@backblaze-labs/b2-sdk 0.2.0 → 0.3.0

package/dist/backup/client.js

@@ -0,0 +1,206 @@
+import { computerId } from "../types/ids.js";
+import { B2PartnerAuthorizationError, BadJsonError } from "../errors/index.js";
+import { paginateItems } from "../util/paginator.js";
+import { PARTNER_TOKEN_REDACTED } from "../partner/redaction-placeholders.js";
+import { PartnerAuthCore } from "../partner/auth-core.js";
+import { BackupRawClient } from "./raw.js";
+//#region src/backup/client.ts
+var MASTER_KEY_REDACTED = "[redacted Master Application Key]";
+function badListComputersResponse(message) {
+	return new BadJsonError({
+		status: 400,
+		code: "bad_json",
+		message: `bz_list_computers response did not match documented wire shape: ${message}`
+	});
+}
+function isRecord(value) {
+	return typeof value === "object" && value !== null;
+}
+function normalizeListComputersResponse(response) {
+	if (!isRecord(response) || Array.isArray(response)) throw badListComputersResponse("expected a JSON object");
+	const resultComputers = response["computers"];
+	if (!Array.isArray(resultComputers)) throw badListComputersResponse("response must include a computers array");
+	const cursor = response["nextComputerId"];
+	if (cursor !== null && typeof cursor !== "string") throw badListComputersResponse("response must include nextComputerId as string or null");
+	return {
+		nextComputerId: cursor === null ? null : computerId(cursor),
+		computers: resultComputers
+	};
+}
+/**
+* High-level Computer Backup API client for listing and deleting backup records.
+*
+* The client uses Partner authorization and the `backupApiUrl` returned by
+* `authorizePartner`. The target account must belong to a group with
+* Enterprise Controls enabled, and the caller must be a group admin. Deleting
+* a backup also requires the Enterprise Controls setting that permits admins
+* to delete member backups.
+*
+* @example
+* ```ts
+* const backup = new BackupClient({
+*   masterKeyId: process.env.B2_MASTER_KEY_ID,
+*   masterKey: process.env.B2_MASTER_KEY,
+* })
+* await backup.authorize()
+* for await (const computer of backup.paginateComputers()) {
+*   console.log(computer.computerName)
+* }
+* ```
+*
+* @experimental Computer Backup API surface; shape may change as the Backup API docs evolve.
+*/
+var BackupClient = class {
+	/** Low-level client for direct Computer Backup API calls. */
+	raw;
+	/** Partner authorization state storage (tokens, URLs, capabilities). */
+	partnerAccountInfo;
+	/**
+	* SSRF allow-list applied by the default transport. `null` when
+	* a custom transport was supplied; in that case the SDK does not own the
+	* guard.
+	*/
+	urlGuard;
+	authCore;
+	/**
+	* Creates a new BackupClient. Call {@link authorize} before making API requests
+	* unless `partnerAccountInfo` already contains valid Partner authorization.
+	*
+	* @param options - Configuration including credentials, realm, and transport settings.
+	*/
+	constructor(options) {
+		this.authCore = new PartnerAuthCore(options);
+		this.partnerAccountInfo = this.authCore.partnerAccountInfo;
+		this.urlGuard = this.authCore.urlGuard;
+		this.raw = new BackupRawClient({
+			transport: this.authCore.transport,
+			...this.authCore.cachedEndpointSuffixes !== void 0 ? { authorizedBackupEndpointSuffixes: this.authCore.cachedEndpointSuffixes } : {}
+		});
+	}
+	/**
+	* Authenticates with B2 Partner authorization and stores the authorization state.
+	*
+	* @param options - Optional abort signal.
+	*
+	* @returns The Partner authorization response containing tokens, URLs, and capabilities.
+	*
+	* @experimental Computer Backup API surface; shape may change as the Backup API docs evolve.
+	*/
+	async authorize(options) {
+		const auth = await this.authCore.authorize(options);
+		this.raw.setAuthorizedEndpointSuffixes(this.authCore.activateEndpointSuffixes(auth));
+		return auth;
+	}
+	/**
+	* Lists active Computer Backup records for an account.
+	*
+	* @param options - Optional target account and pagination settings.
+	*
+	* @returns A normalized page of computer backup records with an optional continuation cursor.
+	*
+	* @experimental Computer Backup API surface; shape may change as the Backup API docs evolve.
+	*/
+	async listComputers(options) {
+		const auth = this.ensureBackupAuthorization();
+		const { backupApiUrl, authToken, accountId } = this.backupCoordinates(auth, options?.accountId);
+		return normalizeListComputersResponse(await this.raw.listComputers(backupApiUrl, authToken, {
+			accountId,
+			...options?.startComputerId !== void 0 ? { startComputerId: options.startComputerId } : {},
+			...options?.pageSize !== void 0 ? { maxComputerCount: options.pageSize } : {}
+		}, options?.signal !== void 0 ? { signal: options.signal } : void 0));
+	}
+	/**
+	* Async iterator that yields every active Computer Backup record for an account.
+	*
+	* @param options - Optional target account, page size, and abort signal.
+	*
+	* @returns An async iterable of {@link ComputerBackup} entries.
+	*
+	* @experimental Computer Backup API surface; shape may change as the Backup API docs evolve.
+	*/
+	paginateComputers(options) {
+		return paginateItems(async (cursor) => {
+			const resp = await this.listComputers({
+				...options?.accountId !== void 0 ? { accountId: options.accountId } : {},
+				...options?.pageSize !== void 0 ? { pageSize: options.pageSize } : {},
+				...cursor !== void 0 ? { startComputerId: cursor } : {},
+				...options?.signal !== void 0 ? { signal: options.signal } : {}
+			});
+			return {
+				page: resp,
+				nextCursor: resp.nextComputerId ?? void 0
+			};
+		}, (page) => page.computers, options?.signal);
+	}
+	/**
+	* Deletes a Computer Backup record.
+	*
+	* This destructive mutation is not automatically retried or reauthorized in
+	* place; callers should reconcile backup state before issuing a new delete
+	* after an ambiguous failure.
+	*
+	* @param options - Target account, computer ID, and optional abort signal.
+	*
+	* @returns The deleted computer backup record array.
+	*
+	* @experimental Computer Backup API surface; shape may change as the Backup API docs evolve.
+	*/
+	async deleteComputer(options) {
+		const auth = this.ensureBackupAuthorization();
+		const { backupApiUrl, authToken, accountId } = this.backupCoordinates(auth, options.accountId);
+		return this.raw.deleteComputer(backupApiUrl, authToken, {
+			accountId,
+			computerId: options.computerId
+		}, options.signal !== void 0 ? { signal: options.signal } : void 0);
+	}
+	ensureBackupAuthorization() {
+		const auth = this.partnerAccountInfo.getAuth();
+		if (auth === null) throw new B2PartnerAuthorizationError("Not authorized. Call BackupClient.authorize() first.");
+		const suffixes = this.authCore.activateEndpointSuffixes(auth);
+		this.raw.setAuthorizedEndpointSuffixes(suffixes);
+		return auth;
+	}
+	backupCoordinates(auth, accountIdOverride) {
+		const backupApiUrl = auth.apiInfo.backupApi?.backupApiUrl;
+		if (backupApiUrl === void 0) throw new B2PartnerAuthorizationError("Computer Backup API is not available; Partner authorization did not return apiInfo.backupApi.");
+		return {
+			backupApiUrl,
+			authToken: auth.authorizationToken,
+			accountId: accountIdOverride ?? auth.accountId
+		};
+	}
+	/**
+	* Hides credentials and Partner tokens from `JSON.stringify(client)`.
+	*
+	* @returns A redacted diagnostic object.
+	*/
+	toJSON() {
+		return {
+			type: "BackupClient",
+			credentials: MASTER_KEY_REDACTED,
+			authorization: this.partnerAccountInfo.getAuth() === null ? "[unauthorized]" : PARTNER_TOKEN_REDACTED,
+			authorized: this.partnerAccountInfo.getAuth() !== null,
+			urlGuardAllowedSuffixes: this.urlGuard?.getAllowedSuffixes() ?? null
+		};
+	}
+	/**
+	* Hides credentials and Partner tokens from default stringification.
+	*
+	* @returns A short redacted label.
+	*/
+	toString() {
+		return `[BackupClient ${MASTER_KEY_REDACTED}]`;
+	}
+	/**
+	* Hides credentials and Partner tokens from Node's `util.inspect`.
+	*
+	* @returns A short redacted label.
+	*/
+	[Symbol.for("nodejs.util.inspect.custom")]() {
+		return this.toString();
+	}
+};
+//#endregion
+export { BackupClient };
+
+//# sourceMappingURL=client.js.map

package/dist/backup/client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.js","names":[],"sources":["../../src/backup/client.ts"],"sourcesContent":["import { B2PartnerAuthorizationError, BadJsonError } from '../errors/index.ts'\nimport type { RetryOptions } from '../http/retry.ts'\nimport type { HttpTransport } from '../http/transport.ts'\nimport type { UrlGuard } from '../http/url-guard.ts'\nimport type { PartnerAccountInfo } from '../partner/account-info.ts'\nimport { PartnerAuthCore } from '../partner/auth-core.ts'\nimport { PARTNER_TOKEN_REDACTED } from '../partner/redaction.ts'\nimport type {\n  ComputerBackup,\n  DeleteComputerResponse,\n  ListComputersResponse,\n  ListComputersResult,\n} from '../types/backup.ts'\nimport { type AccountId, type ComputerId, computerId, type PartnerToken } from '../types/ids.ts'\nimport type { PartnerAuthorizeResponse } from '../types/partner.ts'\nimport { paginateItems } from '../util/paginator.ts'\nimport { BackupRawClient } from './raw.ts'\n\nconst MASTER_KEY_REDACTED = '[redacted Master Application Key]'\n\n/**\n * Configuration options for creating a {@link BackupClient}.\n *\n * @experimental Computer Backup API surface; shape may change as the Backup API docs evolve.\n */\nexport interface BackupClientOptions {\n  /** The Master Application Key ID for the partner administrator account. */\n  readonly masterKeyId: string\n  /** The Master Application Key secret. */\n  readonly masterKey: string\n  /**\n   * B2 realm to authenticate against. Accepts a known realm-map key\n   * (`\"production\"` or `\"staging\"`) or a direct base URL. Custom HTTPS hosts\n   * and loopback IP literal HTTP URLs for local testing are trusted with the\n   * Master Application Key during Partner authorize, so never derive `realm`\n   * from untrusted input. Defaults to `\"production\"`.\n   */\n  readonly realm?: string\n  /**\n   * Shared Partner authorization state. Defaults to\n   * {@link InMemoryPartnerAccountInfo}. Pass the same store to\n   * {@link BackupClient} and Partner clients when both surfaces should reuse\n   * one Partner token. Cached authorization whose endpoints fail this client's\n   * realm policy is ignored locally until `authorize()` replaces it; shared\n   * stores are not cleared during construction.\n   */\n  readonly partnerAccountInfo?: PartnerAccountInfo\n  /** Custom HTTP transport. Defaults to `FetchTransport`. Wrapped by `RetryTransport`. */\n  readonly transport?: HttpTransport\n  /** Override retry behavior (max retries, backoff, and per-attempt timeout). */\n  readonly retry?: Partial<RetryOptions>\n  /** Custom user-agent string prepended to the SDK default. */\n  readonly userAgent?: string\n  /**\n   * Additional SSRF allow-list host suffixes for the default transport.\n   *\n   * Only consulted when {@link BackupClientOptions.transport} is unset; a\n   * custom transport is the user's responsibility to harden.\n   */\n  readonly additionalAllowedHostSuffixes?: readonly string[]\n  /**\n   * Explicitly disable the default SSRF guard after authorize.\n   *\n   * Intended only for controlled simulator/private-proxy tests. Never enable\n   * it for URLs derived from untrusted input or production credentials.\n   */\n  readonly disableSsrfGuard?: boolean\n  /**\n   * Follow same-origin GET/HEAD redirects in the default fetch transport after\n   * checking each target with the SSRF guard. POST redirects remain blocked.\n   * Defaults to true.\n   */\n  readonly followSameOriginRedirects?: boolean\n  /**\n   * Allow direct custom authorize realms for tests or private proxies.\n   * Leave disabled unless the configured host is trusted with the Master\n   * Application Key.\n   */\n  readonly allowCustomAuthorizeRealm?: boolean\n}\n\n/**\n * Options for Partner authorization performed by {@link BackupClient}.\n *\n * @experimental Computer Backup API surface; shape may change as the Backup API docs evolve.\n */\nexport interface BackupAuthorizeOptions {\n  /** Abort signal for cancelling the authorize request. */\n  readonly signal?: AbortSignal\n}\n\n/**\n * Options for listing Computer Backup records.\n *\n * @experimental Computer Backup API surface; shape may change as the Backup API docs evolve.\n */\nexport interface ListComputersOptions {\n  /**\n   * Account whose active computer backups should be listed. Defaults to the\n   * partner administrator account ID from authorization.\n   */\n  readonly accountId?: AccountId\n  /** Computer ID to start listing from for pagination. */\n  readonly startComputerId?: ComputerId\n  /** Maximum computers to return in this page. Forwarded to `maxComputerCount`. */\n  readonly pageSize?: number\n  /** Abort signal for cancelling the request. */\n  readonly signal?: AbortSignal\n}\n\n/**\n * Options for paginating Computer Backup records.\n *\n * @experimental Computer Backup API surface; shape may change as the Backup API docs evolve.\n */\nexport interface PaginateComputersOptions extends Omit<ListComputersOptions, 'startComputerId'> {\n  /**\n   * Aborts the iteration between page fetches. The signal is also forwarded to\n   * each underlying list request.\n   */\n  readonly signal?: AbortSignal\n}\n\n/**\n * Options for deleting a Computer Backup record.\n *\n * @experimental Computer Backup API surface; shape may change as the Backup API docs evolve.\n */\nexport interface DeleteComputerOptions {\n  /**\n   * Account that owns the computer backup. Defaults to the partner\n   * administrator account ID from authorization.\n   */\n  readonly accountId?: AccountId\n  /** Computer ID of the backup to delete. */\n  readonly computerId: ComputerId\n  /** Abort signal for cancelling the request. */\n  readonly signal?: AbortSignal\n}\n\ninterface BackupCoordinates {\n  readonly backupApiUrl: string\n  readonly authToken: PartnerToken\n  readonly accountId: AccountId\n}\n\nfunction badListComputersResponse(message: string): BadJsonError {\n  return new BadJsonError({\n    status: 400,\n    code: 'bad_json',\n    message: `bz_list_computers response did not match documented wire shape: ${message}`,\n  })\n}\n\nfunction isRecord(value: unknown): value is Readonly<Record<string, unknown>> {\n  return typeof value === 'object' && value !== null\n}\n\nfunction normalizeListComputersResponse(response: ListComputersResponse): ListComputersResult {\n  // Archived Backup API docs model bz_list_computers as a single result object\n  // with a pagination cursor and a `computers` array (an empty account returns\n  // an empty `computers` array, not a top-level empty array).\n  if (!isRecord(response) || Array.isArray(response)) {\n    throw badListComputersResponse('expected a JSON object')\n  }\n  const resultComputers = response['computers']\n  if (!Array.isArray(resultComputers)) {\n    throw badListComputersResponse('response must include a computers array')\n  }\n  const cursor = response['nextComputerId']\n  if (cursor !== null && typeof cursor !== 'string') {\n    throw badListComputersResponse('response must include nextComputerId as string or null')\n  }\n\n  return {\n    nextComputerId: cursor === null ? null : computerId(cursor),\n    computers: resultComputers as readonly ComputerBackup[],\n  }\n}\n\n/** Redacted JSON diagnostic shape emitted by {@link BackupClient.toJSON}. */\nexport interface BackupClientJson {\n  /** Object kind for log consumers. */\n  readonly type: 'BackupClient'\n  /** Redacted Master Application Key credential placeholder. */\n  readonly credentials: string\n  /** Redacted Partner token placeholder, or unauthorized state. */\n  readonly authorization: string\n  /** Whether this client currently has Partner authorization state. */\n  readonly authorized: boolean\n  /** Current default URL guard suffixes, or null when a custom transport owns guarding. */\n  readonly urlGuardAllowedSuffixes: readonly string[] | null\n}\n\n/**\n * High-level Computer Backup API client for listing and deleting backup records.\n *\n * The client uses Partner authorization and the `backupApiUrl` returned by\n * `authorizePartner`. The target account must belong to a group with\n * Enterprise Controls enabled, and the caller must be a group admin. Deleting\n * a backup also requires the Enterprise Controls setting that permits admins\n * to delete member backups.\n *\n * @example\n * ```ts\n * const backup = new BackupClient({\n *   masterKeyId: process.env.B2_MASTER_KEY_ID,\n *   masterKey: process.env.B2_MASTER_KEY,\n * })\n * await backup.authorize()\n * for await (const computer of backup.paginateComputers()) {\n *   console.log(computer.computerName)\n * }\n * ```\n *\n * @experimental Computer Backup API surface; shape may change as the Backup API docs evolve.\n */\nexport class BackupClient {\n  /** Low-level client for direct Computer Backup API calls. */\n  readonly raw: BackupRawClient\n  /** Partner authorization state storage (tokens, URLs, capabilities). */\n  readonly partnerAccountInfo: PartnerAccountInfo\n  /**\n   * SSRF allow-list applied by the default transport. `null` when\n   * a custom transport was supplied; in that case the SDK does not own the\n   * guard.\n   */\n  readonly urlGuard: UrlGuard | null\n  private readonly authCore: PartnerAuthCore\n\n  /**\n   * Creates a new BackupClient. Call {@link authorize} before making API requests\n   * unless `partnerAccountInfo` already contains valid Partner authorization.\n   *\n   * @param options - Configuration including credentials, realm, and transport settings.\n   */\n  constructor(options: BackupClientOptions) {\n    this.authCore = new PartnerAuthCore(options)\n    this.partnerAccountInfo = this.authCore.partnerAccountInfo\n    this.urlGuard = this.authCore.urlGuard\n    this.raw = new BackupRawClient({\n      transport: this.authCore.transport,\n      ...(this.authCore.cachedEndpointSuffixes !== undefined\n        ? { authorizedBackupEndpointSuffixes: this.authCore.cachedEndpointSuffixes }\n        : {}),\n    })\n  }\n\n  /**\n   * Authenticates with B2 Partner authorization and stores the authorization state.\n   *\n   * @param options - Optional abort signal.\n   *\n   * @returns The Partner authorization response containing tokens, URLs, and capabilities.\n   *\n   * @experimental Computer Backup API surface; shape may change as the Backup API docs evolve.\n   */\n  async authorize(options?: BackupAuthorizeOptions): Promise<PartnerAuthorizeResponse> {\n    const auth = await this.authCore.authorize(options)\n    this.raw.setAuthorizedEndpointSuffixes(this.authCore.activateEndpointSuffixes(auth))\n    return auth\n  }\n\n  /**\n   * Lists active Computer Backup records for an account.\n   *\n   * @param options - Optional target account and pagination settings.\n   *\n   * @returns A normalized page of computer backup records with an optional continuation cursor.\n   *\n   * @experimental Computer Backup API surface; shape may change as the Backup API docs evolve.\n   */\n  async listComputers(options?: ListComputersOptions): Promise<ListComputersResult> {\n    const auth = this.ensureBackupAuthorization()\n    const { backupApiUrl, authToken, accountId } = this.backupCoordinates(auth, options?.accountId)\n    const response = await this.raw.listComputers(\n      backupApiUrl,\n      authToken,\n      {\n        accountId,\n        ...(options?.startComputerId !== undefined\n          ? { startComputerId: options.startComputerId }\n          : {}),\n        ...(options?.pageSize !== undefined ? { maxComputerCount: options.pageSize } : {}),\n      },\n      options?.signal !== undefined ? { signal: options.signal } : undefined,\n    )\n    return normalizeListComputersResponse(response)\n  }\n\n  /**\n   * Async iterator that yields every active Computer Backup record for an account.\n   *\n   * @param options - Optional target account, page size, and abort signal.\n   *\n   * @returns An async iterable of {@link ComputerBackup} entries.\n   *\n   * @experimental Computer Backup API surface; shape may change as the Backup API docs evolve.\n   */\n  paginateComputers(options?: PaginateComputersOptions): AsyncIterableIterator<ComputerBackup> {\n    return paginateItems(\n      async (cursor: ComputerId | undefined) => {\n        const resp = await this.listComputers({\n          ...(options?.accountId !== undefined ? { accountId: options.accountId } : {}),\n          ...(options?.pageSize !== undefined ? { pageSize: options.pageSize } : {}),\n          ...(cursor !== undefined ? { startComputerId: cursor } : {}),\n          ...(options?.signal !== undefined ? { signal: options.signal } : {}),\n        })\n        return { page: resp, nextCursor: resp.nextComputerId ?? undefined }\n      },\n      (page) => page.computers,\n      options?.signal,\n    )\n  }\n\n  /**\n   * Deletes a Computer Backup record.\n   *\n   * This destructive mutation is not automatically retried or reauthorized in\n   * place; callers should reconcile backup state before issuing a new delete\n   * after an ambiguous failure.\n   *\n   * @param options - Target account, computer ID, and optional abort signal.\n   *\n   * @returns The deleted computer backup record array.\n   *\n   * @experimental Computer Backup API surface; shape may change as the Backup API docs evolve.\n   */\n  async deleteComputer(options: DeleteComputerOptions): Promise<DeleteComputerResponse> {\n    const auth = this.ensureBackupAuthorization()\n    const { backupApiUrl, authToken, accountId } = this.backupCoordinates(auth, options.accountId)\n    return this.raw.deleteComputer(\n      backupApiUrl,\n      authToken,\n      {\n        accountId,\n        computerId: options.computerId,\n      },\n      options.signal !== undefined ? { signal: options.signal } : undefined,\n    )\n  }\n\n  private ensureBackupAuthorization(): PartnerAuthorizeResponse {\n    const auth = this.partnerAccountInfo.getAuth()\n    if (auth === null) {\n      throw new B2PartnerAuthorizationError('Not authorized. Call BackupClient.authorize() first.')\n    }\n    const suffixes = this.authCore.activateEndpointSuffixes(auth)\n    this.raw.setAuthorizedEndpointSuffixes(suffixes)\n    return auth\n  }\n\n  private backupCoordinates(\n    auth: PartnerAuthorizeResponse,\n    accountIdOverride: AccountId | undefined,\n  ): BackupCoordinates {\n    const backupApiUrl = auth.apiInfo.backupApi?.backupApiUrl\n    if (backupApiUrl === undefined) {\n      throw new B2PartnerAuthorizationError(\n        'Computer Backup API is not available; Partner authorization did not return apiInfo.backupApi.',\n      )\n    }\n    return {\n      backupApiUrl,\n      authToken: auth.authorizationToken,\n      accountId: accountIdOverride ?? auth.accountId,\n    }\n  }\n\n  /**\n   * Hides credentials and Partner tokens from `JSON.stringify(client)`.\n   *\n   * @returns A redacted diagnostic object.\n   */\n  toJSON(): BackupClientJson {\n    return {\n      type: 'BackupClient',\n      credentials: MASTER_KEY_REDACTED,\n      authorization:\n        this.partnerAccountInfo.getAuth() === null ? '[unauthorized]' : PARTNER_TOKEN_REDACTED,\n      authorized: this.partnerAccountInfo.getAuth() !== null,\n      urlGuardAllowedSuffixes: this.urlGuard?.getAllowedSuffixes() ?? null,\n    }\n  }\n\n  /**\n   * Hides credentials and Partner tokens from default stringification.\n   *\n   * @returns A short redacted label.\n   */\n  toString(): string {\n    return `[BackupClient ${MASTER_KEY_REDACTED}]`\n  }\n\n  /**\n   * Hides credentials and Partner tokens from Node's `util.inspect`.\n   *\n   * @returns A short redacted label.\n   */\n  [Symbol.for('nodejs.util.inspect.custom')](): string {\n    return this.toString()\n  }\n}\n"],"mappings":";;;;;;;AAkBA,IAAM,sBAAsB;AAgI5B,SAAS,yBAAyB,SAA+B;CAC/D,OAAO,IAAI,aAAa;EACtB,QAAQ;EACR,MAAM;EACN,SAAS,mEAAmE;CAC9E,CAAC;AACH;AAEA,SAAS,SAAS,OAA4D;CAC5E,OAAO,OAAO,UAAU,YAAY,UAAU;AAChD;AAEA,SAAS,+BAA+B,UAAsD;CAI5F,IAAI,CAAC,SAAS,QAAQ,KAAK,MAAM,QAAQ,QAAQ,GAC/C,MAAM,yBAAyB,wBAAwB;CAEzD,MAAM,kBAAkB,SAAS;CACjC,IAAI,CAAC,MAAM,QAAQ,eAAe,GAChC,MAAM,yBAAyB,yCAAyC;CAE1E,MAAM,SAAS,SAAS;CACxB,IAAI,WAAW,QAAQ,OAAO,WAAW,UACvC,MAAM,yBAAyB,wDAAwD;CAGzF,OAAO;EACL,gBAAgB,WAAW,OAAO,OAAO,WAAW,MAAM;EAC1D,WAAW;CACb;AACF;;;;;;;;;;;;;;;;;;;;;;;;AAuCA,IAAa,eAAb,MAA0B;;CAExB;;CAEA;;;;;;CAMA;CACA;;;;;;;CAQA,YAAY,SAA8B;EACxC,KAAK,WAAW,IAAI,gBAAgB,OAAO;EAC3C,KAAK,qBAAqB,KAAK,SAAS;EACxC,KAAK,WAAW,KAAK,SAAS;EAC9B,KAAK,MAAM,IAAI,gBAAgB;GAC7B,WAAW,KAAK,SAAS;GACzB,GAAI,KAAK,SAAS,2BAA2B,KAAA,IACzC,EAAE,kCAAkC,KAAK,SAAS,uBAAuB,IACzE,CAAC;EACP,CAAC;CACH;;;;;;;;;;CAWA,MAAM,UAAU,SAAqE;EACnF,MAAM,OAAO,MAAM,KAAK,SAAS,UAAU,OAAO;EAClD,KAAK,IAAI,8BAA8B,KAAK,SAAS,yBAAyB,IAAI,CAAC;EACnF,OAAO;CACT;;;;;;;;;;CAWA,MAAM,cAAc,SAA8D;EAChF,MAAM,OAAO,KAAK,0BAA0B;EAC5C,MAAM,EAAE,cAAc,WAAW,cAAc,KAAK,kBAAkB,MAAM,SAAS,SAAS;EAa9F,OAAO,+BAA+B,MAZf,KAAK,IAAI,cAC9B,cACA,WACA;GACE;GACA,GAAI,SAAS,oBAAoB,KAAA,IAC7B,EAAE,iBAAiB,QAAQ,gBAAgB,IAC3C,CAAC;GACL,GAAI,SAAS,aAAa,KAAA,IAAY,EAAE,kBAAkB,QAAQ,SAAS,IAAI,CAAC;EAClF,GACA,SAAS,WAAW,KAAA,IAAY,EAAE,QAAQ,QAAQ,OAAO,IAAI,KAAA,CAC/D,CAC8C;CAChD;;;;;;;;;;CAWA,kBAAkB,SAA2E;EAC3F,OAAO,cACL,OAAO,WAAmC;GACxC,MAAM,OAAO,MAAM,KAAK,cAAc;IACpC,GAAI,SAAS,cAAc,KAAA,IAAY,EAAE,WAAW,QAAQ,UAAU,IAAI,CAAC;IAC3E,GAAI,SAAS,aAAa,KAAA,IAAY,EAAE,UAAU,QAAQ,SAAS,IAAI,CAAC;IACxE,GAAI,WAAW,KAAA,IAAY,EAAE,iBAAiB,OAAO,IAAI,CAAC;IAC1D,GAAI,SAAS,WAAW,KAAA,IAAY,EAAE,QAAQ,QAAQ,OAAO,IAAI,CAAC;GACpE,CAAC;GACD,OAAO;IAAE,MAAM;IAAM,YAAY,KAAK,kBAAkB,KAAA;GAAU;EACpE,IACC,SAAS,KAAK,WACf,SAAS,MACX;CACF;;;;;;;;;;;;;;CAeA,MAAM,eAAe,SAAiE;EACpF,MAAM,OAAO,KAAK,0BAA0B;EAC5C,MAAM,EAAE,cAAc,WAAW,cAAc,KAAK,kBAAkB,MAAM,QAAQ,SAAS;EAC7F,OAAO,KAAK,IAAI,eACd,cACA,WACA;GACE;GACA,YAAY,QAAQ;EACtB,GACA,QAAQ,WAAW,KAAA,IAAY,EAAE,QAAQ,QAAQ,OAAO,IAAI,KAAA,CAC9D;CACF;CAEA,4BAA8D;EAC5D,MAAM,OAAO,KAAK,mBAAmB,QAAQ;EAC7C,IAAI,SAAS,MACX,MAAM,IAAI,4BAA4B,sDAAsD;EAE9F,MAAM,WAAW,KAAK,SAAS,yBAAyB,IAAI;EAC5D,KAAK,IAAI,8BAA8B,QAAQ;EAC/C,OAAO;CACT;CAEA,kBACE,MACA,mBACmB;EACnB,MAAM,eAAe,KAAK,QAAQ,WAAW;EAC7C,IAAI,iBAAiB,KAAA,GACnB,MAAM,IAAI,4BACR,+FACF;EAEF,OAAO;GACL;GACA,WAAW,KAAK;GAChB,WAAW,qBAAqB,KAAK;EACvC;CACF;;;;;;CAOA,SAA2B;EACzB,OAAO;GACL,MAAM;GACN,aAAa;GACb,eACE,KAAK,mBAAmB,QAAQ,MAAM,OAAO,mBAAmB;GAClE,YAAY,KAAK,mBAAmB,QAAQ,MAAM;GAClD,yBAAyB,KAAK,UAAU,mBAAmB,KAAK;EAClE;CACF;;;;;;CAOA,WAAmB;EACjB,OAAO,iBAAiB,oBAAoB;CAC9C;;;;;;CAOA,CAAC,OAAO,IAAI,4BAA4B,KAAa;EACnD,OAAO,KAAK,SAAS;CACvB;AACF"}

package/dist/backup/index.cjs

@@ -0,0 +1,15 @@
+Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
+const require_ids = require("../types/ids.cjs");
+const require_partner = require("../types/partner.cjs");
+const require_auth_clone = require("../partner/auth-clone.cjs");
+const require_in_memory = require("../partner/in-memory.cjs");
+const require_raw = require("./raw.cjs");
+const require_client = require("./client.cjs");
+exports.BackupClient = require_client.BackupClient;
+exports.BackupRawClient = require_raw.BackupRawClient;
+exports.InMemoryPartnerAccountInfo = require_in_memory.InMemoryPartnerAccountInfo;
+exports.PartnerCapability = require_partner.PartnerCapability;
+exports.accountId = require_ids.accountId;
+exports.computerId = require_ids.computerId;
+exports.partnerAuthorizeResponseForPersistence = require_auth_clone.partnerAuthorizeResponseForPersistence;
+exports.partnerToken = require_ids.partnerToken;

package/dist/backup/index.d.cts

@@ -0,0 +1,22 @@
+/**
+ * Computer Backup API client, raw bindings, and types for listing and deleting
+ * backup records.
+ *
+ * Use this subpath when your account has sales-approved Partner API access,
+ * a Master Application Key, and Enterprise Controls enabled for the target
+ * group. The Backup client shares the Partner authorization model and uses the
+ * `backupApiUrl` returned by Partner authorization.
+ *
+ * @packageDocumentation
+ */
+export type { PartnerAccountInfo } from '../partner/account-info.js';
+export { partnerAuthorizeResponseForPersistence } from '../partner/auth-clone.js';
+export { InMemoryPartnerAccountInfo } from '../partner/in-memory.js';
+export type { ComputerBackup, DeleteComputerRequest, DeleteComputerResponse, DeleteComputerResult, ListComputersRequest, ListComputersResponse, ListComputersResult, } from '../types/backup.js';
+export type { AccountId, ComputerId, PartnerToken } from '../types/ids.js';
+export { accountId, computerId, partnerToken } from '../types/ids.js';
+export type { PartnerApiInfo, PartnerAuthorizeResponse, PartnerBackupApiInfo, } from '../types/partner.js';
+export { PartnerCapability } from '../types/partner.js';
+export { type BackupAuthorizeOptions, BackupClient, type BackupClientJson, type BackupClientOptions, type DeleteComputerOptions, type ListComputersOptions, type PaginateComputersOptions, } from './client.js';
+export { BackupRawClient, type BackupRawClientOptions, type BackupRawRequestOptions, } from './raw.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/backup/index.d.cts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/backup/index.js"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,YAAY,EAAE,kBAAkB,EAAE,MAAM,4BAA4B,CAAA;AACpE,OAAO,EAAE,sCAAsC,EAAE,MAAM,0BAA0B,CAAA;AACjF,OAAO,EAAE,0BAA0B,EAAE,MAAM,yBAAyB,CAAA;AACpE,YAAY,EACV,cAAc,EACd,qBAAqB,EACrB,sBAAsB,EACtB,oBAAoB,EACpB,oBAAoB,EACpB,qBAAqB,EACrB,mBAAmB,GACpB,MAAM,oBAAoB,CAAA;AAC3B,YAAY,EAAE,SAAS,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAA;AAC1E,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAA;AACrE,YAAY,EACV,cAAc,EACd,wBAAwB,EACxB,oBAAoB,GACrB,MAAM,qBAAqB,CAAA;AAC5B,OAAO,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAA;AACvD,OAAO,EACL,KAAK,sBAAsB,EAC3B,YAAY,EACZ,KAAK,gBAAgB,EACrB,KAAK,mBAAmB,EACxB,KAAK,qBAAqB,EAC1B,KAAK,oBAAoB,EACzB,KAAK,wBAAwB,GAC9B,MAAM,aAAa,CAAA;AACpB,OAAO,EACL,eAAe,EACf,KAAK,sBAAsB,EAC3B,KAAK,uBAAuB,GAC7B,MAAM,UAAU,CAAA"}

package/dist/backup/index.d.ts

@@ -0,0 +1,22 @@
+/**
+ * Computer Backup API client, raw bindings, and types for listing and deleting
+ * backup records.
+ *
+ * Use this subpath when your account has sales-approved Partner API access,
+ * a Master Application Key, and Enterprise Controls enabled for the target
+ * group. The Backup client shares the Partner authorization model and uses the
+ * `backupApiUrl` returned by Partner authorization.
+ *
+ * @packageDocumentation
+ */
+export type { PartnerAccountInfo } from '../partner/account-info.js';
+export { partnerAuthorizeResponseForPersistence } from '../partner/auth-clone.js';
+export { InMemoryPartnerAccountInfo } from '../partner/in-memory.js';
+export type { ComputerBackup, DeleteComputerRequest, DeleteComputerResponse, DeleteComputerResult, ListComputersRequest, ListComputersResponse, ListComputersResult, } from '../types/backup.js';
+export type { AccountId, ComputerId, PartnerToken } from '../types/ids.js';
+export { accountId, computerId, partnerToken } from '../types/ids.js';
+export type { PartnerApiInfo, PartnerAuthorizeResponse, PartnerBackupApiInfo, } from '../types/partner.js';
+export { PartnerCapability } from '../types/partner.js';
+export { type BackupAuthorizeOptions, BackupClient, type BackupClientJson, type BackupClientOptions, type DeleteComputerOptions, type ListComputersOptions, type PaginateComputersOptions, } from './client.js';
+export { BackupRawClient, type BackupRawClientOptions, type BackupRawRequestOptions, } from './raw.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/backup/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/backup/index.js"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,YAAY,EAAE,kBAAkB,EAAE,MAAM,4BAA4B,CAAA;AACpE,OAAO,EAAE,sCAAsC,EAAE,MAAM,0BAA0B,CAAA;AACjF,OAAO,EAAE,0BAA0B,EAAE,MAAM,yBAAyB,CAAA;AACpE,YAAY,EACV,cAAc,EACd,qBAAqB,EACrB,sBAAsB,EACtB,oBAAoB,EACpB,oBAAoB,EACpB,qBAAqB,EACrB,mBAAmB,GACpB,MAAM,oBAAoB,CAAA;AAC3B,YAAY,EAAE,SAAS,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAA;AAC1E,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAA;AACrE,YAAY,EACV,cAAc,EACd,wBAAwB,EACxB,oBAAoB,GACrB,MAAM,qBAAqB,CAAA;AAC5B,OAAO,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAA;AACvD,OAAO,EACL,KAAK,sBAAsB,EAC3B,YAAY,EACZ,KAAK,gBAAgB,EACrB,KAAK,mBAAmB,EACxB,KAAK,qBAAqB,EAC1B,KAAK,oBAAoB,EACzB,KAAK,wBAAwB,GAC9B,MAAM,aAAa,CAAA;AACpB,OAAO,EACL,eAAe,EACf,KAAK,sBAAsB,EAC3B,KAAK,uBAAuB,GAC7B,MAAM,UAAU,CAAA"}

package/dist/backup/index.js

@@ -0,0 +1,7 @@
+import { accountId, computerId, partnerToken } from "../types/ids.js";
+import { PartnerCapability } from "../types/partner.js";
+import { partnerAuthorizeResponseForPersistence } from "../partner/auth-clone.js";
+import { InMemoryPartnerAccountInfo } from "../partner/in-memory.js";
+import { BackupRawClient } from "./raw.js";
+import { BackupClient } from "./client.js";
+export { BackupClient, BackupRawClient, InMemoryPartnerAccountInfo, PartnerCapability, accountId, computerId, partnerAuthorizeResponseForPersistence, partnerToken };

package/dist/backup/raw.cjs

@@ -0,0 +1,146 @@
+const require_url = require("../raw/url.cjs");
+const require_endpoint_url = require("../partner/endpoint-url.cjs");
+//#region src/backup/raw.ts
+var BACKUP_API_V1 = {
+	prefix: "api/backup",
+	version: "v1"
+};
+function backupEndpointAllowedSuffixes(transport, authorizedSuffixes) {
+	return require_endpoint_url.endpointAllowedSuffixes(transport, authorizedSuffixes, {
+		missingGuard: "Computer Backup endpoint requests require BackupClient.authorize() or a locked URL guard before sending Partner tokens",
+		unlockedGuard: "Computer Backup endpoint requests require a locked URL guard before sending Partner tokens"
+	});
+}
+/**
+* Low-level client for Computer Backup API endpoint bindings.
+*
+* Each method maps directly to one `bz_*` HTTP call under the
+* `/api/backup/v1/` route using the `backupApiUrl` returned by Partner
+* authorization.
+*
+* @experimental Computer Backup API surface; shape may change as the Backup API docs evolve.
+*/
+var BackupRawClient = class {
+	/** @internal */
+	transport;
+	authorizedEndpointSuffixes;
+	/**
+	* Creates a new BackupRawClient with the given transport.
+	*
+	* @param options - The constructor configuration.
+	*/
+	constructor(options) {
+		this.transport = options.transport;
+		this.authorizedEndpointSuffixes = Array.from(options.authorizedBackupEndpointSuffixes ?? []);
+	}
+	/**
+	* Replaces the validated Computer Backup endpoint host suffixes.
+	*
+	* @param suffixes - Host suffixes derived from Partner authorization.
+	*
+	* @internal
+	*/
+	setAuthorizedEndpointSuffixes(suffixes) {
+		this.authorizedEndpointSuffixes = Array.from(suffixes);
+	}
+	/**
+	* Calls `bz_list_computers`.
+	*
+	* Uses the documented GET form. The wire response is a single JSON object
+	* with a `nextComputerId` cursor and active computer backup records.
+	*
+	* @param backupApiUrl - The Computer Backup API base URL from `authorizePartner`.
+	* @param authToken - The Partner authorization token.
+	* @param request - The computer listing query parameters.
+	* @param options - Optional abort and per-request retry settings.
+	*
+	* @returns The single-object computer backup wire response.
+	*
+	* @experimental Computer Backup API surface; shape may change as the Backup API docs evolve.
+	*/
+	async listComputers(backupApiUrl, authToken, request, options) {
+		return this.getJson(backupApiUrl, authToken, "bz_list_computers", {
+			accountId: request.accountId,
+			...request.startComputerId !== void 0 ? { startComputerId: request.startComputerId } : {},
+			...request.maxComputerCount !== void 0 ? { maxComputerCount: request.maxComputerCount } : {}
+		}, options);
+	}
+	/**
+	* Calls `bz_delete_computer`.
+	*
+	* The documented wire response is a JSON array of deletion records. This
+	* destructive mutation is not automatically retried or reauthorized in place.
+	*
+	* @param backupApiUrl - The Computer Backup API base URL from `authorizePartner`.
+	* @param authToken - The Partner authorization token.
+	* @param request - The computer deletion request body.
+	* @param options - Optional abort and per-request retry settings.
+	*
+	* @returns The deleted computer backup record array.
+	*
+	* @experimental Computer Backup API surface; shape may change as the Backup API docs evolve.
+	*/
+	async deleteComputer(backupApiUrl, authToken, request, options) {
+		return this.postJson(backupApiUrl, authToken, "bz_delete_computer", {
+			accountId: request.accountId,
+			computerId: request.computerId
+		}, require_endpoint_url.nonRetryingMutationRequestOptions(options));
+	}
+	safeBackupApiUrl(backupApiUrl) {
+		return require_endpoint_url.validatePartnerEndpointUrl(backupApiUrl, "backupApiUrl", backupEndpointAllowedSuffixes(this.transport, this.authorizedEndpointSuffixes));
+	}
+	/**
+	* Sends a JSON GET request to the specified Computer Backup API endpoint.
+	*
+	* @param backupApiUrl - The Computer Backup API base URL.
+	* @param authToken - The Partner authorization token.
+	* @param endpoint - The Computer Backup API endpoint name.
+	* @param query - The query-string parameters.
+	* @param options - Optional abort and per-request retry settings.
+	*
+	* @returns The parsed JSON response.
+	*/
+	async getJson(backupApiUrl, authToken, endpoint, query, options) {
+		return (await this.transport.send({
+			url: require_endpoint_url.withQueryString(require_url.b2Url(this.safeBackupApiUrl(backupApiUrl), {
+				...BACKUP_API_V1,
+				endpoint
+			}), query),
+			method: "GET",
+			headers: { Authorization: authToken },
+			...options?.signal !== void 0 ? { signal: options.signal } : {},
+			...options?.retry !== void 0 ? { retry: options.retry } : {}
+		})).json();
+	}
+	/**
+	* Sends a JSON POST request to the specified Computer Backup API endpoint.
+	*
+	* @param backupApiUrl - The Computer Backup API base URL.
+	* @param authToken - The Partner authorization token.
+	* @param endpoint - The Computer Backup API endpoint name.
+	* @param body - The JSON request body.
+	* @param options - Optional abort and per-request retry settings.
+	*
+	* @returns The parsed JSON response.
+	*/
+	async postJson(backupApiUrl, authToken, endpoint, body, options) {
+		return (await this.transport.send({
+			url: require_url.b2Url(this.safeBackupApiUrl(backupApiUrl), {
+				...BACKUP_API_V1,
+				endpoint
+			}),
+			method: "POST",
+			headers: {
+				Authorization: authToken,
+				"Content-Type": "application/json"
+			},
+			body: JSON.stringify(body),
+			...options?.signal !== void 0 ? { signal: options.signal } : {},
+			...options?.retry !== void 0 ? { retry: options.retry } : {}
+		})).json();
+	}
+};
+//#endregion
+exports.BackupRawClient = BackupRawClient;
+
+//# sourceMappingURL=raw.cjs.map

package/dist/backup/raw.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"raw.cjs","names":[],"sources":["../../src/backup/raw.ts"],"sourcesContent":["import type { RetryOptions } from '../http/retry.ts'\nimport type { HttpTransport } from '../http/transport.ts'\nimport {\n  endpointAllowedSuffixes,\n  nonRetryingMutationRequestOptions,\n  type QueryParams,\n  validatePartnerEndpointUrl,\n  withQueryString,\n} from '../partner/endpoint-url.ts'\nimport { type B2EndpointUrlOptions, b2Url } from '../raw/url.ts'\nimport type {\n  DeleteComputerRequest,\n  DeleteComputerResponse,\n  ListComputersRequest,\n  ListComputersResponse,\n} from '../types/backup.ts'\n\nconst BACKUP_API_V1: B2EndpointUrlOptions = { prefix: 'api/backup', version: 'v1' }\n\n/** Configuration for constructing a {@link BackupRawClient}. */\nexport interface BackupRawClientOptions {\n  /**\n   * The HTTP transport used to send requests.\n   *\n   * Computer Backup endpoint calls validate URLs against suffixes recorded by\n   * Partner authorization. A rehydrated client that skips authorization must\n   * use `authorizedBackupEndpointSuffixes` or a transport with a locked\n   * `urlGuard`. Because Partner authorize responses redact\n   * `authorizationToken` under `JSON.stringify`, durable caches should persist\n   * `partnerAuthorizeResponseForPersistence(auth)` only to encrypted or\n   * otherwise credential-grade storage, or use another secure token-preserving\n   * representation.\n   */\n  readonly transport: HttpTransport\n  /**\n   * Validated Computer Backup endpoint host suffixes restored from cached\n   * Partner authorization. Facades normally manage this after authorization;\n   * direct raw clients can pass trusted suffixes derived from\n   * `derivePartnerAllowedSuffixes()`. Do not derive this cache with\n   * `JSON.stringify(authorizePartner())`, which intentionally stores a redacted\n   * token placeholder instead of a usable Partner token. Rehydrating that\n   * placeholder fails fast.\n   */\n  readonly authorizedBackupEndpointSuffixes?: readonly string[]\n}\n\n/** Optional controls for raw Computer Backup API requests. */\nexport interface BackupRawRequestOptions {\n  /** Abort signal for cancelling the request. */\n  readonly signal?: AbortSignal\n  /** Per-request retry override. */\n  readonly retry?: Partial<RetryOptions>\n}\n\nfunction backupEndpointAllowedSuffixes(\n  transport: HttpTransport,\n  authorizedSuffixes: readonly string[],\n): readonly string[] {\n  return endpointAllowedSuffixes(transport, authorizedSuffixes, {\n    missingGuard:\n      'Computer Backup endpoint requests require BackupClient.authorize() or a locked URL guard before sending Partner tokens',\n    unlockedGuard:\n      'Computer Backup endpoint requests require a locked URL guard before sending Partner tokens',\n  })\n}\n\n/**\n * Low-level client for Computer Backup API endpoint bindings.\n *\n * Each method maps directly to one `bz_*` HTTP call under the\n * `/api/backup/v1/` route using the `backupApiUrl` returned by Partner\n * authorization.\n *\n * @experimental Computer Backup API surface; shape may change as the Backup API docs evolve.\n */\nexport class BackupRawClient {\n  /** @internal */\n  private readonly transport: HttpTransport\n  private authorizedEndpointSuffixes: readonly string[]\n\n  /**\n   * Creates a new BackupRawClient with the given transport.\n   *\n   * @param options - The constructor configuration.\n   */\n  constructor(options: BackupRawClientOptions) {\n    this.transport = options.transport\n    this.authorizedEndpointSuffixes = Array.from(options.authorizedBackupEndpointSuffixes ?? [])\n  }\n\n  /**\n   * Replaces the validated Computer Backup endpoint host suffixes.\n   *\n   * @param suffixes - Host suffixes derived from Partner authorization.\n   *\n   * @internal\n   */\n  setAuthorizedEndpointSuffixes(suffixes: readonly string[]): void {\n    this.authorizedEndpointSuffixes = Array.from(suffixes)\n  }\n\n  /**\n   * Calls `bz_list_computers`.\n   *\n   * Uses the documented GET form. The wire response is a single JSON object\n   * with a `nextComputerId` cursor and active computer backup records.\n   *\n   * @param backupApiUrl - The Computer Backup API base URL from `authorizePartner`.\n   * @param authToken - The Partner authorization token.\n   * @param request - The computer listing query parameters.\n   * @param options - Optional abort and per-request retry settings.\n   *\n   * @returns The single-object computer backup wire response.\n   *\n   * @experimental Computer Backup API surface; shape may change as the Backup API docs evolve.\n   */\n  async listComputers(\n    backupApiUrl: string,\n    authToken: string,\n    request: ListComputersRequest,\n    options?: BackupRawRequestOptions,\n  ): Promise<ListComputersResponse> {\n    return this.getJson<ListComputersResponse>(\n      backupApiUrl,\n      authToken,\n      'bz_list_computers',\n      {\n        accountId: request.accountId,\n        ...(request.startComputerId !== undefined\n          ? { startComputerId: request.startComputerId }\n          : {}),\n        ...(request.maxComputerCount !== undefined\n          ? { maxComputerCount: request.maxComputerCount }\n          : {}),\n      },\n      options,\n    )\n  }\n\n  /**\n   * Calls `bz_delete_computer`.\n   *\n   * The documented wire response is a JSON array of deletion records. This\n   * destructive mutation is not automatically retried or reauthorized in place.\n   *\n   * @param backupApiUrl - The Computer Backup API base URL from `authorizePartner`.\n   * @param authToken - The Partner authorization token.\n   * @param request - The computer deletion request body.\n   * @param options - Optional abort and per-request retry settings.\n   *\n   * @returns The deleted computer backup record array.\n   *\n   * @experimental Computer Backup API surface; shape may change as the Backup API docs evolve.\n   */\n  async deleteComputer(\n    backupApiUrl: string,\n    authToken: string,\n    request: DeleteComputerRequest,\n    options?: BackupRawRequestOptions,\n  ): Promise<DeleteComputerResponse> {\n    return this.postJson<DeleteComputerResponse>(\n      backupApiUrl,\n      authToken,\n      'bz_delete_computer',\n      {\n        accountId: request.accountId,\n        computerId: request.computerId,\n      },\n      nonRetryingMutationRequestOptions(options),\n    )\n  }\n\n  private safeBackupApiUrl(backupApiUrl: string): string {\n    return validatePartnerEndpointUrl(\n      backupApiUrl,\n      'backupApiUrl',\n      backupEndpointAllowedSuffixes(this.transport, this.authorizedEndpointSuffixes),\n    )\n  }\n\n  /**\n   * Sends a JSON GET request to the specified Computer Backup API endpoint.\n   *\n   * @param backupApiUrl - The Computer Backup API base URL.\n   * @param authToken - The Partner authorization token.\n   * @param endpoint - The Computer Backup API endpoint name.\n   * @param query - The query-string parameters.\n   * @param options - Optional abort and per-request retry settings.\n   *\n   * @returns The parsed JSON response.\n   */\n  private async getJson<T>(\n    backupApiUrl: string,\n    authToken: string,\n    endpoint: string,\n    query: QueryParams,\n    options?: BackupRawRequestOptions,\n  ): Promise<T> {\n    const response = await this.transport.send({\n      url: withQueryString(\n        b2Url(this.safeBackupApiUrl(backupApiUrl), { ...BACKUP_API_V1, endpoint }),\n        query,\n      ),\n      method: 'GET',\n      headers: {\n        Authorization: authToken,\n      },\n      ...(options?.signal !== undefined ? { signal: options.signal } : {}),\n      ...(options?.retry !== undefined ? { retry: options.retry } : {}),\n    })\n    return response.json<T>()\n  }\n\n  /**\n   * Sends a JSON POST request to the specified Computer Backup API endpoint.\n   *\n   * @param backupApiUrl - The Computer Backup API base URL.\n   * @param authToken - The Partner authorization token.\n   * @param endpoint - The Computer Backup API endpoint name.\n   * @param body - The JSON request body.\n   * @param options - Optional abort and per-request retry settings.\n   *\n   * @returns The parsed JSON response.\n   */\n  private async postJson<T>(\n    backupApiUrl: string,\n    authToken: string,\n    endpoint: string,\n    body: unknown,\n    options?: BackupRawRequestOptions,\n  ): Promise<T> {\n    const response = await this.transport.send({\n      url: b2Url(this.safeBackupApiUrl(backupApiUrl), { ...BACKUP_API_V1, endpoint }),\n      method: 'POST',\n      headers: {\n        Authorization: authToken,\n        'Content-Type': 'application/json',\n      },\n      body: JSON.stringify(body),\n      ...(options?.signal !== undefined ? { signal: options.signal } : {}),\n      ...(options?.retry !== undefined ? { retry: options.retry } : {}),\n    })\n    return response.json<T>()\n  }\n}\n"],"mappings":";;;AAiBA,IAAM,gBAAsC;CAAE,QAAQ;CAAc,SAAS;AAAK;AAqClF,SAAS,8BACP,WACA,oBACmB;CACnB,OAAO,qBAAA,wBAAwB,WAAW,oBAAoB;EAC5D,cACE;EACF,eACE;CACJ,CAAC;AACH;;;;;;;;;;AAWA,IAAa,kBAAb,MAA6B;;CAE3B;CACA;;;;;;CAOA,YAAY,SAAiC;EAC3C,KAAK,YAAY,QAAQ;EACzB,KAAK,6BAA6B,MAAM,KAAK,QAAQ,oCAAoC,CAAC,CAAC;CAC7F;;;;;;;;CASA,8BAA8B,UAAmC;EAC/D,KAAK,6BAA6B,MAAM,KAAK,QAAQ;CACvD;;;;;;;;;;;;;;;;CAiBA,MAAM,cACJ,cACA,WACA,SACA,SACgC;EAChC,OAAO,KAAK,QACV,cACA,WACA,qBACA;GACE,WAAW,QAAQ;GACnB,GAAI,QAAQ,oBAAoB,KAAA,IAC5B,EAAE,iBAAiB,QAAQ,gBAAgB,IAC3C,CAAC;GACL,GAAI,QAAQ,qBAAqB,KAAA,IAC7B,EAAE,kBAAkB,QAAQ,iBAAiB,IAC7C,CAAC;EACP,GACA,OACF;CACF;;;;;;;;;;;;;;;;CAiBA,MAAM,eACJ,cACA,WACA,SACA,SACiC;EACjC,OAAO,KAAK,SACV,cACA,WACA,sBACA;GACE,WAAW,QAAQ;GACnB,YAAY,QAAQ;EACtB,GACA,qBAAA,kCAAkC,OAAO,CAC3C;CACF;CAEA,iBAAyB,cAA8B;EACrD,OAAO,qBAAA,2BACL,cACA,gBACA,8BAA8B,KAAK,WAAW,KAAK,0BAA0B,CAC/E;CACF;;;;;;;;;;;;CAaA,MAAc,QACZ,cACA,WACA,UACA,OACA,SACY;EAaZ,QAAO,MAZgB,KAAK,UAAU,KAAK;GACzC,KAAK,qBAAA,gBACH,YAAA,MAAM,KAAK,iBAAiB,YAAY,GAAG;IAAE,GAAG;IAAe;GAAS,CAAC,GACzE,KACF;GACA,QAAQ;GACR,SAAS,EACP,eAAe,UACjB;GACA,GAAI,SAAS,WAAW,KAAA,IAAY,EAAE,QAAQ,QAAQ,OAAO,IAAI,CAAC;GAClE,GAAI,SAAS,UAAU,KAAA,IAAY,EAAE,OAAO,QAAQ,MAAM,IAAI,CAAC;EACjE,CAAC,EAAA,CACe,KAAQ;CAC1B;;;;;;;;;;;;CAaA,MAAc,SACZ,cACA,WACA,UACA,MACA,SACY;EAYZ,QAAO,MAXgB,KAAK,UAAU,KAAK;GACzC,KAAK,YAAA,MAAM,KAAK,iBAAiB,YAAY,GAAG;IAAE,GAAG;IAAe;GAAS,CAAC;GAC9E,QAAQ;GACR,SAAS;IACP,eAAe;IACf,gBAAgB;GAClB;GACA,MAAM,KAAK,UAAU,IAAI;GACzB,GAAI,SAAS,WAAW,KAAA,IAAY,EAAE,QAAQ,QAAQ,OAAO,IAAI,CAAC;GAClE,GAAI,SAAS,UAAU,KAAA,IAAY,EAAE,OAAO,QAAQ,MAAM,IAAI,CAAC;EACjE,CAAC,EAAA,CACe,KAAQ;CAC1B;AACF"}

package/dist/backup/raw.d.cts

@@ -0,0 +1,122 @@
+import { RetryOptions } from '../http/retry.js';
+import { HttpTransport } from '../http/transport.js';
+import { DeleteComputerRequest, DeleteComputerResponse, ListComputersRequest, ListComputersResponse } from '../types/backup.js';
+/** Configuration for constructing a {@link BackupRawClient}. */
+export interface BackupRawClientOptions {
+    /**
+     * The HTTP transport used to send requests.
+     *
+     * Computer Backup endpoint calls validate URLs against suffixes recorded by
+     * Partner authorization. A rehydrated client that skips authorization must
+     * use `authorizedBackupEndpointSuffixes` or a transport with a locked
+     * `urlGuard`. Because Partner authorize responses redact
+     * `authorizationToken` under `JSON.stringify`, durable caches should persist
+     * `partnerAuthorizeResponseForPersistence(auth)` only to encrypted or
+     * otherwise credential-grade storage, or use another secure token-preserving
+     * representation.
+     */
+    readonly transport: HttpTransport;
+    /**
+     * Validated Computer Backup endpoint host suffixes restored from cached
+     * Partner authorization. Facades normally manage this after authorization;
+     * direct raw clients can pass trusted suffixes derived from
+     * `derivePartnerAllowedSuffixes()`. Do not derive this cache with
+     * `JSON.stringify(authorizePartner())`, which intentionally stores a redacted
+     * token placeholder instead of a usable Partner token. Rehydrating that
+     * placeholder fails fast.
+     */
+    readonly authorizedBackupEndpointSuffixes?: readonly string[];
+}
+/** Optional controls for raw Computer Backup API requests. */
+export interface BackupRawRequestOptions {
+    /** Abort signal for cancelling the request. */
+    readonly signal?: AbortSignal;
+    /** Per-request retry override. */
+    readonly retry?: Partial<RetryOptions>;
+}
+/**
+ * Low-level client for Computer Backup API endpoint bindings.
+ *
+ * Each method maps directly to one `bz_*` HTTP call under the
+ * `/api/backup/v1/` route using the `backupApiUrl` returned by Partner
+ * authorization.
+ *
+ * @experimental Computer Backup API surface; shape may change as the Backup API docs evolve.
+ */
+export declare class BackupRawClient {
+    /** @internal */
+    private readonly transport;
+    private authorizedEndpointSuffixes;
+    /**
+     * Creates a new BackupRawClient with the given transport.
+     *
+     * @param options - The constructor configuration.
+     */
+    constructor(options: BackupRawClientOptions);
+    /**
+     * Replaces the validated Computer Backup endpoint host suffixes.
+     *
+     * @param suffixes - Host suffixes derived from Partner authorization.
+     *
+     * @internal
+     */
+    setAuthorizedEndpointSuffixes(suffixes: readonly string[]): void;
+    /**
+     * Calls `bz_list_computers`.
+     *
+     * Uses the documented GET form. The wire response is a single JSON object
+     * with a `nextComputerId` cursor and active computer backup records.
+     *
+     * @param backupApiUrl - The Computer Backup API base URL from `authorizePartner`.
+     * @param authToken - The Partner authorization token.
+     * @param request - The computer listing query parameters.
+     * @param options - Optional abort and per-request retry settings.
+     *
+     * @returns The single-object computer backup wire response.
+     *
+     * @experimental Computer Backup API surface; shape may change as the Backup API docs evolve.
+     */
+    listComputers(backupApiUrl: string, authToken: string, request: ListComputersRequest, options?: BackupRawRequestOptions): Promise<ListComputersResponse>;
+    /**
+     * Calls `bz_delete_computer`.
+     *
+     * The documented wire response is a JSON array of deletion records. This
+     * destructive mutation is not automatically retried or reauthorized in place.
+     *
+     * @param backupApiUrl - The Computer Backup API base URL from `authorizePartner`.
+     * @param authToken - The Partner authorization token.
+     * @param request - The computer deletion request body.
+     * @param options - Optional abort and per-request retry settings.
+     *
+     * @returns The deleted computer backup record array.
+     *
+     * @experimental Computer Backup API surface; shape may change as the Backup API docs evolve.
+     */
+    deleteComputer(backupApiUrl: string, authToken: string, request: DeleteComputerRequest, options?: BackupRawRequestOptions): Promise<DeleteComputerResponse>;
+    private safeBackupApiUrl;
+    /**
+     * Sends a JSON GET request to the specified Computer Backup API endpoint.
+     *
+     * @param backupApiUrl - The Computer Backup API base URL.
+     * @param authToken - The Partner authorization token.
+     * @param endpoint - The Computer Backup API endpoint name.
+     * @param query - The query-string parameters.
+     * @param options - Optional abort and per-request retry settings.
+     *
+     * @returns The parsed JSON response.
+     */
+    private getJson;
+    /**
+     * Sends a JSON POST request to the specified Computer Backup API endpoint.
+     *
+     * @param backupApiUrl - The Computer Backup API base URL.
+     * @param authToken - The Partner authorization token.
+     * @param endpoint - The Computer Backup API endpoint name.
+     * @param body - The JSON request body.
+     * @param options - Optional abort and per-request retry settings.
+     *
+     * @returns The parsed JSON response.
+     */
+    private postJson;
+}
+//# sourceMappingURL=raw.d.ts.map

package/dist/backup/raw.d.cts.map

@@ -0,0 +1 @@
+{"version":3,"file":"raw.d.ts","sourceRoot":"","sources":["../../src/backup/raw.js"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAA;AACpD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAA;AASzD,OAAO,KAAK,EACV,qBAAqB,EACrB,sBAAsB,EACtB,oBAAoB,EACpB,qBAAqB,EACtB,MAAM,oBAAoB,CAAA;AAI3B,gEAAgE;AAChE,MAAM,WAAW,sBAAsB;IACrC;;;;;;;;;;;OAWG;IACH,QAAQ,CAAC,SAAS,EAAE,aAAa,CAAA;IACjC;;;;;;;;OAQG;IACH,QAAQ,CAAC,gCAAgC,CAAC,EAAE,SAAS,MAAM,EAAE,CAAA;CAC9D;AAED,8DAA8D;AAC9D,MAAM,WAAW,uBAAuB;IACtC,+CAA+C;IAC/C,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAA;IAC7B,kCAAkC;IAClC,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC,YAAY,CAAC,CAAA;CACvC;AAcD;;;;;;;;GAQG;AACH,qBAAa,eAAe;IAC1B,gBAAgB;IAChB,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAe;IACzC,OAAO,CAAC,0BAA0B,CAAmB;IAErD;;;;OAIG;gBACS,OAAO,EAAE,sBAAsB;IAK3C;;;;;;OAMG;IACH,6BAA6B,CAAC,QAAQ,EAAE,SAAS,MAAM,EAAE,GAAG,IAAI;IAIhE;;;;;;;;;;;;;;OAcG;IACG,aAAa,CACjB,YAAY,EAAE,MAAM,EACpB,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,oBAAoB,EAC7B,OAAO,CAAC,EAAE,uBAAuB,GAChC,OAAO,CAAC,qBAAqB,CAAC;IAkBjC;;;;;;;;;;;;;;OAcG;IACG,cAAc,CAClB,YAAY,EAAE,MAAM,EACpB,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,qBAAqB,EAC9B,OAAO,CAAC,EAAE,uBAAuB,GAChC,OAAO,CAAC,sBAAsB,CAAC;IAalC,OAAO,CAAC,gBAAgB;IAQxB;;;;;;;;;;OAUG;YACW,OAAO;IAsBrB;;;;;;;;;;OAUG;YACW,QAAQ;CAoBvB"}