dominus-sdk-nodejs 11.0.0 → 11.0.1

package/README.md

@@ -18,44 +18,58 @@ npm install dominus-sdk-nodejs
 
 ## Quick Start
 
-```ts
-import { dominus, normalizeSchemaBuilderMigration } from 'dominus-sdk-nodejs';
+Token-required hello using only the developer-stable catalog verbs. Set project
+scope with `DOMINUS_PROJECT` or CLI `select_project`. Other SDK namespaces exist
+for operators and advanced use; this path is the stable teaching surface. The
+catalog publishes the same lower-camel method names used by TypeScript callers.
 
-// Service auth (PSK from DOMINUS_TOKEN)
-const tables = await dominus.db.tables('public');
+Set both values before the Node.js process imports the SDK singleton:
 
-// User auth flow
-const session = await dominus.portal.login('user@example.com', 'password');
-const me = await dominus.portal.me(session.access_token as string);
+```bash
+export DOMINUS_TOKEN="your-psk-token"
+export DOMINUS_PROJECT="your-project-slug"
+```
 
-// AI runtime
-const result = await dominus.ai.runAgent({
-  conversationId: 'conv-1',
-  systemPrompt: 'You are concise.',
-  userPrompt: 'Summarize current task status.'
-});
+```ts
+import { dominus } from 'dominus-sdk-nodejs';
 
-// Courier send
-await dominus.courier.sendWelcome('user@example.com', 'noreply@app.com', {
-  name: 'John',
-  productName: 'MyApp',
+const run = await dominus.workflow.ensure({
+  workflowRecipeRef: 'recipe://workflow-recipe-v1/hello@v1',
 });
 
-// Courier admin
-const mailConfig = await dominus.courier.getMailConfig('project-id');
-const templates = await dominus.courier.listTemplates('project-id');
-
-// Files
-const uploaded = await dominus.files.upload(Buffer.from('hello'), 'hello.txt');
+await dominus.artifacts.storeV2({
+  group: 'your-group',
+  owner: 'your-project-slug',
+  environment: 'production',
+  kind: 'blob',
+  artifactKey: 'hello',
+  data: Buffer.from('hello dominus').toString('base64'),
+});
+const artifact = await dominus.artifacts.retrieveV2({
+  group: 'your-group',
+  owner: 'your-project-slug',
+  environment: 'production',
+  kind: 'blob',
+  artifactKey: 'hello',
+});
 
-// Schema builder request normalization
-const migration = normalizeSchemaBuilderMigration({
-  operation: 'create_table',
-  migrationName: 'create_reports',
-  tableName: 'reports',
-  columns: [{ name: 'id', type: 'UUID', primaryKey: true }],
+await dominus.stash.put({
+  env: 'production',
+  kind: 'config',
+  scope: 'self',
+  key: 'hello',
+  value: { greeting: 'hello' },
 });
-await dominus.ddl.previewMigration('tenant_secure_backend', migration.operation, migration.params, migration.migrationName);
+await dominus.stash.getItem({
+  env: 'production',
+  kind: 'config',
+  scope: 'self',
+  key: 'hello',
+});
+
+const runId = String((run as { run_id?: string }).run_id ?? '');
+const timeline = await dominus.authority.getRunTimeline(runId);
+const verdict = await dominus.authority.getRunVerdict(runId);
 ```
 
 ## Workflow Lifecycle

package/dist/contract/session.d.ts

@@ -0,0 +1,161 @@
+/**
+ * Per-surface `contract/session.ts` — Q-1 (M5 Identity & Session).
+ *
+ * One `Session` object carries the kernel identity + envelope fields
+ * across SDK / CLI / MCP / HTTP transports. JWT worker remains the
+ * issuer; the Session is the consumed representation per M5 + B1 + OQ2
+ * (canonical Error Envelope at Full tier).
+ *
+ * **Surface contract rule (B1):** every surface repo (Node SDK,
+ * Python SDK, CLI, MCP, gateway) ships its own `contract/session.ts`
+ * mirroring this shape byte-for-byte so a Session minted in one
+ * surface is consumable in any other. The schema below is the
+ * authoritative reference; per-surface additions are forbidden.
+ *
+ * **Hard preserves from Q-1 handoff:**
+ * - 6 JWT identity families — discriminated by `identity.kind`. No new
+ *   identity family may be added without an ADR.
+ * - Credentials are BY REFERENCE (bytes never exposed).
+ * - `request_id` and `correlation_id` are inherited from the canonical
+ *   Error Envelope (`dominus-platform/docs/contracts/errors.spec.json`).
+ *   Session carries them; it does not invent them.
+ * - The Session does not mint JWTs. `jwt-worker` is the issuer; Session
+ *   is the consumed shape.
+ */
+/** The 6 JWT identity families currently minted by jwt-worker. */
+export type IdentityKind = "service" | "service_jwt" | "portal_user" | "selected_scope_operator" | "client" | "product_machine";
+/**
+ * Resolved JWT claim shape (the consumer-side projection; the
+ * issuer (`jwt-worker`) may carry richer claims but only these
+ * land in a Session).
+ */
+export interface SessionClaims {
+    /** JWT `sub` (subject). */
+    subject: string;
+    /** JWT `iss` (issuer). */
+    issuer: string;
+    /** JWT `aud` (audience). */
+    audience: string | string[];
+    /** JWT `exp` (expiry, epoch seconds). */
+    expires_at: number;
+    /** JWT `iat` (issued at, epoch seconds). */
+    issued_at: number;
+    /** Original claims (full JWT payload, for diagnostics). */
+    raw: Record<string, unknown>;
+}
+/**
+ * Resolved scopes per org / app / env. The shape mirrors the resolved
+ * scope tree produced by jwt-worker for the requesting session.
+ */
+export interface ResolvedScopes {
+    org_id: string | null;
+    app_slug: string | null;
+    env: "production" | "staging" | "dev" | "preview" | null;
+    /** Granted scope keys. */
+    grants: readonly string[];
+}
+/**
+ * Rotatable credentials BY REFERENCE. Bytes never appear in the Session.
+ * The reference is opaque; consumers exchange it via
+ * `jwt-worker /jwt/rotate` or `mintServiceJwt({ forceRefresh: true })`.
+ */
+export interface CredentialsRef {
+    /** Opaque handle resolved by the issuer on demand. */
+    handle: string;
+    /** Mint generation counter (incremented on every rotation). */
+    generation: number;
+    /** Last rotation timestamp (epoch ms). */
+    rotated_at: number;
+}
+/** One discriminated entry per identity family. */
+export type Identity = {
+    kind: "service";
+    service_name: string;
+} | {
+    kind: "service_jwt";
+    service_id: string;
+} | {
+    kind: "portal_user";
+    user_id: string;
+    tenant_id: string | null;
+} | {
+    kind: "selected_scope_operator";
+    operator_id: string;
+    selected_scope: string;
+} | {
+    kind: "client";
+    client_id: string;
+    label: string;
+} | {
+    kind: "product_machine";
+    product_id: string;
+    machine_id: string;
+};
+/**
+ * The canonical Session object. One per logical session; structurally
+ * identical across SDK / CLI / MCP / HTTP surfaces.
+ *
+ * Invariants:
+ * - `request_id` and `correlation_id` come from the canonical envelope;
+ *   minting a Session from a context without them throws
+ *   `validation_failed`.
+ * - `credentials.handle` is the only credential reference; passing bytes
+ *   is rejected by `mintFromContext`.
+ * - `identity.kind` is one of the 6 locked families.
+ */
+export interface Session {
+    /** Discriminated identity. */
+    identity: Identity;
+    /** Resolved claims from the issuing JWT. */
+    claims: SessionClaims;
+    /** Resolved scopes per org / app / env. */
+    scopes: ResolvedScopes;
+    /** Rotatable credentials by reference. */
+    credentials: CredentialsRef;
+    /** Canonical envelope `request_id`. */
+    request_id: string;
+    /** Canonical envelope `correlation_id`. */
+    correlation_id: string;
+    /** Wall-clock time the Session was minted (epoch ms). */
+    minted_at: number;
+}
+/**
+ * Bootstrap context passed to `mintFromContext`. Surfaces populate this
+ * from their own source of truth (SDK reads from cache + JWT decode;
+ * CLI from disk cache; MCP from headers; HTTP from request headers).
+ */
+export interface SessionContext {
+    /** Decoded JWT payload (claims). The signature is verified by the surface. */
+    claims: Record<string, unknown>;
+    /** Canonical envelope `request_id`. */
+    request_id: string;
+    /** Canonical envelope `correlation_id`. */
+    correlation_id: string;
+    /** Credentials BY REFERENCE — never raw token bytes. */
+    credentials: CredentialsRef;
+}
+/**
+ * Thrown when context is missing envelope identity fields or exposes
+ * credential bytes. Carries the canonical envelope `validation_failed`
+ * semantics.
+ */
+export declare class SessionMintError extends Error {
+    readonly endpoint = "/contract/session.mint";
+    readonly code: "validation_failed" | "credential_bytes_leaked";
+    readonly details?: Record<string, unknown>;
+    constructor(code: "validation_failed" | "credential_bytes_leaked", message: string, details?: Record<string, unknown>);
+}
+/**
+ * Mint a Session from a populated context. This is the single canonical
+ * factory across all surfaces; per-surface modules wrap it but do not
+ * invent new constructors.
+ */
+export declare function mintFromContext(ctx: SessionContext): Session;
+/**
+ * Resolve the discriminated `Identity` from JWT claims. Rejects unknown
+ * families — adds must land via an ADR first.
+ */
+export declare function resolveIdentity(claims: Record<string, unknown>): Identity;
+export declare function resolveClaims(claims: Record<string, unknown>): SessionClaims;
+export declare function resolveScopes(claims: Record<string, unknown>): ResolvedScopes;
+//# sourceMappingURL=session.d.ts.map

package/dist/contract/session.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"session.d.ts","sourceRoot":"","sources":["../../src/contract/session.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAEH,kEAAkE;AAClE,MAAM,MAAM,YAAY,GACpB,SAAS,GACT,aAAa,GACb,aAAa,GACb,yBAAyB,GACzB,QAAQ,GACR,iBAAiB,CAAC;AAEtB;;;;GAIG;AACH,MAAM,WAAW,aAAa;IAC5B,2BAA2B;IAC3B,OAAO,EAAE,MAAM,CAAC;IAChB,0BAA0B;IAC1B,MAAM,EAAE,MAAM,CAAC;IACf,4BAA4B;IAC5B,QAAQ,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;IAC5B,yCAAyC;IACzC,UAAU,EAAE,MAAM,CAAC;IACnB,4CAA4C;IAC5C,SAAS,EAAE,MAAM,CAAC;IAClB,2DAA2D;IAC3D,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAC9B;AAED;;;GAGG;AACH,MAAM,WAAW,cAAc;IAC7B,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,GAAG,EAAE,YAAY,GAAG,SAAS,GAAG,KAAK,GAAG,SAAS,GAAG,IAAI,CAAC;IACzD,0BAA0B;IAC1B,MAAM,EAAE,SAAS,MAAM,EAAE,CAAC;CAC3B;AAED;;;;GAIG;AACH,MAAM,WAAW,cAAc;IAC7B,sDAAsD;IACtD,MAAM,EAAE,MAAM,CAAC;IACf,+DAA+D;IAC/D,UAAU,EAAE,MAAM,CAAC;IACnB,0CAA0C;IAC1C,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,mDAAmD;AACnD,MAAM,MAAM,QAAQ,GAChB;IAAE,IAAI,EAAE,SAAS,CAAC;IAAC,YAAY,EAAE,MAAM,CAAA;CAAE,GACzC;IAAE,IAAI,EAAE,aAAa,CAAC;IAAC,UAAU,EAAE,MAAM,CAAA;CAAE,GAC3C;IAAE,IAAI,EAAE,aAAa,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,GAClE;IAAE,IAAI,EAAE,yBAAyB,CAAC;IAAC,WAAW,EAAE,MAAM,CAAC;IAAC,cAAc,EAAE,MAAM,CAAA;CAAE,GAChF;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GACpD;IAAE,IAAI,EAAE,iBAAiB,CAAC;IAAC,UAAU,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAA;CAAE,CAAC;AAExE;;;;;;;;;;;GAWG;AACH,MAAM,WAAW,OAAO;IACtB,8BAA8B;IAC9B,QAAQ,EAAE,QAAQ,CAAC;IACnB,4CAA4C;IAC5C,MAAM,EAAE,aAAa,CAAC;IACtB,2CAA2C;IAC3C,MAAM,EAAE,cAAc,CAAC;IACvB,0CAA0C;IAC1C,WAAW,EAAE,cAAc,CAAC;IAC5B,uCAAuC;IACvC,UAAU,EAAE,MAAM,CAAC;IACnB,2CAA2C;IAC3C,cAAc,EAAE,MAAM,CAAC;IACvB,yDAAyD;IACzD,SAAS,EAAE,MAAM,CAAC;CACnB;AAED;;;;GAIG;AACH,MAAM,WAAW,cAAc;IAC7B,8EAA8E;IAC9E,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAChC,uCAAuC;IACvC,UAAU,EAAE,MAAM,CAAC;IACnB,2CAA2C;IAC3C,cAAc,EAAE,MAAM,CAAC;IACvB,wDAAwD;IACxD,WAAW,EAAE,cAAc,CAAC;CAC7B;AAED;;;;GAIG;AACH,qBAAa,gBAAiB,SAAQ,KAAK;IACzC,SAAgB,QAAQ,4BAA4B;IACpD,SAAgB,IAAI,EAAE,mBAAmB,GAAG,yBAAyB,CAAC;IACtE,SAAgB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;gBAEhD,IAAI,EAAE,mBAAmB,GAAG,yBAAyB,EACrD,OAAO,EAAE,MAAM,EACf,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;CAOpC;AAED;;;;GAIG;AACH,wBAAgB,eAAe,CAAC,GAAG,EAAE,cAAc,GAAG,OAAO,CA+C5D;AAED;;;GAGG;AACH,wBAAgB,eAAe,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,QAAQ,CAyEzE;AAED,wBAAgB,aAAa,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,aAAa,CAU5E;AAED,wBAAgB,aAAa,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,cAAc,CAoB7E"}

package/dist/contract/session.js

@@ -0,0 +1,164 @@
+/**
+ * Per-surface `contract/session.ts` — Q-1 (M5 Identity & Session).
+ *
+ * One `Session` object carries the kernel identity + envelope fields
+ * across SDK / CLI / MCP / HTTP transports. JWT worker remains the
+ * issuer; the Session is the consumed representation per M5 + B1 + OQ2
+ * (canonical Error Envelope at Full tier).
+ *
+ * **Surface contract rule (B1):** every surface repo (Node SDK,
+ * Python SDK, CLI, MCP, gateway) ships its own `contract/session.ts`
+ * mirroring this shape byte-for-byte so a Session minted in one
+ * surface is consumable in any other. The schema below is the
+ * authoritative reference; per-surface additions are forbidden.
+ *
+ * **Hard preserves from Q-1 handoff:**
+ * - 6 JWT identity families — discriminated by `identity.kind`. No new
+ *   identity family may be added without an ADR.
+ * - Credentials are BY REFERENCE (bytes never exposed).
+ * - `request_id` and `correlation_id` are inherited from the canonical
+ *   Error Envelope (`dominus-platform/docs/contracts/errors.spec.json`).
+ *   Session carries them; it does not invent them.
+ * - The Session does not mint JWTs. `jwt-worker` is the issuer; Session
+ *   is the consumed shape.
+ */
+/**
+ * Thrown when context is missing envelope identity fields or exposes
+ * credential bytes. Carries the canonical envelope `validation_failed`
+ * semantics.
+ */
+export class SessionMintError extends Error {
+    endpoint = "/contract/session.mint";
+    code;
+    details;
+    constructor(code, message, details) {
+        super(message);
+        this.code = code;
+        this.details = details;
+        this.name = "SessionMintError";
+    }
+}
+/**
+ * Mint a Session from a populated context. This is the single canonical
+ * factory across all surfaces; per-surface modules wrap it but do not
+ * invent new constructors.
+ */
+export function mintFromContext(ctx) {
+    if (!ctx || typeof ctx !== "object") {
+        throw new SessionMintError("validation_failed", "SessionContext is required", { received: typeof ctx });
+    }
+    if (typeof ctx.request_id !== "string" || ctx.request_id.length === 0) {
+        throw new SessionMintError("validation_failed", "request_id is required from the canonical envelope");
+    }
+    if (typeof ctx.correlation_id !== "string" || ctx.correlation_id.length === 0) {
+        throw new SessionMintError("validation_failed", "correlation_id is required from the canonical envelope");
+    }
+    if (!ctx.claims || typeof ctx.claims !== "object") {
+        throw new SessionMintError("validation_failed", "claims (decoded JWT payload) are required");
+    }
+    if (!ctx.credentials ||
+        typeof ctx.credentials.handle !== "string" ||
+        typeof ctx.credentials.generation !== "number" ||
+        typeof ctx.credentials.rotated_at !== "number") {
+        throw new SessionMintError("validation_failed", "credentials must be a by-reference record; raw token bytes are forbidden");
+    }
+    const identity = resolveIdentity(ctx.claims);
+    return {
+        identity,
+        claims: resolveClaims(ctx.claims),
+        scopes: resolveScopes(ctx.claims),
+        credentials: ctx.credentials,
+        request_id: ctx.request_id,
+        correlation_id: ctx.correlation_id,
+        minted_at: Date.now(),
+    };
+}
+/**
+ * Resolve the discriminated `Identity` from JWT claims. Rejects unknown
+ * families — adds must land via an ADR first.
+ */
+export function resolveIdentity(claims) {
+    const rawKind = claims.identity_kind ?? claims.family ?? claims.subject_kind;
+    switch (rawKind) {
+        case "service": {
+            const service_name = String(claims.service_name ?? claims.sub ?? "");
+            if (!service_name) {
+                throw new SessionMintError("validation_failed", "service family requires service_name or sub");
+            }
+            return { kind: "service", service_name };
+        }
+        case "service_jwt": {
+            const service_id = String(claims.service_id ?? claims.sub ?? "");
+            if (!service_id) {
+                throw new SessionMintError("validation_failed", "service_jwt family requires service_id or sub");
+            }
+            return { kind: "service_jwt", service_id };
+        }
+        case "portal_user": {
+            const user_id = String(claims.user_id ?? claims.sub ?? "");
+            if (!user_id) {
+                throw new SessionMintError("validation_failed", "portal_user family requires user_id or sub");
+            }
+            const tenant_id = typeof claims.tenant_id === "string" ? claims.tenant_id : null;
+            return { kind: "portal_user", user_id, tenant_id };
+        }
+        case "selected_scope_operator": {
+            const operator_id = String(claims.operator_id ?? claims.sub ?? "");
+            const selected_scope = String(claims.selected_scope ?? "");
+            if (!operator_id || !selected_scope) {
+                throw new SessionMintError("validation_failed", "selected_scope_operator family requires operator_id and selected_scope");
+            }
+            return { kind: "selected_scope_operator", operator_id, selected_scope };
+        }
+        case "client": {
+            const client_id = String(claims.client_id ?? claims.sub ?? "");
+            if (!client_id) {
+                throw new SessionMintError("validation_failed", "client family requires client_id or sub");
+            }
+            const label = String(claims.label ?? "");
+            return { kind: "client", client_id, label };
+        }
+        case "product_machine": {
+            const product_id = String(claims.product_id ?? "");
+            const machine_id = String(claims.machine_id ?? claims.sub ?? "");
+            if (!product_id || !machine_id) {
+                throw new SessionMintError("validation_failed", "product_machine family requires product_id and machine_id");
+            }
+            return { kind: "product_machine", product_id, machine_id };
+        }
+        default:
+            throw new SessionMintError("validation_failed", `unknown identity family: ${String(rawKind)}`);
+    }
+}
+export function resolveClaims(claims) {
+    const now = Math.floor(Date.now() / 1000);
+    return {
+        subject: String(claims.sub ?? ""),
+        issuer: String(claims.iss ?? "dominus-jwt-worker"),
+        audience: (claims.aud ?? "dominus"),
+        expires_at: Number(claims.exp ?? now + 3600),
+        issued_at: Number(claims.iat ?? now),
+        raw: claims,
+    };
+}
+export function resolveScopes(claims) {
+    const env = claims.env;
+    const env_typed = env === "production" ||
+        env === "staging" ||
+        env === "dev" ||
+        env === "preview"
+        ? env
+        : null;
+    const grants = Array.isArray(claims.scopes)
+        ? claims.scopes
+        : Array.isArray(claims.scope)
+            ? claims.scope
+            : [];
+    return {
+        org_id: typeof claims.org_id === "string" ? claims.org_id : null,
+        app_slug: typeof claims.app_slug === "string" ? claims.app_slug : null,
+        env: env_typed,
+        grants,
+    };
+}
+//# sourceMappingURL=session.js.map

package/dist/contract/session.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"session.js","sourceRoot":"","sources":["../../src/contract/session.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AA+GH;;;;GAIG;AACH,MAAM,OAAO,gBAAiB,SAAQ,KAAK;IACzB,QAAQ,GAAG,wBAAwB,CAAC;IACpC,IAAI,CAAkD;IACtD,OAAO,CAA2B;IAClD,YACE,IAAqD,EACrD,OAAe,EACf,OAAiC;QAEjC,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QACvB,IAAI,CAAC,IAAI,GAAG,kBAAkB,CAAC;IACjC,CAAC;CACF;AAED;;;;GAIG;AACH,MAAM,UAAU,eAAe,CAAC,GAAmB;IACjD,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;QACpC,MAAM,IAAI,gBAAgB,CACxB,mBAAmB,EACnB,4BAA4B,EAC5B,EAAE,QAAQ,EAAE,OAAO,GAAG,EAAE,CACzB,CAAC;IACJ,CAAC;IACD,IAAI,OAAO,GAAG,CAAC,UAAU,KAAK,QAAQ,IAAI,GAAG,CAAC,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtE,MAAM,IAAI,gBAAgB,CACxB,mBAAmB,EACnB,oDAAoD,CACrD,CAAC;IACJ,CAAC;IACD,IAAI,OAAO,GAAG,CAAC,cAAc,KAAK,QAAQ,IAAI,GAAG,CAAC,cAAc,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC9E,MAAM,IAAI,gBAAgB,CACxB,mBAAmB,EACnB,wDAAwD,CACzD,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,GAAG,CAAC,MAAM,IAAI,OAAO,GAAG,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;QAClD,MAAM,IAAI,gBAAgB,CACxB,mBAAmB,EACnB,2CAA2C,CAC5C,CAAC;IACJ,CAAC;IACD,IACE,CAAC,GAAG,CAAC,WAAW;QAChB,OAAO,GAAG,CAAC,WAAW,CAAC,MAAM,KAAK,QAAQ;QAC1C,OAAO,GAAG,CAAC,WAAW,CAAC,UAAU,KAAK,QAAQ;QAC9C,OAAO,GAAG,CAAC,WAAW,CAAC,UAAU,KAAK,QAAQ,EAC9C,CAAC;QACD,MAAM,IAAI,gBAAgB,CACxB,mBAAmB,EACnB,0EAA0E,CAC3E,CAAC;IACJ,CAAC;IACD,MAAM,QAAQ,GAAG,eAAe,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IAC7C,OAAO;QACL,QAAQ;QACR,MAAM,EAAE,aAAa,CAAC,GAAG,CAAC,MAAM,CAAC;QACjC,MAAM,EAAE,aAAa,CAAC,GAAG,CAAC,MAAM,CAAC;QACjC,WAAW,EAAE,GAAG,CAAC,WAAW;QAC5B,UAAU,EAAE,GAAG,CAAC,UAAU;QAC1B,cAAc,EAAE,GAAG,CAAC,cAAc;QAClC,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;KACtB,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,eAAe,CAAC,MAA+B;IAC7D,MAAM,OAAO,GAAG,MAAM,CAAC,aAAa,IAAI,MAAM,CAAC,MAAM,IAAI,MAAM,CAAC,YAAY,CAAC;IAC7E,QAAQ,OAAO,EAAE,CAAC;QAChB,KAAK,SAAS,CAAC,CAAC,CAAC;YACf,MAAM,YAAY,GAAG,MAAM,CAAC,MAAM,CAAC,YAAY,IAAI,MAAM,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC;YACrE,IAAI,CAAC,YAAY,EAAE,CAAC;gBAClB,MAAM,IAAI,gBAAgB,CACxB,mBAAmB,EACnB,6CAA6C,CAC9C,CAAC;YACJ,CAAC;YACD,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,YAAY,EAAE,CAAC;QAC3C,CAAC;QACD,KAAK,aAAa,CAAC,CAAC,CAAC;YACnB,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,CAAC,UAAU,IAAI,MAAM,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC;YACjE,IAAI,CAAC,UAAU,EAAE,CAAC;gBAChB,MAAM,IAAI,gBAAgB,CACxB,mBAAmB,EACnB,+CAA+C,CAChD,CAAC;YACJ,CAAC;YACD,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,UAAU,EAAE,CAAC;QAC7C,CAAC;QACD,KAAK,aAAa,CAAC,CAAC,CAAC;YACnB,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC;YAC3D,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,MAAM,IAAI,gBAAgB,CACxB,mBAAmB,EACnB,4CAA4C,CAC7C,CAAC;YACJ,CAAC;YACD,MAAM,SAAS,GAAG,OAAO,MAAM,CAAC,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC;YACjF,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC;QACrD,CAAC;QACD,KAAK,yBAAyB,CAAC,CAAC,CAAC;YAC/B,MAAM,WAAW,GAAG,MAAM,CAAC,MAAM,CAAC,WAAW,IAAI,MAAM,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC;YACnE,MAAM,cAAc,GAAG,MAAM,CAAC,MAAM,CAAC,cAAc,IAAI,EAAE,CAAC,CAAC;YAC3D,IAAI,CAAC,WAAW,IAAI,CAAC,cAAc,EAAE,CAAC;gBACpC,MAAM,IAAI,gBAAgB,CACxB,mBAAmB,EACnB,wEAAwE,CACzE,CAAC;YACJ,CAAC;YACD,OAAO,EAAE,IAAI,EAAE,yBAAyB,EAAE,WAAW,EAAE,cAAc,EAAE,CAAC;QAC1E,CAAC;QACD,KAAK,QAAQ,CAAC,CAAC,CAAC;YACd,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,SAAS,IAAI,MAAM,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC;YAC/D,IAAI,CAAC,SAAS,EAAE,CAAC;gBACf,MAAM,IAAI,gBAAgB,CACxB,mBAAmB,EACnB,yCAAyC,CAC1C,CAAC;YACJ,CAAC;YACD,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;YACzC,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;QAC9C,CAAC;QACD,KAAK,iBAAiB,CAAC,CAAC,CAAC;YACvB,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC;YACnD,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,CAAC,UAAU,IAAI,MAAM,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC;YACjE,IAAI,CAAC,UAAU,IAAI,CAAC,UAAU,EAAE,CAAC;gBAC/B,MAAM,IAAI,gBAAgB,CACxB,mBAAmB,EACnB,2DAA2D,CAC5D,CAAC;YACJ,CAAC;YACD,OAAO,EAAE,IAAI,EAAE,iBAAiB,EAAE,UAAU,EAAE,UAAU,EAAE,CAAC;QAC7D,CAAC;QACD;YACE,MAAM,IAAI,gBAAgB,CACxB,mBAAmB,EACnB,4BAA4B,MAAM,CAAC,OAAO,CAAC,EAAE,CAC9C,CAAC;IACN,CAAC;AACH,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,MAA+B;IAC3D,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;IAC1C,OAAO;QACL,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,GAAG,IAAI,EAAE,CAAC;QACjC,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,GAAG,IAAI,oBAAoB,CAAC;QAClD,QAAQ,EAAE,CAAC,MAAM,CAAC,GAAG,IAAI,SAAS,CAAsB;QACxD,UAAU,EAAE,MAAM,CAAC,MAAM,CAAC,GAAG,IAAI,GAAG,GAAG,IAAI,CAAC;QAC5C,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,GAAG,IAAI,GAAG,CAAC;QACpC,GAAG,EAAE,MAAM;KACZ,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,MAA+B;IAC3D,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG,CAAC;IACvB,MAAM,SAAS,GACb,GAAG,KAAK,YAAY;QACpB,GAAG,KAAK,SAAS;QACjB,GAAG,KAAK,KAAK;QACb,GAAG,KAAK,SAAS;QACf,CAAC,CAAC,GAAG;QACL,CAAC,CAAC,IAAI,CAAC;IACX,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC;QACzC,CAAC,CAAE,MAAM,CAAC,MAA4B;QACtC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC;YAC3B,CAAC,CAAE,MAAM,CAAC,KAA2B;YACrC,CAAC,CAAC,EAAE,CAAC;IACT,OAAO;QACL,MAAM,EAAE,OAAO,MAAM,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI;QAChE,QAAQ,EAAE,OAAO,MAAM,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI;QACtE,GAAG,EAAE,SAAS;QACd,MAAM;KACP,CAAC;AACJ,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "dominus-sdk-nodejs",
-  "version": "11.0.0",
+  "version": "11.0.1",
   "description": "Node.js SDK for the Dominus gateway-first platform",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",
@@ -21,7 +21,7 @@
     "clean": "rm -rf dist",
     "prepublishOnly": "npm run build",
     "typecheck": "tsc --noEmit",
-    "test": "npm run build && npm run test:types && node --test tests/artifacts-contract.test.js tests/auth.test.js tests/health.test.js tests/browser.test.js tests/recipes.test.js tests/recipes-stash-routing.test.js tests/platform-coder.test.js tests/publisher.test.js tests/workflow-lifecycle.test.js tests/logs.test.js tests/public-exports.test.js tests/authority-contract.test.js tests/error-contract.test.js tests/admin.test.js tests/control-plane.test.js tests/schema-builder-contract.test.js tests/files-contract.test.js tests/storage-wire-contract.test.js tests/stash-artifact-facade.test.js tests/stash-managed-tables.test.js tests/conversation-format.test.js tests/per-call-controls.test.js tests/provision-verify-contract.test.js tests/secrets-presence-contract.test.js",
+    "test": "npm run build && npm run test:types && node --test tests/artifacts-contract.test.js tests/auth.test.js tests/health.test.js tests/browser.test.js tests/recipes.test.js tests/recipes-stash-routing.test.js tests/platform-coder.test.js tests/publisher.test.js tests/workflow-lifecycle.test.js tests/logs.test.js tests/public-exports.test.js tests/authority-contract.test.js tests/error-contract.test.js tests/admin.test.js tests/control-plane.test.js tests/schema-builder-contract.test.js tests/files-contract.test.js tests/storage-wire-contract.test.js tests/stash-artifact-facade.test.js tests/stash-managed-tables.test.js tests/conversation-format.test.js tests/per-call-controls.test.js tests/provision-verify-contract.test.js tests/secrets-presence-contract.test.js tests/readme-quickstart.test.js",
     "test:types": "tsc -p tsconfig.type-tests.json",
     "lint": "tsc --noEmit"
   },