@brandfine/client 0.1.0

package/dist/index.js

@@ -0,0 +1,115 @@
+export { createCache, createKeyedCache } from './chunk-DHQHUIFO.js';
+export { isLocale, localizePath, pickLocale, resolveNavigation, stripLocalePrefix } from './chunk-MTBSSTTG.js';
+export { createBrandfineWebhookHandler, parseWebhookPayload, verifyWebhookSecret } from './chunk-QQLAYITF.js';
+
+// src/client.ts
+var BrandfineApiError = class extends Error {
+  name = "BrandfineApiError";
+  status;
+  statusText;
+  body;
+  url;
+  constructor(args) {
+    super(
+      `[brandfine] ${args.status} ${args.statusText} on ${args.url} \u2014 ${args.body.slice(0, 200)}`
+    );
+    this.status = args.status;
+    this.statusText = args.statusText;
+    this.body = args.body;
+    this.url = args.url;
+  }
+};
+var DEFAULT_USER_AGENT = "@brandfine/client";
+function createBrandfineClient(config) {
+  if (!config.baseUrl)
+    throw new Error("createBrandfineClient: `baseUrl` is required");
+  if (!config.apiKey)
+    throw new Error("createBrandfineClient: `apiKey` is required");
+  const baseUrl = config.baseUrl.replace(/\/$/, "");
+  const apiKey = config.apiKey;
+  const fetchImpl = config.fetch ?? globalThis.fetch;
+  const userAgent = config.userAgent ?? DEFAULT_USER_AGENT;
+  async function get(path, opts = {}) {
+    const url = `${baseUrl}${path}`;
+    const res = await fetchImpl(url, {
+      method: "GET",
+      headers: {
+        "X-Api-Key": apiKey,
+        Accept: "application/json",
+        "User-Agent": userAgent
+      },
+      signal: opts.signal
+    });
+    if (res.status === 404 && opts.nullable404) {
+      await res.text().catch(() => "");
+      return null;
+    }
+    if (!res.ok) {
+      const body = await res.text().catch(() => "");
+      throw new BrandfineApiError({
+        status: res.status,
+        statusText: res.statusText,
+        body,
+        url
+      });
+    }
+    return await res.json();
+  }
+  const posts = {
+    async list(opts = {}) {
+      const out = [];
+      let page = 1;
+      const typeQuery = opts.type ? `&type=${encodeURIComponent(opts.type)}` : "";
+      const localeQuery = opts.locale ? `&locale=${encodeURIComponent(opts.locale)}` : "";
+      const sizeQuery = opts.forceLimit ? `&force_limit=${opts.forceLimit}` : "&limit=50";
+      const MAX_PAGES = 200;
+      while (page <= MAX_PAGES) {
+        const data = await get(
+          `/external/posts?include=content${sizeQuery}&page=${page}${typeQuery}${localeQuery}`
+        );
+        out.push(...data.items);
+        if (!data.pageInfo.hasNext) break;
+        page += 1;
+      }
+      return out;
+    },
+    async getBySlug(slug) {
+      return get(
+        `/external/posts/${encodeURIComponent(slug)}`,
+        { nullable404: true }
+      );
+    }
+  };
+  const categories = {
+    async list(opts = {}) {
+      const qs = opts.locale ? `?locale=${encodeURIComponent(opts.locale)}` : "";
+      const data = await get(
+        `/external/categories${qs}`
+      );
+      return data.items;
+    }
+  };
+  const workspace = {
+    get() {
+      return get(
+        "/external/workspace"
+      );
+    }
+  };
+  const navigations = {
+    get(key) {
+      return get(
+        `/external/navigations/${encodeURIComponent(key)}`,
+        { nullable404: true }
+      );
+    }
+  };
+  return { get, posts, categories, workspace, navigations };
+}
+
+// src/index.ts
+var SDK_VERSION = "0.0.0";
+
+export { BrandfineApiError, SDK_VERSION, createBrandfineClient };
+//# sourceMappingURL=index.js.map
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/client.ts","../src/index.ts"],"names":[],"mappings":";;;;;AA8CO,IAAM,iBAAA,GAAN,cAAgC,KAAA,CAAM;AAAA,EACzB,IAAA,GAAO,mBAAA;AAAA,EAChB,MAAA;AAAA,EACA,UAAA;AAAA,EACA,IAAA;AAAA,EACA,GAAA;AAAA,EAET,YAAY,IAAA,EAKT;AACD,IAAA,KAAA;AAAA,MACE,CAAA,YAAA,EAAe,IAAA,CAAK,MAAM,CAAA,CAAA,EAAI,KAAK,UAAU,CAAA,IAAA,EAAO,IAAA,CAAK,GAAG,WAAM,IAAA,CAAK,IAAA,CAAK,KAAA,CAAM,CAAA,EAAG,GAAG,CAAC,CAAA;AAAA,KAC3F;AACA,IAAA,IAAA,CAAK,SAAS,IAAA,CAAK,MAAA;AACnB,IAAA,IAAA,CAAK,aAAa,IAAA,CAAK,UAAA;AACvB,IAAA,IAAA,CAAK,OAAO,IAAA,CAAK,IAAA;AACjB,IAAA,IAAA,CAAK,MAAM,IAAA,CAAK,GAAA;AAAA,EAClB;AACF;AAoDA,IAAM,kBAAA,GAAqB,mBAAA;AAEpB,SAAS,sBACd,MAAA,EACiB;AACjB,EAAA,IAAI,CAAC,MAAA,CAAO,OAAA;AACV,IAAA,MAAM,IAAI,MAAM,8CAA8C,CAAA;AAChE,EAAA,IAAI,CAAC,MAAA,CAAO,MAAA;AACV,IAAA,MAAM,IAAI,MAAM,6CAA6C,CAAA;AAE/D,EAAA,MAAM,OAAA,GAAU,MAAA,CAAO,OAAA,CAAQ,OAAA,CAAQ,OAAO,EAAE,CAAA;AAChD,EAAA,MAAM,SAAS,MAAA,CAAO,MAAA;AAGtB,EAAA,MAAM,SAAA,GAA0B,MAAA,CAAO,KAAA,IAAS,UAAA,CAAW,KAAA;AAC3D,EAAA,MAAM,SAAA,GAAY,OAAO,SAAA,IAAa,kBAAA;AAEtC,EAAA,eAAe,GAAA,CAAO,IAAA,EAAc,IAAA,GAAuB,EAAC,EAAe;AACzE,IAAA,MAAM,GAAA,GAAM,CAAA,EAAG,OAAO,CAAA,EAAG,IAAI,CAAA,CAAA;AAC7B,IAAA,MAAM,GAAA,GAAM,MAAM,SAAA,CAAU,GAAA,EAAK;AAAA,MAC/B,MAAA,EAAQ,KAAA;AAAA,MACR,OAAA,EAAS;AAAA,QACP,WAAA,EAAa,MAAA;AAAA,QACb,MAAA,EAAQ,kBAAA;AAAA,QACR,YAAA,EAAc;AAAA,OAChB;AAAA,MACA,QAAQ,IAAA,CAAK;AAAA,KACd,CAAA;AACD,IAAA,IAAI,GAAA,CAAI,MAAA,KAAW,GAAA,IAAO,IAAA,CAAK,WAAA,EAAa;AAI1C,MAAA,MAAM,GAAA,CAAI,IAAA,EAAK,CAAE,KAAA,CAAM,MAAM,EAAE,CAAA;AAC/B,MAAA,OAAO,IAAA;AAAA,IACT;AACA,IAAA,IAAI,CAAC,IAAI,EAAA,EAAI;AACX,MAAA,MAAM,OAAO,MAAM,GAAA,CAAI,MAAK,CAAE,KAAA,CAAM,MAAM,EAAE,CAAA;AAC5C,MAAA,MAAM,IAAI,iBAAA,CAAkB;AAAA,QAC1B,QAAQ,GAAA,CAAI,MAAA;AAAA,QACZ,YAAY,GAAA,CAAI,UAAA;AAAA,QAChB,IAAA;AAAA,QACA;AAAA,OACD,CAAA;AAAA,IACH;AACA,IAAA,OAAQ,MAAM,IAAI,IAAA,EAAK;AAAA,EACzB;AAEA,EAAA,MAAM,KAAA,GAAkB;AAAA,IACtB,MAAM,IAAA,CAAwB,IAAA,GAAyB,EAAC,EAAG;AACzD,MAAA,MAAM,MAAgC,EAAC;AACvC,MAAA,IAAI,IAAA,GAAO,CAAA;AACX,MAAA,MAAM,SAAA,GAAY,KAAK,IAAA,GAAO,CAAA,MAAA,EAAS,mBAAmB,IAAA,CAAK,IAAI,CAAC,CAAA,CAAA,GAAK,EAAA;AACzE,MAAA,MAAM,WAAA,GAAc,KAAK,MAAA,GACrB,CAAA,QAAA,EAAW,mBAAmB,IAAA,CAAK,MAAM,CAAC,CAAA,CAAA,GAC1C,EAAA;AAIJ,MAAA,MAAM,YAAY,IAAA,CAAK,UAAA,GACnB,CAAA,aAAA,EAAgB,IAAA,CAAK,UAAU,CAAA,CAAA,GAC/B,WAAA;AAIJ,MAAA,MAAM,SAAA,GAAY,GAAA;AAClB,MAAA,OAAO,QAAQ,SAAA,EAAW;AACxB,QAAA,MAAM,OAAO,MAAM,GAAA;AAAA,UACjB,kCAAkC,SAAS,CAAA,MAAA,EAAS,IAAI,CAAA,EAAG,SAAS,GAAG,WAAW,CAAA;AAAA,SACpF;AACA,QAAA,GAAA,CAAI,IAAA,CAAK,GAAG,IAAA,CAAK,KAAK,CAAA;AACtB,QAAA,IAAI,CAAC,IAAA,CAAK,QAAA,CAAS,OAAA,EAAS;AAC5B,QAAA,IAAA,IAAQ,CAAA;AAAA,MACV;AACA,MAAA,OAAO,GAAA;AAAA,IACT,CAAA;AAAA,IACA,MAAM,UAA6B,IAAA,EAAc;AAC/C,MAAA,OAAO,GAAA;AAAA,QACL,CAAA,gBAAA,EAAmB,kBAAA,CAAmB,IAAI,CAAC,CAAA,CAAA;AAAA,QAC3C,EAAE,aAAa,IAAA;AAAK,OACtB;AAAA,IACF;AAAA,GACF;AAEA,EAAA,MAAM,UAAA,GAA4B;AAAA,IAChC,MAAM,IAAA,CAAK,IAAA,GAA8B,EAAC,EAAG;AAC3C,MAAA,MAAM,EAAA,GAAK,KAAK,MAAA,GAAS,CAAA,QAAA,EAAW,mBAAmB,IAAA,CAAK,MAAM,CAAC,CAAA,CAAA,GAAK,EAAA;AACxE,MAAA,MAAM,OAAO,MAAM,GAAA;AAAA,QACjB,uBAAuB,EAAE,CAAA;AAAA,OAC3B;AACA,MAAA,OAAO,IAAA,CAAK,KAAA;AAAA,IACd;AAAA,GACF;AAEA,EAAA,MAAM,SAAA,GAA0B;AAAA,IAC9B,GAAA,GAGI;AACF,MAAA,OAAO,GAAA;AAAA,QACL;AAAA,OACF;AAAA,IACF;AAAA,GACF;AAEA,EAAA,MAAM,WAAA,GAA8B;AAAA,IAClC,IAAI,GAAA,EAAa;AACf,MAAA,OAAO,GAAA;AAAA,QACL,CAAA,sBAAA,EAAyB,kBAAA,CAAmB,GAAG,CAAC,CAAA,CAAA;AAAA,QAChD,EAAE,aAAa,IAAA;AAAK,OACtB;AAAA,IACF;AAAA,GACF;AAEA,EAAA,OAAO,EAAE,GAAA,EAAK,KAAA,EAAO,UAAA,EAAY,WAAW,WAAA,EAAY;AAC1D;;;AC5NO,IAAM,WAAA,GAAc","file":"index.js","sourcesContent":["/**\n * `createBrandfineClient` — the SDK's entry point.\n *\n * Returns a stateless, multi-instance-safe handle scoped to a\n * single `(baseUrl, apiKey)` pair. Pattern follows the Stripe /\n * Algolia / OpenAI SDKs — explicit construction with config,\n * namespaced methods (`bf.posts.list(...)`, `bf.workspace.get()`),\n * no module-level singletons.\n *\n * Why factory not module-level state: multi-tenant consumers\n * sometimes need two clients in the same process (e.g. main site\n * + admin preview). Module-level env reading makes that impossible\n * without monkey-patching.\n */\n\nimport type {\n  BrandfineCategory,\n  BrandfineNavigation,\n  BrandfinePost,\n  BrandfinePostListResponse,\n  BrandfineWorkspace,\n  ListCategoriesOptions,\n  ListPostsOptions,\n} from './types'\n\nexport type BrandfineClientConfig = {\n  /** Base URL of the Brandfine API. No trailing slash — the client\n   *  trims one if you pass it anyway. e.g. `https://api.brandfine.co` */\n  baseUrl: string\n  /** Workspace-scoped API key. Generated from the cms's Workspace\n   *  settings; identifies which workspace the client talks to. */\n  apiKey: string\n  /** Optional fetch override. Useful for tests (inject a stub),\n   *  for runtimes that need a custom implementation (edge workers\n   *  with non-standard fetch), or to add cross-cutting concerns\n   *  like tracing / retries. Defaults to `globalThis.fetch`. */\n  fetch?: typeof globalThis.fetch\n  /** Optional User-Agent header. Falls back to a generic SDK tag. */\n  userAgent?: string\n}\n\n/**\n * Structured error thrown by every request helper on non-2xx\n * responses. Carries the raw body so consumers can log it for\n * debugging without re-fetching.\n */\nexport class BrandfineApiError extends Error {\n  override readonly name = 'BrandfineApiError'\n  readonly status: number\n  readonly statusText: string\n  readonly body: string\n  readonly url: string\n\n  constructor(args: {\n    status: number\n    statusText: string\n    body: string\n    url: string\n  }) {\n    super(\n      `[brandfine] ${args.status} ${args.statusText} on ${args.url} — ${args.body.slice(0, 200)}`,\n    )\n    this.status = args.status\n    this.statusText = args.statusText\n    this.body = args.body\n    this.url = args.url\n  }\n}\n\ntype RequestOptions = {\n  /** When true and the response is 404, return `null` instead of\n   *  throwing. Used by endpoints where 404 is a meaningful empty\n   *  state (navigation by key, single post by slug). */\n  nullable404?: boolean\n  signal?: AbortSignal\n}\n\nexport type BrandfineClient = {\n  /** Low-level GET. Reserved for endpoints we don't have a typed\n   *  helper for yet. Adds the X-Api-Key header automatically. */\n  get: <T>(path: string, opts?: RequestOptions) => Promise<T>\n  posts: PostsApi\n  categories: CategoriesApi\n  workspace: WorkspaceApi\n  navigations: NavigationsApi\n}\n\ntype PostsApi = {\n  /** Paginated list of published posts. Handles the cms's\n   *  pagination transparently — caller gets a flat array. */\n  list: <TConfig = unknown>(\n    opts?: ListPostsOptions,\n  ) => Promise<BrandfinePost<TConfig>[]>\n  /** Single post by per-locale URL slug, scoped to the active\n   *  locale on the workspace's content. Returns `null` for 404 so\n   *  callers can render their own \"not found\" page without try/catch. */\n  getBySlug: <TConfig = unknown>(\n    slug: string,\n  ) => Promise<BrandfinePost<TConfig> | null>\n}\n\ntype CategoriesApi = {\n  list: (opts?: ListCategoriesOptions) => Promise<BrandfineCategory[]>\n}\n\ntype WorkspaceApi = {\n  get: <\n    TCustomConfig = Record<string, unknown>,\n    TSchemaOrg = Record<string, unknown>,\n  >() => Promise<BrandfineWorkspace<TCustomConfig, TSchemaOrg>>\n}\n\ntype NavigationsApi = {\n  /** Navigation by its workspace-scoped `key` (e.g. `'header'`).\n   *  Returns `null` for 404 so consumers can fall back to a\n   *  hardcoded default without try/catch. */\n  get: (key: string) => Promise<BrandfineNavigation | null>\n}\n\nconst DEFAULT_USER_AGENT = '@brandfine/client'\n\nexport function createBrandfineClient(\n  config: BrandfineClientConfig,\n): BrandfineClient {\n  if (!config.baseUrl)\n    throw new Error('createBrandfineClient: `baseUrl` is required')\n  if (!config.apiKey)\n    throw new Error('createBrandfineClient: `apiKey` is required')\n\n  const baseUrl = config.baseUrl.replace(/\\/$/, '')\n  const apiKey = config.apiKey\n  // Resolve fetch lazily so consumers in environments without a\n  // global fetch can polyfill before constructing the client.\n  const fetchImpl: typeof fetch = config.fetch ?? globalThis.fetch\n  const userAgent = config.userAgent ?? DEFAULT_USER_AGENT\n\n  async function get<T>(path: string, opts: RequestOptions = {}): Promise<T> {\n    const url = `${baseUrl}${path}`\n    const res = await fetchImpl(url, {\n      method: 'GET',\n      headers: {\n        'X-Api-Key': apiKey,\n        Accept: 'application/json',\n        'User-Agent': userAgent,\n      },\n      signal: opts.signal,\n    })\n    if (res.status === 404 && opts.nullable404) {\n      // Drain the body so the underlying socket can be reused —\n      // fetch implementations that don't auto-drain (older Node)\n      // can leak otherwise.\n      await res.text().catch(() => '')\n      return null as T\n    }\n    if (!res.ok) {\n      const body = await res.text().catch(() => '')\n      throw new BrandfineApiError({\n        status: res.status,\n        statusText: res.statusText,\n        body,\n        url,\n      })\n    }\n    return (await res.json()) as T\n  }\n\n  const posts: PostsApi = {\n    async list<TConfig = unknown>(opts: ListPostsOptions = {}) {\n      const out: BrandfinePost<TConfig>[] = []\n      let page = 1\n      const typeQuery = opts.type ? `&type=${encodeURIComponent(opts.type)}` : ''\n      const localeQuery = opts.locale\n        ? `&locale=${encodeURIComponent(opts.locale)}`\n        : ''\n      // Default pagination at the cms's 50-per-page cap. `forceLimit`\n      // opts past it for content types that would otherwise need\n      // many round-trips.\n      const sizeQuery = opts.forceLimit\n        ? `&force_limit=${opts.forceLimit}`\n        : '&limit=50'\n      // Pathological safety brake — 200 pages × 50 = 10k posts. If\n      // a workspace ever needs more, callers should hit the API\n      // directly with their own pagination logic.\n      const MAX_PAGES = 200\n      while (page <= MAX_PAGES) {\n        const data = await get<BrandfinePostListResponse<TConfig>>(\n          `/external/posts?include=content${sizeQuery}&page=${page}${typeQuery}${localeQuery}`,\n        )\n        out.push(...data.items)\n        if (!data.pageInfo.hasNext) break\n        page += 1\n      }\n      return out\n    },\n    async getBySlug<TConfig = unknown>(slug: string) {\n      return get<BrandfinePost<TConfig> | null>(\n        `/external/posts/${encodeURIComponent(slug)}`,\n        { nullable404: true },\n      )\n    },\n  }\n\n  const categories: CategoriesApi = {\n    async list(opts: ListCategoriesOptions = {}) {\n      const qs = opts.locale ? `?locale=${encodeURIComponent(opts.locale)}` : ''\n      const data = await get<{ items: BrandfineCategory[] }>(\n        `/external/categories${qs}`,\n      )\n      return data.items\n    },\n  }\n\n  const workspace: WorkspaceApi = {\n    get<\n      TCustomConfig = Record<string, unknown>,\n      TSchemaOrg = Record<string, unknown>,\n    >() {\n      return get<BrandfineWorkspace<TCustomConfig, TSchemaOrg>>(\n        '/external/workspace',\n      )\n    },\n  }\n\n  const navigations: NavigationsApi = {\n    get(key: string) {\n      return get<BrandfineNavigation | null>(\n        `/external/navigations/${encodeURIComponent(key)}`,\n        { nullable404: true },\n      )\n    },\n  }\n\n  return { get, posts, categories, workspace, navigations }\n}\n","/**\n * @brandfine/client — root entry.\n *\n * The full SDK surface is exposed here for \"import everything from\n * one place\" usage. Tree-shaking + `sideEffects: false` mean\n * consumers don't pay a bundle cost for what they don't import.\n *\n * Heavier or framework-coupled pieces still live under subpath\n * exports (`@brandfine/client/cache`, `/resolvers`, `/webhook`) so\n * consumers with poor tree-shaking — or who only need one slice —\n * can scope their imports.\n */\n\nexport const SDK_VERSION = '0.0.0' as const\n\nexport {\n  BrandfineApiError,\n  createBrandfineClient,\n  type BrandfineClient,\n  type BrandfineClientConfig,\n} from './client'\n\nexport {\n  createCache,\n  createKeyedCache,\n  type Cache,\n  type CacheOptions,\n  type KeyedCache,\n  type KeyedCacheOptions,\n} from './cache/index'\n\nexport {\n  isLocale,\n  localizePath,\n  pickLocale,\n  resolveNavigation,\n  stripLocalePrefix,\n  type HydratedNav,\n  type HydratedNavItem,\n  type LocaleOptions,\n  type ResolveNavigationOptions,\n} from './resolvers/index'\n\nexport {\n  createBrandfineWebhookHandler,\n  parseWebhookPayload,\n  verifyWebhookSecret,\n  type BrandfineWebhookEvent,\n  type BrandfineWebhookHandlerOptions,\n  type BrandfineWebhookPayload,\n} from './webhook/index'\n\nexport type {\n  BrandfineCategory,\n  BrandfineNavItem,\n  BrandfineNavItemType,\n  BrandfineNavPost,\n  BrandfineNavigation,\n  BrandfinePost,\n  BrandfinePostListResponse,\n  BrandfineWorkspace,\n  ListCategoriesOptions,\n  ListPostsOptions,\n} from './types'\n"]}

package/dist/resolvers/index.cjs

@@ -0,0 +1,28 @@
+'use strict';
+
+var chunkOKIEA3AD_cjs = require('../chunk-OKIEA3AD.cjs');
+
+
+
+Object.defineProperty(exports, "isLocale", {
+  enumerable: true,
+  get: function () { return chunkOKIEA3AD_cjs.isLocale; }
+});
+Object.defineProperty(exports, "localizePath", {
+  enumerable: true,
+  get: function () { return chunkOKIEA3AD_cjs.localizePath; }
+});
+Object.defineProperty(exports, "pickLocale", {
+  enumerable: true,
+  get: function () { return chunkOKIEA3AD_cjs.pickLocale; }
+});
+Object.defineProperty(exports, "resolveNavigation", {
+  enumerable: true,
+  get: function () { return chunkOKIEA3AD_cjs.resolveNavigation; }
+});
+Object.defineProperty(exports, "stripLocalePrefix", {
+  enumerable: true,
+  get: function () { return chunkOKIEA3AD_cjs.stripLocalePrefix; }
+});
+//# sourceMappingURL=index.cjs.map
+//# sourceMappingURL=index.cjs.map

package/dist/resolvers/index.cjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":[],"names":[],"mappings":"","file":"index.cjs"}

package/dist/resolvers/index.d.cts

@@ -0,0 +1 @@
+export { H as HydratedNav, i as HydratedNavItem, j as LocaleOptions, R as ResolveNavigationOptions, k as isLocale, l as localizePath, p as pickLocale, r as resolveNavigation, s as stripLocalePrefix } from '../index-_XBy9Y81.cjs';

package/dist/resolvers/index.d.ts

@@ -0,0 +1 @@
+export { H as HydratedNav, i as HydratedNavItem, j as LocaleOptions, R as ResolveNavigationOptions, k as isLocale, l as localizePath, p as pickLocale, r as resolveNavigation, s as stripLocalePrefix } from '../index-_XBy9Y81.js';

package/dist/resolvers/index.js

@@ -0,0 +1,3 @@
+export { isLocale, localizePath, pickLocale, resolveNavigation, stripLocalePrefix } from '../chunk-MTBSSTTG.js';
+//# sourceMappingURL=index.js.map
+//# sourceMappingURL=index.js.map

package/dist/resolvers/index.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":[],"names":[],"mappings":"","file":"index.js"}

package/dist/webhook/index.cjs

@@ -0,0 +1,20 @@
+'use strict';
+
+var chunkKHHMR2NX_cjs = require('../chunk-KHHMR2NX.cjs');
+
+
+
+Object.defineProperty(exports, "createBrandfineWebhookHandler", {
+  enumerable: true,
+  get: function () { return chunkKHHMR2NX_cjs.createBrandfineWebhookHandler; }
+});
+Object.defineProperty(exports, "parseWebhookPayload", {
+  enumerable: true,
+  get: function () { return chunkKHHMR2NX_cjs.parseWebhookPayload; }
+});
+Object.defineProperty(exports, "verifyWebhookSecret", {
+  enumerable: true,
+  get: function () { return chunkKHHMR2NX_cjs.verifyWebhookSecret; }
+});
+//# sourceMappingURL=index.cjs.map
+//# sourceMappingURL=index.cjs.map

package/dist/webhook/index.cjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":[],"names":[],"mappings":"","file":"index.cjs"}

package/dist/webhook/index.d.cts

@@ -0,0 +1,117 @@
+/**
+ * Webhook payload types + parser.
+ *
+ * The cms POSTs a small JSON envelope every time content changes.
+ * The discriminator is `event` — a string we recognise (the
+ * literal union below) or arbitrary new strings for
+ * forward-compatibility. The `& {}` trick keeps autocomplete on
+ * the known events while still typing the field as `string`.
+ */
+/** Known event types emitted by the cms today. Add to this union
+ *  as new events ship — consumers who switch on `event` get
+ *  exhaustiveness checks. */
+type BrandfineWebhookEvent = 'post.published' | 'post.unpublished' | 'navigation.created' | 'navigation.updated' | 'navigation.deleted' | 'navigation.items.replaced';
+/**
+ * Envelope shape. Optional event-specific fields (`postId`,
+ * `navigationId`, …) are typed as optional so consumers can
+ * narrow with `if (payload.event === 'post.published' && payload.postId)`.
+ *
+ * Unknown event types still parse into the same shape so handlers
+ * never throw on new server-side events. Forward-compatible by
+ * default — the cms can add events and the package keeps working.
+ */
+type BrandfineWebhookPayload = {
+    /** Recognised event or any new event string. */
+    event: BrandfineWebhookEvent | (string & {});
+    workspaceId: string;
+    /** ISO timestamp of when the event was generated, server-side. */
+    at?: string;
+    postId?: string;
+    slug?: string;
+    title?: string;
+    publishedAt?: string;
+    navigationId?: string;
+    /** Kebab-case nav identifier (e.g. `'header'`). Null when the
+     *  cms emits the event without a specific key (rare). */
+    key?: string | null;
+};
+/**
+ * Read + parse a webhook request body. Tolerant — accepts any
+ * JSON object with at minimum a `workspaceId` string, since the
+ * `event` field may be missing or unknown and we don't want to
+ * reject those (we want consumers to be able to inspect the
+ * payload and decide).
+ *
+ * Throws on:
+ *   - non-JSON body
+ *   - non-object root (string, array, null)
+ *   - missing `workspaceId`
+ *
+ * Callers in the framework adapter layer turn these into 400
+ * responses — the cms doesn't retry on 400, which is correct
+ * since malformed bodies aren't transient.
+ */
+declare function parseWebhookPayload(request: Request): Promise<BrandfineWebhookPayload>;
+
+/**
+ * Framework-agnostic webhook handler.
+ *
+ * `createBrandfineWebhookHandler` takes a config and returns a
+ * `(request: Request) => Promise<Response>` — the standardised
+ * Web Fetch API shape that Astro, Next App Router, Remix,
+ * SvelteKit, Bun, and Cloudflare Workers all share.
+ *
+ * Framework adapters (`@brandfine/client-astro`) re-export this
+ * with the framework's route convention applied — e.g. exposing
+ * `POST = createBrandfineWebhookHandler(...)` directly.
+ *
+ * Response codes:
+ *   - 401 — secret mismatch or no secret configured. The cms
+ *     does not retry on 401, so a misconfigured consumer fails
+ *     loudly rather than racking up retries.
+ *   - 400 — body is missing / malformed. Also not retried.
+ *   - 500 — `onEvent` callback threw. The cms retries with
+ *     backoff; the consumer's `onError` (if set) gets the
+ *     original error.
+ *   - 200 — accepted. Body echoes `event` for debugging.
+ */
+
+type BrandfineWebhookHandlerOptions = {
+    /** Shared secret. Compared against the `?secret=` query param
+     *  on every request (constant-time). When empty, every request
+     *  is rejected with 401 — consumers shouldn't construct a
+     *  handler without a secret. */
+    secret: string;
+    /** Called once the request is authenticated and parsed. Wire
+     *  cache invalidations here. May be async; the handler waits
+     *  for it before responding so the cms's "delivered" status
+     *  reflects whether the consumer actually processed the event. */
+    onEvent: (payload: BrandfineWebhookPayload) => void | Promise<void>;
+    /** Optional error logger for failures inside `onEvent`. The
+     *  package's default falls back to `console.error` — override
+     *  to route into a structured logger. */
+    onError?: (err: unknown) => void;
+};
+declare function createBrandfineWebhookHandler(opts: BrandfineWebhookHandlerOptions): (request: Request) => Promise<Response>;
+
+/**
+ * Constant-time secret comparison.
+ *
+ * The webhook receiver compares the URL `?secret=` query param
+ * against the shared secret. Naive `===` leaks information via
+ * timing — early-exit on first byte mismatch means an attacker
+ * can brute-force the secret one byte at a time.
+ *
+ * This implementation XORs every byte and ORs the results, so
+ * the loop runs in O(n) regardless of where the mismatch is.
+ *
+ * Note on length: we early-return on length mismatch. The
+ * `expected` length is set by configuration (not secret data),
+ * so leaking the length is acceptable in practice — and skipping
+ * the loop entirely beats the cost of running it for a guaranteed
+ * mismatch. Cryptographic-grade primitives (e.g. WebCrypto's
+ * `timingSafeEqual` on Buffers) require fixed-length inputs.
+ */
+declare function verifyWebhookSecret(provided: string, expected: string): boolean;
+
+export { type BrandfineWebhookEvent, type BrandfineWebhookHandlerOptions, type BrandfineWebhookPayload, createBrandfineWebhookHandler, parseWebhookPayload, verifyWebhookSecret };

package/dist/webhook/index.d.ts

@@ -0,0 +1,117 @@
+/**
+ * Webhook payload types + parser.
+ *
+ * The cms POSTs a small JSON envelope every time content changes.
+ * The discriminator is `event` — a string we recognise (the
+ * literal union below) or arbitrary new strings for
+ * forward-compatibility. The `& {}` trick keeps autocomplete on
+ * the known events while still typing the field as `string`.
+ */
+/** Known event types emitted by the cms today. Add to this union
+ *  as new events ship — consumers who switch on `event` get
+ *  exhaustiveness checks. */
+type BrandfineWebhookEvent = 'post.published' | 'post.unpublished' | 'navigation.created' | 'navigation.updated' | 'navigation.deleted' | 'navigation.items.replaced';
+/**
+ * Envelope shape. Optional event-specific fields (`postId`,
+ * `navigationId`, …) are typed as optional so consumers can
+ * narrow with `if (payload.event === 'post.published' && payload.postId)`.
+ *
+ * Unknown event types still parse into the same shape so handlers
+ * never throw on new server-side events. Forward-compatible by
+ * default — the cms can add events and the package keeps working.
+ */
+type BrandfineWebhookPayload = {
+    /** Recognised event or any new event string. */
+    event: BrandfineWebhookEvent | (string & {});
+    workspaceId: string;
+    /** ISO timestamp of when the event was generated, server-side. */
+    at?: string;
+    postId?: string;
+    slug?: string;
+    title?: string;
+    publishedAt?: string;
+    navigationId?: string;
+    /** Kebab-case nav identifier (e.g. `'header'`). Null when the
+     *  cms emits the event without a specific key (rare). */
+    key?: string | null;
+};
+/**
+ * Read + parse a webhook request body. Tolerant — accepts any
+ * JSON object with at minimum a `workspaceId` string, since the
+ * `event` field may be missing or unknown and we don't want to
+ * reject those (we want consumers to be able to inspect the
+ * payload and decide).
+ *
+ * Throws on:
+ *   - non-JSON body
+ *   - non-object root (string, array, null)
+ *   - missing `workspaceId`
+ *
+ * Callers in the framework adapter layer turn these into 400
+ * responses — the cms doesn't retry on 400, which is correct
+ * since malformed bodies aren't transient.
+ */
+declare function parseWebhookPayload(request: Request): Promise<BrandfineWebhookPayload>;
+
+/**
+ * Framework-agnostic webhook handler.
+ *
+ * `createBrandfineWebhookHandler` takes a config and returns a
+ * `(request: Request) => Promise<Response>` — the standardised
+ * Web Fetch API shape that Astro, Next App Router, Remix,
+ * SvelteKit, Bun, and Cloudflare Workers all share.
+ *
+ * Framework adapters (`@brandfine/client-astro`) re-export this
+ * with the framework's route convention applied — e.g. exposing
+ * `POST = createBrandfineWebhookHandler(...)` directly.
+ *
+ * Response codes:
+ *   - 401 — secret mismatch or no secret configured. The cms
+ *     does not retry on 401, so a misconfigured consumer fails
+ *     loudly rather than racking up retries.
+ *   - 400 — body is missing / malformed. Also not retried.
+ *   - 500 — `onEvent` callback threw. The cms retries with
+ *     backoff; the consumer's `onError` (if set) gets the
+ *     original error.
+ *   - 200 — accepted. Body echoes `event` for debugging.
+ */
+
+type BrandfineWebhookHandlerOptions = {
+    /** Shared secret. Compared against the `?secret=` query param
+     *  on every request (constant-time). When empty, every request
+     *  is rejected with 401 — consumers shouldn't construct a
+     *  handler without a secret. */
+    secret: string;
+    /** Called once the request is authenticated and parsed. Wire
+     *  cache invalidations here. May be async; the handler waits
+     *  for it before responding so the cms's "delivered" status
+     *  reflects whether the consumer actually processed the event. */
+    onEvent: (payload: BrandfineWebhookPayload) => void | Promise<void>;
+    /** Optional error logger for failures inside `onEvent`. The
+     *  package's default falls back to `console.error` — override
+     *  to route into a structured logger. */
+    onError?: (err: unknown) => void;
+};
+declare function createBrandfineWebhookHandler(opts: BrandfineWebhookHandlerOptions): (request: Request) => Promise<Response>;
+
+/**
+ * Constant-time secret comparison.
+ *
+ * The webhook receiver compares the URL `?secret=` query param
+ * against the shared secret. Naive `===` leaks information via
+ * timing — early-exit on first byte mismatch means an attacker
+ * can brute-force the secret one byte at a time.
+ *
+ * This implementation XORs every byte and ORs the results, so
+ * the loop runs in O(n) regardless of where the mismatch is.
+ *
+ * Note on length: we early-return on length mismatch. The
+ * `expected` length is set by configuration (not secret data),
+ * so leaking the length is acceptable in practice — and skipping
+ * the loop entirely beats the cost of running it for a guaranteed
+ * mismatch. Cryptographic-grade primitives (e.g. WebCrypto's
+ * `timingSafeEqual` on Buffers) require fixed-length inputs.
+ */
+declare function verifyWebhookSecret(provided: string, expected: string): boolean;
+
+export { type BrandfineWebhookEvent, type BrandfineWebhookHandlerOptions, type BrandfineWebhookPayload, createBrandfineWebhookHandler, parseWebhookPayload, verifyWebhookSecret };

package/dist/webhook/index.js

@@ -0,0 +1,3 @@
+export { createBrandfineWebhookHandler, parseWebhookPayload, verifyWebhookSecret } from '../chunk-QQLAYITF.js';
+//# sourceMappingURL=index.js.map
+//# sourceMappingURL=index.js.map

package/dist/webhook/index.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":[],"names":[],"mappings":"","file":"index.js"}

package/package.json

@@ -0,0 +1,82 @@
+{
+  "name": "@brandfine/client",
+  "version": "0.1.0",
+  "description": "Brandfine consumer SDK — typed HTTP client, server-side caches, locale + navigation resolvers, and webhook helpers for landing-page integrations.",
+  "license": "MIT",
+  "type": "module",
+  "sideEffects": false,
+  "main": "./dist/index.cjs",
+  "module": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "import": {
+        "types": "./dist/index.d.ts",
+        "default": "./dist/index.js"
+      },
+      "require": {
+        "types": "./dist/index.d.cts",
+        "default": "./dist/index.cjs"
+      }
+    },
+    "./cache": {
+      "import": {
+        "types": "./dist/cache/index.d.ts",
+        "default": "./dist/cache/index.js"
+      },
+      "require": {
+        "types": "./dist/cache/index.d.cts",
+        "default": "./dist/cache/index.cjs"
+      }
+    },
+    "./resolvers": {
+      "import": {
+        "types": "./dist/resolvers/index.d.ts",
+        "default": "./dist/resolvers/index.js"
+      },
+      "require": {
+        "types": "./dist/resolvers/index.d.cts",
+        "default": "./dist/resolvers/index.cjs"
+      }
+    },
+    "./webhook": {
+      "import": {
+        "types": "./dist/webhook/index.d.ts",
+        "default": "./dist/webhook/index.js"
+      },
+      "require": {
+        "types": "./dist/webhook/index.d.cts",
+        "default": "./dist/webhook/index.cjs"
+      }
+    }
+  },
+  "files": [
+    "dist",
+    "README.md",
+    "CHANGELOG.md"
+  ],
+  "scripts": {
+    "build": "tsup",
+    "dev": "tsup --watch",
+    "typecheck": "tsc --noEmit",
+    "test": "vitest run",
+    "test:watch": "vitest",
+    "lint:pkg": "publint",
+    "lint:types": "attw --pack --profile node16",
+    "validate": "npm run build && npm run typecheck && npm run test && npm run lint:pkg && npm run lint:types",
+    "prepublishOnly": "npm run build && npm run lint:pkg"
+  },
+  "engines": {
+    "node": ">=20"
+  },
+  "devDependencies": {
+    "@arethetypeswrong/cli": "0.18.2",
+    "publint": "0.3.20",
+    "tsup": "^8.3.0",
+    "typescript": "^6.0.0",
+    "vitest": "^2.1.1"
+  },
+  "publishConfig": {
+    "access": "public"
+  }
+}