@tinycloud/sdk-services 3.1.0-beta.9 → 3.1.0

package/dist/kv/index.d.cts

@@ -1073,6 +1073,16 @@ declare class KVService extends BaseService implements IKVService {
     private createResponseHeaders;
     private createBatchResponseHeaders;
     private parseBatchValue;
+    /**
+     * Validate a batch read response and return its items in the caller's
+     * request order. The node flattens invocation abilities from a `BTreeMap`,
+     * so results arrive sorted by UTF-8 byte order of the path, not in request
+     * order. Items that carry their path in `key` are matched by path; if no
+     * item carries a key, items are assumed to be in the node's byte-sorted
+     * order and the request is aligned the same way. Any mix of keyed and
+     * keyless items, a missing requested path, an unrequested path, or a
+     * malformed item fails closed (returns undefined).
+     */
     private normalizeBatchReadResponse;
     private batchRead;
     /**
@@ -1120,8 +1130,8 @@ declare class KVService extends BaseService implements IKVService {
     changes(options: KVChangesOptions): Promise<Result<KVChangesResponse>>;
     /**
      * Map a failed `kv/sync` response. 410 and the retention 403 carry
-     * `{"error":{"code","reason"}}`; a revoked grant is a 401 whose text names
-     * `delegation-revoked` or `delegation-ancestor-revoked`. A body read that
+     * `{"error":{"code","reason"}}`; a revoked grant is a 401 whose whole body
+     * is the node's revocation error (see REVOKED_BODY). A body read that
      * fails because the request was cancelled or timed out rethrows, so the
      * caller sees `ABORTED`/`TIMEOUT` rather than a mapped status.
      */

package/dist/kv/index.d.ts

@@ -1073,6 +1073,16 @@ declare class KVService extends BaseService implements IKVService {
     private createResponseHeaders;
     private createBatchResponseHeaders;
     private parseBatchValue;
+    /**
+     * Validate a batch read response and return its items in the caller's
+     * request order. The node flattens invocation abilities from a `BTreeMap`,
+     * so results arrive sorted by UTF-8 byte order of the path, not in request
+     * order. Items that carry their path in `key` are matched by path; if no
+     * item carries a key, items are assumed to be in the node's byte-sorted
+     * order and the request is aligned the same way. Any mix of keyed and
+     * keyless items, a missing requested path, an unrequested path, or a
+     * malformed item fails closed (returns undefined).
+     */
     private normalizeBatchReadResponse;
     private batchRead;
     /**
@@ -1120,8 +1130,8 @@ declare class KVService extends BaseService implements IKVService {
     changes(options: KVChangesOptions): Promise<Result<KVChangesResponse>>;
     /**
      * Map a failed `kv/sync` response. 410 and the retention 403 carry
-     * `{"error":{"code","reason"}}`; a revoked grant is a 401 whose text names
-     * `delegation-revoked` or `delegation-ancestor-revoked`. A body read that
+     * `{"error":{"code","reason"}}`; a revoked grant is a 401 whose whole body
+     * is the node's revocation error (see REVOKED_BODY). A body read that
      * fails because the request was cancelled or timed out rethrows, so the
      * caller sees `ABORTED`/`TIMEOUT` rather than a mapped status.
      */

package/dist/kv/index.js

@@ -801,6 +801,24 @@ var MAX_KV_BATCH_READ_ITEMS = 100;
 function isJsonObject(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
+var pathByteEncoder = new TextEncoder();
+function comparePathsByBytes(a, b) {
+  const left = pathByteEncoder.encode(a);
+  const right = pathByteEncoder.encode(b);
+  const length = Math.min(left.length, right.length);
+  for (let index = 0; index < length; index++) {
+    if (left[index] !== right[index]) {
+      return left[index] - right[index];
+    }
+  }
+  return left.length - right.length;
+}
+var REVOKED_BODY = /^(?:Invalid invocation: )?delegation-(?:(revoked): [A-Za-z0-9]+|(ancestor-revoked): ancestor=[A-Za-z0-9]+ invoked=[A-Za-z0-9]+)$/;
+function revocationCodeOf(body) {
+  const match = REVOKED_BODY.exec(body.trim());
+  if (match === null) return void 0;
+  return match[1] !== void 0 ? ErrorCodes.AUTH_DELEGATION_REVOKED : ErrorCodes.AUTH_DELEGATION_ANCESTOR_REVOKED;
+}
 function encodeKvBatchPartName(path) {
   return encodeURIComponent(path).replace(
     /[!'()*]/g,
@@ -1028,15 +1046,25 @@ var KVService = class extends BaseService {
     )?.[1];
     return contentType?.includes("application/json") ? JSON.parse(text) : text;
   }
+  /**
+   * Validate a batch read response and return its items in the caller's
+   * request order. The node flattens invocation abilities from a `BTreeMap`,
+   * so results arrive sorted by UTF-8 byte order of the path, not in request
+   * order. Items that carry their path in `key` are matched by path; if no
+   * item carries a key, items are assumed to be in the node's byte-sorted
+   * order and the request is aligned the same way. Any mix of keyed and
+   * keyless items, a missing requested path, an unrequested path, or a
+   * malformed item fails closed (returns undefined).
+   */
   normalizeBatchReadResponse(data, paths, requireData) {
     if (!data || typeof data !== "object") return void 0;
     const response = data;
-    if (!Array.isArray(response.results) || response.results.length !== paths.length) {
+    const items = response.results;
+    if (!Array.isArray(items) || items.length !== paths.length) {
       return void 0;
     }
-    for (let index = 0; index < response.results.length; index++) {
-      const item = response.results[index];
-      if (!item || typeof item !== "object" || item.key !== paths[index] || typeof item.ok !== "boolean") {
+    for (const item of items) {
+      if (!item || typeof item !== "object" || typeof item.ok !== "boolean") {
         return void 0;
       }
       if (item.ok && (!item.headers || typeof item.headers !== "object" || Object.values(item.headers).some((value) => typeof value !== "string") || requireData && typeof item.dataBase64 !== "string")) {
@@ -1046,7 +1074,24 @@ var KVService = class extends BaseService {
         return void 0;
       }
     }
-    return response;
+    if (items.every((item) => typeof item.key === "string")) {
+      const byPath = new Map(items.map((item) => [item.key, item]));
+      if (byPath.size !== items.length) return void 0;
+      const aligned2 = [];
+      for (const path of paths) {
+        const item = byPath.get(path);
+        if (!item) return void 0;
+        aligned2.push(item);
+      }
+      return aligned2;
+    }
+    if (items.some((item) => item.key !== void 0)) return void 0;
+    const requestOrder = paths.map((_, index) => index).sort((a, b) => comparePathsByBytes(paths[a], paths[b]));
+    const aligned = new Array(items.length);
+    for (let position = 0; position < requestOrder.length; position++) {
+      aligned[requestOrder[position]] = items[position];
+    }
+    return aligned;
   }
   async batchRead(keys, action, options) {
     if (!this.requireAuth()) return err(authRequiredError("kv"));
@@ -1139,19 +1184,19 @@ var KVService = class extends BaseService {
           { meta: { status: response.status, statusText: response.statusText } }
         ));
       }
-      const payload = this.normalizeBatchReadResponse(
+      const items = this.normalizeBatchReadResponse(
         await response.json(),
         paths,
         action === KVAction.GET
       );
-      if (!payload) {
+      if (!items) {
         return err(serviceError(
           ErrorCodes.NETWORK_ERROR,
           "KV batch read response did not match the requested keys",
           "kv"
         ));
       }
-      const results = payload.results.map((item, index) => {
+      const results = items.map((item, index) => {
         if (!item.ok) {
           return {
             key: keys[index],
@@ -1785,8 +1830,8 @@ var KVService = class extends BaseService {
   }
   /**
    * Map a failed `kv/sync` response. 410 and the retention 403 carry
-   * `{"error":{"code","reason"}}`; a revoked grant is a 401 whose text names
-   * `delegation-revoked` or `delegation-ancestor-revoked`. A body read that
+   * `{"error":{"code","reason"}}`; a revoked grant is a 401 whose whole body
+   * is the node's revocation error (see REVOKED_BODY). A body read that
    * fails because the request was cancelled or timed out rethrows, so the
    * caller sees `ABORTED`/`TIMEOUT` rather than a mapped status.
    */
@@ -1831,7 +1876,7 @@ var KVService = class extends BaseService {
       ));
     }
     if (response.status === 401) {
-      const revoked = /\bdelegation-ancestor-revoked\b/.test(errorText) ? ErrorCodes.AUTH_DELEGATION_ANCESTOR_REVOKED : /\bdelegation-revoked\b/.test(errorText) ? ErrorCodes.AUTH_DELEGATION_REVOKED : void 0;
+      const revoked = revocationCodeOf(errorText);
       if (revoked !== void 0) {
         return err(serviceError(revoked, `${context}: 401 - ${errorText}`, "kv", { meta }));
       }