@buildbase/sdk 0.0.51 → 0.0.53
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/AGENTS.md +18 -8
- package/CHANGELOG.md +56 -0
- package/README.md +247 -32
- package/dist/css/styles.css +1 -1
- package/dist/index.cjs +1 -1
- package/dist/index.d.ts +865 -53
- package/dist/index.mjs +1 -1
- package/dist/mcp/index.cjs +1 -0
- package/dist/mcp/index.d.ts +1402 -0
- package/dist/mcp/index.mjs +1 -0
- package/dist/react/chunks/{SettingsDialog-uVKFxlal.mjs → SettingsDialog-BxDYsie6.mjs} +1 -1
- package/dist/react/chunks/{SettingsDialog-DitAiAqr.cjs → SettingsDialog-Dy8W3NA6.cjs} +1 -1
- package/dist/react/chunks/{SubscriptionDialog-P0GlXEyn.mjs → SubscriptionDialog-6c5dHoQd.mjs} +1 -1
- package/dist/react/chunks/{SubscriptionDialog-Cg-qYVKr.cjs → SubscriptionDialog-CpVnnXJg.cjs} +1 -1
- package/dist/react/chunks/ar-1Z1MOGAP.mjs +2 -0
- package/dist/react/chunks/ar-VGzBv3AZ.cjs +2 -0
- package/dist/react/chunks/de-BjdDg60Y.cjs +2 -0
- package/dist/react/chunks/de-CXUItplO.mjs +2 -0
- package/dist/react/chunks/es-BBPsSZUp.cjs +2 -0
- package/dist/react/chunks/es-BTbzVutz.mjs +2 -0
- package/dist/react/chunks/fr-Cax48X_S.cjs +2 -0
- package/dist/react/chunks/fr-DPMeOQu3.mjs +2 -0
- package/dist/react/chunks/hi-BJqvpG6d.cjs +2 -0
- package/dist/react/chunks/hi-JfJx-LV7.mjs +2 -0
- package/dist/react/chunks/ja-CDGtLzTk.mjs +2 -0
- package/dist/react/chunks/ja-DvVyj5xX.cjs +2 -0
- package/dist/react/chunks/react-4SlWxHdh.cjs +2 -0
- package/dist/react/chunks/react-OL1uSkpr.mjs +2 -0
- package/dist/react/chunks/zh-BAcqxkxk.cjs +2 -0
- package/dist/react/chunks/zh-BNZ2Ooe8.mjs +2 -0
- package/dist/react/index.cjs +1 -1
- package/dist/react/index.d.ts +39 -32
- package/dist/react/index.mjs +1 -1
- package/package.json +17 -4
- package/dist/react/chunks/ar-SrPOJXdL.mjs +0 -2
- package/dist/react/chunks/ar-a3aRbPCs.cjs +0 -2
- package/dist/react/chunks/de-DE3_z7r0.cjs +0 -2
- package/dist/react/chunks/de-xnPl61SS.mjs +0 -2
- package/dist/react/chunks/es-C_xcyGtp.cjs +0 -2
- package/dist/react/chunks/es-CyuBtosP.mjs +0 -2
- package/dist/react/chunks/fr-BMu7Bk4k.cjs +0 -2
- package/dist/react/chunks/fr-CxuDLZ27.mjs +0 -2
- package/dist/react/chunks/hi-CQ215yc9.cjs +0 -2
- package/dist/react/chunks/hi-CpuvyorS.mjs +0 -2
- package/dist/react/chunks/ja-DIJ_xCIi.mjs +0 -2
- package/dist/react/chunks/ja-DK6Buuws.cjs +0 -2
- package/dist/react/chunks/react-C2ikFWBG.cjs +0 -2
- package/dist/react/chunks/react-CCukNQ4q.mjs +0 -2
- package/dist/react/chunks/zh-CYQwZiBL.mjs +0 -2
- package/dist/react/chunks/zh-Dt-apS2s.cjs +0 -2
package/dist/index.mjs
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
let e=!0;function t(t,...n){e&&function(){try{const e="undefined"!=typeof globalThis?globalThis:null;return"development"===e?.process?.env?.NODE_ENV}catch{return!1}}()&&console.error(t,...n)}async function n(e){const t=await e.text();if(!t)throw new Error("Empty response body");try{return JSON.parse(t)}catch(e){throw new Error(`Invalid JSON response: ${t.substring(0,100)}${t.length>100?"...":""}`)}}async function s(e,t="Request failed"){if(!e.ok){let s=t;try{const t=await n(e);s=t.message||t.error||s}catch{s=function(e,t){const n={400:"Bad Request",401:"Unauthorized - Please check your session",403:"Forbidden - You do not have permission",404:"Resource not found",500:"Internal server error",502:"Bad Gateway",503:"Service unavailable"}[e.status]||e.statusText||t;return new Error(`${t} (${e.status}: ${n})`)}(e,t).message}throw new Error(s)}try{return await n(e)}catch(e){if(e instanceof Error&&e.message.includes("Invalid JSON"))throw e;throw new Error("Failed to parse response as JSON")}}class r extends Error{constructor(e,t,n,s){super(e),this.code=t,this.context=n,this.originalError=s,this.name="SDKError","undefined"!=typeof Error&&"captureStackTrace"in Error&&Error.captureStackTrace(this,r)}}const o=new class{constructor(){this.config={enableConsoleLogging:!0,showUserNotifications:!1}}configure(t){this.config={...this.config,...t},void 0!==t.enableConsoleLogging&&function(t){void 0!==t.enableLogging&&(e=t.enableLogging)}({enableLogging:t.enableConsoleLogging})}handleError(e,n={}){if(function(e){return e instanceof Error&&("AbortError"===e.name||"ERR_CANCELED"===e.code)}(e))return;const s=e instanceof Error?e:new r("string"==typeof e?e:"An unknown error occurred","UNKNOWN_ERROR",n),o=s instanceof r?s:new r(s.message,"SDK_ERROR",n,s);if(this.config.enableConsoleLogging&&t(`[SDK Error] ${n.component||"Unknown"}:`,{message:o.message,code:o.code,context:o.context,originalError:o.originalError,stack:o.stack}),this.config.onError)try{this.config.onError(o,n)}catch(e){!function(e,...t){console.error(e,...t)}("[SDK Error Handler] Error in custom error callback:",e)}this.config.showUserNotifications&&this.notifyUser(o,n)}notifyUser(e,t){"undefined"!=typeof window&&window.dispatchEvent&&window.dispatchEvent(new CustomEvent("sdk-error",{detail:{error:e,context:t}}))}wrapAsync(e,t){return(...n)=>e(...n).catch(e=>{throw this.handleError(e,t),e})}wrapSync(e,t){return(...n)=>{try{return e(...n)}catch(e){throw this.handleError(e,t),e}}}};function i(e,t={}){o.handleError(e,t)}function a(e){if("undefined"==typeof window)return null;try{return localStorage.getItem(e)}catch(t){return i(t,{component:"storage",action:"getStorageItem",metadata:{key:e}}),null}}function c(e){if("undefined"!=typeof window)try{localStorage.removeItem(e)}catch(t){i(t,{component:"storage",action:"removeStorageItem",metadata:{key:e}})}}function u(e,t){try{!function(e,t){if("undefined"!=typeof window)try{localStorage.setItem(e,t)}catch(t){i(t,{component:"storage",action:"setStorageItem",metadata:{key:e}})}}(e,JSON.stringify(t))}catch(t){i(t,{component:"storage",action:"setStorageJSON",metadata:{key:e}})}}const l="saas-session-id";function d(){return function(){if("undefined"==typeof window)return null;try{return a(l)}catch(e){return i(e,{component:"auth-utils",action:"getSessionId",metadata:{key:l}}),null}}()}const h=new WeakSet,p="SDK is not ready (missing serverUrl, version, or orgId)";class f{constructor(e){this.serverUrl=e.serverUrl,this.version=e.version,this.orgId=e.orgId,this.requireOrgId=e.requireOrgId??!1,this.basePath=e.basePath??"public",this._sessionId=e.sessionId,this._timeout=e.timeout??3e4,this._maxRetries=e.maxRetries??0,this._debug=e.debug??!1,this._customHeaders=e.headers??{},this._onError=e.onError,this._onUnauthorized=e.onUnauthorized,this._fetch=e.fetch??globalThis.fetch}ensureReady(){if(!this.serverUrl?.trim()||!this.version)throw new Error(p);if(this.requireOrgId&&!this.orgId?.trim())throw new Error(p)}get baseUrl(){return this.ensureReady(),`${this.serverUrl}/api/${this.version}/${this.basePath}`}getAuthHeaders(){return this._sessionId?{"x-session-id":this._sessionId}:function(){const e=d(),t={};return e&&(t["x-session-id"]=e),t}()}url(e){const t=e.startsWith("/")?e.slice(1):e;return`${this.baseUrl.endsWith("/")?this.baseUrl.slice(0,-1):this.baseUrl}/${t}`}buildHeaders(e){const t={...this._customHeaders,...this.getAuthHeaders()};return e.headers&&Object.assign(t,e.headers),null==e.body||t["Content-Type"]||(t["Content-Type"]="application/json"),t}reportError(e,t){h.has(e)||(h.add(e),this._onError?.(e,t))}async executeFetch(e,t){return this.executeFetchUrl(this.url(e),t,e)}async executeFetchUrl(e,t,n){const s=(t.method??"GET").toUpperCase(),r=n??e,o=this.buildHeaders(t),i={...t,headers:o};let a,c;if(this._timeout>0){c=new AbortController;const e=c;a=setTimeout(()=>e.abort(),this._timeout),i.signal=t.signal?function(e,t){const n=AbortSignal.any;if("function"==typeof n)return n([e,t]);const s=new AbortController,r=e=>{s.signal.aborted||s.abort(e.reason)};for(const n of[e,t]){if(n.aborted){r(n);break}n.addEventListener("abort",()=>r(n),{once:!0})}return s.signal}(t.signal,e.signal):e.signal}const u=async n=>{try{if("function"!=typeof this._fetch)throw new Error("No fetch implementation available. Global fetch requires Node 18+; on older runtimes pass a `fetch` in the SDK config (e.g. from `undici` or `node-fetch`).");const t=this._fetch.bind(globalThis),r=await t(e,i);if(this._debug&&console.log(`[BuildBase] ${s} ${e} → ${r.status}`),401===r.status&&this._onUnauthorized&&this._onUnauthorized(),r.status>=500&&n<this._maxRetries){const e=Math.min(1e3*Math.pow(2,n),1e4);return this._debug&&console.log(`[BuildBase] Retrying in ${e}ms (attempt ${n+1}/${this._maxRetries})`),await new Promise(t=>setTimeout(t,e)),u(n+1)}return r}catch(e){if(e instanceof Error&&"AbortError"===e.name){if(c?.signal.aborted&&!t.signal?.aborted){const e=new Error(`Request timeout after ${this._timeout}ms: ${s} ${r}`);throw this.reportError(e,{method:s,path:r}),e}throw e}if(n<this._maxRetries){const e=Math.min(1e3*Math.pow(2,n),1e4);return this._debug&&console.log(`[BuildBase] Network error, retrying in ${e}ms (attempt ${n+1}/${this._maxRetries})`),await new Promise(t=>setTimeout(t,e)),u(n+1)}throw e instanceof Error&&this.reportError(e,{method:s,path:r}),e}};try{return await u(0)}finally{void 0!==a&&clearTimeout(a)}}async fetchJson(e,t={},n="Request failed"){this.ensureReady();try{const r=await this.executeFetch(e,t);return await s(r,n)}catch(n){throw n instanceof Error&&this.reportError(n,{method:(t.method??"GET").toUpperCase(),path:e}),n}}async fetchResponse(e,t={}){return this.ensureReady(),this.executeFetch(e,t)}async fetchAbsoluteUrl(e,t={}){return this.ensureReady(),this.executeFetchUrl(e,t)}async throwResponseError(e,t){let n=t;try{n=(await e.json()).message||n}catch{n=`${t} (${e.status}: ${e.statusText})`}throw new Error(n)}apiPath(e,...t){return e.reduce((e,n,s)=>e+n+(s<t.length?encodeURIComponent(String(t[s])):""),"")}async unwrapResponse(e,t){const n=await e.json();if(void 0!==n.success){if(!n.success)throw new Error(n.message||t);return void 0!==n.data?n.data:n}return n}}class g extends f{constructor(e){super(e)}async requestAuth(e){const t=`${this.serverUrl}/api/${this.version}/auth/request`,n=await this.fetchAbsoluteUrl(t,{method:"POST",body:JSON.stringify(e)});return n.ok||await this.throwResponseError(n,"Failed to initiate authentication"),n.json()}async getProfile(e,t){return this.fetchJson("profile",{headers:{"x-session-id":e},signal:t},"Failed to fetch user profile")}}class w extends f{constructor(e){super({...e,basePath:"beta",requireOrgId:!0})}getAuthHeaders(){return{}}async fetchConfig(){return this.fetchJson(`config?orgId=${encodeURIComponent(this.orgId)}`,{},"Failed to fetch beta form configuration")}async submitBetaUser(e){return this.fetchJson("submit",{method:"POST",body:JSON.stringify(e)},"Failed to submit beta user request")}}class y{constructor(e){this.api=new w(e),this.orgId=e.orgId}async fetchConfig(){return this.api.fetchConfig()}async submitBetaUser(e){const t=e?.context??{},n=t?.country??("undefined"!=typeof navigator&&navigator.language?navigator.language.split("-")[1]:void 0),s=t?.language??("undefined"!=typeof navigator&&navigator.language?navigator.language.split("-")[0]:void 0),r=t?.timezone??("undefined"!=typeof Intl&&Intl.DateTimeFormat?Intl.DateTimeFormat().resolvedOptions().timeZone:void 0),o=t?.currency??("undefined"!=typeof Intl&&Intl.NumberFormat&&Intl.NumberFormat().resolvedOptions().currency?Intl.NumberFormat().resolvedOptions().currency:void 0);return this.api.submitBetaUser({orgId:this.orgId,formData:{...e,country:n,language:s,timezone:r,currency:o}})}}class m extends f{constructor(e){super({...e,requireOrgId:!0})}async getVapidPublicKey(){return this.fetchJson("push/vapid-public-key")}async subscribe(e,t){await this.fetchJson("push/subscribe",{method:"POST",body:JSON.stringify({endpoint:e.endpoint,keys:e.keys,userAgent:t})})}async unsubscribe(e){await this.fetchJson("push/unsubscribe",{method:"DELETE",body:JSON.stringify({endpoint:e})})}}class k extends f{constructor(e){super({...e,requireOrgId:!0})}async getSettings(e){return this.fetchJson(`${this.orgId}/settings`,{signal:e},"Failed to fetch settings")}}class b extends f{constructor(e){super(e)}async getAttributes(e){const t=await this.fetchResponse("users/attributes",{signal:e});t.ok||await this.throwResponseError(t,"Failed to fetch user attributes");const n=await this.unwrapResponse(t,"Failed to fetch user attributes");return n&&"object"==typeof n&&!Array.isArray(n)?n:{}}async updateAttributes(e){return this.fetchJson("users/attributes",{method:"PATCH",body:JSON.stringify({attributes:e})},"Failed to update user attributes")}async updateAttribute(e,t){return this.fetchJson(this.apiPath`users/attributes/${e}`,{method:"PATCH",body:JSON.stringify({value:t})},"Failed to update user attribute")}async getFeatures(e){const t=await this.fetchResponse("users/features",{signal:e});t.ok||await this.throwResponseError(t,"Failed to fetch user features");const n=await this.unwrapResponse(t,"Failed to fetch user features");return"object"==typeof n&&null!==n?n:{}}}class S extends f{constructor(e){super({...e,requireOrgId:!0})}async getWorkspaces(){return this.fetchJson("workspaces",{},"Failed to fetch workspaces")}async createWorkspace(e){return this.fetchJson("workspaces",{method:"POST",body:JSON.stringify(e)},"Failed to create workspace")}async updateWorkspace(e,t){return this.fetchJson(this.apiPath`workspaces/${e}`,{method:"PUT",body:JSON.stringify(t)},"Failed to update workspace")}async deleteWorkspace(e){return this.fetchJson(this.apiPath`workspaces/${e}`,{method:"DELETE"},"Failed to delete workspace")}async getWorkspaceUsers(e){return this.fetchJson(this.apiPath`workspaces/${e}/users`,{},"Failed to fetch workspace users")}async addUser(e,t){return this.fetchJson(this.apiPath`workspaces/${e}/users/add`,{method:"POST",body:JSON.stringify(t)},"Failed to invite member")}async removeUser(e,t){return this.fetchJson(this.apiPath`workspaces/${e}/users/${t}`,{method:"DELETE"},"Failed to remove user")}async updateUser(e,t,n){return this.fetchJson(this.apiPath`workspaces/${e}/users/${t}`,{method:"PATCH",body:JSON.stringify(n)},"Failed to update user")}async updateSettings(e){return this.fetchJson("workspaces/settings",{method:"PATCH",body:JSON.stringify(e)},"Failed to update workspace settings")}async updateWorkspacePermissions(e,t){return this.fetchJson(this.apiPath`workspaces/${e}/permissions`,{method:"PATCH",body:JSON.stringify({permissions:t})},"Failed to update workspace permissions")}async getFeatures(){return this.fetchJson("workspaces/features",{},"Failed to fetch features")}async updateFeature(e,t,n){return this.fetchJson(this.apiPath`workspaces/${e}/features`,{method:"PATCH",body:JSON.stringify({features:{[t]:n}})},"Failed to update feature")}async getWorkspace(e){return this.fetchJson(this.apiPath`workspaces/${e}`,{},"Failed to fetch workspace")}async getProfile(){return this.fetchJson("profile",{},"Failed to fetch profile")}async updateUserProfile(e){return this.fetchJson("profile",{method:"PATCH",body:JSON.stringify(e)},"Failed to update user profile")}async getPasskeys(){const e=await this.fetchJson("passkeys",{},"Failed to fetch passkeys");return e?.passkeys??[]}async renamePasskey(e,t){await this.fetchJson(this.apiPath`passkeys/${e}`,{method:"PATCH",body:JSON.stringify({name:t})},"Failed to rename passkey")}async deletePasskey(e){await this.fetchJson(this.apiPath`passkeys/${e}`,{method:"DELETE"},"Failed to remove passkey")}async getCurrentSubscription(e){const t=await this.fetchResponse(this.apiPath`workspaces/${e}/subscription`);return t.ok||await this.throwResponseError(t,"Failed to fetch subscription"),this.unwrapResponse(t,"Failed to fetch subscription")}async getPlanGroup(e){const t=await this.fetchResponse(this.apiPath`workspaces/${e}/subscription/plan-group`);return t.ok||await this.throwResponseError(t,"Failed to fetch plan group"),this.unwrapResponse(t,"Failed to fetch plan group")}async getPlanGroupByVersion(e,t){const n=await this.fetchResponse(this.apiPath`workspaces/${e}/subscription/plan-group`+`?groupVersionId=${encodeURIComponent(t)}`);return n.ok||await this.throwResponseError(n,"Failed to fetch plan group version"),this.unwrapResponse(n,"Failed to fetch plan group version")}async getPlanGroupVersions(e){const t=await this.fetchResponse(this.apiPath`workspaces/${e}/subscription/plan-group/versions`);return t.ok||await this.throwResponseError(t,"Failed to fetch plan group versions"),this.unwrapResponse(t,"Failed to fetch plan group versions")}async getPublicPlans(e){if(!this.orgId)throw new Error("orgId is required for getPublicPlans");const t=await this.fetchResponse(this.apiPath`${this.orgId}/plans/${encodeURIComponent(e)}`);return t.ok||await this.throwResponseError(t,"Failed to fetch plans"),this.unwrapResponse(t,"Failed to fetch plans")}async getPublicCreditPackages(){if(!this.orgId)throw new Error("orgId is required for getPublicCreditPackages");const e=await this.fetchResponse(this.apiPath`${this.orgId}/credit-packages`);return e.ok||await this.throwResponseError(e,"Failed to fetch credit packages"),this.unwrapResponse(e,"Failed to fetch credit packages")}async getPlanGroupVersion(e){const t=await this.fetchResponse(this.apiPath`plan-group-versions/${e}`);return t.ok||await this.throwResponseError(t,"Failed to fetch plan group version"),this.unwrapResponse(t,"Failed to fetch plan group version")}async createCheckoutSession(e,t){const n=await this.fetchResponse(this.apiPath`workspaces/${e}/subscription/checkout`,{method:"POST",body:JSON.stringify(t)});return n.ok||await this.throwResponseError(n,"Failed to create checkout session"),this.unwrapResponse(n,"Failed to create checkout session")}async selectFreePlan(e,t){const n=await this.fetchResponse(this.apiPath`workspaces/${e}/subscription/select-free-plan`,{method:"POST",body:JSON.stringify({planVersionId:t})});return n.ok||await this.throwResponseError(n,"Failed to select free plan"),n.json()}async updateSubscription(e,t){const n=await this.fetchResponse(this.apiPath`workspaces/${e}/subscription`,{method:"PATCH",body:JSON.stringify(t)});return n.ok||await this.throwResponseError(n,"Failed to update subscription"),this.unwrapResponse(n,"Failed to update subscription")}async createBillingPortalSession(e,t){return this.fetchJson(this.apiPath`workspaces/${e}/subscription/billing-portal`,{method:"POST",body:JSON.stringify(t?{returnUrl:t}:{})})}async listInvoices(e,t=10,n){const s=new URLSearchParams;s.append("limit",t.toString()),n&&s.append("starting_after",n);const r=await this.fetchResponse(this.apiPath`workspaces/${e}/subscription/invoices`+`?${s.toString()}`);return r.ok||await this.throwResponseError(r,"Failed to fetch invoices"),this.unwrapResponse(r,"Failed to fetch invoices")}async getInvoice(e,t){const n=await this.fetchResponse(this.apiPath`workspaces/${e}/subscription/invoices/${t}`);return n.ok||await this.throwResponseError(n,"Failed to fetch invoice"),this.unwrapResponse(n,"Failed to fetch invoice")}async cancelSubscriptionAtPeriodEnd(e){const t=await this.fetchResponse(this.apiPath`workspaces/${e}/subscription/cancel-at-period-end`,{method:"POST"});return t.ok||await this.throwResponseError(t,"Failed to cancel subscription"),this.unwrapResponse(t,"Failed to cancel subscription")}async resumeSubscription(e){const t=await this.fetchResponse(this.apiPath`workspaces/${e}/subscription/resume`,{method:"POST"});return t.ok||await this.throwResponseError(t,"Failed to resume subscription"),this.unwrapResponse(t,"Failed to resume subscription")}async recordUsage(e,t){const n=await this.fetchResponse(this.apiPath`workspaces/${e}/subscription/usage`,{method:"POST",body:JSON.stringify(t)});return n.ok||await this.throwResponseError(n,"Failed to record usage"),this.unwrapResponse(n,"Failed to record usage")}async recordUsageBatch(e,t){const n=await this.fetchResponse(this.apiPath`workspaces/${e}/subscription/usage/batch`,{method:"POST",body:JSON.stringify(t)});return n.ok||await this.throwResponseError(n,"Failed to record batch usage"),this.unwrapResponse(n,"Failed to record batch usage")}async getQuotaUsageStatus(e,t){const n=await this.fetchResponse(this.apiPath`workspaces/${e}/subscription/usage/status`+`?quotaSlug=${encodeURIComponent(t)}`);return n.ok||await this.throwResponseError(n,"Failed to fetch quota usage status"),this.unwrapResponse(n,"Failed to fetch quota usage status")}async getAllQuotaUsage(e){const t=await this.fetchResponse(this.apiPath`workspaces/${e}/subscription/usage/all`);return t.ok||await this.throwResponseError(t,"Failed to fetch all quota usage"),this.unwrapResponse(t,"Failed to fetch all quota usage")}async getUsageLogs(e,t){const n=new URLSearchParams;t?.quotaSlug&&n.append("quotaSlug",t.quotaSlug),t?.from&&n.append("from",t.from),t?.to&&n.append("to",t.to),t?.source&&n.append("source",t.source),t?.page&&n.append("page",t.page.toString()),t?.limit&&n.append("limit",t.limit.toString());const s=n.toString(),r=this.apiPath`workspaces/${e}/subscription/usage/logs`+(s?`?${s}`:""),o=await this.fetchResponse(r);return o.ok||await this.throwResponseError(o,"Failed to fetch usage logs"),this.unwrapResponse(o,"Failed to fetch usage logs")}async sendNotification(e,t,n,s){const r={event:t};return n&&(r.userId=n),s&&(r.data=s),this.fetchJson(this.apiPath`workspaces/${e}/notifications/send`,{method:"POST",body:JSON.stringify(r)},"Failed to send notification")}async getNotificationEvents(e){return this.fetchJson(this.apiPath`workspaces/${e}/notification-events`,{},"Failed to fetch notification events")}async getNotificationPreferences(e){return(await this.fetchJson(this.apiPath`workspaces/${e}/notification-preferences`,{},"Failed to fetch notification preferences")).notificationPreferences??{}}async updateNotificationPreferences(e,t){return(await this.fetchJson(this.apiPath`workspaces/${e}/notification-preferences`,{method:"PATCH",body:JSON.stringify({notificationPreferences:t})},"Failed to update notification preferences")).notificationPreferences??{}}async getCreditBalance(e){const t=await this.fetchResponse(this.apiPath`workspaces/${e}/credits`);return t.ok||await this.throwResponseError(t,"Failed to fetch credit balance"),this.unwrapResponse(t,"Failed to fetch credit balance")}async consumeCredits(e,t){const n=await this.fetchResponse(this.apiPath`workspaces/${e}/credits/consume`,{method:"POST",body:JSON.stringify(t)});if(!n.ok){if(402===n.status){const e=await n.json().catch(()=>({})),t=new Error(e.message||"Insufficient credits");throw t.available=e.available,t.requested=e.requested,t.code="INSUFFICIENT_CREDITS",t}await this.throwResponseError(n,"Failed to consume credits")}return this.unwrapResponse(n,"Failed to consume credits")}async purchaseCredits(e,t){const n=await this.fetchResponse(this.apiPath`workspaces/${e}/credits/purchase`,{method:"POST",body:JSON.stringify(t)});return n.ok||await this.throwResponseError(n,"Failed to create credit purchase checkout"),this.unwrapResponse(n,"Failed to create credit purchase checkout")}async getCreditPackages(e){const t=await this.fetchResponse(this.apiPath`workspaces/${e}/credits/packages`);t.ok||await this.throwResponseError(t,"Failed to fetch credit packages");const n=await this.unwrapResponse(t,"Failed to fetch credit packages");return n.docs??n}async getCreditTransactions(e,t){const n=new URLSearchParams;t?.type&&n.append("type",t.type),t?.page&&n.append("page",t.page.toString()),t?.limit&&n.append("limit",t.limit.toString());const s=n.toString(),r=this.apiPath`workspaces/${e}/credits/transactions`+(s?`?${s}`:""),o=await this.fetchResponse(r);return o.ok||await this.throwResponseError(o,"Failed to fetch credit transactions"),this.unwrapResponse(o,"Failed to fetch credit transactions")}async getCreditBuckets(e,t){const n=new URLSearchParams;t?.status&&n.append("status",t.status),t?.source&&n.append("source",t.source),t?.page&&n.append("page",t.page.toString()),t?.limit&&n.append("limit",t.limit.toString());const s=n.toString(),r=this.apiPath`workspaces/${e}/credits/buckets`+(s?`?${s}`:""),o=await this.fetchResponse(r);return o.ok||await this.throwResponseError(o,"Failed to fetch credit buckets"),this.unwrapResponse(o,"Failed to fetch credit buckets")}async getExpiringCredits(e,t){const n=t?`?days=${t}`:"",s=await this.fetchResponse(this.apiPath`workspaces/${e}/credits/expiring`+n);return s.ok||await this.throwResponseError(s,"Failed to fetch expiring credits"),this.unwrapResponse(s,"Failed to fetch expiring credits")}}var v;!function(e){e.V1="v1"}(v||(v={}));const E={UserCreated:"user:created",UserUpdated:"user:updated",WorkspaceChanged:"workspace:changed",WorkspaceUpdated:"workspace:updated",WorkspaceUserAdded:"workspace:user-added",WorkspaceUserRemoved:"workspace:user-removed",WorkspaceUserRoleChanged:"workspace:user-role-changed",WorkspaceCreated:"workspace:created",WorkspaceDeleted:"workspace:deleted"};class P{constructor(){this.callbacks=null}setCallbacks(e){this.callbacks=e}getCallbacks(){return this.callbacks}async emit(e,t){if(this.callbacks?.handleEvent)try{await this.callbacks.handleEvent(e,t)}catch(t){i(t,{component:"EventEmitter",action:"emit",metadata:{eventType:e}})}}async emitUserCreated(e){await this.emit(E.UserCreated,{user:e})}async emitUserUpdated(e,t){await this.emit(E.UserUpdated,{user:e,previousUser:t})}async emitWorkspaceChanged(e,t){await this.emit(E.WorkspaceChanged,{workspace:e,previousWorkspace:t})}async emitWorkspaceUpdated(e){await this.emit(E.WorkspaceUpdated,{workspace:e})}async emitWorkspaceUserAdded(e,t,n){await this.emit(E.WorkspaceUserAdded,{userId:e,workspace:t,role:n})}async emitWorkspaceUserRemoved(e,t,n){await this.emit(E.WorkspaceUserRemoved,{userId:e,workspace:t,role:n})}async emitWorkspaceUserRoleChanged(e,t,n,s){await this.emit(E.WorkspaceUserRoleChanged,{userId:e,workspace:t,previousRole:n,newRole:s})}async emitWorkspaceCreated(e){await this.emit(E.WorkspaceCreated,{workspace:e})}async emitWorkspaceDeleted(e){await this.emit(E.WorkspaceDeleted,{workspace:e})}}const R=new P;function $(){const e=new Set;return{subscribe:t=>(e.add(t),()=>{e.delete(t)}),invalidate(){e.forEach(e=>e())},reset(){e.clear()}}}const U=$().invalidate,C=$().invalidate,I=$().invalidate,_="bb",F={Checkout:"checkout",Billing:"billing",SelectPlan:"selectPlan",CreditPurchase:"creditPurchase",OpenCreditStore:"openCreditStore",Invite:"invite"},A={Success:"success",Cancel:"cancel",Error:"error"},W={Subscription:"subscription",Credits:"credits",Usage:"usage",Users:"users",Profile:"profile",General:"general",Features:"features",Notifications:"notifications",Permissions:"permissions",Danger:"danger"};function O(e,t){let n;try{const e=t||("undefined"!=typeof window?window.location.href:"https://localhost");n=new URL(e),n.search=""}catch{n=new URL("https://localhost")}return n.searchParams.set(_,function(e){return Object.entries(e).filter(([,e])=>null!=e&&""!==e).map(([e,t])=>`${encodeURIComponent(e)}:${encodeURIComponent(t)}`).join(",")}(e)),n.toString()}function T(e,t){const n=t||("undefined"!=typeof window?window.location.href:void 0);return{successUrl:O({action:F.Checkout,status:A.Success,ws:e,screen:W.Subscription},n),cancelUrl:O({action:F.Checkout,status:A.Cancel,ws:e,screen:W.Subscription},n)}}function x(e,t){const n=t||("undefined"!=typeof window?window.location.href:void 0);return{successUrl:O({action:F.CreditPurchase,status:A.Success,ws:e,screen:W.Credits},n),cancelUrl:O({action:F.CreditPurchase,status:A.Cancel,ws:e,screen:W.Credits},n)}}function N(){if("undefined"==typeof window)return null;try{const e=new URLSearchParams(window.location.search).get(_);if(!e)return null;const t=function(e){const t={};if(!e)return t;const n=e.split(",");for(const e of n){const n=e.indexOf(":");if(-1===n)continue;const s=decodeURIComponent(e.slice(0,n)),r=decodeURIComponent(e.slice(n+1));s&&(t[s]=r)}return t}(e);return Object.keys(t).length>0?t:null}catch{return null}}function J(){if("undefined"!=typeof window)try{const e=new URL(window.location.href);e.searchParams.has(_)&&(e.searchParams.delete(_),window.history.replaceState({},"",e.toString()))}catch{}}function L(e){if(!e||"string"!=typeof e)return null;try{const t=new URL(e);return"https:"===t.protocol?e:"http:"!==t.protocol||"localhost"!==t.hostname&&"127.0.0.1"!==t.hostname&&"::1"!==t.hostname?null:e}catch{return null}}function B(e,t="/"){if("undefined"==typeof window||!window.location)return!1;const n=L(e);return window.location.href=n??t,!0}const M="saas-auth-intent";function D(e){return"object"==typeof e&&null!==e&&"string"==typeof e.returnUrl&&"number"==typeof e.createdAt}function z(e){L(e)&&u(M,{returnUrl:e,createdAt:Date.now()})}function q(){const e=function(e,t){const n=a(e);if(!n)return null;try{const s=JSON.parse(n);return t&&!t(s)?(i(new Error("Storage data failed validation"),{component:"storage",action:"getStorageJSON",metadata:{key:e}}),c(e),null):s}catch(t){return i(t,{component:"storage",action:"getStorageJSON",metadata:{key:e}}),c(e),null}}(M,D);return c(M),e?Date.now()-e.createdAt>6e5?null:L(e.returnUrl):null}function K(){c(M)}const j={usd:"$",eur:"€",gbp:"£",jpy:"¥",cad:"CA$",aud:"A$",chf:"CHF",cny:"¥",hkd:"HK$",sgd:"S$",inr:"₹",mxn:"MX$",brl:"R$",nzd:"NZ$",sek:"kr",nok:"kr",dkk:"kr",pln:"zł",thb:"฿"},V={usd:"🇺🇸",eur:"🇪🇺",gbp:"🇬🇧",jpy:"🇯🇵",cad:"🇨🇦",aud:"🇦🇺",chf:"🇨🇭",cny:"🇨🇳",hkd:"🇭🇰",sgd:"🇸🇬",inr:"🇮🇳",mxn:"🇲🇽",brl:"🇧🇷",nzd:"🇳🇿",sek:"🇸🇪",nok:"🇳🇴",dkk:"🇩🇰",pln:"🇵🇱",thb:"🇹🇭"};function G(e){return e&&e.trim()?V[e.trim().toLowerCase()]??"":""}function H(e){if(!e||!e.trim())return"";const t=e.trim().toLowerCase();return j[t]??t.toUpperCase()}const Q=["usd","eur","gbp","jpy","cad","aud","chf","cny","hkd","sgd","inr","mxn","brl","nzd","sek","nok","dkk","pln","thb"],Y=Q.map(e=>({value:e,label:`${e.toUpperCase()} (${H(e)})`}));function Z(e,t){return H(t)+(e/100).toFixed(2)}const X={unit:"unit",units:"units",included:"Included",afterThat:"after that",afterIncluded:"After included"};function ee(e,t,n,s){if(null==e||e<0)return null;const r={...X,...s},o=null!=t&&t>=1?t:1,i=H(n),a=(e/100).toFixed(2);return 1===o?`${i}${a}/${r.unit}`:`${i}${a}/${o.toLocaleString()} ${r.units}`}function te(e,t,n,s,r,o){if(null==e||e<0)return null;const i={...X,...o},a=null!=t&&t>=1?t:1,c=H(s),u=(e/100).toFixed(2);if(n){const e=r??(n.endsWith("s")?n:`${n}s`);return a>=2?`${c}${u}/${a.toLocaleString()} ${e}`:`${c}${u}/${n}`}return 1===a?`${c}${u}/${i.unit}`:`${c}${u}/${a.toLocaleString()} ${i.units}`}function ne(e,t="unit"){const n=(e||"").trim().toLowerCase();if(!n)return t;const s=n.split(/\s+/)[0]??n;return new Set(["series","species","status","analysis","basis","bus","campus","corpus","axis"]).has(s)?s:s.endsWith("ies")&&s.length>3?s.slice(0,-3)+"y":s.endsWith("ses")||s.endsWith("xes")||s.endsWith("zes")||s.endsWith("ches")||s.endsWith("shes")?s.slice(0,-2):s.endsWith("s")&&!s.endsWith("ss")&&s.length>1?s.slice(0,-1):s||t}function se(e,t,n,s,r,o,i,a){const c={...X,...i};if(!1===a)return null!=e?`${c.included}: ${e.toLocaleString()} (${c.hardLimit??"hard limit"})`:c.hardLimit??"Hard limit";const u=o??(n.endsWith("s")?n:`${n}s`),l=null!=r&&r>=2?`${r.toLocaleString()} ${u}`:n;return null!=e&&null!=t?`${c.included}: ${e.toLocaleString()}, ${c.afterThat} ${Z(t,s)}/${l}`:null!=e?`${c.included}: ${e.toLocaleString()}`:null!=t?`${c.afterIncluded}: ${Z(t,s)}/${l}`:"—"}function re(e,t){if(null==e)return null;const n=e[t??"monthly"];return n?{included:n.included,...void 0!==n.overage&&{overage:n.overage},...void 0!==n.unitSize&&{unitSize:n.unitSize},allowOverage:!1!==e.allowOverage}:null}const oe={included:"included",then:"then"};function ie(e,t,n={}){const{overageInCents:s=!0,currency:r}=n,o=n.labels??oe,i=n.currencySymbol??H(r??"");if(null==e)return"—";const{included:a,overage:c}=e,u=`${a} ${o.included}`;if(!1===e.allowOverage)return`${u} (hard limit)`;if(null==c)return u;const l=s?c/100:c,d="number"==typeof l&&Number.isFinite(l)?l.toFixed(2):String(c),h=t&&"unitSize"in e&&null!=e.unitSize&&e.unitSize>0?` / ${e.unitSize.toLocaleString()} ${t}`:t?` / ${t}`:"";return`${u}, ${o.then} ${i}${d}${h}`}const ae={Monthly:"monthly",Yearly:"yearly",Quarterly:"quarterly"},ce={Active:"active",Trialing:"trialing",Canceled:"canceled",PastDue:"past_due",Paused:"paused",Incomplete:"incomplete",Unpaid:"unpaid"},ue={Draft:"draft",Open:"open",Paid:"paid",Uncollectible:"uncollectible",Void:"void"},le={Feature:"feature",Limit:"limit",Quota:"quota"},de={None:"none",Notified:"notified",Warning:"warning",Final:"final",Suspended:"suspended"},he={PlanGrant:"plan_grant",CreditPackPurchase:"credit_pack_purchase",AdminGrant:"admin_grant",Refund:"refund"},pe={Pending:"pending",Active:"active",Expired:"expired",Consumed:"consumed"},fe={PlanGrant:"plan_grant",PackPurchased:"pack_purchased",Consumed:"consumed",Expired:"expired",AdminGrant:"admin_grant",AdminRevoke:"admin_revoke",Refund:"refund"};function ge(e,t){const n=e.pricingVariants;if(!n?.length)return null;const s=t.toLowerCase();return n.find(e=>e.currency?.toLowerCase()===s)??null}function we(e,t,n){const s=ge(e,t);if(!s?.basePricing)return null;const r=s.basePricing[n];return null!=r?r:null}function ye(e,t,n){const s=ge(e,t);if(!s?.stripePrices)return null;const r=n===ae.Monthly?"monthlyPriceId":n===ae.Yearly?"yearlyPriceId":"quarterlyPriceId",o=n===ae.Monthly?"monthly":n===ae.Yearly?"yearly":void 0;return s.stripePrices[r]??(o?s.stripePrices[o]:void 0)??null}function me(e,t,n,s){const r=ge(e,t),o=r?.quotaOverages?.[n];if(o)return o[s]}function ke(e,t){const n=ge(e,t);return n?n.currency:e.plan?.currency??""}function be(e){const t=new Set;for(const n of e)n.pricingVariants?.forEach(e=>{e.currency&&t.add(e.currency.toLowerCase())});return Array.from(t).sort()}function Se(e,t,n,s){const r=e.quotas?.[n];if(null==r)return null;const o=r[s];if(!o)return null;const i=me(e,t,n,s);return{included:o.included,...void 0!==o.unitSize&&{unitSize:o.unitSize},...void 0!==i&&{overage:i},allowOverage:!1!==r.allowOverage}}function ve(e,t){if(!e)return null;for(const n of t){const t=n.pricingVariants;if(t?.length)for(const n of t){const t=n.stripePrices;if(t){if(t.monthlyPriceId===e||t.monthly===e)return{interval:"monthly",currency:n.currency};if(t.yearlyPriceId===e||t.yearly===e)return{interval:"yearly",currency:n.currency};if(t.quarterlyPriceId===e)return{interval:"quarterly",currency:n.currency}}}}return null}function Ee(e,t){const n=ge(e,t);return n?.seatPricing?.enabled?n.seatPricing:null}function Pe(e,t,n){const s=Ee(e,t);return s?.perSeat?s.perSeat[n]??null:null}function Re(e,t){return Math.max(0,e-(t||0))}function $e(e,t,n,s){const r=Ee(e,t);if(!r)return null;return Re(s,r.includedSeats)*(Pe(e,t,n)??0)}function Ue(e,t,n,s){const r=we(e,t,n);if(null===r)return null;if(void 0===s)return r;return r+($e(e,t,n,s)??0)}function Ce(e){const{planVersion:t,currency:n="usd",settingsMaxUsers:s}=e;if(t){const e=Ee(t,n);if(e)return{maxUsers:e.maxSeats??0,source:"seat_pricing",includedSeats:e.includedSeats??0,hasSeatPricing:!0}}return null!=s&&s>0?{maxUsers:s,source:"settings",includedSeats:0,hasSeatPricing:!1}:{maxUsers:0,source:"none",includedSeats:0,hasSeatPricing:!1}}function Ie(e){const{memberCount:t,maxUsersConfig:n,hasSubscription:s=!0,requireSubscription:r=!1}=e;if(r&&!s)return{canInvite:!1,blockReason:"no_subscription",blockMessageKey:"users.subscriptionRequired",blockMessageValues:{}};const{maxUsers:o,source:i}=n;if(o<=0)return{canInvite:!0,blockReason:null,blockMessageKey:null,blockMessageValues:null};if(t>=o){return{canInvite:!1,blockReason:{seat_pricing:"seat_limit_reached",settings:"settings_user_limit_reached"}[i]??"seat_limit_reached",blockMessageKey:{seat_pricing:"users.seatLimitMessage",settings:"users.settingsLimitMessage"}[i]??"users.memberLimitMessage",blockMessageValues:{maxUsers:o}}}return{canInvite:!0,blockReason:null,blockMessageKey:null,blockMessageValues:null}}const _e={WORKSPACE_SETTINGS_VIEW:"workspace:settings:view",WORKSPACE_SETTINGS_EDIT:"workspace:settings:edit",WORKSPACE_DELETE:"workspace:delete",WORKSPACE_MEMBERS_VIEW:"workspace:members:view",WORKSPACE_MEMBERS_INVITE:"workspace:members:invite",WORKSPACE_MEMBERS_REMOVE:"workspace:members:remove",WORKSPACE_MEMBERS_ROLE_CHANGE:"workspace:members:role-change",WORKSPACE_FEATURES_VIEW:"workspace:features:view",WORKSPACE_FEATURES_EDIT:"workspace:features:edit",WORKSPACE_BILLING_VIEW:"workspace:billing:view",WORKSPACE_BILLING_MANAGE:"workspace:billing:manage",WORKSPACE_USAGE_VIEW:"workspace:usage:view"},Fe=Object.values(_e),Ae={admin:Fe.filter(e=>e!==_e.WORKSPACE_DELETE),member:[_e.WORKSPACE_SETTINGS_VIEW,_e.WORKSPACE_MEMBERS_VIEW,_e.WORKSPACE_FEATURES_VIEW,_e.WORKSPACE_BILLING_VIEW,_e.WORKSPACE_USAGE_VIEW],viewer:[_e.WORKSPACE_SETTINGS_VIEW,_e.WORKSPACE_MEMBERS_VIEW]};function We(e){const t=new Set;for(const n of Object.values(e))for(const e of n)t.add(e);return Array.from(t)}function Oe(e){const{userId:t,workspace:n,settings:s,appPermissions:r}=e;if(!n||!t)return new Set;if(function(e,t){if(!t)return!1;const n=(s=e.createdBy)?"string"==typeof s?s:"object"==typeof s&&"_id"in s&&"string"==typeof s._id?s._id:null:null;var s;return null!==n&&n===t}(n,t)){const e=new Set(Fe);if(r)for(const t of We(r))e.add(t);if(n.permissions)for(const t of We(n.permissions))e.add(t);if(s?.workspace?.permissions)for(const t of We(s.workspace.permissions))e.add(t);return e}const o=e.workspaceRole??function(e,t){if(!t||!e.users||!Array.isArray(e.users))return null;const n=e.users.find(e=>"string"==typeof e?e===t:"object"==typeof e&&null!==e&&"_id"in e&&e._id===t);return n&&"object"==typeof n&&"role"in n&&"string"==typeof n.role?n.role:null}(n,t);if(!o)return new Set;const i=n.permissions,a=s?.workspace?.permissions,c=e=>e.filter(e=>e.startsWith("workspace:")),u=e=>e.filter(e=>!e.startsWith("workspace:")),l=i?.[o]?c(i[o]):[],d=a?.[o]?c(a[o]):[],h=Ae[o]??[];let p;if(l.length>0)p=l;else if(d.length>0)p=d;else if(h.length>0)p=h;else{p=Ae[s?.workspace?.defaultRole??"member"]??Ae.member??[]}const f=new Set(p),g=i?.[o]?u(i[o]):[],w=r?.[o]?u(r[o]):[],y=g.length>0?g:w;for(const e of y)f.add(e);return function(e,t,n){if(!n?.workspace)return;const{canInviteMembers:s}=n.workspace;(!1===s||"admin-only"===s&&"admin"!==t)&&e.delete(_e.WORKSPACE_MEMBERS_INVITE)}(f,o,s),f}function Te(e,t){const n=Oe(t);return Array.isArray(e)?e.every(e=>n.has(e)):n.has(e)}const xe="\n// BuildBase Push Notification Service Worker\n// Place this file in your app's public directory (e.g. public/push-sw.js)\n\nself.addEventListener('push', function(event) {\n if (!event.data) return;\n\n try {\n const payload = event.data.json();\n const title = payload.title || 'Notification';\n const options = {\n body: payload.body || '',\n icon: payload.icon || undefined,\n badge: payload.icon || undefined,\n data: { url: payload.url, ...(payload.data || {}) },\n tag: 'buildbase-push-' + Date.now(),\n };\n\n event.waitUntil(\n self.registration.showNotification(title, options)\n );\n } catch (e) {\n console.error('[PushSW] Failed to show notification:', e);\n }\n});\n\nself.addEventListener('notificationclick', function(event) {\n event.notification.close();\n\n const url = event.notification.data && event.notification.data.url;\n if (url) {\n event.waitUntil(\n clients.matchAll({ type: 'window', includeUncontrolled: true }).then(function(clientList) {\n for (let i = 0; i < clientList.length; i++) {\n const client = clientList[i];\n if (client.url === url && 'focus' in client) {\n return client.focus();\n }\n }\n if (clients.openWindow) {\n return clients.openWindow(url);\n }\n })\n );\n }\n});\n";var Ne;!function(e){e.loading="loading",e.redirecting="redirecting",e.authenticated="authenticated",e.unauthenticated="unauthenticated",e.authenticating="authenticating"}(Ne||(Ne={}));const Je=new Uint32Array([1116352408,1899447441,3049323471,3921009573,961987163,1508970993,2453635748,2870763221,3624381080,310598401,607225278,1426881987,1925078388,2162078206,2614888103,3248222580,3835390401,4022224774,264347078,604807628,770255983,1249150122,1555081692,1996064986,2554220882,2821834349,2952996808,3210313671,3336571891,3584528711,113926993,338241895,666307205,773529912,1294757372,1396182291,1695183700,1986661051,2177026350,2456956037,2730485921,2820302411,3259730800,3345764771,3516065817,3600352804,4094571909,275423344,430227734,506948616,659060556,883997877,958139571,1322822218,1537002063,1747873779,1955562222,2024104815,2227730452,2361852424,2428436474,2756734187,3204031479,3329325298]),Le=(e,t)=>e>>>t|e<<32-t;function Be(e){let t=1779033703,n=3144134277,s=1013904242,r=2773480762,o=1359893119,i=2600822924,a=528734635,c=1541459225;const u=e.length,l=u+1,d=l+(56-l%64+64)%64+8,h=new Uint8Array(d);h.set(e,0),h[u]=128;const p=8*u,f=Math.floor(p/4294967296),g=p>>>0;h[d-8]=f>>>24&255,h[d-7]=f>>>16&255,h[d-6]=f>>>8&255,h[d-5]=255&f,h[d-4]=g>>>24&255,h[d-3]=g>>>16&255,h[d-2]=g>>>8&255,h[d-1]=255&g;const w=new Uint32Array(64);for(let e=0;e<d;e+=64){for(let t=0;t<16;t++){const n=e+4*t;w[t]=h[n]<<24|h[n+1]<<16|h[n+2]<<8|h[n+3]}for(let e=16;e<64;e++){const t=Le(w[e-15],7)^Le(w[e-15],18)^w[e-15]>>>3,n=Le(w[e-2],17)^Le(w[e-2],19)^w[e-2]>>>10;w[e]=w[e-16]+t+w[e-7]+n>>>0}let u=t,l=n,d=s,p=r,f=o,g=i,y=a,m=c;for(let e=0;e<64;e++){const t=m+(Le(f,6)^Le(f,11)^Le(f,25))+(f&g^~f&y)+Je[e]+w[e]>>>0,n=u&l^u&d^l&d;m=y,y=g,g=f,f=p+t>>>0,p=d,d=l,l=u,u=t+((Le(u,2)^Le(u,13)^Le(u,22))+n>>>0)>>>0}t=t+u>>>0,n=n+l>>>0,s=s+d>>>0,r=r+p>>>0,o=o+f>>>0,i=i+g>>>0,a=a+y>>>0,c=c+m>>>0}const y=new Uint8Array(32),m=[t,n,s,r,o,i,a,c];for(let e=0;e<8;e++)y[4*e]=m[e]>>>24&255,y[4*e+1]=m[e]>>>16&255,y[4*e+2]=m[e]>>>8&255,y[4*e+3]=255&m[e];return y}function Me(e){return(new TextEncoder).encode(e)}function De(e,t){let n=e;n.length>64&&(n=Be(n));const s=new Uint8Array(64),r=new Uint8Array(64);for(let e=0;e<64;e++){const t=e<n.length?n[e]:0;s[e]=54^t,r[e]=92^t}const o=Be(qe(s,t));return Be(qe(r,o))}function ze(e,t){if(e.length!==t.length)return!1;let n=0;for(let s=0;s<e.length;s++)n|=e[s]^t[s];return 0===n}function qe(e,t){const n=new Uint8Array(e.length+t.length);return n.set(e,0),n.set(t,e.length),n}function Ke(e){const{body:t,signature:n,timestamp:s,secret:r,maxAgeSeconds:o=300}=e;if(!(n&&s&&r&&t))return!1;const i="sha256=";if(!n.startsWith(i))return!1;const a=n.slice(7);if(o>0){const e=parseInt(s,10);if(isNaN(e))return!1;if(Math.abs(Math.floor(Date.now()/1e3)-e)>o)return!1}const c=function(e){if(e.length%2!=0)return null;const t=new Uint8Array(e.length/2);for(let n=0;n<t.length;n++){const s=parseInt(e.slice(2*n,2*n+2),16);if(Number.isNaN(s))return null;t[n]=s}return t}(a);if(!c)return!1;const u=De(Me(r),Me(`${s}.${t}`));return c.length===u.length&&ze(c,u)}function je(e){if(!Ke(e))return null;try{return JSON.parse(e.body)}catch{return null}}const Ve=300,Ge="/.well-known/oauth-protected-resource",He="/.well-known/agent-skills",Qe="/.well-known/api-catalog",Ye="/.well-known/mcp/server-card.json",Ze="application/json",Xe="text/markdown; charset=utf-8",et="text/plain; charset=utf-8";function tt(e){return e.replace(/\/+$/,"")}function nt(e){return`public, max-age=${e}, s-maxage=${e}`}function st(e){return"sha256:"+function(e){let t="";for(let n=0;n<e.length;n++)t+=e[n].toString(16).padStart(2,"0");return t}(Be(Me(e)))}const rt=new Map;async function ot(e){const t=e.cacheTtlSeconds??Ve,n=`${tt(e.serverUrl)}::${e.orgId}`,s=rt.get(n);if(s&&s.expiresAt>Date.now())return s.value;const r=e.fetch??fetch,o=`${tt(e.serverUrl)}/api/v1/public/${e.orgId}/agent-readiness`;let i={enabled:!1};try{const e=await r(o,{headers:{Accept:Ze}});if(e.ok){const t=await e.json();t&&"object"==typeof t&&(i=t)}}catch{}return rt.set(n,{value:i,expiresAt:Date.now()+1e3*t}),i}function it(){rt.clear()}function at(e,t){const n=tt(e.siteUrl),s={llms_txt:"/llms.txt",sitemap:"/sitemap.xml",robots:"/robots.txt",oauth_protected_resource:Ge};t.authorizationServer?.metadataUrl&&(s.oauth_authorization_server=t.authorizationServer.metadataUrl),(t.authorizationServer||e.authMd)&&(s.auth="/auth.md"),e.skills?.length&&(s.agent_skills=`${He}/index.json`),e.apiCatalog?.length&&(s.api_catalog=Qe),e.mcpServerCard&&(s.mcp_server_card=Ye);return yt({schema_version:"1.0",name:e.site.name,...e.site.description?{description:e.site.description}:{},url:n,...e.site.documentationUrl?{documentation_url:e.site.documentationUrl}:{},provider:e.site.provider??{name:e.site.name,url:n},capabilities:s,...e.site.contactEmail?{contact:{email:e.site.contactEmail}}:{}},e)}function ct(e,t,n){const s=n.protectedResources??[];if(!s.length)return null;const r=e.replace(/\/+$/,"")||Ge,o=s.find(e=>function(e){let t="/";try{t=new URL(e).pathname}catch{t=e.startsWith("/")?e:`/${e}`}const n="/"===t?"":t.replace(/\/+$/,"");return Ge+n}(e.resource)===r);return o?yt(o.metadata,t):r===Ge&&1===s.length?yt(s[0].metadata,t):null}function ut(e){const t=e.skills??[];if(!t.length)return null;const n=tt(e.siteUrl);return yt({$schema:"https://schemas.agentskills.io/discovery/0.2.0/schema.json",skills:t.map(e=>({name:e.name,type:e.type??"skill-md",description:e.description,url:`${n}${lt(e)}`,digest:st(e.content)}))},e)}function lt(e){return e.path??`${He}/${e.name}/SKILL.md`}function dt(e,t){const n=(t.skills??[]).find(t=>lt(t)===e);return n?{status:200,contentType:"text/markdown; charset=utf-8",body:n.content,cacheControl:nt(t.cacheTtlSeconds??Ve)}:null}function ht(e){if(!e.security)return null;const t=(Array.isArray(e.security.contact)?e.security.contact:[e.security.contact]).map(e=>`Contact: ${e}`);return e.security.expires&&t.push(`Expires: ${e.security.expires}`),e.security.policy&&t.push(`Policy: ${e.security.policy}`),{status:200,contentType:et,body:t.join("\n")+"\n",cacheControl:nt(e.cacheTtlSeconds??Ve)}}function pt(e,t){return t.llmsTxt?{status:200,contentType:et,body:t.llmsTxt,cacheControl:nt(e.cacheTtlSeconds??Ve)}:null}function ft(e){const t=e.apiCatalog??[];if(!t.length)return null;const n=t.map(e=>({anchor:e.anchor,...e.title?{title:e.title}:{},...e.serviceDesc?{"service-desc":[{href:e.serviceDesc}]}:{},...e.serviceDoc?{"service-doc":[{href:e.serviceDoc}]}:{},...e.status?{status:[{href:e.status}]}:{}}));return{status:200,contentType:"application/linkset+json",body:JSON.stringify({linkset:n},null,2),cacheControl:nt(e.cacheTtlSeconds??Ve)}}function gt(e){const t=e.mcpServerCard;return t?yt({schema_version:"2024-11-05",serverInfo:{name:t.name,version:t.version},...t.description?{description:t.description}:{},transport:{type:t.transport??"streamable-http",endpoint:t.endpoint},capabilities:t.capabilities??{tools:{}},...t.documentationUrl?{documentation_url:t.documentationUrl}:{}},e):null}function wt(e,t){const n=nt(e.cacheTtlSeconds??Ve);if(e.authMd)return{status:200,contentType:Xe,body:e.authMd,cacheControl:n};const s=t.authorizationServer;if(!s)return null;const r=(t.protectedResources??[]).map(e=>`- \`${e.resource}\``).join("\n"),o=Array.from(new Set((t.protectedResources??[]).flatMap(e=>e.metadata?.scopes_supported??[]))),i=`# Agent Authentication\n\n${e.site.name} supports AI-agent access via OAuth 2.0 (authorization code + PKCE).\n\n## Authorization server\n- Issuer: \`${s.issuer}\`\n- Metadata (RFC 8414): ${s.metadataUrl}\n\nFetch the metadata document above for the \`authorization_endpoint\`, \`token_endpoint\`, and supported grant types / PKCE methods.\n\n## Protected resources (RFC 9728)\n${r||"- See `/.well-known/oauth-protected-resource`"}\n\nEach resource publishes its metadata at \`/.well-known/oauth-protected-resource\`, listing the authorization server(s) that can issue tokens for it.\n${o.length?`\n## Scopes\n${o.map(e=>`- \`${e}\``).join("\n")}\n`:""}\n## How an agent authenticates\n1. Discover this document and \`/.well-known/oauth-protected-resource\`.\n2. Fetch the authorization-server metadata for the endpoints.\n3. Run the authorization-code flow with PKCE (S256), requesting the scopes above and the target \`resource\`.\n4. Exchange the code for an access token and call the API with \`Authorization: Bearer <token>\`.\n\nDocumentation: ${e.site.documentationUrl??e.siteUrl}\n`;return{status:200,contentType:Xe,body:i,cacheControl:n}}function yt(e,t){return{status:200,contentType:Ze,body:JSON.stringify(e,null,2),cacheControl:nt(t.cacheTtlSeconds??Ve)}}async function mt(e,t){const n=e.replace(/\/+$/,"")||e;if("/.well-known/agent.json"===n){return at(t,await ot(t))}if("/.well-known/security.txt"===n)return ht(t);if(n===`${He}/index.json`)return ut(t);if(n.startsWith(`${He}/`)&&n.endsWith("SKILL.md"))return dt(n,t);if("/.well-known/oauth-authorization-server"===n){const e=await ot(t),n=e.authorizationServer?.metadataUrl;return n?yt({...e.authorizationServer?.issuer?{issuer:e.authorizationServer.issuer}:{},oauth_authorization_server_metadata:n},t):null}if(n===Qe)return ft(t);if(n===Ye)return gt(t);if(n.startsWith(Ge)){return ct(n,t,await ot(t))}return null}function kt(e){const t=globalThis.navigator;return!!t?.modelContext?.provideContext&&(t.modelContext.provideContext({tools:e}),!0)}class bt extends Error{constructor(e,t){super(t),this.name="AppBridgeError",this.code=e}}function St(e){const t=e.replace(/-/g,"+").replace(/_/g,"/"),n=t.length%4==0?"":"=".repeat(4-t.length%4),s=atob(t+n),r=new Uint8Array(s.length);for(let e=0;e<s.length;e++)r[e]=s.charCodeAt(e);return r}function vt(e){return JSON.parse((new TextDecoder).decode(St(e)))}function Et(e,t,n=60){if(!e||!t)throw new bt("invalid_token","Missing token or client secret");const s=e.split(".");if(3!==s.length)throw new bt("invalid_token","Malformed JWT");const[r,o,i]=s,a=De(Me(t),Me(`${r}.${o}`));let c,u,l;try{c=St(i)}catch{throw new bt("invalid_signature","Unreadable JWT signature")}if(!ze(a,c))throw new bt("invalid_signature","JWT signature verification failed");try{u=vt(r),l=vt(o)}catch{throw new bt("invalid_token","Unreadable JWT segments")}if("HS256"!==u.alg)throw new bt("invalid_algorithm",`Unexpected JWT alg: ${String(u.alg)}`);const d=Math.floor(Date.now()/1e3);if("number"==typeof l.exp&&d>l.exp+n)throw new bt("token_expired","JWT has expired");if("number"==typeof l.nbf&&d+n<l.nbf)throw new bt("token_not_yet_valid","JWT is not yet valid");return l}function Pt(e){if(!e)return null;const t=/^Bearer\s+(.+)$/i.exec(e.trim());return t?t[1].trim():null}function Rt(e){const t=Pt(e.authorization);if(!t)throw new bt("invalid_token","Missing Bearer token");return Et(t,e.clientSecret,e.clockToleranceSec)}function $t(e){const t=Pt(e.authorization);if(!t)throw new bt("invalid_token","Missing Bearer token");return Et(t,e.clientSecret,e.clockToleranceSec)}function Ut(e){return{success:!0,token:e.token,message:e.message??"ok",..."number"==typeof e.expiresIn?{expiresIn:e.expiresIn}:{}}}function Ct(e){return{success:!1,token:"",message:e}}async function It(e){let t;try{t=Rt(e)}catch(e){return{status:401,body:Ct(e instanceof bt?e.code:"invalid_token")}}return{status:200,body:Ut(await e.mintToken(t))}}async function _t(e){let t;try{t=$t(e)}catch(e){return{status:401,body:{success:!1,message:e instanceof bt?e.code:"invalid_token"}}}return await e.onRevoke(t),{status:200,body:{success:!0}}}function Ft(e){const t=[`Bearer resource_metadata="${e.resourceMetadataUrl}"`];return e.error&&t.push(`error="${e.error}"`),e.errorDescription&&t.push(`error_description="${e.errorDescription}"`),{status:401,headers:{"WWW-Authenticate":t.join(", "),"Content-Type":"application/json"},body:JSON.stringify({error:e.error??"invalid_token"})}}function At(e){const{serverUrl:t,orgId:n,version:s="v1",getSessionId:r,timeout:o,maxRetries:i,debug:a,headers:c,onError:u,fetch:l}=e;if(!t)throw new Error("BuildBase: serverUrl is required");if(!n)throw new Error("BuildBase: orgId is required");const d={...void 0!==o&&{timeout:o},...void 0!==i&&{maxRetries:i},...void 0!==a&&{debug:a},...c&&{headers:c},...u&&{onError:u},...l&&{fetch:l}},h=e=>{const r={serverUrl:t,version:s,orgId:n,sessionId:e,...d};return{workspace:new S(r),user:new b(r),settings:new k(r),push:new m(r)}},p=new S({serverUrl:t,version:s,orgId:n,...d}),f=e=>({workspace:{list:async()=>(await e()).workspace.getWorkspaces(),get:async t=>(await e()).workspace.getWorkspace(t),create:async t=>(await e()).workspace.createWorkspace(t),update:async(t,n)=>(await e()).workspace.updateWorkspace(t,n),delete:async t=>(await e()).workspace.deleteWorkspace(t)},users:{list:async t=>(await e()).workspace.getWorkspaceUsers(t),invite:async(t,n,s)=>(await e()).workspace.addUser(t,{email:n,role:s}),remove:async(t,n)=>(await e()).workspace.removeUser(t,n),updateRole:async(t,n,s)=>(await e()).workspace.updateUser(t,n,{role:s}),getProfile:async()=>(await e()).workspace.getProfile(),updateProfile:async t=>(await e()).workspace.updateUserProfile(t)},subscription:{get:async t=>(await e()).workspace.getCurrentSubscription(t),checkout:async(t,n)=>(await e()).workspace.createCheckoutSession(t,n),update:async(t,n)=>(await e()).workspace.updateSubscription(t,n),cancel:async t=>(await e()).workspace.cancelSubscriptionAtPeriodEnd(t),resume:async t=>(await e()).workspace.resumeSubscription(t),getBillingPortalUrl:async(t,n)=>(await e()).workspace.createBillingPortalSession(t,n)},plans:{getGroup:async t=>(await e()).workspace.getPlanGroup(t),getVersions:async t=>(await e()).workspace.getPlanGroupVersions(t),getPublic:e=>p.getPublicPlans(e),getVersion:e=>p.getPlanGroupVersion(e)},invoices:{list:async(t,n,s)=>(await e()).workspace.listInvoices(t,n,s),get:async(t,n)=>(await e()).workspace.getInvoice(t,n)},usage:{record:async(t,n)=>(await e()).workspace.recordUsage(t,n),recordBatch:async(t,n)=>(await e()).workspace.recordUsageBatch(t,n),getQuota:async(t,n)=>(await e()).workspace.getQuotaUsageStatus(t,n),getAll:async t=>(await e()).workspace.getAllQuotaUsage(t),getLogs:async(t,n)=>(await e()).workspace.getUsageLogs(t,n)},settings:{get:async()=>(await e()).settings.getSettings()},features:{list:async()=>(await e()).workspace.getFeatures(),update:async(t,n,s)=>(await e()).workspace.updateFeature(t,n,s)},notification:{send:async(t,n,s,r)=>(await e()).workspace.sendNotification(t,n,s,r)},credits:{getBalance:async t=>(await e()).workspace.getCreditBalance(t),consume:async(t,n)=>(await e()).workspace.consumeCredits(t,n),purchase:async(t,n)=>(await e()).workspace.purchaseCredits(t,n),getPackages:async t=>(await e()).workspace.getCreditPackages(t),getTransactions:async(t,n)=>(await e()).workspace.getCreditTransactions(t,n),getBuckets:async(t,n)=>(await e()).workspace.getCreditBuckets(t,n),getExpiring:async(t,n)=>(await e()).workspace.getExpiringCredits(t,n),getPublicPackages:()=>p.getPublicCreditPackages()},permissions:{check:async(t,n,s)=>{const r=await e(),[o,i,a]=await Promise.all([r.workspace.getWorkspace(t),r.settings.getSettings(),r.workspace.getWorkspaceUsers(t)]),c=a.find(e=>("string"==typeof e.user?e.user:e.user._id)===n);return Te(s,{userId:n,workspaceRole:c?.role??null,workspace:o,settings:i})},resolve:async(t,n)=>{const s=await e(),[r,o,i]=await Promise.all([s.workspace.getWorkspace(t),s.settings.getSettings(),s.workspace.getWorkspaceUsers(t)]),a=i.find(e=>("string"==typeof e.user?e.user:e.user._id)===n);return Oe({userId:n,workspaceRole:a?.role??null,workspace:r,settings:o})}}}),g=f(async()=>h(await(async()=>{if(!r)throw new Error("BuildBase: getSessionId callback is required for authenticated calls. Pass it in BuildBase({ getSessionId: ... }) or use withSession(id) / client.forSession(id).");const e=await r();if(!e)throw new Error("BuildBase: Not authenticated (getSessionId returned null)");return e})()));return{auth:async()=>{if(!r)return null;const e=await r();return e?{sessionId:e}:null},withSession:e=>{const t=h(e);return f(async()=>t)},client:{forSession:h},...g}}export{v as ApiVersion,bt as AppBridgeError,g as AuthApi,Ne as AuthStatus,F as BBAction,W as BBScreen,A as BBStatus,_ as BB_PARAM,f as BaseApi,y as BetaForm,ae as BillingIntervals,At as BuildBase,j as CURRENCY_DISPLAY,V as CURRENCY_FLAG,he as CreditBucketSource,pe as CreditBucketStatus,fe as CreditTransactionType,Ae as DEFAULT_ROLE_PERMISSIONS,de as DunningState,P as EventEmitter,ue as InvoiceStatuses,Q as PLAN_CURRENCY_CODES,Y as PLAN_CURRENCY_OPTIONS,xe as PUSH_SERVICE_WORKER_SCRIPT,_e as Permission,m as PushApi,E as SDKEvent,k as SettingsApi,le as SubscriptionItemType,ce as SubscriptionStatus,b as UserApi,S as WorkspaceApi,Ct as appTokenFailure,Ut as appTokenSuccess,Ft as bearerChallenge,at as buildAgentCard,ut as buildAgentSkillsIndex,ft as buildApiCatalog,wt as buildAuthMd,pt as buildLlmsTxt,gt as buildMcpServerCard,ct as buildProtectedResourceMetadata,ht as buildSecurityTxt,dt as buildSkillMd,Re as calculateBillableSeats,$e as calculateSeatOverageCents,Ue as calculateTotalSubscriptionCents,J as cleanBBParams,it as clearAgentReadinessCache,K as clearAuthIntent,q as consumeAuthIntent,O as createBBUrl,T as createCheckoutRedirectUrls,x as createCreditPurchaseRedirectUrls,At as default,R as eventEmitter,Pt as extractBearerToken,ot as fetchAgentReadiness,Z as formatCents,ee as formatOverageRate,te as formatOverageRateWithLabel,se as formatQuotaIncludedOverage,ie as formatQuotaWithPrice,be as getAvailableCurrenciesFromPlans,we as getBasePriceCents,ve as getBillingIntervalAndCurrencyFromPriceId,G as getCurrencyFlag,H as getCurrencySymbol,ke as getDisplayCurrency,Pe as getPerSeatPriceCents,ge as getPricingVariant,re as getQuotaDisplayValue,Se as getQuotaDisplayWithVariant,me as getQuotaOverageCents,ne as getQuotaUnitLabelFromName,Ee as getSeatPricing,ye as getStripePriceIdForInterval,_t as handleAppRevokeRequest,It as handleAppTokenRequest,Te as hasPermission,U as invalidateCreditBalance,C as invalidateQuotaUsage,I as invalidateSubscription,je as parseWebhookEvent,kt as provideWebMcpTools,N as readBBParams,Ce as resolveMaxUsers,Oe as resolvePermissions,mt as resolveWellKnown,B as safeRedirect,z as saveAuthIntent,st as sha256Digest,Ie as validateInvite,L as validateRedirectUrl,$t as verifyAppRevokeRequest,Rt as verifyAppTokenRequest,Et as verifyClientJwt,Ke as verifyWebhookSignature};
|
|
1
|
+
let e=!0;function t(t,...n){e&&function(){try{const e="undefined"!=typeof globalThis?globalThis:null;return"development"===e?.process?.env?.NODE_ENV}catch{return!1}}()&&console.error(t,...n)}async function n(e){const t=await e.text();if(!t)throw new Error("Empty response body");try{return JSON.parse(t)}catch(e){throw new Error(`Invalid JSON response: ${t.substring(0,100)}${t.length>100?"...":""}`)}}async function s(e,t="Request failed"){if(!e.ok){let s=t;try{const t=await n(e);s=t.message||t.error||s}catch{s=function(e,t){const n={400:"Bad Request",401:"Unauthorized - Please check your session",403:"Forbidden - You do not have permission",404:"Resource not found",500:"Internal server error",502:"Bad Gateway",503:"Service unavailable"}[e.status]||e.statusText||t;return new Error(`${t} (${e.status}: ${n})`)}(e,t).message}throw new Error(s)}try{return await n(e)}catch(e){if(e instanceof Error&&e.message.includes("Invalid JSON"))throw e;throw new Error("Failed to parse response as JSON")}}class r extends Error{constructor(e,t,n,s){super(e),this.code=t,this.context=n,this.originalError=s,this.name="SDKError","undefined"!=typeof Error&&"captureStackTrace"in Error&&Error.captureStackTrace(this,r)}}const o=new class{constructor(){this.config={enableConsoleLogging:!0,showUserNotifications:!1}}configure(t){this.config={...this.config,...t},void 0!==t.enableConsoleLogging&&function(t){void 0!==t.enableLogging&&(e=t.enableLogging)}({enableLogging:t.enableConsoleLogging})}handleError(e,n={}){if(function(e){return e instanceof Error&&("AbortError"===e.name||"ERR_CANCELED"===e.code)}(e))return;const s=e instanceof Error?e:new r("string"==typeof e?e:"An unknown error occurred","UNKNOWN_ERROR",n),o=s instanceof r?s:new r(s.message,"SDK_ERROR",n,s);if(this.config.enableConsoleLogging&&t(`[SDK Error] ${n.component||"Unknown"}:`,{message:o.message,code:o.code,context:o.context,originalError:o.originalError,stack:o.stack}),this.config.onError)try{this.config.onError(o,n)}catch(e){!function(e,...t){console.error(e,...t)}("[SDK Error Handler] Error in custom error callback:",e)}this.config.showUserNotifications&&this.notifyUser(o,n)}notifyUser(e,t){"undefined"!=typeof window&&window.dispatchEvent&&window.dispatchEvent(new CustomEvent("sdk-error",{detail:{error:e,context:t}}))}wrapAsync(e,t){return(...n)=>e(...n).catch(e=>{throw this.handleError(e,t),e})}wrapSync(e,t){return(...n)=>{try{return e(...n)}catch(e){throw this.handleError(e,t),e}}}};function i(e,t={}){o.handleError(e,t)}function a(e){if("undefined"==typeof window)return null;try{return localStorage.getItem(e)}catch(t){return i(t,{component:"storage",action:"getStorageItem",metadata:{key:e}}),null}}function c(e){if("undefined"!=typeof window)try{localStorage.removeItem(e)}catch(t){i(t,{component:"storage",action:"removeStorageItem",metadata:{key:e}})}}function u(e,t){try{!function(e,t){if("undefined"!=typeof window)try{localStorage.setItem(e,t)}catch(t){i(t,{component:"storage",action:"setStorageItem",metadata:{key:e}})}}(e,JSON.stringify(t))}catch(t){i(t,{component:"storage",action:"setStorageJSON",metadata:{key:e}})}}const l="saas-session-id";function d(){return function(){if("undefined"==typeof window)return null;try{return a(l)}catch(e){return i(e,{component:"auth-utils",action:"getSessionId",metadata:{key:l}}),null}}()}const p=new WeakSet,h="SDK is not ready (missing serverUrl, version, or orgId)";class f{constructor(e){this.serverUrl=e.serverUrl,this.version=e.version,this.orgId=e.orgId,this.requireOrgId=e.requireOrgId??!1,this.basePath=e.basePath??"public",this._sessionId=e.sessionId,this._timeout=e.timeout??3e4,this._maxRetries=e.maxRetries??0,this._debug=e.debug??!1,this._customHeaders=e.headers??{},this._onError=e.onError,this._onUnauthorized=e.onUnauthorized,this._fetch=e.fetch??globalThis.fetch}ensureReady(){if(!this.serverUrl?.trim()||!this.version)throw new Error(h);if(this.requireOrgId&&!this.orgId?.trim())throw new Error(h)}get baseUrl(){return this.ensureReady(),`${this.serverUrl}/api/${this.version}/${this.basePath}`}getAuthHeaders(){return this._sessionId?{"x-session-id":this._sessionId}:function(){const e=d(),t={};return e&&(t["x-session-id"]=e),t}()}url(e){const t=e.startsWith("/")?e.slice(1):e;return`${this.baseUrl.endsWith("/")?this.baseUrl.slice(0,-1):this.baseUrl}/${t}`}buildHeaders(e){const t={...this._customHeaders,...this.getAuthHeaders()};return e.headers&&Object.assign(t,e.headers),null==e.body||t["Content-Type"]||(t["Content-Type"]="application/json"),t}reportError(e,t){p.has(e)||(p.add(e),this._onError?.(e,t))}async executeFetch(e,t){return this.executeFetchUrl(this.url(e),t,e)}async executeFetchUrl(e,t,n){const s=(t.method??"GET").toUpperCase(),r=n??e,o=this.buildHeaders(t),i={...t,headers:o};let a,c;if(this._timeout>0){c=new AbortController;const e=c;a=setTimeout(()=>e.abort(),this._timeout),i.signal=t.signal?function(e,t){const n=AbortSignal.any;if("function"==typeof n)return n([e,t]);const s=new AbortController,r=e=>{s.signal.aborted||s.abort(e.reason)};for(const n of[e,t]){if(n.aborted){r(n);break}n.addEventListener("abort",()=>r(n),{once:!0})}return s.signal}(t.signal,e.signal):e.signal}const u=async n=>{try{if("function"!=typeof this._fetch)throw new Error("No fetch implementation available. Global fetch requires Node 18+; on older runtimes pass a `fetch` in the SDK config (e.g. from `undici` or `node-fetch`).");const t=this._fetch.bind(globalThis),r=await t(e,i);if(this._debug&&console.log(`[BuildBase] ${s} ${e} → ${r.status}`),401===r.status&&this._onUnauthorized&&this._onUnauthorized(),r.status>=500&&n<this._maxRetries){const e=Math.min(1e3*Math.pow(2,n),1e4);return this._debug&&console.log(`[BuildBase] Retrying in ${e}ms (attempt ${n+1}/${this._maxRetries})`),await new Promise(t=>setTimeout(t,e)),u(n+1)}return r}catch(e){if(e instanceof Error&&"AbortError"===e.name){if(c?.signal.aborted&&!t.signal?.aborted){const e=new Error(`Request timeout after ${this._timeout}ms: ${s} ${r}`);throw this.reportError(e,{method:s,path:r}),e}throw e}if(n<this._maxRetries){const e=Math.min(1e3*Math.pow(2,n),1e4);return this._debug&&console.log(`[BuildBase] Network error, retrying in ${e}ms (attempt ${n+1}/${this._maxRetries})`),await new Promise(t=>setTimeout(t,e)),u(n+1)}throw e instanceof Error&&this.reportError(e,{method:s,path:r}),e}};try{return await u(0)}finally{void 0!==a&&clearTimeout(a)}}async fetchJson(e,t={},n="Request failed"){this.ensureReady();try{const r=await this.executeFetch(e,t);return await s(r,n)}catch(n){throw n instanceof Error&&this.reportError(n,{method:(t.method??"GET").toUpperCase(),path:e}),n}}async fetchResponse(e,t={}){return this.ensureReady(),this.executeFetch(e,t)}async fetchAbsoluteUrl(e,t={}){return this.ensureReady(),this.executeFetchUrl(e,t)}async throwResponseError(e,t){let n=t;try{n=(await e.json()).message||n}catch{n=`${t} (${e.status}: ${e.statusText})`}throw new Error(n)}apiPath(e,...t){return e.reduce((e,n,s)=>e+n+(s<t.length?encodeURIComponent(String(t[s])):""),"")}async unwrapResponse(e,t){const n=await e.json();if(void 0!==n.success){if(!n.success)throw new Error(n.message||t);return void 0!==n.data?n.data:n}return n}}class g extends f{constructor(e){super(e)}async requestAuth(e){const t=`${this.serverUrl}/api/${this.version}/auth/request`,n=await this.fetchAbsoluteUrl(t,{method:"POST",body:JSON.stringify(e)});return n.ok||await this.throwResponseError(n,"Failed to initiate authentication"),n.json()}async getProfile(e,t){return this.fetchJson("profile",{headers:{"x-session-id":e},signal:t},"Failed to fetch user profile")}}class w extends f{constructor(e){super({...e,basePath:"beta",requireOrgId:!0})}getAuthHeaders(){return{}}async fetchConfig(){return this.fetchJson(`config?orgId=${encodeURIComponent(this.orgId)}`,{},"Failed to fetch beta form configuration")}async submitBetaUser(e){return this.fetchJson("submit",{method:"POST",body:JSON.stringify(e)},"Failed to submit beta user request")}}class y{constructor(e){this.api=new w(e),this.orgId=e.orgId}async fetchConfig(){return this.api.fetchConfig()}async submitBetaUser(e){const t=e?.context??{},n=t?.country??("undefined"!=typeof navigator&&navigator.language?navigator.language.split("-")[1]:void 0),s=t?.language??("undefined"!=typeof navigator&&navigator.language?navigator.language.split("-")[0]:void 0),r=t?.timezone??("undefined"!=typeof Intl&&Intl.DateTimeFormat?Intl.DateTimeFormat().resolvedOptions().timeZone:void 0),o=t?.currency??("undefined"!=typeof Intl&&Intl.NumberFormat&&Intl.NumberFormat().resolvedOptions().currency?Intl.NumberFormat().resolvedOptions().currency:void 0);return this.api.submitBetaUser({orgId:this.orgId,formData:{...e,country:n,language:s,timezone:r,currency:o}})}}class m extends f{constructor(e){super({...e,requireOrgId:!0})}async getVapidPublicKey(){return this.fetchJson("push/vapid-public-key")}async subscribe(e,t){await this.fetchJson("push/subscribe",{method:"POST",body:JSON.stringify({endpoint:e.endpoint,keys:e.keys,userAgent:t})})}async unsubscribe(e){await this.fetchJson("push/unsubscribe",{method:"DELETE",body:JSON.stringify({endpoint:e})})}}class k extends f{constructor(e){super({...e,requireOrgId:!0})}async getSettings(e){return this.fetchJson(`${this.orgId}/settings`,{signal:e},"Failed to fetch settings")}}class b extends f{constructor(e){super(e)}async getAttributes(e){const t=await this.fetchResponse("users/attributes",{signal:e});t.ok||await this.throwResponseError(t,"Failed to fetch user attributes");const n=await this.unwrapResponse(t,"Failed to fetch user attributes");return n&&"object"==typeof n&&!Array.isArray(n)?n:{}}async updateAttributes(e){return this.fetchJson("users/attributes",{method:"PATCH",body:JSON.stringify({attributes:e})},"Failed to update user attributes")}async updateAttribute(e,t){return this.fetchJson(this.apiPath`users/attributes/${e}`,{method:"PATCH",body:JSON.stringify({value:t})},"Failed to update user attribute")}async getFeatures(e){const t=await this.fetchResponse("users/features",{signal:e});t.ok||await this.throwResponseError(t,"Failed to fetch user features");const n=await this.unwrapResponse(t,"Failed to fetch user features");return"object"==typeof n&&null!==n?n:{}}}class S extends f{constructor(e){super({...e,requireOrgId:!0})}async getWorkspaces(){return this.fetchJson("workspaces",{},"Failed to fetch workspaces")}async createWorkspace(e){return this.fetchJson("workspaces",{method:"POST",body:JSON.stringify(e)},"Failed to create workspace")}async updateWorkspace(e,t){return this.fetchJson(this.apiPath`workspaces/${e}`,{method:"PUT",body:JSON.stringify(t)},"Failed to update workspace")}async deleteWorkspace(e){return this.fetchJson(this.apiPath`workspaces/${e}`,{method:"DELETE"},"Failed to delete workspace")}async getWorkspaceUsers(e){return this.fetchJson(this.apiPath`workspaces/${e}/users`,{},"Failed to fetch workspace users")}async addUser(e,t){return this.fetchJson(this.apiPath`workspaces/${e}/users/add`,{method:"POST",body:JSON.stringify(t)},"Failed to invite member")}async removeUser(e,t){return this.fetchJson(this.apiPath`workspaces/${e}/users/${t}`,{method:"DELETE"},"Failed to remove user")}async updateUser(e,t,n){return this.fetchJson(this.apiPath`workspaces/${e}/users/${t}`,{method:"PATCH",body:JSON.stringify(n)},"Failed to update user")}async updateSettings(e){return this.fetchJson("workspaces/settings",{method:"PATCH",body:JSON.stringify(e)},"Failed to update workspace settings")}async updateWorkspacePermissions(e,t){return this.fetchJson(this.apiPath`workspaces/${e}/permissions`,{method:"PATCH",body:JSON.stringify({permissions:t})},"Failed to update workspace permissions")}async getFeatures(){return this.fetchJson("workspaces/features",{},"Failed to fetch features")}async updateFeature(e,t,n){return this.fetchJson(this.apiPath`workspaces/${e}/features`,{method:"PATCH",body:JSON.stringify({features:{[t]:n}})},"Failed to update feature")}async getWorkspace(e){return this.fetchJson(this.apiPath`workspaces/${e}`,{},"Failed to fetch workspace")}async getProfile(){return this.fetchJson("profile",{},"Failed to fetch profile")}async updateUserProfile(e){return this.fetchJson("profile",{method:"PATCH",body:JSON.stringify(e)},"Failed to update user profile")}async getPasskeys(){const e=await this.fetchJson("passkeys",{},"Failed to fetch passkeys");return e?.passkeys??[]}async renamePasskey(e,t){await this.fetchJson(this.apiPath`passkeys/${e}`,{method:"PATCH",body:JSON.stringify({name:t})},"Failed to rename passkey")}async deletePasskey(e){await this.fetchJson(this.apiPath`passkeys/${e}`,{method:"DELETE"},"Failed to remove passkey")}async getCurrentSubscription(e){const t=await this.fetchResponse(this.apiPath`workspaces/${e}/subscription`);return t.ok||await this.throwResponseError(t,"Failed to fetch subscription"),this.unwrapResponse(t,"Failed to fetch subscription")}async getPlanGroup(e){const t=await this.fetchResponse(this.apiPath`workspaces/${e}/subscription/plan-group`);return t.ok||await this.throwResponseError(t,"Failed to fetch plan group"),this.unwrapResponse(t,"Failed to fetch plan group")}async getPlanGroupByVersion(e,t){const n=await this.fetchResponse(this.apiPath`workspaces/${e}/subscription/plan-group`+`?groupVersionId=${encodeURIComponent(t)}`);return n.ok||await this.throwResponseError(n,"Failed to fetch plan group version"),this.unwrapResponse(n,"Failed to fetch plan group version")}async getPlanGroupVersions(e){const t=await this.fetchResponse(this.apiPath`workspaces/${e}/subscription/plan-group/versions`);return t.ok||await this.throwResponseError(t,"Failed to fetch plan group versions"),this.unwrapResponse(t,"Failed to fetch plan group versions")}async getPublicPlans(e){if(!this.orgId)throw new Error("orgId is required for getPublicPlans");const t=await this.fetchResponse(this.apiPath`${this.orgId}/plans/${encodeURIComponent(e)}`);return t.ok||await this.throwResponseError(t,"Failed to fetch plans"),this.unwrapResponse(t,"Failed to fetch plans")}async getPublicCreditPackages(){if(!this.orgId)throw new Error("orgId is required for getPublicCreditPackages");const e=await this.fetchResponse(this.apiPath`${this.orgId}/credit-packages`);return e.ok||await this.throwResponseError(e,"Failed to fetch credit packages"),this.unwrapResponse(e,"Failed to fetch credit packages")}async getPlanGroupVersion(e){const t=await this.fetchResponse(this.apiPath`plan-group-versions/${e}`);return t.ok||await this.throwResponseError(t,"Failed to fetch plan group version"),this.unwrapResponse(t,"Failed to fetch plan group version")}async createCheckoutSession(e,t){const n=await this.fetchResponse(this.apiPath`workspaces/${e}/subscription/checkout`,{method:"POST",body:JSON.stringify(t)});return n.ok||await this.throwResponseError(n,"Failed to create checkout session"),this.unwrapResponse(n,"Failed to create checkout session")}async selectFreePlan(e,t){const n=await this.fetchResponse(this.apiPath`workspaces/${e}/subscription/select-free-plan`,{method:"POST",body:JSON.stringify({planVersionId:t})});return n.ok||await this.throwResponseError(n,"Failed to select free plan"),n.json()}async updateSubscription(e,t){const n=await this.fetchResponse(this.apiPath`workspaces/${e}/subscription`,{method:"PATCH",body:JSON.stringify(t)});return n.ok||await this.throwResponseError(n,"Failed to update subscription"),this.unwrapResponse(n,"Failed to update subscription")}async createBillingPortalSession(e,t){return this.fetchJson(this.apiPath`workspaces/${e}/subscription/billing-portal`,{method:"POST",body:JSON.stringify(t?{returnUrl:t}:{})})}async listInvoices(e,t=10,n){const s=new URLSearchParams;s.append("limit",t.toString()),n&&s.append("starting_after",n);const r=await this.fetchResponse(this.apiPath`workspaces/${e}/subscription/invoices`+`?${s.toString()}`);return r.ok||await this.throwResponseError(r,"Failed to fetch invoices"),this.unwrapResponse(r,"Failed to fetch invoices")}async getInvoice(e,t){const n=await this.fetchResponse(this.apiPath`workspaces/${e}/subscription/invoices/${t}`);return n.ok||await this.throwResponseError(n,"Failed to fetch invoice"),this.unwrapResponse(n,"Failed to fetch invoice")}async cancelSubscriptionAtPeriodEnd(e){const t=await this.fetchResponse(this.apiPath`workspaces/${e}/subscription/cancel-at-period-end`,{method:"POST"});return t.ok||await this.throwResponseError(t,"Failed to cancel subscription"),this.unwrapResponse(t,"Failed to cancel subscription")}async resumeSubscription(e){const t=await this.fetchResponse(this.apiPath`workspaces/${e}/subscription/resume`,{method:"POST"});return t.ok||await this.throwResponseError(t,"Failed to resume subscription"),this.unwrapResponse(t,"Failed to resume subscription")}async recordUsage(e,t){const n=await this.fetchResponse(this.apiPath`workspaces/${e}/subscription/usage`,{method:"POST",body:JSON.stringify(t)});return n.ok||await this.throwResponseError(n,"Failed to record usage"),this.unwrapResponse(n,"Failed to record usage")}async recordUsageBatch(e,t){const n=await this.fetchResponse(this.apiPath`workspaces/${e}/subscription/usage/batch`,{method:"POST",body:JSON.stringify(t)});return n.ok||await this.throwResponseError(n,"Failed to record batch usage"),this.unwrapResponse(n,"Failed to record batch usage")}async getQuotaUsageStatus(e,t){const n=await this.fetchResponse(this.apiPath`workspaces/${e}/subscription/usage/status`+`?quotaSlug=${encodeURIComponent(t)}`);return n.ok||await this.throwResponseError(n,"Failed to fetch quota usage status"),this.unwrapResponse(n,"Failed to fetch quota usage status")}async getAllQuotaUsage(e){const t=await this.fetchResponse(this.apiPath`workspaces/${e}/subscription/usage/all`);return t.ok||await this.throwResponseError(t,"Failed to fetch all quota usage"),this.unwrapResponse(t,"Failed to fetch all quota usage")}async getUsageLogs(e,t){const n=new URLSearchParams;t?.quotaSlug&&n.append("quotaSlug",t.quotaSlug),t?.from&&n.append("from",t.from),t?.to&&n.append("to",t.to),t?.source&&n.append("source",t.source),t?.page&&n.append("page",t.page.toString()),t?.limit&&n.append("limit",t.limit.toString());const s=n.toString(),r=this.apiPath`workspaces/${e}/subscription/usage/logs`+(s?`?${s}`:""),o=await this.fetchResponse(r);return o.ok||await this.throwResponseError(o,"Failed to fetch usage logs"),this.unwrapResponse(o,"Failed to fetch usage logs")}async sendNotification(e,t,n,s){const r={event:t};return n&&(r.userId=n),s&&(r.data=s),this.fetchJson(this.apiPath`workspaces/${e}/notifications/send`,{method:"POST",body:JSON.stringify(r)},"Failed to send notification")}async getNotificationEvents(e){return this.fetchJson(this.apiPath`workspaces/${e}/notification-events`,{},"Failed to fetch notification events")}async getNotificationPreferences(e){return(await this.fetchJson(this.apiPath`workspaces/${e}/notification-preferences`,{},"Failed to fetch notification preferences")).notificationPreferences??{}}async updateNotificationPreferences(e,t){return(await this.fetchJson(this.apiPath`workspaces/${e}/notification-preferences`,{method:"PATCH",body:JSON.stringify({notificationPreferences:t})},"Failed to update notification preferences")).notificationPreferences??{}}async getCreditBalance(e){const t=await this.fetchResponse(this.apiPath`workspaces/${e}/credits`);return t.ok||await this.throwResponseError(t,"Failed to fetch credit balance"),this.unwrapResponse(t,"Failed to fetch credit balance")}async consumeCredits(e,t){const n=await this.fetchResponse(this.apiPath`workspaces/${e}/credits/consume`,{method:"POST",body:JSON.stringify(t)});if(!n.ok){if(402===n.status){const e=await n.json().catch(()=>({})),t=new Error(e.message||"Insufficient credits");throw t.available=e.available,t.requested=e.requested,t.code="INSUFFICIENT_CREDITS",t}await this.throwResponseError(n,"Failed to consume credits")}return this.unwrapResponse(n,"Failed to consume credits")}async purchaseCredits(e,t){const n=await this.fetchResponse(this.apiPath`workspaces/${e}/credits/purchase`,{method:"POST",body:JSON.stringify(t)});return n.ok||await this.throwResponseError(n,"Failed to create credit purchase checkout"),this.unwrapResponse(n,"Failed to create credit purchase checkout")}async getCreditPackages(e){const t=await this.fetchResponse(this.apiPath`workspaces/${e}/credits/packages`);t.ok||await this.throwResponseError(t,"Failed to fetch credit packages");const n=await this.unwrapResponse(t,"Failed to fetch credit packages");return n.docs??n}async getCreditTransactions(e,t){const n=new URLSearchParams;t?.type&&n.append("type",t.type),t?.page&&n.append("page",t.page.toString()),t?.limit&&n.append("limit",t.limit.toString());const s=n.toString(),r=this.apiPath`workspaces/${e}/credits/transactions`+(s?`?${s}`:""),o=await this.fetchResponse(r);return o.ok||await this.throwResponseError(o,"Failed to fetch credit transactions"),this.unwrapResponse(o,"Failed to fetch credit transactions")}async getCreditBuckets(e,t){const n=new URLSearchParams;t?.status&&n.append("status",t.status),t?.source&&n.append("source",t.source),t?.page&&n.append("page",t.page.toString()),t?.limit&&n.append("limit",t.limit.toString());const s=n.toString(),r=this.apiPath`workspaces/${e}/credits/buckets`+(s?`?${s}`:""),o=await this.fetchResponse(r);return o.ok||await this.throwResponseError(o,"Failed to fetch credit buckets"),this.unwrapResponse(o,"Failed to fetch credit buckets")}async getExpiringCredits(e,t){const n=t?`?days=${t}`:"",s=await this.fetchResponse(this.apiPath`workspaces/${e}/credits/expiring`+n);return s.ok||await this.throwResponseError(s,"Failed to fetch expiring credits"),this.unwrapResponse(s,"Failed to fetch expiring credits")}}var v;!function(e){e.V1="v1"}(v||(v={}));const E={UserCreated:"user:created",UserUpdated:"user:updated",WorkspaceChanged:"workspace:changed",WorkspaceUpdated:"workspace:updated",WorkspaceUserAdded:"workspace:user-added",WorkspaceUserRemoved:"workspace:user-removed",WorkspaceUserRoleChanged:"workspace:user-role-changed",WorkspaceCreated:"workspace:created",WorkspaceDeleted:"workspace:deleted"};class ${constructor(){this.callbacks=null}setCallbacks(e){this.callbacks=e}getCallbacks(){return this.callbacks}async emit(e,t){if(this.callbacks?.handleEvent)try{await this.callbacks.handleEvent(e,t)}catch(t){i(t,{component:"EventEmitter",action:"emit",metadata:{eventType:e}})}}async emitUserCreated(e){await this.emit(E.UserCreated,{user:e})}async emitUserUpdated(e,t){await this.emit(E.UserUpdated,{user:e,previousUser:t})}async emitWorkspaceChanged(e,t){await this.emit(E.WorkspaceChanged,{workspace:e,previousWorkspace:t})}async emitWorkspaceUpdated(e){await this.emit(E.WorkspaceUpdated,{workspace:e})}async emitWorkspaceUserAdded(e,t,n){await this.emit(E.WorkspaceUserAdded,{userId:e,workspace:t,role:n})}async emitWorkspaceUserRemoved(e,t,n){await this.emit(E.WorkspaceUserRemoved,{userId:e,workspace:t,role:n})}async emitWorkspaceUserRoleChanged(e,t,n,s){await this.emit(E.WorkspaceUserRoleChanged,{userId:e,workspace:t,previousRole:n,newRole:s})}async emitWorkspaceCreated(e){await this.emit(E.WorkspaceCreated,{workspace:e})}async emitWorkspaceDeleted(e){await this.emit(E.WorkspaceDeleted,{workspace:e})}}const P=new $;function R(){const e=new Set;return{subscribe:t=>(e.add(t),()=>{e.delete(t)}),invalidate(){e.forEach(e=>e())},reset(){e.clear()}}}const U=R().invalidate,C=R().invalidate,_=R().invalidate,I="bb",x={Checkout:"checkout",Billing:"billing",SelectPlan:"selectPlan",CreditPurchase:"creditPurchase",OpenCreditStore:"openCreditStore",Invite:"invite"},A={Success:"success",Cancel:"cancel",Error:"error"},T={Subscription:"subscription",Credits:"credits",Usage:"usage",Users:"users",Profile:"profile",General:"general",Features:"features",Notifications:"notifications",Permissions:"permissions",Danger:"danger"};function F(e,t){let n;try{const e=t||("undefined"!=typeof window?window.location.href:"https://localhost");n=new URL(e),n.search=""}catch{n=new URL("https://localhost")}return n.searchParams.set(I,function(e){return Object.entries(e).filter(([,e])=>null!=e&&""!==e).map(([e,t])=>`${encodeURIComponent(e)}:${encodeURIComponent(t)}`).join(",")}(e)),n.toString()}function W(e,t){const n=t||("undefined"!=typeof window?window.location.href:void 0);return{successUrl:F({action:x.Checkout,status:A.Success,ws:e,screen:T.Subscription},n),cancelUrl:F({action:x.Checkout,status:A.Cancel,ws:e,screen:T.Subscription},n)}}function O(e,t){const n=t||("undefined"!=typeof window?window.location.href:void 0);return{successUrl:F({action:x.CreditPurchase,status:A.Success,ws:e,screen:T.Credits},n),cancelUrl:F({action:x.CreditPurchase,status:A.Cancel,ws:e,screen:T.Credits},n)}}function N(){if("undefined"==typeof window)return null;try{const e=new URLSearchParams(window.location.search).get(I);if(!e)return null;const t=function(e){const t={};if(!e)return t;const n=e.split(",");for(const e of n){const n=e.indexOf(":");if(-1===n)continue;const s=decodeURIComponent(e.slice(0,n)),r=decodeURIComponent(e.slice(n+1));s&&(t[s]=r)}return t}(e);return Object.keys(t).length>0?t:null}catch{return null}}function J(){if("undefined"!=typeof window)try{const e=new URL(window.location.href);e.searchParams.has(I)&&(e.searchParams.delete(I),window.history.replaceState({},"",e.toString()))}catch{}}function L(e){if(!e||"string"!=typeof e)return null;try{const t=new URL(e);return"https:"===t.protocol?e:"http:"!==t.protocol||"localhost"!==t.hostname&&"127.0.0.1"!==t.hostname&&"::1"!==t.hostname?null:e}catch{return null}}function B(e,t="/"){if("undefined"==typeof window||!window.location)return!1;const n=L(e);return window.location.href=n??t,!0}const M="saas-auth-intent";function j(e){return"object"==typeof e&&null!==e&&"string"==typeof e.returnUrl&&"number"==typeof e.createdAt}function D(e){L(e)&&u(M,{returnUrl:e,createdAt:Date.now()})}function q(){const e=function(e,t){const n=a(e);if(!n)return null;try{const s=JSON.parse(n);return t&&!t(s)?(i(new Error("Storage data failed validation"),{component:"storage",action:"getStorageJSON",metadata:{key:e}}),c(e),null):s}catch(t){return i(t,{component:"storage",action:"getStorageJSON",metadata:{key:e}}),c(e),null}}(M,j);return c(M),e?Date.now()-e.createdAt>6e5?null:L(e.returnUrl):null}function z(){c(M)}const K={usd:"$",eur:"€",gbp:"£",jpy:"¥",cad:"CA$",aud:"A$",chf:"CHF",cny:"¥",hkd:"HK$",sgd:"S$",inr:"₹",mxn:"MX$",brl:"R$",nzd:"NZ$",sek:"kr",nok:"kr",dkk:"kr",pln:"zł",thb:"฿"},V={usd:"🇺🇸",eur:"🇪🇺",gbp:"🇬🇧",jpy:"🇯🇵",cad:"🇨🇦",aud:"🇦🇺",chf:"🇨🇭",cny:"🇨🇳",hkd:"🇭🇰",sgd:"🇸🇬",inr:"🇮🇳",mxn:"🇲🇽",brl:"🇧🇷",nzd:"🇳🇿",sek:"🇸🇪",nok:"🇳🇴",dkk:"🇩🇰",pln:"🇵🇱",thb:"🇹🇭"};function G(e){return e&&e.trim()?V[e.trim().toLowerCase()]??"":""}function H(e){if(!e||!e.trim())return"";const t=e.trim().toLowerCase();return K[t]??t.toUpperCase()}const Q=["usd","eur","gbp","jpy","cad","aud","chf","cny","hkd","sgd","inr","mxn","brl","nzd","sek","nok","dkk","pln","thb"],Y=Q.map(e=>({value:e,label:`${e.toUpperCase()} (${H(e)})`}));function Z(e,t){return H(t)+(e/100).toFixed(2)}const X={unit:"unit",units:"units",included:"Included",afterThat:"after that",afterIncluded:"After included"};function ee(e,t,n,s){if(null==e||e<0)return null;const r={...X,...s},o=null!=t&&t>=1?t:1,i=H(n),a=(e/100).toFixed(2);return 1===o?`${i}${a}/${r.unit}`:`${i}${a}/${o.toLocaleString()} ${r.units}`}function te(e,t,n,s,r,o){if(null==e||e<0)return null;const i={...X,...o},a=null!=t&&t>=1?t:1,c=H(s),u=(e/100).toFixed(2);if(n){const e=r??(n.endsWith("s")?n:`${n}s`);return a>=2?`${c}${u}/${a.toLocaleString()} ${e}`:`${c}${u}/${n}`}return 1===a?`${c}${u}/${i.unit}`:`${c}${u}/${a.toLocaleString()} ${i.units}`}function ne(e,t="unit"){const n=(e||"").trim().toLowerCase();if(!n)return t;const s=n.split(/\s+/)[0]??n;return new Set(["series","species","status","analysis","basis","bus","campus","corpus","axis"]).has(s)?s:s.endsWith("ies")&&s.length>3?s.slice(0,-3)+"y":s.endsWith("ses")||s.endsWith("xes")||s.endsWith("zes")||s.endsWith("ches")||s.endsWith("shes")?s.slice(0,-2):s.endsWith("s")&&!s.endsWith("ss")&&s.length>1?s.slice(0,-1):s||t}function se(e,t,n,s,r,o,i,a){const c={...X,...i};if(!1===a)return null!=e?`${c.included}: ${e.toLocaleString()} (${c.hardLimit??"hard limit"})`:c.hardLimit??"Hard limit";const u=o??(n.endsWith("s")?n:`${n}s`),l=null!=r&&r>=2?`${r.toLocaleString()} ${u}`:n;return null!=e&&null!=t?`${c.included}: ${e.toLocaleString()}, ${c.afterThat} ${Z(t,s)}/${l}`:null!=e?`${c.included}: ${e.toLocaleString()}`:null!=t?`${c.afterIncluded}: ${Z(t,s)}/${l}`:"—"}function re(e,t){if(null==e)return null;const n=e[t??"monthly"];return n?{included:n.included,...void 0!==n.overage&&{overage:n.overage},...void 0!==n.unitSize&&{unitSize:n.unitSize},allowOverage:!1!==e.allowOverage}:null}const oe={included:"included",then:"then"};function ie(e,t,n={}){const{overageInCents:s=!0,currency:r}=n,o=n.labels??oe,i=n.currencySymbol??H(r??"");if(null==e)return"—";const{included:a,overage:c}=e,u=`${a} ${o.included}`;if(!1===e.allowOverage)return`${u} (hard limit)`;if(null==c)return u;const l=s?c/100:c,d="number"==typeof l&&Number.isFinite(l)?l.toFixed(2):String(c),p=t&&"unitSize"in e&&null!=e.unitSize&&e.unitSize>0?` / ${e.unitSize.toLocaleString()} ${t}`:t?` / ${t}`:"";return`${u}, ${o.then} ${i}${d}${p}`}const ae={Monthly:"monthly",Yearly:"yearly",Quarterly:"quarterly"},ce={Active:"active",Trialing:"trialing",Canceled:"canceled",PastDue:"past_due",Paused:"paused",Incomplete:"incomplete",Unpaid:"unpaid"},ue={Draft:"draft",Open:"open",Paid:"paid",Uncollectible:"uncollectible",Void:"void"},le={Feature:"feature",Limit:"limit",Quota:"quota"},de={None:"none",Notified:"notified",Warning:"warning",Final:"final",Suspended:"suspended"},pe={PlanGrant:"plan_grant",CreditPackPurchase:"credit_pack_purchase",AdminGrant:"admin_grant",Refund:"refund"},he={Pending:"pending",Active:"active",Expired:"expired",Consumed:"consumed"},fe={PlanGrant:"plan_grant",PackPurchased:"pack_purchased",Consumed:"consumed",Expired:"expired",AdminGrant:"admin_grant",AdminRevoke:"admin_revoke",Refund:"refund"};function ge(e,t){const n=e.pricingVariants;if(!n?.length)return null;const s=t.toLowerCase();return n.find(e=>e.currency?.toLowerCase()===s)??null}function we(e,t,n){const s=ge(e,t);if(!s?.basePricing)return null;const r=s.basePricing[n];return null!=r?r:null}function ye(e,t,n){const s=ge(e,t);if(!s?.stripePrices)return null;const r=n===ae.Monthly?"monthlyPriceId":n===ae.Yearly?"yearlyPriceId":"quarterlyPriceId",o=n===ae.Monthly?"monthly":n===ae.Yearly?"yearly":void 0;return s.stripePrices[r]??(o?s.stripePrices[o]:void 0)??null}function me(e,t,n,s){const r=ge(e,t),o=r?.quotaOverages?.[n];if(o)return o[s]}function ke(e,t){const n=ge(e,t);return n?n.currency:e.plan?.currency??""}function be(e){const t=new Set;for(const n of e)n.pricingVariants?.forEach(e=>{e.currency&&t.add(e.currency.toLowerCase())});return Array.from(t).sort()}function Se(e,t,n,s){const r=e.quotas?.[n];if(null==r)return null;const o=r[s];if(!o)return null;const i=me(e,t,n,s);return{included:o.included,...void 0!==o.unitSize&&{unitSize:o.unitSize},...void 0!==i&&{overage:i},allowOverage:!1!==r.allowOverage}}function ve(e,t){if(!e)return null;for(const n of t){const t=n.pricingVariants;if(t?.length)for(const n of t){const t=n.stripePrices;if(t){if(t.monthlyPriceId===e||t.monthly===e)return{interval:"monthly",currency:n.currency};if(t.yearlyPriceId===e||t.yearly===e)return{interval:"yearly",currency:n.currency};if(t.quarterlyPriceId===e)return{interval:"quarterly",currency:n.currency}}}}return null}function Ee(e,t){const n=ge(e,t);return n?.seatPricing?.enabled?n.seatPricing:null}function $e(e,t,n){const s=Ee(e,t);return s?.perSeat?s.perSeat[n]??null:null}function Pe(e,t){return Math.max(0,e-(t||0))}function Re(e,t,n,s){const r=Ee(e,t);if(!r)return null;return Pe(s,r.includedSeats)*($e(e,t,n)??0)}function Ue(e,t,n,s){const r=we(e,t,n);if(null===r)return null;if(void 0===s)return r;return r+(Re(e,t,n,s)??0)}function Ce(e){const{planVersion:t,currency:n="usd",settingsMaxUsers:s}=e;if(t){const e=Ee(t,n);if(e)return{maxUsers:e.maxSeats??0,source:"seat_pricing",includedSeats:e.includedSeats??0,hasSeatPricing:!0}}return null!=s&&s>0?{maxUsers:s,source:"settings",includedSeats:0,hasSeatPricing:!1}:{maxUsers:0,source:"none",includedSeats:0,hasSeatPricing:!1}}function _e(e){const{memberCount:t,maxUsersConfig:n,hasSubscription:s=!0,requireSubscription:r=!1}=e;if(r&&!s)return{canInvite:!1,blockReason:"no_subscription",blockMessageKey:"users.subscriptionRequired",blockMessageValues:{}};const{maxUsers:o,source:i}=n;if(o<=0)return{canInvite:!0,blockReason:null,blockMessageKey:null,blockMessageValues:null};if(t>=o){return{canInvite:!1,blockReason:{seat_pricing:"seat_limit_reached",settings:"settings_user_limit_reached"}[i]??"seat_limit_reached",blockMessageKey:{seat_pricing:"users.seatLimitMessage",settings:"users.settingsLimitMessage"}[i]??"users.memberLimitMessage",blockMessageValues:{maxUsers:o}}}return{canInvite:!0,blockReason:null,blockMessageKey:null,blockMessageValues:null}}const Ie={WORKSPACE_SETTINGS_VIEW:"workspace:settings:view",WORKSPACE_SETTINGS_EDIT:"workspace:settings:edit",WORKSPACE_DELETE:"workspace:delete",WORKSPACE_MEMBERS_VIEW:"workspace:members:view",WORKSPACE_MEMBERS_INVITE:"workspace:members:invite",WORKSPACE_MEMBERS_REMOVE:"workspace:members:remove",WORKSPACE_MEMBERS_ROLE_CHANGE:"workspace:members:role-change",WORKSPACE_FEATURES_VIEW:"workspace:features:view",WORKSPACE_FEATURES_EDIT:"workspace:features:edit",WORKSPACE_BILLING_VIEW:"workspace:billing:view",WORKSPACE_BILLING_MANAGE:"workspace:billing:manage",WORKSPACE_USAGE_VIEW:"workspace:usage:view"},xe=Object.values(Ie),Ae={admin:xe.filter(e=>e!==Ie.WORKSPACE_DELETE),member:[Ie.WORKSPACE_SETTINGS_VIEW,Ie.WORKSPACE_MEMBERS_VIEW,Ie.WORKSPACE_FEATURES_VIEW,Ie.WORKSPACE_BILLING_VIEW,Ie.WORKSPACE_USAGE_VIEW],viewer:[Ie.WORKSPACE_SETTINGS_VIEW,Ie.WORKSPACE_MEMBERS_VIEW]};function Te(e){const t=new Set;for(const n of Object.values(e))for(const e of n)t.add(e);return Array.from(t)}function Fe(e){const{userId:t,workspace:n,settings:s,appPermissions:r}=e;if(!n||!t)return new Set;if(function(e,t){if(!t)return!1;const n=(s=e.createdBy)?"string"==typeof s?s:"object"==typeof s&&"_id"in s&&"string"==typeof s._id?s._id:null:null;var s;return null!==n&&n===t}(n,t)){const e=new Set(xe);if(r)for(const t of Te(r))e.add(t);if(n.permissions)for(const t of Te(n.permissions))e.add(t);if(s?.workspace?.permissions)for(const t of Te(s.workspace.permissions))e.add(t);return e}const o=e.workspaceRole??function(e,t){if(!t||!e.users||!Array.isArray(e.users))return null;const n=e.users.find(e=>"string"==typeof e?e===t:"object"==typeof e&&null!==e&&"_id"in e&&e._id===t);return n&&"object"==typeof n&&"role"in n&&"string"==typeof n.role?n.role:null}(n,t);if(!o)return new Set;const i=n.permissions,a=s?.workspace?.permissions,c=e=>e.filter(e=>e.startsWith("workspace:")),u=e=>e.filter(e=>!e.startsWith("workspace:")),l=!!i&&o in i,d=!!a&&o in a,p=o in Ae;let h;if(l)h=c(i[o]);else if(d)h=c(a[o]);else if(p)h=Ae[o];else{const e=s?.workspace?.defaultRole;h=e&&e in Ae?Ae[e]:[]}const f=new Set(h),g=l?u(i[o]):[],w=r?.[o]?u(r[o]):[],y=l?g:w;for(const e of y)f.add(e);return function(e,t,n){if(!n?.workspace)return;const{canInviteMembers:s}=n.workspace;(!1===s||"admin-only"===s&&"admin"!==t)&&e.delete(Ie.WORKSPACE_MEMBERS_INVITE)}(f,o,s),f}function We(e,t){const n=Fe(t);return Array.isArray(e)?e.every(e=>n.has(e)):n.has(e)}const Oe="\n// BuildBase Push Notification Service Worker\n// Place this file in your app's public directory (e.g. public/push-sw.js)\n\nself.addEventListener('push', function(event) {\n if (!event.data) return;\n\n try {\n const payload = event.data.json();\n const title = payload.title || 'Notification';\n const options = {\n body: payload.body || '',\n icon: payload.icon || undefined,\n badge: payload.icon || undefined,\n data: { url: payload.url, ...(payload.data || {}) },\n tag: 'buildbase-push-' + Date.now(),\n };\n\n event.waitUntil(\n self.registration.showNotification(title, options)\n );\n } catch (e) {\n console.error('[PushSW] Failed to show notification:', e);\n }\n});\n\nself.addEventListener('notificationclick', function(event) {\n event.notification.close();\n\n const url = event.notification.data && event.notification.data.url;\n if (url) {\n event.waitUntil(\n clients.matchAll({ type: 'window', includeUncontrolled: true }).then(function(clientList) {\n for (let i = 0; i < clientList.length; i++) {\n const client = clientList[i];\n if (client.url === url && 'focus' in client) {\n return client.focus();\n }\n }\n if (clients.openWindow) {\n return clients.openWindow(url);\n }\n })\n );\n }\n});\n";var Ne;!function(e){e.loading="loading",e.redirecting="redirecting",e.authenticated="authenticated",e.unauthenticated="unauthenticated",e.authenticating="authenticating"}(Ne||(Ne={}));const Je=new Uint32Array([1116352408,1899447441,3049323471,3921009573,961987163,1508970993,2453635748,2870763221,3624381080,310598401,607225278,1426881987,1925078388,2162078206,2614888103,3248222580,3835390401,4022224774,264347078,604807628,770255983,1249150122,1555081692,1996064986,2554220882,2821834349,2952996808,3210313671,3336571891,3584528711,113926993,338241895,666307205,773529912,1294757372,1396182291,1695183700,1986661051,2177026350,2456956037,2730485921,2820302411,3259730800,3345764771,3516065817,3600352804,4094571909,275423344,430227734,506948616,659060556,883997877,958139571,1322822218,1537002063,1747873779,1955562222,2024104815,2227730452,2361852424,2428436474,2756734187,3204031479,3329325298]),Le=(e,t)=>e>>>t|e<<32-t;function Be(e){let t=1779033703,n=3144134277,s=1013904242,r=2773480762,o=1359893119,i=2600822924,a=528734635,c=1541459225;const u=e.length,l=u+1,d=l+(56-l%64+64)%64+8,p=new Uint8Array(d);p.set(e,0),p[u]=128;const h=8*u,f=Math.floor(h/4294967296),g=h>>>0;p[d-8]=f>>>24&255,p[d-7]=f>>>16&255,p[d-6]=f>>>8&255,p[d-5]=255&f,p[d-4]=g>>>24&255,p[d-3]=g>>>16&255,p[d-2]=g>>>8&255,p[d-1]=255&g;const w=new Uint32Array(64);for(let e=0;e<d;e+=64){for(let t=0;t<16;t++){const n=e+4*t;w[t]=p[n]<<24|p[n+1]<<16|p[n+2]<<8|p[n+3]}for(let e=16;e<64;e++){const t=Le(w[e-15],7)^Le(w[e-15],18)^w[e-15]>>>3,n=Le(w[e-2],17)^Le(w[e-2],19)^w[e-2]>>>10;w[e]=w[e-16]+t+w[e-7]+n>>>0}let u=t,l=n,d=s,h=r,f=o,g=i,y=a,m=c;for(let e=0;e<64;e++){const t=m+(Le(f,6)^Le(f,11)^Le(f,25))+(f&g^~f&y)+Je[e]+w[e]>>>0,n=u&l^u&d^l&d;m=y,y=g,g=f,f=h+t>>>0,h=d,d=l,l=u,u=t+((Le(u,2)^Le(u,13)^Le(u,22))+n>>>0)>>>0}t=t+u>>>0,n=n+l>>>0,s=s+d>>>0,r=r+h>>>0,o=o+f>>>0,i=i+g>>>0,a=a+y>>>0,c=c+m>>>0}const y=new Uint8Array(32),m=[t,n,s,r,o,i,a,c];for(let e=0;e<8;e++)y[4*e]=m[e]>>>24&255,y[4*e+1]=m[e]>>>16&255,y[4*e+2]=m[e]>>>8&255,y[4*e+3]=255&m[e];return y}function Me(e){return(new TextEncoder).encode(e)}function je(e,t){let n=e;n.length>64&&(n=Be(n));const s=new Uint8Array(64),r=new Uint8Array(64);for(let e=0;e<64;e++){const t=e<n.length?n[e]:0;s[e]=54^t,r[e]=92^t}const o=Be(qe(s,t));return Be(qe(r,o))}function De(e,t){if(e.length!==t.length)return!1;let n=0;for(let s=0;s<e.length;s++)n|=e[s]^t[s];return 0===n}function qe(e,t){const n=new Uint8Array(e.length+t.length);return n.set(e,0),n.set(t,e.length),n}function ze(e){const{body:t,signature:n,timestamp:s,secret:r,maxAgeSeconds:o=300}=e;if(!(n&&s&&r&&t))return!1;const i="sha256=";if(!n.startsWith(i))return!1;const a=n.slice(7);if(o>0){const e=parseInt(s,10);if(isNaN(e))return!1;if(Math.abs(Math.floor(Date.now()/1e3)-e)>o)return!1}const c=function(e){if(e.length%2!=0)return null;const t=new Uint8Array(e.length/2);for(let n=0;n<t.length;n++){const s=parseInt(e.slice(2*n,2*n+2),16);if(Number.isNaN(s))return null;t[n]=s}return t}(a);if(!c)return!1;const u=je(Me(r),Me(`${s}.${t}`));return c.length===u.length&&De(c,u)}function Ke(e){if(!ze(e))return null;try{return JSON.parse(e.body)}catch{return null}}const Ve=300,Ge="/.well-known/oauth-protected-resource",He="/.well-known/agent-skills",Qe="/.well-known/api-catalog",Ye="/.well-known/mcp/server-card.json",Ze="application/json",Xe="application/linkset+json",et="text/markdown; charset=utf-8",tt="text/plain; charset=utf-8",nt=["GPTBot","OAI-SearchBot","ChatGPT-User","ClaudeBot","Claude-User","Claude-SearchBot","PerplexityBot","Perplexity-User","Google-Extended","Applebot-Extended","CCBot","Bytespider","meta-externalagent","Amazonbot"];function st(e){return e.replace(/\/+$/,"")}function rt(e){return`public, max-age=${e}, s-maxage=${e}`}function ot(e){return"sha256:"+function(e){let t="";for(let n=0;n<e.length;n++)t+=e[n].toString(16).padStart(2,"0");return t}(Be(Me(e)))}const it=new Map;async function at(e,t,n,s){if(!s||s<=0)return e(t,n);const r=new AbortController,o=setTimeout(()=>r.abort(),s);try{return await e(t,{...n,signal:r.signal})}finally{clearTimeout(o)}}async function ct(e){const t=e.cacheTtlSeconds??Ve,n=`${st(e.serverUrl)}::${e.orgId}`,s=it.get(n);if(s&&s.expiresAt>Date.now())return s.value;const r=e.fetch??fetch,o=`${st(e.serverUrl)}/api/v1/public/${e.orgId}/agent-readiness`;let i={enabled:!1};try{const t=await at(r,o,{headers:{Accept:Ze}},e.fetchTimeoutMs??5e3);if(t.ok){const e=await t.json();e&&"object"==typeof e&&(i=e)}}catch{}return it.set(n,{value:i,expiresAt:Date.now()+1e3*t}),i}const ut=new Map;function lt(){it.clear(),ut.clear()}function dt(e,t){const n=st(e.siteUrl),s={llms_txt:"/llms.txt",sitemap:"/sitemap.xml",robots:"/robots.txt",oauth_protected_resource:Ge};t.authorizationServer?.metadataUrl&&(s.oauth_authorization_server=t.authorizationServer.metadataUrl,s.openid_configuration="/.well-known/openid-configuration"),(t.authorizationServer||e.authMd)&&(s.auth="/auth.md"),e.skills?.length&&(s.agent_skills=`${He}/index.json`),e.apiCatalog?.length&&(s.api_catalog=Qe),e.mcpServerCard&&(s.mcp_server_card=Ye);return vt({schema_version:"1.0",name:e.site.name,...e.site.description?{description:e.site.description}:{},url:n,...e.site.documentationUrl?{documentation_url:e.site.documentationUrl}:{},provider:e.site.provider??{name:e.site.name,url:n},capabilities:s,...e.site.contactEmail?{contact:{email:e.site.contactEmail}}:{}},e)}function pt(e){let t="/";try{t=new URL(e).pathname}catch{t=e.startsWith("/")?e:`/${e}`}const n="/"===t?"":t.replace(/\/+$/,"");return Ge+n}function ht(e,t){const n=t.protectedResources??[];if(!n.length)return null;const s=e.replace(/\/+$/,"")||Ge,r=`${st(t.serverUrl)}/org/${t.orgId}`,o=n.map(e=>{const n=e.resource??st(t.siteUrl);return{path:pt(n),metadata:{resource:n,authorization_servers:[r],bearer_methods_supported:e.bearerMethods??["header"],...e.scopes?.length?{scopes_supported:e.scopes}:{},...e.documentationUrl?{resource_documentation:e.documentationUrl}:{}}}}),i=o.find(e=>e.path===s);return i?vt(i.metadata,t):s===Ge&&1===o.length?vt(o[0].metadata,t):null}function ft(e){const t=e.skills??[];if(!t.length)return null;const n=st(e.siteUrl);return vt({$schema:"https://schemas.agentskills.io/discovery/0.2.0/schema.json",skills:t.map(e=>({name:e.name,type:e.type??"skill-md",description:e.description,url:`${n}${gt(e)}`,digest:ot(e.content)}))},e)}function gt(e){return e.path??`${He}/${e.name}/SKILL.md`}function wt(e,t){const n=(t.skills??[]).find(t=>gt(t)===e);return n?{status:200,contentType:"text/markdown; charset=utf-8",body:n.content,cacheControl:rt(t.cacheTtlSeconds??Ve)}:null}function yt(e){if(!e.security)return null;const t=(Array.isArray(e.security.contact)?e.security.contact:[e.security.contact]).map(e=>`Contact: ${e}`);return e.security.expires&&t.push(`Expires: ${e.security.expires}`),e.security.policy&&t.push(`Policy: ${e.security.policy}`),{status:200,contentType:tt,body:t.join("\n")+"\n",cacheControl:rt(e.cacheTtlSeconds??Ve)}}function mt(e){return e.llmsTxt?{status:200,contentType:tt,body:e.llmsTxt,cacheControl:rt(e.cacheTtlSeconds??Ve)}:null}function kt(e){const t=e.apiCatalog??[];if(!t.length)return null;const n=t.map(e=>({anchor:e.anchor,...e.title?{title:e.title}:{},...e.serviceDesc?{"service-desc":[{href:e.serviceDesc}]}:{},...e.serviceDoc?{"service-doc":[{href:e.serviceDoc}]}:{},...e.status?{status:[{href:e.status}]}:{}}));return{status:200,contentType:Xe,body:JSON.stringify({linkset:n},null,2),cacheControl:rt(e.cacheTtlSeconds??Ve)}}function bt(e){const t=e.mcpServerCard;return t?vt({schema_version:"2024-11-05",serverInfo:{name:t.name,version:t.version},...t.description?{description:t.description}:{},transport:{type:t.transport??"streamable-http",endpoint:t.endpoint},capabilities:t.capabilities??{tools:{}},...t.documentationUrl?{documentation_url:t.documentationUrl}:{}},e):null}function St(e,t){const n=rt(e.cacheTtlSeconds??Ve);if(e.authMd)return{status:200,contentType:et,body:e.authMd,cacheControl:n};const s=t.authorizationServer;if(!s)return null;const r=`# Agent Authentication\n\n${e.site.name} supports AI-agent access via OAuth 2.0 (authorization code + PKCE).\n\n## Authorization server\n- Issuer: \`${s.issuer}\`\n- Metadata (RFC 8414): ${s.metadataUrl}\n\nFetch the metadata document above for the \`authorization_endpoint\`, \`token_endpoint\`, supported grant types / PKCE methods, and — when the app allows it — the dynamic client \`registration_endpoint\` (RFC 7591).\n\n## Protected resources (RFC 9728)\nSee \`/.well-known/oauth-protected-resource\`, which lists the resource, its supported scopes, and the authorization server(s) that can issue tokens for it.\n\n## How an agent authenticates\n1. Discover this document and \`/.well-known/oauth-protected-resource\`.\n2. Fetch the authorization-server metadata for the endpoints.\n3. Register a client (dynamic registration) or use a pre-issued client_id.\n4. Run the authorization-code flow with PKCE (S256), requesting the scopes and target \`resource\`.\n5. Exchange the code for an access token and call the API with \`Authorization: Bearer <token>\`.\n\nDocumentation: ${e.site.documentationUrl??e.siteUrl}\n`;return{status:200,contentType:et,body:r,cacheControl:n}}function vt(e,t){return{status:200,contentType:Ze,body:JSON.stringify(e,null,2),cacheControl:rt(t.cacheTtlSeconds??Ve)}}function Et(e){return String(e).replace(/[\x00-\x1f\x7f]/g,"")}function $t(e,t){const n=(Array.isArray(e.userAgent)?e.userAgent:[e.userAgent]).map(e=>`User-agent: ${Et(e)}`);if(t){const e=[...void 0!==t.search?["search="+(t.search?"yes":"no")]:[],...void 0!==t.aiInput?["ai-input="+(t.aiInput?"yes":"no")]:[],...void 0!==t.aiTrain?["ai-train="+(t.aiTrain?"yes":"no")]:[]];e.length&&n.push(`Content-Signal: ${e.join(", ")}`)}for(const t of e.allow??[])n.push(`Allow: ${Et(t)}`);for(const t of e.disallow??[])n.push(`Disallow: ${Et(t)}`);return void 0!==e.crawlDelay&&n.push(`Crawl-delay: ${Et(e.crawlDelay)}`),n.join("\n")}function Pt(e){const t=e.robots??{},n=st(e.siteUrl),s=t.policies??[{userAgent:"*",allow:["/"]}],r=t.aiBots??"allow",o="allow"===r?[{userAgent:[...nt],allow:["/"]}]:"deny"===r?[{userAgent:[...nt],disallow:["/"]}]:r,i=t.sitemaps??(e.sitemap?[`${n}/sitemap.xml`]:[]),a=[`# robots.txt — agent-ready. See ${n}/llms.txt and ${n}/.well-known/agent.json`,...s.map((e,n)=>$t(e,0===n?t.contentSignals:void 0)),...o.map(e=>$t(e)),...i.length?[i.map(e=>`Sitemap: ${Et(e)}`).join("\n")]:[]];return{status:200,contentType:tt,body:a.join("\n\n")+"\n",cacheControl:rt(e.cacheTtlSeconds??Ve)}}function Rt(e){const t="number"==typeof e&&Number.isFinite(e)?e:.5;return String(Math.min(1,Math.max(0,t)))}function Ut(e){return e.replace(/&/g,"&").replace(/</g,"<").replace(/>/g,">").replace(/"/g,""").replace(/'/g,"'")}function Ct(e){const t=e.sitemap?.urls;if(!t?.length)return null;const n=st(e.siteUrl);return{status:200,contentType:"application/xml; charset=utf-8",body:'<?xml version="1.0" encoding="UTF-8"?>\n<urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9">\n'+t.map(e=>{const t="string"==typeof e?{loc:e}:e;return` <url>\n${[` <loc>${Ut(/^https?:\/\//.test(t.loc)?t.loc:`${n}${t.loc.startsWith("/")?"":"/"}${t.loc}`)}</loc>`,...t.lastmod?[` <lastmod>${Ut(t.lastmod)}</lastmod>`]:[],...t.changefreq?[` <changefreq>${Ut(String(t.changefreq))}</changefreq>`]:[],...void 0!==t.priority?[` <priority>${Rt(t.priority)}</priority>`]:[]].join("\n")}\n </url>`}).join("\n")+"\n</urlset>\n",cacheControl:rt(e.cacheTtlSeconds??Ve)}}function _t(e){if(!e)return!1;let t=0,n=0;for(const s of e.split(",")){const[e,...r]=s.trim().split(";"),o=e.trim().toLowerCase();let i=1;for(const e of r){const[t,n]=e.split("=").map(e=>e.trim());if("q"===t){const e=Number(n);Number.isNaN(e)||(i=e)}}"text/markdown"===o||"text/x-markdown"===o?t=Math.max(t,i):"text/html"!==o&&"text/*"!==o&&"*/*"!==o||(n=Math.max(n,i))}return t>0&&t>=n}function It(e,t,n){const s=_t(e);return{status:200,contentType:s?et:"text/html; charset=utf-8",body:s?t.markdown:t.html,cacheControl:rt(n?.cacheTtlSeconds??Ve),vary:"Accept"}}function xt(e){const t=st(e.siteUrl),n=[`<${t}/llms.txt>; rel="describedby"; type="text/plain"`,`<${t}/.well-known/agent.json>; rel="describedby"; type="application/json"`];if(e.sitemap||e.robots?.sitemaps?.length){const s=e.robots?.sitemaps?.[0]??`${t}/sitemap.xml`;n.push(`<${s}>; rel="sitemap"; type="application/xml"`)}return e.apiCatalog?.length&&n.push(`<${t}${Qe}>; rel="api-catalog"; type="${Xe}"`),e.mcpServerCard&&n.push(`<${t}${Ye}>; rel="mcp-server"; type="application/json"`),n.join(", ")}async function At(e,t){const n=e.replace(/\/+$/,"")||e;if("/.well-known/agent.json"===n){return dt(t,await ct(t))}if("/.well-known/security.txt"===n)return yt(t);if(n===`${He}/index.json`)return ft(t);if(n.startsWith(`${He}/`)&&n.endsWith("SKILL.md"))return wt(n,t);if("/.well-known/oauth-authorization-server"===n||"/.well-known/openid-configuration"===n){const e=(await ct(t)).authorizationServer;if(!e?.metadataUrl)return null;const n=await async function(e,t){const n=t.cacheTtlSeconds??Ve,s=ut.get(e);if(s&&s.expiresAt>Date.now())return s.value;const r=t.fetch??fetch;let o=null;try{const n=await at(r,e,{headers:{Accept:Ze}},t.fetchTimeoutMs??5e3);if(n.ok){const e=await n.json();e&&"object"==typeof e&&(o=e)}}catch{}return ut.set(e,{value:o,expiresAt:Date.now()+1e3*n}),o}(e.metadataUrl,t);return vt(n?n:{...e.issuer?{issuer:e.issuer}:{},oauth_authorization_server_metadata:e.metadataUrl},t)}return n===Qe?kt(t):n===Ye?bt(t):n.startsWith(Ge)?ht(n,t):null}async function Tt(e,t){const n=e.replace(/\/+$/,"")||e;return"/robots.txt"===n?Pt(t):"/sitemap.xml"===n?Ct(t):"/llms.txt"===n?mt(t):"/auth.md"===n?St(t,await ct(t)):"/security.txt"===n?yt(t):n.startsWith("/.well-known")?At(n,t):null}function Ft(e){const t=globalThis.navigator;return!!t?.modelContext?.provideContext&&(t.modelContext.provideContext({tools:e}),!0)}class Wt extends Error{constructor(e,t){super(t),this.name="AppBridgeError",this.code=e}}function Ot(e){const t=e.replace(/-/g,"+").replace(/_/g,"/"),n=t.length%4==0?"":"=".repeat(4-t.length%4),s=atob(t+n),r=new Uint8Array(s.length);for(let e=0;e<s.length;e++)r[e]=s.charCodeAt(e);return r}function Nt(e){return JSON.parse((new TextDecoder).decode(Ot(e)))}function Jt(e,t,n={}){const s="number"==typeof n?{clockToleranceSec:n}:n,r=s.clockToleranceSec??60,o=s.requireExp??!0;if(!e||!t)throw new Wt("invalid_token","Missing token or client secret");const i=e.split(".");if(3!==i.length)throw new Wt("invalid_token","Malformed JWT");const[a,c,u]=i,l=je(Me(t),Me(`${a}.${c}`));let d,p,h;try{d=Ot(u)}catch{throw new Wt("invalid_signature","Unreadable JWT signature")}if(!De(l,d))throw new Wt("invalid_signature","JWT signature verification failed");try{p=Nt(a),h=Nt(c)}catch{throw new Wt("invalid_token","Unreadable JWT segments")}if("HS256"!==p.alg)throw new Wt("invalid_algorithm",`Unexpected JWT alg: ${String(p.alg)}`);const f=Math.floor(Date.now()/1e3);if(o&&"number"!=typeof h.exp)throw new Wt("invalid_token","JWT is missing a numeric exp claim");if("number"==typeof h.exp&&f>h.exp+r)throw new Wt("token_expired","JWT has expired");if("number"==typeof h.nbf&&f+r<h.nbf)throw new Wt("token_not_yet_valid","JWT is not yet valid");if(void 0!==s.issuer&&h.iss!==s.issuer)throw new Wt("invalid_issuer","JWT issuer mismatch");if(void 0!==s.audience){const e=h.aud;if(!(Array.isArray(e)?e.includes(s.audience):e===s.audience))throw new Wt("invalid_audience","JWT audience mismatch")}return h}function Lt(e){if(!e)return null;const t=/^Bearer\s+(.+)$/i.exec(e.trim());return t?t[1].trim():null}function Bt(e){let t="";for(let n=0;n<e.length;n++)t+=String.fromCharCode(e[n]);return btoa(t).replace(/\+/g,"-").replace(/\//g,"_").replace(/=+$/,"")}function Mt(e){return Bt(Me(JSON.stringify(e)))}function jt(e,t,n){if(!t)throw new Wt("invalid_secret","Missing signing secret");const s=Math.floor(Date.now()/1e3),r={iat:s,exp:s+(n?.expiresInSec??3600),...e},o=`${Mt({alg:"HS256",typ:"JWT"})}.${Mt(r)}`;return`${o}.${Bt(je(Me(t),Me(o)))}`}function Dt(e){const t=Lt(e.authorization);if(!t)throw new Wt("invalid_token","Missing Bearer token");return Jt(t,e.clientSecret,e.clockToleranceSec)}function qt(e){const t=Lt(e.authorization);if(!t)throw new Wt("invalid_token","Missing Bearer token");return Jt(t,e.clientSecret,e.clockToleranceSec)}function zt(e){return{success:!0,token:e.token,message:e.message??"ok",..."number"==typeof e.expiresIn?{expiresIn:e.expiresIn}:{}}}function Kt(e){return{success:!1,token:"",message:e}}async function Vt(e){let t;try{t=Dt(e)}catch(e){return{status:401,body:Kt(e instanceof Wt?e.code:"invalid_token")}}return{status:200,body:zt(await e.mintToken(t))}}async function Gt(e){let t;try{t=qt(e)}catch(e){return{status:401,body:{success:!1,message:e instanceof Wt?e.code:"invalid_token"}}}return await e.onRevoke(t),{status:200,body:{success:!0}}}function Ht(e){return e.replace(/[\x00-\x1f\x7f]/g,"").replace(/([\\"])/g,"\\$1")}function Qt(e){const t=[`Bearer resource_metadata="${Ht(e.resourceMetadataUrl)}"`];return e.error&&t.push(`error="${Ht(e.error)}"`),e.errorDescription&&t.push(`error_description="${Ht(e.errorDescription)}"`),{status:401,headers:{"WWW-Authenticate":t.join(", "),"Content-Type":"application/json"},body:JSON.stringify({error:e.error??"invalid_token"})}}function Yt(e){const{serverUrl:t,orgId:n,version:s="v1",getSessionId:r,timeout:o,maxRetries:i,debug:a,headers:c,onError:u,fetch:l}=e;if(!t)throw new Error("BuildBase: serverUrl is required");if(!n)throw new Error("BuildBase: orgId is required");const d={...void 0!==o&&{timeout:o},...void 0!==i&&{maxRetries:i},...void 0!==a&&{debug:a},...c&&{headers:c},...u&&{onError:u},...l&&{fetch:l}},p=e=>{const r={serverUrl:t,version:s,orgId:n,sessionId:e,...d};return{workspace:new S(r),user:new b(r),settings:new k(r),push:new m(r)}},h=new S({serverUrl:t,version:s,orgId:n,...d}),f=e=>({workspace:{list:async()=>(await e()).workspace.getWorkspaces(),get:async t=>(await e()).workspace.getWorkspace(t),create:async t=>(await e()).workspace.createWorkspace(t),update:async(t,n)=>(await e()).workspace.updateWorkspace(t,n),delete:async t=>(await e()).workspace.deleteWorkspace(t)},users:{list:async t=>(await e()).workspace.getWorkspaceUsers(t),invite:async(t,n,s)=>(await e()).workspace.addUser(t,{email:n,role:s}),remove:async(t,n)=>(await e()).workspace.removeUser(t,n),updateRole:async(t,n,s)=>(await e()).workspace.updateUser(t,n,{role:s}),getProfile:async()=>(await e()).workspace.getProfile(),updateProfile:async t=>(await e()).workspace.updateUserProfile(t)},subscription:{get:async t=>(await e()).workspace.getCurrentSubscription(t),checkout:async(t,n)=>(await e()).workspace.createCheckoutSession(t,n),update:async(t,n)=>(await e()).workspace.updateSubscription(t,n),cancel:async t=>(await e()).workspace.cancelSubscriptionAtPeriodEnd(t),resume:async t=>(await e()).workspace.resumeSubscription(t),getBillingPortalUrl:async(t,n)=>(await e()).workspace.createBillingPortalSession(t,n)},plans:{getGroup:async t=>(await e()).workspace.getPlanGroup(t),getVersions:async t=>(await e()).workspace.getPlanGroupVersions(t),getPublic:e=>h.getPublicPlans(e),getVersion:e=>h.getPlanGroupVersion(e)},invoices:{list:async(t,n,s)=>(await e()).workspace.listInvoices(t,n,s),get:async(t,n)=>(await e()).workspace.getInvoice(t,n)},usage:{record:async(t,n)=>(await e()).workspace.recordUsage(t,n),recordBatch:async(t,n)=>(await e()).workspace.recordUsageBatch(t,n),getQuota:async(t,n)=>(await e()).workspace.getQuotaUsageStatus(t,n),getAll:async t=>(await e()).workspace.getAllQuotaUsage(t),getLogs:async(t,n)=>(await e()).workspace.getUsageLogs(t,n)},settings:{get:async()=>(await e()).settings.getSettings()},features:{list:async()=>(await e()).workspace.getFeatures(),update:async(t,n,s)=>(await e()).workspace.updateFeature(t,n,s)},notification:{send:async(t,n,s,r)=>(await e()).workspace.sendNotification(t,n,s,r)},credits:{getBalance:async t=>(await e()).workspace.getCreditBalance(t),consume:async(t,n)=>(await e()).workspace.consumeCredits(t,n),purchase:async(t,n)=>(await e()).workspace.purchaseCredits(t,n),getPackages:async t=>(await e()).workspace.getCreditPackages(t),getTransactions:async(t,n)=>(await e()).workspace.getCreditTransactions(t,n),getBuckets:async(t,n)=>(await e()).workspace.getCreditBuckets(t,n),getExpiring:async(t,n)=>(await e()).workspace.getExpiringCredits(t,n),getPublicPackages:()=>h.getPublicCreditPackages()},permissions:{check:async(t,n,s)=>{const r=await e(),[o,i,a]=await Promise.all([r.workspace.getWorkspace(t),r.settings.getSettings(),r.workspace.getWorkspaceUsers(t)]),c=a.find(e=>("string"==typeof e.user?e.user:e.user._id)===n);return We(s,{userId:n,workspaceRole:c?.role??null,workspace:o,settings:i})},resolve:async(t,n)=>{const s=await e(),[r,o,i]=await Promise.all([s.workspace.getWorkspace(t),s.settings.getSettings(),s.workspace.getWorkspaceUsers(t)]),a=i.find(e=>("string"==typeof e.user?e.user:e.user._id)===n);return Fe({userId:n,workspaceRole:a?.role??null,workspace:r,settings:o})}}}),g=f(async()=>p(await(async()=>{if(!r)throw new Error("BuildBase: getSessionId callback is required for authenticated calls. Pass it in BuildBase({ getSessionId: ... }) or use withSession(id) / client.forSession(id).");const e=await r();if(!e)throw new Error("BuildBase: Not authenticated (getSessionId returned null)");return e})()));return{auth:async()=>{if(!r)return null;const e=await r();return e?{sessionId:e}:null},withSession:e=>{const t=p(e);return f(async()=>t)},client:{forSession:p},...g}}export{nt as AI_BOT_USER_AGENTS,v as ApiVersion,Wt as AppBridgeError,g as AuthApi,Ne as AuthStatus,x as BBAction,T as BBScreen,A as BBStatus,I as BB_PARAM,f as BaseApi,y as BetaForm,ae as BillingIntervals,Yt as BuildBase,K as CURRENCY_DISPLAY,V as CURRENCY_FLAG,pe as CreditBucketSource,he as CreditBucketStatus,fe as CreditTransactionType,Ae as DEFAULT_ROLE_PERMISSIONS,de as DunningState,$ as EventEmitter,ue as InvoiceStatuses,Q as PLAN_CURRENCY_CODES,Y as PLAN_CURRENCY_OPTIONS,Oe as PUSH_SERVICE_WORKER_SCRIPT,Ie as Permission,m as PushApi,E as SDKEvent,k as SettingsApi,le as SubscriptionItemType,ce as SubscriptionStatus,b as UserApi,S as WorkspaceApi,Kt as appTokenFailure,zt as appTokenSuccess,Qt as bearerChallenge,dt as buildAgentCard,ft as buildAgentSkillsIndex,kt as buildApiCatalog,St as buildAuthMd,xt as buildDiscoveryLinkHeader,mt as buildLlmsTxt,bt as buildMcpServerCard,ht as buildProtectedResourceMetadata,Pt as buildRobotsTxt,yt as buildSecurityTxt,Ct as buildSitemap,wt as buildSkillMd,Pe as calculateBillableSeats,Re as calculateSeatOverageCents,Ue as calculateTotalSubscriptionCents,J as cleanBBParams,lt as clearAgentReadinessCache,z as clearAuthIntent,q as consumeAuthIntent,F as createBBUrl,W as createCheckoutRedirectUrls,O as createCreditPurchaseRedirectUrls,Yt as default,P as eventEmitter,Lt as extractBearerToken,ct as fetchAgentReadiness,Z as formatCents,ee as formatOverageRate,te as formatOverageRateWithLabel,se as formatQuotaIncludedOverage,ie as formatQuotaWithPrice,be as getAvailableCurrenciesFromPlans,we as getBasePriceCents,ve as getBillingIntervalAndCurrencyFromPriceId,G as getCurrencyFlag,H as getCurrencySymbol,ke as getDisplayCurrency,$e as getPerSeatPriceCents,ge as getPricingVariant,re as getQuotaDisplayValue,Se as getQuotaDisplayWithVariant,me as getQuotaOverageCents,ne as getQuotaUnitLabelFromName,Ee as getSeatPricing,ye as getStripePriceIdForInterval,Gt as handleAppRevokeRequest,Vt as handleAppTokenRequest,We as hasPermission,U as invalidateCreditBalance,C as invalidateQuotaUsage,_ as invalidateSubscription,It as negotiateMarkdown,Ke as parseWebhookEvent,Ft as provideWebMcpTools,N as readBBParams,Tt as resolveAgentPath,Ce as resolveMaxUsers,Fe as resolvePermissions,At as resolveWellKnown,B as safeRedirect,D as saveAuthIntent,ot as sha256Digest,jt as signClientJwt,_e as validateInvite,L as validateRedirectUrl,qt as verifyAppRevokeRequest,Dt as verifyAppTokenRequest,Jt as verifyClientJwt,ze as verifyWebhookSignature,_t as wantsMarkdown};
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
"use strict";var e=require("zod");const t=new Uint32Array([1116352408,1899447441,3049323471,3921009573,961987163,1508970993,2453635748,2870763221,3624381080,310598401,607225278,1426881987,1925078388,2162078206,2614888103,3248222580,3835390401,4022224774,264347078,604807628,770255983,1249150122,1555081692,1996064986,2554220882,2821834349,2952996808,3210313671,3336571891,3584528711,113926993,338241895,666307205,773529912,1294757372,1396182291,1695183700,1986661051,2177026350,2456956037,2730485921,2820302411,3259730800,3345764771,3516065817,3600352804,4094571909,275423344,430227734,506948616,659060556,883997877,958139571,1322822218,1537002063,1747873779,1955562222,2024104815,2227730452,2361852424,2428436474,2756734187,3204031479,3329325298]),n=(e,t)=>e>>>t|e<<32-t;function r(e){let r=1779033703,o=3144134277,i=1013904242,a=2773480762,s=1359893119,c=2600822924,u=528734635,p=1541459225;const d=e.length,l=d+1,m=l+(56-l%64+64)%64+8,g=new Uint8Array(m);g.set(e,0),g[d]=128;const b=8*d,h=Math.floor(b/4294967296),f=b>>>0;g[m-8]=h>>>24&255,g[m-7]=h>>>16&255,g[m-6]=h>>>8&255,g[m-5]=255&h,g[m-4]=f>>>24&255,g[m-3]=f>>>16&255,g[m-2]=f>>>8&255,g[m-1]=255&f;const w=new Uint32Array(64);for(let e=0;e<m;e+=64){for(let t=0;t<16;t++){const n=e+4*t;w[t]=g[n]<<24|g[n+1]<<16|g[n+2]<<8|g[n+3]}for(let e=16;e<64;e++){const t=n(w[e-15],7)^n(w[e-15],18)^w[e-15]>>>3,r=n(w[e-2],17)^n(w[e-2],19)^w[e-2]>>>10;w[e]=w[e-16]+t+w[e-7]+r>>>0}let d=r,l=o,m=i,b=a,h=s,f=c,y=u,k=p;for(let e=0;e<64;e++){const r=k+(n(h,6)^n(h,11)^n(h,25))+(h&f^~h&y)+t[e]+w[e]>>>0,o=d&l^d&m^l&m;k=y,y=f,f=h,h=b+r>>>0,b=m,m=l,l=d,d=r+((n(d,2)^n(d,13)^n(d,22))+o>>>0)>>>0}r=r+d>>>0,o=o+l>>>0,i=i+m>>>0,a=a+b>>>0,s=s+h>>>0,c=c+f>>>0,u=u+y>>>0,p=p+k>>>0}const y=new Uint8Array(32),k=[r,o,i,a,s,c,u,p];for(let e=0;e<8;e++)y[4*e]=k[e]>>>24&255,y[4*e+1]=k[e]>>>16&255,y[4*e+2]=k[e]>>>8&255,y[4*e+3]=255&k[e];return y}function o(e){return(new TextEncoder).encode(e)}function i(e,t){let n=e;n.length>64&&(n=r(n));const o=new Uint8Array(64),i=new Uint8Array(64);for(let e=0;e<64;e++){const t=e<n.length?n[e]:0;o[e]=54^t,i[e]=92^t}const s=r(a(o,t));return r(a(i,s))}function a(e,t){const n=new Uint8Array(e.length+t.length);return n.set(e,0),n.set(t,e.length),n}class s extends Error{constructor(e,t){super(t),this.name="AppBridgeError",this.code=e}}function c(e){const t=e.replace(/-/g,"+").replace(/_/g,"/"),n=t.length%4==0?"":"=".repeat(4-t.length%4),r=atob(t+n),o=new Uint8Array(r.length);for(let e=0;e<r.length;e++)o[e]=r.charCodeAt(e);return o}function u(e){return JSON.parse((new TextDecoder).decode(c(e)))}function p(e){if(!e)return null;const t=/^Bearer\s+(.+)$/i.exec(e.trim());return t?t[1].trim():null}function d(e){let t="";for(let n=0;n<e.length;n++)t+=String.fromCharCode(e[n]);return btoa(t).replace(/\+/g,"-").replace(/\//g,"_").replace(/=+$/,"")}function l(e){return d(o(JSON.stringify(e)))}function m(e){return e.replace(/[\x00-\x1f\x7f]/g,"").replace(/([\\"])/g,"\\$1")}function g(e){const t=[`Bearer resource_metadata="${m(e.resourceMetadataUrl)}"`];return e.error&&t.push(`error="${m(e.error)}"`),e.errorDescription&&t.push(`error_description="${m(e.errorDescription)}"`),{status:401,headers:{"WWW-Authenticate":t.join(", "),"Content-Type":"application/json"},body:JSON.stringify({error:e.error??"invalid_token"})}}const b=e.z.string().optional().describe("Workspace id. Omit to use the workspace bound to your token.");function h(e,t){const n=e.workspaceId??t.workspaceId;if(!n)throw new Error("workspaceId is required — call list_workspaces to find one.");return n}const f={readOnlyHint:!0},w=[{name:"list_workspaces",description:"List the authenticated user's workspaces (id, name, roles).",inputSchema:e.z.object({}),annotations:f,execute:(e,t)=>t.bb.workspace.list()},{name:"get_workspace",description:"Get one workspace: name, members, feature flags, quota snapshot.",inputSchema:e.z.object({workspaceId:b}),annotations:f,execute:(e,t)=>t.bb.workspace.get(h(e,t))},{name:"get_user_profile",description:"Get the authenticated user's profile.",inputSchema:e.z.object({}),annotations:f,execute:(e,t)=>t.bb.users.getProfile()},{name:"list_workspace_users",description:"List the members of a workspace with their roles.",inputSchema:e.z.object({workspaceId:b}),annotations:f,execute:(e,t)=>t.bb.users.list(h(e,t))},{name:"get_subscription",description:"Get a workspace's subscription: plan, status, interval, seats.",inputSchema:e.z.object({workspaceId:b}),annotations:f,execute:(e,t)=>t.bb.subscription.get(h(e,t))},{name:"get_plans",description:"Get the plan group available to a workspace (plans, prices, quotas).",inputSchema:e.z.object({workspaceId:b}),annotations:f,execute:(e,t)=>t.bb.plans.getGroup(h(e,t))},{name:"list_invoices",description:"List a workspace's invoices (newest first).",inputSchema:e.z.object({workspaceId:b,limit:e.z.number().int().min(1).max(100).optional().describe("Max invoices to return."),startingAfter:e.z.string().optional().describe("Invoice id to paginate after.")}),annotations:f,execute:(e,t)=>t.bb.invoices.list(h(e,t),e.limit,e.startingAfter)},{name:"get_quota_usage",description:"Get usage vs. limit for one quota in a workspace.",inputSchema:e.z.object({workspaceId:b,quotaSlug:e.z.string().describe('The quota slug, e.g. "api-calls".')}),annotations:f,execute:(e,t)=>t.bb.usage.getQuota(h(e,t),e.quotaSlug)},{name:"get_all_quota_usage",description:"Get usage vs. limit for every quota in a workspace.",inputSchema:e.z.object({workspaceId:b}),annotations:f,execute:(e,t)=>t.bb.usage.getAll(h(e,t))},{name:"get_credit_balance",description:"Get a workspace's prepaid credit balance.",inputSchema:e.z.object({workspaceId:b}),annotations:f,execute:(e,t)=>t.bb.credits.getBalance(h(e,t))},{name:"list_credit_transactions",description:"Get a workspace's credit transaction history (paginated).",inputSchema:e.z.object({workspaceId:b,limit:e.z.number().int().min(1).max(100).optional(),page:e.z.number().int().min(1).optional()}),annotations:f,execute:(e,t)=>t.bb.credits.getTransactions(h(e,t),{...void 0!==e.limit?{limit:e.limit}:{},...void 0!==e.page?{page:e.page}:{}})},{name:"check_feature_flag",description:"Check whether a feature flag is enabled for a workspace.",inputSchema:e.z.object({workspaceId:b,key:e.z.string().describe("The feature slug.")}),annotations:f,execute:async(e,t)=>{const n=h(e,t),r=await t.bb.workspace.get(n),o=r.features?.[e.key];if(void 0!==o)return{key:e.key,enabled:o,source:"workspace"};const i=(await t.bb.features.list()).find(t=>t.slug===e.key);if(!i)throw new Error(`Unknown feature flag: ${e.key}`);return{key:e.key,enabled:i.defaultValue,source:"default"}}},{name:"check_permission",description:"Check whether a user has permission(s) in a workspace.",inputSchema:e.z.object({workspaceId:b,permission:e.z.union([e.z.string(),e.z.array(e.z.string())]).describe("A permission (or list — all must hold), platform or app-defined."),userId:e.z.string().optional().describe("Defaults to the authenticated user.")}),annotations:f,execute:async(e,t)=>{const n=e.userId??t.auth.userId;if(!n)throw new Error("userId is required — the token carries no user identity.");const r=await t.bb.permissions.check(h(e,t),n,e.permission);return{userId:n,permission:e.permission,allowed:r}}},{name:"resolve_permissions",description:"List every permission a user holds in a workspace.",inputSchema:e.z.object({workspaceId:b,userId:e.z.string().optional().describe("Defaults to the authenticated user.")}),annotations:f,execute:async(e,t)=>{const n=e.userId??t.auth.userId;if(!n)throw new Error("userId is required — the token carries no user identity.");const r=await t.bb.permissions.resolve(h(e,t),n);return{userId:n,permissions:Array.from(r)}}},{name:"get_invoice",description:"Get one invoice by id.",inputSchema:e.z.object({workspaceId:b,invoiceId:e.z.string().describe("The invoice id.")}),annotations:f,execute:(e,t)=>t.bb.invoices.get(h(e,t),e.invoiceId)},{name:"get_plan_versions",description:"List the plan-group versions available to a workspace.",inputSchema:e.z.object({workspaceId:b}),annotations:f,execute:(e,t)=>t.bb.plans.getVersions(h(e,t))},{name:"get_public_plans",description:"Get a public plan group by slug (no workspace / auth needed).",inputSchema:e.z.object({slug:e.z.string().describe("The plan-group slug.")}),annotations:f,execute:(e,t)=>t.bb.plans.getPublic(e.slug)},{name:"get_plan_version",description:"Get one public plan-group version by id (no auth needed).",inputSchema:e.z.object({groupVersionId:e.z.string().describe("The plan-group version id.")}),annotations:f,execute:(e,t)=>t.bb.plans.getVersion(e.groupVersionId)},{name:"get_usage_logs",description:"Get a workspace's usage log entries (paginated, filterable).",inputSchema:e.z.object({workspaceId:b,quotaSlug:e.z.string().optional(),from:e.z.string().optional().describe("ISO date lower bound."),to:e.z.string().optional().describe("ISO date upper bound."),source:e.z.string().optional(),page:e.z.number().int().min(1).optional(),limit:e.z.number().int().min(1).max(100).optional()}),annotations:f,execute:(e,t)=>{const{workspaceId:n,...r}=e;return t.bb.usage.getLogs(h(e,t),r)}},{name:"get_settings",description:"Get the organization settings.",inputSchema:e.z.object({}),annotations:f,execute:(e,t)=>t.bb.settings.get()},{name:"get_credit_packages",description:"List the credit packages a workspace can purchase.",inputSchema:e.z.object({workspaceId:b}),annotations:f,execute:(e,t)=>t.bb.credits.getPackages(h(e,t))},{name:"get_credit_buckets",description:"Get a workspace's credit buckets (paginated).",inputSchema:e.z.object({workspaceId:b,status:e.z.string().optional(),source:e.z.string().optional(),page:e.z.number().int().min(1).optional(),limit:e.z.number().int().min(1).max(100).optional()}),annotations:f,execute:(e,t)=>{const{workspaceId:n,...r}=e;return t.bb.credits.getBuckets(h(e,t),r)}},{name:"get_expiring_credits",description:"Get credits expiring within N days (default 7).",inputSchema:e.z.object({workspaceId:b,days:e.z.number().int().min(1).optional()}),annotations:f,execute:(e,t)=>t.bb.credits.getExpiring(h(e,t),e.days)},{name:"get_public_credit_packages",description:"List credit packages publicly (no workspace / auth needed).",inputSchema:e.z.object({}),annotations:f,execute:(e,t)=>t.bb.credits.getPublicPackages()}],y=[{name:"record_usage",description:"Record quota usage for a workspace (metered billing).",inputSchema:e.z.object({workspaceId:b,quotaSlug:e.z.string().describe("The quota slug to record against."),quantity:e.z.number().positive().describe("Amount of usage to record."),idempotencyKey:e.z.string().optional().describe("Dedupe key for safe retries."),metadata:e.z.record(e.z.string(),e.z.unknown()).optional()}),annotations:{readOnlyHint:!1,destructiveHint:!1,idempotentHint:!1},execute:(e,t)=>t.bb.usage.record(h(e,t),{quotaSlug:e.quotaSlug,quantity:e.quantity,source:"mcp",...e.idempotencyKey?{idempotencyKey:e.idempotencyKey}:{},...e.metadata?{metadata:e.metadata}:{}})},{name:"consume_credits",description:"Consume prepaid credits from a workspace's balance.",inputSchema:e.z.object({workspaceId:b,amount:e.z.number().positive().describe("Credits to consume."),description:e.z.string().optional().describe("What the credits were spent on."),idempotencyKey:e.z.string().optional().describe("Dedupe key for safe retries.")}),annotations:{readOnlyHint:!1,destructiveHint:!1},execute:(e,t)=>t.bb.credits.consume(h(e,t),{amount:e.amount,...e.description?{description:e.description}:{},...e.idempotencyKey?{idempotencyKey:e.idempotencyKey}:{}})},{name:"send_notification",description:"Send a notification event to a workspace user (or all members when userId is omitted).",inputSchema:e.z.object({workspaceId:b,event:e.z.string().describe('The event slug, e.g. "comment_added".'),userId:e.z.string().optional().describe("Recipient. Omit to notify all members."),message:e.z.string().optional().describe("Message body (used for push).")}),annotations:{readOnlyHint:!1,openWorldHint:!0},execute:(e,t)=>t.bb.notification.send(h(e,t),e.event,e.userId,e.message?{message:e.message}:void 0)},{name:"record_usage_batch",description:"Record multiple usage entries in one call (max 100 items).",inputSchema:e.z.object({workspaceId:b,items:e.z.array(e.z.object({quotaSlug:e.z.string(),quantity:e.z.number().positive(),idempotencyKey:e.z.string().optional(),metadata:e.z.record(e.z.string(),e.z.unknown()).optional()})).min(1).max(100)}),annotations:{readOnlyHint:!1,destructiveHint:!1},execute:(e,t)=>t.bb.usage.recordBatch(h(e,t),{items:e.items.map(e=>({...e,source:"mcp"}))})},{name:"create_workspace",description:"Create a new workspace.",inputSchema:e.z.object({name:e.z.string().describe("Workspace name."),image:e.z.string().optional().describe("Image URL.")}),annotations:{readOnlyHint:!1},execute:(e,t)=>t.bb.workspace.create({name:e.name,...e.image?{image:e.image}:{}})},{name:"update_workspace",description:"Update a workspace's editable fields (name, image).",inputSchema:e.z.object({workspaceId:b,name:e.z.string().min(1).optional().describe("New workspace name."),image:e.z.string().optional().describe("New image URL.")}).strict(),annotations:{readOnlyHint:!1},execute:(e,t)=>{const n={};return void 0!==e.name&&(n.name=e.name),void 0!==e.image&&(n.image=e.image),t.bb.workspace.update(h(e,t),n)}},{name:"delete_workspace",description:"Delete a workspace. Irreversible.",inputSchema:e.z.object({workspaceId:b}),annotations:{readOnlyHint:!1,destructiveHint:!0},execute:(e,t)=>t.bb.workspace.delete(h(e,t))},{name:"invite_workspace_user",description:"Invite a user to a workspace with a role.",inputSchema:e.z.object({workspaceId:b,email:e.z.string().describe("Invitee email."),role:e.z.string().describe("Role to grant.")}),annotations:{readOnlyHint:!1,openWorldHint:!0},execute:(e,t)=>t.bb.users.invite(h(e,t),e.email,e.role)},{name:"remove_workspace_user",description:"Remove a user from a workspace. Irreversible.",inputSchema:e.z.object({workspaceId:b,userId:e.z.string().describe("The user to remove.")}),annotations:{readOnlyHint:!1,destructiveHint:!0},execute:(e,t)=>t.bb.users.remove(h(e,t),e.userId)},{name:"update_workspace_user_role",description:"Change a workspace member's role.",inputSchema:e.z.object({workspaceId:b,userId:e.z.string(),role:e.z.string().describe("The new role.")}),annotations:{readOnlyHint:!1},execute:(e,t)=>t.bb.users.updateRole(h(e,t),e.userId,e.role)},{name:"update_user_profile",description:"Update the authenticated user's own profile (name, image, country, timezone, language, currency).",inputSchema:e.z.object({name:e.z.string().min(1).optional(),image:e.z.string().optional().describe("Profile image URL."),country:e.z.string().optional().describe("ISO country code."),timezone:e.z.string().optional().describe("IANA timezone."),language:e.z.string().optional().describe("Language code."),currency:e.z.string().optional().describe("Currency code.")}).strict(),annotations:{readOnlyHint:!1},execute:(e,t)=>{const n={};for(const t of["name","image","country","timezone","language","currency"]){const r=e[t];void 0!==r&&(n[t]=r)}return t.bb.users.updateProfile(n)}},{name:"update_feature_flag",description:"Set a feature flag on/off for a workspace.",inputSchema:e.z.object({workspaceId:b,key:e.z.string().describe("The feature slug."),value:e.z.boolean().describe("Enabled?")}),annotations:{readOnlyHint:!1},execute:(e,t)=>t.bb.features.update(h(e,t),e.key,e.value)},{name:"create_subscription_checkout",description:"Create a Stripe checkout session to subscribe a workspace to a plan.",inputSchema:e.z.object({workspaceId:b,planVersionId:e.z.string(),billingInterval:e.z.string().optional(),currency:e.z.string().optional(),successUrl:e.z.string().optional(),cancelUrl:e.z.string().optional()}),annotations:{readOnlyHint:!1,openWorldHint:!0},execute:(e,t)=>{const{workspaceId:n,...r}=e;return t.bb.subscription.checkout(h(e,t),r)}},{name:"update_subscription",description:"Change a workspace's subscription plan.",inputSchema:e.z.object({workspaceId:b,planVersionId:e.z.string(),billingInterval:e.z.string().optional(),successUrl:e.z.string().optional(),cancelUrl:e.z.string().optional()}),annotations:{readOnlyHint:!1},execute:(e,t)=>{const{workspaceId:n,...r}=e;return t.bb.subscription.update(h(e,t),r)}},{name:"cancel_subscription",description:"Cancel a workspace's subscription.",inputSchema:e.z.object({workspaceId:b}),annotations:{readOnlyHint:!1,destructiveHint:!0},execute:(e,t)=>t.bb.subscription.cancel(h(e,t))},{name:"resume_subscription",description:"Resume a workspace's canceled subscription.",inputSchema:e.z.object({workspaceId:b}),annotations:{readOnlyHint:!1},execute:(e,t)=>t.bb.subscription.resume(h(e,t))},{name:"get_billing_portal_url",description:"Get a Stripe billing-portal URL for a workspace.",inputSchema:e.z.object({workspaceId:b,returnUrl:e.z.string().optional()}),annotations:{readOnlyHint:!1,openWorldHint:!0},execute:(e,t)=>t.bb.subscription.getBillingPortalUrl(h(e,t),e.returnUrl)},{name:"purchase_credits",description:"Create a Stripe checkout session to buy a credit package.",inputSchema:e.z.object({workspaceId:b,creditPackageId:e.z.string(),currency:e.z.string().optional(),successUrl:e.z.string().describe("Redirect URL on success."),cancelUrl:e.z.string().describe("Redirect URL on cancel.")}),annotations:{readOnlyHint:!1,openWorldHint:!0},execute:(e,t)=>{const{workspaceId:n,...r}=e;return t.bb.credits.purchase(h(e,t),r)}}],k=new Map([...w,...y].map(e=>[e.name,e]));function z(e){if(!1===e)return[];if("readonly"===e)return[...w];if("all"===e)return[...w,...y];const t=e.include?e.include.map(e=>{const t=k.get(e);if(!t)throw new Error(`Unknown built-in MCP tool: ${e}`);return t}):[...w],n=new Set(e.exclude??[]);return t.filter(e=>!n.has(e.name))}const _=["2025-06-18","2025-03-26","2024-11-05"],S=_[0],v="application/json",x=/^[a-zA-Z0-9_-]{1,128}$/,I=-32700,j=-32600,O=-32601,T=-32602,C=-32603;function A(e,t){const n=t.toLowerCase();for(const t of Object.keys(e))if(t.toLowerCase()===n)return e[t]}function U(e,t){return{status:e,headers:{"Content-Type":v},body:JSON.stringify(t)}}function H(e,t){return U(200,{jsonrpc:"2.0",id:e??null,result:t})}function q(e,t,n,r=200,o){return U(r,{jsonrpc:"2.0",id:e??null,error:{code:t,message:n,...void 0!==o?{data:o}:{}}})}function E(e){return"object"==typeof e&&null!==e&&"function"==typeof e.safeParse}function M(e){return e instanceof Error?e.message:"string"==typeof e?e:JSON.stringify(e)}exports.AppBridgeError=s,exports.bearerChallenge=g,exports.builtinMcpTools=k,exports.createMcpHandler=function(t){const n=t.serverInfo??{name:"buildbase-mcp",version:"1.0.0"},r=t.builtinTools??(!!t.buildbase&&"readonly"),o=t.maxRequestBytes??1048576;if(!1!==r&&!t.buildbase)throw new Error("builtinTools require a `buildbase` client — pass one to createMcpHandler, or set builtinTools: false.");const i=new Map;for(const e of z(r))i.set(e.name,e);const a=new Set;for(const e of t.tools??[]){if(!x.test(e.name))throw new Error(`Invalid MCP tool name: "${e.name}" (want ${String(x)})`);if(a.has(e.name))throw new Error(`Duplicate MCP tool name: "${e.name}"`);a.add(e.name),i.set(e.name,e)}const s=new Proxy({},{get(e,t){if("string"==typeof t)throw new Error(`No \`buildbase\` client configured — pass one to createMcpHandler to use bb.${t} in tools.`)}}),c=new Map;function u(t){const n=c.get(t.name);if(n)return n;let r;try{r=E(t.inputSchema)?e.z.toJSONSchema(t.inputSchema,{target:"draft-2020-12"}):t.inputSchema}catch(e){l(e,{method:"tools/list",tool:t.name}),r={type:"object",additionalProperties:!0}}return c.set(t.name,r),r}function d(e){const t=new Set(e?.scopes??[]);return Array.from(i.values()).filter(e=>(e.requiredScopes??[]).every(e=>t.has(e)))}function l(e,n){try{t.onError?.(e instanceof Error?e:new Error(M(e)),n)}catch{}}function m(){if(t.auth&&t.auth.resourceMetadataUrl){const e=g({resourceMetadataUrl:t.auth.resourceMetadataUrl});return{status:e.status,headers:e.headers,body:e.body}}return U(401,{error:"unauthorized"})}async function b(e){const r=function(e){if(!t.allowedOrigins)return{};const n=A(e.headers,"origin");return n&&t.allowedOrigins.includes(n)?{"Access-Control-Allow-Origin":n,"Access-Control-Allow-Methods":"POST, OPTIONS","Access-Control-Allow-Headers":"Content-Type, Authorization, MCP-Protocol-Version","Access-Control-Max-Age":"86400",Vary:"Origin"}:{}}(e);if("OPTIONS"===e.method.toUpperCase())return{status:204,headers:r,body:""};const i=await async function(e){const r=e.method.toUpperCase();if(t.allowedOrigins){const n=A(e.headers,"origin");if(n&&!t.allowedOrigins.includes(n))return U(403,{error:"origin_not_allowed"})}if("POST"!==r)return{status:405,headers:{"Content-Type":v,Allow:"POST, OPTIONS"},body:JSON.stringify({error:"method_not_allowed"})};if(o>0&&"string"==typeof e.body&&e.body.length>o)return U(413,{error:"payload_too_large"});let i=null;if(!1!==t.auth){const n=p(A(e.headers,"authorization"));if(!n)return m();try{i=await t.auth.verify(n,e)}catch(e){l(e,{method:"auth"}),i=null}if(!i)return m()}if(t.rateLimit){let n;try{n=await t.rateLimit(i,e)}catch(e){l(e,{method:"rateLimit"}),n=!1}if(!("boolean"==typeof n?n:n.ok)){const e="object"==typeof n?n.retryAfter:void 0;return{status:429,headers:{"Content-Type":v,...void 0!==e?{"Retry-After":String(e)}:{}},body:JSON.stringify({error:"rate_limited"})}}}let a=e.body;if("string"==typeof e.body)try{a=JSON.parse(e.body)}catch{return q(null,I,"Invalid JSON",400)}if(Array.isArray(a))return q(null,j,"Batch requests are not supported",400);if("object"!=typeof a||null===a)return q(null,j,"Expected a JSON-RPC request object",400);const c=a,g=c.id,b="string"==typeof c.method?c.method:null;if(!b)return q(g,j,"Missing method",400);if(null==g)return{status:202,headers:{"Content-Type":v},body:""};const h=c.params??{};switch(b){case"initialize":{const e=h.protocolVersion;return H(g,{protocolVersion:"string"==typeof e&&_.includes(e)?e:S,capabilities:{tools:{listChanged:!1}},serverInfo:n,...t.instructions?{instructions:t.instructions}:{}})}case"ping":return H(g,{});case"tools/list":return H(g,{tools:d(i).map(e=>({name:e.name,description:e.description,inputSchema:u(e),...e.annotations?{annotations:e.annotations}:{}}))});case"tools/call":{const n="string"==typeof h.name?h.name:"",r=d(i).find(e=>e.name===n);if(!r)return q(g,T,`Unknown tool: ${n||"(missing name)"}`);let o,a=h.arguments??{};if(E(r.inputSchema)){const e=r.inputSchema.safeParse(a);if(!e.success)return q(g,T,`Invalid arguments for ${n}`,200,{issues:e.error.issues});a=e.data}if(t.context)try{o=await t.context(i,e)}catch(e){return l(e,{method:b,tool:n}),q(g,C,"Context initialization failed")}const c={bb:t.buildbase?t.buildbase.withSession(i?.sessionId??""):s,auth:i??{sessionId:""},workspaceId:i?.workspaceId,custom:o};try{const e=await r.execute(a,c),t="object"==typeof e&&null!==e&&!Array.isArray(e);return H(g,{content:[{type:"text",text:"string"==typeof e?e:JSON.stringify(e,null,2)}],...t?{structuredContent:e}:{},isError:!1})}catch(e){l(e,{method:b,tool:n});const r=e instanceof Error?e:new Error(M(e));return H(g,{content:[{type:"text",text:t.formatToolError?t.formatToolError(r,{tool:n}):r.message}],isError:!0})}}default:return q(g,O,`Method not found: ${b}`)}}(e);return Object.keys(r).length?{...i,headers:{...i.headers,...r}}:i}return{handle:b,fetch:async function(e){const t={};if(e.headers.forEach((e,n)=>{t[n]=e}),o>0){const t=Number(e.headers.get("content-length"));if(Number.isFinite(t)&&t>o)return new Response(JSON.stringify({error:"payload_too_large"}),{status:413,headers:{"Content-Type":v}})}const n="POST"===e.method.toUpperCase()?await e.text():void 0,r=await b({method:e.method,headers:t,body:n});return new Response(""===r.body?null:r.body,{status:r.status,headers:r.headers})},listTools:()=>Array.from(i.values()).map(e=>({name:e.name,description:e.description,...e.annotations?{annotations:e.annotations}:{}})),serverCard:e=>({name:n.name,version:n.version,endpoint:e.endpoint,transport:"streamable-http",capabilities:{tools:{listChanged:!1}},...e.description?{description:e.description}:{},...e.documentationUrl?{documentationUrl:e.documentationUrl}:{}})}},exports.defineMcpTool=function(e){return e},exports.extractBearerToken=p,exports.selectBuiltinTools=z,exports.signClientJwt=function(e,t,n){if(!t)throw new s("invalid_secret","Missing signing secret");const r=Math.floor(Date.now()/1e3),a={iat:r,exp:r+(n?.expiresInSec??3600),...e},c=`${l({alg:"HS256",typ:"JWT"})}.${l(a)}`;return`${c}.${d(i(o(t),o(c)))}`},exports.verifyClientJwt=function(e,t,n={}){const r="number"==typeof n?{clockToleranceSec:n}:n,a=r.clockToleranceSec??60,p=r.requireExp??!0;if(!e||!t)throw new s("invalid_token","Missing token or client secret");const d=e.split(".");if(3!==d.length)throw new s("invalid_token","Malformed JWT");const[l,m,g]=d,b=i(o(t),o(`${l}.${m}`));let h,f,w;try{h=c(g)}catch{throw new s("invalid_signature","Unreadable JWT signature")}if(!function(e,t){if(e.length!==t.length)return!1;let n=0;for(let r=0;r<e.length;r++)n|=e[r]^t[r];return 0===n}(b,h))throw new s("invalid_signature","JWT signature verification failed");try{f=u(l),w=u(m)}catch{throw new s("invalid_token","Unreadable JWT segments")}if("HS256"!==f.alg)throw new s("invalid_algorithm",`Unexpected JWT alg: ${String(f.alg)}`);const y=Math.floor(Date.now()/1e3);if(p&&"number"!=typeof w.exp)throw new s("invalid_token","JWT is missing a numeric exp claim");if("number"==typeof w.exp&&y>w.exp+a)throw new s("token_expired","JWT has expired");if("number"==typeof w.nbf&&y+a<w.nbf)throw new s("token_not_yet_valid","JWT is not yet valid");if(void 0!==r.issuer&&w.iss!==r.issuer)throw new s("invalid_issuer","JWT issuer mismatch");if(void 0!==r.audience){const e=w.aud;if(!(Array.isArray(e)?e.includes(r.audience):e===r.audience))throw new s("invalid_audience","JWT audience mismatch")}return w};
|