@calmlens/sdk 0.10.0 → 0.11.0

package/README.md

@@ -195,7 +195,7 @@ For several lenses, use `ensureLenses()` to perform all ensures in one request.
 const [normal, uhd] = await client.ensureLenses({ lenses: [normalLens, uhdLens] });
 ```
 
-The CDN uses named lenses with an `@` prefix in URLs, such as `/content/@picmagic-normal`. The SDK adds it automatically when you supply `lens`. Use `transform` for one-off direct transforms, for example `client.cdn.serve({ assetIdentifier: assetId, transform: "imageTransform[format=png,width=1024]" })`. Supply either `lens` or `transform`, not both. The resolved lens version is part of CalmLens's CDN cache and ETag identity, so changing a lens with the next version invalidates prior derived output.
+The CDN uses named lenses with an `@` prefix in URLs, such as `/content/@picmagic-normal`. The SDK adds it automatically when you supply `lens`. Use `transform` for one-off direct transforms, either as structured steps, for example `client.cdn.serve({ assetIdentifier: assetId, transform: { type: "imageTransform", options: { format: "png", width: 1024 } } })`, or as a selector string such as `"imageTransform[format=png,width=1024]"`. Pass an array of steps to chain transforms. `assets.createSignedUrl` accepts the same forms. Supply either `lens` or `transform`, not both. The resolved lens version is part of CalmLens's CDN cache and ETag identity, so changing a lens with the next version invalidates prior derived output.
 
 ##### assets.list(options)
 

package/cjs/{CalmLensTypes-BfweJTMS.d.ts → CalmLensTypes-BZ-nxhr_.d.ts}

@@ -4997,6 +4997,8 @@ interface EventFieldInfo {
   display: EventFieldDisplay;
   /** Kept in the data but left out of rendered messages (usually an ID shown by another field). */
   hidden?: boolean;
+  /** Display names for `enum` and `list` values that don't read well humanized. */
+  valueLabels?: Readonly<Record<string, string>>;
 }
 interface EventFieldDefinition<TSchema extends zod.ZodType = zod.ZodType> extends EventFieldInfo {
   schema: TSchema;
@@ -5036,6 +5038,8 @@ declare const EVENT_TYPE_INFO: {
       display: EventFieldDisplay;
       /** Kept in the data but left out of rendered messages (usually an ID shown by another field). */
       hidden?: boolean;
+      /** Display names for `enum` and `list` values that don't read well humanized. */
+      valueLabels?: Readonly<Record<string, string>>;
       schema: zod.ZodType<unknown, unknown, zod.core.$ZodTypeInternals<unknown, unknown>>;
       key: string;
     }[];
@@ -5099,6 +5103,8 @@ declare const EVENT_TYPE_INFO: {
       display: EventFieldDisplay;
       /** Kept in the data but left out of rendered messages (usually an ID shown by another field). */
       hidden?: boolean;
+      /** Display names for `enum` and `list` values that don't read well humanized. */
+      valueLabels?: Readonly<Record<string, string>>;
       schema: zod.ZodType<unknown, unknown, zod.core.$ZodTypeInternals<unknown, unknown>>;
       key: string;
     }[];
@@ -5168,6 +5174,8 @@ declare const EVENT_TYPE_INFO: {
       display: EventFieldDisplay;
       /** Kept in the data but left out of rendered messages (usually an ID shown by another field). */
       hidden?: boolean;
+      /** Display names for `enum` and `list` values that don't read well humanized. */
+      valueLabels?: Readonly<Record<string, string>>;
       schema: zod.ZodType<unknown, unknown, zod.core.$ZodTypeInternals<unknown, unknown>>;
       key: string;
     }[];
@@ -5228,6 +5236,8 @@ declare const EVENT_TYPE_INFO: {
       display: EventFieldDisplay;
       /** Kept in the data but left out of rendered messages (usually an ID shown by another field). */
       hidden?: boolean;
+      /** Display names for `enum` and `list` values that don't read well humanized. */
+      valueLabels?: Readonly<Record<string, string>>;
       schema: zod.ZodType<unknown, unknown, zod.core.$ZodTypeInternals<unknown, unknown>>;
       key: string;
     }[];
@@ -5284,6 +5294,8 @@ declare const EVENT_TYPE_INFO: {
       display: EventFieldDisplay;
       /** Kept in the data but left out of rendered messages (usually an ID shown by another field). */
       hidden?: boolean;
+      /** Display names for `enum` and `list` values that don't read well humanized. */
+      valueLabels?: Readonly<Record<string, string>>;
       schema: zod.ZodType<unknown, unknown, zod.core.$ZodTypeInternals<unknown, unknown>>;
       key: string;
     }[];
@@ -5342,6 +5354,8 @@ declare const EVENT_TYPE_INFO: {
       display: EventFieldDisplay;
       /** Kept in the data but left out of rendered messages (usually an ID shown by another field). */
       hidden?: boolean;
+      /** Display names for `enum` and `list` values that don't read well humanized. */
+      valueLabels?: Readonly<Record<string, string>>;
       schema: zod.ZodType<unknown, unknown, zod.core.$ZodTypeInternals<unknown, unknown>>;
       key: string;
     }[];
@@ -5390,6 +5404,8 @@ declare const EVENT_TYPE_INFO: {
       display: EventFieldDisplay;
       /** Kept in the data but left out of rendered messages (usually an ID shown by another field). */
       hidden?: boolean;
+      /** Display names for `enum` and `list` values that don't read well humanized. */
+      valueLabels?: Readonly<Record<string, string>>;
       schema: zod.ZodType<unknown, unknown, zod.core.$ZodTypeInternals<unknown, unknown>>;
       key: string;
     }[];
@@ -5431,6 +5447,8 @@ declare const EVENT_TYPE_INFO: {
       display: EventFieldDisplay;
       /** Kept in the data but left out of rendered messages (usually an ID shown by another field). */
       hidden?: boolean;
+      /** Display names for `enum` and `list` values that don't read well humanized. */
+      valueLabels?: Readonly<Record<string, string>>;
       schema: zod.ZodType<unknown, unknown, zod.core.$ZodTypeInternals<unknown, unknown>>;
       key: string;
     }[];
@@ -5475,6 +5493,8 @@ declare const EVENT_TYPE_INFO: {
       display: EventFieldDisplay;
       /** Kept in the data but left out of rendered messages (usually an ID shown by another field). */
       hidden?: boolean;
+      /** Display names for `enum` and `list` values that don't read well humanized. */
+      valueLabels?: Readonly<Record<string, string>>;
       schema: zod.ZodType<unknown, unknown, zod.core.$ZodTypeInternals<unknown, unknown>>;
       key: string;
     }[];
@@ -5516,6 +5536,8 @@ declare const EVENT_TYPE_INFO: {
       display: EventFieldDisplay;
       /** Kept in the data but left out of rendered messages (usually an ID shown by another field). */
       hidden?: boolean;
+      /** Display names for `enum` and `list` values that don't read well humanized. */
+      valueLabels?: Readonly<Record<string, string>>;
       schema: zod.ZodType<unknown, unknown, zod.core.$ZodTypeInternals<unknown, unknown>>;
       key: string;
     }[];
@@ -5569,6 +5591,8 @@ declare const EVENT_TYPE_INFO: {
       display: EventFieldDisplay;
       /** Kept in the data but left out of rendered messages (usually an ID shown by another field). */
       hidden?: boolean;
+      /** Display names for `enum` and `list` values that don't read well humanized. */
+      valueLabels?: Readonly<Record<string, string>>;
       schema: zod.ZodType<unknown, unknown, zod.core.$ZodTypeInternals<unknown, unknown>>;
       key: string;
     }[];
@@ -8383,6 +8407,11 @@ type LensTransform = {
   type: string;
   options: unknown;
 };
+/**
+ * A CDN transform: a selector string such as `imageTransform[format=png,width=1024]`, or one
+ * or more structured steps such as `{ type: "imageTransform", options: { format: "png" } }`.
+ */
+type CdnTransform = string | LensTransform | LensTransform[];
 /** A named, versioned CDN transformation. */
 type Lens = Omit<zod.infer<typeof LENS_SCHEMA>, "transforms"> & {
   transforms?: LensTransform[] | null;
@@ -8443,7 +8472,7 @@ interface CdnAssetUrlOptions {
   assetIdentifier: string;
   resource?: "content" | "preview";
   lens?: string;
-  transform?: string;
+  transform?: CdnTransform;
 }
 interface CdnServeOptions extends CdnAssetUrlOptions {
   init?: RequestInit;
@@ -8452,7 +8481,7 @@ interface CreateAssetSignedUrlOptions {
   assetId: string;
   resource?: "content" | "preview";
   lens?: string;
-  transform?: string;
+  transform?: CdnTransform;
   expiresInSeconds?: number;
 }
 type EnsureLensOptions = Pick<Lens, "identifier" | "name" | "description" | "type" | "active" | "transforms" | "version">;
@@ -8581,4 +8610,4 @@ interface ModerateTextOptions extends Omit<SubmitAssetCommonOptions, "name" | "v
   name?: string;
 }
 //#endregion
-export { EventCategory as $, ModerateTextOptions as A, UpdateFolderOptions as B, IterateAssetChildrenOptions as C, ListAssetChildrenOptions as D, LensTransform as E, RequestOptions as F, AssetSearchQuery as G, VerifyWebhookSignatureOptions as H, RetrieveAssetOptions as I, PostAssetSignedUrlResponse as J, WebhookEventPayload as K, RetryAssetOptions as L, MoveFolderOptions as M, MultipartUploadOptions as N, ListAssetsOptions as O, MultipartUploadPartOptions as P, TypedEvent as Q, SubmitAssetOptions as R, ImageTransformOptions as S, Lens as T, WebhookHeadersInput as U, UploadAssetPartOptions as V, WebhookPayloadInput as W, Folder as X, AssetBinaryPayloadInput as Y, Event as Z, DeleteAssetOptions as _, AssetSearchResponse as a, ClassificationCategory as at, FolderIdOptions as b, AssetType as c, MetadataItem as ct, CdnAssetUrlOptions as d, EventFact as et, CdnServeOptions as f, DeleteAssetContentOptions as g, CreateMultipartUploadPartOptions as h, AssetPage as i, EventType as it, MoveAssetOptions as j, ListEventsOptions as k, AssetVisibility as l, ProcessingOptions as lt, CreateFolderOptions as m, AssetChildrenPage as n, EventFacts as nt, AssetSearchResult as o, ClassificationCategoryReport as ot, CreateAssetSignedUrlOptions as p, GetEventsResponse as q, AssetContentOptions as r, EventSeverity as rt, AssetStatus as s, ClassificationReport as st, Asset as t, EventFactValues as tt, CalmLensClientOptions as u, EnsureLensOptions as v, IterateAssetsOptions as w, IdempotencyOptions as x, EnsureLensesOptions as y, UpdateAssetOptions as z };
+export { TypedEvent as $, ListEventsOptions as A, UpdateAssetOptions as B, ImageTransformOptions as C, LensTransform as D, Lens as E, MultipartUploadPartOptions as F, WebhookPayloadInput as G, UploadAssetPartOptions as H, RequestOptions as I, GetEventsResponse as J, AssetSearchQuery as K, RetrieveAssetOptions as L, MoveAssetOptions as M, MoveFolderOptions as N, ListAssetChildrenOptions as O, MultipartUploadOptions as P, Event as Q, RetryAssetOptions as R, IdempotencyOptions as S, IterateAssetsOptions as T, VerifyWebhookSignatureOptions as U, UpdateFolderOptions as V, WebhookHeadersInput as W, AssetBinaryPayloadInput as X, PostAssetSignedUrlResponse as Y, Folder as Z, DeleteAssetContentOptions as _, AssetSearchResponse as a, EventType as at, EnsureLensesOptions as b, AssetType as c, ClassificationReport as ct, CdnAssetUrlOptions as d, EventCategory as et, CdnServeOptions as f, CreateMultipartUploadPartOptions as g, CreateFolderOptions as h, AssetPage as i, EventSeverity as it, ModerateTextOptions as j, ListAssetsOptions as k, AssetVisibility as l, MetadataItem as lt, CreateAssetSignedUrlOptions as m, AssetChildrenPage as n, EventFactValues as nt, AssetSearchResult as o, ClassificationCategory as ot, CdnTransform as p, WebhookEventPayload as q, AssetContentOptions as r, EventFacts as rt, AssetStatus as s, ClassificationCategoryReport as st, Asset as t, EventFact as tt, CalmLensClientOptions as u, ProcessingOptions as ut, DeleteAssetOptions as v, IterateAssetChildrenOptions as w, FolderIdOptions as x, EnsureLensOptions as y, SubmitAssetOptions as z };

package/cjs/{CalmLensWebhooks-DJnaLpRy.js → CalmLensWebhooks-CH2PaPs0.js}

@@ -428,14 +428,51 @@ const encodePathSegment = (value, name) => {
 	if (value === "." || value === "..") throw invalidArgument(`${name} cannot be "." or ".."`);
 	return encodeURIComponent(value);
 };
+const TRANSFORM_TYPE_PATTERN = /^[A-Za-z0-9_]+$/;
+/** Percent-encodes everything except RFC 3986 unreserved characters (`A-Z a-z 0-9 - . _ ~`). */
+const encodeTransformComponent = (value) => encodeURIComponent(value).replace(/[!'()*]/g, (char) => `%${char.charCodeAt(0).toString(16).toUpperCase()}`);
+const isPlainObject = (value) => typeof value === "object" && value !== null && !Array.isArray(value);
+const appendTransformOptions = (pairs, key, value) => {
+	if (value === void 0 || value === null) return;
+	if (isPlainObject(value)) {
+		for (const child of Object.keys(value).sort()) appendTransformOptions(pairs, `${key}[${child}]`, value[child]);
+		return;
+	}
+	let text;
+	if (typeof value === "string") text = value;
+	else if (typeof value === "boolean") text = String(value);
+	else if (typeof value === "number" && Number.isFinite(value)) text = String(value);
+	else throw invalidArgument(`Transform option "${key}" must be a string, number, boolean or object`);
+	pairs.push(`${encodeTransformComponent(key)}=${encodeTransformComponent(text)}`);
+};
+/**
+* Serializes structured transforms as a CDN selector, such as
+* `imageTransform[format=png,width=1024]`. Option keys are sorted so equal transforms share a
+* URL; nested keys (`border[color]`) and values are percent-encoded.
+*/
+const serializeTransform = (transform) => {
+	const steps = Array.isArray(transform) ? transform : [transform];
+	if (steps.length === 0) throw invalidArgument("Transform needs at least one step");
+	return steps.map((step) => {
+		if (!isPlainObject(step)) throw invalidArgument("Transform steps must be objects");
+		if (typeof step.type !== "string" || !TRANSFORM_TYPE_PATTERN.test(step.type)) throw invalidArgument("Transform type must contain only letters, digits and underscores");
+		if (step.options !== void 0 && step.options !== null && !isPlainObject(step.options)) throw invalidArgument("Transform options must be an object");
+		const pairs = [];
+		for (const key of Object.keys(step.options ?? {}).sort()) appendTransformOptions(pairs, key, step.options[key]);
+		return `${step.type}[${pairs.join(",")}]`;
+	}).join(",");
+};
+/** Returns the selector string the API and CDN accept for a string or structured transform. */
+const transformSelector = (transform) => transform === void 0 || typeof transform === "string" ? transform : serializeTransform(transform);
 /** Appends a CDN lens (`/@name`) or direct transform selector to an asset URL. */
 const appendCdnSelector = (url, options) => {
 	if (options.lens && options.transform) throw invalidArgument("Specify either a lens or a transform, not both");
 	if (options.lens) return `${url}/@${encodePathSegment(options.lens, "Lens")}`;
 	if (!options.transform) return url;
+	if (typeof options.transform !== "string") return `${url}/${serializeTransform(options.transform)}`;
 	const transform = options.transform.replace(/^\/+/, "");
 	if (transform.includes("..") || transform.includes("?") || transform.includes("#")) throw invalidArgument("Transform cannot contain \"..\", \"?\" or \"#\"");
-	return `${url}/${encodeURI(transform)}`;
+	return `${url}/${encodeURI(transform).replace(/%5B/g, "[").replace(/%5D/g, "]")}`;
 };
 const appendQueryValue = (parts, key, value) => {
 	if (value === void 0 || value === null) return;
@@ -715,6 +752,12 @@ Object.defineProperty(exports, "toTextAssetOptions", {
 		return toTextAssetOptions;
 	}
 });
+Object.defineProperty(exports, "transformSelector", {
+	enumerable: true,
+	get: function() {
+		return transformSelector;
+	}
+});
 Object.defineProperty(exports, "validateAssetPayload", {
 	enumerable: true,
 	get: function() {

package/cjs/index.d.ts

@@ -1,4 +1,4 @@
-import { $ as EventCategory, A as ModerateTextOptions, B as UpdateFolderOptions, C as IterateAssetChildrenOptions, D as ListAssetChildrenOptions, E as LensTransform, F as RequestOptions, G as AssetSearchQuery, H as VerifyWebhookSignatureOptions, I as RetrieveAssetOptions, J as PostAssetSignedUrlResponse, K as WebhookEventPayload, L as RetryAssetOptions, M as MoveFolderOptions, N as MultipartUploadOptions, O as ListAssetsOptions, P as MultipartUploadPartOptions, Q as TypedEvent, R as SubmitAssetOptions, S as ImageTransformOptions, T as Lens, U as WebhookHeadersInput, V as UploadAssetPartOptions, W as WebhookPayloadInput, X as Folder, _ as DeleteAssetOptions, a as AssetSearchResponse, b as FolderIdOptions, c as AssetType, ct as MetadataItem, d as CdnAssetUrlOptions, et as EventFact, f as CdnServeOptions, g as DeleteAssetContentOptions, h as CreateMultipartUploadPartOptions, i as AssetPage, it as EventType, j as MoveAssetOptions, k as ListEventsOptions, l as AssetVisibility, lt as ProcessingOptions, m as CreateFolderOptions, n as AssetChildrenPage, nt as EventFacts, o as AssetSearchResult, ot as ClassificationCategoryReport, p as CreateAssetSignedUrlOptions, q as GetEventsResponse, r as AssetContentOptions, rt as EventSeverity, s as AssetStatus, st as ClassificationReport, t as Asset, tt as EventFactValues, u as CalmLensClientOptions, v as EnsureLensOptions, w as IterateAssetsOptions, x as IdempotencyOptions, y as EnsureLensesOptions, z as UpdateAssetOptions } from "./CalmLensTypes-BfweJTMS.js";
+import { $ as TypedEvent, A as ListEventsOptions, B as UpdateAssetOptions, C as ImageTransformOptions, D as LensTransform, E as Lens, F as MultipartUploadPartOptions, G as WebhookPayloadInput, H as UploadAssetPartOptions, I as RequestOptions, J as GetEventsResponse, K as AssetSearchQuery, L as RetrieveAssetOptions, M as MoveAssetOptions, N as MoveFolderOptions, O as ListAssetChildrenOptions, P as MultipartUploadOptions, R as RetryAssetOptions, S as IdempotencyOptions, T as IterateAssetsOptions, U as VerifyWebhookSignatureOptions, V as UpdateFolderOptions, W as WebhookHeadersInput, Y as PostAssetSignedUrlResponse, Z as Folder, _ as DeleteAssetContentOptions, a as AssetSearchResponse, at as EventType, b as EnsureLensesOptions, c as AssetType, ct as ClassificationReport, d as CdnAssetUrlOptions, et as EventCategory, f as CdnServeOptions, g as CreateMultipartUploadPartOptions, h as CreateFolderOptions, i as AssetPage, it as EventSeverity, j as ModerateTextOptions, k as ListAssetsOptions, l as AssetVisibility, lt as MetadataItem, m as CreateAssetSignedUrlOptions, n as AssetChildrenPage, nt as EventFactValues, o as AssetSearchResult, p as CdnTransform, q as WebhookEventPayload, r as AssetContentOptions, rt as EventFacts, s as AssetStatus, st as ClassificationCategoryReport, t as Asset, tt as EventFact, u as CalmLensClientOptions, ut as ProcessingOptions, v as DeleteAssetOptions, w as IterateAssetChildrenOptions, x as FolderIdOptions, y as EnsureLensOptions, z as SubmitAssetOptions } from "./CalmLensTypes-BZ-nxhr_.js";
 //#region src/client/CalmLensClient.d.ts
 interface ClientState {
   readonly options: Omit<CalmLensClientOptions, "apiKey"> & {
@@ -379,4 +379,4 @@ export declare function verifyWebhookSignature(options: VerifyWebhookSignatureOp
  */
 export declare function parseWebhookEvent(options: VerifyWebhookSignatureOptions): Promise<WebhookEventPayload>;
 //#endregion
-export { type ApiErrorCode, type Asset, type AssetChildrenPage, type AssetContentOptions, type AssetPage, type AssetSearchQuery, type AssetSearchResponse, type AssetSearchResult, type AssetStatus, type AssetType, type AssetVisibility, CalmLensClient, type CalmLensClientOptions, type CalmLensErrorCode, type CalmLensErrorDetails, type CalmLensErrorOptions, type CdnAssetUrlOptions, type CdnServeOptions, type ClassificationCategoryReport, type ClassificationReport, type CreateAssetSignedUrlOptions, type CreateFolderOptions, type CreateMultipartUploadPartOptions, type DeleteAssetContentOptions, type DeleteAssetOptions, type EnsureLensOptions, type EnsureLensesOptions, type EventCategory, type EventFact, type EventFactValues, type EventFacts, type EventSeverity, type EventType, type GetEventsResponse as EventsPage, type Folder, type FolderIdOptions, type IdempotencyOptions, type ImageTransformOptions, type IterateAssetChildrenOptions, type IterateAssetsOptions, type Lens, type LensTransform, type ListAssetChildrenOptions, type ListAssetsOptions, type ListEventsOptions, type MetadataItem, type ModerateTextOptions, type MoveAssetOptions, type MoveFolderOptions, type MultipartUploadOptions, type MultipartUploadPartOptions, type ProcessingOptions, type RequestOptions, type RetrieveAssetOptions, type RetryAssetOptions, type SdkErrorCode, type SubmitAssetOptions, type TypedEvent, type UpdateAssetOptions, type UpdateFolderOptions, type UploadAssetPartOptions, type VerifyWebhookSignatureOptions, type WebhookEventPayload, type WebhookHeadersInput, type WebhookPayloadInput };
+export { type ApiErrorCode, type Asset, type AssetChildrenPage, type AssetContentOptions, type AssetPage, type AssetSearchQuery, type AssetSearchResponse, type AssetSearchResult, type AssetStatus, type AssetType, type AssetVisibility, CalmLensClient, type CalmLensClientOptions, type CalmLensErrorCode, type CalmLensErrorDetails, type CalmLensErrorOptions, type CdnAssetUrlOptions, type CdnServeOptions, type CdnTransform, type ClassificationCategoryReport, type ClassificationReport, type CreateAssetSignedUrlOptions, type CreateFolderOptions, type CreateMultipartUploadPartOptions, type DeleteAssetContentOptions, type DeleteAssetOptions, type EnsureLensOptions, type EnsureLensesOptions, type EventCategory, type EventFact, type EventFactValues, type EventFacts, type EventSeverity, type EventType, type GetEventsResponse as EventsPage, type Folder, type FolderIdOptions, type IdempotencyOptions, type ImageTransformOptions, type IterateAssetChildrenOptions, type IterateAssetsOptions, type Lens, type LensTransform, type ListAssetChildrenOptions, type ListAssetsOptions, type ListEventsOptions, type MetadataItem, type ModerateTextOptions, type MoveAssetOptions, type MoveFolderOptions, type MultipartUploadOptions, type MultipartUploadPartOptions, type ProcessingOptions, type RequestOptions, type RetrieveAssetOptions, type RetryAssetOptions, type SdkErrorCode, type SubmitAssetOptions, type TypedEvent, type UpdateAssetOptions, type UpdateFolderOptions, type UploadAssetPartOptions, type VerifyWebhookSignatureOptions, type WebhookEventPayload, type WebhookHeadersInput, type WebhookPayloadInput };

package/cjs/index.js

@@ -1,9 +1,9 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
-const require_CalmLensWebhooks = require("./CalmLensWebhooks-DJnaLpRy.js");
+const require_CalmLensWebhooks = require("./CalmLensWebhooks-CH2PaPs0.js");
 //#endregion
 //#region src/client/CalmLensVersion.ts
 /** This SDK's version, from its package.json. */
-const SDK_VERSION = "0.10.0";
+const SDK_VERSION = "0.11.0";
 const runtimeName = () => {
 	const runtime = globalThis;
 	if (runtime.Bun?.version) return `bun/${runtime.Bun.version}`;
@@ -72,6 +72,11 @@ const createAttemptSignal = (signals, timeoutMs) => {
 		}
 	};
 };
+/**
+* A redirect the SDK must not follow: it would send the API key to another origin. Browsers report
+* a manual redirect as an opaque response; other runtimes return the 3xx with its Location.
+*/
+const isRedirect = (response) => response.type === "opaqueredirect" || response.status >= 300 && response.status < 400 && response.headers.has("location");
 /** Turns anything thrown while sending or reading a request into a `CalmLensError`. */
 const toFailure = (cause, attempt) => {
 	if (require_CalmLensWebhooks.CalmLensError.isCalmLensError(cause)) return cause;
@@ -220,10 +225,14 @@ var CalmLensTransport = class {
 					method: request.method,
 					headers,
 					body: request.body,
-					redirect: "error",
+					redirect: "manual",
 					signal: attempt.signal,
 					duplex: "half"
 				});
+				if (isRedirect(response)) {
+					await response.body?.cancel().catch(() => {});
+					throw new require_CalmLensWebhooks.CalmLensError(require_CalmLensWebhooks.SDK_ERROR_CODES.TRANSPORT_ERROR, { message: `Unexpected redirect (HTTP ${response.status})` });
+				}
 			} catch (cause) {
 				attempt.release();
 				const failure = toFailure(cause, attempt);
@@ -668,7 +677,7 @@ moderate: async (options) => this.assets.moderate(require_CalmLensWebhooks.toTex
 					resource: options.resource ?? "content",
 					expiresInSeconds: options.expiresInSeconds ?? 900,
 					lens: options.lens,
-					transform: options.transform
+					transform: require_CalmLensWebhooks.transformSelector(options.transform)
 				} });
 			},
 			/** Moves an asset into a folder, or to the project root with `folderId: null`. */

package/cjs/testing.d.ts

@@ -1,4 +1,4 @@
-import { A as ModerateTextOptions, B as UpdateFolderOptions, C as IterateAssetChildrenOptions, D as ListAssetChildrenOptions, G as AssetSearchQuery, I as RetrieveAssetOptions, J as PostAssetSignedUrlResponse, K as WebhookEventPayload, L as RetryAssetOptions, M as MoveFolderOptions, O as ListAssetsOptions, Q as TypedEvent, R as SubmitAssetOptions, T as Lens, V as UploadAssetPartOptions, X as Folder, Y as AssetBinaryPayloadInput, Z as Event, _ as DeleteAssetOptions, a as AssetSearchResponse, at as ClassificationCategory, b as FolderIdOptions, d as CdnAssetUrlOptions, f as CdnServeOptions, g as DeleteAssetContentOptions, i as AssetPage, j as MoveAssetOptions, k as ListEventsOptions, m as CreateFolderOptions, n as AssetChildrenPage, p as CreateAssetSignedUrlOptions, q as GetEventsResponse, s as AssetStatus, t as Asset, u as CalmLensClientOptions, v as EnsureLensOptions, w as IterateAssetsOptions, y as EnsureLensesOptions, z as UpdateAssetOptions } from "./CalmLensTypes-BfweJTMS.js";
+import { $ as TypedEvent, A as ListEventsOptions, B as UpdateAssetOptions, E as Lens, H as UploadAssetPartOptions, J as GetEventsResponse, K as AssetSearchQuery, L as RetrieveAssetOptions, M as MoveAssetOptions, N as MoveFolderOptions, O as ListAssetChildrenOptions, Q as Event, R as RetryAssetOptions, T as IterateAssetsOptions, V as UpdateFolderOptions, X as AssetBinaryPayloadInput, Y as PostAssetSignedUrlResponse, Z as Folder, _ as DeleteAssetContentOptions, a as AssetSearchResponse, b as EnsureLensesOptions, d as CdnAssetUrlOptions, f as CdnServeOptions, h as CreateFolderOptions, i as AssetPage, j as ModerateTextOptions, k as ListAssetsOptions, m as CreateAssetSignedUrlOptions, n as AssetChildrenPage, ot as ClassificationCategory, q as WebhookEventPayload, s as AssetStatus, t as Asset, u as CalmLensClientOptions, v as DeleteAssetOptions, w as IterateAssetChildrenOptions, x as FolderIdOptions, y as EnsureLensOptions, z as SubmitAssetOptions } from "./CalmLensTypes-BZ-nxhr_.js";
 import * as zod from "zod";
 //#region ../shared/src/TestTriggers.d.ts
 type ClassificationTestSignal = ClassificationCategory | "sexual.involving-minors" | "violence.graphic";

package/cjs/testing.js

@@ -21,7 +21,7 @@ var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__ge
 	enumerable: true
 }) : target, mod));
 //#endregion
-const require_CalmLensWebhooks = require("./CalmLensWebhooks-DJnaLpRy.js");
+const require_CalmLensWebhooks = require("./CalmLensWebhooks-CH2PaPs0.js");
 let zod = require("zod");
 zod = __toESM(zod);
 require("zod/v4");
@@ -936,7 +936,8 @@ var MockCalmLensClient = class {
 				if (options.lens && options.transform) throw require_CalmLensWebhooks.invalidArgument("Specify either a lens or a transform, not both");
 				const expiresInSeconds = options.expiresInSeconds ?? 900;
 				const resource = options.resource ?? "content";
-				const selector = options.lens ? `&lens=${encodeURIComponent(options.lens)}` : options.transform ? `&transform=${encodeURIComponent(options.transform)}` : "";
+				const transform = require_CalmLensWebhooks.transformSelector(options.transform);
+				const selector = options.lens ? `&lens=${encodeURIComponent(options.lens)}` : transform ? `&transform=${encodeURIComponent(transform)}` : "";
 				return {
 					url: `${this.signedUrlBaseUrl}/assets/${asset.id}/${resource}?expiresInSeconds=${expiresInSeconds}${selector}`,
 					expiresAt: this.now() + expiresInSeconds * 1e3

package/esm/{CalmLensTypes-BfweJTMS.d.ts → CalmLensTypes-BZ-nxhr_.d.ts}

@@ -4997,6 +4997,8 @@ interface EventFieldInfo {
   display: EventFieldDisplay;
   /** Kept in the data but left out of rendered messages (usually an ID shown by another field). */
   hidden?: boolean;
+  /** Display names for `enum` and `list` values that don't read well humanized. */
+  valueLabels?: Readonly<Record<string, string>>;
 }
 interface EventFieldDefinition<TSchema extends zod.ZodType = zod.ZodType> extends EventFieldInfo {
   schema: TSchema;
@@ -5036,6 +5038,8 @@ declare const EVENT_TYPE_INFO: {
       display: EventFieldDisplay;
       /** Kept in the data but left out of rendered messages (usually an ID shown by another field). */
       hidden?: boolean;
+      /** Display names for `enum` and `list` values that don't read well humanized. */
+      valueLabels?: Readonly<Record<string, string>>;
       schema: zod.ZodType<unknown, unknown, zod.core.$ZodTypeInternals<unknown, unknown>>;
       key: string;
     }[];
@@ -5099,6 +5103,8 @@ declare const EVENT_TYPE_INFO: {
       display: EventFieldDisplay;
       /** Kept in the data but left out of rendered messages (usually an ID shown by another field). */
       hidden?: boolean;
+      /** Display names for `enum` and `list` values that don't read well humanized. */
+      valueLabels?: Readonly<Record<string, string>>;
       schema: zod.ZodType<unknown, unknown, zod.core.$ZodTypeInternals<unknown, unknown>>;
       key: string;
     }[];
@@ -5168,6 +5174,8 @@ declare const EVENT_TYPE_INFO: {
       display: EventFieldDisplay;
       /** Kept in the data but left out of rendered messages (usually an ID shown by another field). */
       hidden?: boolean;
+      /** Display names for `enum` and `list` values that don't read well humanized. */
+      valueLabels?: Readonly<Record<string, string>>;
       schema: zod.ZodType<unknown, unknown, zod.core.$ZodTypeInternals<unknown, unknown>>;
       key: string;
     }[];
@@ -5228,6 +5236,8 @@ declare const EVENT_TYPE_INFO: {
       display: EventFieldDisplay;
       /** Kept in the data but left out of rendered messages (usually an ID shown by another field). */
       hidden?: boolean;
+      /** Display names for `enum` and `list` values that don't read well humanized. */
+      valueLabels?: Readonly<Record<string, string>>;
       schema: zod.ZodType<unknown, unknown, zod.core.$ZodTypeInternals<unknown, unknown>>;
       key: string;
     }[];
@@ -5284,6 +5294,8 @@ declare const EVENT_TYPE_INFO: {
       display: EventFieldDisplay;
       /** Kept in the data but left out of rendered messages (usually an ID shown by another field). */
       hidden?: boolean;
+      /** Display names for `enum` and `list` values that don't read well humanized. */
+      valueLabels?: Readonly<Record<string, string>>;
       schema: zod.ZodType<unknown, unknown, zod.core.$ZodTypeInternals<unknown, unknown>>;
       key: string;
     }[];
@@ -5342,6 +5354,8 @@ declare const EVENT_TYPE_INFO: {
       display: EventFieldDisplay;
       /** Kept in the data but left out of rendered messages (usually an ID shown by another field). */
       hidden?: boolean;
+      /** Display names for `enum` and `list` values that don't read well humanized. */
+      valueLabels?: Readonly<Record<string, string>>;
       schema: zod.ZodType<unknown, unknown, zod.core.$ZodTypeInternals<unknown, unknown>>;
       key: string;
     }[];
@@ -5390,6 +5404,8 @@ declare const EVENT_TYPE_INFO: {
       display: EventFieldDisplay;
       /** Kept in the data but left out of rendered messages (usually an ID shown by another field). */
       hidden?: boolean;
+      /** Display names for `enum` and `list` values that don't read well humanized. */
+      valueLabels?: Readonly<Record<string, string>>;
       schema: zod.ZodType<unknown, unknown, zod.core.$ZodTypeInternals<unknown, unknown>>;
       key: string;
     }[];
@@ -5431,6 +5447,8 @@ declare const EVENT_TYPE_INFO: {
       display: EventFieldDisplay;
       /** Kept in the data but left out of rendered messages (usually an ID shown by another field). */
       hidden?: boolean;
+      /** Display names for `enum` and `list` values that don't read well humanized. */
+      valueLabels?: Readonly<Record<string, string>>;
       schema: zod.ZodType<unknown, unknown, zod.core.$ZodTypeInternals<unknown, unknown>>;
       key: string;
     }[];
@@ -5475,6 +5493,8 @@ declare const EVENT_TYPE_INFO: {
       display: EventFieldDisplay;
       /** Kept in the data but left out of rendered messages (usually an ID shown by another field). */
       hidden?: boolean;
+      /** Display names for `enum` and `list` values that don't read well humanized. */
+      valueLabels?: Readonly<Record<string, string>>;
       schema: zod.ZodType<unknown, unknown, zod.core.$ZodTypeInternals<unknown, unknown>>;
       key: string;
     }[];
@@ -5516,6 +5536,8 @@ declare const EVENT_TYPE_INFO: {
       display: EventFieldDisplay;
       /** Kept in the data but left out of rendered messages (usually an ID shown by another field). */
       hidden?: boolean;
+      /** Display names for `enum` and `list` values that don't read well humanized. */
+      valueLabels?: Readonly<Record<string, string>>;
       schema: zod.ZodType<unknown, unknown, zod.core.$ZodTypeInternals<unknown, unknown>>;
       key: string;
     }[];
@@ -5569,6 +5591,8 @@ declare const EVENT_TYPE_INFO: {
       display: EventFieldDisplay;
       /** Kept in the data but left out of rendered messages (usually an ID shown by another field). */
       hidden?: boolean;
+      /** Display names for `enum` and `list` values that don't read well humanized. */
+      valueLabels?: Readonly<Record<string, string>>;
       schema: zod.ZodType<unknown, unknown, zod.core.$ZodTypeInternals<unknown, unknown>>;
       key: string;
     }[];
@@ -8383,6 +8407,11 @@ type LensTransform = {
   type: string;
   options: unknown;
 };
+/**
+ * A CDN transform: a selector string such as `imageTransform[format=png,width=1024]`, or one
+ * or more structured steps such as `{ type: "imageTransform", options: { format: "png" } }`.
+ */
+type CdnTransform = string | LensTransform | LensTransform[];
 /** A named, versioned CDN transformation. */
 type Lens = Omit<zod.infer<typeof LENS_SCHEMA>, "transforms"> & {
   transforms?: LensTransform[] | null;
@@ -8443,7 +8472,7 @@ interface CdnAssetUrlOptions {
   assetIdentifier: string;
   resource?: "content" | "preview";
   lens?: string;
-  transform?: string;
+  transform?: CdnTransform;
 }
 interface CdnServeOptions extends CdnAssetUrlOptions {
   init?: RequestInit;
@@ -8452,7 +8481,7 @@ interface CreateAssetSignedUrlOptions {
   assetId: string;
   resource?: "content" | "preview";
   lens?: string;
-  transform?: string;
+  transform?: CdnTransform;
   expiresInSeconds?: number;
 }
 type EnsureLensOptions = Pick<Lens, "identifier" | "name" | "description" | "type" | "active" | "transforms" | "version">;
@@ -8581,4 +8610,4 @@ interface ModerateTextOptions extends Omit<SubmitAssetCommonOptions, "name" | "v
   name?: string;
 }
 //#endregion
-export { EventCategory as $, ModerateTextOptions as A, UpdateFolderOptions as B, IterateAssetChildrenOptions as C, ListAssetChildrenOptions as D, LensTransform as E, RequestOptions as F, AssetSearchQuery as G, VerifyWebhookSignatureOptions as H, RetrieveAssetOptions as I, PostAssetSignedUrlResponse as J, WebhookEventPayload as K, RetryAssetOptions as L, MoveFolderOptions as M, MultipartUploadOptions as N, ListAssetsOptions as O, MultipartUploadPartOptions as P, TypedEvent as Q, SubmitAssetOptions as R, ImageTransformOptions as S, Lens as T, WebhookHeadersInput as U, UploadAssetPartOptions as V, WebhookPayloadInput as W, Folder as X, AssetBinaryPayloadInput as Y, Event as Z, DeleteAssetOptions as _, AssetSearchResponse as a, ClassificationCategory as at, FolderIdOptions as b, AssetType as c, MetadataItem as ct, CdnAssetUrlOptions as d, EventFact as et, CdnServeOptions as f, DeleteAssetContentOptions as g, CreateMultipartUploadPartOptions as h, AssetPage as i, EventType as it, MoveAssetOptions as j, ListEventsOptions as k, AssetVisibility as l, ProcessingOptions as lt, CreateFolderOptions as m, AssetChildrenPage as n, EventFacts as nt, AssetSearchResult as o, ClassificationCategoryReport as ot, CreateAssetSignedUrlOptions as p, GetEventsResponse as q, AssetContentOptions as r, EventSeverity as rt, AssetStatus as s, ClassificationReport as st, Asset as t, EventFactValues as tt, CalmLensClientOptions as u, EnsureLensOptions as v, IterateAssetsOptions as w, IdempotencyOptions as x, EnsureLensesOptions as y, UpdateAssetOptions as z };
+export { TypedEvent as $, ListEventsOptions as A, UpdateAssetOptions as B, ImageTransformOptions as C, LensTransform as D, Lens as E, MultipartUploadPartOptions as F, WebhookPayloadInput as G, UploadAssetPartOptions as H, RequestOptions as I, GetEventsResponse as J, AssetSearchQuery as K, RetrieveAssetOptions as L, MoveAssetOptions as M, MoveFolderOptions as N, ListAssetChildrenOptions as O, MultipartUploadOptions as P, Event as Q, RetryAssetOptions as R, IdempotencyOptions as S, IterateAssetsOptions as T, VerifyWebhookSignatureOptions as U, UpdateFolderOptions as V, WebhookHeadersInput as W, AssetBinaryPayloadInput as X, PostAssetSignedUrlResponse as Y, Folder as Z, DeleteAssetContentOptions as _, AssetSearchResponse as a, EventType as at, EnsureLensesOptions as b, AssetType as c, ClassificationReport as ct, CdnAssetUrlOptions as d, EventCategory as et, CdnServeOptions as f, CreateMultipartUploadPartOptions as g, CreateFolderOptions as h, AssetPage as i, EventSeverity as it, ModerateTextOptions as j, ListAssetsOptions as k, AssetVisibility as l, MetadataItem as lt, CreateAssetSignedUrlOptions as m, AssetChildrenPage as n, EventFactValues as nt, AssetSearchResult as o, ClassificationCategory as ot, CdnTransform as p, WebhookEventPayload as q, AssetContentOptions as r, EventFacts as rt, AssetStatus as s, ClassificationCategoryReport as st, Asset as t, EventFact as tt, CalmLensClientOptions as u, ProcessingOptions as ut, DeleteAssetOptions as v, IterateAssetChildrenOptions as w, FolderIdOptions as x, EnsureLensOptions as y, SubmitAssetOptions as z };

package/esm/{CalmLensWebhooks-DLUozliX.js → CalmLensWebhooks-3Otbubyf.js}

@@ -428,14 +428,51 @@ const encodePathSegment = (value, name) => {
 	if (value === "." || value === "..") throw invalidArgument(`${name} cannot be "." or ".."`);
 	return encodeURIComponent(value);
 };
+const TRANSFORM_TYPE_PATTERN = /^[A-Za-z0-9_]+$/;
+/** Percent-encodes everything except RFC 3986 unreserved characters (`A-Z a-z 0-9 - . _ ~`). */
+const encodeTransformComponent = (value) => encodeURIComponent(value).replace(/[!'()*]/g, (char) => `%${char.charCodeAt(0).toString(16).toUpperCase()}`);
+const isPlainObject = (value) => typeof value === "object" && value !== null && !Array.isArray(value);
+const appendTransformOptions = (pairs, key, value) => {
+	if (value === void 0 || value === null) return;
+	if (isPlainObject(value)) {
+		for (const child of Object.keys(value).sort()) appendTransformOptions(pairs, `${key}[${child}]`, value[child]);
+		return;
+	}
+	let text;
+	if (typeof value === "string") text = value;
+	else if (typeof value === "boolean") text = String(value);
+	else if (typeof value === "number" && Number.isFinite(value)) text = String(value);
+	else throw invalidArgument(`Transform option "${key}" must be a string, number, boolean or object`);
+	pairs.push(`${encodeTransformComponent(key)}=${encodeTransformComponent(text)}`);
+};
+/**
+* Serializes structured transforms as a CDN selector, such as
+* `imageTransform[format=png,width=1024]`. Option keys are sorted so equal transforms share a
+* URL; nested keys (`border[color]`) and values are percent-encoded.
+*/
+const serializeTransform = (transform) => {
+	const steps = Array.isArray(transform) ? transform : [transform];
+	if (steps.length === 0) throw invalidArgument("Transform needs at least one step");
+	return steps.map((step) => {
+		if (!isPlainObject(step)) throw invalidArgument("Transform steps must be objects");
+		if (typeof step.type !== "string" || !TRANSFORM_TYPE_PATTERN.test(step.type)) throw invalidArgument("Transform type must contain only letters, digits and underscores");
+		if (step.options !== void 0 && step.options !== null && !isPlainObject(step.options)) throw invalidArgument("Transform options must be an object");
+		const pairs = [];
+		for (const key of Object.keys(step.options ?? {}).sort()) appendTransformOptions(pairs, key, step.options[key]);
+		return `${step.type}[${pairs.join(",")}]`;
+	}).join(",");
+};
+/** Returns the selector string the API and CDN accept for a string or structured transform. */
+const transformSelector = (transform) => transform === void 0 || typeof transform === "string" ? transform : serializeTransform(transform);
 /** Appends a CDN lens (`/@name`) or direct transform selector to an asset URL. */
 const appendCdnSelector = (url, options) => {
 	if (options.lens && options.transform) throw invalidArgument("Specify either a lens or a transform, not both");
 	if (options.lens) return `${url}/@${encodePathSegment(options.lens, "Lens")}`;
 	if (!options.transform) return url;
+	if (typeof options.transform !== "string") return `${url}/${serializeTransform(options.transform)}`;
 	const transform = options.transform.replace(/^\/+/, "");
 	if (transform.includes("..") || transform.includes("?") || transform.includes("#")) throw invalidArgument("Transform cannot contain \"..\", \"?\" or \"#\"");
-	return `${url}/${encodeURI(transform)}`;
+	return `${url}/${encodeURI(transform).replace(/%5B/g, "[").replace(/%5D/g, "]")}`;
 };
 const appendQueryValue = (parts, key, value) => {
 	if (value === void 0 || value === null) return;
@@ -553,4 +590,4 @@ async function parseWebhookEvent(options) {
 	return event;
 }
 //#endregion
-export { getRawBase64 as A, MIN_MULTIPART_IMAGE_UPLOAD_BYTES as C, assetDataToUint8Array as D, stringifyJsonCanonical as E, assetToData as O, MAX_IMAGE_UPLOAD_BYTES as S, isRejectedUploadMimeType as T, invalidArgument as _, parseWebhookEvent as a, API_ERROR_DEFINITIONS as b, appendCdnSelector as c, toTextAssetOptions as d, validateClientOptions as f, SDK_ERROR_CODES as g, CalmLensError as h, WEBHOOK_TIMESTAMP_HEADER as i, validateAssetPayload as j, getAssetPayloadByteLength as k, encodePathSegment as l, CALMLENS_ERROR_CODES as m, WEBHOOK_SIGNATURE_HEADER as n, verifyWebhookSignature as o, validateRequestOptions as p, WEBHOOK_SIGNATURE_TOLERANCE_SECONDS as r, hmacSha256Hex as s, WEBHOOK_DELIVERY_HEADER as t, stringifyQuery as u, invalidConfig as v, getRejectedUploadMimeTypeError as w, DOMAIN as x, API_ERROR_CODES as y };
+export { getAssetPayloadByteLength as A, MAX_IMAGE_UPLOAD_BYTES as C, stringifyJsonCanonical as D, isRejectedUploadMimeType as E, validateAssetPayload as M, assetDataToUint8Array as O, DOMAIN as S, getRejectedUploadMimeTypeError as T, SDK_ERROR_CODES as _, parseWebhookEvent as a, API_ERROR_CODES as b, appendCdnSelector as c, toTextAssetOptions as d, transformSelector as f, CalmLensError as g, CALMLENS_ERROR_CODES as h, WEBHOOK_TIMESTAMP_HEADER as i, getRawBase64 as j, assetToData as k, encodePathSegment as l, validateRequestOptions as m, WEBHOOK_SIGNATURE_HEADER as n, verifyWebhookSignature as o, validateClientOptions as p, WEBHOOK_SIGNATURE_TOLERANCE_SECONDS as r, hmacSha256Hex as s, WEBHOOK_DELIVERY_HEADER as t, stringifyQuery as u, invalidArgument as v, MIN_MULTIPART_IMAGE_UPLOAD_BYTES as w, API_ERROR_DEFINITIONS as x, invalidConfig as y };

package/esm/index.d.ts

@@ -1,4 +1,4 @@
-import { $ as EventCategory, A as ModerateTextOptions, B as UpdateFolderOptions, C as IterateAssetChildrenOptions, D as ListAssetChildrenOptions, E as LensTransform, F as RequestOptions, G as AssetSearchQuery, H as VerifyWebhookSignatureOptions, I as RetrieveAssetOptions, J as PostAssetSignedUrlResponse, K as WebhookEventPayload, L as RetryAssetOptions, M as MoveFolderOptions, N as MultipartUploadOptions, O as ListAssetsOptions, P as MultipartUploadPartOptions, Q as TypedEvent, R as SubmitAssetOptions, S as ImageTransformOptions, T as Lens, U as WebhookHeadersInput, V as UploadAssetPartOptions, W as WebhookPayloadInput, X as Folder, _ as DeleteAssetOptions, a as AssetSearchResponse, b as FolderIdOptions, c as AssetType, ct as MetadataItem, d as CdnAssetUrlOptions, et as EventFact, f as CdnServeOptions, g as DeleteAssetContentOptions, h as CreateMultipartUploadPartOptions, i as AssetPage, it as EventType, j as MoveAssetOptions, k as ListEventsOptions, l as AssetVisibility, lt as ProcessingOptions, m as CreateFolderOptions, n as AssetChildrenPage, nt as EventFacts, o as AssetSearchResult, ot as ClassificationCategoryReport, p as CreateAssetSignedUrlOptions, q as GetEventsResponse, r as AssetContentOptions, rt as EventSeverity, s as AssetStatus, st as ClassificationReport, t as Asset, tt as EventFactValues, u as CalmLensClientOptions, v as EnsureLensOptions, w as IterateAssetsOptions, x as IdempotencyOptions, y as EnsureLensesOptions, z as UpdateAssetOptions } from "./CalmLensTypes-BfweJTMS.js";
+import { $ as TypedEvent, A as ListEventsOptions, B as UpdateAssetOptions, C as ImageTransformOptions, D as LensTransform, E as Lens, F as MultipartUploadPartOptions, G as WebhookPayloadInput, H as UploadAssetPartOptions, I as RequestOptions, J as GetEventsResponse, K as AssetSearchQuery, L as RetrieveAssetOptions, M as MoveAssetOptions, N as MoveFolderOptions, O as ListAssetChildrenOptions, P as MultipartUploadOptions, R as RetryAssetOptions, S as IdempotencyOptions, T as IterateAssetsOptions, U as VerifyWebhookSignatureOptions, V as UpdateFolderOptions, W as WebhookHeadersInput, Y as PostAssetSignedUrlResponse, Z as Folder, _ as DeleteAssetContentOptions, a as AssetSearchResponse, at as EventType, b as EnsureLensesOptions, c as AssetType, ct as ClassificationReport, d as CdnAssetUrlOptions, et as EventCategory, f as CdnServeOptions, g as CreateMultipartUploadPartOptions, h as CreateFolderOptions, i as AssetPage, it as EventSeverity, j as ModerateTextOptions, k as ListAssetsOptions, l as AssetVisibility, lt as MetadataItem, m as CreateAssetSignedUrlOptions, n as AssetChildrenPage, nt as EventFactValues, o as AssetSearchResult, p as CdnTransform, q as WebhookEventPayload, r as AssetContentOptions, rt as EventFacts, s as AssetStatus, st as ClassificationCategoryReport, t as Asset, tt as EventFact, u as CalmLensClientOptions, ut as ProcessingOptions, v as DeleteAssetOptions, w as IterateAssetChildrenOptions, x as FolderIdOptions, y as EnsureLensOptions, z as SubmitAssetOptions } from "./CalmLensTypes-BZ-nxhr_.js";
 //#region src/client/CalmLensClient.d.ts
 interface ClientState {
   readonly options: Omit<CalmLensClientOptions, "apiKey"> & {
@@ -379,4 +379,4 @@ export declare function verifyWebhookSignature(options: VerifyWebhookSignatureOp
  */
 export declare function parseWebhookEvent(options: VerifyWebhookSignatureOptions): Promise<WebhookEventPayload>;
 //#endregion
-export { type ApiErrorCode, type Asset, type AssetChildrenPage, type AssetContentOptions, type AssetPage, type AssetSearchQuery, type AssetSearchResponse, type AssetSearchResult, type AssetStatus, type AssetType, type AssetVisibility, CalmLensClient, type CalmLensClientOptions, type CalmLensErrorCode, type CalmLensErrorDetails, type CalmLensErrorOptions, type CdnAssetUrlOptions, type CdnServeOptions, type ClassificationCategoryReport, type ClassificationReport, type CreateAssetSignedUrlOptions, type CreateFolderOptions, type CreateMultipartUploadPartOptions, type DeleteAssetContentOptions, type DeleteAssetOptions, type EnsureLensOptions, type EnsureLensesOptions, type EventCategory, type EventFact, type EventFactValues, type EventFacts, type EventSeverity, type EventType, type GetEventsResponse as EventsPage, type Folder, type FolderIdOptions, type IdempotencyOptions, type ImageTransformOptions, type IterateAssetChildrenOptions, type IterateAssetsOptions, type Lens, type LensTransform, type ListAssetChildrenOptions, type ListAssetsOptions, type ListEventsOptions, type MetadataItem, type ModerateTextOptions, type MoveAssetOptions, type MoveFolderOptions, type MultipartUploadOptions, type MultipartUploadPartOptions, type ProcessingOptions, type RequestOptions, type RetrieveAssetOptions, type RetryAssetOptions, type SdkErrorCode, type SubmitAssetOptions, type TypedEvent, type UpdateAssetOptions, type UpdateFolderOptions, type UploadAssetPartOptions, type VerifyWebhookSignatureOptions, type WebhookEventPayload, type WebhookHeadersInput, type WebhookPayloadInput };
+export { type ApiErrorCode, type Asset, type AssetChildrenPage, type AssetContentOptions, type AssetPage, type AssetSearchQuery, type AssetSearchResponse, type AssetSearchResult, type AssetStatus, type AssetType, type AssetVisibility, CalmLensClient, type CalmLensClientOptions, type CalmLensErrorCode, type CalmLensErrorDetails, type CalmLensErrorOptions, type CdnAssetUrlOptions, type CdnServeOptions, type CdnTransform, type ClassificationCategoryReport, type ClassificationReport, type CreateAssetSignedUrlOptions, type CreateFolderOptions, type CreateMultipartUploadPartOptions, type DeleteAssetContentOptions, type DeleteAssetOptions, type EnsureLensOptions, type EnsureLensesOptions, type EventCategory, type EventFact, type EventFactValues, type EventFacts, type EventSeverity, type EventType, type GetEventsResponse as EventsPage, type Folder, type FolderIdOptions, type IdempotencyOptions, type ImageTransformOptions, type IterateAssetChildrenOptions, type IterateAssetsOptions, type Lens, type LensTransform, type ListAssetChildrenOptions, type ListAssetsOptions, type ListEventsOptions, type MetadataItem, type ModerateTextOptions, type MoveAssetOptions, type MoveFolderOptions, type MultipartUploadOptions, type MultipartUploadPartOptions, type ProcessingOptions, type RequestOptions, type RetrieveAssetOptions, type RetryAssetOptions, type SdkErrorCode, type SubmitAssetOptions, type TypedEvent, type UpdateAssetOptions, type UpdateFolderOptions, type UploadAssetPartOptions, type VerifyWebhookSignatureOptions, type WebhookEventPayload, type WebhookHeadersInput, type WebhookPayloadInput };

package/esm/index.js

@@ -1,8 +1,8 @@
-import { A as getRawBase64, C as MIN_MULTIPART_IMAGE_UPLOAD_BYTES, E as stringifyJsonCanonical, O as assetToData, S as MAX_IMAGE_UPLOAD_BYTES, T as isRejectedUploadMimeType, _ as invalidArgument, a as parseWebhookEvent, c as appendCdnSelector, d as toTextAssetOptions, f as validateClientOptions, g as SDK_ERROR_CODES, h as CalmLensError, i as WEBHOOK_TIMESTAMP_HEADER, j as validateAssetPayload, k as getAssetPayloadByteLength, l as encodePathSegment, m as CALMLENS_ERROR_CODES, n as WEBHOOK_SIGNATURE_HEADER, o as verifyWebhookSignature, p as validateRequestOptions, r as WEBHOOK_SIGNATURE_TOLERANCE_SECONDS, t as WEBHOOK_DELIVERY_HEADER, u as stringifyQuery, v as invalidConfig, w as getRejectedUploadMimeTypeError, y as API_ERROR_CODES } from "./CalmLensWebhooks-DLUozliX.js";
+import { A as getAssetPayloadByteLength, C as MAX_IMAGE_UPLOAD_BYTES, D as stringifyJsonCanonical, E as isRejectedUploadMimeType, M as validateAssetPayload, T as getRejectedUploadMimeTypeError, _ as SDK_ERROR_CODES, a as parseWebhookEvent, b as API_ERROR_CODES, c as appendCdnSelector, d as toTextAssetOptions, f as transformSelector, g as CalmLensError, h as CALMLENS_ERROR_CODES, i as WEBHOOK_TIMESTAMP_HEADER, j as getRawBase64, k as assetToData, l as encodePathSegment, m as validateRequestOptions, n as WEBHOOK_SIGNATURE_HEADER, o as verifyWebhookSignature, p as validateClientOptions, r as WEBHOOK_SIGNATURE_TOLERANCE_SECONDS, t as WEBHOOK_DELIVERY_HEADER, u as stringifyQuery, v as invalidArgument, w as MIN_MULTIPART_IMAGE_UPLOAD_BYTES, y as invalidConfig } from "./CalmLensWebhooks-3Otbubyf.js";
 //#endregion
 //#region src/client/CalmLensVersion.ts
 /** This SDK's version, from its package.json. */
-const SDK_VERSION = "0.10.0";
+const SDK_VERSION = "0.11.0";
 const runtimeName = () => {
 	const runtime = globalThis;
 	if (runtime.Bun?.version) return `bun/${runtime.Bun.version}`;
@@ -71,6 +71,11 @@ const createAttemptSignal = (signals, timeoutMs) => {
 		}
 	};
 };
+/**
+* A redirect the SDK must not follow: it would send the API key to another origin. Browsers report
+* a manual redirect as an opaque response; other runtimes return the 3xx with its Location.
+*/
+const isRedirect = (response) => response.type === "opaqueredirect" || response.status >= 300 && response.status < 400 && response.headers.has("location");
 /** Turns anything thrown while sending or reading a request into a `CalmLensError`. */
 const toFailure = (cause, attempt) => {
 	if (CalmLensError.isCalmLensError(cause)) return cause;
@@ -219,10 +224,14 @@ var CalmLensTransport = class {
 					method: request.method,
 					headers,
 					body: request.body,
-					redirect: "error",
+					redirect: "manual",
 					signal: attempt.signal,
 					duplex: "half"
 				});
+				if (isRedirect(response)) {
+					await response.body?.cancel().catch(() => {});
+					throw new CalmLensError(SDK_ERROR_CODES.TRANSPORT_ERROR, { message: `Unexpected redirect (HTTP ${response.status})` });
+				}
 			} catch (cause) {
 				attempt.release();
 				const failure = toFailure(cause, attempt);
@@ -667,7 +676,7 @@ moderate: async (options) => this.assets.moderate(toTextAssetOptions(options)) }
 					resource: options.resource ?? "content",
 					expiresInSeconds: options.expiresInSeconds ?? 900,
 					lens: options.lens,
-					transform: options.transform
+					transform: transformSelector(options.transform)
 				} });
 			},
 			/** Moves an asset into a folder, or to the project root with `folderId: null`. */

package/esm/testing.d.ts

@@ -1,4 +1,4 @@
-import { A as ModerateTextOptions, B as UpdateFolderOptions, C as IterateAssetChildrenOptions, D as ListAssetChildrenOptions, G as AssetSearchQuery, I as RetrieveAssetOptions, J as PostAssetSignedUrlResponse, K as WebhookEventPayload, L as RetryAssetOptions, M as MoveFolderOptions, O as ListAssetsOptions, Q as TypedEvent, R as SubmitAssetOptions, T as Lens, V as UploadAssetPartOptions, X as Folder, Y as AssetBinaryPayloadInput, Z as Event, _ as DeleteAssetOptions, a as AssetSearchResponse, at as ClassificationCategory, b as FolderIdOptions, d as CdnAssetUrlOptions, f as CdnServeOptions, g as DeleteAssetContentOptions, i as AssetPage, j as MoveAssetOptions, k as ListEventsOptions, m as CreateFolderOptions, n as AssetChildrenPage, p as CreateAssetSignedUrlOptions, q as GetEventsResponse, s as AssetStatus, t as Asset, u as CalmLensClientOptions, v as EnsureLensOptions, w as IterateAssetsOptions, y as EnsureLensesOptions, z as UpdateAssetOptions } from "./CalmLensTypes-BfweJTMS.js";
+import { $ as TypedEvent, A as ListEventsOptions, B as UpdateAssetOptions, E as Lens, H as UploadAssetPartOptions, J as GetEventsResponse, K as AssetSearchQuery, L as RetrieveAssetOptions, M as MoveAssetOptions, N as MoveFolderOptions, O as ListAssetChildrenOptions, Q as Event, R as RetryAssetOptions, T as IterateAssetsOptions, V as UpdateFolderOptions, X as AssetBinaryPayloadInput, Y as PostAssetSignedUrlResponse, Z as Folder, _ as DeleteAssetContentOptions, a as AssetSearchResponse, b as EnsureLensesOptions, d as CdnAssetUrlOptions, f as CdnServeOptions, h as CreateFolderOptions, i as AssetPage, j as ModerateTextOptions, k as ListAssetsOptions, m as CreateAssetSignedUrlOptions, n as AssetChildrenPage, ot as ClassificationCategory, q as WebhookEventPayload, s as AssetStatus, t as Asset, u as CalmLensClientOptions, v as DeleteAssetOptions, w as IterateAssetChildrenOptions, x as FolderIdOptions, y as EnsureLensOptions, z as SubmitAssetOptions } from "./CalmLensTypes-BZ-nxhr_.js";
 import * as zod from "zod";
 //#region ../shared/src/TestTriggers.d.ts
 type ClassificationTestSignal = ClassificationCategory | "sexual.involving-minors" | "violence.graphic";

package/esm/testing.js

@@ -1,4 +1,4 @@
-import { D as assetDataToUint8Array, E as stringifyJsonCanonical, O as assetToData, T as isRejectedUploadMimeType, _ as invalidArgument, b as API_ERROR_DEFINITIONS, c as appendCdnSelector, d as toTextAssetOptions, f as validateClientOptions, g as SDK_ERROR_CODES, h as CalmLensError, i as WEBHOOK_TIMESTAMP_HEADER, j as validateAssetPayload, k as getAssetPayloadByteLength, l as encodePathSegment, n as WEBHOOK_SIGNATURE_HEADER, s as hmacSha256Hex, t as WEBHOOK_DELIVERY_HEADER, w as getRejectedUploadMimeTypeError, y as API_ERROR_CODES } from "./CalmLensWebhooks-DLUozliX.js";
+import { A as getAssetPayloadByteLength, D as stringifyJsonCanonical, E as isRejectedUploadMimeType, M as validateAssetPayload, O as assetDataToUint8Array, T as getRejectedUploadMimeTypeError, _ as SDK_ERROR_CODES, b as API_ERROR_CODES, c as appendCdnSelector, d as toTextAssetOptions, f as transformSelector, g as CalmLensError, i as WEBHOOK_TIMESTAMP_HEADER, k as assetToData, l as encodePathSegment, n as WEBHOOK_SIGNATURE_HEADER, p as validateClientOptions, s as hmacSha256Hex, t as WEBHOOK_DELIVERY_HEADER, v as invalidArgument, x as API_ERROR_DEFINITIONS } from "./CalmLensWebhooks-3Otbubyf.js";
 import * as zod from "zod";
 import "zod/v4";
 //#region ../shared/src/ModerationCategoryDefinitions.ts
@@ -912,7 +912,8 @@ var MockCalmLensClient = class {
 				if (options.lens && options.transform) throw invalidArgument("Specify either a lens or a transform, not both");
 				const expiresInSeconds = options.expiresInSeconds ?? 900;
 				const resource = options.resource ?? "content";
-				const selector = options.lens ? `&lens=${encodeURIComponent(options.lens)}` : options.transform ? `&transform=${encodeURIComponent(options.transform)}` : "";
+				const transform = transformSelector(options.transform);
+				const selector = options.lens ? `&lens=${encodeURIComponent(options.lens)}` : transform ? `&transform=${encodeURIComponent(transform)}` : "";
 				return {
 					url: `${this.signedUrlBaseUrl}/assets/${asset.id}/${resource}?expiresInSeconds=${expiresInSeconds}${selector}`,
 					expiresAt: this.now() + expiresInSeconds * 1e3

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@calmlens/sdk",
-  "version": "0.10.0",
+  "version": "0.11.0",
   "description": "Official CalmLens SDK for JavaScript and TypeScript: content moderation, asset storage and CDN delivery.",
   "license": "MIT",
   "homepage": "https://calmlens.com/docs/sdk/javascript",