@calmlens/sdk 0.11.0 → 0.13.0

package/esm/testing.d.ts

@@ -1,4 +1,4 @@
-import { $ as TypedEvent, A as ListEventsOptions, B as UpdateAssetOptions, E as Lens, H as UploadAssetPartOptions, J as GetEventsResponse, K as AssetSearchQuery, L as RetrieveAssetOptions, M as MoveAssetOptions, N as MoveFolderOptions, O as ListAssetChildrenOptions, Q as Event, R as RetryAssetOptions, T as IterateAssetsOptions, V as UpdateFolderOptions, X as AssetBinaryPayloadInput, Y as PostAssetSignedUrlResponse, Z as Folder, _ as DeleteAssetContentOptions, a as AssetSearchResponse, b as EnsureLensesOptions, d as CdnAssetUrlOptions, f as CdnServeOptions, h as CreateFolderOptions, i as AssetPage, j as ModerateTextOptions, k as ListAssetsOptions, m as CreateAssetSignedUrlOptions, n as AssetChildrenPage, ot as ClassificationCategory, q as WebhookEventPayload, s as AssetStatus, t as Asset, u as CalmLensClientOptions, v as DeleteAssetOptions, w as IterateAssetChildrenOptions, x as FolderIdOptions, y as EnsureLensOptions, z as SubmitAssetOptions } from "./CalmLensTypes-BZ-nxhr_.js";
+import { $ as SearchAssetsOptions, A as DeleteAssetContentOptions, At as AssetBinaryPayloadInput, B as Lens, C as CdnAssetUrlOptions, D as CreateAssetSignedUrlOptions, G as ModerateTextOptions, H as ListAssetChildrenOptions, K as MoveAssetOptions, M as EnsureLensOptions, N as EnsureLensesOptions, O as CreateFolderOptions, P as FolderIdOptions, Q as RetryAssetOptions, R as IterateAssetChildrenOptions, S as CalmLensServerClientOptions, U as ListAssetsOptions, W as ListEventsOptions, Z as RetrieveAssetOptions, at as UpdateFolderOptions, d as Asset, et as SignUploadTokenOptions, g as AssetSearchResponse, gt as Event, h as AssetPage, ht as Folder, it as UpdateAssetOptions, j as DeleteAssetOptions, mt as PostAssetSignedUrlResponse, ot as UploadAssetPartOptions, p as AssetChildrenPage, pt as GetEventsResponse, q as MoveFolderOptions, r as ClassificationCategory, rt as SubmitAssetOptions, t as WebhookEventPayload, tt as SignedUploadToken, ut as WaitForAssetDecisionOptions, v as AssetStatus, vt as TypedEvent, w as CdnServeOptions, z as IterateAssetsOptions } from "./WebhookPayload-B7CgSmI5.js";
 import * as zod from "zod";
 //#region ../shared/src/TestTriggers.d.ts
 type ClassificationTestSignal = ClassificationCategory | "sexual.involving-minors" | "violence.graphic";
@@ -32,8 +32,12 @@ declare const GRANT_SCHEMA: zod.ZodObject<{
     "metadata:read": "metadata:read";
     "metadata:write": "metadata:write";
     "project:manage": "project:manage";
+    "reviews:read": "reviews:read";
+    "reviews:write": "reviews:write";
     "settings:read": "settings:read";
     "settings:write": "settings:write";
+    "upload-presets:read": "upload-presets:read";
+    "upload-presets:write": "upload-presets:write";
   }>>;
   folderId: zod.ZodNullable<zod.ZodString>;
   includeSubfolders: zod.ZodBoolean;
@@ -102,8 +106,8 @@ export declare class InMemoryMockDatabaseStorage implements MockDatabaseStorage
   deleteFolder(folderId: string): Promise<void>;
 }
 //#endregion
-//#region src/testing/MockCalmLensClient.d.ts
-interface MockCalmLensClientOptions extends CalmLensClientOptions {
+//#region src/testing/MockCalmLensServerClient.d.ts
+interface MockCalmLensServerClientOptions extends CalmLensServerClientOptions {
   mockOptions?: {
     databaseStorage?: MockDatabaseStorage;
     imageStorage?: MockImageStorage;
@@ -116,13 +120,45 @@ interface MockCalmLensClientOptions extends CalmLensClientOptions {
     signedUrlBaseUrl?: string;
   };
 }
-/** A `MockCalmLensClient` method, named like its path on the client. */
-type MockCalmLensOperation = "assets.list" | "assets.search" | "assets.retrieve" | "assets.update" | "assets.listChildren" | "assets.create" | "assets.moderate" | "assets.uploadPart" | "assets.createSignedUrl" | "assets.move" | "assets.retry" | "assets.deleteContent" | "assets.delete" | "text.moderate" | "cdn.serve" | "events.list" | "folders.list" | "folders.retrieve" | "folders.create" | "folders.update" | "folders.delete" | "folders.move" | "ensureLens" | "ensureLenses";
-/** One recorded call: the method and the options object it was given, exactly as passed. */
-interface MockCalmLensCall {
-  operation: MockCalmLensOperation;
-  options: unknown;
+/** The options each `MockCalmLensServerClient` method was given, by operation name. */
+interface MockCalmLensOperationOptions {
+  "assets.list": ListAssetsOptions;
+  "assets.search": SearchAssetsOptions;
+  "assets.retrieve": RetrieveAssetOptions;
+  "assets.update": UpdateAssetOptions;
+  "assets.listChildren": ListAssetChildrenOptions;
+  "assets.create": SubmitAssetOptions;
+  "assets.moderate": SubmitAssetOptions;
+  "assets.uploadPart": UploadAssetPartOptions;
+  "assets.createSignedUrl": CreateAssetSignedUrlOptions;
+  "assets.move": MoveAssetOptions;
+  "assets.retry": RetryAssetOptions;
+  "assets.waitForDecision": WaitForAssetDecisionOptions;
+  "assets.deleteContent": DeleteAssetContentOptions;
+  "assets.delete": DeleteAssetOptions;
+  "text.moderate": ModerateTextOptions;
+  "cdn.serve": CdnServeOptions;
+  "events.list": ListEventsOptions;
+  "folders.list": undefined;
+  "folders.retrieve": FolderIdOptions;
+  "folders.create": CreateFolderOptions;
+  "folders.update": UpdateFolderOptions;
+  "folders.delete": FolderIdOptions;
+  "folders.move": MoveFolderOptions;
+  ensureLens: EnsureLensOptions;
+  ensureLenses: EnsureLensesOptions;
+  "uploadTokens.sign": SignUploadTokenOptions;
 }
+/** A `MockCalmLensServerClient` method, named like its path on the client. */
+type MockCalmLensOperation = keyof MockCalmLensOperationOptions;
+/**
+ * One recorded call: the method and the options object it was given, exactly as passed. Narrow
+ * on `operation` (or use `callsTo`) to get its options type.
+ */
+type MockCalmLensCall<TOperation extends MockCalmLensOperation = MockCalmLensOperation> = { [Operation in TOperation]: {
+  operation: Operation;
+  options: MockCalmLensOperationOptions[Operation];
+}; }[TOperation];
 /**
  * What a simulated request failure throws: `"transport-error"` and `"timeout"` throw the same
  * `CalmLensError` the real client throws for a network failure (`sdk/transport-error`) or a
@@ -134,11 +170,11 @@ type MockEventInput = Partial<Omit<TypedEvent, "type">> & {
   type: TypedEvent["type"];
 };
 /**
- * An in-memory stand-in for `CalmLensClient` with the same methods, validation and error
+ * An in-memory stand-in for `CalmLensServerClient` with the same methods, validation and error
  * codes. API errors carry the HTTP status, a `requestId` and response headers like the real
  * client's, so error handling can be tested without a network.
  */
-export declare class MockCalmLensClient {
+export declare class MockCalmLensServerClient {
   readonly databaseStorage: MockDatabaseStorage;
   readonly imageStorage: MockImageStorage;
   private readonly createId;
@@ -149,6 +185,7 @@ export declare class MockCalmLensClient {
   private readonly signedUrlBaseUrl;
   private readonly cdnBaseUrl;
   private readonly projectId;
+  private readonly apiKey;
   private readonly lenses;
   private readonly eventFeed;
   /** The queue mode each open multipart upload was started with, as the API saves it. */
@@ -158,8 +195,8 @@ export declare class MockCalmLensClient {
   private readonly pendingFailures;
   /** Every call made through this client, oldest first. */
   readonly calls: MockCalmLensCall[];
-  /** Accepts the same options as `CalmLensClient` (validated the same way), plus `mockOptions`. */
-  constructor(options: MockCalmLensClientOptions);
+  /** Accepts the same options as `CalmLensServerClient` (validated the same way), plus `mockOptions`. */
+  constructor(options: MockCalmLensServerClientOptions);
   /**
    * Makes the next call (or the next call to `operation`) throw `failure` instead of running,
    * as if the request never completed. Queue several to fail several calls in a row.
@@ -168,7 +205,7 @@ export declare class MockCalmLensClient {
     operation?: MockCalmLensOperation;
   }): void;
   /** Calls recorded for one operation, oldest first. */
-  callsTo(operation: MockCalmLensOperation): MockCalmLensCall[];
+  callsTo<TOperation extends MockCalmLensOperation>(operation: TOperation): MockCalmLensCall<TOperation>[];
   /**
    * Adds an event to the feed `events.list` reads, as if CalmLens had recorded it. Returns the
    * stored event; pass it to `toWebhookEventPayload` to build a matching webhook body.
@@ -211,9 +248,7 @@ export declare class MockCalmLensClient {
      * description and tags, best match first. Mock scores are 1 for an exact match and 0.5
      * otherwise; `mode` is accepted but there is no semantic search.
      */
-    search: (options: Partial<AssetSearchQuery> & {
-      query: string;
-    }) => Promise<AssetSearchResponse>;
+    search: (options: SearchAssetsOptions) => Promise<AssetSearchResponse>;
     /** Lists assets with the real client's paging, `ordering`, `folderId` and `filter`. */
     list: (options?: ListAssetsOptions) => Promise<AssetPage>;
     iterate: (options?: IterateAssetsOptions) => AsyncGenerator<Asset, void, undefined>;
@@ -228,9 +263,15 @@ export declare class MockCalmLensClient {
     createSignedUrl: (signedUrlOptions: CreateAssetSignedUrlOptions) => Promise<PostAssetSignedUrlResponse>;
     move: (options: MoveAssetOptions) => Promise<Asset>;
     retry: (options: RetryAssetOptions) => Promise<Asset>;
+    /** Waits like the real client, checking the mock's storage for a decision. */
+    waitForDecision: (options: WaitForAssetDecisionOptions) => Promise<Asset>;
     deleteContent: (options: DeleteAssetContentOptions) => Promise<Asset>;
     delete: (options: DeleteAssetOptions) => Promise<void>;
   };
+  /** Signs real upload tokens with the mock's API key, like the real client, without a request. */
+  get uploadTokens(): {
+    sign: (options: SignUploadTokenOptions) => Promise<SignedUploadToken>;
+  };
   get folders(): {
     list: () => Promise<Folder[]>;
     retrieve: (options: FolderIdOptions) => Promise<Folder>;
@@ -265,4 +306,4 @@ export declare const createWebhookHeaders: (options: {
   timestampSeconds?: number;
 }) => Promise<Record<string, string>>;
 //#endregion
-export type { MockCalmLensCall, MockCalmLensClientOptions, MockCalmLensOperation, MockDatabaseStorage, MockEventInput, MockImageStorage, MockRequestFailure, MockStoredContent };
+export type { MockCalmLensCall, MockCalmLensOperation, MockCalmLensOperationOptions, MockCalmLensServerClientOptions, MockDatabaseStorage, MockEventInput, MockImageStorage, MockRequestFailure, MockStoredContent };

package/esm/testing.js

@@ -1,4 +1,6 @@
-import { A as getAssetPayloadByteLength, D as stringifyJsonCanonical, E as isRejectedUploadMimeType, M as validateAssetPayload, O as assetDataToUint8Array, T as getRejectedUploadMimeTypeError, _ as SDK_ERROR_CODES, b as API_ERROR_CODES, c as appendCdnSelector, d as toTextAssetOptions, f as transformSelector, g as CalmLensError, i as WEBHOOK_TIMESTAMP_HEADER, k as assetToData, l as encodePathSegment, n as WEBHOOK_SIGNATURE_HEADER, p as validateClientOptions, s as hmacSha256Hex, t as WEBHOOK_DELIVERY_HEADER, v as invalidArgument, x as API_ERROR_DEFINITIONS } from "./CalmLensWebhooks-3Otbubyf.js";
+import { c as invalidArgument, d as API_ERROR_DEFINITIONS, o as CalmLensError, s as SDK_ERROR_CODES, u as API_ERROR_CODES } from "./CalmLensVersion-DK4BMEST.js";
+import { c as hmacSha256Hex, i as WEBHOOK_TIMESTAMP_HEADER, l as stringifyJsonCanonical, n as WEBHOOK_SIGNATURE_HEADER, s as signUploadTokenWithApiKey, t as WEBHOOK_DELIVERY_HEADER } from "./CalmLensWebhooks-DyCoEvpf.js";
+import { b as getRejectedUploadMimeTypeError, f as sleep, g as validateAssetPayload, h as getAssetPayloadByteLength, m as assetToData, n as encodePathSegment, o as toTextAssetOptions, p as assetDataToUint8Array, r as pollForDecision, s as transformSelector, t as appendCdnSelector, u as validateServerClientOptions, x as isRejectedUploadMimeType } from "./CalmLensUtils-B4i3Z2He.js";
 import * as zod from "zod";
 import "zod/v4";
 //#region ../shared/src/ModerationCategoryDefinitions.ts
@@ -34,60 +36,66 @@ const MODERATION_CATEGORY_DEFINITIONS = {
 		docsHref: "/docs/guides/moderation-categories#hate-and-identity-abuse"
 	},
 	"criminal-activity": {
-		summary: "Planning, assistance, instructions, encouragement or facilitation of a concrete criminal or seriously dangerous act.",
-		definition: "covers planning, requests for assistance, instructions, encouragement or facilitation of a concrete criminal or seriously dangerous act. A request can qualify even when no act occurs and a later reply refuses it. Dangerous activity requires a concrete serious risk of physical harm.",
-		exclusions: "Neutral reporting, prevention, lawful safety advice, fiction without criminal assistance, and vague dangerous references do not qualify. Masks, computers, payment cards, detention or ordinary tools do not establish criminal facilitation by themselves. A clear visual demonstration of how to carry out a crime can qualify.",
+		summary: "Planning, assistance, instructions, encouragement or facilitation of a concrete criminal or seriously dangerous act, and illegal drugs or contraband.",
+		definition: "covers planning, requests for assistance, instructions, encouragement or facilitation of a concrete criminal or seriously dangerous act. A request can qualify even when no act occurs and a later reply refuses it. Dangerous activity requires a concrete serious risk of physical harm. It also covers illegal drug use, dealing, production or trafficking, and contraband such as stolen goods, counterfeit money or documents and smuggled or illegally traded weapons.",
+		exclusions: "Neutral reporting, prevention, lawful safety advice, fiction without criminal assistance, and vague dangerous references do not qualify. Medical, pharmaceutical, clinical, research and educational content does not qualify, including prescriptions, dosages, side effects, controlled medicines used as prescribed, pharmacies, hospitals and drug manufacturing by pharmaceutical companies. Lawful alcohol and tobacco, harm reduction, addiction recovery and drug-policy discussion do not qualify either. Masks, computers, payment cards, detention or ordinary tools do not establish criminal facilitation by themselves. A clear visual demonstration of how to carry out a crime can qualify.",
 		docsHref: "/docs/guides/moderation-categories#criminal-and-dangerous-activity"
 	}
 };
 //#endregion
 //#region ../shared/src/ModerationPolicyDimensions.ts
 const MODERATION_QUALIFIERS = [
-	"nudity",
+	"sexual-nudity",
 	"sexual-activity",
-	"explicit-sexual-language",
+	"sexual-explicit-language",
 	"sexual-solicitation",
-	"physical-attack",
-	"violent-threat",
-	"violent-preparation",
-	"violent-encouragement",
-	"injury",
-	"death",
-	"graphic",
+	"sexual-historical",
+	"sexual-documentary",
+	"sexual-fictional",
+	"sexual-support-prevention",
+	"violence-attack",
+	"violence-threat",
+	"violence-preparation",
+	"violence-encouragement",
+	"violence-injury",
+	"violence-death",
+	"violence-graphic",
+	"violence-historical",
+	"violence-documentary",
+	"violence-fictional",
+	"violence-support-prevention",
 	"self-harm-thoughts",
 	"self-harm-preparation",
 	"self-harm-act",
 	"self-harm-methods",
 	"self-harm-encouragement",
-	"personal-abuse",
-	"targeted-intimidation",
+	"self-harm-documentary",
+	"self-harm-fictional",
+	"self-harm-support-prevention",
+	"harassment-abuse",
+	"harassment-intimidation",
 	"harassment-threat",
-	"sexual-harassment",
+	"harassment-sexual",
 	"harassment-encouragement",
-	"identity-abuse",
-	"dehumanization",
-	"identity-inferiority",
-	"discriminatory-exclusion",
+	"harassment-fictional",
+	"hate-abuse",
+	"hate-dehumanization",
+	"hate-inferiority",
+	"hate-exclusion",
 	"hate-threat",
-	"criminal-demonstration",
-	"criminal-preparation",
-	"criminal-request",
-	"criminal-instructions",
-	"criminal-promotion",
-	"historical",
-	"documentary",
-	"fictional",
-	"support-prevention"
+	"hate-historical",
+	"hate-fictional",
+	"criminal-activity-demonstration",
+	"criminal-activity-preparation",
+	"criminal-activity-request",
+	"criminal-activity-instructions",
+	"criminal-activity-promotion",
+	"criminal-activity-substances",
+	"criminal-activity-fictional"
 ];
-const SHARED_QUALIFIERS = [
-	"historical",
-	"documentary",
-	"fictional",
-	"support-prevention"
-];
-[...SHARED_QUALIFIERS], [...SHARED_QUALIFIERS], [...SHARED_QUALIFIERS], [...SHARED_QUALIFIERS], [...SHARED_QUALIFIERS], [...SHARED_QUALIFIERS];
 //#endregion
 //#region ../../node_modules/zod-meta/esm/index.js
+const ZOD_META_KEY = "__zod_meta__";
 const createMetaType = (type) => {
 	return Object.assign((value) => {
 		return {
@@ -96,7 +104,117 @@ const createMetaType = (type) => {
 		};
 	}, type);
 };
-createMetaType({ id: "docPropertyInfo" });
+const metaStore = (meta) => {
+	const metaMap = meta.reduce((acc, meta) => {
+		if (meta) acc[meta.type.id] = meta;
+		return acc;
+	}, {});
+	return { [ZOD_META_KEY]: {
+		itemMap: metaMap,
+		get itemList() {
+			return Object.values(metaMap);
+		}
+	} };
+};
+//#endregion
+//#region ../shared/src/DocMetaTypes.ts
+const docPropertyInfo = createMetaType({ id: "docPropertyInfo" });
+//#endregion
+//#region ../shared/src/ProcessingFeatures.ts
+/**
+* Optional analyses a request can turn on with `processingOptions.features.<id>`. The catalog is
+* the single source for the request and result schemas, cache keys and metering. Features are
+* chosen per request only; there is no project-level default.
+*/
+/** How mature a feature is. Beta results may change shape. */
+const PROCESSING_FEATURE_STAGES = ["beta", "ga"];
+const createFeatureOptionsSchemas = (booleanSchema) => {
+	const enabled = booleanSchema.meta(metaStore([docPropertyInfo({ description: "Whether to run the feature. Every feature is off unless this is true." })]));
+	return {
+		ocr: zod.object({ enabled }).strict().meta(metaStore([docPropertyInfo({
+			description: "Extract image text into a child asset and run normal text moderation. Applies to images, including those extracted from multimedia documents and websites.",
+			namedType: "OcrFeatureOptions"
+		})])),
+		personDetection: zod.object({ enabled }).strict().meta(metaStore([docPropertyInfo({
+			description: "Beta. Locate people in images, including people whose faces are not visible. Results are informational and never change the moderation decision.",
+			namedType: "PersonDetectionFeatureOptions"
+		})])),
+		faceDetection: zod.object({
+			enabled,
+			ageEstimation: booleanSchema.optional().meta(metaStore([docPropertyInfo({
+				description: "Also estimate an age range for each face",
+				defaultValue: false
+			})]))
+		}).strict().meta(metaStore([docPropertyInfo({
+			description: "Beta. Locate faces in images and optionally estimate an age range for each. Faces are not identified or stored as biometric templates. Results are informational and never change the moderation decision.",
+			namedType: "FaceDetectionFeatureOptions"
+		})]))
+	};
+};
+const createProcessingFeaturesSchema = (booleanSchema) => {
+	const options = createFeatureOptionsSchemas(booleanSchema);
+	return zod.object({
+		ocr: options.ocr.nullish(),
+		personDetection: options.personDetection.nullish(),
+		faceDetection: options.faceDetection.nullish()
+	}).strict().meta(metaStore([docPropertyInfo({
+		description: "Optional analyses to run on this asset, keyed by feature. Unknown features are rejected.",
+		namedType: "ProcessingFeatures"
+	})]));
+};
+createProcessingFeaturesSchema(zod.boolean());
+/** Position and size as fractions of the image width and height, from 0 to 1. */
+const BOUNDING_BOX_SCHEMA = zod.object({
+	left: zod.number(),
+	top: zod.number(),
+	width: zod.number().min(0),
+	height: zod.number().min(0)
+}).strict().meta(metaStore([docPropertyInfo({
+	description: "Position and size as fractions of the image width and height, from 0 to 1. `left` and `top` can be slightly negative when the subject extends past the edge.",
+	namedType: "BoundingBox"
+})]));
+const DETECTION_CONFIDENCE_SCHEMA = zod.number().min(0).max(1).describe("Detection confidence from 0 to 1");
+const AGE_RANGE_SCHEMA = zod.object({
+	low: zod.number().int().nonnegative(),
+	high: zod.number().int().nonnegative()
+}).strict().meta(metaStore([docPropertyInfo({
+	description: "Estimated age range in years. Estimates can be off by several years.",
+	namedType: "AgeRange"
+})]));
+const DETECTED_PERSON_SCHEMA = zod.object({
+	box: BOUNDING_BOX_SCHEMA,
+	confidence: DETECTION_CONFIDENCE_SCHEMA
+}).strict().meta(metaStore([docPropertyInfo({
+	description: "A detected person",
+	namedType: "DetectedPerson"
+})]));
+const DETECTED_FACE_SCHEMA = zod.object({
+	box: BOUNDING_BOX_SCHEMA,
+	confidence: DETECTION_CONFIDENCE_SCHEMA,
+	ageRange: AGE_RANGE_SCHEMA.optional()
+}).strict().meta(metaStore([docPropertyInfo({
+	description: "A detected face",
+	namedType: "DetectedFace"
+})]));
+const NOT_EVALUATED_FEATURE_RESULT_SCHEMA = zod.object({
+	status: zod.literal("not-evaluated"),
+	stage: zod.enum(PROCESSING_FEATURE_STAGES),
+	reason: zod.enum(["not-supported", "unavailable"])
+}).strict();
+const createFeatureResultSchema = (shape) => zod.discriminatedUnion("status", [zod.object({
+	status: zod.literal("evaluated"),
+	stage: zod.enum(PROCESSING_FEATURE_STAGES),
+	...shape
+}).strict(), NOT_EVALUATED_FEATURE_RESULT_SCHEMA]);
+const PERSON_DETECTION_RESULT_SCHEMA = createFeatureResultSchema({ people: zod.array(DETECTED_PERSON_SCHEMA) });
+const FACE_DETECTION_RESULT_SCHEMA = createFeatureResultSchema({ faces: zod.array(DETECTED_FACE_SCHEMA) });
+const PROCESSING_FEATURE_RESULTS_SCHEMA = zod.object({
+	personDetection: PERSON_DETECTION_RESULT_SCHEMA.optional(),
+	faceDetection: FACE_DETECTION_RESULT_SCHEMA.optional()
+}).strict().meta(metaStore([docPropertyInfo({
+	description: "Results of the optional features requested in `processingOptions.features`, keyed by feature",
+	namedType: "ProcessingFeatureResults"
+})]));
 //#endregion
 //#region ../shared/src/ZodUtils.ts
 const SIZE_LIMITS = {
@@ -139,7 +257,11 @@ const LIKELIHOOD_SCHEMA = zod.enum([
 	"likely",
 	"very-likely"
 ]);
-const CLASSIFICATION_NOT_EVALUATED_REASON_SCHEMA = zod.enum(["not-supported", "unavailable"]);
+const CLASSIFICATION_NOT_EVALUATED_REASON_SCHEMA = zod.enum([
+	"not-supported",
+	"unavailable",
+	"not-requested"
+]);
 const CLASSIFICATION_QUALIFIER_RESULTS_SCHEMA = zod.partialRecord(zod.enum(MODERATION_QUALIFIERS), zod.discriminatedUnion("status", [zod.object({
 	status: zod.literal("evaluated"),
 	score: zod.number().min(0).max(1),
@@ -209,7 +331,8 @@ zod.object({
 			categories: CATEGORIES_SCHEMA
 		}).strict())
 	}).strict().optional(),
-	labels: zod.array(CLASSIFICATION_LABEL_SCHEMA).nullish()
+	labels: zod.array(CLASSIFICATION_LABEL_SCHEMA).nullish(),
+	features: PROCESSING_FEATURE_RESULTS_SCHEMA.optional()
 }).strict();
 //#endregion
 //#region ../shared/src/MediaTestTriggers.ts
@@ -264,6 +387,10 @@ const ACTION_SCHEMA = zod.enum([
 	"metadata:write",
 	"lenses:read",
 	"lenses:write",
+	"upload-presets:read",
+	"upload-presets:write",
+	"reviews:read",
+	"reviews:write",
 	"project:manage"
 ]);
 const PROJECT_ACTIONS = [...[
@@ -272,7 +399,9 @@ const PROJECT_ACTIONS = [...[
 	"api-keys",
 	"connectors",
 	"metadata",
-	"lenses"
+	"lenses",
+	"upload-presets",
+	"reviews"
 ].flatMap((feature) => [`${feature}:read`, `${feature}:write`]), "project:manage"];
 const isProjectAction = (action) => PROJECT_ACTIONS.includes(action);
 /** The actions that include `action`: its feature's write action and project:manage. */
@@ -285,7 +414,7 @@ const GRANT_SCHEMA = zod.object({
 const GRANTS_SCHEMA = zod.array(GRANT_SCHEMA).max(100);
 zod.enum([
 	"admin",
-	"member",
+	"editor",
 	"viewer",
 	"custom"
 ]);
@@ -475,7 +604,7 @@ const parseFilterValue = (raw) => {
 	return value;
 };
 const readField = (item, path) => path.split(".").reduce((value, key) => value && typeof value === "object" ? value[key] : void 0, item);
-const unsupportedFilter = (expression) => invalidArgument(`MockCalmLensClient cannot evaluate the filter "${expression}". It supports ==, !=, <, <=, >, >=, =in= and =out=, joined by ; (and) or , (or), without grouping parentheses.`);
+const unsupportedFilter = (expression) => invalidArgument(`MockCalmLensServerClient cannot evaluate the filter "${expression}". It supports ==, !=, <, <=, >, >=, =in= and =out=, joined by ; (and) or , (or), without grouping parentheses.`);
 const matchesComparison = (item, comparison) => {
 	const match = COMPARISON.exec(comparison.trim());
 	if (!match) throw unsupportedFilter(comparison);
@@ -532,7 +661,7 @@ const filterAssets = (items, filter) => {
 	return items.filter((item) => alternatives.some((conditions) => conditions.every((condition) => matchesComparison(item, condition))));
 };
 //#endregion
-//#region src/testing/MockCalmLensClient.ts
+//#region src/testing/MockCalmLensServerClient.ts
 const DEFAULT_EVENTS_LIMIT = 50;
 /** Stands in for binary payloads when comparing idempotent requests, like the API's size check. */
 const describeBinary = (value) => {
@@ -558,12 +687,12 @@ const toFailureError = (failure) => {
 	return failure;
 };
 /**
-* An in-memory stand-in for `CalmLensClient` with the same methods, validation and error
+* An in-memory stand-in for `CalmLensServerClient` with the same methods, validation and error
 * codes. API errors carry the HTTP status, a `requestId` and response headers like the real
 * client's, so error handling can be tested without a network.
 */
-var MockCalmLensClient = class {
-	/** Accepts the same options as `CalmLensClient` (validated the same way), plus `mockOptions`. */
+var MockCalmLensServerClient = class {
+	/** Accepts the same options as `CalmLensServerClient` (validated the same way), plus `mockOptions`. */
 	constructor(options) {
 		this.lenses = /* @__PURE__ */ new Map();
 		this.eventFeed = [];
@@ -572,8 +701,9 @@ var MockCalmLensClient = class {
 		this.requestCount = 0;
 		this.pendingFailures = [];
 		this.calls = [];
-		validateClientOptions(options);
+		validateServerClientOptions(options);
 		this.projectId = options.projectId;
+		this.apiKey = options.apiKey;
 		this.databaseStorage = options.mockOptions?.databaseStorage ?? new InMemoryMockDatabaseStorage();
 		this.imageStorage = options.mockOptions?.imageStorage ?? new InMemoryMockImageStorage();
 		this.createId = options.mockOptions?.createId ?? crypto.randomUUID.bind(crypto);
@@ -586,7 +716,7 @@ var MockCalmLensClient = class {
 	}
 	/** Keeps the API key out of `console.log` and `util.inspect`. */
 	[Symbol.for("nodejs.util.inspect.custom")]() {
-		return `MockCalmLensClient { projectId: ${JSON.stringify(this.projectId)} }`;
+		return `MockCalmLensServerClient { projectId: ${JSON.stringify(this.projectId)} }`;
 	}
 	/**
 	* Makes the next call (or the next call to `operation`) throw `failure` instead of running,
@@ -943,6 +1073,12 @@ var MockCalmLensClient = class {
 					updatedAt: this.now()
 				});
 			},
+			/** Waits like the real client, checking the mock's storage for a decision. */
+			waitForDecision: async (options) => {
+				this.begin("assets.waitForDecision", options);
+				const { assetId, ...waitOptions } = options;
+				return pollForDecision(() => this.findOwnAsset(assetId), waitOptions, sleep);
+			},
 			deleteContent: async (options) => {
 				this.begin("assets.deleteContent", options);
 				const asset = await this.findOwnAsset(options?.assetId);
@@ -962,6 +1098,16 @@ var MockCalmLensClient = class {
 			}
 		};
 	}
+	/** Signs real upload tokens with the mock's API key, like the real client, without a request. */
+	get uploadTokens() {
+		return { sign: async (options) => {
+			this.begin("uploadTokens.sign", options);
+			return signUploadTokenWithApiKey(this.apiKey, options, {
+				now: this.now(),
+				nonce: this.createId()
+			});
+		} };
+	}
 	get folders() {
 		return {
 			list: async () => {
@@ -1204,4 +1350,4 @@ const createWebhookHeaders = async (options) => {
 	};
 };
 //#endregion
-export { InMemoryMockDatabaseStorage, InMemoryMockImageStorage, MEDIA_TEST_SIGNALS, MOCK_API_KEY_PREFIX, MockCalmLensClient, createMockApiKey, createWebhookHeaders, createWebhookSignatureHeader, generateMediaTestCode, toWebhookEventPayload };
+export { InMemoryMockDatabaseStorage, InMemoryMockImageStorage, MEDIA_TEST_SIGNALS, MOCK_API_KEY_PREFIX, MockCalmLensServerClient, createMockApiKey, createWebhookHeaders, createWebhookSignatureHeader, generateMediaTestCode, toWebhookEventPayload };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@calmlens/sdk",
-  "version": "0.11.0",
+  "version": "0.13.0",
   "description": "Official CalmLens SDK for JavaScript and TypeScript: content moderation, asset storage and CDN delivery.",
   "license": "MIT",
   "homepage": "https://calmlens.com/docs/sdk/javascript",
@@ -72,6 +72,28 @@
       },
       "default": "./esm/index.js"
     },
+    "./server": {
+      "import": {
+        "types": "./esm/server.d.ts",
+        "default": "./esm/server.js"
+      },
+      "require": {
+        "types": "./cjs/server.d.ts",
+        "default": "./cjs/server.js"
+      },
+      "default": "./esm/server.js"
+    },
+    "./app": {
+      "import": {
+        "types": "./esm/app.d.ts",
+        "default": "./esm/app.js"
+      },
+      "require": {
+        "types": "./cjs/app.d.ts",
+        "default": "./cjs/app.js"
+      },
+      "default": "./esm/app.js"
+    },
     "./testing": {
       "import": {
         "types": "./esm/testing.d.ts",