@tinycloud/sdk-services 2.10.0-beta.0 → 2.11.0-beta.5

package/dist/index.d.cts

@@ -1,7 +1,7 @@
-import { a as IServiceContext, c as InvokeFunction, d as InvokeAnyFunction, F as FetchFunction, S as ServiceSession, e as RetryPolicy, T as TelemetryConfig, I as IService, E as EventHandler, b as ServiceError, R as Result, P as PermissionHint, f as StorageQuotaInfo } from './types-KCcgZiab.cjs';
-export { g as ErrorCode, h as ErrorCodes, i as FetchRequestInit, j as FetchResponse, k as InvocationFact, l as InvocationFacts, m as InvokeAnyEntry, n as ServiceErrorEvent, o as ServiceHeaders, p as ServiceRequestEvent, q as ServiceResponseEvent, r as ServiceRetryEvent, s as TelemetryEventHandler, t as TelemetryEvents, u as TelemetrySpanEvent, v as defaultRetryPolicy, w as err, x as ok, y as serviceError } from './types-KCcgZiab.cjs';
+import { a as IServiceContext, c as InvokeFunction, d as InvokeAnyFunction, F as FetchFunction, S as ServiceSession, e as RetryPolicy, T as TelemetryConfig, I as IService, E as EventHandler, b as ServiceError, R as Result, P as PermissionHint, f as StorageQuotaInfo } from './types-qwMmB7qB.cjs';
+export { g as ErrorCode, h as ErrorCodes, i as FetchRequestInit, j as FetchResponse, k as InvocationFact, l as InvocationFacts, m as InvokeAnyEntry, n as ServiceErrorEvent, o as ServiceHeaders, p as ServiceRequestEvent, q as ServiceResponseEvent, r as ServiceRetryEvent, s as TelemetryEventHandler, t as TelemetryEvents, u as TelemetrySpanEvent, v as defaultRetryPolicy, w as err, x as ok, y as serviceError } from './types-qwMmB7qB.cjs';
 import { z } from 'zod';
-import { B as BaseService } from './BaseService-DxSU4U-v.cjs';
+import { B as BaseService } from './BaseService-BhpVpA9b.cjs';
 import { IKVService } from './kv/index.cjs';
 export { DEFAULT_SIGNED_READ_URL_EXPIRY_MS, IPrefixedKVService, KVAction, KVActionType, KVBatchPutItem, KVBatchPutOptions, KVBatchPutResponse, KVBatchReadResponse, KVCreateSignedReadUrlOptions, KVDeleteOptions, KVGetOptions, KVHeadOptions, KVListOptions, KVListResponse, KVPutOptions, KVResponse, KVResponseHeaders, KVService, KVServiceConfig, KVSignedReadUrlResponse, PrefixedKVService } from './kv/index.cjs';
 export { BatchOptions, BatchResponse, DatabaseHandle, ExecuteOptions, ExecuteResponse, IDatabaseHandle, ISQLMigrations, ISQLService, QueryOptions, QueryResponse, SQLAction, SQLActionType, SQLMigrations, SQLService, SQLServiceConfig, SqlMigration, SqlMigrationApplyOptions, SqlMigrationApplyResponse, SqlStatement, SqlValue } from './sql/index.cjs';
@@ -418,10 +418,16 @@ type GenericKVResponseType = z.infer<typeof GenericKVResponseSchema>;
 declare const KVListResponseSchema: z.ZodObject<{
     /** Array of keys matching the list criteria */
     keys: z.ZodArray<z.ZodString, "many">;
+    truncated: z.ZodOptional<z.ZodBoolean>;
+    nextCursor: z.ZodOptional<z.ZodString>;
 }, "strip", z.ZodTypeAny, {
     keys: string[];
+    truncated?: boolean | undefined;
+    nextCursor?: string | undefined;
 }, {
     keys: string[];
+    truncated?: boolean | undefined;
+    nextCursor?: string | undefined;
 }>;
 type KVListResponseType = z.infer<typeof KVListResponseSchema>;
 /**
@@ -432,19 +438,29 @@ declare const KVListResultSchema: z.ZodDiscriminatedUnion<"ok", [z.ZodObject<{
     data: z.ZodObject<{
         /** Array of keys matching the list criteria */
         keys: z.ZodArray<z.ZodString, "many">;
+        truncated: z.ZodOptional<z.ZodBoolean>;
+        nextCursor: z.ZodOptional<z.ZodString>;
     }, "strip", z.ZodTypeAny, {
         keys: string[];
+        truncated?: boolean | undefined;
+        nextCursor?: string | undefined;
     }, {
         keys: string[];
+        truncated?: boolean | undefined;
+        nextCursor?: string | undefined;
     }>;
 }, "strip", z.ZodTypeAny, {
     data: {
         keys: string[];
+        truncated?: boolean | undefined;
+        nextCursor?: string | undefined;
     };
     ok: true;
 }, {
     data: {
         keys: string[];
+        truncated?: boolean | undefined;
+        nextCursor?: string | undefined;
     };
     ok: true;
 }>, z.ZodObject<{
@@ -1595,6 +1611,15 @@ interface VaultListOptions {
     prefix?: string;
     /** Remove prefix from returned keys */
     removePrefix?: boolean;
+    /** Maximum number of keys to return. */
+    limit?: number;
+    /** Opaque cursor returned by a prior bounded page. */
+    cursor?: string;
+}
+interface VaultListPage {
+    keys: string[];
+    truncated: boolean;
+    nextCursor?: string;
 }
 /**
  * Options for vault grant (sharing) operations.
@@ -1763,6 +1788,8 @@ interface IDataVaultService extends IService {
      * @returns Result with the decrypted entry
      */
     get<T = unknown>(key: string, options?: VaultGetOptions<T>): Promise<Result<VaultEntry<T>, VaultError>>;
+    /** Read a network-encrypted value with safe, phase-classified failures. */
+    readNetworkEncrypted<T = unknown>(key: string, options?: VaultGetOptions<T>): Promise<VaultNetworkReadResult<T>>;
     /**
      * Delete an encrypted key.
      *
@@ -1776,6 +1803,8 @@ interface IDataVaultService extends IService {
      * @returns Result with array of key names
      */
     list(options?: VaultListOptions): Promise<Result<string[], VaultError>>;
+    /** List one bounded, cursor-aware page of vault keys. */
+    listPage(options?: VaultListOptions): Promise<Result<VaultListPage, VaultError>>;
     /**
      * Get envelope metadata for a key without decrypting the value.
      *
@@ -2049,6 +2078,7 @@ declare class DataVaultService extends BaseService implements IDataVaultService
      * @returns Result with array of key names (vault/ prefix stripped)
      */
     list(options?: VaultListOptions): Promise<Result<string[], VaultError>>;
+    listPage(options?: VaultListOptions): Promise<Result<VaultListPage, VaultError>>;
     /**
      * Get envelope metadata for a key without decrypting the value.
      *
@@ -2200,4 +2230,4 @@ declare class SecretsService implements ISecretsService {
     list(options?: SecretScopeOptions): Promise<Result<string[], SecretsError>>;
 }
 
-export { BaseService, type BaseServiceOptions, type ColumnInfo, type DataVaultConfig, DataVaultService, DecryptCapabilityProof, DuckDbAction, type DuckDbActionType, type DuckDbBatchOptions, type BatchResponse as DuckDbBatchResponse, DuckDbDatabaseHandle, type DuckDbExecuteOptions, type ExecuteResponse as DuckDbExecuteResponse, type DuckDbOptions, type DuckDbQueryOptions, type QueryResponse as DuckDbQueryResponse, DuckDbService, type DuckDbServiceConfig, type DuckDbStatement, type DuckDbValue, EventHandler, FetchFunction, GenericKVResponseSchema, type GenericKVResponseType, GenericResultSchema, type HookEvent, type HookServiceName, type HookStreamEvent, type HookSubscription, type HookWebhookListOptions, type HookWebhookRecord, type HookWebhookRegistration, type HookWebhookScope, type HookWebhookUnregisterOptions, HooksService, type HooksServiceConfig, type IDataVaultService, type IDuckDbDatabaseHandle, type IDuckDbService, IEncryptionService, type IHooksService, IKVService, type ISecretsService, IService, IServiceContext, InvokeAnyFunction, InvokeFunction, KVListResponseSchema, type KVListResponseType, KVListResultSchema, type KVListResultType, KVResponseHeadersSchema, type KVResponseHeadersType, PermissionHint, type QuotaConfig, type QuotaStatus, type ResolvedSecretPath, Result, RetryPolicy, RetryPolicySchema, type RetryPolicyType, SECRET_NAME_RE, type SchemaInfo, type SecretPayload, type SecretScopeOptions, type SecretsError, SecretsService, type ServiceConstructor, ServiceContext, type ServiceContextConfig, ServiceError, ServiceErrorEventSchema, type ServiceErrorEventType, ServiceErrorSchema, type ServiceErrorType, type ServiceRegistration, ServiceRequestEventSchema, type ServiceRequestEventType, ServiceResponseEventSchema, type ServiceResponseEventType, ServiceRetryEventSchema, type ServiceRetryEventType, ServiceSession, ServiceSessionSchema, type ServiceSessionType, StorageQuotaInfo, type SubscribeOptions, type TableInfo, TelemetryConfig, TelemetrySpanEventSchema, type TelemetrySpanEventType, type TinyCloudDebugEnableOptions, type TinyCloudDebugEvent, type TinyCloudDebugLevel, TinyCloudDebugLogger, type TinyCloudDebugTimer, TinyCloudQuota, type ValidationError, type VaultCrypto, type VaultEntry, type VaultError, type VaultGetOptions, type VaultGrantOptions, VaultHeaders, type VaultListOptions, type VaultNetworkReadResult, VaultPublicSpaceKVActions, type VaultPutOptions, type ViewInfo, type WasmVaultFunctions, abortedError, authExpiredError, authRequiredError, authUnauthorizedError, canonicalizeSecretScope, clearTinyCloudDebugLogs, createKVResponseSchema, createResultSchema, createVaultCrypto, disableTinyCloudDebug, enableTinyCloudDebug, errorResult, getTinyCloudDebugLogs, installTinyCloudDebugGlobals, networkError, notFoundError, parseAuthError, parsePermissionHint, parsePermissionHintFromErrorText, permissionDeniedError, resolveSecretListPrefix, resolveSecretPath, storageLimitReachedError, storageQuotaExceededError, timeoutError, tinyCloudDebugLogger, validateKVListResponse, validateKVResponseHeaders, validateRetryPolicy, validateServiceError, validateServiceRequestEvent, validateServiceResponseEvent, validateServiceSession, validateTelemetrySpanEvent, wrapError };
+export { BaseService, type BaseServiceOptions, type ColumnInfo, type DataVaultConfig, DataVaultService, DecryptCapabilityProof, DuckDbAction, type DuckDbActionType, type DuckDbBatchOptions, type BatchResponse as DuckDbBatchResponse, DuckDbDatabaseHandle, type DuckDbExecuteOptions, type ExecuteResponse as DuckDbExecuteResponse, type DuckDbOptions, type DuckDbQueryOptions, type QueryResponse as DuckDbQueryResponse, DuckDbService, type DuckDbServiceConfig, type DuckDbStatement, type DuckDbValue, EventHandler, FetchFunction, GenericKVResponseSchema, type GenericKVResponseType, GenericResultSchema, type HookEvent, type HookServiceName, type HookStreamEvent, type HookSubscription, type HookWebhookListOptions, type HookWebhookRecord, type HookWebhookRegistration, type HookWebhookScope, type HookWebhookUnregisterOptions, HooksService, type HooksServiceConfig, type IDataVaultService, type IDuckDbDatabaseHandle, type IDuckDbService, IEncryptionService, type IHooksService, IKVService, type ISecretsService, IService, IServiceContext, InvokeAnyFunction, InvokeFunction, KVListResponseSchema, type KVListResponseType, KVListResultSchema, type KVListResultType, KVResponseHeadersSchema, type KVResponseHeadersType, PermissionHint, type QuotaConfig, type QuotaStatus, type ResolvedSecretPath, Result, RetryPolicy, RetryPolicySchema, type RetryPolicyType, SECRET_NAME_RE, type SchemaInfo, type SecretPayload, type SecretScopeOptions, type SecretsError, SecretsService, type ServiceConstructor, ServiceContext, type ServiceContextConfig, ServiceError, ServiceErrorEventSchema, type ServiceErrorEventType, ServiceErrorSchema, type ServiceErrorType, type ServiceRegistration, ServiceRequestEventSchema, type ServiceRequestEventType, ServiceResponseEventSchema, type ServiceResponseEventType, ServiceRetryEventSchema, type ServiceRetryEventType, ServiceSession, ServiceSessionSchema, type ServiceSessionType, StorageQuotaInfo, type SubscribeOptions, type TableInfo, TelemetryConfig, TelemetrySpanEventSchema, type TelemetrySpanEventType, type TinyCloudDebugEnableOptions, type TinyCloudDebugEvent, type TinyCloudDebugLevel, TinyCloudDebugLogger, type TinyCloudDebugTimer, TinyCloudQuota, type ValidationError, type VaultCrypto, type VaultEntry, type VaultError, type VaultGetOptions, type VaultGrantOptions, VaultHeaders, type VaultListOptions, type VaultListPage, type VaultNetworkReadResult, VaultPublicSpaceKVActions, type VaultPutOptions, type ViewInfo, type WasmVaultFunctions, abortedError, authExpiredError, authRequiredError, authUnauthorizedError, canonicalizeSecretScope, clearTinyCloudDebugLogs, createKVResponseSchema, createResultSchema, createVaultCrypto, disableTinyCloudDebug, enableTinyCloudDebug, errorResult, getTinyCloudDebugLogs, installTinyCloudDebugGlobals, networkError, notFoundError, parseAuthError, parsePermissionHint, parsePermissionHintFromErrorText, permissionDeniedError, resolveSecretListPrefix, resolveSecretPath, storageLimitReachedError, storageQuotaExceededError, timeoutError, tinyCloudDebugLogger, validateKVListResponse, validateKVResponseHeaders, validateRetryPolicy, validateServiceError, validateServiceRequestEvent, validateServiceResponseEvent, validateServiceSession, validateTelemetrySpanEvent, wrapError };

package/dist/index.d.ts

@@ -1,7 +1,7 @@
-import { a as IServiceContext, c as InvokeFunction, d as InvokeAnyFunction, F as FetchFunction, S as ServiceSession, e as RetryPolicy, T as TelemetryConfig, I as IService, E as EventHandler, b as ServiceError, R as Result, P as PermissionHint, f as StorageQuotaInfo } from './types-KCcgZiab.js';
-export { g as ErrorCode, h as ErrorCodes, i as FetchRequestInit, j as FetchResponse, k as InvocationFact, l as InvocationFacts, m as InvokeAnyEntry, n as ServiceErrorEvent, o as ServiceHeaders, p as ServiceRequestEvent, q as ServiceResponseEvent, r as ServiceRetryEvent, s as TelemetryEventHandler, t as TelemetryEvents, u as TelemetrySpanEvent, v as defaultRetryPolicy, w as err, x as ok, y as serviceError } from './types-KCcgZiab.js';
+import { a as IServiceContext, c as InvokeFunction, d as InvokeAnyFunction, F as FetchFunction, S as ServiceSession, e as RetryPolicy, T as TelemetryConfig, I as IService, E as EventHandler, b as ServiceError, R as Result, P as PermissionHint, f as StorageQuotaInfo } from './types-qwMmB7qB.js';
+export { g as ErrorCode, h as ErrorCodes, i as FetchRequestInit, j as FetchResponse, k as InvocationFact, l as InvocationFacts, m as InvokeAnyEntry, n as ServiceErrorEvent, o as ServiceHeaders, p as ServiceRequestEvent, q as ServiceResponseEvent, r as ServiceRetryEvent, s as TelemetryEventHandler, t as TelemetryEvents, u as TelemetrySpanEvent, v as defaultRetryPolicy, w as err, x as ok, y as serviceError } from './types-qwMmB7qB.js';
 import { z } from 'zod';
-import { B as BaseService } from './BaseService-BiYeqCRT.js';
+import { B as BaseService } from './BaseService-CuV-ZVPs.js';
 import { IKVService } from './kv/index.js';
 export { DEFAULT_SIGNED_READ_URL_EXPIRY_MS, IPrefixedKVService, KVAction, KVActionType, KVBatchPutItem, KVBatchPutOptions, KVBatchPutResponse, KVBatchReadResponse, KVCreateSignedReadUrlOptions, KVDeleteOptions, KVGetOptions, KVHeadOptions, KVListOptions, KVListResponse, KVPutOptions, KVResponse, KVResponseHeaders, KVService, KVServiceConfig, KVSignedReadUrlResponse, PrefixedKVService } from './kv/index.js';
 export { BatchOptions, BatchResponse, DatabaseHandle, ExecuteOptions, ExecuteResponse, IDatabaseHandle, ISQLMigrations, ISQLService, QueryOptions, QueryResponse, SQLAction, SQLActionType, SQLMigrations, SQLService, SQLServiceConfig, SqlMigration, SqlMigrationApplyOptions, SqlMigrationApplyResponse, SqlStatement, SqlValue } from './sql/index.js';
@@ -418,10 +418,16 @@ type GenericKVResponseType = z.infer<typeof GenericKVResponseSchema>;
 declare const KVListResponseSchema: z.ZodObject<{
     /** Array of keys matching the list criteria */
     keys: z.ZodArray<z.ZodString, "many">;
+    truncated: z.ZodOptional<z.ZodBoolean>;
+    nextCursor: z.ZodOptional<z.ZodString>;
 }, "strip", z.ZodTypeAny, {
     keys: string[];
+    truncated?: boolean | undefined;
+    nextCursor?: string | undefined;
 }, {
     keys: string[];
+    truncated?: boolean | undefined;
+    nextCursor?: string | undefined;
 }>;
 type KVListResponseType = z.infer<typeof KVListResponseSchema>;
 /**
@@ -432,19 +438,29 @@ declare const KVListResultSchema: z.ZodDiscriminatedUnion<"ok", [z.ZodObject<{
     data: z.ZodObject<{
         /** Array of keys matching the list criteria */
         keys: z.ZodArray<z.ZodString, "many">;
+        truncated: z.ZodOptional<z.ZodBoolean>;
+        nextCursor: z.ZodOptional<z.ZodString>;
     }, "strip", z.ZodTypeAny, {
         keys: string[];
+        truncated?: boolean | undefined;
+        nextCursor?: string | undefined;
     }, {
         keys: string[];
+        truncated?: boolean | undefined;
+        nextCursor?: string | undefined;
     }>;
 }, "strip", z.ZodTypeAny, {
     data: {
         keys: string[];
+        truncated?: boolean | undefined;
+        nextCursor?: string | undefined;
     };
     ok: true;
 }, {
     data: {
         keys: string[];
+        truncated?: boolean | undefined;
+        nextCursor?: string | undefined;
     };
     ok: true;
 }>, z.ZodObject<{
@@ -1595,6 +1611,15 @@ interface VaultListOptions {
     prefix?: string;
     /** Remove prefix from returned keys */
     removePrefix?: boolean;
+    /** Maximum number of keys to return. */
+    limit?: number;
+    /** Opaque cursor returned by a prior bounded page. */
+    cursor?: string;
+}
+interface VaultListPage {
+    keys: string[];
+    truncated: boolean;
+    nextCursor?: string;
 }
 /**
  * Options for vault grant (sharing) operations.
@@ -1763,6 +1788,8 @@ interface IDataVaultService extends IService {
      * @returns Result with the decrypted entry
      */
     get<T = unknown>(key: string, options?: VaultGetOptions<T>): Promise<Result<VaultEntry<T>, VaultError>>;
+    /** Read a network-encrypted value with safe, phase-classified failures. */
+    readNetworkEncrypted<T = unknown>(key: string, options?: VaultGetOptions<T>): Promise<VaultNetworkReadResult<T>>;
     /**
      * Delete an encrypted key.
      *
@@ -1776,6 +1803,8 @@ interface IDataVaultService extends IService {
      * @returns Result with array of key names
      */
     list(options?: VaultListOptions): Promise<Result<string[], VaultError>>;
+    /** List one bounded, cursor-aware page of vault keys. */
+    listPage(options?: VaultListOptions): Promise<Result<VaultListPage, VaultError>>;
     /**
      * Get envelope metadata for a key without decrypting the value.
      *
@@ -2049,6 +2078,7 @@ declare class DataVaultService extends BaseService implements IDataVaultService
      * @returns Result with array of key names (vault/ prefix stripped)
      */
     list(options?: VaultListOptions): Promise<Result<string[], VaultError>>;
+    listPage(options?: VaultListOptions): Promise<Result<VaultListPage, VaultError>>;
     /**
      * Get envelope metadata for a key without decrypting the value.
      *
@@ -2200,4 +2230,4 @@ declare class SecretsService implements ISecretsService {
     list(options?: SecretScopeOptions): Promise<Result<string[], SecretsError>>;
 }
 
-export { BaseService, type BaseServiceOptions, type ColumnInfo, type DataVaultConfig, DataVaultService, DecryptCapabilityProof, DuckDbAction, type DuckDbActionType, type DuckDbBatchOptions, type BatchResponse as DuckDbBatchResponse, DuckDbDatabaseHandle, type DuckDbExecuteOptions, type ExecuteResponse as DuckDbExecuteResponse, type DuckDbOptions, type DuckDbQueryOptions, type QueryResponse as DuckDbQueryResponse, DuckDbService, type DuckDbServiceConfig, type DuckDbStatement, type DuckDbValue, EventHandler, FetchFunction, GenericKVResponseSchema, type GenericKVResponseType, GenericResultSchema, type HookEvent, type HookServiceName, type HookStreamEvent, type HookSubscription, type HookWebhookListOptions, type HookWebhookRecord, type HookWebhookRegistration, type HookWebhookScope, type HookWebhookUnregisterOptions, HooksService, type HooksServiceConfig, type IDataVaultService, type IDuckDbDatabaseHandle, type IDuckDbService, IEncryptionService, type IHooksService, IKVService, type ISecretsService, IService, IServiceContext, InvokeAnyFunction, InvokeFunction, KVListResponseSchema, type KVListResponseType, KVListResultSchema, type KVListResultType, KVResponseHeadersSchema, type KVResponseHeadersType, PermissionHint, type QuotaConfig, type QuotaStatus, type ResolvedSecretPath, Result, RetryPolicy, RetryPolicySchema, type RetryPolicyType, SECRET_NAME_RE, type SchemaInfo, type SecretPayload, type SecretScopeOptions, type SecretsError, SecretsService, type ServiceConstructor, ServiceContext, type ServiceContextConfig, ServiceError, ServiceErrorEventSchema, type ServiceErrorEventType, ServiceErrorSchema, type ServiceErrorType, type ServiceRegistration, ServiceRequestEventSchema, type ServiceRequestEventType, ServiceResponseEventSchema, type ServiceResponseEventType, ServiceRetryEventSchema, type ServiceRetryEventType, ServiceSession, ServiceSessionSchema, type ServiceSessionType, StorageQuotaInfo, type SubscribeOptions, type TableInfo, TelemetryConfig, TelemetrySpanEventSchema, type TelemetrySpanEventType, type TinyCloudDebugEnableOptions, type TinyCloudDebugEvent, type TinyCloudDebugLevel, TinyCloudDebugLogger, type TinyCloudDebugTimer, TinyCloudQuota, type ValidationError, type VaultCrypto, type VaultEntry, type VaultError, type VaultGetOptions, type VaultGrantOptions, VaultHeaders, type VaultListOptions, type VaultNetworkReadResult, VaultPublicSpaceKVActions, type VaultPutOptions, type ViewInfo, type WasmVaultFunctions, abortedError, authExpiredError, authRequiredError, authUnauthorizedError, canonicalizeSecretScope, clearTinyCloudDebugLogs, createKVResponseSchema, createResultSchema, createVaultCrypto, disableTinyCloudDebug, enableTinyCloudDebug, errorResult, getTinyCloudDebugLogs, installTinyCloudDebugGlobals, networkError, notFoundError, parseAuthError, parsePermissionHint, parsePermissionHintFromErrorText, permissionDeniedError, resolveSecretListPrefix, resolveSecretPath, storageLimitReachedError, storageQuotaExceededError, timeoutError, tinyCloudDebugLogger, validateKVListResponse, validateKVResponseHeaders, validateRetryPolicy, validateServiceError, validateServiceRequestEvent, validateServiceResponseEvent, validateServiceSession, validateTelemetrySpanEvent, wrapError };
+export { BaseService, type BaseServiceOptions, type ColumnInfo, type DataVaultConfig, DataVaultService, DecryptCapabilityProof, DuckDbAction, type DuckDbActionType, type DuckDbBatchOptions, type BatchResponse as DuckDbBatchResponse, DuckDbDatabaseHandle, type DuckDbExecuteOptions, type ExecuteResponse as DuckDbExecuteResponse, type DuckDbOptions, type DuckDbQueryOptions, type QueryResponse as DuckDbQueryResponse, DuckDbService, type DuckDbServiceConfig, type DuckDbStatement, type DuckDbValue, EventHandler, FetchFunction, GenericKVResponseSchema, type GenericKVResponseType, GenericResultSchema, type HookEvent, type HookServiceName, type HookStreamEvent, type HookSubscription, type HookWebhookListOptions, type HookWebhookRecord, type HookWebhookRegistration, type HookWebhookScope, type HookWebhookUnregisterOptions, HooksService, type HooksServiceConfig, type IDataVaultService, type IDuckDbDatabaseHandle, type IDuckDbService, IEncryptionService, type IHooksService, IKVService, type ISecretsService, IService, IServiceContext, InvokeAnyFunction, InvokeFunction, KVListResponseSchema, type KVListResponseType, KVListResultSchema, type KVListResultType, KVResponseHeadersSchema, type KVResponseHeadersType, PermissionHint, type QuotaConfig, type QuotaStatus, type ResolvedSecretPath, Result, RetryPolicy, RetryPolicySchema, type RetryPolicyType, SECRET_NAME_RE, type SchemaInfo, type SecretPayload, type SecretScopeOptions, type SecretsError, SecretsService, type ServiceConstructor, ServiceContext, type ServiceContextConfig, ServiceError, ServiceErrorEventSchema, type ServiceErrorEventType, ServiceErrorSchema, type ServiceErrorType, type ServiceRegistration, ServiceRequestEventSchema, type ServiceRequestEventType, ServiceResponseEventSchema, type ServiceResponseEventType, ServiceRetryEventSchema, type ServiceRetryEventType, ServiceSession, ServiceSessionSchema, type ServiceSessionType, StorageQuotaInfo, type SubscribeOptions, type TableInfo, TelemetryConfig, TelemetrySpanEventSchema, type TelemetrySpanEventType, type TinyCloudDebugEnableOptions, type TinyCloudDebugEvent, type TinyCloudDebugLevel, TinyCloudDebugLogger, type TinyCloudDebugTimer, TinyCloudQuota, type ValidationError, type VaultCrypto, type VaultEntry, type VaultError, type VaultGetOptions, type VaultGrantOptions, VaultHeaders, type VaultListOptions, type VaultListPage, type VaultNetworkReadResult, VaultPublicSpaceKVActions, type VaultPutOptions, type ViewInfo, type WasmVaultFunctions, abortedError, authExpiredError, authRequiredError, authUnauthorizedError, canonicalizeSecretScope, clearTinyCloudDebugLogs, createKVResponseSchema, createResultSchema, createVaultCrypto, disableTinyCloudDebug, enableTinyCloudDebug, errorResult, getTinyCloudDebugLogs, installTinyCloudDebugGlobals, networkError, notFoundError, parseAuthError, parsePermissionHint, parsePermissionHintFromErrorText, permissionDeniedError, resolveSecretListPrefix, resolveSecretPath, storageLimitReachedError, storageQuotaExceededError, timeoutError, tinyCloudDebugLogger, validateKVListResponse, validateKVResponseHeaders, validateRetryPolicy, validateServiceError, validateServiceRequestEvent, validateServiceResponseEvent, validateServiceSession, validateTelemetrySpanEvent, wrapError };

package/dist/index.js

@@ -373,7 +373,9 @@ function createKVResponseSchema(dataSchema) {
 var GenericKVResponseSchema = createKVResponseSchema(z.unknown());
 var KVListResponseSchema = z.object({
   /** Array of keys matching the list criteria */
-  keys: z.array(z.string())
+  keys: z.array(z.string()),
+  truncated: z.boolean().optional(),
+  nextCursor: z.string().optional()
 });
 var KVListResultSchema = createResultSchema(KVListResponseSchema);
 var ServiceRequestEventSchema = z.object({
@@ -2048,6 +2050,7 @@ var KVService = class extends BaseService {
         }
         seen.add(path);
       }
+      let requestMayHaveDispatched = false;
       try {
         const body = new FormData();
         for (let index = 0; index < items.length; index++) {
@@ -2065,14 +2068,31 @@ var KVService = class extends BaseService {
             action: KVAction.PUT
           }))
         );
-        const response = await this.context.fetch(`${this.host}/invoke`, {
+        const url = `${this.host}/invoke`;
+        const init = {
           method: "POST",
           headers,
           body,
           signal: this.combineSignals(options?.signal)
-        });
+        };
+        const fetchFn = this.context.fetch;
+        requestMayHaveDispatched = true;
+        const response = await fetchFn(url, init);
         if (!response.ok) {
-          const errorText = await response.text();
+          let errorText;
+          try {
+            errorText = await response.text();
+          } catch (textError) {
+            const cause = textError instanceof Error ? textError : new Error(String(textError));
+            return err(
+              serviceError(
+                ErrorCodes.KV_WRITE_FAILED,
+                `Failed to batch put ${items.length} key(s): ${response.status} - <response body could not be read: ${cause.message}>`,
+                "kv",
+                { cause, meta: { status: response.status, statusText: response.statusText } }
+              )
+            );
+          }
           if (response.status === 401 || response.status === 403) {
             const { resource, action } = parseAuthError(errorText);
             return err(authUnauthorizedError("kv", errorText, {
@@ -2098,19 +2118,73 @@ var KVService = class extends BaseService {
             )
           );
         }
-        const batchResponse = this.normalizeBatchPutResponse(await response.json());
-        if (!batchResponse || batchResponse.count !== batchResponse.written.length) {
+        let rawBody;
+        try {
+          rawBody = await response.json();
+        } catch (jsonError) {
+          const cause = jsonError instanceof Error ? jsonError : new Error(String(jsonError));
+          return err(
+            serviceError(
+              ErrorCodes.NETWORK_ERROR,
+              `KV batchPut response was not valid JSON: ${cause.message}`,
+              "kv",
+              {
+                cause,
+                meta: {
+                  requestMayHaveDispatched: true,
+                  responseReceived: true,
+                  status: response.status,
+                  outcome: "batch-unconfirmed"
+                }
+              }
+            )
+          );
+        }
+        const batchResponse = this.normalizeBatchPutResponse(rawBody);
+        if (!batchResponse) {
           return err(
             serviceError(
               ErrorCodes.NETWORK_ERROR,
               "KV batchPut response did not include matching written keys and count",
-              "kv"
+              "kv",
+              {
+                meta: {
+                  requestMayHaveDispatched: true,
+                  responseReceived: true,
+                  status: response.status,
+                  outcome: "batch-unconfirmed"
+                }
+              }
+            )
+          );
+        }
+        const requestedPaths = new Set(paths);
+        const writtenPaths = new Set(batchResponse.written);
+        const matchesRequest = batchResponse.count === paths.length && batchResponse.written.length === paths.length && writtenPaths.size === paths.length && batchResponse.written.every((key) => requestedPaths.has(key));
+        if (!matchesRequest) {
+          return err(
+            serviceError(
+              ErrorCodes.NETWORK_ERROR,
+              `KV batchPut response did not confirm all ${paths.length} requested key(s) were written`,
+              "kv",
+              {
+                meta: {
+                  requestMayHaveDispatched: true,
+                  responseReceived: true,
+                  status: response.status,
+                  outcome: "batch-unconfirmed"
+                }
+              }
             )
           );
         }
         return ok(batchResponse);
       } catch (error) {
-        return err(wrapError("kv", error));
+        const wrapped = wrapError("kv", error);
+        return err({
+          ...wrapped,
+          meta: { ...wrapped.meta, requestMayHaveDispatched }
+        });
       }
     });
   }
@@ -2139,7 +2213,10 @@ var KVService = class extends BaseService {
           KVAction.LIST,
           void 0,
           options?.signal,
-          options?.limit === void 0 ? void 0 : { "x-tinycloud-limit": String(options.limit) }
+          options?.limit === void 0 && options?.cursor === void 0 ? void 0 : {
+            ...options?.limit === void 0 ? {} : { "x-tinycloud-limit": String(options.limit) },
+            ...options?.cursor === void 0 ? {} : { "x-tinycloud-cursor": options.cursor }
+          }
         );
         if (!response.ok) {
           if (response.status === 401) {
@@ -2171,7 +2248,8 @@ var KVService = class extends BaseService {
         }
         return ok({
           keys,
-          ...response.headers.get("x-tinycloud-truncated") === null ? {} : { truncated: response.headers.get("x-tinycloud-truncated") === "true" }
+          ...response.headers.get("x-tinycloud-truncated") === null ? {} : { truncated: response.headers.get("x-tinycloud-truncated") === "true" },
+          ...response.headers.get("x-tinycloud-next-cursor") === null ? {} : { nextCursor: response.headers.get("x-tinycloud-next-cursor") ?? void 0 }
         });
       } catch (error) {
         return err(wrapError("kv", error));
@@ -4896,6 +4974,10 @@ var DataVaultService = class extends BaseService {
    * @returns Result with array of key names (vault/ prefix stripped)
    */
   async list(options) {
+    const page = await this.listPage(options);
+    return page.ok ? { ok: true, data: page.data.keys } : page;
+  }
+  async listPage(options) {
     return this.withTelemetry("list", options?.prefix, async () => {
       if (!this.isUnlocked) {
         return vaultError({
@@ -4913,7 +4995,9 @@ var DataVaultService = class extends BaseService {
         const listPrefix = options?.prefix ? `vault/${options.prefix}` : "vault/";
         const listResult = await this.tc.kv.list({
           prefix: listPrefix,
-          removePrefix: true
+          removePrefix: true,
+          ...options?.limit === void 0 ? {} : { limit: options.limit },
+          ...options?.cursor === void 0 ? {} : { cursor: options.cursor }
         });
         if (!listResult.ok) {
           return vaultError({
@@ -4930,7 +5014,11 @@ var DataVaultService = class extends BaseService {
             (k) => k.startsWith(userPrefix) ? k.slice(userPrefix.length) : k
           );
         }
-        return ok(keys);
+        return ok({
+          keys,
+          truncated: listResult.data.truncated === true,
+          ...listResult.data.nextCursor === void 0 ? {} : { nextCursor: listResult.data.nextCursor }
+        });
       } catch (error) {
         return vaultError({
           code: "STORAGE_ERROR",