@tinycloud/sdk-services 2.6.3 → 2.7.0-beta.4

package/dist/{BaseService-BdRvNm2s.d.ts → types-DAY1O1kW.d.ts}

@@ -43,6 +43,17 @@ interface ServiceError {
     /** Additional metadata about the error */
     meta?: Record<string, unknown>;
 }
+/**
+ * A node-supplied permission hint after strict SDK validation. This is
+ * deliberately narrower than a general capability: no wildcards, caveats,
+ * descriptions, or transport metadata can cross the service boundary.
+ */
+interface PermissionHint {
+    readonly service: "tinycloud.kv" | "tinycloud.encryption";
+    readonly space?: string;
+    readonly path: string;
+    readonly actions: readonly string[];
+}
 /**
  * Storage quota information returned with quota-related errors.
  */
@@ -146,6 +157,8 @@ interface InvokeAnyEntry {
     action: string;
     /** Optional raw resource URI. When set, WASM signs this URI directly. */
     resource?: string;
+    /** Capability caveats that must remain on this invocation attenuation. */
+    caveats?: Record<string, unknown>[];
 }
 /**
  * Invoke function for minting a single authorization header that covers
@@ -336,159 +349,4 @@ declare function serviceError(code: string, message: string, service: string, op
     meta?: Record<string, unknown>;
 }): ServiceError;
 
-/**
- * BaseService - Abstract base class for all TinyCloud services.
- *
- * Provides common functionality:
- * - Context management
- * - Session lifecycle hooks
- * - Abort signal handling
- * - Telemetry emission
- */
-
-/**
- * Abstract base class for TinyCloud services.
- *
- * Services extend this class to get common functionality like
- * context management, session lifecycle, and abort handling.
- *
- * @example
- * ```typescript
- * class MyService extends BaseService implements IMyService {
- *   static readonly serviceName = 'myservice';
- *
- *   constructor(config: MyServiceConfig = {}) {
- *     super();
- *     this._config = config;
- *   }
- *
- *   async doSomething(): Promise<Result<Data>> {
- *     if (!this.requireAuth()) {
- *       return err(authRequiredError('myservice'));
- *     }
- *     // ... implementation
- *   }
- * }
- * ```
- */
-declare abstract class BaseService implements IService {
-    /**
-     * Service identifier used for registration.
-     * Must be overridden by subclasses.
-     */
-    static readonly serviceName: string;
-    /**
-     * Service context providing access to platform dependencies.
-     * Set during initialize().
-     */
-    protected context: IServiceContext;
-    /**
-     * Abort controller for this service's operations.
-     * Reset on sign-out.
-     */
-    protected abortController: AbortController;
-    /**
-     * Service-specific configuration.
-     */
-    protected _config: Record<string, unknown>;
-    /**
-     * Get the service configuration.
-     */
-    get config(): Record<string, unknown>;
-    /**
-     * Initialize the service with context.
-     * Called by the SDK after instantiation.
-     *
-     * @param context - The service context
-     */
-    initialize(context: IServiceContext): void;
-    /**
-     * Called when session changes (sign-in, sign-out, refresh).
-     * Override in subclasses to handle session changes.
-     *
-     * @param session - The new session, or null if signed out
-     */
-    onSessionChange(session: ServiceSession | null): void;
-    /**
-     * Called when SDK signs out.
-     * Aborts all pending operations.
-     */
-    onSignOut(): void;
-    /**
-     * Get the abort signal for this service.
-     * Combines the service-level abort with context-level abort.
-     */
-    protected get abortSignal(): AbortSignal;
-    /**
-     * Check if the service is authenticated.
-     */
-    protected get isAuthenticated(): boolean;
-    /**
-     * Get the current session.
-     * Throws if not authenticated.
-     */
-    protected get session(): ServiceSession;
-    /**
-     * Check authentication and return error result if not authenticated.
-     * Use this at the start of methods that require authentication.
-     *
-     * @returns true if authenticated, false otherwise
-     */
-    protected requireAuth(): boolean;
-    /**
-     * Emit a telemetry event.
-     *
-     * @param event - Event name
-     * @param data - Event data
-     */
-    protected emit(event: string, data: unknown): void;
-    /**
-     * Emit a service request event.
-     *
-     * @param action - The action being performed
-     * @param key - Optional key/path being accessed
-     */
-    protected emitRequest(action: string, key?: string): void;
-    /**
-     * Emit a service response event.
-     *
-     * @param action - The action that was performed
-     * @param ok - Whether the request was successful
-     * @param startTime - Start time for duration calculation
-     * @param status - Optional HTTP status code
-     */
-    protected emitResponse(action: string, ok: boolean, startTime: number, status?: number): void;
-    /**
-     * Emit a service error event.
-     *
-     * @param error - The service error
-     */
-    protected emitError(error: ServiceError, action?: string): void;
-    /**
-     * Get the service name from the static property.
-     * Subclasses must define static serviceName.
-     */
-    protected getServiceName(): string;
-    /**
-     * Stable span name used by SDK telemetry sinks.
-     */
-    protected spanName(action: string): string;
-    /**
-     * Create a combined abort signal from multiple sources.
-     *
-     * @param signals - Additional abort signals to combine
-     * @returns A combined abort signal
-     */
-    protected combineSignals(...signals: (AbortSignal | undefined)[]): AbortSignal;
-    /**
-     * Wrap an operation with error handling and telemetry.
-     *
-     * @param action - The action name for telemetry
-     * @param key - Optional key for telemetry
-     * @param operation - The operation to execute
-     * @returns Result of the operation
-     */
-    protected withTelemetry<T>(action: string, key: string | undefined, operation: () => Promise<Result<T>>): Promise<Result<T>>;
-}
-
-export { BaseService as B, type EventHandler as E, type FetchFunction as F, type IServiceContext as I, type RetryPolicy as R, type ServiceSession as S, type TelemetryConfig as T, type InvokeFunction as a, type InvokeAnyFunction as b, type IService as c, type ServiceError as d, type Result as e, type StorageQuotaInfo as f, type ErrorCode as g, ErrorCodes as h, type FetchRequestInit as i, type FetchResponse as j, type InvocationFact as k, type InvocationFacts as l, type InvokeAnyEntry as m, type ServiceErrorEvent as n, type ServiceHeaders as o, type ServiceRequestEvent as p, type ServiceResponseEvent as q, type ServiceRetryEvent as r, type TelemetryEventHandler as s, TelemetryEvents as t, type TelemetrySpanEvent as u, defaultRetryPolicy as v, err as w, ok as x, serviceError as y };
+export { type EventHandler as E, type FetchFunction as F, type IService as I, type PermissionHint as P, type Result as R, type ServiceSession as S, type TelemetryConfig as T, type IServiceContext as a, type ServiceError as b, type InvokeFunction as c, type InvokeAnyFunction as d, type RetryPolicy as e, type StorageQuotaInfo as f, type ErrorCode as g, ErrorCodes as h, type FetchRequestInit as i, type FetchResponse as j, type InvocationFact as k, type InvocationFacts as l, type InvokeAnyEntry as m, type ServiceErrorEvent as n, type ServiceHeaders as o, type ServiceRequestEvent as p, type ServiceResponseEvent as q, type ServiceRetryEvent as r, type TelemetryEventHandler as s, TelemetryEvents as t, type TelemetrySpanEvent as u, defaultRetryPolicy as v, err as w, ok as x, serviceError as y };

package/package.json

@@ -1,9 +1,12 @@
 {
   "name": "@tinycloud/sdk-services",
-  "version": "2.6.3",
+  "version": "2.7.0-beta.4",
   "description": "TinyCloud SDK Services - Platform-agnostic service implementations",
   "author": "TinyCloud, Inc.",
   "license": "EGPL",
+  "engines": {
+    "node": ">=20"
+  },
   "type": "module",
   "main": "dist/index.cjs",
   "module": "dist/index.js",
@@ -28,6 +31,11 @@
       "types": "./dist/encryption/index.d.ts",
       "import": "./dist/encryption/index.js",
       "require": "./dist/encryption/index.cjs"
+    },
+    "./internal/decrypt-transport-response-error": {
+      "types": "./dist/internal/decrypt-transport-response-error.d.cts",
+      "import": "./dist/internal/decrypt-transport-response-error.cjs",
+      "require": "./dist/internal/decrypt-transport-response-error.cjs"
     }
   },
   "files": [
@@ -39,12 +47,12 @@
     "test": "bun test"
   },
   "dependencies": {
-    "@tinycloud/bootstrap": "2.5.1",
+    "@tinycloud/bootstrap": "2.6.0-beta.1",
     "zod": "^3.23.0"
   },
   "devDependencies": {
     "@types/node": "^20",
-    "@tinycloud/node-sdk-wasm": "1.7.4",
+    "@tinycloud/node-sdk-wasm": "1.7.5-beta.0",
     "tsup": "^8.0.0",
     "typescript": "^5.9.3"
   },