@calmlens/sdk 0.12.0 → 0.14.0

package/cjs/{CalmLensError-CKwMKV0S.js → CalmLensVersion-Bs0DreBV.js}

@@ -11,6 +11,7 @@ const API_ERROR_CODES = {
 	MULTIPART_IMAGE_TOO_LARGE: "upload/multipart-image-too-large",
 	IMAGE_EXCEEDED_MAX_DIMENSIONS: "upload/image-exceeded-max-dimensions",
 	UPLOAD_LIMIT_EXCEEDED: "upload/limit-exceeded",
+	SPEND_LIMIT_REACHED: "upload/spend-limit-reached",
 	INVALID_UPLOAD_MIME_TYPE: "upload/invalid-mime-type",
 	INVALID_EVENT_CURSOR: "events/invalid-cursor",
 	INVALID_UPLOAD_PAYLOAD: "upload/invalid-payload",
@@ -38,6 +39,8 @@ const API_ERROR_CODES = {
 	UPLOAD_PRESET_NOT_FOUND: "upload-preset/not-found",
 	UPLOAD_PRESET_DISABLED: "upload-preset/disabled",
 	UPLOAD_PRESET_TOKEN_REQUIRED: "upload-preset/token-required",
+	REMOTE_URL_NOT_ALLOWED: "upload/remote-url-not-allowed",
+	WEBSITE_RATE_LIMIT_EXCEEDED: "upload/website-rate-limit-exceeded",
 	UPLOAD_PRESET_CONTENT_TYPE_NOT_ALLOWED: "upload-preset/content-type-not-allowed",
 	UPLOAD_PRESET_TOO_LARGE: "upload-preset/too-large",
 	UPLOAD_PRESET_DAILY_LIMIT_REACHED: "upload-preset/daily-limit-reached",
@@ -45,7 +48,18 @@ const API_ERROR_CODES = {
 	UPLOAD_PRESET_FIELD_NOT_ALLOWED: "upload-preset/field-not-allowed",
 	UPLOAD_TOKEN_INVALID: "upload-token/invalid",
 	UPLOAD_TOKEN_EXPIRED: "upload-token/expired",
-	UPLOAD_TOKEN_USED: "upload-token/used"
+	UPLOAD_TOKEN_USED: "upload-token/used",
+	INVALID_REMOTE_URL: "asset/invalid-remote-url",
+	REMOTE_URL_UNAVAILABLE: "asset/remote-url-unavailable",
+	APPEAL_NOT_FOUND: "appeal/not-found",
+	APPEAL_JUDGMENT_NOT_FOUND: "appeal/judgment-not-found",
+	APPEAL_ASSET_NOT_FOUND: "appeal/asset-not-found",
+	APPEAL_PERMISSION_DENIED: "appeal/permission-denied",
+	APPEAL_ALREADY_REVIEWED: "appeal/already-reviewed",
+	APPEAL_DECISION_CHANGED: "appeal/decision-changed",
+	APPEAL_INVALID_ACTION: "appeal/invalid-action",
+	APPEAL_SAFETY_HELD: "appeal/safety-held",
+	APPEAL_CONTENT_UNAVAILABLE: "appeal/content-unavailable"
 };
 /** The HTTP status and default message the API returns with each documented error code. */
 const API_ERROR_DEFINITIONS = {
@@ -89,6 +103,10 @@ const API_ERROR_DEFINITIONS = {
 		status: 403,
 		message: "Upload limit exceeded. You have used all your free uploads. Please upgrade to Plus or Pro for unlimited uploads."
 	},
+	"upload/spend-limit-reached": {
+		status: 402,
+		message: "The project owner's spend limit for this billing period has been reached. Raise the limit in Billing to resume uploads."
+	},
 	"upload/invalid-mime-type": {
 		status: 400,
 		message: "Upload file type is not supported. Uploads must use a concrete file MIME type that CalmLens can store and process, such as image/png, image/jpeg, application/pdf, or text/plain."
@@ -197,6 +215,14 @@ const API_ERROR_DEFINITIONS = {
 		status: 401,
 		message: "This upload preset only accepts uploads with an upload token. Sign one on your server with uploadTokens.sign and pass it to the client."
 	},
+	"upload/remote-url-not-allowed": {
+		status: 403,
+		message: "This project doesn't accept URLs from this domain. Change the allowed or blocked domains under Project settings."
+	},
+	"upload/website-rate-limit-exceeded": {
+		status: 429,
+		message: "This project has submitted too many websites in the last minute. Wait for the Retry-After period, or lower the pace of submissions."
+	},
 	"upload-preset/content-type-not-allowed": {
 		status: 415,
 		message: "This upload preset doesn't accept this file type."
@@ -228,6 +254,50 @@ const API_ERROR_DEFINITIONS = {
 	"upload-token/used": {
 		status: 409,
 		message: "The upload token has already been used. Each token uploads one asset."
+	},
+	"asset/invalid-remote-url": {
+		status: 400,
+		message: "Remote URLs must use HTTP or HTTPS and cannot target private networks, localhost names or URL credentials."
+	},
+	"asset/remote-url-unavailable": {
+		status: 422,
+		message: "The URL responded with an error status. Check that it is publicly reachable."
+	},
+	"appeal/not-found": {
+		status: 404,
+		message: "The appeal does not exist in this project."
+	},
+	"appeal/judgment-not-found": {
+		status: 404,
+		message: "The judgment event is unavailable, belongs to another project or cannot supply an asset decision. Supply explicit context instead."
+	},
+	"appeal/asset-not-found": {
+		status: 404,
+		message: "The linked asset does not exist in this project."
+	},
+	"appeal/permission-denied": {
+		status: 403,
+		message: "You cannot review this project's appeals."
+	},
+	"appeal/already-reviewed": {
+		status: 409,
+		message: "A reviewer already resolved this appeal."
+	},
+	"appeal/decision-changed": {
+		status: 409,
+		message: "The linked asset's decision changed after the appealed decision. Submit a new appeal for the current decision."
+	},
+	"appeal/invalid-action": {
+		status: 400,
+		message: "The decision's action is not valid for this appeal."
+	},
+	"appeal/safety-held": {
+		status: 409,
+		message: "A safety hold prevents this appeal from being submitted or applied."
+	},
+	"appeal/content-unavailable": {
+		status: 409,
+		message: "The appeal's content is unavailable, or approval would require restoring removed content."
 	}
 };
 //#endregion
@@ -318,6 +388,25 @@ const invalidArgument = (message, details) => new CalmLensError(SDK_ERROR_CODES.
 });
 const invalidConfig = (message) => new CalmLensError(SDK_ERROR_CODES.INVALID_CONFIG, { message });
 //#endregion
+//#region src/client/CalmLensVersion.ts
+/** This SDK's version, from its package.json. */
+const SDK_VERSION = "0.14.0";
+const runtimeName = () => {
+	const runtime = globalThis;
+	if (isReactNativeRuntime()) return "react-native";
+	if (runtime.Bun?.version) return `bun/${runtime.Bun.version}`;
+	if (runtime.Deno?.version?.deno) return `deno/${runtime.Deno.version.deno}`;
+	if (runtime.navigator?.userAgent === "Cloudflare-Workers") return "workerd";
+	if (runtime.process?.versions?.node) return `node/${runtime.process.versions.node}`;
+	return "unknown";
+};
+/** The `User-Agent` the SDK sends from server runtimes, e.g. `calmlens-js/0.10.0 (node/22.12.0)`. */
+const getUserAgent = () => `calmlens-js/${SDK_VERSION} (${runtimeName()})`;
+/** True in a web page, where API keys would be visible to every visitor. */
+const isBrowserRuntime = () => typeof globalThis.window !== "undefined" && typeof globalThis.document !== "undefined";
+/** True in a React Native app, where an API key ships inside the app for anyone to extract. */
+const isReactNativeRuntime = () => globalThis.navigator?.product === "ReactNative";
+//#endregion
 Object.defineProperty(exports, "API_ERROR_CODES", {
 	enumerable: true,
 	get: function() {
@@ -348,6 +437,18 @@ Object.defineProperty(exports, "SDK_ERROR_CODES", {
 		return SDK_ERROR_CODES;
 	}
 });
+Object.defineProperty(exports, "SDK_VERSION", {
+	enumerable: true,
+	get: function() {
+		return SDK_VERSION;
+	}
+});
+Object.defineProperty(exports, "getUserAgent", {
+	enumerable: true,
+	get: function() {
+		return getUserAgent;
+	}
+});
 Object.defineProperty(exports, "invalidArgument", {
 	enumerable: true,
 	get: function() {
@@ -360,3 +461,15 @@ Object.defineProperty(exports, "invalidConfig", {
 		return invalidConfig;
 	}
 });
+Object.defineProperty(exports, "isBrowserRuntime", {
+	enumerable: true,
+	get: function() {
+		return isBrowserRuntime;
+	}
+});
+Object.defineProperty(exports, "isReactNativeRuntime", {
+	enumerable: true,
+	get: function() {
+		return isReactNativeRuntime;
+	}
+});

package/cjs/{CalmLensWebhooks-BTPxKvcD.js → CalmLensWebhooks-6thkvr_F.js}

@@ -1,5 +1,5 @@
-const require_CalmLensError = require("./CalmLensError-CKwMKV0S.js");
-const require_CalmLensUtils = require("./CalmLensUtils-Dg3s4loH.js");
+const require_CalmLensVersion = require("./CalmLensVersion-Bs0DreBV.js");
+const require_CalmLensUtils = require("./CalmLensUtils-DNdmYeX6.js");
 //#region ../shared/src/JsonUtils.ts
 const stringifyJsonCanonical = (value) => JSON.stringify(value, (_key, nestedValue) => {
 	if (!nestedValue || typeof nestedValue !== "object" || Array.isArray(nestedValue)) return nestedValue;
@@ -56,11 +56,11 @@ const signUploadToken = async (claims, apiKey) => {
 * `MockCalmLensServerClient` share it so both check options the same way.
 */
 const signUploadTokenWithApiKey = async (apiKey, options, { now = Date.now(), nonce = crypto.randomUUID() } = {}) => {
-	if (!options || typeof options !== "object") throw require_CalmLensError.invalidArgument("Options are required");
+	if (!options || typeof options !== "object") throw require_CalmLensVersion.invalidArgument("Options are required");
 	const { uploadPresetId, externalId, expiresInSeconds = 600 } = options;
 	require_CalmLensUtils.encodePathSegment(uploadPresetId, "Upload preset ID");
-	if (!Number.isInteger(expiresInSeconds) || expiresInSeconds < 1 || expiresInSeconds > 3600) throw require_CalmLensError.invalidArgument(`expiresInSeconds must be a whole number from 1 to ${UPLOAD_TOKEN_MAX_TTL_SECONDS}`);
-	if (externalId !== void 0 && (typeof externalId !== "string" || !externalId)) throw require_CalmLensError.invalidArgument("externalId must be a non-empty string");
+	if (!Number.isInteger(expiresInSeconds) || expiresInSeconds < 1 || expiresInSeconds > 3600) throw require_CalmLensVersion.invalidArgument(`expiresInSeconds must be a whole number from 1 to ${UPLOAD_TOKEN_MAX_TTL_SECONDS}`);
+	if (externalId !== void 0 && (typeof externalId !== "string" || !externalId)) throw require_CalmLensVersion.invalidArgument("externalId must be a non-empty string");
 	const expiresAt = now + expiresInSeconds * 1e3;
 	return {
 		token: await signUploadToken({
@@ -96,7 +96,7 @@ const payloadToText = (payload) => {
 		const view = ArrayBuffer.isView(payload) ? new Uint8Array(payload.buffer, payload.byteOffset, payload.byteLength) : new Uint8Array(payload);
 		return new TextDecoder("utf-8", { fatal: false }).decode(view);
 	}
-	throw require_CalmLensError.invalidArgument("Webhook payload must be the raw request body as a string, Uint8Array/Buffer or ArrayBuffer, not parsed JSON");
+	throw require_CalmLensVersion.invalidArgument("Webhook payload must be the raw request body as a string, Uint8Array/Buffer or ArrayBuffer, not parsed JSON");
 };
 /**
 * Verifies a webhook delivery: `x-calmlens-signature` must contain a `v1=` HMAC-SHA256 of
@@ -130,18 +130,18 @@ async function verifyWebhookSignature(options) {
 * so keep a default branch when you switch on `type`.
 */
 async function parseWebhookEvent(options) {
-	if (!await verifyWebhookSignature(options)) throw new require_CalmLensError.CalmLensError(require_CalmLensError.SDK_ERROR_CODES.INVALID_WEBHOOK_SIGNATURE, { message: "Webhook signature or timestamp did not verify" });
+	if (!await verifyWebhookSignature(options)) throw new require_CalmLensVersion.CalmLensError(require_CalmLensVersion.SDK_ERROR_CODES.INVALID_WEBHOOK_SIGNATURE, { message: "Webhook signature or timestamp did not verify" });
 	let event;
 	try {
 		event = JSON.parse(payloadToText(options.payload));
 	} catch (cause) {
-		throw new require_CalmLensError.CalmLensError(require_CalmLensError.SDK_ERROR_CODES.INVALID_WEBHOOK_PAYLOAD, {
+		throw new require_CalmLensVersion.CalmLensError(require_CalmLensVersion.SDK_ERROR_CODES.INVALID_WEBHOOK_PAYLOAD, {
 			message: "Webhook body is not JSON",
 			cause
 		});
 	}
 	const candidate = event;
-	if (!candidate || typeof candidate !== "object" || typeof candidate.id !== "string" || typeof candidate.type !== "string" || typeof candidate.projectId !== "string" || !candidate.data || typeof candidate.data !== "object") throw new require_CalmLensError.CalmLensError(require_CalmLensError.SDK_ERROR_CODES.INVALID_WEBHOOK_PAYLOAD, { message: "Webhook body is not a CalmLens event" });
+	if (!candidate || typeof candidate !== "object" || typeof candidate.id !== "string" || typeof candidate.type !== "string" || typeof candidate.projectId !== "string" || !candidate.data || typeof candidate.data !== "object") throw new require_CalmLensVersion.CalmLensError(require_CalmLensVersion.SDK_ERROR_CODES.INVALID_WEBHOOK_PAYLOAD, { message: "Webhook body is not a CalmLens event" });
 	return event;
 }
 //#endregion