@ambasada/sdk 0.8.5 → 0.8.7

package/dist/client.d.ts

@@ -15,7 +15,10 @@ export interface AmbasadaOptions {
     fetch?: typeof fetch;
     /** Per-request timeout in ms (default 45 s). */
     timeoutMs?: number;
-    /** Extra env source, e.g. a Worker's `env`. Default: `process.env` where it exists. */
+    /**
+     * Extra env source, e.g. a Worker's `env`. Default: `process.env` where it exists. A Worker hosted on ambasada.dev has
+     * an `AMBASADA_API` service binding there: the client calls the API through it (no zone in between, so no 522).
+     */
     env?: Record<string, unknown>;
     /** Sign in with Ambasada credentials. Default: `AMBASADA_AUTH_CLIENT_ID`, `_CLIENT_SECRET`, `_ISSUER`, and `PUBLIC_URL`. */
     auth?: {
@@ -42,6 +45,8 @@ export interface RequestOptions {
     signal?: AbortSignal;
     /** Retry once on a network error (only safe with an idempotency key). */
     retry?: boolean;
+    /** This request's timeout in ms, over the client's `timeoutMs` (an LLM call may take the API's 120 s). */
+    timeoutMs?: number;
 }
 export interface RawResponse {
     status: number;
@@ -58,6 +63,11 @@ export declare class Ambasada {
     private projectPromise?;
     constructor(options?: AmbasadaOptions);
     protected env(name: string): string | undefined;
+    /**
+     * How this client fetches: `options.fetch`; else, with an `AMBASADA_API` service binding in `env` (hosted on
+     * ambasada.dev), the API's own URLs go through it and everything else (the hub, the issuer) through `fetch`.
+     */
+    protected get fetcher(): typeof fetch;
     get apiUrl(): string;
     protected get apiKey(): string;
     /**

package/dist/platform.js

@@ -590,6 +590,7 @@ var AmbasadaAuth = class {
 
 // src/client.ts
 var DEFAULT_API_URL = "https://api.ambasada.dev";
+var isBinding = (v) => typeof v === "object" && v !== null && typeof v.fetch === "function";
 function processEnv() {
   const p = globalThis.process;
   return p?.env ?? {};
@@ -605,6 +606,22 @@ var Ambasada = class {
     const v = this.options.env?.[name];
     return typeof v === "string" ? v : processEnv()[name];
   }
+  /**
+   * How this client fetches: `options.fetch`; else, with an `AMBASADA_API` service binding in `env` (hosted on
+   * ambasada.dev), the API's own URLs go through it and everything else (the hub, the issuer) through `fetch`.
+   */
+  get fetcher() {
+    if (this.options.fetch) return this.options.fetch;
+    const binding = this.options.env?.AMBASADA_API;
+    if (!isBinding(binding)) return (input, init) => fetch(input, init);
+    const api = new Set(
+      [this.apiUrl, this.env("AMBASADA_API_URL"), this.env("AMBASADA_VILLAGE_API_URL")].filter((u) => !!u && URL.canParse(u)).map((u) => new URL(u).origin)
+    );
+    return (input, init) => {
+      const request = new Request(input, init);
+      return api.has(new URL(request.url).origin) ? binding.fetch(request) : fetch(request);
+    };
+  }
   get apiUrl() {
     return (this.options.apiUrl ?? this.env("AMBASADA_API_URL") ?? this.env("VILLAGE_API_URL") ?? DEFAULT_API_URL).replace(/\/+$/, "");
   }
@@ -626,7 +643,7 @@ var Ambasada = class {
     // Silent sign-in: a shell token must be for this app, by id or origin.
     audiences: [this.appOrigin, this.options.app?.id ?? this.env("AMBASADA_APP_ID") ?? this.env("AMBASADA_COMPANY")].filter((a) => !!a),
     hubUrl: this.hubUrl,
-    fetch: this.options.fetch
+    fetch: this.fetcher
   }));
   get appOrigin() {
     const url = this.options.app?.origin ?? this.env("AMBASADA_APP_ORIGIN") ?? this.options.auth?.publicUrl ?? this.env("PUBLIC_URL");
@@ -643,7 +660,7 @@ var Ambasada = class {
     appSecret: this.options.app?.secret ?? this.env("AMBASADA_APP_SECRET"),
     hubUrl: this.hubUrl,
     origin: this.appOrigin,
-    fetch: this.options.fetch
+    fetch: this.fetcher
   }));
   // ── HTTP ──────────────────────────────────────────────────────────────────
   async send(method, path, opts = {}) {
@@ -657,9 +674,9 @@ var Ambasada = class {
       headers["content-type"] = "application/json";
     }
     for (const [k, v] of Object.entries(opts.headers ?? {})) if (v !== void 0) headers[k.toLowerCase()] = v;
-    const doFetch = this.options.fetch ?? fetch;
+    const doFetch = this.fetcher;
     const attempt = () => {
-      const timeout = AbortSignal.timeout(this.options.timeoutMs ?? 45e3);
+      const timeout = AbortSignal.timeout(opts.timeoutMs ?? this.options.timeoutMs ?? 45e3);
       const signal = opts.signal ? AbortSignal.any([opts.signal, timeout]) : timeout;
       return doFetch(url, { method, headers, body, signal });
     };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ambasada/sdk",
-  "version": "0.8.5",
+  "version": "0.8.7",
   "description": "The Ambasada platform SDK: Sign in with Ambasada, mini-app notifications, the project store, files.",
   "type": "module",
   "license": "MIT",
@@ -27,7 +27,7 @@
     "node": ">=22"
   },
   "dependencies": {
-    "@ambasada/village": "^0.8.5"
+    "@ambasada/village": "^0.8.7"
   },
   "devDependencies": {
     "@types/node": "^22.20.5",