@chrtco/sdk 0.7.6 → 0.8.0

package/dist/index.cjs

@@ -31,6 +31,7 @@ __export(index_exports, {
   ChrtError: () => ChrtError,
   DEFAULT_REGION: () => DEFAULT_REGION,
   DEFAULT_TILE_BASE_URL: () => DEFAULT_TILE_BASE_URL,
+  DEFAULT_TILE_REGION: () => DEFAULT_TILE_REGION,
   LABELED_LAYERS: () => LABELED_LAYERS,
   LABEL_BEHAVIOR: () => LABEL_BEHAVIOR,
   NAUTICAL_SYMBOLS: () => NAUTICAL_SYMBOLS,
@@ -48,6 +49,8 @@ __export(index_exports, {
   S52_NIGHT: () => S52_NIGHT,
   SYMBOL_GROUPS: () => SYMBOL_GROUPS,
   SYMBOL_MAP: () => SYMBOL_MAP,
+  TileAuth: () => TileAuth,
+  TileTokenError: () => TileTokenError,
   applyColorTheme: () => applyColorTheme,
   bandFilterExpression: () => bandFilterExpression,
   buildLabelLayer: () => buildLabelLayer,
@@ -226,20 +229,243 @@ function sleep(ms) {
   return new Promise((r) => setTimeout(r, ms));
 }
 
+// src/tile-auth.ts
+var DEFAULT_TILE_REGION = "NOAA_ENC";
+var DEFAULT_TILE_BASE_URL = "https://tiles.chrt.co";
+var TileTokenError = class extends Error {
+  code;
+  status;
+  constructor(code, message, status) {
+    super(message);
+    this.name = "TileTokenError";
+    this.code = code;
+    this.status = status;
+  }
+};
+var TILE_URL_PATH = /\/v1\/tiles\/[A-Za-z0-9_]+(?:\/[a-z][a-z0-9-]*)?\/\d+\/\d+\/\d+\.mvt(?:\?.*)?$/i;
+var REFRESH_MARGIN_SECONDS = 30;
+var STALE_GRACE_SECONDS = 1;
+var MINT_RETRY_DELAYS_MS = [500, 1e3, 2e3];
+function nowSeconds() {
+  return Math.floor(Date.now() / 1e3);
+}
+function sleep2(ms) {
+  return new Promise((r) => setTimeout(r, ms));
+}
+function mapErrorCode(raw, status) {
+  const known = [
+    "invalid_api_key",
+    "feature_flag_disabled",
+    "region_not_licensed",
+    "tile_quota_exceeded",
+    "region_not_available"
+  ];
+  if (typeof raw === "string" && known.includes(raw)) {
+    return raw;
+  }
+  if (status === 401) return "invalid_api_key";
+  if (status === 403) return "feature_flag_disabled";
+  if (status === 429) return "tile_quota_exceeded";
+  if (status === 503) return "region_not_available";
+  return "unexpected_response";
+}
+var TileAuth = class {
+  constructor(http, opts) {
+    this.http = http;
+    this.defaultRegion = opts?.region ?? DEFAULT_TILE_REGION;
+    this.tileBaseUrl = (opts?.tileBaseUrl ?? DEFAULT_TILE_BASE_URL).replace(/\/+$/, "");
+  }
+  cache = /* @__PURE__ */ new Map();
+  pending = /* @__PURE__ */ new Map();
+  defaultRegion;
+  tileBaseUrl;
+  lifecycleRegistered = false;
+  /** Mint once via the HTTP client (POST `/mint/tile-token`, `x-api-key`). */
+  async mintOnce(region) {
+    let res;
+    try {
+      res = await this.http.postJson("/mint/tile-token", { region });
+    } catch (err) {
+      throw new TileTokenError(
+        "network_error",
+        err instanceof Error ? err.message : "mint request failed"
+      );
+    }
+    if (!res.ok) {
+      const code = mapErrorCode(res.body?.error, res.status);
+      const msg = typeof res.body?.error === "string" ? res.body.error : `HTTP ${res.status}`;
+      throw new TileTokenError(code, msg, res.status);
+    }
+    const b = res.body;
+    if (!b || typeof b.token !== "string" || typeof b.expires_at !== "number" || typeof b.kid !== "string" || typeof b.build_tag !== "string" || typeof b.region !== "string") {
+      throw new TileTokenError(
+        "unexpected_response",
+        "mint-tile-token returned a malformed body",
+        res.status
+      );
+    }
+    return {
+      token: b.token,
+      expiresAt: b.expires_at,
+      kid: b.kid,
+      buildTag: b.build_tag,
+      region: b.region
+    };
+  }
+  /** Mint with exponential backoff on network errors only. */
+  async mintWithRetry(region) {
+    let lastErr;
+    for (let attempt = 0; attempt <= MINT_RETRY_DELAYS_MS.length; attempt++) {
+      try {
+        return await this.mintOnce(region);
+      } catch (err) {
+        lastErr = err;
+        if (err instanceof TileTokenError && err.code !== "network_error") throw err;
+        if (attempt === MINT_RETRY_DELAYS_MS.length) break;
+        await sleep2(MINT_RETRY_DELAYS_MS[attempt]);
+      }
+    }
+    throw lastErr instanceof Error ? lastErr : new TileTokenError("network_error", "mint failed");
+  }
+  scheduleRefresh(region, expiresAt) {
+    const delaySeconds = expiresAt - nowSeconds() - REFRESH_MARGIN_SECONDS;
+    if (delaySeconds <= 0) return null;
+    const timer = setTimeout(() => {
+      void this.refreshInBackground(region);
+    }, delaySeconds * 1e3);
+    timer.unref?.();
+    return timer;
+  }
+  async refreshInBackground(region) {
+    try {
+      const response = await this.mintWithRetry(region);
+      this.store(region, response);
+    } catch {
+      this.invalidate(region);
+    }
+  }
+  store(region, response) {
+    const existing = this.cache.get(region);
+    if (existing?.refreshTimer) clearTimeout(existing.refreshTimer);
+    this.cache.set(region, {
+      response,
+      refreshTimer: this.scheduleRefresh(region, response.expiresAt)
+    });
+    this.registerLifecycleHandlers();
+  }
+  /**
+   * Fetch (or reuse a cached) tile token for `region`. Concurrent callers for
+   * the same region await the same in-flight mint.
+   */
+  async getToken(region) {
+    const r = region ?? this.defaultRegion;
+    const cached = this.cache.get(r);
+    if (cached && cached.response.expiresAt - nowSeconds() > REFRESH_MARGIN_SECONDS) {
+      return cached.response;
+    }
+    const inflight = this.pending.get(r);
+    if (inflight) return inflight;
+    const promise = (async () => {
+      try {
+        const response = await this.mintWithRetry(r);
+        this.store(r, response);
+        return response;
+      } finally {
+        this.pending.delete(r);
+      }
+    })();
+    this.pending.set(r, promise);
+    return promise;
+  }
+  /** Synchronous cache peek — null if absent or within the stale grace window. */
+  peek(region) {
+    const entry = this.cache.get(region ?? this.defaultRegion);
+    if (!entry) return null;
+    if (entry.response.expiresAt - nowSeconds() <= STALE_GRACE_SECONDS) return null;
+    return entry.response.token;
+  }
+  /**
+   * Produce a MapLibre / Mapbox GL `transformRequest`. Attaches
+   * `Authorization: Bearer <jwt>` only to CHRT tile URLs; style, sprite, and
+   * glyph URLs pass through untouched (never leak the token to third-party
+   * CDNs). Kicks off a background mint immediately so the cache warms within
+   * one round-trip; the first tile or two may go unauthenticated and be
+   * retried by the renderer.
+   */
+  transformRequest(region) {
+    const r = region ?? this.defaultRegion;
+    void this.getToken(r).catch(() => void 0);
+    return (url) => {
+      if (!url.startsWith(this.tileBaseUrl) || !TILE_URL_PATH.test(url)) return void 0;
+      const token = this.peek(r);
+      if (!token) return { url };
+      return { url, headers: { Authorization: `Bearer ${token}` } };
+    };
+  }
+  /** Clear the cached token + timer for a region. */
+  invalidate(region) {
+    const r = region ?? this.defaultRegion;
+    const entry = this.cache.get(r);
+    if (entry?.refreshTimer) clearTimeout(entry.refreshTimer);
+    this.cache.delete(r);
+  }
+  /**
+   * Browser-only defense against `setTimeout` freezing while a tab is
+   * suspended (laptop sleep, mobile background, bfcache restore): proactively
+   * re-mint near-expiry entries on wake. Inert under SSR / Node / Deno.
+   */
+  registerLifecycleHandlers() {
+    if (this.lifecycleRegistered) return;
+    if (typeof document === "undefined" || typeof window === "undefined") return;
+    const onWake = () => {
+      if (document.visibilityState !== "visible") return;
+      for (const [region, entry] of this.cache.entries()) {
+        if (entry.response.expiresAt - nowSeconds() >= REFRESH_MARGIN_SECONDS) continue;
+        void this.refreshInBackground(region);
+      }
+    };
+    document.addEventListener("visibilitychange", onWake);
+    window.addEventListener("pageshow", (e) => {
+      if (e.persisted) onWake();
+    });
+    this.lifecycleRegistered = true;
+  }
+};
+
 // src/endpoints/tiles.ts
 var TilesEndpoint = class {
-  constructor(http) {
+  constructor(http, opts) {
     this.http = http;
+    this.region = opts?.region ?? DEFAULT_TILE_REGION;
+    this.tileBaseUrl = (opts?.tileBaseUrl ?? DEFAULT_TILE_BASE_URL).replace(/\/+$/, "");
   }
-  /** Full style.json URL with API key as query param */
+  region;
+  tileBaseUrl;
+  /**
+   * @deprecated CHRT has no remote `style.json` endpoint — the S-52 style is
+   * generated client-side. Use `chrt.style(opts)` to get a ready-to-use
+   * MapLibre style object instead. Calling this throws to prevent silently
+   * pointing a map at a dead URL.
+   */
   styleUrl() {
-    return `${this.http.getBaseUrl()}/tiles/style.json?key=${this.http.getApiKey()}`;
+    throw new Error(
+      "chrt.tiles.styleUrl() is no longer supported: CHRT serves no remote style.json. Use chrt.style(opts) to generate an S-52 MapLibre style object, and chrt.transformRequest() for tile auth. See https://chrt.co/docs/vector-tiles"
+    );
   }
-  /** Individual tile URL template */
-  tileUrl(z, x, y, format = "mvt") {
-    return `${this.http.getBaseUrl()}/tiles/${z}/${x}/${y}.${format}?key=${this.http.getApiKey()}`;
+  /**
+   * Vector tile URL template for the configured region, served by the
+   * tile-worker at `tiles.chrt.co`. Tiles are JWT-gated — pair this with
+   * `chrt.transformRequest()`, which attaches the `Authorization: Bearer`
+   * header. Prefer `chrt.style()`, which wires the source for you.
+   */
+  tileUrl(z, x, y) {
+    return `${this.tileBaseUrl}/v1/tiles/${this.region}/${z}/${x}/${y}.mvt`;
   }
-  /** List available tileset groups */
+  /**
+   * @deprecated Tilesets were consolidated to one PMTiles per region (2026-04);
+   * the per-group catalogue endpoint is legacy and no longer served. Render via
+   * `chrt.style()` instead, which emits a single vector source per region.
+   */
   async groups() {
     return this.http.request("/tiles/groups");
   }
@@ -431,7 +657,7 @@ function mapServerError(body, status) {
 }
 
 // src/endpoints/offline-token-manager.ts
-var REFRESH_MARGIN_SECONDS = 30;
+var REFRESH_MARGIN_SECONDS2 = 30;
 function now() {
   return Math.floor(Date.now() / 1e3);
 }
@@ -452,7 +678,7 @@ var OfflineTokenManager = class {
     }
     const key = this.cacheKey(deviceId, regions);
     const cached = this.cache.get(key);
-    if (cached && cached.expiresAt - now() > REFRESH_MARGIN_SECONDS) {
+    if (cached && cached.expiresAt - now() > REFRESH_MARGIN_SECONDS2) {
       return cached;
     }
     const inflight = this.pending.get(key);
@@ -1074,47 +1300,6 @@ function dirname(p) {
   return p.slice(0, k);
 }
 
-// src/pagination.ts
-async function* paginate(fetchPage, getItems, getTotalCount, options) {
-  const pageSize = options?.pageSize ?? 100;
-  const signal = options?.signal;
-  let offset = 0;
-  while (true) {
-    if (signal?.aborted) return;
-    const response = await fetchPage(offset, signal);
-    const items = getItems(response);
-    for (const item of items) {
-      yield item;
-    }
-    if (items.length === 0) return;
-    offset += items.length;
-    const total = getTotalCount(response);
-    if (total > 0 && offset >= total) return;
-  }
-}
-
-// src/webhooks.ts
-var VALID_TYPES = /* @__PURE__ */ new Set(["cell.updated", "cell.new", "cell.deleted"]);
-function parseWebhook(body) {
-  if (typeof body !== "object" || body === null) {
-    throw new Error("Invalid webhook payload: expected an object");
-  }
-  const obj = body;
-  if (typeof obj.id !== "string") {
-    throw new Error("Invalid webhook payload: missing 'id'");
-  }
-  if (typeof obj.timestamp !== "string") {
-    throw new Error("Invalid webhook payload: missing 'timestamp'");
-  }
-  if (typeof obj.type !== "string" || !VALID_TYPES.has(obj.type)) {
-    throw new Error(`Invalid webhook payload: unknown type '${String(obj.type)}'`);
-  }
-  if (typeof obj.data !== "object" || obj.data === null) {
-    throw new Error("Invalid webhook payload: missing 'data'");
-  }
-  return obj;
-}
-
 // src/atlas/s52-colors.ts
 var S52_DAY = {
   // Depth
@@ -5315,7 +5500,10 @@ var NAUTICAL_SYMBOLS = [
     getSvg: landmarkSpire,
     group: "landmarks",
     description: "Church spire or steeple, conspicuous from seaward. Useful for visual fixing.",
-    s52PlRef: "LNDMRK17",
+    // CATLMK 20 alone has no dedicated PL symbol (renders POSGEN01/03); church spires carry
+    // FUNCTN 20/21 and render as the religious-building symbol BUIREL01 (BUIREL13 when conspicuous)
+    s52PlRef: "BUIREL01",
+    s57Class: "LNDMRK",
     attributeKey: "CATLMK",
     attributeValue: 20,
     renderSize: "32x32",
@@ -5332,9 +5520,11 @@ var NAUTICAL_SYMBOLS = [
     getSvg: landmarkTower,
     group: "landmarks",
     description: "Tower conspicuous from seaward. General-purpose landmark symbol.",
-    s52PlRef: "LNDMRK20",
+    s52PlRef: "TOWERS01",
+    s57Class: "LNDMRK",
     attributeKey: "CATLMK",
     attributeValue: 17,
+    // TOWERS03 = conspicuous variant
     renderSize: "32x32",
     colors: [{ token: "CHBLK", hex: "#000000", usage: "Tower body, cap, position circle" }],
     lineStyles: [{ element: "Tower outline", width: 0.8, color: "#000000" }, { element: "Position circle", width: 0.6, pattern: "2, 2", color: "#000000" }],
@@ -5349,7 +5539,8 @@ var NAUTICAL_SYMBOLS = [
     getSvg: landmarkChimney,
     group: "landmarks",
     description: "Industrial chimney or smokestack visible from the sea.",
-    s52PlRef: "LNDMRK01",
+    s52PlRef: "CHIMNY01",
+    s57Class: "LNDMRK",
     attributeKey: "CATLMK",
     attributeValue: 3,
     renderSize: "32x32",
@@ -5366,7 +5557,8 @@ var NAUTICAL_SYMBOLS = [
     getSvg: landmarkFlagstaff,
     group: "landmarks",
     description: "Flagstaff or flagpole conspicuous from seaward.",
-    s52PlRef: "LNDMRK03",
+    s52PlRef: "FLGSTF01",
+    s57Class: "LNDMRK",
     attributeKey: "CATLMK",
     attributeValue: 5,
     renderSize: "32x32",
@@ -5386,9 +5578,11 @@ var NAUTICAL_SYMBOLS = [
     getSvg: landmarkMonument,
     group: "landmarks",
     description: "Monument or memorial conspicuous from the sea.",
-    s52PlRef: "LNDMRK05",
+    s52PlRef: "MONUMT12",
+    s57Class: "LNDMRK",
     attributeKey: "CATLMK",
     attributeValue: 9,
+    // MONUMT02 = non-conspicuous variant
     renderSize: "32x32",
     colors: [{ token: "CHBLK", hex: "#000000", usage: "Monument body, base, position circle" }],
     lineStyles: [{ element: "Body outline", width: 0.8, color: "#000000" }, { element: "Position circle", width: 0.6, pattern: "2, 2", color: "#000000" }],
@@ -5404,6 +5598,7 @@ var NAUTICAL_SYMBOLS = [
     group: "landmarks",
     description: "Traditional windmill with rotating vanes. Conspicuous landmark.",
     s52PlRef: "WNDMIL12",
+    s57Class: "LNDMRK",
     attributeKey: "CATLMK",
     attributeValue: 18,
     renderSize: "32x32",
@@ -5421,6 +5616,7 @@ var NAUTICAL_SYMBOLS = [
     group: "landmarks",
     description: "Modern 3-blade wind turbine. Increasingly common offshore landmark.",
     s52PlRef: "WIMCON11",
+    s57Class: "LNDMRK",
     attributeKey: "CATLMK",
     attributeValue: 19,
     renderSize: "32x32",
@@ -5437,9 +5633,11 @@ var NAUTICAL_SYMBOLS = [
     getSvg: landmarkDome,
     group: "landmarks",
     description: "Dome or cupola (e.g., observatory, mosque) visible from the sea.",
-    s52PlRef: "LNDMRK03",
+    s52PlRef: "DOMES011",
+    s57Class: "LNDMRK",
     attributeKey: "CATLMK",
     attributeValue: 15,
+    // DOMES001 = non-conspicuous variant
     renderSize: "32x32",
     colors: [{ token: "CHBLK", hex: "#000000", usage: "Dome, base, position circle" }],
     lineStyles: [{ element: "Base outline", width: 0.8, color: "#000000" }, { element: "Dome curve", width: 0.8, color: "#000000" }, { element: "Position circle", width: 0.6, pattern: "2, 2", color: "#000000" }],
@@ -5454,7 +5652,8 @@ var NAUTICAL_SYMBOLS = [
     getSvg: landmarkRadarScanner,
     group: "landmarks",
     description: "Radar scanner antenna conspicuous from seaward.",
-    s52PlRef: "LNDMRK12",
+    s52PlRef: "RASCAN01",
+    s57Class: "LNDMRK",
     attributeKey: "CATLMK",
     attributeValue: 16,
     renderSize: "32x32",
@@ -5471,7 +5670,8 @@ var NAUTICAL_SYMBOLS = [
     getSvg: landmarkDishAerial,
     group: "landmarks",
     description: "Satellite dish or parabolic antenna visible from the sea.",
-    s52PlRef: "LNDMRK12",
+    s52PlRef: "DSHAER01",
+    s57Class: "LNDMRK",
     attributeKey: "CATLMK",
     attributeValue: 4,
     renderSize: "32x32",
@@ -5489,6 +5689,7 @@ var NAUTICAL_SYMBOLS = [
     group: "landmarks",
     description: "Water tower. Elevated tank on supporting structure, conspicuous landmark.",
     s52PlRef: "TOWERS12",
+    s57Class: "SILTNK",
     attributeKey: "CATSIL",
     attributeValue: 4,
     renderSize: "32x32",
@@ -5505,7 +5706,9 @@ var NAUTICAL_SYMBOLS = [
     getSvg: landmarkRadioTvMast,
     group: "landmarks",
     description: "Radio or television transmission mast with horizontal cross-arms.",
-    s52PlRef: "LNDMRK10",
+    // Radio/TV masts are CATLMK 7 (mast) + FUNCTN in S-57, so both mast entries share MSTCON04
+    s52PlRef: "MSTCON04",
+    s57Class: "LNDMRK",
     attributeKey: "CATLMK",
     attributeValue: 7,
     renderSize: "32x32",
@@ -5522,7 +5725,10 @@ var NAUTICAL_SYMBOLS = [
     getSvg: landmarkCross,
     group: "landmarks",
     description: "Religious cross or calvary conspicuous from seaward.",
-    s52PlRef: "LNDMRK05",
+    // The PL has no dedicated symbol for CATLMK 14 (cross/calvary) — S-52 falls back to the
+    // generic position symbol POSGEN01 (POSGEN03 when conspicuous)
+    s52PlRef: "POSGEN01",
+    s57Class: "LNDMRK",
     attributeKey: "CATLMK",
     attributeValue: 14,
     renderSize: "32x32",
@@ -5539,9 +5745,11 @@ var NAUTICAL_SYMBOLS = [
     getSvg: landmarkMast,
     group: "landmarks",
     description: "General mast (not radio/TV). Pole with spherical top.",
-    s52PlRef: "LNDMRK10",
+    s52PlRef: "MSTCON04",
+    s57Class: "LNDMRK",
     attributeKey: "CATLMK",
     attributeValue: 7,
+    // MSTCON14 = conspicuous variant
     renderSize: "32x32",
     colors: [{ token: "CHBLK", hex: "#000000", usage: "Mast pole, top ball, position circle" }],
     lineStyles: [{ element: "Mast pole", width: 2, color: "#000000" }, { element: "Position circle", width: 0.6, pattern: "2, 2", color: "#000000" }],
@@ -5557,6 +5765,7 @@ var NAUTICAL_SYMBOLS = [
     group: "landmarks",
     description: "Silo, grain elevator, or storage tank conspicuous from the sea.",
     s52PlRef: "SILBUI01",
+    s57Class: "SILTNK",
     attributeKey: "CATSIL",
     attributeValue: 1,
     renderSize: "32x32",
@@ -8267,6 +8476,18 @@ var S101_FEATURES = [
     isNewInS101: false,
     attributes: ["categoryOfLandmark", "function", "visuallyConspicuous"]
   },
+  {
+    featureClass: "SiloStorageTank",
+    name: "Silo / Storage Tank",
+    s57Equivalent: "SILTNK",
+    section: "E",
+    group: "landmarks",
+    category: "geo",
+    description: "An enclosed structure for storing bulk solids or liquids (silo, grain elevator, water tower, tank). Often conspicuous and useful for position fixing.",
+    portrayalRef: "SILTNK_S101",
+    isNewInS101: false,
+    attributes: ["categoryOfSiloTank", "colour", "visuallyConspicuous"]
+  },
   // ── Section D: Bridges ──
   {
     featureClass: "Bridge",
@@ -9443,7 +9664,7 @@ var BUILD_MINZOOM = 3;
 var BUILD_MAXZOOM = 14;
 
 // src/atlas/source-registry.ts
-var DEFAULT_TILE_BASE_URL = "https://tiles.chrt.co";
+var DEFAULT_TILE_BASE_URL2 = "https://tiles.chrt.co";
 var DEFAULT_REGION = "NOAA_ENC";
 function buildSources(opts = {}) {
   const mode = opts.mode ?? "pmtiles";
@@ -9456,7 +9677,7 @@ function buildSources(opts = {}) {
       }
     };
   }
-  const base = (opts.tileBaseUrl ?? DEFAULT_TILE_BASE_URL).replace(/\/+$/, "");
+  const base = (opts.tileBaseUrl ?? DEFAULT_TILE_BASE_URL2).replace(/\/+$/, "");
   return {
     [region]: {
       type: "vector",
@@ -11183,6 +11404,47 @@ function getStyleStats(style) {
   };
 }
 
+// src/pagination.ts
+async function* paginate(fetchPage, getItems, getTotalCount, options) {
+  const pageSize = options?.pageSize ?? 100;
+  const signal = options?.signal;
+  let offset = 0;
+  while (true) {
+    if (signal?.aborted) return;
+    const response = await fetchPage(offset, signal);
+    const items = getItems(response);
+    for (const item of items) {
+      yield item;
+    }
+    if (items.length === 0) return;
+    offset += items.length;
+    const total = getTotalCount(response);
+    if (total > 0 && offset >= total) return;
+  }
+}
+
+// src/webhooks.ts
+var VALID_TYPES = /* @__PURE__ */ new Set(["cell.updated", "cell.new", "cell.deleted"]);
+function parseWebhook(body) {
+  if (typeof body !== "object" || body === null) {
+    throw new Error("Invalid webhook payload: expected an object");
+  }
+  const obj = body;
+  if (typeof obj.id !== "string") {
+    throw new Error("Invalid webhook payload: missing 'id'");
+  }
+  if (typeof obj.timestamp !== "string") {
+    throw new Error("Invalid webhook payload: missing 'timestamp'");
+  }
+  if (typeof obj.type !== "string" || !VALID_TYPES.has(obj.type)) {
+    throw new Error(`Invalid webhook payload: unknown type '${String(obj.type)}'`);
+  }
+  if (typeof obj.data !== "object" || obj.data === null) {
+    throw new Error("Invalid webhook payload: missing 'data'");
+  }
+  return obj;
+}
+
 // src/index.ts
 var Chrt = class {
   /** Tile endpoints — styleUrl, tileUrl, groups */
@@ -11200,15 +11462,22 @@ var Chrt = class {
   featuresEp;
   queryEp;
   http;
+  tileAuth;
+  region;
+  tileBaseUrl;
   constructor(apiKeyOrConfig) {
     const config = typeof apiKeyOrConfig === "string" ? { apiKey: apiKeyOrConfig } : apiKeyOrConfig;
+    this.region = config.region ?? DEFAULT_TILE_REGION;
+    this.tileBaseUrl = config.tileBaseUrl ?? DEFAULT_TILE_BASE_URL;
     this.http = new HttpClient(config.apiKey, config.baseUrl, config.retries);
-    this.tiles = new TilesEndpoint(this.http);
+    const tileOpts = { region: this.region, tileBaseUrl: this.tileBaseUrl };
+    this.tiles = new TilesEndpoint(this.http, tileOpts);
     this.cells = new CellsEndpoint(this.http);
     this.coverage = new CoverageEndpoint(this.http);
     this.featuresEp = new FeaturesEndpoint(this.http);
     this.queryEp = new QueryEndpoint(this.http);
     this.offline = new OfflineEndpoint(this.http, config.deviceId, config.manifestPath);
+    this.tileAuth = new TileAuth(this.http, tileOpts);
   }
   /* ── Convenience shortcuts ───────────────────────── */
   /** Query GeoJSON features by bounding box */
@@ -11285,28 +11554,63 @@ var Chrt = class {
     );
   }
   /* ── Map integration helpers ─────────────────────── */
-  /** Returns a style.json URL ready for Mapbox GL / MapLibre */
+  /**
+   * Build a ready-to-use MapLibre / Mapbox GL style object for CHRT's nautical
+   * charts. The default is the full IHO **S-52** portrayal; pick a palette and
+   * tweak rendering via `opts`. The returned object is a standard MapLibre
+   * style — mutate it freely, or build your own from scratch over the CHRT
+   * vector source (see `buildSources`) for a fully custom look.
+   *
+   * Pair with `transformRequest()` so tile requests carry their auth token.
+   *
+   * @example
+   * const map = new maplibregl.Map({
+   *   container: 'map',
+   *   style: chrt.style({ palette: 'DAY' }),
+   *   transformRequest: chrt.transformRequest(),
+   * });
+   *
+   * @remarks S-101 portrayal is on the roadmap; today `style()` emits S-52.
+   */
+  style(opts = {}) {
+    const { palette = "DAY", ...styleOpts } = opts;
+    return generateStyle(palette, {
+      region: this.region,
+      tileBaseUrl: this.tileBaseUrl,
+      ...styleOpts
+    });
+  }
+  /**
+   * @deprecated CHRT serves no remote `style.json`. Use {@link style} to get a
+   * MapLibre style object instead. Throws to avoid silently pointing a map at a
+   * dead URL.
+   */
   styleUrl() {
     return this.tiles.styleUrl();
   }
   /**
-   * Returns a `transformRequest` function for Mapbox GL JS / MapLibre GL JS.
-   * Injects the API key header for requests to api.chrt.co.
+   * Returns a `transformRequest` for Mapbox GL JS / MapLibre GL JS that mints a
+   * short-lived tile JWT from your API key and attaches it as
+   * `Authorization: Bearer` on requests to `tiles.chrt.co` only. Style, sprite,
+   * and glyph URLs pass through untouched. The cache warms in the background on
+   * first call, so the first tile or two may be retried by the renderer.
    *
    * @example
-   * const map = new mapboxgl.Map({
-   *   style: chrt.styleUrl(),
+   * const map = new maplibregl.Map({
+   *   style: chrt.style(),
    *   transformRequest: chrt.transformRequest(),
    * });
    */
-  transformRequest() {
-    const apiKey = this.http.getApiKey();
-    return (url) => {
-      if (url.includes("api.chrt.co")) {
-        return { url, headers: { "x-api-key": apiKey } };
-      }
-      return void 0;
-    };
+  transformRequest(opts) {
+    return this.tileAuth.transformRequest(opts?.region);
+  }
+  /**
+   * Pre-mint the tile token for a region. Optional — `transformRequest()` warms
+   * the cache automatically — but useful if you want to surface a mint error
+   * (e.g. `region_not_licensed`, `tile_quota_exceeded`) before the map loads.
+   */
+  async warmTiles(region) {
+    await this.tileAuth.getToken(region);
   }
 };
 // Annotate the CommonJS export names for ESM import in node:
@@ -11322,6 +11626,7 @@ var Chrt = class {
   ChrtError,
   DEFAULT_REGION,
   DEFAULT_TILE_BASE_URL,
+  DEFAULT_TILE_REGION,
   LABELED_LAYERS,
   LABEL_BEHAVIOR,
   NAUTICAL_SYMBOLS,
@@ -11339,6 +11644,8 @@ var Chrt = class {
   S52_NIGHT,
   SYMBOL_GROUPS,
   SYMBOL_MAP,
+  TileAuth,
+  TileTokenError,
   applyColorTheme,
   bandFilterExpression,
   buildLabelLayer,