@barekey/sdk 0.1.2 → 0.2.0

package/README.md

@@ -5,17 +5,23 @@ Barekey TypeScript SDK.
 ## Install
 
 ```bash
-npm install @barekey/sdk
+bun add @barekey/sdk
 ```
 
 ## Build
 
 ```bash
-npm run build
+bun run build
 ```
 
 ## Typecheck
 
 ```bash
-npm run typecheck
+bun run typecheck
+```
+
+## Test
+
+```bash
+bun test
 ```

package/dist/client.d.ts

@@ -1,5 +1,5 @@
 import { BarekeyEnvHandle } from "./handle.js";
-import type { BarekeyClientOptions, BarekeyGeneratedTypeMap, BarekeyGetOptions, BarekeyJsonConfig, BarekeyKnownKey, BarekeyTypegenResult } from "./types.js";
+import type { BarekeyClientOptions, BarekeyGeneratedTypeMap, BarekeyGetOptions, BarekeyJsonConfig, BarekeyKey, BarekeyKnownKey, BarekeyTypegenResult } from "./types.js";
 export declare class BarekeyClient {
     private readonly options;
     private readonly fetchFn;
@@ -21,8 +21,7 @@ export declare class BarekeyClient {
         requirements?: BarekeyClientOptions["requirements"];
         typegen?: BarekeyClientOptions["typegen"];
     });
-    get<TKey extends BarekeyKnownKey>(name: TKey, options?: BarekeyGetOptions): BarekeyEnvHandle<BarekeyGeneratedTypeMap[TKey]>;
-    get(name: string, options?: BarekeyGetOptions): BarekeyEnvHandle<unknown>;
+    get<TKey extends BarekeyKey>(name: TKey, options?: BarekeyGetOptions): BarekeyEnvHandle<TKey extends BarekeyKnownKey ? BarekeyGeneratedTypeMap[TKey] : unknown>;
     typegen(): Promise<BarekeyTypegenResult>;
     private getRuntimeContext;
     private fetchTypegenManifest;

package/dist/client.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../src/client.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAkB/C,OAAO,KAAK,EACV,oBAAoB,EAEpB,uBAAuB,EACvB,iBAAiB,EACjB,iBAAiB,EACjB,eAAe,EACf,oBAAoB,EAErB,MAAM,YAAY,CAAC;AAiDpB,qBAAa,aAAa;IACxB,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAuB;IAC/C,OAAO,CAAC,QAAQ,CAAC,OAAO,CAA0B;IAClD,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAgD;IAChF,OAAO,CAAC,QAAQ,CAAC,eAAe,CAA4C;IAC5E,OAAO,CAAC,qBAAqB,CAA+C;IAC5E,OAAO,CAAC,mBAAmB,CAA8B;IACzD,OAAO,CAAC,qBAAqB,CAAS;;gBAG1B,OAAO,EAAE;QACnB,YAAY,EAAE,MAAM,CAAC;QACrB,OAAO,EAAE,MAAM,CAAC;QAChB,WAAW,EAAE,MAAM,CAAC;QACpB,YAAY,CAAC,EAAE,oBAAoB,CAAC,cAAc,CAAC,CAAC;QACpD,OAAO,CAAC,EAAE,oBAAoB,CAAC,SAAS,CAAC,CAAC;KAC3C;gBACW,OAAO,EAAE;QACnB,IAAI,EAAE,iBAAiB,CAAC;QACxB,YAAY,CAAC,EAAE,oBAAoB,CAAC,cAAc,CAAC,CAAC;QACpD,OAAO,CAAC,EAAE,oBAAoB,CAAC,SAAS,CAAC,CAAC;KAC3C;IAMD,GAAG,CAAC,IAAI,SAAS,eAAe,EAC9B,IAAI,EAAE,IAAI,EACV,OAAO,CAAC,EAAE,iBAAiB,GAC1B,gBAAgB,CAAC,uBAAuB,CAAC,IAAI,CAAC,CAAC;IAClD,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,iBAAiB,GAAG,gBAAgB,CAAC,OAAO,CAAC;IAOnE,OAAO,IAAI,OAAO,CAAC,oBAAoB,CAAC;YAkBhC,iBAAiB;YAajB,oBAAoB;IAclC,OAAO,CAAC,oBAAoB;YAWd,mBAAmB;IA6EjC,OAAO,CAAC,oBAAoB;IAW5B,OAAO,CAAC,uBAAuB;IAI/B,OAAO,CAAC,uBAAuB;YAejB,gBAAgB;YAsBhB,2BAA2B;YA4B3B,mBAAmB;YAiBnB,kBAAkB;YAQlB,mBAAmB;YAkEnB,qBAAqB;CAYpC"}
+{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../src/client.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAkB/C,OAAO,KAAK,EACV,oBAAoB,EAEpB,uBAAuB,EACvB,iBAAiB,EACjB,iBAAiB,EACjB,UAAU,EACV,eAAe,EACf,oBAAoB,EAErB,MAAM,YAAY,CAAC;AAiDpB,qBAAa,aAAa;IACxB,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAuB;IAC/C,OAAO,CAAC,QAAQ,CAAC,OAAO,CAA0B;IAClD,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAgD;IAChF,OAAO,CAAC,QAAQ,CAAC,eAAe,CAA4C;IAC5E,OAAO,CAAC,qBAAqB,CAA+C;IAC5E,OAAO,CAAC,mBAAmB,CAA8B;IACzD,OAAO,CAAC,qBAAqB,CAAS;;gBAG1B,OAAO,EAAE;QACnB,YAAY,EAAE,MAAM,CAAC;QACrB,OAAO,EAAE,MAAM,CAAC;QAChB,WAAW,EAAE,MAAM,CAAC;QACpB,YAAY,CAAC,EAAE,oBAAoB,CAAC,cAAc,CAAC,CAAC;QACpD,OAAO,CAAC,EAAE,oBAAoB,CAAC,SAAS,CAAC,CAAC;KAC3C;gBACW,OAAO,EAAE;QACnB,IAAI,EAAE,iBAAiB,CAAC;QACxB,YAAY,CAAC,EAAE,oBAAoB,CAAC,cAAc,CAAC,CAAC;QACpD,OAAO,CAAC,EAAE,oBAAoB,CAAC,SAAS,CAAC,CAAC;KAC3C;IAMD,GAAG,CAAC,IAAI,SAAS,UAAU,EACzB,IAAI,EAAE,IAAI,EACV,OAAO,CAAC,EAAE,iBAAiB,GAC1B,gBAAgB,CAAC,IAAI,SAAS,eAAe,GAAG,uBAAuB,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC;IAOrF,OAAO,IAAI,OAAO,CAAC,oBAAoB,CAAC;YAkBhC,iBAAiB;YAajB,oBAAoB;IAclC,OAAO,CAAC,oBAAoB;YAWd,mBAAmB;IA6EjC,OAAO,CAAC,oBAAoB;IAW5B,OAAO,CAAC,uBAAuB;IAI/B,OAAO,CAAC,uBAAuB;YAejB,gBAAgB;YAsBhB,2BAA2B;YA4B3B,mBAAmB;YAiBnB,kBAAkB;YAQlB,mBAAmB;YAkEnB,qBAAqB;CAYpC"}

package/dist/index.d.ts

@@ -1,5 +1,7 @@
 export { BarekeyClient } from "./client.js";
+export { PublicBarekeyClient } from "./public-client.js";
 export { BarekeyEnvHandle } from "./handle.js";
 export { BarekeyError, BillingUnavailableError, CoerceFailedError, DeviceCodeExpiredError, DeviceCodeNotFoundError, EvaluationFailedError, FsNotAvailableError, InvalidConfigurationProvidedError, InvalidCredentialsProvidedError, InvalidDynamicOptionsError, InvalidJsonError, InvalidOrgScopeError, InvalidRefreshTokenError, InvalidRequestError, NetworkError, NoConfigurationProvidedError, NoCredentialsProvidedError, OrgScopeInvalidError, RequirementsValidationFailedError, SdkModuleNotFoundError, TemporalNotAvailableError, TypegenReadFailedError, TypegenUnsupportedSdkError, TypegenWriteFailedError, UnauthorizedError, UnknownError, UsageLimitExceededError, UserCodeInvalidError, VariableNotFoundError, createBarekeyErrorFromCode, docsUrlForErrorCode, formatBarekeyErrorMessage, isBarekeyErrorCode, normalizeErrorCode, } from "./errors.js";
-export type { AB, BarekeyClientOptions, BarekeyCoerceTarget, BarekeyDeclaredType, BarekeyErrorCode, BarekeyGeneratedTypeMap, BarekeyGetOptions, BarekeyJsonConfig, BarekeyKnownKey, BarekeyResolvedKind, BarekeyRolloutMilestone, BarekeyStandardSchemaV1, BarekeyTemporalInstant, BarekeyTemporalInstantLike, BarekeyTtlInput, BarekeyTypegenResult, Env, Linear, Secret, } from "./types.js";
+export type { AB, BarekeyClientOptions, BarekeyCoerceTarget, BarekeyDeclaredType, BarekeyErrorCode, BarekeyGeneratedTypeMap, BarekeyGetOptions, BarekeyJsonConfig, BarekeyKey, BarekeyLiteralString, BarekeyKnownKey, BarekeyResolvedKind, BarekeyRolloutMilestone, BarekeyStandardSchemaV1, BarekeyTemporalInstant, BarekeyTemporalInstantLike, BarekeyTtlInput, BarekeyTypegenResult, Env, Linear, Secret, } from "./types.js";
+export type { BarekeyPublicGeneratedTypeMap, BarekeyPublicKey, BarekeyPublicKnownKey, PublicBarekeyClientOptions, } from "./public-types.js";
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAC/C,OAAO,EACL,YAAY,EACZ,uBAAuB,EACvB,iBAAiB,EACjB,sBAAsB,EACtB,uBAAuB,EACvB,qBAAqB,EACrB,mBAAmB,EACnB,iCAAiC,EACjC,+BAA+B,EAC/B,0BAA0B,EAC1B,gBAAgB,EAChB,oBAAoB,EACpB,wBAAwB,EACxB,mBAAmB,EACnB,YAAY,EACZ,4BAA4B,EAC5B,0BAA0B,EAC1B,oBAAoB,EACpB,iCAAiC,EACjC,sBAAsB,EACtB,yBAAyB,EACzB,sBAAsB,EACtB,0BAA0B,EAC1B,uBAAuB,EACvB,iBAAiB,EACjB,YAAY,EACZ,uBAAuB,EACvB,oBAAoB,EACpB,qBAAqB,EACrB,0BAA0B,EAC1B,mBAAmB,EACnB,yBAAyB,EACzB,kBAAkB,EAClB,kBAAkB,GACnB,MAAM,aAAa,CAAC;AAErB,YAAY,EACV,EAAE,EACF,oBAAoB,EACpB,mBAAmB,EACnB,mBAAmB,EACnB,gBAAgB,EAChB,uBAAuB,EACvB,iBAAiB,EACjB,iBAAiB,EACjB,eAAe,EACf,mBAAmB,EACnB,uBAAuB,EACvB,uBAAuB,EACvB,sBAAsB,EACtB,0BAA0B,EAC1B,eAAe,EACf,oBAAoB,EACpB,GAAG,EACH,MAAM,EACN,MAAM,GACP,MAAM,YAAY,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AACzD,OAAO,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAC/C,OAAO,EACL,YAAY,EACZ,uBAAuB,EACvB,iBAAiB,EACjB,sBAAsB,EACtB,uBAAuB,EACvB,qBAAqB,EACrB,mBAAmB,EACnB,iCAAiC,EACjC,+BAA+B,EAC/B,0BAA0B,EAC1B,gBAAgB,EAChB,oBAAoB,EACpB,wBAAwB,EACxB,mBAAmB,EACnB,YAAY,EACZ,4BAA4B,EAC5B,0BAA0B,EAC1B,oBAAoB,EACpB,iCAAiC,EACjC,sBAAsB,EACtB,yBAAyB,EACzB,sBAAsB,EACtB,0BAA0B,EAC1B,uBAAuB,EACvB,iBAAiB,EACjB,YAAY,EACZ,uBAAuB,EACvB,oBAAoB,EACpB,qBAAqB,EACrB,0BAA0B,EAC1B,mBAAmB,EACnB,yBAAyB,EACzB,kBAAkB,EAClB,kBAAkB,GACnB,MAAM,aAAa,CAAC;AAErB,YAAY,EACV,EAAE,EACF,oBAAoB,EACpB,mBAAmB,EACnB,mBAAmB,EACnB,gBAAgB,EAChB,uBAAuB,EACvB,iBAAiB,EACjB,iBAAiB,EACjB,UAAU,EACV,oBAAoB,EACpB,eAAe,EACf,mBAAmB,EACnB,uBAAuB,EACvB,uBAAuB,EACvB,sBAAsB,EACtB,0BAA0B,EAC1B,eAAe,EACf,oBAAoB,EACpB,GAAG,EACH,MAAM,EACN,MAAM,GACP,MAAM,YAAY,CAAC;AAEpB,YAAY,EACV,6BAA6B,EAC7B,gBAAgB,EAChB,qBAAqB,EACrB,0BAA0B,GAC3B,MAAM,mBAAmB,CAAC"}

package/dist/index.js

@@ -1,3 +1,4 @@
 export { BarekeyClient } from "./client.js";
+export { PublicBarekeyClient } from "./public-client.js";
 export { BarekeyEnvHandle } from "./handle.js";
 export { BarekeyError, BillingUnavailableError, CoerceFailedError, DeviceCodeExpiredError, DeviceCodeNotFoundError, EvaluationFailedError, FsNotAvailableError, InvalidConfigurationProvidedError, InvalidCredentialsProvidedError, InvalidDynamicOptionsError, InvalidJsonError, InvalidOrgScopeError, InvalidRefreshTokenError, InvalidRequestError, NetworkError, NoConfigurationProvidedError, NoCredentialsProvidedError, OrgScopeInvalidError, RequirementsValidationFailedError, SdkModuleNotFoundError, TemporalNotAvailableError, TypegenReadFailedError, TypegenUnsupportedSdkError, TypegenWriteFailedError, UnauthorizedError, UnknownError, UsageLimitExceededError, UserCodeInvalidError, VariableNotFoundError, createBarekeyErrorFromCode, docsUrlForErrorCode, formatBarekeyErrorMessage, isBarekeyErrorCode, normalizeErrorCode, } from "./errors.js";

package/dist/internal/node-runtime.d.ts

@@ -10,7 +10,8 @@ export declare function loadCliSessionAuthResolver(fetchFn: typeof globalThis.fe
 } | null>;
 type InstalledSdkTypegenTarget = {
     packageRoot: string;
-    generatedTypesPath: string;
+    serverGeneratedTypesPath: string;
+    publicGeneratedTypesPath: string;
     typegenMetadataPath: string;
 };
 export declare function resolveInstalledSdkTypegenTarget(): Promise<InstalledSdkTypegenTarget | null>;

package/dist/internal/node-runtime.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"node-runtime.d.ts","sourceRoot":"","sources":["../../src/internal/node-runtime.ts"],"names":[],"mappings":"AA4VA,wBAAsB,qBAAqB,IAAI,OAAO,CAAC,OAAO,CAAC,CAE9D;AAED,wBAAsB,qBAAqB,IAAI,OAAO,CAAC;IACrD,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAC/B,GAAG,IAAI,CAAC,CAwCR;AAED,wBAAsB,0BAA0B,CAAC,OAAO,EAAE,OAAO,UAAU,CAAC,KAAK,GAAG,OAAO,CAAC;IAC1F,OAAO,EAAE,MAAM,CAAC;IAChB,cAAc,IAAI,OAAO,CAAC,MAAM,CAAC,CAAC;IAClC,cAAc,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACjC,GAAG,IAAI,CAAC,CAoER;AAOD,KAAK,yBAAyB,GAAG;IAC/B,WAAW,EAAE,MAAM,CAAC;IACpB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,mBAAmB,EAAE,MAAM,CAAC;CAC7B,CAAC;AAEF,wBAAsB,gCAAgC,IAAI,OAAO,CAAC,yBAAyB,GAAG,IAAI,CAAC,CAuDlG;AAED,wBAAsB,YAAY,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAkB3E;AAED,wBAAsB,mBAAmB,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAuBxF"}
+{"version":3,"file":"node-runtime.d.ts","sourceRoot":"","sources":["../../src/internal/node-runtime.ts"],"names":[],"mappings":"AA4VA,wBAAsB,qBAAqB,IAAI,OAAO,CAAC,OAAO,CAAC,CAE9D;AAED,wBAAsB,qBAAqB,IAAI,OAAO,CAAC;IACrD,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAC/B,GAAG,IAAI,CAAC,CAwCR;AAED,wBAAsB,0BAA0B,CAAC,OAAO,EAAE,OAAO,UAAU,CAAC,KAAK,GAAG,OAAO,CAAC;IAC1F,OAAO,EAAE,MAAM,CAAC;IAChB,cAAc,IAAI,OAAO,CAAC,MAAM,CAAC,CAAC;IAClC,cAAc,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACjC,GAAG,IAAI,CAAC,CAoER;AAOD,KAAK,yBAAyB,GAAG;IAC/B,WAAW,EAAE,MAAM,CAAC;IACpB,wBAAwB,EAAE,MAAM,CAAC;IACjC,wBAAwB,EAAE,MAAM,CAAC;IACjC,mBAAmB,EAAE,MAAM,CAAC;CAC7B,CAAC;AAEF,wBAAsB,gCAAgC,IAAI,OAAO,CAAC,yBAAyB,GAAG,IAAI,CAAC,CA0DlG;AAED,wBAAsB,YAAY,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAkB3E;AAED,wBAAsB,mBAAmB,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAuBxF"}

package/dist/internal/node-runtime.js

@@ -351,19 +351,22 @@ export async function resolveInstalledSdkTypegenTarget() {
         const candidatePackageJson = runtime.path.join(current, "package.json");
         const rawPackageJson = await readJsonFile(runtime, candidatePackageJson);
         if (rawPackageJson !== null && rawPackageJson.name === "@barekey/sdk") {
-            const generatedTypesPath = runtime.path.join(current, "generated.d.ts");
+            const serverGeneratedTypesPath = runtime.path.join(current, "generated.server.d.ts");
+            const publicGeneratedTypesPath = runtime.path.join(current, "generated.public.d.ts");
             try {
-                await runtime.fs.access(generatedTypesPath);
+                await runtime.fs.access(serverGeneratedTypesPath);
+                await runtime.fs.access(publicGeneratedTypesPath);
             }
             catch (error) {
                 throw new TypegenUnsupportedSdkError({
-                    message: `The installed @barekey/sdk module at ${current} does not include generated.d.ts.`,
+                    message: `The installed @barekey/sdk module at ${current} does not include generated.server.d.ts and generated.public.d.ts.`,
                     cause: error,
                 });
             }
             return {
                 packageRoot: current,
-                generatedTypesPath,
+                serverGeneratedTypesPath,
+                publicGeneratedTypesPath,
                 typegenMetadataPath: runtime.path.join(current, "typegen.json"),
             };
         }

package/dist/internal/public-runtime.d.ts

@@ -0,0 +1,14 @@
+import type { PublicBarekeyClientOptions } from "../public-types.js";
+import type { BarekeyStandardSchemaV1 } from "../types.js";
+type BarekeyResolvedScope = {
+    organization: string;
+    project: string;
+    environment: string;
+};
+export type BarekeyPublicRuntimeContext = BarekeyResolvedScope & {
+    baseUrl: string;
+    requirements?: BarekeyStandardSchemaV1;
+};
+export declare function resolvePublicRuntimeContext(options: PublicBarekeyClientOptions): Promise<BarekeyPublicRuntimeContext>;
+export {};
+//# sourceMappingURL=public-runtime.d.ts.map

package/dist/internal/public-runtime.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"public-runtime.d.ts","sourceRoot":"","sources":["../../src/internal/public-runtime.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,oBAAoB,CAAC;AACrE,OAAO,KAAK,EAAqB,uBAAuB,EAAE,MAAM,aAAa,CAAC;AAM9E,KAAK,oBAAoB,GAAG;IAC1B,YAAY,EAAE,MAAM,CAAC;IACrB,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,MAAM,CAAC;CACrB,CAAC;AAEF,MAAM,MAAM,2BAA2B,GAAG,oBAAoB,GAAG;IAC/D,OAAO,EAAE,MAAM,CAAC;IAChB,YAAY,CAAC,EAAE,uBAAuB,CAAC;CACxC,CAAC;AA4FF,wBAAsB,2BAA2B,CAC/C,OAAO,EAAE,0BAA0B,GAClC,OAAO,CAAC,2BAA2B,CAAC,CAOtC"}

package/dist/internal/public-runtime.js

@@ -0,0 +1,78 @@
+import { FsNotAvailableError, InvalidConfigurationProvidedError, NoConfigurationProvidedError, } from "../errors.js";
+import { normalizeBaseUrl } from "./http.js";
+import { isFilesystemAvailable, loadBarekeyJsonConfig } from "./node-runtime.js";
+const DEFAULT_BAREKEY_API_URL = "https://api.barekey.dev";
+function readConfigString(value) {
+    return typeof value === "string" ? value.trim() : undefined;
+}
+function normalizeScope(input) {
+    const organization = readConfigString(input.organization) ?? "";
+    const project = readConfigString(input.project) ?? "";
+    const environment = readConfigString(input.environment) ?? "";
+    if (organization.length === 0 || project.length === 0 || environment.length === 0) {
+        throw new InvalidConfigurationProvidedError({
+            message: `${input.source} must provide organization, project, and environment.`,
+        });
+    }
+    return {
+        organization,
+        project,
+        environment,
+    };
+}
+function normalizeJsonConfig(input, source) {
+    return normalizeScope({
+        organization: input.organization ?? input.org,
+        project: input.project,
+        environment: input.environment ?? input.stage,
+        source,
+    });
+}
+async function resolveScope(options) {
+    const explicitOrganization = "organization" in options ? options.organization : undefined;
+    const explicitProject = "project" in options ? options.project : undefined;
+    const explicitEnvironment = "environment" in options ? options.environment : undefined;
+    const explicitJson = "json" in options ? options.json : undefined;
+    const explicitCount = Number(explicitOrganization !== undefined) +
+        Number(explicitProject !== undefined) +
+        Number(explicitEnvironment !== undefined);
+    if (explicitJson !== undefined && explicitCount > 0) {
+        throw new InvalidConfigurationProvidedError({
+            message: "Pass either json or organization/project/environment, not both.",
+        });
+    }
+    if (explicitCount > 0 && explicitCount < 3) {
+        throw new InvalidConfigurationProvidedError({
+            message: "organization, project, and environment must be provided together.",
+        });
+    }
+    if (explicitJson !== undefined) {
+        return normalizeJsonConfig(explicitJson, "The provided json configuration");
+    }
+    if (explicitCount === 3) {
+        return normalizeScope({
+            organization: explicitOrganization,
+            project: explicitProject,
+            environment: explicitEnvironment,
+            source: "The provided Barekey configuration",
+        });
+    }
+    const loadedConfig = await loadBarekeyJsonConfig();
+    if (loadedConfig === null) {
+        if (!(await isFilesystemAvailable())) {
+            throw new FsNotAvailableError();
+        }
+        throw new NoConfigurationProvidedError({
+            message: "No Barekey configuration was found and no barekey.json file could be loaded.",
+        });
+    }
+    return normalizeJsonConfig(loadedConfig.json, `The barekey.json file at ${loadedConfig.path}`);
+}
+export async function resolvePublicRuntimeContext(options) {
+    const scope = await resolveScope(options);
+    return {
+        ...scope,
+        baseUrl: normalizeBaseUrl(options.baseUrl?.trim() || DEFAULT_BAREKEY_API_URL),
+        requirements: options.requirements,
+    };
+}

package/dist/internal/typegen.d.ts

@@ -1,6 +1,7 @@
 import type { BarekeyRolloutFunction, BarekeyRolloutMilestone, BarekeyTypegenResult } from "../types.js";
 export type TypegenManifestVariable = {
     name: string;
+    visibility: "private" | "public";
     kind: "secret" | "ab_roll" | "rollout";
     declaredType: "string" | "boolean" | "int64" | "float" | "date" | "json";
     required: boolean;
@@ -27,6 +28,10 @@ type TypegenMetadataIdentity = {
     stageSlug: string;
 };
 export declare function resolveInstalledSdkGeneratedTypesPath(): Promise<string | null>;
+export declare function renderGeneratedTypesForManifest(manifest: TypegenManifest): {
+    serverContents: string;
+    publicContents: string;
+};
 export declare function hasFreshInstalledSdkTypegen(intervalMs: number, identity: TypegenMetadataIdentity): Promise<boolean>;
 export declare function writeInstalledSdkGeneratedTypes(manifest: TypegenManifest, identity: TypegenMetadataIdentity): Promise<BarekeyTypegenResult>;
 export {};

package/dist/internal/typegen.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"typegen.d.ts","sourceRoot":"","sources":["../../src/internal/typegen.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EACV,sBAAsB,EACtB,uBAAuB,EACvB,oBAAoB,EACrB,MAAM,aAAa,CAAC;AAErB,MAAM,MAAM,uBAAuB,GAAG;IACpC,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,QAAQ,GAAG,SAAS,GAAG,SAAS,CAAC;IACvC,YAAY,EAAE,QAAQ,GAAG,SAAS,GAAG,OAAO,GAAG,OAAO,GAAG,MAAM,GAAG,MAAM,CAAC;IACzE,QAAQ,EAAE,OAAO,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,cAAc,EAAE,MAAM,CAAC;IACvB,oBAAoB,EAAE,MAAM,GAAG,IAAI,CAAC;IACpC,oBAAoB,EAAE,MAAM,GAAG,IAAI,CAAC;IACpC,eAAe,EAAE,sBAAsB,GAAG,IAAI,CAAC;IAC/C,iBAAiB,EAAE,KAAK,CAAC,uBAAuB,CAAC,GAAG,IAAI,CAAC;CAC1D,CAAC;AAEF,MAAM,MAAM,eAAe,GAAG;IAC5B,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,aAAa,EAAE,MAAM,CAAC;IACtB,eAAe,EAAE,MAAM,CAAC;IACxB,SAAS,EAAE,KAAK,CAAC,uBAAuB,CAAC,CAAC;CAC3C,CAAC;AAcF,KAAK,uBAAuB,GAAG;IAC7B,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;CACnB,CAAC;AA4IF,wBAAsB,qCAAqC,IAAI,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAGpF;AAED,wBAAsB,2BAA2B,CAC/C,UAAU,EAAE,MAAM,EAClB,QAAQ,EAAE,uBAAuB,GAChC,OAAO,CAAC,OAAO,CAAC,CAqBlB;AAED,wBAAsB,+BAA+B,CACnD,QAAQ,EAAE,eAAe,EACzB,QAAQ,EAAE,uBAAuB,GAChC,OAAO,CAAC,oBAAoB,CAAC,CAiC/B"}
+{"version":3,"file":"typegen.d.ts","sourceRoot":"","sources":["../../src/internal/typegen.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EACV,sBAAsB,EACtB,uBAAuB,EACvB,oBAAoB,EACrB,MAAM,aAAa,CAAC;AAErB,MAAM,MAAM,uBAAuB,GAAG;IACpC,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,EAAE,SAAS,GAAG,QAAQ,CAAC;IACjC,IAAI,EAAE,QAAQ,GAAG,SAAS,GAAG,SAAS,CAAC;IACvC,YAAY,EAAE,QAAQ,GAAG,SAAS,GAAG,OAAO,GAAG,OAAO,GAAG,MAAM,GAAG,MAAM,CAAC;IACzE,QAAQ,EAAE,OAAO,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,cAAc,EAAE,MAAM,CAAC;IACvB,oBAAoB,EAAE,MAAM,GAAG,IAAI,CAAC;IACpC,oBAAoB,EAAE,MAAM,GAAG,IAAI,CAAC;IACpC,eAAe,EAAE,sBAAsB,GAAG,IAAI,CAAC;IAC/C,iBAAiB,EAAE,KAAK,CAAC,uBAAuB,CAAC,GAAG,IAAI,CAAC;CAC1D,CAAC;AAEF,MAAM,MAAM,eAAe,GAAG;IAC5B,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,aAAa,EAAE,MAAM,CAAC;IACtB,eAAe,EAAE,MAAM,CAAC;IACxB,SAAS,EAAE,KAAK,CAAC,uBAAuB,CAAC,CAAC;CAC3C,CAAC;AAcF,KAAK,uBAAuB,GAAG;IAC7B,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;CACnB,CAAC;AAuJF,wBAAsB,qCAAqC,IAAI,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAGpF;AAED,wBAAgB,+BAA+B,CAAC,QAAQ,EAAE,eAAe,GAAG;IAC1E,cAAc,EAAE,MAAM,CAAC;IACvB,cAAc,EAAE,MAAM,CAAC;CACxB,CAeA;AAED,wBAAsB,2BAA2B,CAC/C,UAAU,EAAE,MAAM,EAClB,QAAQ,EAAE,uBAAuB,GAChC,OAAO,CAAC,OAAO,CAAC,CAqBlB;AAED,wBAAsB,+BAA+B,CACnD,QAAQ,EAAE,eAAe,EACzB,QAAQ,EAAE,uBAAuB,GAChC,OAAO,CAAC,oBAAoB,CAAC,CAwD/B"}

package/dist/internal/typegen.js

@@ -21,16 +21,17 @@ function renderRolloutMetadataType(row) {
 }
 function renderVariableType(row) {
     if (row.kind === "secret") {
-        return `Env<Secret, ${row.typeScriptType}>`;
+        return `Env<Secret, ${row.typeScriptType}, never, ${JSON.stringify(row.visibility)}>`;
     }
     if (row.kind === "ab_roll") {
-        return `Env<AB, ${row.typeScriptType}>`;
+        return `Env<AB, ${row.typeScriptType}, never, ${JSON.stringify(row.visibility)}>`;
     }
-    return `Env<AB, ${row.typeScriptType}, ${renderRolloutMetadataType(row)}>`;
+    return `Env<AB, ${row.typeScriptType}, ${renderRolloutMetadataType(row)}, ${JSON.stringify(row.visibility)}>`;
 }
-function buildGeneratedTypesContents(manifest) {
+function buildGeneratedTypesContents(manifest, input) {
     const mapLines = manifest.variables
         .slice()
+        .filter(input.include)
         .sort((left, right) => left.name.localeCompare(right.name))
         .map((row) => `    ${JSON.stringify(row.name)}: ${renderVariableType(row)};`)
         .join("\n");
@@ -38,10 +39,10 @@ function buildGeneratedTypesContents(manifest) {
 /* This file is generated by barekey typegen. */
 /* barekey-manifest-version: ${manifest.manifestVersion} */
 
-import type { AB, EaseInOut, Env, Linear, Secret, Step } from "./dist/types.js";
+import type { AB, EaseInOut, Env, Linear, Secret, Step } from "${input.typeModulePath}";
 
-declare module "./dist/types.js" {
-  interface BarekeyGeneratedTypeMap {
+declare module "${input.declaredModulePath}" {
+  interface ${input.interfaceName} {
 ${mapLines.length > 0 ? mapLines : ""}
   }
 }
@@ -108,7 +109,23 @@ function buildTypegenMetadataContents(lastGeneratedAt, identity) {
 }
 export async function resolveInstalledSdkGeneratedTypesPath() {
     const target = await resolveInstalledSdkTypegenTarget();
-    return target?.generatedTypesPath ?? null;
+    return target?.serverGeneratedTypesPath ?? null;
+}
+export function renderGeneratedTypesForManifest(manifest) {
+    return {
+        serverContents: buildGeneratedTypesContents(manifest, {
+            typeModulePath: "./dist/types.js",
+            declaredModulePath: "./dist/types.js",
+            interfaceName: "BarekeyGeneratedTypeMap",
+            include: () => true,
+        }),
+        publicContents: buildGeneratedTypesContents(manifest, {
+            typeModulePath: "./dist/public-types.js",
+            declaredModulePath: "./dist/public-types.js",
+            interfaceName: "BarekeyPublicGeneratedTypeMap",
+            include: (row) => row.visibility === "public",
+        }),
+    };
 }
 export async function hasFreshInstalledSdkTypegen(intervalMs, identity) {
     const target = await resolveInstalledSdkTypegenTarget();
@@ -133,23 +150,37 @@ export async function writeInstalledSdkGeneratedTypes(manifest, identity) {
         return {
             written: false,
             path: "",
+            serverPath: "",
+            publicPath: "",
             manifestVersion: manifest.manifestVersion,
         };
     }
-    const existingContents = await readTextFile(target.generatedTypesPath);
-    if (readManifestVersion(existingContents) === manifest.manifestVersion) {
+    const [existingServerContents, existingPublicContents] = await Promise.all([
+        readTextFile(target.serverGeneratedTypesPath),
+        readTextFile(target.publicGeneratedTypesPath),
+    ]);
+    if (readManifestVersion(existingServerContents) === manifest.manifestVersion &&
+        readManifestVersion(existingPublicContents) === manifest.manifestVersion) {
         await writeTextFileAtomic(target.typegenMetadataPath, buildTypegenMetadataContents(new Date(), identity));
         return {
             written: false,
-            path: target.generatedTypesPath,
+            path: target.serverGeneratedTypesPath,
+            serverPath: target.serverGeneratedTypesPath,
+            publicPath: target.publicGeneratedTypesPath,
             manifestVersion: manifest.manifestVersion,
         };
     }
-    await writeTextFileAtomic(target.generatedTypesPath, buildGeneratedTypesContents(manifest));
+    const rendered = renderGeneratedTypesForManifest(manifest);
+    await Promise.all([
+        writeTextFileAtomic(target.serverGeneratedTypesPath, rendered.serverContents),
+        writeTextFileAtomic(target.publicGeneratedTypesPath, rendered.publicContents),
+    ]);
     await writeTextFileAtomic(target.typegenMetadataPath, buildTypegenMetadataContents(new Date(), identity));
     return {
         written: true,
-        path: target.generatedTypesPath,
+        path: target.serverGeneratedTypesPath,
+        serverPath: target.serverGeneratedTypesPath,
+        publicPath: target.publicGeneratedTypesPath,
         manifestVersion: manifest.manifestVersion,
     };
 }

package/dist/key-types.typecheck.d.ts

@@ -0,0 +1,13 @@
+import type { Env, Secret } from "./types.js";
+declare module "./types.js" {
+    interface BarekeyGeneratedTypeMap {
+        PRIVATE_TOKEN: Env<Secret, string, never, "private">;
+    }
+}
+declare module "./public-types.js" {
+    interface BarekeyPublicGeneratedTypeMap {
+        PUBLIC_THEME: Env<Secret, "light" | "dark", never, "public">;
+    }
+}
+export {};
+//# sourceMappingURL=key-types.typecheck.d.ts.map

package/dist/key-types.typecheck.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"key-types.typecheck.d.ts","sourceRoot":"","sources":["../src/key-types.typecheck.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,YAAY,CAAC;AAa9C,OAAO,QAAQ,YAAY,CAAC;IAC1B,UAAU,uBAAuB;QAC/B,aAAa,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS,CAAC,CAAC;KACtD;CACF;AAED,OAAO,QAAQ,mBAAmB,CAAC;IACjC,UAAU,6BAA6B;QACrC,YAAY,EAAE,GAAG,CAAC,MAAM,EAAE,OAAO,GAAG,MAAM,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC;KAC9D;CACF;AAyCD,OAAO,EAAE,CAAC"}

package/dist/key-types.typecheck.js

@@ -0,0 +1,5 @@
+const privateKnownHandle = client.get("PRIVATE_TOKEN");
+const privateUnknownHandle = client.get("SOME_RUNTIME_KEY");
+const publicKnownHandle = publicClient.get("PUBLIC_THEME");
+const publicUnknownHandle = publicClient.get("SOME_RUNTIME_KEY");
+export {};

package/dist/public-client.d.ts

@@ -0,0 +1,35 @@
+import { BarekeyEnvHandle } from "./handle.js";
+import type { BarekeyPublicGeneratedTypeMap, BarekeyPublicKey, BarekeyPublicKnownKey, PublicBarekeyClientOptions } from "./public-types.js";
+import type { BarekeyGetOptions, BarekeyJsonConfig } from "./types.js";
+export declare class PublicBarekeyClient {
+    private readonly options;
+    private readonly fetchFn;
+    private readonly definitionCache;
+    private readonly evaluationCache;
+    private runtimeContextPromise;
+    private requirementsPromise;
+    constructor();
+    constructor(options: {
+        organization: string;
+        project: string;
+        environment: string;
+        requirements?: PublicBarekeyClientOptions["requirements"];
+        baseUrl?: string;
+    });
+    constructor(options: {
+        json: BarekeyJsonConfig;
+        requirements?: PublicBarekeyClientOptions["requirements"];
+        baseUrl?: string;
+    });
+    get<TKey extends BarekeyPublicKey>(name: TKey, options?: BarekeyGetOptions): BarekeyEnvHandle<TKey extends BarekeyPublicKnownKey ? BarekeyPublicGeneratedTypeMap[TKey] : unknown>;
+    private getRuntimeContext;
+    private buildDefinitionCacheKey;
+    private buildEvaluationCacheKey;
+    private fetchDefinitions;
+    private ensureRequirementsValidated;
+    private getStaticDefinition;
+    private resolveStaticValue;
+    private resolveDynamicValue;
+    private resolveEvaluatedValue;
+}
+//# sourceMappingURL=public-client.d.ts.map

package/dist/public-client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"public-client.d.ts","sourceRoot":"","sources":["../src/public-client.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAc/C,OAAO,KAAK,EACV,6BAA6B,EAC7B,gBAAgB,EAChB,qBAAqB,EACrB,0BAA0B,EAC3B,MAAM,mBAAmB,CAAC;AAC3B,OAAO,KAAK,EAEV,iBAAiB,EACjB,iBAAiB,EAElB,MAAM,YAAY,CAAC;AAgBpB,qBAAa,mBAAmB;IAC9B,OAAO,CAAC,QAAQ,CAAC,OAAO,CAA6B;IACrD,OAAO,CAAC,QAAQ,CAAC,OAAO,CAA0B;IAClD,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAgD;IAChF,OAAO,CAAC,QAAQ,CAAC,eAAe,CAA4C;IAC5E,OAAO,CAAC,qBAAqB,CAAqD;IAClF,OAAO,CAAC,mBAAmB,CAA8B;;gBAG7C,OAAO,EAAE;QACnB,YAAY,EAAE,MAAM,CAAC;QACrB,OAAO,EAAE,MAAM,CAAC;QAChB,WAAW,EAAE,MAAM,CAAC;QACpB,YAAY,CAAC,EAAE,0BAA0B,CAAC,cAAc,CAAC,CAAC;QAC1D,OAAO,CAAC,EAAE,MAAM,CAAC;KAClB;gBACW,OAAO,EAAE;QACnB,IAAI,EAAE,iBAAiB,CAAC;QACxB,YAAY,CAAC,EAAE,0BAA0B,CAAC,cAAc,CAAC,CAAC;QAC1D,OAAO,CAAC,EAAE,MAAM,CAAC;KAClB;IAMD,GAAG,CAAC,IAAI,SAAS,gBAAgB,EAC/B,IAAI,EAAE,IAAI,EACV,OAAO,CAAC,EAAE,iBAAiB,GAC1B,gBAAgB,CACjB,IAAI,SAAS,qBAAqB,GAAG,6BAA6B,CAAC,IAAI,CAAC,GAAG,OAAO,CACnF;YAOa,iBAAiB;IAa/B,OAAO,CAAC,uBAAuB;IAI/B,OAAO,CAAC,uBAAuB;YAejB,gBAAgB;YAqBhB,2BAA2B;YA4B3B,mBAAmB;YAiBnB,kBAAkB;YAQlB,mBAAmB;YAkCnB,qBAAqB;CAUpC"}

package/dist/public-client.js

@@ -0,0 +1,150 @@
+import { VariableNotFoundError } from "./errors.js";
+import { BarekeyEnvHandle } from "./handle.js";
+import { evaluateDefinition, parseDeclaredValue, validateDynamicOptions, } from "./internal/evaluate.js";
+import { postJson } from "./internal/http.js";
+import { MemoryCache } from "./internal/cache.js";
+import { validateRequirements } from "./internal/requirements.js";
+import { resolvePublicRuntimeContext, } from "./internal/public-runtime.js";
+import { resolveTtlMilliseconds } from "./internal/ttl.js";
+function createDefaultFetch() {
+    if (typeof globalThis.fetch === "function") {
+        return globalThis.fetch.bind(globalThis);
+    }
+    return (async () => {
+        throw new Error("fetch is not available in this runtime.");
+    });
+}
+export class PublicBarekeyClient {
+    options;
+    fetchFn;
+    definitionCache = new MemoryCache();
+    evaluationCache = new MemoryCache();
+    runtimeContextPromise = null;
+    requirementsPromise = null;
+    constructor(options = {}) {
+        this.options = options;
+        this.fetchFn = createDefaultFetch();
+    }
+    get(name, options) {
+        return new BarekeyEnvHandle(async () => await this.resolveEvaluatedValue(name, options));
+    }
+    async getRuntimeContext() {
+        if (this.runtimeContextPromise === null) {
+            const runtimeContextPromise = resolvePublicRuntimeContext(this.options);
+            runtimeContextPromise.catch(() => {
+                if (this.runtimeContextPromise === runtimeContextPromise) {
+                    this.runtimeContextPromise = null;
+                }
+            });
+            this.runtimeContextPromise = runtimeContextPromise;
+        }
+        return await this.runtimeContextPromise;
+    }
+    buildDefinitionCacheKey(context, name) {
+        return [context.organization, context.project, context.environment, name].join("|");
+    }
+    buildEvaluationCacheKey(context, name, options) {
+        return [
+            context.organization,
+            context.project,
+            context.environment,
+            name,
+            options?.seed ?? "",
+            options?.key ?? "",
+        ].join("|");
+    }
+    async fetchDefinitions(names) {
+        const context = await this.getRuntimeContext();
+        const response = await postJson({
+            fetchFn: this.fetchFn,
+            baseUrl: context.baseUrl,
+            path: "/v1/public/env/definitions",
+            payload: {
+                orgSlug: context.organization,
+                projectSlug: context.project,
+                stageSlug: context.environment,
+                ...(names === undefined ? {} : { names }),
+            },
+        });
+        for (const definition of response.definitions) {
+            this.definitionCache.set(this.buildDefinitionCacheKey(context, definition.name), definition);
+        }
+        return response.definitions;
+    }
+    async ensureRequirementsValidated() {
+        const context = await this.getRuntimeContext();
+        const requirements = context.requirements;
+        if (requirements === undefined) {
+            return;
+        }
+        if (this.requirementsPromise === null) {
+            const requirementsPromise = (async () => {
+                const definitions = await this.fetchDefinitions();
+                const values = {};
+                for (const definition of definitions) {
+                    const evaluated = await evaluateDefinition(definition);
+                    values[definition.name] = parseDeclaredValue(evaluated.value, evaluated.declaredType);
+                }
+                await validateRequirements(requirements, values);
+            })();
+            requirementsPromise.catch(() => {
+                if (this.requirementsPromise === requirementsPromise) {
+                    this.requirementsPromise = null;
+                }
+            });
+            this.requirementsPromise = requirementsPromise;
+        }
+        await this.requirementsPromise;
+    }
+    async getStaticDefinition(name) {
+        await this.ensureRequirementsValidated();
+        const context = await this.getRuntimeContext();
+        const cacheKey = this.buildDefinitionCacheKey(context, name);
+        const cached = this.definitionCache.get(cacheKey);
+        if (cached !== null) {
+            return cached;
+        }
+        const definitions = await this.fetchDefinitions([name]);
+        const resolved = definitions[0];
+        if (resolved === undefined) {
+            throw new VariableNotFoundError();
+        }
+        return resolved;
+    }
+    async resolveStaticValue(name, options) {
+        const definition = await this.getStaticDefinition(name);
+        return await evaluateDefinition(definition, options);
+    }
+    async resolveDynamicValue(name, options) {
+        await this.ensureRequirementsValidated();
+        const context = await this.getRuntimeContext();
+        const cacheKey = this.buildEvaluationCacheKey(context, name, options);
+        const dynamic = options?.dynamic;
+        const dynamicTtlMs = dynamic !== undefined && dynamic !== true
+            ? resolveTtlMilliseconds(dynamic.ttl, "dynamic.ttl")
+            : null;
+        if (dynamic !== true) {
+            const cached = this.evaluationCache.getRecord(cacheKey);
+            if (cached !== null && dynamicTtlMs !== null && Date.now() - cached.storedAtMs <= dynamicTtlMs) {
+                return cached.value;
+            }
+        }
+        const freshDefinitions = await this.fetchDefinitions([name]);
+        const freshDefinition = freshDefinitions[0];
+        if (freshDefinition === undefined) {
+            throw new VariableNotFoundError();
+        }
+        const resolved = await evaluateDefinition(freshDefinition, options);
+        if (dynamicTtlMs !== null) {
+            this.evaluationCache.set(cacheKey, resolved);
+        }
+        return resolved;
+    }
+    async resolveEvaluatedValue(name, options) {
+        validateDynamicOptions(options);
+        if (options?.dynamic === undefined) {
+            return await this.resolveStaticValue(name, options);
+        }
+        return await this.resolveDynamicValue(name, options);
+    }
+}

package/dist/public-types.d.ts

@@ -0,0 +1,27 @@
+export type { AB, BarekeyCoerceTarget, BarekeyDeclaredType, BarekeyDecision, BarekeyErrorCode, BarekeyEvaluatedValue, BarekeyGetOptions, BarekeyJsonConfig, BarekeyResolvedKind, BarekeyRolloutFunction, BarekeyRolloutMatchedRule, BarekeyRolloutMilestone, BarekeyStandardSchemaPathSegment, BarekeyStandardSchemaResult, BarekeyStandardSchemaV1, BarekeyTemporalInstant, BarekeyTemporalInstantLike, BarekeyTtlInput, BarekeyTypegenResult, BarekeyVariableDefinition, EaseInOut, Env, Linear, Secret, Step, } from "./types.js";
+import type { BarekeyJsonConfig, BarekeyLiteralString, BarekeyStandardSchemaV1 } from "./types.js";
+export interface BarekeyPublicGeneratedTypeMap {
+}
+export type BarekeyPublicKnownKey = Extract<keyof BarekeyPublicGeneratedTypeMap, string>;
+export type BarekeyPublicKey = BarekeyPublicKnownKey | BarekeyLiteralString;
+type BarekeyPublicBaseClientOptions = {
+    requirements?: BarekeyStandardSchemaV1;
+    baseUrl?: string;
+};
+export type PublicBarekeyClientOptions = (BarekeyPublicBaseClientOptions & {
+    organization: string;
+    project: string;
+    environment: string;
+    json?: never;
+}) | (BarekeyPublicBaseClientOptions & {
+    json: BarekeyJsonConfig;
+    organization?: never;
+    project?: never;
+    environment?: never;
+}) | (BarekeyPublicBaseClientOptions & {
+    organization?: never;
+    project?: never;
+    environment?: never;
+    json?: never;
+});
+//# sourceMappingURL=public-types.d.ts.map

package/dist/public-types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"public-types.d.ts","sourceRoot":"","sources":["../src/public-types.ts"],"names":[],"mappings":"AAAA,YAAY,EACV,EAAE,EACF,mBAAmB,EACnB,mBAAmB,EACnB,eAAe,EACf,gBAAgB,EAChB,qBAAqB,EACrB,iBAAiB,EACjB,iBAAiB,EACjB,mBAAmB,EACnB,sBAAsB,EACtB,yBAAyB,EACzB,uBAAuB,EACvB,gCAAgC,EAChC,2BAA2B,EAC3B,uBAAuB,EACvB,sBAAsB,EACtB,0BAA0B,EAC1B,eAAe,EACf,oBAAoB,EACpB,yBAAyB,EACzB,SAAS,EACT,GAAG,EACH,MAAM,EACN,MAAM,EACN,IAAI,GACL,MAAM,YAAY,CAAC;AACpB,OAAO,KAAK,EACV,iBAAiB,EACjB,oBAAoB,EACpB,uBAAuB,EACxB,MAAM,YAAY,CAAC;AAEpB,MAAM,WAAW,6BAA6B;CAAG;AAEjD,MAAM,MAAM,qBAAqB,GAAG,OAAO,CAAC,MAAM,6BAA6B,EAAE,MAAM,CAAC,CAAC;AAEzF,MAAM,MAAM,gBAAgB,GAAG,qBAAqB,GAAG,oBAAoB,CAAC;AAE5E,KAAK,8BAA8B,GAAG;IACpC,YAAY,CAAC,EAAE,uBAAuB,CAAC;IACvC,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB,CAAC;AAEF,MAAM,MAAM,0BAA0B,GAClC,CAAC,8BAA8B,GAAG;IAChC,YAAY,EAAE,MAAM,CAAC;IACrB,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,MAAM,CAAC;IACpB,IAAI,CAAC,EAAE,KAAK,CAAC;CACd,CAAC,GACF,CAAC,8BAA8B,GAAG;IAChC,IAAI,EAAE,iBAAiB,CAAC;IACxB,YAAY,CAAC,EAAE,KAAK,CAAC;IACrB,OAAO,CAAC,EAAE,KAAK,CAAC;IAChB,WAAW,CAAC,EAAE,KAAK,CAAC;CACrB,CAAC,GACF,CAAC,8BAA8B,GAAG;IAChC,YAAY,CAAC,EAAE,KAAK,CAAC;IACrB,OAAO,CAAC,EAAE,KAAK,CAAC;IAChB,WAAW,CAAC,EAAE,KAAK,CAAC;IACpB,IAAI,CAAC,EAAE,KAAK,CAAC;CACd,CAAC,CAAC"}

package/dist/public-types.js

@@ -0,0 +1 @@
+export {};

package/dist/public.d.ts

@@ -0,0 +1,6 @@
+export { PublicBarekeyClient } from "./public-client.js";
+export { BarekeyEnvHandle } from "./handle.js";
+export { BarekeyError, BillingUnavailableError, CoerceFailedError, DeviceCodeExpiredError, DeviceCodeNotFoundError, EvaluationFailedError, FsNotAvailableError, InvalidConfigurationProvidedError, InvalidCredentialsProvidedError, InvalidDynamicOptionsError, InvalidJsonError, InvalidOrgScopeError, InvalidRefreshTokenError, InvalidRequestError, NetworkError, NoConfigurationProvidedError, NoCredentialsProvidedError, OrgScopeInvalidError, RequirementsValidationFailedError, SdkModuleNotFoundError, TemporalNotAvailableError, TypegenReadFailedError, TypegenUnsupportedSdkError, TypegenWriteFailedError, UnauthorizedError, UnknownError, UsageLimitExceededError, UserCodeInvalidError, VariableNotFoundError, createBarekeyErrorFromCode, docsUrlForErrorCode, formatBarekeyErrorMessage, isBarekeyErrorCode, normalizeErrorCode, } from "./errors.js";
+export type { AB, BarekeyCoerceTarget, BarekeyDeclaredType, BarekeyDecision, BarekeyErrorCode, BarekeyEvaluatedValue, BarekeyGetOptions, BarekeyJsonConfig, BarekeyLiteralString, BarekeyResolvedKind, BarekeyRolloutFunction, BarekeyRolloutMatchedRule, BarekeyRolloutMilestone, BarekeyStandardSchemaV1, BarekeyTemporalInstant, BarekeyTemporalInstantLike, BarekeyTtlInput, BarekeyVariableDefinition, EaseInOut, Env, Linear, Secret, Step, } from "./types.js";
+export type { BarekeyPublicGeneratedTypeMap, BarekeyPublicKey, BarekeyPublicKnownKey, PublicBarekeyClientOptions, } from "./public-types.js";
+//# sourceMappingURL=public.d.ts.map

package/dist/public.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"public.d.ts","sourceRoot":"","sources":["../src/public.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AACzD,OAAO,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAC/C,OAAO,EACL,YAAY,EACZ,uBAAuB,EACvB,iBAAiB,EACjB,sBAAsB,EACtB,uBAAuB,EACvB,qBAAqB,EACrB,mBAAmB,EACnB,iCAAiC,EACjC,+BAA+B,EAC/B,0BAA0B,EAC1B,gBAAgB,EAChB,oBAAoB,EACpB,wBAAwB,EACxB,mBAAmB,EACnB,YAAY,EACZ,4BAA4B,EAC5B,0BAA0B,EAC1B,oBAAoB,EACpB,iCAAiC,EACjC,sBAAsB,EACtB,yBAAyB,EACzB,sBAAsB,EACtB,0BAA0B,EAC1B,uBAAuB,EACvB,iBAAiB,EACjB,YAAY,EACZ,uBAAuB,EACvB,oBAAoB,EACpB,qBAAqB,EACrB,0BAA0B,EAC1B,mBAAmB,EACnB,yBAAyB,EACzB,kBAAkB,EAClB,kBAAkB,GACnB,MAAM,aAAa,CAAC;AAErB,YAAY,EACV,EAAE,EACF,mBAAmB,EACnB,mBAAmB,EACnB,eAAe,EACf,gBAAgB,EAChB,qBAAqB,EACrB,iBAAiB,EACjB,iBAAiB,EACjB,oBAAoB,EACpB,mBAAmB,EACnB,sBAAsB,EACtB,yBAAyB,EACzB,uBAAuB,EACvB,uBAAuB,EACvB,sBAAsB,EACtB,0BAA0B,EAC1B,eAAe,EACf,yBAAyB,EACzB,SAAS,EACT,GAAG,EACH,MAAM,EACN,MAAM,EACN,IAAI,GACL,MAAM,YAAY,CAAC;AAEpB,YAAY,EACV,6BAA6B,EAC7B,gBAAgB,EAChB,qBAAqB,EACrB,0BAA0B,GAC3B,MAAM,mBAAmB,CAAC"}

package/dist/public.js

@@ -0,0 +1,3 @@
+export { PublicBarekeyClient } from "./public-client.js";
+export { BarekeyEnvHandle } from "./handle.js";
+export { BarekeyError, BillingUnavailableError, CoerceFailedError, DeviceCodeExpiredError, DeviceCodeNotFoundError, EvaluationFailedError, FsNotAvailableError, InvalidConfigurationProvidedError, InvalidCredentialsProvidedError, InvalidDynamicOptionsError, InvalidJsonError, InvalidOrgScopeError, InvalidRefreshTokenError, InvalidRequestError, NetworkError, NoConfigurationProvidedError, NoCredentialsProvidedError, OrgScopeInvalidError, RequirementsValidationFailedError, SdkModuleNotFoundError, TemporalNotAvailableError, TypegenReadFailedError, TypegenUnsupportedSdkError, TypegenWriteFailedError, UnauthorizedError, UnknownError, UsageLimitExceededError, UserCodeInvalidError, VariableNotFoundError, createBarekeyErrorFromCode, docsUrlForErrorCode, formatBarekeyErrorMessage, isBarekeyErrorCode, normalizeErrorCode, } from "./errors.js";