION_NOT_FOUND", "OPERATION_VERSION_UNSUPPORTED", "PROFILE_NOT_FOUND", "PROFILE_POSTURE_NOT_ALLOWED", "PROFILE_OWNER_OPT_IN_REQUIRED", "PROFILE_MIGRATION_REQUIRED", "AUTH_REQUIRED", "PERMISSION_DENIED", "SESSION_NOT_FOUND", "PERMISSION_HINT_INVALID", "DELEGATION_ARTIFACT_INVALID", "DELEGATION_EXPIRED", "DELEGATION_AUDIENCE_MISMATCH", "DELEGATION_HOST_MISMATCH", "DELEGATION_REJECTED", "ENCRYPTION_NETWORK_UNRESOLVED", "NODE_UNREACHABLE", "NODE_ERROR", "STORAGE_QUOTA_EXCEEDED", "KV_NOT_FOUND", "KV_PRECONDITION_FAILED", "KV_CONFLICT", "KV_RESPONSE_TOO_LARGE", "SQL_QUERY_INVALID", "SQL_EXECUTION_FAILED", "SQL_RESULT_LIMIT_EXCEEDED", "SQL_VALUE_UNSAFE", "SECRET_READ_FAILED", "SECRET_DECRYPT_FAILED", "OUTPUT_INVALID", "INTERNAL_ERROR"];
 type OperationErrorCode = (typeof OPERATION_ERROR_CODES)[number];
 interface OperationError {
     readonly code: OperationErrorCode;
@@ -29,9 +29,12 @@ interface OperationContextSummary {
  * Why a stored grant was not used. A fixed vocabulary: diagnostics never
  * carry exception text, node responses, URLs or other stored transport data.
  * `unbound`: the record has no valid request binding where one is required;
- * `outside_request`: its signed authority exceeds its binding.
+ * `outside_request`: its signed authority exceeds its binding;
+ * `activation_unavailable`: the node could not be reached, timed out, was
+ * rate limited or failed (transport, 408, 429, 5xx) while activating it;
+ * `activation_unauthenticated`: the node answered 401 while activating it.
  */
-declare const STORED_GRANT_SKIP_REASONS: readonly ["malformed", "unbound", "outside_request", "host_mismatch", "expired", "cid_mismatch", "authority_invalid", "proof_missing", "proof_invalid", "owner_mismatch", "audience_mismatch", "resources_mismatch", "unsupported", "activation_rejected", "invalid"];
+declare const STORED_GRANT_SKIP_REASONS: readonly ["malformed", "unbound", "outside_request", "host_mismatch", "expired", "cid_mismatch", "authority_invalid", "proof_missing", "proof_invalid", "owner_mismatch", "audience_mismatch", "resources_mismatch", "unsupported", "activation_rejected", "activation_unavailable", "activation_unauthenticated", "invalid"];
 type StoredGrantSkipReason = typeof STORED_GRANT_SKIP_REASONS[number];
 /**
  * A non-fatal diagnostic attached to a result. `STORED_GRANT_SKIPPED`: a

package/dist/delegation-binding.cjs

@@ -730,6 +730,7 @@ __export(delegation_binding_exports, {
   replayLimit: () => replayLimit,
   replayProfileDelegations: () => replayProfileDelegations,
   replayStoredDelegation: () => replayStoredDelegation,
+  replayStoredDelegationRecords: () => replayStoredDelegationRecords,
   storedDelegationForAnotherKey: () => storedDelegationForAnotherKey,
   storedDelegationKind: () => storedDelegationKind,
   storedDelegationSource: () => storedDelegationSource,
@@ -4509,6 +4510,8 @@ var STORED_GRANT_SKIP_REASONS = [
   "resources_mismatch",
   "unsupported",
   "activation_rejected",
+  "activation_unavailable",
+  "activation_unauthenticated",
   "invalid"
 ];
 var DELEGATION_CID_PATTERN = "^bafkr4i[a-z2-7]{52}$";
@@ -4742,6 +4745,9 @@ function skipped(reason) {
 }
 async function replayProfileDelegations(profile, node, options) {
   await prepareStoredDelegationReplay(profile, node, { host: options.host, migrate: options.migrate });
+  return replayStoredDelegationRecords(profile, node, options);
+}
+async function replayStoredDelegationRecords(profile, node, options) {
   const installed = [];
   const warnings = [];
   const seen = /* @__PURE__ */ new Set();
@@ -4933,6 +4939,7 @@ function isRecord(value) {
   replayLimit,
   replayProfileDelegations,
   replayStoredDelegation,
+  replayStoredDelegationRecords,
   storedDelegationForAnotherKey,
   storedDelegationKind,
   storedDelegationSource,