@buildspacestudio/sdk 0.2.2 → 0.4.0

package/dist/auth/index.js

@@ -1,3 +1,256 @@
-export { AuthClientNamespace } from "./client";
-export { AuthServerNamespace } from "./server";
+// src/auth/client.ts
+var AuthClientNamespace = class {
+  transport;
+  constructor(transport) {
+    this.transport = transport;
+  }
+  /**
+   * Build a URL that redirects the user to the Buildspace sign-in page.
+   *
+   * After the user authenticates, they are redirected back to `redirectUri`
+   * with a `?code=` parameter that can be exchanged for tokens via
+   * `buildspace.auth.handleCallback()` on the server.
+   *
+   * @param opts - Sign-in URL options.
+   * @returns The full sign-in URL as a string.
+   */
+  getSignInUrl(opts) {
+    const url = new URL("/sign-in", this.transport.loginUrl);
+    if (opts.appSlug) {
+      url.searchParams.set("app", opts.appSlug);
+    }
+    url.searchParams.set("redirect_uri", opts.redirectUri);
+    url.searchParams.set("client_id", this.transport.key);
+    if (opts.env) {
+      url.searchParams.set("env", opts.env);
+    }
+    return url.toString();
+  }
+  /**
+   * Build a URL that redirects the user to the Buildspace sign-up page.
+   *
+   * Works identically to {@link getSignInUrl} but directs the user to the
+   * registration flow instead.
+   *
+   * @param opts - Sign-up URL options.
+   * @returns The full sign-up URL as a string.
+   */
+  getSignUpUrl(opts) {
+    const url = new URL("/sign-up", this.transport.loginUrl);
+    if (opts.appSlug) {
+      url.searchParams.set("app", opts.appSlug);
+    }
+    url.searchParams.set("redirect_uri", opts.redirectUri);
+    url.searchParams.set("client_id", this.transport.key);
+    if (opts.env) {
+      url.searchParams.set("env", opts.env);
+    }
+    return url.toString();
+  }
+};
+
+// src/errors.ts
+var BuildspaceError = class extends Error {
+  /** Machine-readable error code, e.g. `"auth/invalid-token"`. */
+  code;
+  /** Which service produced the error. */
+  service;
+  /** HTTP status code from the API. */
+  status;
+  constructor({
+    code,
+    message,
+    service,
+    status
+  }) {
+    super(message);
+    this.name = "BuildspaceError";
+    this.code = code;
+    this.service = service;
+    this.status = status;
+  }
+};
+
+// src/auth/server.ts
+var LOOPBACK_HOSTS = /* @__PURE__ */ new Set(["127.0.0.1", "localhost", "::1", "0.0.0.0"]);
+var FORWARDED_HOST_RE = /host="?([^;"]+)"?/i;
+var FORWARDED_PROTO_RE = /proto="?([^;"]+)"?/i;
+function getFirstForwardedValue(value) {
+  if (!value) {
+    return null;
+  }
+  return value.split(",").map((part) => part.trim()).find(Boolean) ?? null;
+}
+function stripPort(host) {
+  if (host.startsWith("[") && host.includes("]")) {
+    return host.slice(1, host.indexOf("]"));
+  }
+  const colonIndex = host.indexOf(":");
+  return colonIndex >= 0 ? host.slice(0, colonIndex) : host;
+}
+function isPrivateIpv4(hostname) {
+  const parts = hostname.split(".").map((part) => Number(part));
+  if (parts.length !== 4 || parts.some((part) => Number.isNaN(part) || part < 0 || part > 255)) {
+    return false;
+  }
+  return parts[0] === 10 || parts[0] === 172 && parts[1] >= 16 && parts[1] <= 31 || parts[0] === 192 && parts[1] === 168;
+}
+function isInternalHostname(hostname) {
+  const normalized = hostname.toLowerCase();
+  return LOOPBACK_HOSTS.has(normalized) || normalized.endsWith(".local") || normalized.endsWith(".internal") || isPrivateIpv4(normalized);
+}
+function getForwardedOrigin(request) {
+  const forwarded = getFirstForwardedValue(request.headers.get("forwarded"));
+  if (forwarded) {
+    const forwardedHost2 = forwarded.match(FORWARDED_HOST_RE)?.[1]?.trim();
+    const forwardedProto2 = forwarded.match(FORWARDED_PROTO_RE)?.[1]?.trim();
+    if (forwardedHost2 && forwardedProto2) {
+      return `${forwardedProto2}://${forwardedHost2}`;
+    }
+  }
+  const forwardedHost = getFirstForwardedValue(request.headers.get("x-forwarded-host"));
+  const forwardedProto = getFirstForwardedValue(request.headers.get("x-forwarded-proto"));
+  if (forwardedHost && forwardedProto) {
+    return `${forwardedProto}://${forwardedHost}`;
+  }
+  return null;
+}
+function resolveDefaultRedirectUri(request, url) {
+  if (!(request instanceof Request)) {
+    return `${url.origin}${url.pathname}`;
+  }
+  const forwardedOrigin = getForwardedOrigin(request);
+  if (forwardedOrigin) {
+    return `${forwardedOrigin}${url.pathname}`;
+  }
+  const hostHeader = request.headers.get("host")?.trim();
+  if (hostHeader && !isInternalHostname(stripPort(hostHeader))) {
+    return `${url.protocol}//${hostHeader}${url.pathname}`;
+  }
+  if (!isInternalHostname(url.hostname)) {
+    return `${url.origin}${url.pathname}`;
+  }
+  return `${url.origin}${url.pathname}`;
+}
+var AuthServerNamespace = class {
+  transport;
+  constructor(transport) {
+    this.transport = transport;
+  }
+  /**
+   * Retrieve the session associated with a token.
+   *
+   * Returns the {@link AuthSession} if valid, or `null` if the token is
+   * expired, revoked, or invalid (401/404).
+   *
+   * @throws {BuildspaceError} On unexpected server errors (5xx, network issues).
+   */
+  async getSession(sessionToken) {
+    try {
+      return await this.transport.request({
+        service: "auth",
+        path: "/v1/auth/session",
+        headers: { "X-Session-Token": sessionToken }
+      });
+    } catch (error) {
+      if (error instanceof BuildspaceError && (error.status === 401 || error.status === 404)) {
+        return null;
+      }
+      throw error;
+    }
+  }
+  /**
+   * Exchange an OAuth authorization code for tokens.
+   *
+   * Extracts the `code` query parameter from the callback URL and exchanges
+   * it with the Buildspace API for an access token and user info.
+   *
+   * @param request - The incoming callback request. Accepts a `Request` object,
+   *   a `URL`, or a raw URL string containing the `?code=` parameter.
+   * @param opts - Optional settings.
+   * @param opts.redirectUri - Override the redirect URI sent to the token endpoint.
+   *   Defaults to the origin + pathname of the callback URL.
+   * @returns The token response containing `access_token`, `expires_in`, and `user`.
+   *
+   * @throws {BuildspaceError} If the code exchange fails (invalid code, expired, etc.).
+   *
+   * @example
+   * ```ts
+   * // Next.js Route Handler
+   * export async function GET(request: Request) {
+   *   const { access_token, user } = await buildspace.auth.handleCallback(request);
+   *   // Store access_token as a session cookie
+   * }
+   * ```
+   */
+  handleCallback(request, opts) {
+    let url;
+    if (typeof request === "string") {
+      url = new URL(request);
+    } else if (request instanceof URL) {
+      url = request;
+    } else {
+      url = new URL(request.url);
+    }
+    const code = url.searchParams.get("code");
+    if (!code) {
+      throw new BuildspaceError({
+        service: "auth",
+        status: 400,
+        code: "auth/missing-code",
+        message: "No auth code found in callback URL. Expected ?code= parameter."
+      });
+    }
+    const redirectUri = opts?.redirectUri ?? resolveDefaultRedirectUri(request, url);
+    return this.transport.request({
+      service: "auth",
+      path: "/v1/auth/token",
+      method: "POST",
+      body: {
+        code,
+        redirect_uri: redirectUri
+      }
+    });
+  }
+  /**
+   * Revoke a specific session token.
+   *
+   * @param sessionToken - The token to revoke.
+   * @throws {BuildspaceError} If the revocation fails.
+   */
+  async revokeSession(sessionToken) {
+    await this.transport.request({
+      service: "auth",
+      path: "/v1/auth/session",
+      method: "DELETE",
+      headers: { "X-Session-Token": sessionToken }
+    });
+  }
+  /**
+   * Sign the user out by revoking the session and clearing the SDK's stored token.
+   *
+   * If the session is already expired or not found, the error is silently
+   * ignored and the local session is still cleared.
+   *
+   * @param sessionToken - Token to revoke. If omitted, uses the token
+   *   previously set via `buildspace.setSession()`.
+   */
+  async signOut(sessionToken) {
+    const token = sessionToken ?? this.transport.getSessionToken();
+    try {
+      if (token) {
+        await this.revokeSession(token);
+      }
+    } catch (error) {
+      if (!(error instanceof BuildspaceError && error.service === "auth" && (error.status === 401 || error.status === 404))) {
+        throw error;
+      }
+    } finally {
+      this.transport.clearSession();
+    }
+  }
+};
+
+export { AuthClientNamespace, AuthServerNamespace };
+//# sourceMappingURL=index.js.map
 //# sourceMappingURL=index.js.map

package/dist/auth/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/auth/index.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,mBAAmB,EAAE,MAAM,UAAU,CAAC;AAE/C,OAAO,EAAE,mBAAmB,EAAE,MAAM,UAAU,CAAC"}
+{"version":3,"sources":["../../src/auth/client.ts","../../src/errors.ts","../../src/auth/server.ts"],"names":["forwardedHost","forwardedProto"],"mappings":";AA0CO,IAAM,sBAAN,MAA0B;AAAA,EACd,SAAA;AAAA,EAEjB,YAAY,SAAA,EAA0B;AACpC,IAAA,IAAA,CAAK,SAAA,GAAY,SAAA;AAAA,EACnB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAYA,aAAa,IAAA,EAAgC;AAC3C,IAAA,MAAM,MAAM,IAAI,GAAA,CAAI,UAAA,EAAY,IAAA,CAAK,UAAU,QAAQ,CAAA;AAEvD,IAAA,IAAI,KAAK,OAAA,EAAS;AAChB,MAAA,GAAA,CAAI,YAAA,CAAa,GAAA,CAAI,KAAA,EAAO,IAAA,CAAK,OAAO,CAAA;AAAA,IAC1C;AAEA,IAAA,GAAA,CAAI,YAAA,CAAa,GAAA,CAAI,cAAA,EAAgB,IAAA,CAAK,WAAW,CAAA;AACrD,IAAA,GAAA,CAAI,YAAA,CAAa,GAAA,CAAI,WAAA,EAAa,IAAA,CAAK,UAAU,GAAG,CAAA;AAEpD,IAAA,IAAI,KAAK,GAAA,EAAK;AACZ,MAAA,GAAA,CAAI,YAAA,CAAa,GAAA,CAAI,KAAA,EAAO,IAAA,CAAK,GAAG,CAAA;AAAA,IACtC;AAEA,IAAA,OAAO,IAAI,QAAA,EAAS;AAAA,EACtB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAWA,aAAa,IAAA,EAAgC;AAC3C,IAAA,MAAM,MAAM,IAAI,GAAA,CAAI,UAAA,EAAY,IAAA,CAAK,UAAU,QAAQ,CAAA;AAEvD,IAAA,IAAI,KAAK,OAAA,EAAS;AAChB,MAAA,GAAA,CAAI,YAAA,CAAa,GAAA,CAAI,KAAA,EAAO,IAAA,CAAK,OAAO,CAAA;AAAA,IAC1C;AAEA,IAAA,GAAA,CAAI,YAAA,CAAa,GAAA,CAAI,cAAA,EAAgB,IAAA,CAAK,WAAW,CAAA;AACrD,IAAA,GAAA,CAAI,YAAA,CAAa,GAAA,CAAI,WAAA,EAAa,IAAA,CAAK,UAAU,GAAG,CAAA;AAEpD,IAAA,IAAI,KAAK,GAAA,EAAK;AACZ,MAAA,GAAA,CAAI,YAAA,CAAa,GAAA,CAAI,KAAA,EAAO,IAAA,CAAK,GAAG,CAAA;AAAA,IACtC;AAEA,IAAA,OAAO,IAAI,QAAA,EAAS;AAAA,EACtB;AACF;;;ACpFO,IAAM,eAAA,GAAN,cAA8B,KAAA,CAAM;AAAA;AAAA,EAEhC,IAAA;AAAA;AAAA,EAEA,OAAA;AAAA;AAAA,EAEA,MAAA;AAAA,EAET,WAAA,CAAY;AAAA,IACV,IAAA;AAAA,IACA,OAAA;AAAA,IACA,OAAA;AAAA,IACA;AAAA,GACF,EAKG;AACD,IAAA,KAAA,CAAM,OAAO,CAAA;AACb,IAAA,IAAA,CAAK,IAAA,GAAO,iBAAA;AACZ,IAAA,IAAA,CAAK,IAAA,GAAO,IAAA;AACZ,IAAA,IAAA,CAAK,OAAA,GAAU,OAAA;AACf,IAAA,IAAA,CAAK,MAAA,GAAS,MAAA;AAAA,EAChB;AACF,CAAA;;;ACDA,IAAM,cAAA,uBAAqB,GAAA,CAAI,CAAC,aAAa,WAAA,EAAa,KAAA,EAAO,SAAS,CAAC,CAAA;AAC3E,IAAM,iBAAA,GAAoB,oBAAA;AAC1B,IAAM,kBAAA,GAAqB,qBAAA;AAE3B,SAAS,uBAAuB,KAAA,EAAqC;AACnE,EAAA,IAAI,CAAC,KAAA,EAAO;AACV,IAAA,OAAO,IAAA;AAAA,EACT;AAEA,EAAA,OACE,KAAA,CACG,KAAA,CAAM,GAAG,CAAA,CACT,GAAA,CAAI,CAAC,IAAA,KAAS,IAAA,CAAK,IAAA,EAAM,CAAA,CACzB,IAAA,CAAK,OAAO,CAAA,IAAK,IAAA;AAExB;AAEA,SAAS,UAAU,IAAA,EAAsB;AACvC,EAAA,IAAI,KAAK,UAAA,CAAW,GAAG,KAAK,IAAA,CAAK,QAAA,CAAS,GAAG,CAAA,EAAG;AAC9C,IAAA,OAAO,KAAK,KAAA,CAAM,CAAA,EAAG,IAAA,CAAK,OAAA,CAAQ,GAAG,CAAC,CAAA;AAAA,EACxC;AAEA,EAAA,MAAM,UAAA,GAAa,IAAA,CAAK,OAAA,CAAQ,GAAG,CAAA;AACnC,EAAA,OAAO,cAAc,CAAA,GAAI,IAAA,CAAK,KAAA,CAAM,CAAA,EAAG,UAAU,CAAA,GAAI,IAAA;AACvD;AAEA,SAAS,cAAc,QAAA,EAA2B;AAChD,EAAA,MAAM,KAAA,GAAQ,QAAA,CAAS,KAAA,CAAM,GAAG,CAAA,CAAE,IAAI,CAAC,IAAA,KAAS,MAAA,CAAO,IAAI,CAAC,CAAA;AAC5D,EAAA,IAAI,KAAA,CAAM,MAAA,KAAW,CAAA,IAAK,KAAA,CAAM,KAAK,CAAC,IAAA,KAAS,MAAA,CAAO,KAAA,CAAM,IAAI,CAAA,IAAK,IAAA,GAAO,CAAA,IAAK,IAAA,GAAO,GAAG,CAAA,EAAG;AAC5F,IAAA,OAAO,KAAA;AAAA,EACT;AAEA,EAAA,OACE,KAAA,CAAM,CAAC,CAAA,KAAM,EAAA,IACZ,MAAM,CAAC,CAAA,KAAM,GAAA,IAAO,KAAA,CAAM,CAAC,CAAA,IAAK,MAAM,KAAA,CAAM,CAAC,KAAK,EAAA,IAClD,KAAA,CAAM,CAAC,CAAA,KAAM,GAAA,IAAO,KAAA,CAAM,CAAC,CAAA,KAAM,GAAA;AAEtC;AAEA,SAAS,mBAAmB,QAAA,EAA2B;AACrD,EAAA,MAAM,UAAA,GAAa,SAAS,WAAA,EAAY;AAExC,EAAA,OACE,cAAA,CAAe,GAAA,CAAI,UAAU,CAAA,IAC7B,UAAA,CAAW,QAAA,CAAS,QAAQ,CAAA,IAC5B,UAAA,CAAW,QAAA,CAAS,WAAW,CAAA,IAC/B,cAAc,UAAU,CAAA;AAE5B;AAEA,SAAS,mBAAmB,OAAA,EAAiC;AAC3D,EAAA,MAAM,YAAY,sBAAA,CAAuB,OAAA,CAAQ,OAAA,CAAQ,GAAA,CAAI,WAAW,CAAC,CAAA;AACzE,EAAA,IAAI,SAAA,EAAW;AACb,IAAA,MAAMA,iBAAgB,SAAA,CAAU,KAAA,CAAM,iBAAiB,CAAA,GAAI,CAAC,GAAG,IAAA,EAAK;AACpE,IAAA,MAAMC,kBAAiB,SAAA,CAAU,KAAA,CAAM,kBAAkB,CAAA,GAAI,CAAC,GAAG,IAAA,EAAK;AAEtE,IAAA,IAAID,kBAAiBC,eAAAA,EAAgB;AACnC,MAAA,OAAO,CAAA,EAAGA,eAAc,CAAA,GAAA,EAAMD,cAAa,CAAA,CAAA;AAAA,IAC7C;AAAA,EACF;AAEA,EAAA,MAAM,gBAAgB,sBAAA,CAAuB,OAAA,CAAQ,OAAA,CAAQ,GAAA,CAAI,kBAAkB,CAAC,CAAA;AACpF,EAAA,MAAM,iBAAiB,sBAAA,CAAuB,OAAA,CAAQ,OAAA,CAAQ,GAAA,CAAI,mBAAmB,CAAC,CAAA;AAEtF,EAAA,IAAI,iBAAiB,cAAA,EAAgB;AACnC,IAAA,OAAO,CAAA,EAAG,cAAc,CAAA,GAAA,EAAM,aAAa,CAAA,CAAA;AAAA,EAC7C;AAEA,EAAA,OAAO,IAAA;AACT;AAEA,SAAS,yBAAA,CAA0B,SAAiC,GAAA,EAAkB;AACpF,EAAA,IAAI,EAAE,mBAAmB,OAAA,CAAA,EAAU;AACjC,IAAA,OAAO,CAAA,EAAG,GAAA,CAAI,MAAM,CAAA,EAAG,IAAI,QAAQ,CAAA,CAAA;AAAA,EACrC;AAEA,EAAA,MAAM,eAAA,GAAkB,mBAAmB,OAAO,CAAA;AAClD,EAAA,IAAI,eAAA,EAAiB;AACnB,IAAA,OAAO,CAAA,EAAG,eAAe,CAAA,EAAG,GAAA,CAAI,QAAQ,CAAA,CAAA;AAAA,EAC1C;AAEA,EAAA,MAAM,aAAa,OAAA,CAAQ,OAAA,CAAQ,GAAA,CAAI,MAAM,GAAG,IAAA,EAAK;AACrD,EAAA,IAAI,cAAc,CAAC,kBAAA,CAAmB,SAAA,CAAU,UAAU,CAAC,CAAA,EAAG;AAC5D,IAAA,OAAO,GAAG,GAAA,CAAI,QAAQ,KAAK,UAAU,CAAA,EAAG,IAAI,QAAQ,CAAA,CAAA;AAAA,EACtD;AAEA,EAAA,IAAI,CAAC,kBAAA,CAAmB,GAAA,CAAI,QAAQ,CAAA,EAAG;AACrC,IAAA,OAAO,CAAA,EAAG,GAAA,CAAI,MAAM,CAAA,EAAG,IAAI,QAAQ,CAAA,CAAA;AAAA,EACrC;AAEA,EAAA,OAAO,CAAA,EAAG,GAAA,CAAI,MAAM,CAAA,EAAG,IAAI,QAAQ,CAAA,CAAA;AACrC;AAuBO,IAAM,sBAAN,MAA0B;AAAA,EACd,SAAA;AAAA,EAEjB,YAAY,SAAA,EAA0B;AACpC,IAAA,IAAA,CAAK,SAAA,GAAY,SAAA;AAAA,EACnB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAUA,MAAM,WAAW,YAAA,EAAmD;AAClE,IAAA,IAAI;AACF,MAAA,OAAO,MAAM,IAAA,CAAK,SAAA,CAAU,OAAA,CAAqB;AAAA,QAC/C,OAAA,EAAS,MAAA;AAAA,QACT,IAAA,EAAM,kBAAA;AAAA,QACN,OAAA,EAAS,EAAE,iBAAA,EAAmB,YAAA;AAAa,OAC5C,CAAA;AAAA,IACH,SAAS,KAAA,EAAO;AACd,MAAA,IAAI,iBAAiB,eAAA,KAAoB,KAAA,CAAM,WAAW,GAAA,IAAO,KAAA,CAAM,WAAW,GAAA,CAAA,EAAM;AACtF,QAAA,OAAO,IAAA;AAAA,MACT;AACA,MAAA,MAAM,KAAA;AAAA,IACR;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EA0BA,cAAA,CACE,SACA,IAAA,EACwB;AACxB,IAAA,IAAI,GAAA;AACJ,IAAA,IAAI,OAAO,YAAY,QAAA,EAAU;AAC/B,MAAA,GAAA,GAAM,IAAI,IAAI,OAAO,CAAA;AAAA,IACvB,CAAA,MAAA,IAAW,mBAAmB,GAAA,EAAK;AACjC,MAAA,GAAA,GAAM,OAAA;AAAA,IACR,CAAA,MAAO;AACL,MAAA,GAAA,GAAM,IAAI,GAAA,CAAI,OAAA,CAAQ,GAAG,CAAA;AAAA,IAC3B;AAEA,IAAA,MAAM,IAAA,GAAO,GAAA,CAAI,YAAA,CAAa,GAAA,CAAI,MAAM,CAAA;AACxC,IAAA,IAAI,CAAC,IAAA,EAAM;AACT,MAAA,MAAM,IAAI,eAAA,CAAgB;AAAA,QACxB,OAAA,EAAS,MAAA;AAAA,QACT,MAAA,EAAQ,GAAA;AAAA,QACR,IAAA,EAAM,mBAAA;AAAA,QACN,OAAA,EAAS;AAAA,OACV,CAAA;AAAA,IACH;AAEA,IAAA,MAAM,WAAA,GAAc,IAAA,EAAM,WAAA,IAAe,yBAAA,CAA0B,SAAS,GAAG,CAAA;AAE/E,IAAA,OAAO,IAAA,CAAK,UAAU,OAAA,CAAuB;AAAA,MAC3C,OAAA,EAAS,MAAA;AAAA,MACT,IAAA,EAAM,gBAAA;AAAA,MACN,MAAA,EAAQ,MAAA;AAAA,MACR,IAAA,EAAM;AAAA,QACJ,IAAA;AAAA,QACA,YAAA,EAAc;AAAA;AAChB,KACD,CAAA;AAAA,EACH;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,MAAM,cAAc,YAAA,EAAqC;AACvD,IAAA,MAAM,IAAA,CAAK,UAAU,OAAA,CAAc;AAAA,MACjC,OAAA,EAAS,MAAA;AAAA,MACT,IAAA,EAAM,kBAAA;AAAA,MACN,MAAA,EAAQ,QAAA;AAAA,MACR,OAAA,EAAS,EAAE,iBAAA,EAAmB,YAAA;AAAa,KAC5C,CAAA;AAAA,EACH;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAWA,MAAM,QAAQ,YAAA,EAAsC;AAClD,IAAA,MAAM,KAAA,GAAQ,YAAA,IAAgB,IAAA,CAAK,SAAA,CAAU,eAAA,EAAgB;AAE7D,IAAA,IAAI;AACF,MAAA,IAAI,KAAA,EAAO;AACT,QAAA,MAAM,IAAA,CAAK,cAAc,KAAK,CAAA;AAAA,MAChC;AAAA,IACF,SAAS,KAAA,EAAO;AACd,MAAA,IACE,EACE,KAAA,YAAiB,eAAA,IACjB,KAAA,CAAM,OAAA,KAAY,MAAA,KACjB,KAAA,CAAM,MAAA,KAAW,GAAA,IAAO,KAAA,CAAM,MAAA,KAAW,GAAA,CAAA,CAAA,EAE5C;AACA,QAAA,MAAM,KAAA;AAAA,MACR;AAAA,IACF,CAAA,SAAE;AACA,MAAA,IAAA,CAAK,UAAU,YAAA,EAAa;AAAA,IAC9B;AAAA,EACF;AACF","file":"index.js","sourcesContent":["import type { HttpTransport } from \"../http\";\n\n/** Options for generating a sign-in URL. */\nexport interface SignInUrlOptions {\n  /** App slug to scope the login to a specific creator app. */\n  appSlug?: string;\n  /** Environment to authenticate against. */\n  env?: \"dev\" | \"prod\";\n  /** URL to redirect the user to after authentication completes. */\n  redirectUri: string;\n}\n\n/** Options for generating a sign-up URL. */\nexport interface SignUpUrlOptions {\n  /** App slug to scope the registration to a specific creator app. */\n  appSlug?: string;\n  /** Environment to authenticate against. */\n  env?: \"dev\" | \"prod\";\n  /** URL to redirect the user to after registration completes. */\n  redirectUri: string;\n}\n\n/**\n * Client-side authentication methods for generating login URLs.\n *\n * Access via `buildspace.auth` on the client SDK, or `buildspace.authClient`\n * on the server SDK when you need to generate URLs from server-side code.\n *\n * @example\n * ```ts\n * import { createClient } from \"@buildspacestudio/sdk/client\";\n *\n * const buildspace = createClient(process.env.NEXT_PUBLIC_BUILDSPACE_KEY!);\n *\n * const signInUrl = buildspace.auth.getSignInUrl({\n *   redirectUri: \"https://yourapp.com/auth/callback\",\n * });\n *\n * // Use in a link or redirect\n * window.location.href = signInUrl;\n * ```\n */\nexport class AuthClientNamespace {\n  private readonly transport: HttpTransport;\n\n  constructor(transport: HttpTransport) {\n    this.transport = transport;\n  }\n\n  /**\n   * Build a URL that redirects the user to the Buildspace sign-in page.\n   *\n   * After the user authenticates, they are redirected back to `redirectUri`\n   * with a `?code=` parameter that can be exchanged for tokens via\n   * `buildspace.auth.handleCallback()` on the server.\n   *\n   * @param opts - Sign-in URL options.\n   * @returns The full sign-in URL as a string.\n   */\n  getSignInUrl(opts: SignInUrlOptions): string {\n    const url = new URL(\"/sign-in\", this.transport.loginUrl);\n\n    if (opts.appSlug) {\n      url.searchParams.set(\"app\", opts.appSlug);\n    }\n\n    url.searchParams.set(\"redirect_uri\", opts.redirectUri);\n    url.searchParams.set(\"client_id\", this.transport.key);\n\n    if (opts.env) {\n      url.searchParams.set(\"env\", opts.env);\n    }\n\n    return url.toString();\n  }\n\n  /**\n   * Build a URL that redirects the user to the Buildspace sign-up page.\n   *\n   * Works identically to {@link getSignInUrl} but directs the user to the\n   * registration flow instead.\n   *\n   * @param opts - Sign-up URL options.\n   * @returns The full sign-up URL as a string.\n   */\n  getSignUpUrl(opts: SignUpUrlOptions): string {\n    const url = new URL(\"/sign-up\", this.transport.loginUrl);\n\n    if (opts.appSlug) {\n      url.searchParams.set(\"app\", opts.appSlug);\n    }\n\n    url.searchParams.set(\"redirect_uri\", opts.redirectUri);\n    url.searchParams.set(\"client_id\", this.transport.key);\n\n    if (opts.env) {\n      url.searchParams.set(\"env\", opts.env);\n    }\n\n    return url.toString();\n  }\n}\n","/** Services available in the Buildspace platform. */\nexport type BuildspaceService = \"auth\" | \"billing\" | \"events\" | \"notifications\" | \"storage\";\n\n/**\n * Error thrown by all Buildspace SDK methods on failure.\n *\n * @example\n * ```ts\n * try {\n *   await buildspace.auth.getSession(token);\n * } catch (err) {\n *   if (err instanceof BuildspaceError) {\n *     console.error(err.service, err.code, err.status, err.message);\n *   }\n * }\n * ```\n */\nexport class BuildspaceError extends Error {\n  /** Machine-readable error code, e.g. `\"auth/invalid-token\"`. */\n  readonly code: string;\n  /** Which service produced the error. */\n  readonly service: BuildspaceService;\n  /** HTTP status code from the API. */\n  readonly status: number;\n\n  constructor({\n    code,\n    message,\n    service,\n    status,\n  }: {\n    code: string;\n    message: string;\n    service: BuildspaceService;\n    status: number;\n  }) {\n    super(message);\n    this.name = \"BuildspaceError\";\n    this.code = code;\n    this.service = service;\n    this.status = status;\n  }\n}\n","import { BuildspaceError } from \"../errors\";\nimport type { HttpTransport } from \"../http\";\n\n/** A Buildspace user returned from auth endpoints. */\nexport interface AuthUser {\n  /** The user's email address. */\n  email: string;\n  /** Unique user identifier. */\n  id: string;\n  /** The user's display name, or `null` if not set. */\n  name: string | null;\n}\n\n/**\n * An active session for an authenticated user.\n *\n * Returned by {@link AuthServerNamespace.getSession}.\n */\nexport interface AuthSession {\n  /** The app this session belongs to, or `null` for platform-level sessions. */\n  appId: string | null;\n  /** The authenticated user. */\n  user: AuthUser;\n}\n\n/**\n * Token response returned after a successful OAuth callback exchange.\n *\n * Returned by {@link AuthServerNamespace.handleCallback}.\n */\nexport interface TokenResponse {\n  /** The access token to use for authenticated requests. */\n  access_token: string;\n  /** Token lifetime in seconds. */\n  expires_in: number;\n  /** Always `\"bearer\"`. */\n  token_type: \"bearer\";\n  /** The authenticated user. */\n  user: AuthUser;\n}\n\nconst LOOPBACK_HOSTS = new Set([\"127.0.0.1\", \"localhost\", \"::1\", \"0.0.0.0\"]);\nconst FORWARDED_HOST_RE = /host=\"?([^;\"]+)\"?/i;\nconst FORWARDED_PROTO_RE = /proto=\"?([^;\"]+)\"?/i;\n\nfunction getFirstForwardedValue(value: string | null): string | null {\n  if (!value) {\n    return null;\n  }\n\n  return (\n    value\n      .split(\",\")\n      .map((part) => part.trim())\n      .find(Boolean) ?? null\n  );\n}\n\nfunction stripPort(host: string): string {\n  if (host.startsWith(\"[\") && host.includes(\"]\")) {\n    return host.slice(1, host.indexOf(\"]\"));\n  }\n\n  const colonIndex = host.indexOf(\":\");\n  return colonIndex >= 0 ? host.slice(0, colonIndex) : host;\n}\n\nfunction isPrivateIpv4(hostname: string): boolean {\n  const parts = hostname.split(\".\").map((part) => Number(part));\n  if (parts.length !== 4 || parts.some((part) => Number.isNaN(part) || part < 0 || part > 255)) {\n    return false;\n  }\n\n  return (\n    parts[0] === 10 ||\n    (parts[0] === 172 && parts[1] >= 16 && parts[1] <= 31) ||\n    (parts[0] === 192 && parts[1] === 168)\n  );\n}\n\nfunction isInternalHostname(hostname: string): boolean {\n  const normalized = hostname.toLowerCase();\n\n  return (\n    LOOPBACK_HOSTS.has(normalized) ||\n    normalized.endsWith(\".local\") ||\n    normalized.endsWith(\".internal\") ||\n    isPrivateIpv4(normalized)\n  );\n}\n\nfunction getForwardedOrigin(request: Request): string | null {\n  const forwarded = getFirstForwardedValue(request.headers.get(\"forwarded\"));\n  if (forwarded) {\n    const forwardedHost = forwarded.match(FORWARDED_HOST_RE)?.[1]?.trim();\n    const forwardedProto = forwarded.match(FORWARDED_PROTO_RE)?.[1]?.trim();\n\n    if (forwardedHost && forwardedProto) {\n      return `${forwardedProto}://${forwardedHost}`;\n    }\n  }\n\n  const forwardedHost = getFirstForwardedValue(request.headers.get(\"x-forwarded-host\"));\n  const forwardedProto = getFirstForwardedValue(request.headers.get(\"x-forwarded-proto\"));\n\n  if (forwardedHost && forwardedProto) {\n    return `${forwardedProto}://${forwardedHost}`;\n  }\n\n  return null;\n}\n\nfunction resolveDefaultRedirectUri(request: Request | URL | string, url: URL): string {\n  if (!(request instanceof Request)) {\n    return `${url.origin}${url.pathname}`;\n  }\n\n  const forwardedOrigin = getForwardedOrigin(request);\n  if (forwardedOrigin) {\n    return `${forwardedOrigin}${url.pathname}`;\n  }\n\n  const hostHeader = request.headers.get(\"host\")?.trim();\n  if (hostHeader && !isInternalHostname(stripPort(hostHeader))) {\n    return `${url.protocol}//${hostHeader}${url.pathname}`;\n  }\n\n  if (!isInternalHostname(url.hostname)) {\n    return `${url.origin}${url.pathname}`;\n  }\n\n  return `${url.origin}${url.pathname}`;\n}\n\n/**\n * Server-side authentication methods.\n *\n * Access via `buildspace.auth` on the server SDK.\n *\n * @example\n * ```ts\n * import Buildspace from \"@buildspacestudio/sdk\";\n *\n * const buildspace = new Buildspace(process.env.BUILDSPACE_SECRET_KEY!);\n *\n * // Handle OAuth callback\n * const tokens = await buildspace.auth.handleCallback(request);\n *\n * // Verify a session\n * const session = await buildspace.auth.getSession(sessionToken);\n *\n * // Sign out\n * await buildspace.auth.signOut(sessionToken);\n * ```\n */\nexport class AuthServerNamespace {\n  private readonly transport: HttpTransport;\n\n  constructor(transport: HttpTransport) {\n    this.transport = transport;\n  }\n\n  /**\n   * Retrieve the session associated with a token.\n   *\n   * Returns the {@link AuthSession} if valid, or `null` if the token is\n   * expired, revoked, or invalid (401/404).\n   *\n   * @throws {BuildspaceError} On unexpected server errors (5xx, network issues).\n   */\n  async getSession(sessionToken: string): Promise<AuthSession | null> {\n    try {\n      return await this.transport.request<AuthSession>({\n        service: \"auth\",\n        path: \"/v1/auth/session\",\n        headers: { \"X-Session-Token\": sessionToken },\n      });\n    } catch (error) {\n      if (error instanceof BuildspaceError && (error.status === 401 || error.status === 404)) {\n        return null;\n      }\n      throw error;\n    }\n  }\n\n  /**\n   * Exchange an OAuth authorization code for tokens.\n   *\n   * Extracts the `code` query parameter from the callback URL and exchanges\n   * it with the Buildspace API for an access token and user info.\n   *\n   * @param request - The incoming callback request. Accepts a `Request` object,\n   *   a `URL`, or a raw URL string containing the `?code=` parameter.\n   * @param opts - Optional settings.\n   * @param opts.redirectUri - Override the redirect URI sent to the token endpoint.\n   *   Defaults to the origin + pathname of the callback URL.\n   * @returns The token response containing `access_token`, `expires_in`, and `user`.\n   *\n   * @throws {BuildspaceError} If the code exchange fails (invalid code, expired, etc.).\n   *\n   * @example\n   * ```ts\n   * // Next.js Route Handler\n   * export async function GET(request: Request) {\n   *   const { access_token, user } = await buildspace.auth.handleCallback(request);\n   *   // Store access_token as a session cookie\n   * }\n   * ```\n   */\n  handleCallback(\n    request: Request | URL | string,\n    opts?: { redirectUri?: string }\n  ): Promise<TokenResponse> {\n    let url: URL;\n    if (typeof request === \"string\") {\n      url = new URL(request);\n    } else if (request instanceof URL) {\n      url = request;\n    } else {\n      url = new URL(request.url);\n    }\n\n    const code = url.searchParams.get(\"code\");\n    if (!code) {\n      throw new BuildspaceError({\n        service: \"auth\",\n        status: 400,\n        code: \"auth/missing-code\",\n        message: \"No auth code found in callback URL. Expected ?code= parameter.\",\n      });\n    }\n\n    const redirectUri = opts?.redirectUri ?? resolveDefaultRedirectUri(request, url);\n\n    return this.transport.request<TokenResponse>({\n      service: \"auth\",\n      path: \"/v1/auth/token\",\n      method: \"POST\",\n      body: {\n        code,\n        redirect_uri: redirectUri,\n      },\n    });\n  }\n\n  /**\n   * Revoke a specific session token.\n   *\n   * @param sessionToken - The token to revoke.\n   * @throws {BuildspaceError} If the revocation fails.\n   */\n  async revokeSession(sessionToken: string): Promise<void> {\n    await this.transport.request<void>({\n      service: \"auth\",\n      path: \"/v1/auth/session\",\n      method: \"DELETE\",\n      headers: { \"X-Session-Token\": sessionToken },\n    });\n  }\n\n  /**\n   * Sign the user out by revoking the session and clearing the SDK's stored token.\n   *\n   * If the session is already expired or not found, the error is silently\n   * ignored and the local session is still cleared.\n   *\n   * @param sessionToken - Token to revoke. If omitted, uses the token\n   *   previously set via `buildspace.setSession()`.\n   */\n  async signOut(sessionToken?: string): Promise<void> {\n    const token = sessionToken ?? this.transport.getSessionToken();\n\n    try {\n      if (token) {\n        await this.revokeSession(token);\n      }\n    } catch (error) {\n      if (\n        !(\n          error instanceof BuildspaceError &&\n          error.service === \"auth\" &&\n          (error.status === 401 || error.status === 404)\n        )\n      ) {\n        throw error;\n      }\n    } finally {\n      this.transport.clearSession();\n    }\n  }\n}\n"]}

package/dist/billing/index.cjs

@@ -0,0 +1,226 @@
+'use strict';
+
+// src/billing/shared.ts
+function shouldShowTestBanner(status) {
+  return status.testMode;
+}
+function billingIdentityQuery(opts) {
+  return { app_user_id: opts?.appUserId, user_id: opts?.userId };
+}
+function checkoutRequestBody(opts) {
+  return {
+    app_user_id: "appUserId" in opts ? opts.appUserId : void 0,
+    cancel_url: opts.cancelUrl,
+    checkout_request_id: opts.checkoutRequestId,
+    lookup_key: opts.lookupKey,
+    metadata: opts.metadata,
+    price_id: opts.priceId,
+    quantity: opts.quantity,
+    success_url: opts.successUrl,
+    user_id: "userId" in opts ? opts.userId : void 0
+  };
+}
+function portalRequestBody(opts) {
+  return {
+    app_user_id: "appUserId" in opts ? opts.appUserId : void 0,
+    return_url: opts.returnUrl,
+    user_id: "userId" in opts ? opts.userId : void 0
+  };
+}
+
+// src/billing/client.ts
+function redirectTo(url) {
+  const browser = globalThis;
+  if (!browser.window?.location) {
+    throw new Error("redirectToCheckout can only be used in a browser environment");
+  }
+  browser.window.location.href = url;
+}
+var BillingClientNamespace = class {
+  transport;
+  constructor(transport) {
+    this.transport = transport;
+  }
+  /**
+   * Read whether billing is enabled for the app environment tied to this
+   * publishable key, and whether the connected Stripe account is in test or
+   * live mode.
+   *
+   * Render a "Test mode" banner in your app whenever `testMode` is true.
+   */
+  getStatus() {
+    return this.transport.request({
+      service: "billing",
+      path: "/v1/billing/status"
+    });
+  }
+  /**
+   * List the active billing products for the app environment tied to this
+   * publishable key.
+   */
+  listProducts() {
+    return this.transport.request({
+      service: "billing",
+      path: "/v1/billing/products"
+    });
+  }
+  /**
+   * List the active billing prices for the app environment tied to this
+   * publishable key.
+   */
+  listPrices() {
+    return this.transport.request({
+      service: "billing",
+      path: "/v1/billing/prices"
+    });
+  }
+  /**
+   * Create a Checkout Session for the signed-in browser user and redirect to
+   * the Stripe-hosted Checkout page.
+   *
+   * This method depends on a Buildspace session being available through
+   * `setSession()` or your app's authenticated request context.
+   */
+  async redirectToCheckout(opts) {
+    const checkout = await this.transport.request({
+      service: "billing",
+      path: "/v1/billing/checkout",
+      method: "POST",
+      body: checkoutRequestBody(opts)
+    });
+    redirectTo(checkout.url);
+  }
+  /**
+   * Open the Stripe-hosted customer portal for the signed-in browser user.
+   */
+  async redirectToPortal(opts) {
+    const portal = await this.transport.request({
+      service: "billing",
+      path: "/v1/billing/portal",
+      method: "POST",
+      body: portalRequestBody(opts)
+    });
+    redirectTo(portal.url);
+  }
+  /**
+   * Discoverable alias for redirectToPortal — opens the Stripe-hosted customer
+   * portal so the signed-in user can manage their subscription, payment method,
+   * and invoices.
+   */
+  manageSubscription(opts) {
+    return this.redirectToPortal(opts);
+  }
+  /**
+   * Read the current subscription state for the signed-in browser user.
+   */
+  getSubscription() {
+    return this.transport.request({
+      service: "billing",
+      path: "/v1/billing/subscription"
+    });
+  }
+  /**
+   * Read the current paid entitlement state for the signed-in browser user.
+   */
+  getEntitlements() {
+    return this.transport.request({
+      service: "billing",
+      path: "/v1/billing/entitlements"
+    });
+  }
+};
+
+// src/billing/server.ts
+var BillingServerNamespace = class {
+  transport;
+  constructor(transport) {
+    this.transport = transport;
+  }
+  /**
+   * Read whether billing is enabled for the app environment tied to this API
+   * key, and whether the connected Stripe account is in test or live mode.
+   *
+   * Render a "Test mode" banner in your app whenever `testMode` is true.
+   */
+  getStatus() {
+    return this.transport.request({
+      service: "billing",
+      path: "/v1/billing/status"
+    });
+  }
+  /**
+   * List the active billing products configured for the app environment tied to
+   * this API key.
+   */
+  listProducts() {
+    return this.transport.request({
+      service: "billing",
+      path: "/v1/billing/products"
+    });
+  }
+  /**
+   * List the active billing prices configured for the app environment tied to
+   * this API key.
+   */
+  listPrices() {
+    return this.transport.request({
+      service: "billing",
+      path: "/v1/billing/prices"
+    });
+  }
+  /**
+   * Create a Stripe Checkout Session on the creator's connected Stripe account.
+   *
+   * Use `userId` for Buildspace-authenticated users, or `appUserId` when your
+   * app uses its own auth system and you want Buildspace to track billing state
+   * against an app-defined user id.
+   */
+  createCheckout(opts) {
+    return this.transport.request({
+      service: "billing",
+      path: "/v1/billing/checkout",
+      method: "POST",
+      body: checkoutRequestBody(opts)
+    });
+  }
+  /**
+   * Create a Stripe-hosted customer portal session for the specified billing
+   * identity.
+   */
+  createPortalSession(opts) {
+    return this.transport.request({
+      service: "billing",
+      path: "/v1/billing/portal",
+      method: "POST",
+      body: portalRequestBody(opts)
+    });
+  }
+  /**
+   * Read the current subscription state for a Buildspace user or app-defined
+   * billing identity.
+   */
+  getSubscription(opts) {
+    return this.transport.request({
+      service: "billing",
+      path: "/v1/billing/subscription",
+      query: billingIdentityQuery(opts)
+    });
+  }
+  /**
+   * Read the current paid entitlement state for a Buildspace user or app-defined
+   * billing identity.
+   */
+  getEntitlements(opts) {
+    return this.transport.request({
+      service: "billing",
+      path: "/v1/billing/entitlements",
+      query: billingIdentityQuery(opts)
+    });
+  }
+};
+
+exports.BillingClientNamespace = BillingClientNamespace;
+exports.BillingServerNamespace = BillingServerNamespace;
+exports.shouldShowTestBanner = shouldShowTestBanner;
+//# sourceMappingURL=index.cjs.map
+//# sourceMappingURL=index.cjs.map

package/dist/billing/index.cjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/billing/shared.ts","../../src/billing/client.ts","../../src/billing/server.ts"],"names":[],"mappings":";;;AAoFO,SAAS,qBAAqB,MAAA,EAAwC;AAC3E,EAAA,OAAO,MAAA,CAAO,QAAA;AAChB;AAYO,SAAS,qBAAqB,IAAA,EAAgD;AACnF,EAAA,OAAO,EAAE,WAAA,EAAa,IAAA,EAAM,SAAA,EAAW,OAAA,EAAS,MAAM,MAAA,EAAO;AAC/D;AAEO,SAAS,oBACd,IAAA,EACA;AACA,EAAA,OAAO;AAAA,IACL,WAAA,EAAa,WAAA,IAAe,IAAA,GAAO,IAAA,CAAK,SAAA,GAAY,MAAA;AAAA,IACpD,YAAY,IAAA,CAAK,SAAA;AAAA,IACjB,qBAAqB,IAAA,CAAK,iBAAA;AAAA,IAC1B,YAAY,IAAA,CAAK,SAAA;AAAA,IACjB,UAAU,IAAA,CAAK,QAAA;AAAA,IACf,UAAU,IAAA,CAAK,OAAA;AAAA,IACf,UAAU,IAAA,CAAK,QAAA;AAAA,IACf,aAAa,IAAA,CAAK,UAAA;AAAA,IAClB,OAAA,EAAS,QAAA,IAAY,IAAA,GAAO,IAAA,CAAK,MAAA,GAAS;AAAA,GAC5C;AACF;AAEO,SAAS,kBACd,IAAA,EACA;AACA,EAAA,OAAO;AAAA,IACL,WAAA,EAAa,WAAA,IAAe,IAAA,GAAO,IAAA,CAAK,SAAA,GAAY,MAAA;AAAA,IACpD,YAAY,IAAA,CAAK,SAAA;AAAA,IACjB,OAAA,EAAS,QAAA,IAAY,IAAA,GAAO,IAAA,CAAK,MAAA,GAAS;AAAA,GAC5C;AACF;;;AChHA,SAAS,WAAW,GAAA,EAAmB;AACrC,EAAA,MAAM,OAAA,GAAU,UAAA;AAGhB,EAAA,IAAI,CAAC,OAAA,CAAQ,MAAA,EAAQ,QAAA,EAAU;AAC7B,IAAA,MAAM,IAAI,MAAM,8DAA8D,CAAA;AAAA,EAChF;AACA,EAAA,OAAA,CAAQ,MAAA,CAAO,SAAS,IAAA,GAAO,GAAA;AACjC;AAEO,IAAM,yBAAN,MAA6B;AAAA,EACjB,SAAA;AAAA,EAEjB,YAAY,SAAA,EAA0B;AACpC,IAAA,IAAA,CAAK,SAAA,GAAY,SAAA;AAAA,EACnB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EASA,SAAA,GAA4C;AAC1C,IAAA,OAAO,IAAA,CAAK,UAAU,OAAA,CAA+B;AAAA,MACnD,OAAA,EAAS,SAAA;AAAA,MACT,IAAA,EAAM;AAAA,KACP,CAAA;AAAA,EACH;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,YAAA,GAAwD;AACtD,IAAA,OAAO,IAAA,CAAK,UAAU,OAAA,CAAwC;AAAA,MAC5D,OAAA,EAAS,SAAA;AAAA,MACT,IAAA,EAAM;AAAA,KACP,CAAA;AAAA,EACH;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,UAAA,GAAkD;AAChD,IAAA,OAAO,IAAA,CAAK,UAAU,OAAA,CAAoC;AAAA,MACxD,OAAA,EAAS,SAAA;AAAA,MACT,IAAA,EAAM;AAAA,KACP,CAAA;AAAA,EACH;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EASA,MAAM,mBAAmB,IAAA,EAAkD;AACzE,IAAA,MAAM,QAAA,GAAW,MAAM,IAAA,CAAK,SAAA,CAAU,OAAA,CAAyB;AAAA,MAC7D,OAAA,EAAS,SAAA;AAAA,MACT,IAAA,EAAM,sBAAA;AAAA,MACN,MAAA,EAAQ,MAAA;AAAA,MACR,IAAA,EAAM,oBAAoB,IAAI;AAAA,KAC/B,CAAA;AACD,IAAA,UAAA,CAAW,SAAS,GAAG,CAAA;AAAA,EACzB;AAAA;AAAA;AAAA;AAAA,EAKA,MAAM,iBAAiB,IAAA,EAAuD;AAC5E,IAAA,MAAM,MAAA,GAAS,MAAM,IAAA,CAAK,SAAA,CAAU,OAAA,CAA+B;AAAA,MACjE,OAAA,EAAS,SAAA;AAAA,MACT,IAAA,EAAM,oBAAA;AAAA,MACN,MAAA,EAAQ,MAAA;AAAA,MACR,IAAA,EAAM,kBAAkB,IAAI;AAAA,KAC7B,CAAA;AACD,IAAA,UAAA,CAAW,OAAO,GAAG,CAAA;AAAA,EACvB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,mBAAmB,IAAA,EAAuD;AACxE,IAAA,OAAO,IAAA,CAAK,iBAAiB,IAAI,CAAA;AAAA,EACnC;AAAA;AAAA;AAAA;AAAA,EAKA,eAAA,GAAwD;AACtD,IAAA,OAAO,IAAA,CAAK,UAAU,OAAA,CAAqC;AAAA,MACzD,OAAA,EAAS,SAAA;AAAA,MACT,IAAA,EAAM;AAAA,KACP,CAAA;AAAA,EACH;AAAA;AAAA;AAAA;AAAA,EAKA,eAAA,GAAwD;AACtD,IAAA,OAAO,IAAA,CAAK,UAAU,OAAA,CAAqC;AAAA,MACzD,OAAA,EAAS,SAAA;AAAA,MACT,IAAA,EAAM;AAAA,KACP,CAAA;AAAA,EACH;AACF;;;AChGO,IAAM,yBAAN,MAA6B;AAAA,EACjB,SAAA;AAAA,EAEjB,YAAY,SAAA,EAA0B;AACpC,IAAA,IAAA,CAAK,SAAA,GAAY,SAAA;AAAA,EACnB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,SAAA,GAA4C;AAC1C,IAAA,OAAO,IAAA,CAAK,UAAU,OAAA,CAA+B;AAAA,MACnD,OAAA,EAAS,SAAA;AAAA,MACT,IAAA,EAAM;AAAA,KACP,CAAA;AAAA,EACH;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,YAAA,GAAwD;AACtD,IAAA,OAAO,IAAA,CAAK,UAAU,OAAA,CAAwC;AAAA,MAC5D,OAAA,EAAS,SAAA;AAAA,MACT,IAAA,EAAM;AAAA,KACP,CAAA;AAAA,EACH;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,UAAA,GAAkD;AAChD,IAAA,OAAO,IAAA,CAAK,UAAU,OAAA,CAAoC;AAAA,MACxD,OAAA,EAAS,SAAA;AAAA,MACT,IAAA,EAAM;AAAA,KACP,CAAA;AAAA,EACH;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EASA,eAAe,IAAA,EAAqE;AAClF,IAAA,OAAO,IAAA,CAAK,UAAU,OAAA,CAAiC;AAAA,MACrD,OAAA,EAAS,SAAA;AAAA,MACT,IAAA,EAAM,sBAAA;AAAA,MACN,MAAA,EAAQ,MAAA;AAAA,MACR,IAAA,EAAM,oBAAoB,IAAI;AAAA,KAC/B,CAAA;AAAA,EACH;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,oBAAoB,IAAA,EAAwE;AAC1F,IAAA,OAAO,IAAA,CAAK,UAAU,OAAA,CAA+B;AAAA,MACnD,OAAA,EAAS,SAAA;AAAA,MACT,IAAA,EAAM,oBAAA;AAAA,MACN,MAAA,EAAQ,MAAA;AAAA,MACR,IAAA,EAAM,kBAAkB,IAAI;AAAA,KAC7B,CAAA;AAAA,EACH;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,gBAAgB,IAAA,EAGyB;AACvC,IAAA,OAAO,IAAA,CAAK,UAAU,OAAA,CAAqC;AAAA,MACzD,OAAA,EAAS,SAAA;AAAA,MACT,IAAA,EAAM,0BAAA;AAAA,MACN,KAAA,EAAO,qBAAqB,IAAI;AAAA,KACjC,CAAA;AAAA,EACH;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,gBAAgB,IAAA,EAGyB;AACvC,IAAA,OAAO,IAAA,CAAK,UAAU,OAAA,CAAqC;AAAA,MACzD,OAAA,EAAS,SAAA;AAAA,MACT,IAAA,EAAM,0BAAA;AAAA,MACN,KAAA,EAAO,qBAAqB,IAAI;AAAA,KACjC,CAAA;AAAA,EACH;AACF","file":"index.cjs","sourcesContent":["export interface BillingProduct {\n  active: boolean;\n  createdAt: string;\n  description: string | null;\n  id: string;\n  name: string;\n}\n\nexport interface BillingPrice {\n  active: boolean;\n  amountCents: number | null;\n  createdAt: string;\n  currency: string;\n  id: string;\n  interval: string | null;\n  lookupKey: string | null;\n  productId: string;\n  productName: string;\n  type: \"one_time\" | \"recurring\" | \"metered\";\n}\n\nexport interface CreateServerCheckoutOptions {\n  appUserId?: string;\n  cancelUrl: string;\n  checkoutRequestId?: string;\n  lookupKey?: string;\n  metadata?: Record<string, string>;\n  priceId?: string;\n  quantity?: number;\n  successUrl: string;\n  userId?: string;\n}\n\nexport interface CreateClientCheckoutOptions {\n  cancelUrl: string;\n  checkoutRequestId?: string;\n  lookupKey?: string;\n  metadata?: Record<string, string>;\n  priceId?: string;\n  quantity?: number;\n  successUrl: string;\n}\n\nexport interface BillingCheckoutResponse {\n  id?: string;\n  stripe_checkout_session_id: string;\n  url: string;\n}\n\nexport interface BillingPortalResponse {\n  url: string;\n}\n\nexport interface BillingSubscriptionResponse {\n  subscription: {\n    cancelAtPeriodEnd: boolean;\n    currentPeriodEnd: string | null;\n    id: string;\n    status: string;\n  } | null;\n}\n\nexport interface BillingEntitlementsResponse {\n  active: boolean;\n  subscription: { currentPeriodEnd: string | null; id: string; status: string } | null;\n}\n\nexport type BillingMode = \"test\" | \"live\";\n\nexport type BillingConfigStatus = \"disabled\" | \"setup_required\" | \"active\" | \"paused\";\n\nexport interface BillingStatusResponse {\n  enabled: boolean;\n  mode: BillingMode | null;\n  status: BillingConfigStatus | null;\n  testMode: boolean;\n}\n\n/**\n * True when the app environment is wired to a Stripe test-mode account.\n *\n * Use this to render a \"Test mode\" banner in your app — payments aren't real\n * charges, and end-buyers should not be expected to enter real card details.\n */\nexport function shouldShowTestBanner(status: BillingStatusResponse): boolean {\n  return status.testMode;\n}\n\nexport interface CreateServerPortalSessionOptions {\n  appUserId?: string;\n  returnUrl: string;\n  userId?: string;\n}\n\nexport interface CreateClientPortalSessionOptions {\n  returnUrl: string;\n}\n\nexport function billingIdentityQuery(opts?: { appUserId?: string; userId?: string }) {\n  return { app_user_id: opts?.appUserId, user_id: opts?.userId };\n}\n\nexport function checkoutRequestBody(\n  opts: CreateServerCheckoutOptions | CreateClientCheckoutOptions\n) {\n  return {\n    app_user_id: \"appUserId\" in opts ? opts.appUserId : undefined,\n    cancel_url: opts.cancelUrl,\n    checkout_request_id: opts.checkoutRequestId,\n    lookup_key: opts.lookupKey,\n    metadata: opts.metadata,\n    price_id: opts.priceId,\n    quantity: opts.quantity,\n    success_url: opts.successUrl,\n    user_id: \"userId\" in opts ? opts.userId : undefined,\n  };\n}\n\nexport function portalRequestBody(\n  opts: CreateServerPortalSessionOptions | CreateClientPortalSessionOptions\n) {\n  return {\n    app_user_id: \"appUserId\" in opts ? opts.appUserId : undefined,\n    return_url: opts.returnUrl,\n    user_id: \"userId\" in opts ? opts.userId : undefined,\n  };\n}\n","import type { HttpTransport } from \"../http\";\nimport {\n  type BillingEntitlementsResponse,\n  type BillingPortalResponse,\n  type BillingPrice,\n  type BillingProduct,\n  type BillingStatusResponse,\n  type BillingSubscriptionResponse,\n  type CreateClientCheckoutOptions,\n  type CreateClientPortalSessionOptions,\n  checkoutRequestBody,\n  portalRequestBody,\n} from \"./shared\";\n\nfunction redirectTo(url: string): void {\n  const browser = globalThis as typeof globalThis & {\n    window?: { location: { href: string } };\n  };\n  if (!browser.window?.location) {\n    throw new Error(\"redirectToCheckout can only be used in a browser environment\");\n  }\n  browser.window.location.href = url;\n}\n\nexport class BillingClientNamespace {\n  private readonly transport: HttpTransport;\n\n  constructor(transport: HttpTransport) {\n    this.transport = transport;\n  }\n\n  /**\n   * Read whether billing is enabled for the app environment tied to this\n   * publishable key, and whether the connected Stripe account is in test or\n   * live mode.\n   *\n   * Render a \"Test mode\" banner in your app whenever `testMode` is true.\n   */\n  getStatus(): Promise<BillingStatusResponse> {\n    return this.transport.request<BillingStatusResponse>({\n      service: \"billing\",\n      path: \"/v1/billing/status\",\n    });\n  }\n\n  /**\n   * List the active billing products for the app environment tied to this\n   * publishable key.\n   */\n  listProducts(): Promise<{ products: BillingProduct[] }> {\n    return this.transport.request<{ products: BillingProduct[] }>({\n      service: \"billing\",\n      path: \"/v1/billing/products\",\n    });\n  }\n\n  /**\n   * List the active billing prices for the app environment tied to this\n   * publishable key.\n   */\n  listPrices(): Promise<{ prices: BillingPrice[] }> {\n    return this.transport.request<{ prices: BillingPrice[] }>({\n      service: \"billing\",\n      path: \"/v1/billing/prices\",\n    });\n  }\n\n  /**\n   * Create a Checkout Session for the signed-in browser user and redirect to\n   * the Stripe-hosted Checkout page.\n   *\n   * This method depends on a Buildspace session being available through\n   * `setSession()` or your app's authenticated request context.\n   */\n  async redirectToCheckout(opts: CreateClientCheckoutOptions): Promise<void> {\n    const checkout = await this.transport.request<{ url: string }>({\n      service: \"billing\",\n      path: \"/v1/billing/checkout\",\n      method: \"POST\",\n      body: checkoutRequestBody(opts),\n    });\n    redirectTo(checkout.url);\n  }\n\n  /**\n   * Open the Stripe-hosted customer portal for the signed-in browser user.\n   */\n  async redirectToPortal(opts: CreateClientPortalSessionOptions): Promise<void> {\n    const portal = await this.transport.request<BillingPortalResponse>({\n      service: \"billing\",\n      path: \"/v1/billing/portal\",\n      method: \"POST\",\n      body: portalRequestBody(opts),\n    });\n    redirectTo(portal.url);\n  }\n\n  /**\n   * Discoverable alias for redirectToPortal — opens the Stripe-hosted customer\n   * portal so the signed-in user can manage their subscription, payment method,\n   * and invoices.\n   */\n  manageSubscription(opts: CreateClientPortalSessionOptions): Promise<void> {\n    return this.redirectToPortal(opts);\n  }\n\n  /**\n   * Read the current subscription state for the signed-in browser user.\n   */\n  getSubscription(): Promise<BillingSubscriptionResponse> {\n    return this.transport.request<BillingSubscriptionResponse>({\n      service: \"billing\",\n      path: \"/v1/billing/subscription\",\n    });\n  }\n\n  /**\n   * Read the current paid entitlement state for the signed-in browser user.\n   */\n  getEntitlements(): Promise<BillingEntitlementsResponse> {\n    return this.transport.request<BillingEntitlementsResponse>({\n      service: \"billing\",\n      path: \"/v1/billing/entitlements\",\n    });\n  }\n}\n","import type { HttpTransport } from \"../http\";\nimport {\n  type BillingCheckoutResponse,\n  type BillingEntitlementsResponse,\n  type BillingPortalResponse,\n  type BillingPrice,\n  type BillingProduct,\n  type BillingStatusResponse,\n  type BillingSubscriptionResponse,\n  billingIdentityQuery,\n  type CreateServerCheckoutOptions,\n  type CreateServerPortalSessionOptions,\n  checkoutRequestBody,\n  portalRequestBody,\n} from \"./shared\";\n\nexport type {\n  BillingCheckoutResponse,\n  BillingEntitlementsResponse,\n  BillingPortalResponse,\n  BillingPrice,\n  BillingProduct,\n  BillingStatusResponse,\n  BillingSubscriptionResponse,\n  CreateServerCheckoutOptions,\n  CreateServerPortalSessionOptions,\n} from \"./shared\";\nexport { shouldShowTestBanner } from \"./shared\";\n\nexport class BillingServerNamespace {\n  private readonly transport: HttpTransport;\n\n  constructor(transport: HttpTransport) {\n    this.transport = transport;\n  }\n\n  /**\n   * Read whether billing is enabled for the app environment tied to this API\n   * key, and whether the connected Stripe account is in test or live mode.\n   *\n   * Render a \"Test mode\" banner in your app whenever `testMode` is true.\n   */\n  getStatus(): Promise<BillingStatusResponse> {\n    return this.transport.request<BillingStatusResponse>({\n      service: \"billing\",\n      path: \"/v1/billing/status\",\n    });\n  }\n\n  /**\n   * List the active billing products configured for the app environment tied to\n   * this API key.\n   */\n  listProducts(): Promise<{ products: BillingProduct[] }> {\n    return this.transport.request<{ products: BillingProduct[] }>({\n      service: \"billing\",\n      path: \"/v1/billing/products\",\n    });\n  }\n\n  /**\n   * List the active billing prices configured for the app environment tied to\n   * this API key.\n   */\n  listPrices(): Promise<{ prices: BillingPrice[] }> {\n    return this.transport.request<{ prices: BillingPrice[] }>({\n      service: \"billing\",\n      path: \"/v1/billing/prices\",\n    });\n  }\n\n  /**\n   * Create a Stripe Checkout Session on the creator's connected Stripe account.\n   *\n   * Use `userId` for Buildspace-authenticated users, or `appUserId` when your\n   * app uses its own auth system and you want Buildspace to track billing state\n   * against an app-defined user id.\n   */\n  createCheckout(opts: CreateServerCheckoutOptions): Promise<BillingCheckoutResponse> {\n    return this.transport.request<BillingCheckoutResponse>({\n      service: \"billing\",\n      path: \"/v1/billing/checkout\",\n      method: \"POST\",\n      body: checkoutRequestBody(opts),\n    });\n  }\n\n  /**\n   * Create a Stripe-hosted customer portal session for the specified billing\n   * identity.\n   */\n  createPortalSession(opts: CreateServerPortalSessionOptions): Promise<BillingPortalResponse> {\n    return this.transport.request<BillingPortalResponse>({\n      service: \"billing\",\n      path: \"/v1/billing/portal\",\n      method: \"POST\",\n      body: portalRequestBody(opts),\n    });\n  }\n\n  /**\n   * Read the current subscription state for a Buildspace user or app-defined\n   * billing identity.\n   */\n  getSubscription(opts?: {\n    appUserId?: string;\n    userId?: string;\n  }): Promise<BillingSubscriptionResponse> {\n    return this.transport.request<BillingSubscriptionResponse>({\n      service: \"billing\",\n      path: \"/v1/billing/subscription\",\n      query: billingIdentityQuery(opts),\n    });\n  }\n\n  /**\n   * Read the current paid entitlement state for a Buildspace user or app-defined\n   * billing identity.\n   */\n  getEntitlements(opts?: {\n    appUserId?: string;\n    userId?: string;\n  }): Promise<BillingEntitlementsResponse> {\n    return this.transport.request<BillingEntitlementsResponse>({\n      service: \"billing\",\n      path: \"/v1/billing/entitlements\",\n      query: billingIdentityQuery(opts),\n    });\n  }\n}\n"]}

package/dist/billing/index.d.cts

@@ -0,0 +1,60 @@
+import { f as BillingStatusResponse, e as BillingProduct, d as BillingPrice, C as CreateServerCheckoutOptions, a as BillingCheckoutResponse, h as CreateServerPortalSessionOptions, c as BillingPortalResponse, g as BillingSubscriptionResponse, b as BillingEntitlementsResponse } from '../client-BYUWUiGZ.cjs';
+export { B as BillingClientNamespace, s as shouldShowTestBanner } from '../client-BYUWUiGZ.cjs';
+import { H as HttpTransport } from '../http-D2gXpNpr.cjs';
+
+declare class BillingServerNamespace {
+    private readonly transport;
+    constructor(transport: HttpTransport);
+    /**
+     * Read whether billing is enabled for the app environment tied to this API
+     * key, and whether the connected Stripe account is in test or live mode.
+     *
+     * Render a "Test mode" banner in your app whenever `testMode` is true.
+     */
+    getStatus(): Promise<BillingStatusResponse>;
+    /**
+     * List the active billing products configured for the app environment tied to
+     * this API key.
+     */
+    listProducts(): Promise<{
+        products: BillingProduct[];
+    }>;
+    /**
+     * List the active billing prices configured for the app environment tied to
+     * this API key.
+     */
+    listPrices(): Promise<{
+        prices: BillingPrice[];
+    }>;
+    /**
+     * Create a Stripe Checkout Session on the creator's connected Stripe account.
+     *
+     * Use `userId` for Buildspace-authenticated users, or `appUserId` when your
+     * app uses its own auth system and you want Buildspace to track billing state
+     * against an app-defined user id.
+     */
+    createCheckout(opts: CreateServerCheckoutOptions): Promise<BillingCheckoutResponse>;
+    /**
+     * Create a Stripe-hosted customer portal session for the specified billing
+     * identity.
+     */
+    createPortalSession(opts: CreateServerPortalSessionOptions): Promise<BillingPortalResponse>;
+    /**
+     * Read the current subscription state for a Buildspace user or app-defined
+     * billing identity.
+     */
+    getSubscription(opts?: {
+        appUserId?: string;
+        userId?: string;
+    }): Promise<BillingSubscriptionResponse>;
+    /**
+     * Read the current paid entitlement state for a Buildspace user or app-defined
+     * billing identity.
+     */
+    getEntitlements(opts?: {
+        appUserId?: string;
+        userId?: string;
+    }): Promise<BillingEntitlementsResponse>;
+}
+
+export { BillingCheckoutResponse, BillingEntitlementsResponse, BillingPortalResponse, BillingPrice, BillingProduct, BillingServerNamespace, BillingStatusResponse, BillingSubscriptionResponse, CreateServerCheckoutOptions, CreateServerPortalSessionOptions };