@dropthis/cli 0.23.0 → 0.24.0

package/node_modules/@dropthis/node/README.md

@@ -1,3 +1,5 @@
+<p align="center"><img src="https://dropthis.app/icon-512.png" width="76" height="76" alt="dropthis" /></p>
+
 # @dropthis/node
 
 Official Node.js SDK for [dropthis](https://dropthis.app) -- the publish layer between AI and the internet. One API call in, one URL out.
@@ -275,6 +277,15 @@ if (result.error) {
 
 Local input validation errors (e.g. `file_not_found`) are also returned as `{ error: { code: "file_not_found", ... } }` rather than thrown -- except for `prepare()`, which throws `PublishInputError`.
 
+`error.retryable` tells an agent whether retrying is worthwhile. The SDK marks its own
+transient failures `retryable: true` only when retrying is safe: a `GET` `timeout` /
+`network_error`, any request you sent with an `idempotencyKey`, or a signed-upload `5xx`.
+A bare (non-idempotent) `POST`/`PATCH`/`DELETE` timeout is left unmarked because the
+server may have applied it before the connection dropped. Server-side errors carry
+whatever `retryable` the API returns (the SDK never overrides it). `publish()` and
+`updateContent()` are always safe to retry — each derives a stable idempotency key, so a
+retried publish never creates a duplicate drop.
+
 ## Configuration
 
 ```typescript
@@ -321,6 +332,12 @@ for await (const drop of page.data) {
 }
 ```
 
+Auto-pagination fails loud: if fetching a later page errors, the iterator (and
+`autoPagingToArray()`) throws `CursorPaginationError` instead of silently returning a
+truncated list. The carried error is on `.error` (with `code`, `statusCode`, `retryable`,
+`requestId`); items already yielded stay yielded. Wrap the loop in `try/catch` if you want
+to handle a mid-pagination failure.
+
 > To change a drop's content, use `client.drops.updateContent(dropId, newInput)`. `drops.updateSettings()` is for settings only (title, visibility, password, noindex, expiresAt, metadata).
 
 ### deployments
@@ -352,6 +369,8 @@ await dropthis.auth.verifyEmailOtp({ email: "you@example.com", code: "123456" })
 await dropthis.auth.logout(); // 204 No Content — data is null
 ```
 
+> On a failed verify the error `code` is `otp_expired` (no active code — request a new one) or `otp_invalid` (wrong digits — re-check, don't auto-resend). 401 on either.
+
 ### apiKeys
 
 ```typescript
@@ -464,11 +483,20 @@ import type {
   PublishInput,
   PublishFileInput,
   ListPage,
+  KeyType,
+  RevokeImpact,
   CreateUploadSessionRequest,
   CreateUploadSessionResponse,
 } from "@dropthis/node";
 ```
 
+The `CursorPaginationError` value (thrown by auto-pagination) and the existing
+`PublishInputError` are runtime exports:
+
+```typescript
+import { CursorPaginationError, PublishInputError } from "@dropthis/node";
+```
+
 ## Agent skills
 
 For AI coding agents (Cursor, Claude Code, Windsurf, etc.), install the [dropthis-skills](https://github.com/dropthis-dev/dropthis-skills) package:

package/node_modules/@dropthis/node/dist/{drops-DNwOp7g_.d.cts → drops-O6ymlqmb.d.cts}

@@ -77,6 +77,10 @@ type DropResponse = {
     noindex: boolean;
     passwordProtected: boolean;
     metadata: Record<string, unknown>;
+    /** When the drop was last updated (content or settings), ISO 8601. */
+    updatedAt: string;
+    /** Origin that created the drop (e.g. "api", "cli", "mcp"); null/omitted when unattributed. */
+    source?: string | null;
     object: string;
     accessible: boolean;
     persistent: boolean;
@@ -142,7 +146,8 @@ type Action = {
     message: string;
 };
 type EmailOtpResponse = {
-    ok: true;
+    /** Always `true` on success; optional because the server defaults it. */
+    ok?: true;
     expiresIn: number;
     nextAction?: Action | null;
 };
@@ -152,12 +157,35 @@ type SessionResponse = {
     accountId: string;
     isNewAccount: boolean;
     expiresIn: number;
+    /**
+     * Rotating refresh token for a console browser session. Present when a session is
+     * started (email/verify, refresh); `null`/omitted for non-session token issuance.
+     */
+    refreshToken?: string | null;
 };
+/**
+ * Why an API key exists. `standard` keys are created by the user (CLI/SDK/manual);
+ * `mcp_oauth` keys are minted per connected client by the MCP OAuth flow and carry a
+ * more generous quota.
+ */
+type KeyType = "standard" | "mcp_oauth";
+/** What breaks when a key is revoked. */
+type RevokeImpact = "disconnects_app" | "breaks_automation";
 type ApiKeyResponse = {
     object: "api_key";
     id: string;
     keyLast4: string;
     label: string;
+    /** Human-facing credential name: the user's label for `standard` keys, the connected client name for `mcp_oauth` keys. */
+    appName: string;
+    /** Why the key exists (drives quota accounting). */
+    keyType: KeyType;
+    /** Scopes granted to this key. */
+    scopes: string[];
+    /** When the key was last used to authenticate, ISO 8601; null/omitted if never used. */
+    lastUsedAt?: string | null;
+    /** What breaks if this key is revoked. */
+    revokeImpact: RevokeImpact;
     createdAt: string;
 };
 type ApiKeyCreatedResponse = ApiKeyResponse & {
@@ -252,9 +280,17 @@ type CreateUploadSessionFileResponse = {
 type UploadSessionFileResponse = {
     fileId: string;
     path: string;
-    contentType: string;
-    sizeBytes: number;
+    /** Declared MIME type; `null`/omitted for remote-fetch files until ingested. */
+    contentType?: string | null;
+    /** Declared byte size; `null`/omitted for remote-fetch files until ingested. */
+    sizeBytes?: number | null;
     objectKey: string;
+    /** How the file enters staging: "client_put" (client PUTs bytes) or "remote_fetch" (server fetches sourceUrl). */
+    origin: "client_put" | "remote_fetch";
+    /** Ingest lifecycle state for remote-fetch files (e.g. "pending" | "fetching" | "fetched" | "failed"). */
+    state: string;
+    /** Public http(s) URL the server fetches into staging; `null`/omitted for client-put files. */
+    sourceUrl?: string | null;
     verified: boolean;
 };
 type UploadSessionResponse = {
@@ -691,6 +727,22 @@ declare class DomainsResource {
     delete(idOrHostname: string): Promise<DropthisResult<DomainDeletedResponse>>;
 }
 
+/**
+ * Thrown by the auto-pagination iterator (`for await` / `autoPagingToArray`) when
+ * fetching a later page fails. Carries the underlying {@link DropthisErrorResponse}
+ * on `.error` so an agent can inspect `code`/`statusCode`/`retryable`/`requestId`
+ * instead of silently receiving a truncated list. The already-yielded items are not
+ * lost — the items consumed before the failure remain consumed; only the continuation
+ * rejects.
+ */
+declare class CursorPaginationError extends Error {
+    readonly error: DropthisErrorResponse;
+    /** Response headers from the failed page fetch (rate-limit, trace, request id). */
+    readonly headers: Record<string, string>;
+    constructor(error: DropthisErrorResponse, 
+    /** Response headers from the failed page fetch (rate-limit, trace, request id). */
+    headers?: Record<string, string>);
+}
 declare class CursorPage<T> implements ListPage<T> {
     readonly object: "list";
     readonly data: T[];
@@ -794,4 +846,4 @@ declare class DropsResource<TInput = PublishInput> {
     delete(dropId: string): Promise<DropthisResult<null>>;
 }
 
-export { type AccountLimits as A, type PreparedUploadFile as B, type CreateUploadSessionRequest as C, type DeploymentContentFile as D, type EmailOtpResponse as E, type PublishFileInput as F, type GetContentOptions as G, type PublishInput as H, type InMemoryPublishInput as I, type PublishOptions as J, type RequestOptions as K, type Limitations as L, type SessionResponse as M, type NextHint as N, Transport as O, type PrepareOptions as P, type UploadManifestFile as Q, type RequestControls as R, SHARED_POOL as S, type TierInfo as T, type UpdateContentOptions as U, type UploadSessionFileResponse as V, type UploadSessionResponse as W, type UploadTarget as X, AccountResource as a, type AccountResponse as b, type ActionResolve as c, ApiKeysResource as d, type CreateUploadSessionResponse as e, CursorPage as f, type DeploymentContentManifest as g, DeploymentsResource as h, type DnsRecord as i, type DomainDeletedResponse as j, type DomainListResponse as k, type DomainResponse as l, DomainsResource as m, type DropAction as n, type DropContentFile as o, type DropDeploymentResponse as p, type DropOptions as q, type DropResponse as r, DropsResource as s, type DropthisClientOptions as t, type DropthisErrorResponse as u, type DropthisResult as v, type ListDeploymentsParams as w, type ListDeploymentsResponse as x, type ListPage as y, type PreparedPublishRequest as z };
+export { type AccountLimits as A, type PreparedPublishRequest as B, type CreateUploadSessionRequest as C, type DeploymentContentFile as D, type EmailOtpResponse as E, type PreparedUploadFile as F, type GetContentOptions as G, type PublishFileInput as H, type InMemoryPublishInput as I, type PublishInput as J, type KeyType as K, type Limitations as L, type PublishOptions as M, type NextHint as N, type RequestOptions as O, type PrepareOptions as P, type RevokeImpact as Q, type RequestControls as R, SHARED_POOL as S, type SessionResponse as T, type TierInfo as U, Transport as V, type UpdateContentOptions as W, type UploadManifestFile as X, type UploadSessionFileResponse as Y, type UploadSessionResponse as Z, type UploadTarget as _, AccountResource as a, type AccountResponse as b, type ActionResolve as c, ApiKeysResource as d, type CreateUploadSessionResponse as e, CursorPage as f, CursorPaginationError as g, type DeploymentContentManifest as h, DeploymentsResource as i, type DnsRecord as j, type DomainDeletedResponse as k, type DomainListResponse as l, type DomainResponse as m, DomainsResource as n, type DropAction as o, type DropContentFile as p, type DropDeploymentResponse as q, type DropOptions as r, type DropResponse as s, DropsResource as t, type DropthisClientOptions as u, type DropthisErrorResponse as v, type DropthisResult as w, type ListDeploymentsParams as x, type ListDeploymentsResponse as y, type ListPage as z };

package/node_modules/@dropthis/node/dist/{drops-DNwOp7g_.d.ts → drops-O6ymlqmb.d.ts}

@@ -77,6 +77,10 @@ type DropResponse = {
     noindex: boolean;
     passwordProtected: boolean;
     metadata: Record<string, unknown>;
+    /** When the drop was last updated (content or settings), ISO 8601. */
+    updatedAt: string;
+    /** Origin that created the drop (e.g. "api", "cli", "mcp"); null/omitted when unattributed. */
+    source?: string | null;
     object: string;
     accessible: boolean;
     persistent: boolean;
@@ -142,7 +146,8 @@ type Action = {
     message: string;
 };
 type EmailOtpResponse = {
-    ok: true;
+    /** Always `true` on success; optional because the server defaults it. */
+    ok?: true;
     expiresIn: number;
     nextAction?: Action | null;
 };
@@ -152,12 +157,35 @@ type SessionResponse = {
     accountId: string;
     isNewAccount: boolean;
     expiresIn: number;
+    /**
+     * Rotating refresh token for a console browser session. Present when a session is
+     * started (email/verify, refresh); `null`/omitted for non-session token issuance.
+     */
+    refreshToken?: string | null;
 };
+/**
+ * Why an API key exists. `standard` keys are created by the user (CLI/SDK/manual);
+ * `mcp_oauth` keys are minted per connected client by the MCP OAuth flow and carry a
+ * more generous quota.
+ */
+type KeyType = "standard" | "mcp_oauth";
+/** What breaks when a key is revoked. */
+type RevokeImpact = "disconnects_app" | "breaks_automation";
 type ApiKeyResponse = {
     object: "api_key";
     id: string;
     keyLast4: string;
     label: string;
+    /** Human-facing credential name: the user's label for `standard` keys, the connected client name for `mcp_oauth` keys. */
+    appName: string;
+    /** Why the key exists (drives quota accounting). */
+    keyType: KeyType;
+    /** Scopes granted to this key. */
+    scopes: string[];
+    /** When the key was last used to authenticate, ISO 8601; null/omitted if never used. */
+    lastUsedAt?: string | null;
+    /** What breaks if this key is revoked. */
+    revokeImpact: RevokeImpact;
     createdAt: string;
 };
 type ApiKeyCreatedResponse = ApiKeyResponse & {
@@ -252,9 +280,17 @@ type CreateUploadSessionFileResponse = {
 type UploadSessionFileResponse = {
     fileId: string;
     path: string;
-    contentType: string;
-    sizeBytes: number;
+    /** Declared MIME type; `null`/omitted for remote-fetch files until ingested. */
+    contentType?: string | null;
+    /** Declared byte size; `null`/omitted for remote-fetch files until ingested. */
+    sizeBytes?: number | null;
     objectKey: string;
+    /** How the file enters staging: "client_put" (client PUTs bytes) or "remote_fetch" (server fetches sourceUrl). */
+    origin: "client_put" | "remote_fetch";
+    /** Ingest lifecycle state for remote-fetch files (e.g. "pending" | "fetching" | "fetched" | "failed"). */
+    state: string;
+    /** Public http(s) URL the server fetches into staging; `null`/omitted for client-put files. */
+    sourceUrl?: string | null;
     verified: boolean;
 };
 type UploadSessionResponse = {
@@ -691,6 +727,22 @@ declare class DomainsResource {
     delete(idOrHostname: string): Promise<DropthisResult<DomainDeletedResponse>>;
 }
 
+/**
+ * Thrown by the auto-pagination iterator (`for await` / `autoPagingToArray`) when
+ * fetching a later page fails. Carries the underlying {@link DropthisErrorResponse}
+ * on `.error` so an agent can inspect `code`/`statusCode`/`retryable`/`requestId`
+ * instead of silently receiving a truncated list. The already-yielded items are not
+ * lost — the items consumed before the failure remain consumed; only the continuation
+ * rejects.
+ */
+declare class CursorPaginationError extends Error {
+    readonly error: DropthisErrorResponse;
+    /** Response headers from the failed page fetch (rate-limit, trace, request id). */
+    readonly headers: Record<string, string>;
+    constructor(error: DropthisErrorResponse, 
+    /** Response headers from the failed page fetch (rate-limit, trace, request id). */
+    headers?: Record<string, string>);
+}
 declare class CursorPage<T> implements ListPage<T> {
     readonly object: "list";
     readonly data: T[];
@@ -794,4 +846,4 @@ declare class DropsResource<TInput = PublishInput> {
     delete(dropId: string): Promise<DropthisResult<null>>;
 }
 
-export { type AccountLimits as A, type PreparedUploadFile as B, type CreateUploadSessionRequest as C, type DeploymentContentFile as D, type EmailOtpResponse as E, type PublishFileInput as F, type GetContentOptions as G, type PublishInput as H, type InMemoryPublishInput as I, type PublishOptions as J, type RequestOptions as K, type Limitations as L, type SessionResponse as M, type NextHint as N, Transport as O, type PrepareOptions as P, type UploadManifestFile as Q, type RequestControls as R, SHARED_POOL as S, type TierInfo as T, type UpdateContentOptions as U, type UploadSessionFileResponse as V, type UploadSessionResponse as W, type UploadTarget as X, AccountResource as a, type AccountResponse as b, type ActionResolve as c, ApiKeysResource as d, type CreateUploadSessionResponse as e, CursorPage as f, type DeploymentContentManifest as g, DeploymentsResource as h, type DnsRecord as i, type DomainDeletedResponse as j, type DomainListResponse as k, type DomainResponse as l, DomainsResource as m, type DropAction as n, type DropContentFile as o, type DropDeploymentResponse as p, type DropOptions as q, type DropResponse as r, DropsResource as s, type DropthisClientOptions as t, type DropthisErrorResponse as u, type DropthisResult as v, type ListDeploymentsParams as w, type ListDeploymentsResponse as x, type ListPage as y, type PreparedPublishRequest as z };
+export { type AccountLimits as A, type PreparedPublishRequest as B, type CreateUploadSessionRequest as C, type DeploymentContentFile as D, type EmailOtpResponse as E, type PreparedUploadFile as F, type GetContentOptions as G, type PublishFileInput as H, type InMemoryPublishInput as I, type PublishInput as J, type KeyType as K, type Limitations as L, type PublishOptions as M, type NextHint as N, type RequestOptions as O, type PrepareOptions as P, type RevokeImpact as Q, type RequestControls as R, SHARED_POOL as S, type SessionResponse as T, type TierInfo as U, Transport as V, type UpdateContentOptions as W, type UploadManifestFile as X, type UploadSessionFileResponse as Y, type UploadSessionResponse as Z, type UploadTarget as _, AccountResource as a, type AccountResponse as b, type ActionResolve as c, ApiKeysResource as d, type CreateUploadSessionResponse as e, CursorPage as f, CursorPaginationError as g, type DeploymentContentManifest as h, DeploymentsResource as i, type DnsRecord as j, type DomainDeletedResponse as k, type DomainListResponse as l, type DomainResponse as m, DomainsResource as n, type DropAction as o, type DropContentFile as p, type DropDeploymentResponse as q, type DropOptions as r, type DropResponse as s, DropsResource as t, type DropthisClientOptions as u, type DropthisErrorResponse as v, type DropthisResult as w, type ListDeploymentsParams as x, type ListDeploymentsResponse as y, type ListPage as z };

package/node_modules/@dropthis/node/dist/edge.cjs

@@ -631,6 +631,16 @@ var DomainsResource = class {
 };
 
 // src/pagination.ts
+var CursorPaginationError = class extends Error {
+  constructor(error, headers = {}) {
+    super(`Failed to fetch next page: ${error.code} \u2014 ${error.message}`);
+    this.error = error;
+    this.headers = headers;
+    this.name = "CursorPaginationError";
+  }
+  error;
+  headers;
+};
 var CursorPage = class {
   object = "list";
   data;
@@ -656,7 +666,7 @@ var CursorPage = class {
     let current = this;
     while (current.hasMore && current.fetchNextPage) {
       const next = await current.fetchNextPage();
-      if (next.error) break;
+      if (next.error) throw new CursorPaginationError(next.error, next.headers);
       current = next.data;
       for (const item of current.data) yield item;
     }
@@ -871,7 +881,7 @@ function toSnakeCase(value) {
 
 // src/transport.ts
 var DEFAULT_BASE_URL = "https://api.dropthis.app";
-var SDK_VERSION = "0.20.0";
+var SDK_VERSION = "0.21.0";
 var Transport = class {
   apiKey;
   baseUrl;
@@ -910,7 +920,10 @@ var Transport = class {
           `signed_upload_${response.status}`,
           text || response.statusText,
           response.status,
-          { headers: responseHeaders }
+          // A 5xx from object storage is a transient upstream failure — safe to
+          // re-PUT. A 4xx (e.g. 403 expired/denied signed URL) won't fix itself on
+          // a blind retry, so leave it unmarked.
+          { headers: responseHeaders, retryable: response.status >= 500 }
         );
       }
       return {
@@ -925,7 +938,8 @@ var Transport = class {
       return createErrorResult(
         error instanceof Error && error.name === "AbortError" ? "timeout" : "network_error",
         message,
-        null
+        null,
+        { retryable: true }
       );
     } finally {
       clearTimeout(timeout);
@@ -982,7 +996,8 @@ var Transport = class {
       return createErrorResult(
         error instanceof Error && error.name === "AbortError" ? "timeout" : "network_error",
         message,
-        null
+        null,
+        { retryable: true }
       );
     } finally {
       clearTimeout(timeout);
@@ -1043,10 +1058,12 @@ var Transport = class {
       };
     } catch (error) {
       const message = error instanceof Error && error.name === "AbortError" ? "Request timed out" : error instanceof Error ? error.message : "Network error";
+      const retrySafe = method.toUpperCase() === "GET" || options.idempotencyKey !== void 0;
       return createErrorResult(
         error instanceof Error && error.name === "AbortError" ? "timeout" : "network_error",
         message,
-        null
+        null,
+        retrySafe ? { retryable: true } : {}
       );
     } finally {
       clearTimeout(timeout);