@backblaze-labs/b2-sdk 0.1.0 → 0.3.0

package/dist/partner/client.cjs

@@ -0,0 +1,255 @@
+const require_errors_index = require("../errors/index.cjs");
+const require_paginator = require("../util/paginator.cjs");
+const require_redaction_placeholders = require("./redaction-placeholders.cjs");
+const require_auth_core = require("./auth-core.cjs");
+//#region src/partner/client.ts
+var MASTER_KEY_REDACTED = "[redacted Master Application Key]";
+/**
+* High-level Partner API client for groups, members, and B2 Reserve trials.
+*
+* @example
+* ```ts
+* const partner = new PartnerClient({
+*   masterKeyId: process.env.B2_MASTER_KEY_ID,
+*   masterKey: process.env.B2_MASTER_KEY,
+* })
+* await partner.authorize()
+* for await (const group of partner.paginateGroups()) {
+*   console.log(group.groupName)
+* }
+* ```
+*
+* @experimental Partner API surface; shape may change as the Partner API docs evolve.
+*/
+var PartnerClient = class {
+	/** Low-level client for direct Partner API calls. */
+	raw;
+	/** Partner authorization state storage (tokens, URLs, capabilities). */
+	partnerAccountInfo;
+	/**
+	* SSRF allow-list applied by the default transport. `null` when
+	* a custom transport was supplied; in that case the SDK does not own the
+	* guard.
+	*/
+	urlGuard;
+	authCore;
+	/**
+	* Creates a new PartnerClient. Call {@link authorize} before making API requests.
+	*
+	* @param options - Configuration including credentials, realm, and transport settings.
+	*/
+	constructor(options) {
+		this.authCore = new require_auth_core.PartnerAuthCore(options);
+		this.raw = this.authCore.raw;
+		this.partnerAccountInfo = this.authCore.partnerAccountInfo;
+		this.urlGuard = this.authCore.urlGuard;
+	}
+	/**
+	* Authenticates with B2 Partner authorization and stores the authorization state.
+	*
+	* @param options - Optional abort signal.
+	*
+	* @returns The Partner authorization response containing tokens, URLs, and capabilities.
+	*
+	* @experimental Partner API surface; shape may change as the Partner API docs evolve.
+	*/
+	async authorize(options) {
+		return this.authCore.authorize(options);
+	}
+	/**
+	* Lists Partner groups for the authorized partner administrator account.
+	*
+	* @param options - Optional group filter and pagination settings.
+	*
+	* @returns A page of Partner groups with an optional continuation cursor.
+	*
+	* @experimental Partner API surface; shape may change as the Partner API docs evolve.
+	*/
+	async listGroups(options) {
+		const { groupsApiUrl, authToken, adminAccountId } = this.groupsCoordinates(this.ensureGroupsAuthorization());
+		return this.raw.listGroups(groupsApiUrl, authToken, {
+			adminAccountId,
+			...options?.groupName !== void 0 ? { groupName: options.groupName } : {},
+			...options?.startGroupId !== void 0 ? { startGroupId: options.startGroupId } : {},
+			...options?.pageSize !== void 0 ? { maxGroupCount: options.pageSize } : {}
+		}, options?.signal !== void 0 ? { signal: options.signal } : void 0);
+	}
+	/**
+	* Async iterator that yields every Partner group for the authorized account.
+	*
+	* @param options - Optional group filter, page size, and abort signal.
+	*
+	* @returns An async iterable of {@link PartnerGroup} entries.
+	*
+	* @experimental Partner API surface; shape may change as the Partner API docs evolve.
+	*/
+	paginateGroups(options) {
+		return require_paginator.paginateItems(async (cursor) => {
+			const resp = await this.listGroups({
+				...options?.groupName !== void 0 ? { groupName: options.groupName } : {},
+				...options?.pageSize !== void 0 ? { pageSize: options.pageSize } : {},
+				...cursor !== void 0 ? { startGroupId: cursor } : {},
+				...options?.signal !== void 0 ? { signal: options.signal } : {}
+			});
+			return {
+				page: resp,
+				nextCursor: resp.nextGroupId ?? void 0
+			};
+		}, (page) => page.groups, options?.signal);
+	}
+	/**
+	* Lists active members for a Partner group.
+	*
+	* @param options - Group ID plus optional pagination settings.
+	*
+	* @returns A page of group-member results with an optional continuation cursor.
+	*
+	* @experimental Partner API surface; shape may change as the Partner API docs evolve.
+	*/
+	async listGroupMembers(options) {
+		const { groupsApiUrl, authToken, adminAccountId } = this.groupsCoordinates(this.ensureGroupsAuthorization());
+		return this.raw.listGroupMembers(groupsApiUrl, authToken, {
+			adminAccountId,
+			groupId: options.groupId,
+			...options.startEmail !== void 0 ? { startEmail: options.startEmail } : {},
+			...options.pageSize !== void 0 ? { maxMemberCount: options.pageSize } : {}
+		}, options.signal !== void 0 ? { signal: options.signal } : void 0);
+	}
+	/**
+	* Async iterator that yields every active member for a Partner group.
+	*
+	* @param options - Group ID plus optional page size and abort signal.
+	*
+	* @returns An async iterable of {@link ListedGroupMember} entries.
+	*
+	* @experimental Partner API surface; shape may change as the Partner API docs evolve.
+	*/
+	paginateGroupMembers(options) {
+		return require_paginator.paginateItems(async (cursor) => {
+			const resp = await this.listGroupMembers({
+				groupId: options.groupId,
+				...options.pageSize !== void 0 ? { pageSize: options.pageSize } : {},
+				...cursor !== void 0 ? { startEmail: cursor } : {},
+				...options.signal !== void 0 ? { signal: options.signal } : {}
+			});
+			return {
+				page: resp,
+				nextCursor: resp[0]?.nextEmail ?? void 0
+			};
+		}, (page) => page.flatMap((result) => result.groupMembers), options.signal);
+	}
+	/**
+	* Creates a new Backblaze account and adds it to a Partner group.
+	*
+	* This mutation is non-idempotent. Automatic retries and expired-token
+	* reauthorization are disabled; long-running batch callers must catch token
+	* expiry, call {@link authorize}, and decide whether to issue a new request.
+	*
+	* @param options - Group ID, member email, and optional region.
+	*
+	* @returns The created member result array, including the member application key.
+	*
+	* @experimental Partner API surface; shape may change as the Partner API docs evolve.
+	*/
+	async createGroupMember(options) {
+		const { groupsApiUrl, authToken, adminAccountId } = this.groupsCoordinates(this.ensureGroupsAuthorization());
+		return this.raw.createGroupMember(groupsApiUrl, authToken, {
+			adminAccountId,
+			groupId: options.groupId,
+			memberEmail: options.memberEmail,
+			...options.region !== void 0 ? { region: options.region } : {}
+		}, options.signal !== void 0 ? { signal: options.signal } : void 0);
+	}
+	/**
+	* Ejects an active member from a Partner group without deleting the account.
+	*
+	* This mutation is non-idempotent. Automatic retries and expired-token
+	* reauthorization are disabled; long-running batch callers must catch token
+	* expiry, call {@link authorize}, and decide whether to issue a new request.
+	*
+	* @param options - Group ID, member account ID, and optional replacement email.
+	*
+	* @returns The ejected member object.
+	*
+	* @experimental Partner API surface; shape may change as the Partner API docs evolve.
+	*/
+	async ejectGroupMember(options) {
+		const { groupsApiUrl, authToken, adminAccountId } = this.groupsCoordinates(this.ensureGroupsAuthorization());
+		return this.raw.ejectGroupMember(groupsApiUrl, authToken, {
+			adminAccountId,
+			groupId: options.groupId,
+			memberAccountId: options.memberAccountId,
+			...options.email !== void 0 ? { email: options.email } : {}
+		}, options.signal !== void 0 ? { signal: options.signal } : void 0);
+	}
+	/**
+	* Reserves one or more new B2 Reserve trial accounts.
+	*
+	* This operation is non-idempotent and automatic retries/expired-token
+	* reauthorization are disabled at the raw layer. If the request fails after
+	* the server processes it, the returned application keys may be
+	* unrecoverable; reconcile account state before reissuing a batch.
+	*
+	* @param request - A single trial account request or a non-empty request array.
+	* @param options - Optional abort signal.
+	*
+	* @returns The created reserve-trial account result array.
+	*
+	* @experimental Partner API surface; shape may change as the Partner API docs evolve.
+	*/
+	async reserveTrialAccounts(request, options) {
+		if (Array.isArray(request) && request.length === 0) throw new TypeError("reserveTrialAccounts request array must include at least one account request.");
+		const { groupsApiUrl, authToken } = this.groupsCoordinates(this.ensureGroupsAuthorization());
+		return this.raw.reserveTrialCreateAccount(groupsApiUrl, authToken, request, options?.signal !== void 0 ? { signal: options.signal } : void 0);
+	}
+	/**
+	* Hides credentials and Partner tokens from `JSON.stringify(client)`.
+	*
+	* @returns A redacted diagnostic object.
+	*/
+	toJSON() {
+		return {
+			type: "PartnerClient",
+			credentials: MASTER_KEY_REDACTED,
+			authorization: this.partnerAccountInfo.getAuth() === null ? "[unauthorized]" : require_redaction_placeholders.PARTNER_TOKEN_REDACTED,
+			authorized: this.partnerAccountInfo.getAuth() !== null,
+			urlGuardAllowedSuffixes: this.urlGuard?.getAllowedSuffixes() ?? null
+		};
+	}
+	/**
+	* Hides credentials and Partner tokens from default stringification.
+	*
+	* @returns A short redacted label.
+	*/
+	toString() {
+		return `[PartnerClient ${MASTER_KEY_REDACTED}]`;
+	}
+	/**
+	* Hides credentials and Partner tokens from Node's `util.inspect`.
+	*
+	* @returns A short redacted label.
+	*/
+	[Symbol.for("nodejs.util.inspect.custom")]() {
+		return this.toString();
+	}
+	ensureGroupsAuthorization() {
+		const auth = this.partnerAccountInfo.getAuth();
+		if (auth === null) throw new require_errors_index.B2PartnerAuthorizationError("Not authorized. Call PartnerClient.authorize() first.");
+		const suffixes = this.authCore.activateEndpointSuffixes(auth);
+		this.raw.setAuthorizedEndpointSuffixes(suffixes);
+		return auth;
+	}
+	groupsCoordinates(auth) {
+		const groupsApiUrl = auth.apiInfo.groupsApi?.groupsApiUrl;
+		if (groupsApiUrl === void 0) throw new require_errors_index.B2PartnerAuthorizationError("Partner API is not available; PartnerClient.authorize() did not return apiInfo.groupsApi.");
+		return {
+			groupsApiUrl,
+			authToken: auth.authorizationToken,
+			adminAccountId: auth.accountId
+		};
+	}
+};
+//#endregion
+exports.PartnerClient = PartnerClient;
+
+//# sourceMappingURL=client.cjs.map

package/dist/partner/client.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.cjs","names":[],"sources":["../../src/partner/client.ts"],"sourcesContent":["import { B2PartnerAuthorizationError } from '../errors/index.ts'\nimport type { RetryOptions } from '../http/retry.ts'\nimport type { HttpTransport } from '../http/transport.ts'\nimport type { UrlGuard } from '../http/url-guard.ts'\nimport type { AccountId, GroupId, PartnerToken } from '../types/ids.ts'\nimport type {\n  CreateGroupMemberResponse,\n  EjectGroupMemberResponse,\n  ListedGroupMember,\n  ListGroupMembersResponse,\n  ListGroupsResponse,\n  PartnerAuthorizeResponse,\n  PartnerGroup,\n  Region,\n  ReserveTrialCreateAccountRequest,\n  ReserveTrialCreateAccountRequestEntry,\n  ReserveTrialCreateAccountResponse,\n} from '../types/partner.ts'\nimport { paginateItems } from '../util/paginator.ts'\nimport type { PartnerAccountInfo } from './account-info.ts'\nimport { PartnerAuthCore } from './auth-core.ts'\nimport type { PartnerRawClient } from './raw.ts'\nimport { PARTNER_TOKEN_REDACTED } from './redaction.ts'\n\nconst MASTER_KEY_REDACTED = '[redacted Master Application Key]'\n\n/**\n * Configuration options for creating a {@link PartnerClient}.\n *\n * @experimental Partner API surface; shape may change as the Partner API docs evolve.\n */\nexport interface PartnerClientOptions {\n  /** The Master Application Key ID for the partner administrator account. */\n  readonly masterKeyId: string\n  /** The Master Application Key secret. */\n  readonly masterKey: string\n  /**\n   * B2 realm to authenticate against. Accepts a known realm-map key\n   * (`\"production\"` or `\"staging\"`) or a direct base URL. Custom HTTPS hosts\n   * are trusted with the Master Application Key during authorize, so never\n   * derive `realm` from untrusted input. URL values must use HTTPS, or\n   * loopback IP literal HTTP for local testing only; Master Application Key\n   * credentials are sent unencrypted over loopback HTTP. Unsupported schemes,\n   * malformed URLs, non-URL strings, plaintext HTTP hostnames such as\n   * `localhost`, and non-loopback plaintext HTTP are rejected before\n   * credentials are sent. URL values must not include userinfo, query strings,\n   * or fragments. Defaults to `\"production\"`.\n   */\n  readonly realm?: string\n  /**\n   * Storage backend for Partner authorization state. Defaults to\n   * {@link InMemoryPartnerAccountInfo}. Cached authorization whose endpoint\n   * URLs fail the configured realm policy is ignored by this client until\n   * `authorize()` replaces it; shared stores are not cleared during\n   * construction.\n   */\n  readonly partnerAccountInfo?: PartnerAccountInfo\n  /** Custom HTTP transport. Defaults to `FetchTransport`. Wrapped by `RetryTransport`. */\n  readonly transport?: HttpTransport\n  /** Override retry behavior (max retries, backoff, and per-attempt timeout). */\n  readonly retry?: Partial<RetryOptions>\n  /** Custom user-agent string prepended to the SDK default. */\n  readonly userAgent?: string\n  /**\n   * Additional SSRF allow-list host suffixes. By default the SDK locks the\n   * default transport to host suffixes derived from the Partner authorize\n   * response. Pass an explicit list to add trusted hosts, for example a test\n   * proxy. An empty array adds no hosts and leaves the default guard enabled.\n   *\n   * Only consulted when {@link PartnerClientOptions.transport} is unset; a\n   * custom transport is the user's responsibility to harden.\n   */\n  readonly additionalAllowedHostSuffixes?: readonly string[]\n  /**\n   * Explicitly disable the default SSRF guard after authorize.\n   *\n   * This is intended only for controlled simulator/private-proxy tests. Never\n   * enable it for URLs derived from untrusted input or production credentials.\n   * Only consulted when {@link PartnerClientOptions.transport} is unset.\n   */\n  readonly disableSsrfGuard?: boolean\n  /**\n   * Follow same-origin GET/HEAD redirects in the default fetch transport after\n   * checking each target with the SSRF guard. POST redirects remain blocked.\n   * Defaults to true.\n   */\n  readonly followSameOriginRedirects?: boolean\n  /**\n   * Allow direct custom authorize realms for tests or private proxies.\n   * Leave disabled unless the configured host is trusted with the Master\n   * Application Key.\n   */\n  readonly allowCustomAuthorizeRealm?: boolean\n}\n\n/**\n * Options for Partner authorization.\n *\n * @experimental Partner API surface; shape may change as the Partner API docs evolve.\n */\nexport interface PartnerAuthorizeOptions {\n  /** Abort signal for cancelling the authorize request. */\n  readonly signal?: AbortSignal\n}\n\n/**\n * Options for listing Partner groups.\n *\n * @experimental Partner API surface; shape may change as the Partner API docs evolve.\n */\nexport interface ListGroupsOptions {\n  /** Optional group name filter. Multiple groups may share the same name. */\n  readonly groupName?: string\n  /** Group ID to start listing from for pagination. */\n  readonly startGroupId?: GroupId\n  /** Maximum groups to return in this page. Forwarded to `maxGroupCount`. */\n  readonly pageSize?: number\n  /** Abort signal for cancelling the request. */\n  readonly signal?: AbortSignal\n}\n\n/**\n * Options for paginating Partner groups.\n *\n * @experimental Partner API surface; shape may change as the Partner API docs evolve.\n */\nexport interface PaginateGroupsOptions extends Omit<ListGroupsOptions, 'startGroupId'> {\n  /**\n   * Aborts the iteration between page fetches. The signal is also forwarded to\n   * each underlying list request.\n   */\n  readonly signal?: AbortSignal\n}\n\n/**\n * Options for listing Partner group members.\n *\n * @experimental Partner API surface; shape may change as the Partner API docs evolve.\n */\nexport interface ListGroupMembersOptions {\n  /** Group ID whose active members should be listed. */\n  readonly groupId: GroupId\n  /** First member email address to return for pagination. */\n  readonly startEmail?: string\n  /** Maximum members to return in this page. Forwarded to `maxMemberCount`. */\n  readonly pageSize?: number\n  /** Abort signal for cancelling the request. */\n  readonly signal?: AbortSignal\n}\n\n/**\n * Options for paginating Partner group members.\n *\n * @experimental Partner API surface; shape may change as the Partner API docs evolve.\n */\nexport interface PaginateGroupMembersOptions extends Omit<ListGroupMembersOptions, 'startEmail'> {\n  /**\n   * Aborts the iteration between page fetches. The signal is also forwarded to\n   * each underlying list request.\n   */\n  readonly signal?: AbortSignal\n}\n\n/**\n * Options for creating a Partner group member.\n *\n * @experimental Partner API surface; shape may change as the Partner API docs evolve.\n */\nexport interface CreateGroupMemberOptions {\n  /** Group ID that the new Backblaze account will join. */\n  readonly groupId: GroupId\n  /** Email address for the new group member account. */\n  readonly memberEmail: string\n  /** Region for the new account's data, or null to use the current default region. */\n  readonly region?: Region | null\n  /** Abort signal for cancelling the request. */\n  readonly signal?: AbortSignal\n}\n\n/**\n * Options for ejecting a Partner group member.\n *\n * @experimental Partner API surface; shape may change as the Partner API docs evolve.\n */\nexport interface EjectGroupMemberOptions {\n  /** Group ID that currently contains the member. */\n  readonly groupId: GroupId\n  /** Account ID of the group member being ejected. */\n  readonly memberAccountId: AccountId\n  /** Replacement email for the ejected account, or null to keep the current email address. */\n  readonly email?: string | null\n  /** Abort signal for cancelling the request. */\n  readonly signal?: AbortSignal\n}\n\n/**\n * Options for reserving B2 Reserve trial accounts.\n *\n * @experimental Partner API surface; shape may change as the Partner API docs evolve.\n */\nexport interface ReserveTrialAccountsOptions {\n  /** Abort signal for cancelling the request. */\n  readonly signal?: AbortSignal\n}\n\n/** Coordinates needed for Partner groups API requests. */\ninterface PartnerGroupsCoordinates {\n  readonly groupsApiUrl: string\n  readonly authToken: PartnerToken\n  readonly adminAccountId: AccountId\n}\n\n/** Redacted JSON diagnostic shape emitted by {@link PartnerClient.toJSON}. */\nexport interface PartnerClientJson {\n  /** Object kind for log consumers. */\n  readonly type: 'PartnerClient'\n  /** Redacted Master Application Key credential placeholder. */\n  readonly credentials: string\n  /** Redacted Partner token placeholder, or unauthorized state. */\n  readonly authorization: string\n  /** Whether this client currently has Partner authorization state. */\n  readonly authorized: boolean\n  /** Current default URL guard suffixes, or null when a custom transport owns guarding. */\n  readonly urlGuardAllowedSuffixes: readonly string[] | null\n}\n\n/**\n * High-level Partner API client for groups, members, and B2 Reserve trials.\n *\n * @example\n * ```ts\n * const partner = new PartnerClient({\n *   masterKeyId: process.env.B2_MASTER_KEY_ID,\n *   masterKey: process.env.B2_MASTER_KEY,\n * })\n * await partner.authorize()\n * for await (const group of partner.paginateGroups()) {\n *   console.log(group.groupName)\n * }\n * ```\n *\n * @experimental Partner API surface; shape may change as the Partner API docs evolve.\n */\nexport class PartnerClient {\n  /** Low-level client for direct Partner API calls. */\n  readonly raw: PartnerRawClient\n  /** Partner authorization state storage (tokens, URLs, capabilities). */\n  readonly partnerAccountInfo: PartnerAccountInfo\n  /**\n   * SSRF allow-list applied by the default transport. `null` when\n   * a custom transport was supplied; in that case the SDK does not own the\n   * guard.\n   */\n  readonly urlGuard: UrlGuard | null\n  private readonly authCore: PartnerAuthCore\n\n  /**\n   * Creates a new PartnerClient. Call {@link authorize} before making API requests.\n   *\n   * @param options - Configuration including credentials, realm, and transport settings.\n   */\n  constructor(options: PartnerClientOptions) {\n    this.authCore = new PartnerAuthCore(options)\n    this.raw = this.authCore.raw\n    this.partnerAccountInfo = this.authCore.partnerAccountInfo\n    this.urlGuard = this.authCore.urlGuard\n  }\n\n  /**\n   * Authenticates with B2 Partner authorization and stores the authorization state.\n   *\n   * @param options - Optional abort signal.\n   *\n   * @returns The Partner authorization response containing tokens, URLs, and capabilities.\n   *\n   * @experimental Partner API surface; shape may change as the Partner API docs evolve.\n   */\n  async authorize(options?: PartnerAuthorizeOptions): Promise<PartnerAuthorizeResponse> {\n    return this.authCore.authorize(options)\n  }\n\n  /**\n   * Lists Partner groups for the authorized partner administrator account.\n   *\n   * @param options - Optional group filter and pagination settings.\n   *\n   * @returns A page of Partner groups with an optional continuation cursor.\n   *\n   * @experimental Partner API surface; shape may change as the Partner API docs evolve.\n   */\n  async listGroups(options?: ListGroupsOptions): Promise<ListGroupsResponse> {\n    const { groupsApiUrl, authToken, adminAccountId } = this.groupsCoordinates(\n      this.ensureGroupsAuthorization(),\n    )\n    return this.raw.listGroups(\n      groupsApiUrl,\n      authToken,\n      {\n        adminAccountId,\n        ...(options?.groupName !== undefined ? { groupName: options.groupName } : {}),\n        ...(options?.startGroupId !== undefined ? { startGroupId: options.startGroupId } : {}),\n        ...(options?.pageSize !== undefined ? { maxGroupCount: options.pageSize } : {}),\n      },\n      options?.signal !== undefined ? { signal: options.signal } : undefined,\n    )\n  }\n\n  /**\n   * Async iterator that yields every Partner group for the authorized account.\n   *\n   * @param options - Optional group filter, page size, and abort signal.\n   *\n   * @returns An async iterable of {@link PartnerGroup} entries.\n   *\n   * @experimental Partner API surface; shape may change as the Partner API docs evolve.\n   */\n  paginateGroups(options?: PaginateGroupsOptions): AsyncIterableIterator<PartnerGroup> {\n    return paginateItems(\n      async (cursor: GroupId | undefined) => {\n        const resp = await this.listGroups({\n          ...(options?.groupName !== undefined ? { groupName: options.groupName } : {}),\n          ...(options?.pageSize !== undefined ? { pageSize: options.pageSize } : {}),\n          ...(cursor !== undefined ? { startGroupId: cursor } : {}),\n          ...(options?.signal !== undefined ? { signal: options.signal } : {}),\n        })\n        return { page: resp, nextCursor: resp.nextGroupId ?? undefined }\n      },\n      (page) => page.groups,\n      options?.signal,\n    )\n  }\n\n  /**\n   * Lists active members for a Partner group.\n   *\n   * @param options - Group ID plus optional pagination settings.\n   *\n   * @returns A page of group-member results with an optional continuation cursor.\n   *\n   * @experimental Partner API surface; shape may change as the Partner API docs evolve.\n   */\n  async listGroupMembers(options: ListGroupMembersOptions): Promise<ListGroupMembersResponse> {\n    const { groupsApiUrl, authToken, adminAccountId } = this.groupsCoordinates(\n      this.ensureGroupsAuthorization(),\n    )\n    return this.raw.listGroupMembers(\n      groupsApiUrl,\n      authToken,\n      {\n        adminAccountId,\n        groupId: options.groupId,\n        ...(options.startEmail !== undefined ? { startEmail: options.startEmail } : {}),\n        ...(options.pageSize !== undefined ? { maxMemberCount: options.pageSize } : {}),\n      },\n      options.signal !== undefined ? { signal: options.signal } : undefined,\n    )\n  }\n\n  /**\n   * Async iterator that yields every active member for a Partner group.\n   *\n   * @param options - Group ID plus optional page size and abort signal.\n   *\n   * @returns An async iterable of {@link ListedGroupMember} entries.\n   *\n   * @experimental Partner API surface; shape may change as the Partner API docs evolve.\n   */\n  paginateGroupMembers(\n    options: PaginateGroupMembersOptions,\n  ): AsyncIterableIterator<ListedGroupMember> {\n    return paginateItems(\n      async (cursor: string | undefined) => {\n        const resp = await this.listGroupMembers({\n          groupId: options.groupId,\n          ...(options.pageSize !== undefined ? { pageSize: options.pageSize } : {}),\n          ...(cursor !== undefined ? { startEmail: cursor } : {}),\n          ...(options.signal !== undefined ? { signal: options.signal } : {}),\n        })\n        // The API returns an array for consistency with batch-capable Partner\n        // surfaces, but this request is scoped to one group ID.\n        const result = resp[0]\n        return {\n          page: resp,\n          nextCursor: result?.nextEmail ?? undefined,\n        }\n      },\n      (page) => page.flatMap((result) => result.groupMembers),\n      options.signal,\n    )\n  }\n\n  /**\n   * Creates a new Backblaze account and adds it to a Partner group.\n   *\n   * This mutation is non-idempotent. Automatic retries and expired-token\n   * reauthorization are disabled; long-running batch callers must catch token\n   * expiry, call {@link authorize}, and decide whether to issue a new request.\n   *\n   * @param options - Group ID, member email, and optional region.\n   *\n   * @returns The created member result array, including the member application key.\n   *\n   * @experimental Partner API surface; shape may change as the Partner API docs evolve.\n   */\n  async createGroupMember(options: CreateGroupMemberOptions): Promise<CreateGroupMemberResponse> {\n    const { groupsApiUrl, authToken, adminAccountId } = this.groupsCoordinates(\n      this.ensureGroupsAuthorization(),\n    )\n    return this.raw.createGroupMember(\n      groupsApiUrl,\n      authToken,\n      {\n        adminAccountId,\n        groupId: options.groupId,\n        memberEmail: options.memberEmail,\n        ...(options.region !== undefined ? { region: options.region } : {}),\n      },\n      options.signal !== undefined ? { signal: options.signal } : undefined,\n    )\n  }\n\n  /**\n   * Ejects an active member from a Partner group without deleting the account.\n   *\n   * This mutation is non-idempotent. Automatic retries and expired-token\n   * reauthorization are disabled; long-running batch callers must catch token\n   * expiry, call {@link authorize}, and decide whether to issue a new request.\n   *\n   * @param options - Group ID, member account ID, and optional replacement email.\n   *\n   * @returns The ejected member object.\n   *\n   * @experimental Partner API surface; shape may change as the Partner API docs evolve.\n   */\n  async ejectGroupMember(options: EjectGroupMemberOptions): Promise<EjectGroupMemberResponse> {\n    const { groupsApiUrl, authToken, adminAccountId } = this.groupsCoordinates(\n      this.ensureGroupsAuthorization(),\n    )\n    return this.raw.ejectGroupMember(\n      groupsApiUrl,\n      authToken,\n      {\n        adminAccountId,\n        groupId: options.groupId,\n        memberAccountId: options.memberAccountId,\n        ...(options.email !== undefined ? { email: options.email } : {}),\n      },\n      options.signal !== undefined ? { signal: options.signal } : undefined,\n    )\n  }\n\n  /**\n   * Reserves one or more new B2 Reserve trial accounts.\n   *\n   * This operation is non-idempotent and automatic retries/expired-token\n   * reauthorization are disabled at the raw layer. If the request fails after\n   * the server processes it, the returned application keys may be\n   * unrecoverable; reconcile account state before reissuing a batch.\n   *\n   * @param request - A single trial account request or a non-empty request array.\n   * @param options - Optional abort signal.\n   *\n   * @returns The created reserve-trial account result array.\n   *\n   * @experimental Partner API surface; shape may change as the Partner API docs evolve.\n   */\n  async reserveTrialAccounts(\n    request: ReserveTrialCreateAccountRequestEntry | ReserveTrialCreateAccountRequest,\n    options?: ReserveTrialAccountsOptions,\n  ): Promise<ReserveTrialCreateAccountResponse> {\n    if (Array.isArray(request) && request.length === 0) {\n      throw new TypeError(\n        'reserveTrialAccounts request array must include at least one account request.',\n      )\n    }\n    const { groupsApiUrl, authToken } = this.groupsCoordinates(this.ensureGroupsAuthorization())\n    return this.raw.reserveTrialCreateAccount(\n      groupsApiUrl,\n      authToken,\n      request,\n      options?.signal !== undefined ? { signal: options.signal } : undefined,\n    )\n  }\n\n  /**\n   * Hides credentials and Partner tokens from `JSON.stringify(client)`.\n   *\n   * @returns A redacted diagnostic object.\n   */\n  toJSON(): PartnerClientJson {\n    return {\n      type: 'PartnerClient',\n      credentials: MASTER_KEY_REDACTED,\n      authorization:\n        this.partnerAccountInfo.getAuth() === null ? '[unauthorized]' : PARTNER_TOKEN_REDACTED,\n      authorized: this.partnerAccountInfo.getAuth() !== null,\n      urlGuardAllowedSuffixes: this.urlGuard?.getAllowedSuffixes() ?? null,\n    }\n  }\n\n  /**\n   * Hides credentials and Partner tokens from default stringification.\n   *\n   * @returns A short redacted label.\n   */\n  toString(): string {\n    return `[PartnerClient ${MASTER_KEY_REDACTED}]`\n  }\n\n  /**\n   * Hides credentials and Partner tokens from Node's `util.inspect`.\n   *\n   * @returns A short redacted label.\n   */\n  [Symbol.for('nodejs.util.inspect.custom')](): string {\n    return this.toString()\n  }\n\n  private ensureGroupsAuthorization(): PartnerAuthorizeResponse {\n    const auth = this.partnerAccountInfo.getAuth()\n    if (auth === null) {\n      throw new B2PartnerAuthorizationError('Not authorized. Call PartnerClient.authorize() first.')\n    }\n    const suffixes = this.authCore.activateEndpointSuffixes(auth)\n    this.raw.setAuthorizedEndpointSuffixes(suffixes)\n    return auth\n  }\n\n  private groupsCoordinates(auth: PartnerAuthorizeResponse): PartnerGroupsCoordinates {\n    const groupsApiUrl = auth.apiInfo.groupsApi?.groupsApiUrl\n    if (groupsApiUrl === undefined) {\n      throw new B2PartnerAuthorizationError(\n        'Partner API is not available; PartnerClient.authorize() did not return apiInfo.groupsApi.',\n      )\n    }\n    return {\n      groupsApiUrl,\n      authToken: auth.authorizationToken,\n      adminAccountId: auth.accountId,\n    }\n  }\n}\n"],"mappings":";;;;;AAwBA,IAAM,sBAAsB;;;;;;;;;;;;;;;;;;AA2N5B,IAAa,gBAAb,MAA2B;;CAEzB;;CAEA;;;;;;CAMA;CACA;;;;;;CAOA,YAAY,SAA+B;EACzC,KAAK,WAAW,IAAI,kBAAA,gBAAgB,OAAO;EAC3C,KAAK,MAAM,KAAK,SAAS;EACzB,KAAK,qBAAqB,KAAK,SAAS;EACxC,KAAK,WAAW,KAAK,SAAS;CAChC;;;;;;;;;;CAWA,MAAM,UAAU,SAAsE;EACpF,OAAO,KAAK,SAAS,UAAU,OAAO;CACxC;;;;;;;;;;CAWA,MAAM,WAAW,SAA0D;EACzE,MAAM,EAAE,cAAc,WAAW,mBAAmB,KAAK,kBACvD,KAAK,0BAA0B,CACjC;EACA,OAAO,KAAK,IAAI,WACd,cACA,WACA;GACE;GACA,GAAI,SAAS,cAAc,KAAA,IAAY,EAAE,WAAW,QAAQ,UAAU,IAAI,CAAC;GAC3E,GAAI,SAAS,iBAAiB,KAAA,IAAY,EAAE,cAAc,QAAQ,aAAa,IAAI,CAAC;GACpF,GAAI,SAAS,aAAa,KAAA,IAAY,EAAE,eAAe,QAAQ,SAAS,IAAI,CAAC;EAC/E,GACA,SAAS,WAAW,KAAA,IAAY,EAAE,QAAQ,QAAQ,OAAO,IAAI,KAAA,CAC/D;CACF;;;;;;;;;;CAWA,eAAe,SAAsE;EACnF,OAAO,kBAAA,cACL,OAAO,WAAgC;GACrC,MAAM,OAAO,MAAM,KAAK,WAAW;IACjC,GAAI,SAAS,cAAc,KAAA,IAAY,EAAE,WAAW,QAAQ,UAAU,IAAI,CAAC;IAC3E,GAAI,SAAS,aAAa,KAAA,IAAY,EAAE,UAAU,QAAQ,SAAS,IAAI,CAAC;IACxE,GAAI,WAAW,KAAA,IAAY,EAAE,cAAc,OAAO,IAAI,CAAC;IACvD,GAAI,SAAS,WAAW,KAAA,IAAY,EAAE,QAAQ,QAAQ,OAAO,IAAI,CAAC;GACpE,CAAC;GACD,OAAO;IAAE,MAAM;IAAM,YAAY,KAAK,eAAe,KAAA;GAAU;EACjE,IACC,SAAS,KAAK,QACf,SAAS,MACX;CACF;;;;;;;;;;CAWA,MAAM,iBAAiB,SAAqE;EAC1F,MAAM,EAAE,cAAc,WAAW,mBAAmB,KAAK,kBACvD,KAAK,0BAA0B,CACjC;EACA,OAAO,KAAK,IAAI,iBACd,cACA,WACA;GACE;GACA,SAAS,QAAQ;GACjB,GAAI,QAAQ,eAAe,KAAA,IAAY,EAAE,YAAY,QAAQ,WAAW,IAAI,CAAC;GAC7E,GAAI,QAAQ,aAAa,KAAA,IAAY,EAAE,gBAAgB,QAAQ,SAAS,IAAI,CAAC;EAC/E,GACA,QAAQ,WAAW,KAAA,IAAY,EAAE,QAAQ,QAAQ,OAAO,IAAI,KAAA,CAC9D;CACF;;;;;;;;;;CAWA,qBACE,SAC0C;EAC1C,OAAO,kBAAA,cACL,OAAO,WAA+B;GACpC,MAAM,OAAO,MAAM,KAAK,iBAAiB;IACvC,SAAS,QAAQ;IACjB,GAAI,QAAQ,aAAa,KAAA,IAAY,EAAE,UAAU,QAAQ,SAAS,IAAI,CAAC;IACvE,GAAI,WAAW,KAAA,IAAY,EAAE,YAAY,OAAO,IAAI,CAAC;IACrD,GAAI,QAAQ,WAAW,KAAA,IAAY,EAAE,QAAQ,QAAQ,OAAO,IAAI,CAAC;GACnE,CAAC;GAID,OAAO;IACL,MAAM;IACN,YAHa,KAAK,EAGN,EAAQ,aAAa,KAAA;GACnC;EACF,IACC,SAAS,KAAK,SAAS,WAAW,OAAO,YAAY,GACtD,QAAQ,MACV;CACF;;;;;;;;;;;;;;CAeA,MAAM,kBAAkB,SAAuE;EAC7F,MAAM,EAAE,cAAc,WAAW,mBAAmB,KAAK,kBACvD,KAAK,0BAA0B,CACjC;EACA,OAAO,KAAK,IAAI,kBACd,cACA,WACA;GACE;GACA,SAAS,QAAQ;GACjB,aAAa,QAAQ;GACrB,GAAI,QAAQ,WAAW,KAAA,IAAY,EAAE,QAAQ,QAAQ,OAAO,IAAI,CAAC;EACnE,GACA,QAAQ,WAAW,KAAA,IAAY,EAAE,QAAQ,QAAQ,OAAO,IAAI,KAAA,CAC9D;CACF;;;;;;;;;;;;;;CAeA,MAAM,iBAAiB,SAAqE;EAC1F,MAAM,EAAE,cAAc,WAAW,mBAAmB,KAAK,kBACvD,KAAK,0BAA0B,CACjC;EACA,OAAO,KAAK,IAAI,iBACd,cACA,WACA;GACE;GACA,SAAS,QAAQ;GACjB,iBAAiB,QAAQ;GACzB,GAAI,QAAQ,UAAU,KAAA,IAAY,EAAE,OAAO,QAAQ,MAAM,IAAI,CAAC;EAChE,GACA,QAAQ,WAAW,KAAA,IAAY,EAAE,QAAQ,QAAQ,OAAO,IAAI,KAAA,CAC9D;CACF;;;;;;;;;;;;;;;;CAiBA,MAAM,qBACJ,SACA,SAC4C;EAC5C,IAAI,MAAM,QAAQ,OAAO,KAAK,QAAQ,WAAW,GAC/C,MAAM,IAAI,UACR,+EACF;EAEF,MAAM,EAAE,cAAc,cAAc,KAAK,kBAAkB,KAAK,0BAA0B,CAAC;EAC3F,OAAO,KAAK,IAAI,0BACd,cACA,WACA,SACA,SAAS,WAAW,KAAA,IAAY,EAAE,QAAQ,QAAQ,OAAO,IAAI,KAAA,CAC/D;CACF;;;;;;CAOA,SAA4B;EAC1B,OAAO;GACL,MAAM;GACN,aAAa;GACb,eACE,KAAK,mBAAmB,QAAQ,MAAM,OAAO,mBAAmB,+BAAA;GAClE,YAAY,KAAK,mBAAmB,QAAQ,MAAM;GAClD,yBAAyB,KAAK,UAAU,mBAAmB,KAAK;EAClE;CACF;;;;;;CAOA,WAAmB;EACjB,OAAO,kBAAkB,oBAAoB;CAC/C;;;;;;CAOA,CAAC,OAAO,IAAI,4BAA4B,KAAa;EACnD,OAAO,KAAK,SAAS;CACvB;CAEA,4BAA8D;EAC5D,MAAM,OAAO,KAAK,mBAAmB,QAAQ;EAC7C,IAAI,SAAS,MACX,MAAM,IAAI,qBAAA,4BAA4B,uDAAuD;EAE/F,MAAM,WAAW,KAAK,SAAS,yBAAyB,IAAI;EAC5D,KAAK,IAAI,8BAA8B,QAAQ;EAC/C,OAAO;CACT;CAEA,kBAA0B,MAA0D;EAClF,MAAM,eAAe,KAAK,QAAQ,WAAW;EAC7C,IAAI,iBAAiB,KAAA,GACnB,MAAM,IAAI,qBAAA,4BACR,2FACF;EAEF,OAAO;GACL;GACA,WAAW,KAAK;GAChB,gBAAgB,KAAK;EACvB;CACF;AACF"}

package/dist/partner/client.d.cts

@@ -0,0 +1,335 @@
+import { RetryOptions } from '../http/retry.js';
+import { HttpTransport } from '../http/transport.js';
+import { UrlGuard } from '../http/url-guard.js';
+import { AccountId, GroupId } from '../types/ids.js';
+import { CreateGroupMemberResponse, EjectGroupMemberResponse, ListedGroupMember, ListGroupMembersResponse, ListGroupsResponse, PartnerAuthorizeResponse, PartnerGroup, Region, ReserveTrialCreateAccountRequest, ReserveTrialCreateAccountRequestEntry, ReserveTrialCreateAccountResponse } from '../types/partner.js';
+import { PartnerAccountInfo } from './account-info.js';
+import { PartnerRawClient } from './raw.js';
+/**
+ * Configuration options for creating a {@link PartnerClient}.
+ *
+ * @experimental Partner API surface; shape may change as the Partner API docs evolve.
+ */
+export interface PartnerClientOptions {
+    /** The Master Application Key ID for the partner administrator account. */
+    readonly masterKeyId: string;
+    /** The Master Application Key secret. */
+    readonly masterKey: string;
+    /**
+     * B2 realm to authenticate against. Accepts a known realm-map key
+     * (`"production"` or `"staging"`) or a direct base URL. Custom HTTPS hosts
+     * are trusted with the Master Application Key during authorize, so never
+     * derive `realm` from untrusted input. URL values must use HTTPS, or
+     * loopback IP literal HTTP for local testing only; Master Application Key
+     * credentials are sent unencrypted over loopback HTTP. Unsupported schemes,
+     * malformed URLs, non-URL strings, plaintext HTTP hostnames such as
+     * `localhost`, and non-loopback plaintext HTTP are rejected before
+     * credentials are sent. URL values must not include userinfo, query strings,
+     * or fragments. Defaults to `"production"`.
+     */
+    readonly realm?: string;
+    /**
+     * Storage backend for Partner authorization state. Defaults to
+     * {@link InMemoryPartnerAccountInfo}. Cached authorization whose endpoint
+     * URLs fail the configured realm policy is ignored by this client until
+     * `authorize()` replaces it; shared stores are not cleared during
+     * construction.
+     */
+    readonly partnerAccountInfo?: PartnerAccountInfo;
+    /** Custom HTTP transport. Defaults to `FetchTransport`. Wrapped by `RetryTransport`. */
+    readonly transport?: HttpTransport;
+    /** Override retry behavior (max retries, backoff, and per-attempt timeout). */
+    readonly retry?: Partial<RetryOptions>;
+    /** Custom user-agent string prepended to the SDK default. */
+    readonly userAgent?: string;
+    /**
+     * Additional SSRF allow-list host suffixes. By default the SDK locks the
+     * default transport to host suffixes derived from the Partner authorize
+     * response. Pass an explicit list to add trusted hosts, for example a test
+     * proxy. An empty array adds no hosts and leaves the default guard enabled.
+     *
+     * Only consulted when {@link PartnerClientOptions.transport} is unset; a
+     * custom transport is the user's responsibility to harden.
+     */
+    readonly additionalAllowedHostSuffixes?: readonly string[];
+    /**
+     * Explicitly disable the default SSRF guard after authorize.
+     *
+     * This is intended only for controlled simulator/private-proxy tests. Never
+     * enable it for URLs derived from untrusted input or production credentials.
+     * Only consulted when {@link PartnerClientOptions.transport} is unset.
+     */
+    readonly disableSsrfGuard?: boolean;
+    /**
+     * Follow same-origin GET/HEAD redirects in the default fetch transport after
+     * checking each target with the SSRF guard. POST redirects remain blocked.
+     * Defaults to true.
+     */
+    readonly followSameOriginRedirects?: boolean;
+    /**
+     * Allow direct custom authorize realms for tests or private proxies.
+     * Leave disabled unless the configured host is trusted with the Master
+     * Application Key.
+     */
+    readonly allowCustomAuthorizeRealm?: boolean;
+}
+/**
+ * Options for Partner authorization.
+ *
+ * @experimental Partner API surface; shape may change as the Partner API docs evolve.
+ */
+export interface PartnerAuthorizeOptions {
+    /** Abort signal for cancelling the authorize request. */
+    readonly signal?: AbortSignal;
+}
+/**
+ * Options for listing Partner groups.
+ *
+ * @experimental Partner API surface; shape may change as the Partner API docs evolve.
+ */
+export interface ListGroupsOptions {
+    /** Optional group name filter. Multiple groups may share the same name. */
+    readonly groupName?: string;
+    /** Group ID to start listing from for pagination. */
+    readonly startGroupId?: GroupId;
+    /** Maximum groups to return in this page. Forwarded to `maxGroupCount`. */
+    readonly pageSize?: number;
+    /** Abort signal for cancelling the request. */
+    readonly signal?: AbortSignal;
+}
+/**
+ * Options for paginating Partner groups.
+ *
+ * @experimental Partner API surface; shape may change as the Partner API docs evolve.
+ */
+export interface PaginateGroupsOptions extends Omit<ListGroupsOptions, 'startGroupId'> {
+    /**
+     * Aborts the iteration between page fetches. The signal is also forwarded to
+     * each underlying list request.
+     */
+    readonly signal?: AbortSignal;
+}
+/**
+ * Options for listing Partner group members.
+ *
+ * @experimental Partner API surface; shape may change as the Partner API docs evolve.
+ */
+export interface ListGroupMembersOptions {
+    /** Group ID whose active members should be listed. */
+    readonly groupId: GroupId;
+    /** First member email address to return for pagination. */
+    readonly startEmail?: string;
+    /** Maximum members to return in this page. Forwarded to `maxMemberCount`. */
+    readonly pageSize?: number;
+    /** Abort signal for cancelling the request. */
+    readonly signal?: AbortSignal;
+}
+/**
+ * Options for paginating Partner group members.
+ *
+ * @experimental Partner API surface; shape may change as the Partner API docs evolve.
+ */
+export interface PaginateGroupMembersOptions extends Omit<ListGroupMembersOptions, 'startEmail'> {
+    /**
+     * Aborts the iteration between page fetches. The signal is also forwarded to
+     * each underlying list request.
+     */
+    readonly signal?: AbortSignal;
+}
+/**
+ * Options for creating a Partner group member.
+ *
+ * @experimental Partner API surface; shape may change as the Partner API docs evolve.
+ */
+export interface CreateGroupMemberOptions {
+    /** Group ID that the new Backblaze account will join. */
+    readonly groupId: GroupId;
+    /** Email address for the new group member account. */
+    readonly memberEmail: string;
+    /** Region for the new account's data, or null to use the current default region. */
+    readonly region?: Region | null;
+    /** Abort signal for cancelling the request. */
+    readonly signal?: AbortSignal;
+}
+/**
+ * Options for ejecting a Partner group member.
+ *
+ * @experimental Partner API surface; shape may change as the Partner API docs evolve.
+ */
+export interface EjectGroupMemberOptions {
+    /** Group ID that currently contains the member. */
+    readonly groupId: GroupId;
+    /** Account ID of the group member being ejected. */
+    readonly memberAccountId: AccountId;
+    /** Replacement email for the ejected account, or null to keep the current email address. */
+    readonly email?: string | null;
+    /** Abort signal for cancelling the request. */
+    readonly signal?: AbortSignal;
+}
+/**
+ * Options for reserving B2 Reserve trial accounts.
+ *
+ * @experimental Partner API surface; shape may change as the Partner API docs evolve.
+ */
+export interface ReserveTrialAccountsOptions {
+    /** Abort signal for cancelling the request. */
+    readonly signal?: AbortSignal;
+}
+/** Redacted JSON diagnostic shape emitted by {@link PartnerClient.toJSON}. */
+export interface PartnerClientJson {
+    /** Object kind for log consumers. */
+    readonly type: 'PartnerClient';
+    /** Redacted Master Application Key credential placeholder. */
+    readonly credentials: string;
+    /** Redacted Partner token placeholder, or unauthorized state. */
+    readonly authorization: string;
+    /** Whether this client currently has Partner authorization state. */
+    readonly authorized: boolean;
+    /** Current default URL guard suffixes, or null when a custom transport owns guarding. */
+    readonly urlGuardAllowedSuffixes: readonly string[] | null;
+}
+/**
+ * High-level Partner API client for groups, members, and B2 Reserve trials.
+ *
+ * @example
+ * ```ts
+ * const partner = new PartnerClient({
+ *   masterKeyId: process.env.B2_MASTER_KEY_ID,
+ *   masterKey: process.env.B2_MASTER_KEY,
+ * })
+ * await partner.authorize()
+ * for await (const group of partner.paginateGroups()) {
+ *   console.log(group.groupName)
+ * }
+ * ```
+ *
+ * @experimental Partner API surface; shape may change as the Partner API docs evolve.
+ */
+export declare class PartnerClient {
+    /** Low-level client for direct Partner API calls. */
+    readonly raw: PartnerRawClient;
+    /** Partner authorization state storage (tokens, URLs, capabilities). */
+    readonly partnerAccountInfo: PartnerAccountInfo;
+    /**
+     * SSRF allow-list applied by the default transport. `null` when
+     * a custom transport was supplied; in that case the SDK does not own the
+     * guard.
+     */
+    readonly urlGuard: UrlGuard | null;
+    private readonly authCore;
+    /**
+     * Creates a new PartnerClient. Call {@link authorize} before making API requests.
+     *
+     * @param options - Configuration including credentials, realm, and transport settings.
+     */
+    constructor(options: PartnerClientOptions);
+    /**
+     * Authenticates with B2 Partner authorization and stores the authorization state.
+     *
+     * @param options - Optional abort signal.
+     *
+     * @returns The Partner authorization response containing tokens, URLs, and capabilities.
+     *
+     * @experimental Partner API surface; shape may change as the Partner API docs evolve.
+     */
+    authorize(options?: PartnerAuthorizeOptions): Promise<PartnerAuthorizeResponse>;
+    /**
+     * Lists Partner groups for the authorized partner administrator account.
+     *
+     * @param options - Optional group filter and pagination settings.
+     *
+     * @returns A page of Partner groups with an optional continuation cursor.
+     *
+     * @experimental Partner API surface; shape may change as the Partner API docs evolve.
+     */
+    listGroups(options?: ListGroupsOptions): Promise<ListGroupsResponse>;
+    /**
+     * Async iterator that yields every Partner group for the authorized account.
+     *
+     * @param options - Optional group filter, page size, and abort signal.
+     *
+     * @returns An async iterable of {@link PartnerGroup} entries.
+     *
+     * @experimental Partner API surface; shape may change as the Partner API docs evolve.
+     */
+    paginateGroups(options?: PaginateGroupsOptions): AsyncIterableIterator<PartnerGroup>;
+    /**
+     * Lists active members for a Partner group.
+     *
+     * @param options - Group ID plus optional pagination settings.
+     *
+     * @returns A page of group-member results with an optional continuation cursor.
+     *
+     * @experimental Partner API surface; shape may change as the Partner API docs evolve.
+     */
+    listGroupMembers(options: ListGroupMembersOptions): Promise<ListGroupMembersResponse>;
+    /**
+     * Async iterator that yields every active member for a Partner group.
+     *
+     * @param options - Group ID plus optional page size and abort signal.
+     *
+     * @returns An async iterable of {@link ListedGroupMember} entries.
+     *
+     * @experimental Partner API surface; shape may change as the Partner API docs evolve.
+     */
+    paginateGroupMembers(options: PaginateGroupMembersOptions): AsyncIterableIterator<ListedGroupMember>;
+    /**
+     * Creates a new Backblaze account and adds it to a Partner group.
+     *
+     * This mutation is non-idempotent. Automatic retries and expired-token
+     * reauthorization are disabled; long-running batch callers must catch token
+     * expiry, call {@link authorize}, and decide whether to issue a new request.
+     *
+     * @param options - Group ID, member email, and optional region.
+     *
+     * @returns The created member result array, including the member application key.
+     *
+     * @experimental Partner API surface; shape may change as the Partner API docs evolve.
+     */
+    createGroupMember(options: CreateGroupMemberOptions): Promise<CreateGroupMemberResponse>;
+    /**
+     * Ejects an active member from a Partner group without deleting the account.
+     *
+     * This mutation is non-idempotent. Automatic retries and expired-token
+     * reauthorization are disabled; long-running batch callers must catch token
+     * expiry, call {@link authorize}, and decide whether to issue a new request.
+     *
+     * @param options - Group ID, member account ID, and optional replacement email.
+     *
+     * @returns The ejected member object.
+     *
+     * @experimental Partner API surface; shape may change as the Partner API docs evolve.
+     */
+    ejectGroupMember(options: EjectGroupMemberOptions): Promise<EjectGroupMemberResponse>;
+    /**
+     * Reserves one or more new B2 Reserve trial accounts.
+     *
+     * This operation is non-idempotent and automatic retries/expired-token
+     * reauthorization are disabled at the raw layer. If the request fails after
+     * the server processes it, the returned application keys may be
+     * unrecoverable; reconcile account state before reissuing a batch.
+     *
+     * @param request - A single trial account request or a non-empty request array.
+     * @param options - Optional abort signal.
+     *
+     * @returns The created reserve-trial account result array.
+     *
+     * @experimental Partner API surface; shape may change as the Partner API docs evolve.
+     */
+    reserveTrialAccounts(request: ReserveTrialCreateAccountRequestEntry | ReserveTrialCreateAccountRequest, options?: ReserveTrialAccountsOptions): Promise<ReserveTrialCreateAccountResponse>;
+    /**
+     * Hides credentials and Partner tokens from `JSON.stringify(client)`.
+     *
+     * @returns A redacted diagnostic object.
+     */
+    toJSON(): PartnerClientJson;
+    /**
+     * Hides credentials and Partner tokens from default stringification.
+     *
+     * @returns A short redacted label.
+     */
+    toString(): string;
+    private ensureGroupsAuthorization;
+    private groupsCoordinates;
+}
+//# sourceMappingURL=client.d.ts.map

package/dist/partner/client.d.cts.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../../src/partner/client.js"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAA;AACpD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAA;AACzD,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAA;AACpD,OAAO,KAAK,EAAE,SAAS,EAAE,OAAO,EAAgB,MAAM,iBAAiB,CAAA;AACvE,OAAO,KAAK,EACV,yBAAyB,EACzB,wBAAwB,EACxB,iBAAiB,EACjB,wBAAwB,EACxB,kBAAkB,EAClB,wBAAwB,EACxB,YAAY,EACZ,MAAM,EACN,gCAAgC,EAChC,qCAAqC,EACrC,iCAAiC,EAClC,MAAM,qBAAqB,CAAA;AAE5B,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAA;AAE3D,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,UAAU,CAAA;AAKhD;;;;GAIG;AACH,MAAM,WAAW,oBAAoB;IACnC,2EAA2E;IAC3E,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAA;IAC5B,yCAAyC;IACzC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B;;;;;;;;;;;OAWG;IACH,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAA;IACvB;;;;;;OAMG;IACH,QAAQ,CAAC,kBAAkB,CAAC,EAAE,kBAAkB,CAAA;IAChD,wFAAwF;IACxF,QAAQ,CAAC,SAAS,CAAC,EAAE,aAAa,CAAA;IAClC,+EAA+E;IAC/E,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC,YAAY,CAAC,CAAA;IACtC,6DAA6D;IAC7D,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAA;IAC3B;;;;;;;;OAQG;IACH,QAAQ,CAAC,6BAA6B,CAAC,EAAE,SAAS,MAAM,EAAE,CAAA;IAC1D;;;;;;OAMG;IACH,QAAQ,CAAC,gBAAgB,CAAC,EAAE,OAAO,CAAA;IACnC;;;;OAIG;IACH,QAAQ,CAAC,yBAAyB,CAAC,EAAE,OAAO,CAAA;IAC5C;;;;OAIG;IACH,QAAQ,CAAC,yBAAyB,CAAC,EAAE,OAAO,CAAA;CAC7C;AAED;;;;GAIG;AACH,MAAM,WAAW,uBAAuB;IACtC,yDAAyD;IACzD,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAA;CAC9B;AAED;;;;GAIG;AACH,MAAM,WAAW,iBAAiB;IAChC,2EAA2E;IAC3E,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAA;IAC3B,qDAAqD;IACrD,QAAQ,CAAC,YAAY,CAAC,EAAE,OAAO,CAAA;IAC/B,2EAA2E;IAC3E,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;IAC1B,+CAA+C;IAC/C,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAA;CAC9B;AAED;;;;GAIG;AACH,MAAM,WAAW,qBAAsB,SAAQ,IAAI,CAAC,iBAAiB,EAAE,cAAc,CAAC;IACpF;;;OAGG;IACH,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAA;CAC9B;AAED;;;;GAIG;AACH,MAAM,WAAW,uBAAuB;IACtC,sDAAsD;IACtD,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAA;IACzB,2DAA2D;IAC3D,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAA;IAC5B,6EAA6E;IAC7E,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;IAC1B,+CAA+C;IAC/C,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAA;CAC9B;AAED;;;;GAIG;AACH,MAAM,WAAW,2BAA4B,SAAQ,IAAI,CAAC,uBAAuB,EAAE,YAAY,CAAC;IAC9F;;;OAGG;IACH,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAA;CAC9B;AAED;;;;GAIG;AACH,MAAM,WAAW,wBAAwB;IACvC,yDAAyD;IACzD,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAA;IACzB,sDAAsD;IACtD,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAA;IAC5B,oFAAoF;IACpF,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IAC/B,+CAA+C;IAC/C,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAA;CAC9B;AAED;;;;GAIG;AACH,MAAM,WAAW,uBAAuB;IACtC,mDAAmD;IACnD,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAA;IACzB,oDAAoD;IACpD,QAAQ,CAAC,eAAe,EAAE,SAAS,CAAA;IACnC,4FAA4F;IAC5F,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IAC9B,+CAA+C;IAC/C,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAA;CAC9B;AAED;;;;GAIG;AACH,MAAM,WAAW,2BAA2B;IAC1C,+CAA+C;IAC/C,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAA;CAC9B;AASD,8EAA8E;AAC9E,MAAM,WAAW,iBAAiB;IAChC,qCAAqC;IACrC,QAAQ,CAAC,IAAI,EAAE,eAAe,CAAA;IAC9B,8DAA8D;IAC9D,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAA;IAC5B,iEAAiE;IACjE,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAA;IAC9B,qEAAqE;IACrE,QAAQ,CAAC,UAAU,EAAE,OAAO,CAAA;IAC5B,yFAAyF;IACzF,QAAQ,CAAC,uBAAuB,EAAE,SAAS,MAAM,EAAE,GAAG,IAAI,CAAA;CAC3D;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,qBAAa,aAAa;IACxB,qDAAqD;IACrD,QAAQ,CAAC,GAAG,EAAE,gBAAgB,CAAA;IAC9B,wEAAwE;IACxE,QAAQ,CAAC,kBAAkB,EAAE,kBAAkB,CAAA;IAC/C;;;;OAIG;IACH,QAAQ,CAAC,QAAQ,EAAE,QAAQ,GAAG,IAAI,CAAA;IAClC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAiB;IAE1C;;;;OAIG;gBACS,OAAO,EAAE,oBAAoB;IAOzC;;;;;;;;OAQG;IACG,SAAS,CAAC,OAAO,CAAC,EAAE,uBAAuB,GAAG,OAAO,CAAC,wBAAwB,CAAC;IAIrF;;;;;;;;OAQG;IACG,UAAU,CAAC,OAAO,CAAC,EAAE,iBAAiB,GAAG,OAAO,CAAC,kBAAkB,CAAC;IAiB1E;;;;;;;;OAQG;IACH,cAAc,CAAC,OAAO,CAAC,EAAE,qBAAqB,GAAG,qBAAqB,CAAC,YAAY,CAAC;IAgBpF;;;;;;;;OAQG;IACG,gBAAgB,CAAC,OAAO,EAAE,uBAAuB,GAAG,OAAO,CAAC,wBAAwB,CAAC;IAiB3F;;;;;;;;OAQG;IACH,oBAAoB,CAClB,OAAO,EAAE,2BAA2B,GACnC,qBAAqB,CAAC,iBAAiB,CAAC;IAsB3C;;;;;;;;;;;;OAYG;IACG,iBAAiB,CAAC,OAAO,EAAE,wBAAwB,GAAG,OAAO,CAAC,yBAAyB,CAAC;IAiB9F;;;;;;;;;;;;OAYG;IACG,gBAAgB,CAAC,OAAO,EAAE,uBAAuB,GAAG,OAAO,CAAC,wBAAwB,CAAC;IAiB3F;;;;;;;;;;;;;;OAcG;IACG,oBAAoB,CACxB,OAAO,EAAE,qCAAqC,GAAG,gCAAgC,EACjF,OAAO,CAAC,EAAE,2BAA2B,GACpC,OAAO,CAAC,iCAAiC,CAAC;IAe7C;;;;OAIG;IACH,MAAM,IAAI,iBAAiB;IAW3B;;;;OAIG;IACH,QAAQ,IAAI,MAAM;IAalB,OAAO,CAAC,yBAAyB;IAUjC,OAAO,CAAC,iBAAiB;CAa1B"}