@crevio/sdk 0.6.0 → 0.6.5

package/src/funcs/accessCheck.ts

@@ -0,0 +1,182 @@
+/*
+ * Code generated by Speakeasy (https://speakeasy.com). DO NOT EDIT.
+ */
+
+import { CrevioCore } from "../core.js";
+import { encodeSimple } from "../lib/encodings.js";
+import { matchStatusCode } from "../lib/http.js";
+import * as M from "../lib/matchers.js";
+import { compactMap } from "../lib/primitives.js";
+import { safeParse } from "../lib/schemas.js";
+import { RequestOptions } from "../lib/sdks.js";
+import { extractSecurity, resolveGlobalSecurity } from "../lib/security.js";
+import { pathToFunc } from "../lib/url.js";
+import { CrevioError } from "../models/errors/crevioerror.js";
+import {
+  ConnectionError,
+  InvalidRequestError,
+  RequestAbortedError,
+  RequestTimeoutError,
+  UnexpectedClientError,
+} from "../models/errors/httpclienterrors.js";
+import * as errors from "../models/errors/index.js";
+import { ResponseValidationError } from "../models/errors/responsevalidationerror.js";
+import { SDKValidationError } from "../models/errors/sdkvalidationerror.js";
+import * as models from "../models/index.js";
+import * as operations from "../models/operations/index.js";
+import { APICall, APIPromise } from "../types/async.js";
+import { Result } from "../types/fp.js";
+
+/**
+ * Check access
+ *
+ * @remarks
+ * Returns whether a buyer (user_… or cus_… id) has access to a resource (the account acct_…, a prod_…, or an exp_…) and at what level (no_access, customer, admin). Powers entitlement gating on deployed sites.
+ */
+export function accessCheck(
+  client: CrevioCore,
+  request: operations.CheckAccessRequest,
+  options?: RequestOptions,
+): APIPromise<
+  Result<
+    models.AccessCheck,
+    | errors.ErrorT
+    | CrevioError
+    | ResponseValidationError
+    | ConnectionError
+    | RequestAbortedError
+    | RequestTimeoutError
+    | InvalidRequestError
+    | UnexpectedClientError
+    | SDKValidationError
+  >
+> {
+  return new APIPromise($do(
+    client,
+    request,
+    options,
+  ));
+}
+
+async function $do(
+  client: CrevioCore,
+  request: operations.CheckAccessRequest,
+  options?: RequestOptions,
+): Promise<
+  [
+    Result<
+      models.AccessCheck,
+      | errors.ErrorT
+      | CrevioError
+      | ResponseValidationError
+      | ConnectionError
+      | RequestAbortedError
+      | RequestTimeoutError
+      | InvalidRequestError
+      | UnexpectedClientError
+      | SDKValidationError
+    >,
+    APICall,
+  ]
+> {
+  const parsed = safeParse(
+    request,
+    (value) => operations.CheckAccessRequest$outboundSchema.parse(value),
+    "Input validation failed",
+  );
+  if (!parsed.ok) {
+    return [parsed, { status: "invalid" }];
+  }
+  const payload = parsed.value;
+  const body = null;
+
+  const pathParams = {
+    id: encodeSimple("id", payload.id, {
+      explode: false,
+      charEncoding: "percent",
+    }),
+    resource_id: encodeSimple("resource_id", payload.resource_id, {
+      explode: false,
+      charEncoding: "percent",
+    }),
+  };
+  const path = pathToFunc("/users/{id}/access/{resource_id}")(pathParams);
+
+  const headers = new Headers(compactMap({
+    Accept: "application/json",
+  }));
+
+  const secConfig = await extractSecurity(client._options.apiKey);
+  const securityInput = secConfig == null ? {} : { apiKey: secConfig };
+  const requestSecurity = resolveGlobalSecurity(securityInput);
+
+  const context = {
+    options: client._options,
+    baseURL: options?.serverURL ?? client._baseURL ?? "",
+    operationID: "checkAccess",
+    oAuth2Scopes: null,
+
+    resolvedSecurity: requestSecurity,
+
+    securitySource: client._options.apiKey,
+    retryConfig: options?.retries
+      || client._options.retryConfig
+      || { strategy: "none" },
+    retryCodes: options?.retryCodes || ["429", "500", "502", "503", "504"],
+  };
+
+  const requestRes = client._createRequest(context, {
+    security: requestSecurity,
+    method: "GET",
+    baseURL: options?.serverURL,
+    path: path,
+    headers: headers,
+    body: body,
+    userAgent: client._options.userAgent,
+    timeoutMs: options?.timeoutMs || client._options.timeoutMs || -1,
+  }, options);
+  if (!requestRes.ok) {
+    return [requestRes, { status: "invalid" }];
+  }
+  const req = requestRes.value;
+
+  const doResult = await client._do(req, {
+    context,
+    isErrorStatusCode: (statusCode: number) =>
+      matchStatusCode({ status: statusCode } as Response, ["4XX", "5XX"]),
+    retryConfig: context.retryConfig,
+    retryCodes: context.retryCodes,
+  });
+  if (!doResult.ok) {
+    return [doResult, { status: "request-error", request: req }];
+  }
+  const response = doResult.value;
+
+  const responseFields = {
+    HttpMeta: { Response: response, Request: req },
+  };
+
+  const [result] = await M.match<
+    models.AccessCheck,
+    | errors.ErrorT
+    | CrevioError
+    | ResponseValidationError
+    | ConnectionError
+    | RequestAbortedError
+    | RequestTimeoutError
+    | InvalidRequestError
+    | UnexpectedClientError
+    | SDKValidationError
+  >(
+    M.json(200, models.AccessCheck$inboundSchema),
+    M.jsonErr([400, 401, 403, 404], errors.ErrorT$inboundSchema),
+    M.jsonErr(500, errors.ErrorT$inboundSchema),
+    M.fail("4XX"),
+    M.fail("5XX"),
+  )(response, req, { extraFields: responseFields });
+  if (!result.ok) {
+    return [result, { status: "complete", request: req, response }];
+  }
+
+  return [result, { status: "complete", request: req, response }];
+}

package/src/funcs/experiencesFilesCreate.ts

@@ -3,12 +3,7 @@
  */
 
 import { CrevioCore } from "../core.js";
-import { appendForm, encodeSimple, normalizeBlob } from "../lib/encodings.js";
-import {
-  bytesToBlob,
-  getContentTypeFromFileName,
-  readableStreamToArrayBuffer,
-} from "../lib/files.js";
+import { encodeJSON, encodeSimple } from "../lib/encodings.js";
 import { matchStatusCode } from "../lib/http.js";
 import * as M from "../lib/matchers.js";
 import { compactMap } from "../lib/primitives.js";
@@ -30,15 +25,13 @@ import { SDKValidationError } from "../models/errors/sdkvalidationerror.js";
 import * as models from "../models/index.js";
 import * as operations from "../models/operations/index.js";
 import { APICall, APIPromise } from "../types/async.js";
-import { isBlobLike } from "../types/blobs.js";
 import { Result } from "../types/fp.js";
-import { isReadableStream } from "../types/streams.js";
 
 /**
  * Upload digital download files
  *
  * @remarks
- * Attaches one or more deliverable files to a digital download experience (multipart upload). Returns the full file list.
+ * Attaches already-uploaded files to a digital download experience as deliverables. Upload the bytes first with `POST /files` (presigned upload), then reference the resulting ids here: `{ "file_ids": ["file_..."] }`. Appends to the existing set and de-duplicates, so re-sending an already-attached id is a safe no-op. Returns the full file list.
  */
 export function experiencesFilesCreate(
   client: CrevioCore,
@@ -96,35 +89,7 @@ async function $do(
     return [parsed, { status: "invalid" }];
   }
   const payload = parsed.value;
-  const body = new FormData();
-
-  for (const fileItem of payload.RequestBody.files ?? []) {
-    if (isBlobLike(fileItem)) {
-      const file = fileItem;
-      const blob = await normalizeBlob(file);
-      const name = "name" in file ? (file.name as string) : undefined;
-      appendForm(body, "files[]", blob, name);
-    } else if (isReadableStream(fileItem.content)) {
-      const buffer = await readableStreamToArrayBuffer(fileItem.content);
-      const contentType = getContentTypeFromFileName(fileItem.fileName)
-        || "application/octet-stream";
-      appendForm(
-        body,
-        "files[]",
-        bytesToBlob(buffer, contentType),
-        fileItem.fileName,
-      );
-    } else {
-      const contentType = getContentTypeFromFileName(fileItem.fileName)
-        || "application/octet-stream";
-      appendForm(
-        body,
-        "files[]",
-        bytesToBlob(fileItem.content, contentType),
-        fileItem.fileName,
-      );
-    }
-  }
+  const body = encodeJSON("body", payload.RequestBody, { explode: true });
 
   const pathParams = {
     experience_id: encodeSimple("experience_id", payload.experience_id, {
@@ -135,6 +100,7 @@ async function $do(
   const path = pathToFunc("/experiences/{experience_id}/files")(pathParams);
 
   const headers = new Headers(compactMap({
+    "Content-Type": "application/json",
     Accept: "application/json",
   }));
 

package/src/funcs/lessonsFilesCreate.ts

@@ -3,12 +3,7 @@
  */
 
 import { CrevioCore } from "../core.js";
-import { appendForm, encodeSimple, normalizeBlob } from "../lib/encodings.js";
-import {
-  bytesToBlob,
-  getContentTypeFromFileName,
-  readableStreamToArrayBuffer,
-} from "../lib/files.js";
+import { encodeJSON, encodeSimple } from "../lib/encodings.js";
 import { matchStatusCode } from "../lib/http.js";
 import * as M from "../lib/matchers.js";
 import { compactMap } from "../lib/primitives.js";
@@ -30,15 +25,13 @@ import { SDKValidationError } from "../models/errors/sdkvalidationerror.js";
 import * as models from "../models/index.js";
 import * as operations from "../models/operations/index.js";
 import { APICall, APIPromise } from "../types/async.js";
-import { isBlobLike } from "../types/blobs.js";
 import { Result } from "../types/fp.js";
-import { isReadableStream } from "../types/streams.js";
 
 /**
  * Upload lesson files
  *
  * @remarks
- * Attaches one or more files to a lesson (multipart upload)
+ * Attaches already-uploaded files to a lesson. Upload the bytes first with `POST /files` (presigned upload), then reference the resulting ids here: `{ "file_ids": ["file_..."] }`. Appends to the existing set and de-duplicates, so re-sending an already-attached id is a safe no-op. Returns the full file list.
  */
 export function lessonsFilesCreate(
   client: CrevioCore,
@@ -95,35 +88,7 @@ async function $do(
     return [parsed, { status: "invalid" }];
   }
   const payload = parsed.value;
-  const body = new FormData();
-
-  for (const fileItem of payload.RequestBody.files ?? []) {
-    if (isBlobLike(fileItem)) {
-      const file = fileItem;
-      const blob = await normalizeBlob(file);
-      const name = "name" in file ? (file.name as string) : undefined;
-      appendForm(body, "files[]", blob, name);
-    } else if (isReadableStream(fileItem.content)) {
-      const buffer = await readableStreamToArrayBuffer(fileItem.content);
-      const contentType = getContentTypeFromFileName(fileItem.fileName)
-        || "application/octet-stream";
-      appendForm(
-        body,
-        "files[]",
-        bytesToBlob(buffer, contentType),
-        fileItem.fileName,
-      );
-    } else {
-      const contentType = getContentTypeFromFileName(fileItem.fileName)
-        || "application/octet-stream";
-      appendForm(
-        body,
-        "files[]",
-        bytesToBlob(fileItem.content, contentType),
-        fileItem.fileName,
-      );
-    }
-  }
+  const body = encodeJSON("body", payload.RequestBody, { explode: true });
 
   const pathParams = {
     lesson_id: encodeSimple("lesson_id", payload.lesson_id, {
@@ -134,6 +99,7 @@ async function $do(
   const path = pathToFunc("/lessons/{lesson_id}/files")(pathParams);
 
   const headers = new Headers(compactMap({
+    "Content-Type": "application/json",
     Accept: "application/json",
   }));
 

package/src/funcs/usersGet.ts

@@ -0,0 +1,178 @@
+/*
+ * Code generated by Speakeasy (https://speakeasy.com). DO NOT EDIT.
+ */
+
+import { CrevioCore } from "../core.js";
+import { encodeSimple } from "../lib/encodings.js";
+import { matchStatusCode } from "../lib/http.js";
+import * as M from "../lib/matchers.js";
+import { compactMap } from "../lib/primitives.js";
+import { safeParse } from "../lib/schemas.js";
+import { RequestOptions } from "../lib/sdks.js";
+import { extractSecurity, resolveGlobalSecurity } from "../lib/security.js";
+import { pathToFunc } from "../lib/url.js";
+import { CrevioError } from "../models/errors/crevioerror.js";
+import {
+  ConnectionError,
+  InvalidRequestError,
+  RequestAbortedError,
+  RequestTimeoutError,
+  UnexpectedClientError,
+} from "../models/errors/httpclienterrors.js";
+import * as errors from "../models/errors/index.js";
+import { ResponseValidationError } from "../models/errors/responsevalidationerror.js";
+import { SDKValidationError } from "../models/errors/sdkvalidationerror.js";
+import * as models from "../models/index.js";
+import * as operations from "../models/operations/index.js";
+import { APICall, APIPromise } from "../types/async.js";
+import { Result } from "../types/fp.js";
+
+/**
+ * Get user
+ *
+ * @remarks
+ * Returns the profile (first/last name, email) of a buyer signed in on a deployed site, resolved from their user_… id or username. Scoped to the account; pair with getUser/verifyUserToken on the site.
+ */
+export function usersGet(
+  client: CrevioCore,
+  request: operations.GetUserRequest,
+  options?: RequestOptions,
+): APIPromise<
+  Result<
+    models.User,
+    | errors.ErrorT
+    | CrevioError
+    | ResponseValidationError
+    | ConnectionError
+    | RequestAbortedError
+    | RequestTimeoutError
+    | InvalidRequestError
+    | UnexpectedClientError
+    | SDKValidationError
+  >
+> {
+  return new APIPromise($do(
+    client,
+    request,
+    options,
+  ));
+}
+
+async function $do(
+  client: CrevioCore,
+  request: operations.GetUserRequest,
+  options?: RequestOptions,
+): Promise<
+  [
+    Result<
+      models.User,
+      | errors.ErrorT
+      | CrevioError
+      | ResponseValidationError
+      | ConnectionError
+      | RequestAbortedError
+      | RequestTimeoutError
+      | InvalidRequestError
+      | UnexpectedClientError
+      | SDKValidationError
+    >,
+    APICall,
+  ]
+> {
+  const parsed = safeParse(
+    request,
+    (value) => operations.GetUserRequest$outboundSchema.parse(value),
+    "Input validation failed",
+  );
+  if (!parsed.ok) {
+    return [parsed, { status: "invalid" }];
+  }
+  const payload = parsed.value;
+  const body = null;
+
+  const pathParams = {
+    id: encodeSimple("id", payload.id, {
+      explode: false,
+      charEncoding: "percent",
+    }),
+  };
+  const path = pathToFunc("/users/{id}")(pathParams);
+
+  const headers = new Headers(compactMap({
+    Accept: "application/json",
+  }));
+
+  const secConfig = await extractSecurity(client._options.apiKey);
+  const securityInput = secConfig == null ? {} : { apiKey: secConfig };
+  const requestSecurity = resolveGlobalSecurity(securityInput);
+
+  const context = {
+    options: client._options,
+    baseURL: options?.serverURL ?? client._baseURL ?? "",
+    operationID: "getUser",
+    oAuth2Scopes: null,
+
+    resolvedSecurity: requestSecurity,
+
+    securitySource: client._options.apiKey,
+    retryConfig: options?.retries
+      || client._options.retryConfig
+      || { strategy: "none" },
+    retryCodes: options?.retryCodes || ["429", "500", "502", "503", "504"],
+  };
+
+  const requestRes = client._createRequest(context, {
+    security: requestSecurity,
+    method: "GET",
+    baseURL: options?.serverURL,
+    path: path,
+    headers: headers,
+    body: body,
+    userAgent: client._options.userAgent,
+    timeoutMs: options?.timeoutMs || client._options.timeoutMs || -1,
+  }, options);
+  if (!requestRes.ok) {
+    return [requestRes, { status: "invalid" }];
+  }
+  const req = requestRes.value;
+
+  const doResult = await client._do(req, {
+    context,
+    isErrorStatusCode: (statusCode: number) =>
+      matchStatusCode({ status: statusCode } as Response, ["4XX", "5XX"]),
+    retryConfig: context.retryConfig,
+    retryCodes: context.retryCodes,
+  });
+  if (!doResult.ok) {
+    return [doResult, { status: "request-error", request: req }];
+  }
+  const response = doResult.value;
+
+  const responseFields = {
+    HttpMeta: { Response: response, Request: req },
+  };
+
+  const [result] = await M.match<
+    models.User,
+    | errors.ErrorT
+    | CrevioError
+    | ResponseValidationError
+    | ConnectionError
+    | RequestAbortedError
+    | RequestTimeoutError
+    | InvalidRequestError
+    | UnexpectedClientError
+    | SDKValidationError
+  >(
+    M.json(200, models.User$inboundSchema),
+    M.jsonErr([400, 401, 403, 404], errors.ErrorT$inboundSchema),
+    M.jsonErr(500, errors.ErrorT$inboundSchema),
+    M.fail("4XX"),
+    M.fail("5XX"),
+  )(response, req, { extraFields: responseFields });
+  if (!result.ok) {
+    return [result, { status: "complete", request: req, response }];
+  }
+
+  return [result, { status: "complete", request: req, response }];
+}

package/src/index.ts

@@ -3,6 +3,7 @@
  */
 
 export * from "./lib/config.js";
+export * from "./lib/verify-user-token.js";
 export * as files from "./lib/files.js";
 export { HTTPClient } from "./lib/http.js";
 export type { Fetcher, HTTPClientOptions } from "./lib/http.js";

package/src/lib/config.ts

@@ -61,7 +61,7 @@ export function serverURLFromOptions(options: SDKOptions): URL | null {
 export const SDK_METADATA = {
   language: "typescript",
   openapiDocVersion: "1.0.0",
-  sdkVersion: "0.6.0",
-  genVersion: "2.913.3",
-  userAgent: "speakeasy-sdk/typescript 0.6.0 2.913.3 1.0.0 @crevio/sdk",
+  sdkVersion: "0.6.5",
+  genVersion: "2.914.0",
+  userAgent: "speakeasy-sdk/typescript 0.6.5 2.914.0 1.0.0 @crevio/sdk",
 } as const;

package/src/lib/verify-user-token.ts

@@ -0,0 +1,118 @@
+// Hand-written helper (a custom file Speakeasy does not generate, so it
+// survives `speakeasy run` untouched). It is the Crevio equivalent of Whop's
+// `verifyUserToken`, and follows the same contract: read the signed user token
+// the platform forwards on each request, verify its signature, and return the
+// authenticated identity.
+//
+// The one export line in index.ts must be re-added after each regen
+// (persistentEdits is disabled to avoid three-way merge conflicts).
+//
+// The token is a compact EdDSA (Ed25519) JWS minted by Rails (Sites::Token).
+// On Crevio-hosted apps the dispatch worker verifies it at the edge and forwards
+// it as the `x-crevio-user-token` header (stripping any inbound spoof); we verify
+// it again here against the published JWKS so the guarantee holds even for apps
+// hosted off-platform, where no dispatch worker sits in front.
+
+import { createRemoteJWKSet, jwtVerify } from "jose";
+
+const TOKEN_HEADER = "x-crevio-user-token";
+const ISSUER = "crevio";
+const DEFAULT_JWKS_URL = "https://crevio.co/.well-known/jwks.json";
+
+export interface CrevioUser {
+  /** The signed-in end-user's Crevio user id (e.g. "user_abc123"). */
+  userId: string;
+  /** The account (merchant) this request is scoped to (e.g. "acct_abc123"). */
+  accountId: string;
+}
+
+// Accepts anything that carries request headers: a WHATWG `Headers`/`Request`
+// (browsers, Workers, Deno, Next.js `headers()`), or a plain header object
+// (Node `IncomingHttpHeaders`, Express `req.headers`).
+export type HeaderSource =
+  | Headers
+  | Request
+  | Record<string, string | string[] | undefined>
+  | null
+  | undefined;
+
+export interface VerifyUserTokenOptions {
+  /**
+   * Where to fetch the Ed25519 public key set. Defaults to Crevio production
+   * (`https://crevio.co/.well-known/jwks.json`). Point this at your dev host
+   * (or the local dev proxy) when developing. Results are cached per URL.
+   */
+  jwksUrl?: string;
+  /**
+   * Expected `aud` claim (the site's worker name). Off-platform apps should set
+   * this to reject tokens minted for a different site; on-platform the dispatch
+   * worker already binds the token to this site, so it can be omitted.
+   */
+  audience?: string;
+}
+
+// jose caches keys internally and refreshes on unknown `kid`, so we keep one
+// remote key set per JWKS URL for the life of the process.
+const keySets = new Map<string, ReturnType<typeof createRemoteJWKSet>>();
+
+function jwksFor(url: string): ReturnType<typeof createRemoteJWKSet> {
+  let set = keySets.get(url);
+  if (!set) {
+    set = createRemoteJWKSet(new URL(url));
+    keySets.set(url, set);
+  }
+  return set;
+}
+
+function readHeader(source: HeaderSource, name: string): string | null {
+  if (!source) return null;
+
+  const headers = source instanceof Request ? source.headers : source;
+
+  // Headers, ReadonlyHeaders (Next.js), and Request#headers all expose `.get`.
+  if (typeof (headers as { get?: unknown }).get === "function") {
+    return (headers as { get(n: string): string | null }).get(name) ?? null;
+  }
+
+  const record = headers as Record<string, string | string[] | undefined>;
+  const value = record[name] ?? record[name.toLowerCase()];
+  return Array.isArray(value) ? (value[0] ?? null) : (value ?? null);
+}
+
+/**
+ * Verifies the signed user token the Crevio platform forwards on the request and
+ * returns the authenticated visitor, or `null` for an anonymous visitor (no
+ * token) or an invalid/expired/forged token — always fail-closed.
+ *
+ * @example
+ * ```ts
+ * const user = await verifyUserToken(await headers());
+ * if (!user) return <SignInWithCrevio />;
+ * const { hasAccess } = await crevio.access.check({ id: user.userId, resourceId: "exp_123" });
+ * ```
+ */
+export async function verifyUserToken(
+  source: HeaderSource,
+  options?: VerifyUserTokenOptions,
+): Promise<CrevioUser | null> {
+  const token = readHeader(source, TOKEN_HEADER);
+  if (!token) return null;
+
+  try {
+    const { payload } = await jwtVerify(
+      token,
+      jwksFor(options?.jwksUrl ?? DEFAULT_JWKS_URL),
+      options?.audience
+        ? { issuer: ISSUER, audience: options.audience }
+        : { issuer: ISSUER },
+    );
+
+    const userId = payload.sub;
+    const accountId = payload["acc"];
+    if (typeof userId !== "string" || typeof accountId !== "string") return null;
+
+    return { userId, accountId };
+  } catch {
+    return null;
+  }
+}

package/src/models/accesscheck.ts

@@ -0,0 +1,44 @@
+/*
+ * Code generated by Speakeasy (https://speakeasy.com). DO NOT EDIT.
+ */
+
+import * as z from "zod/v3";
+import { remap as remap$ } from "../lib/primitives.js";
+import { safeParse } from "../lib/schemas.js";
+import { Result as SafeParseResult } from "../types/fp.js";
+import { SDKValidationError } from "./errors/sdkvalidationerror.js";
+
+export type AccessCheck = {
+  object: string;
+  hasAccess: boolean;
+  accessLevel: string;
+  expiresAt: string | null;
+};
+
+/** @internal */
+export const AccessCheck$inboundSchema: z.ZodType<
+  AccessCheck,
+  z.ZodTypeDef,
+  unknown
+> = z.object({
+  object: z.string(),
+  has_access: z.boolean(),
+  access_level: z.string(),
+  expires_at: z.nullable(z.string()),
+}).transform((v) => {
+  return remap$(v, {
+    "has_access": "hasAccess",
+    "access_level": "accessLevel",
+    "expires_at": "expiresAt",
+  });
+});
+
+export function accessCheckFromJSON(
+  jsonString: string,
+): SafeParseResult<AccessCheck, SDKValidationError> {
+  return safeParse(
+    jsonString,
+    (x) => AccessCheck$inboundSchema.parse(JSON.parse(x)),
+    `Failed to parse 'AccessCheck' from JSON`,
+  );
+}