@endorr/core-sdk 0.1.0

package/README.md

@@ -0,0 +1,79 @@
+# @endorr/core-sdk
+
+TypeScript client for Endorr Core: Login with Endorr (OAuth 2.0 / OIDC with PKCE), the typed `/v1`
+API (account, organisations, files, folders, permissions, shares), a browser upload helper, and
+Next.js / React glue. Zero runtime dependencies besides `jose`.
+
+```bash
+pnpm add @endorr/core-sdk
+```
+
+## Login with Endorr in a Next.js app
+
+```ts
+// lib/endorr.ts (server only)
+import { createEndorrAuth } from '@endorr/core-sdk/nextjs';
+export const endorrAuth = createEndorrAuth({
+  issuer: 'https://auth.endorr.com',
+  clientId: 'endorr-suite',
+  clientSecret: process.env.ENDORR_CLIENT_SECRET!,
+  redirectUri: 'https://cloud.endorr.com/auth/endorr/callback',
+  cookieSecret: process.env.ENDORR_COOKIE_SECRET!,
+  scope: ['openid', 'profile', 'email', 'offline_access', 'organizations', 'files:read', 'files:write', 'account'],
+});
+
+// app/auth/endorr/login/route.ts
+import { endorrLoginHandler } from '@endorr/core-sdk/nextjs';
+import { endorrAuth } from '@/lib/endorr';
+export const { GET } = endorrLoginHandler(endorrAuth);
+
+// app/auth/endorr/callback/route.ts
+import { endorrCallbackHandler } from '@endorr/core-sdk/nextjs';
+import { endorrAuth } from '@/lib/endorr';
+export const { GET } = endorrCallbackHandler(endorrAuth, {
+  onSuccess: async ({ tokens, claims, returnTo }) => {
+    // claims.sub is the Endorr user id; claims.org_id the selected organisation.
+    await sessions.create({ endorrUserId: claims.sub, orgId: claims.org_id, refreshToken: tokens.refresh_token });
+    return Response.redirect(new URL(returnTo, 'https://cloud.endorr.com'), 303);
+  },
+});
+```
+
+Send users to `/auth/endorr/login?return_to=/files` and they come back signed in.
+
+## Calling the API
+
+```ts
+import { EndorrClient } from '@endorr/core-sdk';
+const core = new EndorrClient({ baseUrl: 'https://auth.endorr.com', accessToken: () => session.accessToken() });
+
+const me = await core.me.get();
+const { folders, files } = await core.folders.children(null);       // organisation root
+await core.permissions.grant('folder', folderId, { principal_type: 'team', principal_id: teamId, role: 'editor' });
+const { url } = await core.files.download(fileId);
+```
+
+Errors are `EndorrApiError` with `status`, `code` (`forbidden`, `not_found`, `validation_failed`, …) and `fieldError(path)`.
+
+## Uploads from the browser
+
+```tsx
+import { EndorrProvider, useEndorrUpload } from '@endorr/core-sdk/react';
+
+function Dropzone() {
+  const { upload, progress, uploading } = useEndorrUpload();
+  return <input type="file" disabled={uploading} onChange={(e) => e.target.files && upload(e.target.files[0], { folderId })} />;
+}
+```
+
+Bytes go straight from the browser to storage through a signed URL; Core and your app only see metadata.
+
+## Refreshing tokens
+
+```ts
+const next = await endorrAuth.oauth.refresh(storedRefreshToken);
+await sessions.update({ accessToken: next.access_token, refreshToken: next.refresh_token }); // rotating: keep the newest
+```
+
+A `401` from the API or `invalid_grant` on refresh means the user disconnected your product in
+Endorr or reuse detection fired: drop your session and send them through login again.

package/dist/client.d.ts

@@ -0,0 +1,202 @@
+import type { Me, EndorrUser, OrganizationSummary, SessionInfo, ConnectedApp, Member, Invite, Team, EndorrFile, EndorrFolder, UploadTicket, DownloadTicket, Grant, ShareLink, StorageUsage, OrgRole, ResourceRole, PrincipalType, StorageClass, ResourceType } from './types';
+export interface ClientConfig {
+    /** Core origin, e.g. https://auth.endorr.com */
+    baseUrl: string;
+    /** Access token, or a function returning the current one (refresh handled by you / the Next.js helper). */
+    accessToken?: string | (() => string | Promise<string>);
+    /** For same-origin first-party calls with the Core session cookie instead of a token. */
+    credentials?: RequestCredentials;
+    fetch?: typeof fetch;
+    /** Extra headers on every request (e.g. x-request-id propagation). */
+    headers?: Record<string, string>;
+}
+type Query = Record<string, string | number | boolean | undefined | null>;
+/**
+ * Typed client for the Endorr Core /v1 API. Every method throws EndorrApiError with the server's
+ * stable `code`, so callers can branch on 403 (needs a role) vs 404 (not yours / gone).
+ */
+export declare class EndorrClient {
+    private readonly cfg;
+    private readonly base;
+    private readonly f;
+    constructor(cfg: ClientConfig);
+    /** Same client, different token (e.g. after a refresh, or per request in a server handler). */
+    withToken(accessToken: string): EndorrClient;
+    request<T>(method: string, path: string, opts?: {
+        body?: unknown;
+        query?: Query;
+    }): Promise<T>;
+    me: {
+        get: () => Promise<Me>;
+        updateProfile: (input: {
+            name?: string;
+        }) => Promise<{
+            user: EndorrUser;
+        }>;
+        changePassword: (input: {
+            current_password: string;
+            new_password: string;
+        }) => Promise<{
+            ok: true;
+        }>;
+        resendVerification: () => Promise<{
+            ok: true;
+        }>;
+        organizations: () => Promise<OrganizationSummary[]>;
+        createOrganization: (input: {
+            name: string;
+        }) => Promise<OrganizationSummary>;
+        sessions: {
+            list: () => Promise<SessionInfo[]>;
+            revoke: (id: string) => Promise<{
+                ok: true;
+                signed_out_current: boolean;
+            }>;
+            revokeOthers: () => Promise<{
+                ok: true;
+                revoked: number;
+            }>;
+        };
+        connectedApps: {
+            list: () => Promise<ConnectedApp[]>;
+            disconnect: (clientId: string) => Promise<{
+                ok: true;
+            }>;
+        };
+    };
+    organizations: {
+        get: (id: string) => Promise<OrganizationSummary & {
+            created_at: string;
+        }>;
+        update: (id: string, input: {
+            name?: string;
+        }) => Promise<OrganizationSummary>;
+        members: (id: string) => Promise<Member[]>;
+        setMemberRole: (id: string, userId: string, role: OrgRole) => Promise<{
+            ok: true;
+        }>;
+        removeMember: (id: string, userId: string) => Promise<{
+            ok: true;
+        }>;
+        invites: (id: string) => Promise<Invite[]>;
+        invite: (id: string, input: {
+            email: string;
+            role?: "admin" | "member";
+        }) => Promise<Invite>;
+        revokeInvite: (id: string, inviteId: string) => Promise<{
+            ok: true;
+        }>;
+        teams: (id: string) => Promise<Team[]>;
+        createTeam: (id: string, input: {
+            name: string;
+        }) => Promise<Team>;
+    };
+    teams: {
+        delete: (teamId: string) => Promise<{
+            ok: true;
+        }>;
+        addMember: (teamId: string, userId: string) => Promise<{
+            ok: true;
+        }>;
+        removeMember: (teamId: string, userId: string) => Promise<{
+            ok: true;
+        }>;
+    };
+    files: {
+        createUpload: (input: {
+            name: string;
+            mime_type?: string;
+            size_bytes?: number;
+            folder_id?: string | null;
+            organization_id?: string | null;
+            storage_class?: StorageClass;
+        }) => Promise<UploadTicket>;
+        complete: (fileId: string, input?: {
+            sha256?: string | null;
+            size_bytes?: number | null;
+        }) => Promise<EndorrFile>;
+        get: (fileId: string) => Promise<EndorrFile>;
+        download: (fileId: string) => Promise<DownloadTicket>;
+        update: (fileId: string, input: {
+            name?: string;
+            folder_id?: string | null;
+            storage_class?: StorageClass;
+        }) => Promise<EndorrFile>;
+        keepPermanently: (fileId: string) => Promise<EndorrFile>;
+        delete: (fileId: string) => Promise<{
+            ok: true;
+        }>;
+        recent: (limit?: number) => Promise<EndorrFile[]>;
+        addRelationship: (sourceFileId: string, input: {
+            derived_file_id: string;
+            relationship_type: string;
+        }) => Promise<{
+            id: string;
+            source_file_id: string;
+            derived_file_id: string;
+            relationship_type: string;
+        }>;
+    };
+    folders: {
+        create: (input: {
+            name: string;
+            parent_folder_id?: string | null;
+            organization_id?: string | null;
+        }) => Promise<EndorrFolder>;
+        get: (folderId: string) => Promise<EndorrFolder>;
+        /** `null` lists the organisation root. */
+        children: (folderId: string | null) => Promise<{
+            folder_id: string | null;
+            folders: EndorrFolder[];
+            files: EndorrFile[];
+        }>;
+        update: (folderId: string, input: {
+            name?: string;
+            parent_folder_id?: string | null;
+        }) => Promise<EndorrFolder>;
+        delete: (folderId: string) => Promise<{
+            ok: true;
+        }>;
+    };
+    permissions: {
+        list: (type: ResourceType, id: string) => Promise<Grant[]>;
+        grant: (type: ResourceType, id: string, input: {
+            principal_type: PrincipalType;
+            principal_id: string;
+            role: ResourceRole;
+        }) => Promise<Grant>;
+        revoke: (type: ResourceType, id: string, grantId: string) => Promise<{
+            ok: true;
+        }>;
+    };
+    shares: {
+        create: (type: ResourceType, id: string, input?: {
+            expires_in_days?: number;
+            max_downloads?: number;
+        }) => Promise<ShareLink>;
+        revoke: (shareId: string) => Promise<{
+            ok: true;
+        }>;
+        /** Anonymous: resolve a share token from a link landing page. */
+        resolve: (token: string) => Promise<{
+            type: "file";
+            file: EndorrFile;
+            download: {
+                url: string;
+                expires_at: string;
+            };
+        } | {
+            type: "folder";
+            folder: {
+                id: string;
+                name: string;
+            };
+            files: EndorrFile[];
+        }>;
+    };
+    storage: {
+        usage: () => Promise<StorageUsage>;
+    };
+}
+export {};
+//# sourceMappingURL=client.d.ts.map

package/dist/client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../src/client.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,EAAE,EAAE,UAAU,EAAE,mBAAmB,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,YAAY,EAC9G,YAAY,EAAE,cAAc,EAAE,KAAK,EAAE,SAAS,EAAE,YAAY,EAAE,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,YAAY,EAAE,YAAY,EAC/H,MAAM,SAAS,CAAC;AAGjB,MAAM,WAAW,YAAY;IAC3B,gDAAgD;IAChD,OAAO,EAAE,MAAM,CAAC;IAChB,2GAA2G;IAC3G,WAAW,CAAC,EAAE,MAAM,GAAG,CAAC,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC;IACxD,yFAAyF;IACzF,WAAW,CAAC,EAAE,kBAAkB,CAAC;IACjC,KAAK,CAAC,EAAE,OAAO,KAAK,CAAC;IACrB,sEAAsE;IACtE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAClC;AAED,KAAK,KAAK,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,GAAG,SAAS,GAAG,IAAI,CAAC,CAAC;AAE1E;;;GAGG;AACH,qBAAa,YAAY;IAIX,OAAO,CAAC,QAAQ,CAAC,GAAG;IAHhC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAS;IAC9B,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAe;gBAEJ,GAAG,EAAE,YAAY;IAK9C,+FAA+F;IAC/F,SAAS,CAAC,WAAW,EAAE,MAAM,GAAG,YAAY;IAItC,OAAO,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,GAAE;QAAE,IAAI,CAAC,EAAE,OAAO,CAAC;QAAC,KAAK,CAAC,EAAE,KAAK,CAAA;KAAO,GAAG,OAAO,CAAC,CAAC,CAAC;IAcxG,EAAE;;+BAEuB;YAAE,IAAI,CAAC,EAAE,MAAM,CAAA;SAAE;kBAA0B,UAAU;;gCACpD;YAAE,gBAAgB,EAAE,MAAM,CAAC;YAAC,YAAY,EAAE,MAAM,CAAA;SAAE;gBAAwB,IAAI;;;gBACzD,IAAI;;;oCAErB;YAAE,IAAI,EAAE,MAAM,CAAA;SAAE;;;yBAG7B,MAAM;oBAAwB,IAAI;oCAAsB,OAAO;;;oBACrC,IAAI;yBAAW,MAAM;;;;;mCAIrC,MAAM;oBAAwB,IAAI;;;MAE3D;IAGF,aAAa;kBACD,MAAM;wBAAsE,MAAM;;qBAC/E,MAAM,SAAS;YAAE,IAAI,CAAC,EAAE,MAAM,CAAA;SAAE;sBAC/B,MAAM;4BACA,MAAM,UAAU,MAAM,QAAQ,OAAO;gBAAwB,IAAI;;2BAClE,MAAM,UAAU,MAAM;gBAAwB,IAAI;;sBACvD,MAAM;qBACP,MAAM,SAAS;YAAE,KAAK,EAAE,MAAM,CAAC;YAAC,IAAI,CAAC,EAAE,OAAO,GAAG,QAAQ,CAAA;SAAE;2BACrD,MAAM,YAAY,MAAM;gBAAwB,IAAI;;oBAC3D,MAAM;yBACD,MAAM,SAAS;YAAE,IAAI,EAAE,MAAM,CAAA;SAAE;MAChD;IAEF,KAAK;yBACc,MAAM;gBAAwB,IAAI;;4BAC/B,MAAM,UAAU,MAAM;gBAAwB,IAAI;;+BAC/C,MAAM,UAAU,MAAM;gBAAwB,IAAI;;MACzE;IAGF,KAAK;8BACmB;YAAE,IAAI,EAAE,MAAM,CAAC;YAAC,SAAS,CAAC,EAAE,MAAM,CAAC;YAAC,UAAU,CAAC,EAAE,MAAM,CAAC;YAAC,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;YAAC,eAAe,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;YAAC,aAAa,CAAC,EAAE,YAAY,CAAA;SAAE;2BAEtJ,MAAM,UAAS;YAAE,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;YAAC,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;SAAE;sBAE1E,MAAM;2BACD,MAAM;yBACR,MAAM,SAAS;YAAE,IAAI,CAAC,EAAE,MAAM,CAAC;YAAC,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;YAAC,aAAa,CAAC,EAAE,YAAY,CAAA;SAAE;kCAEhF,MAAM;yBACf,MAAM;gBAAwB,IAAI;;;wCAEnB,MAAM,SAAS;YAAE,eAAe,EAAE,MAAM,CAAC;YAAC,iBAAiB,EAAE,MAAM,CAAA;SAAE;gBAChE,MAAM;4BAAkB,MAAM;6BAAmB,MAAM;+BAAqB,MAAM;;MACvH;IAEF,OAAO;wBACW;YAAE,IAAI,EAAE,MAAM,CAAC;YAAC,gBAAgB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;YAAC,eAAe,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;SAAE;wBAEnF,MAAM;QACtB,0CAA0C;6BACrB,MAAM,GAAG,IAAI;uBAA+B,MAAM,GAAG,IAAI;qBAAW,YAAY,EAAE;mBAAS,UAAU,EAAE;;2BACzG,MAAM,SAAS;YAAE,IAAI,CAAC,EAAE,MAAM,CAAC;YAAC,gBAAgB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;SAAE;2BAElE,MAAM;gBAAwB,IAAI;;MACrD;IAEF,WAAW;qBACI,YAAY,MAAM,MAAM;sBACvB,YAAY,MAAM,MAAM,SAAS;YAAE,cAAc,EAAE,aAAa,CAAC;YAAC,YAAY,EAAE,MAAM,CAAC;YAAC,IAAI,EAAE,YAAY,CAAA;SAAE;uBAE3G,YAAY,MAAM,MAAM,WAAW,MAAM;gBAAwB,IAAI;;MACpF;IAEF,MAAM;uBACW,YAAY,MAAM,MAAM,UAAS;YAAE,eAAe,CAAC,EAAE,MAAM,CAAC;YAAC,aAAa,CAAC,EAAE,MAAM,CAAA;SAAE;0BAElF,MAAM;gBAAwB,IAAI;;QACpD,iEAAiE;yBAChD,MAAM;kBAA0B,MAAM;kBAAQ,UAAU;sBAAY;gBAAE,GAAG,EAAE,MAAM,CAAC;gBAAC,UAAU,EAAE,MAAM,CAAA;aAAE;;kBAAa,QAAQ;oBAAU;gBAAE,EAAE,EAAE,MAAM,CAAC;gBAAC,IAAI,EAAE,MAAM,CAAA;aAAE;mBAAS,UAAU,EAAE;;MACxM;IAEF,OAAO;;MAEL;CACH"}

package/dist/client.js

@@ -0,0 +1,108 @@
+import { throwForResponse } from './errors';
+/**
+ * Typed client for the Endorr Core /v1 API. Every method throws EndorrApiError with the server's
+ * stable `code`, so callers can branch on 403 (needs a role) vs 404 (not yours / gone).
+ */
+export class EndorrClient {
+    cfg;
+    base;
+    f;
+    constructor(cfg) {
+        this.cfg = cfg;
+        this.base = cfg.baseUrl.replace(/\/$/, '');
+        this.f = cfg.fetch ?? fetch;
+    }
+    /** Same client, different token (e.g. after a refresh, or per request in a server handler). */
+    withToken(accessToken) {
+        return new EndorrClient({ ...this.cfg, accessToken });
+    }
+    async request(method, path, opts = {}) {
+        const url = new URL(this.base + path);
+        for (const [k, v] of Object.entries(opts.query ?? {}))
+            if (v !== undefined && v !== null)
+                url.searchParams.set(k, String(v));
+        const headers = new Headers({ accept: 'application/json', ...(this.cfg.headers ?? {}) });
+        const token = typeof this.cfg.accessToken === 'function' ? await this.cfg.accessToken() : this.cfg.accessToken;
+        if (token)
+            headers.set('authorization', `Bearer ${token}`);
+        if (opts.body !== undefined)
+            headers.set('content-type', 'application/json');
+        const res = await this.f(url, { method, headers, body: opts.body !== undefined ? JSON.stringify(opts.body) : undefined, credentials: this.cfg.credentials });
+        if (!res.ok)
+            await throwForResponse(res);
+        const text = await res.text();
+        return (text ? JSON.parse(text) : {});
+    }
+    /* ── Identity & account (account scope for mutations) ─────────────────────────── */
+    me = {
+        get: () => this.request('GET', '/v1/me'),
+        updateProfile: (input) => this.request('PATCH', '/v1/me', { body: input }),
+        changePassword: (input) => this.request('POST', '/v1/me/password', { body: input }),
+        resendVerification: () => this.request('POST', '/v1/me/verification/resend', { body: {} }),
+        organizations: () => this.request('GET', '/v1/me/organizations').then((r) => r.organizations),
+        createOrganization: (input) => this.request('POST', '/v1/me/organizations', { body: input }).then((r) => r.organization),
+        sessions: {
+            list: () => this.request('GET', '/v1/me/sessions').then((r) => r.sessions),
+            revoke: (id) => this.request('DELETE', `/v1/me/sessions/${enc(id)}`),
+            revokeOthers: () => this.request('POST', '/v1/me/sessions/revoke-others', { body: {} }),
+        },
+        connectedApps: {
+            list: () => this.request('GET', '/v1/me/connected-apps').then((r) => r.apps),
+            disconnect: (clientId) => this.request('DELETE', `/v1/me/connected-apps/${enc(clientId)}`),
+        },
+    };
+    /* ── Organisations, members, invitations, teams (organizations scope) ──────────── */
+    organizations = {
+        get: (id) => this.request('GET', `/v1/organizations/${enc(id)}`).then((r) => r.organization),
+        update: (id, input) => this.request('PATCH', `/v1/organizations/${enc(id)}`, { body: input }).then((r) => r.organization),
+        members: (id) => this.request('GET', `/v1/organizations/${enc(id)}/members`).then((r) => r.members),
+        setMemberRole: (id, userId, role) => this.request('PATCH', `/v1/organizations/${enc(id)}/members/${enc(userId)}`, { body: { role } }),
+        removeMember: (id, userId) => this.request('DELETE', `/v1/organizations/${enc(id)}/members/${enc(userId)}`),
+        invites: (id) => this.request('GET', `/v1/organizations/${enc(id)}/invites`).then((r) => r.invites),
+        invite: (id, input) => this.request('POST', `/v1/organizations/${enc(id)}/invites`, { body: input }).then((r) => r.invite),
+        revokeInvite: (id, inviteId) => this.request('DELETE', `/v1/organizations/${enc(id)}/invites/${enc(inviteId)}`),
+        teams: (id) => this.request('GET', `/v1/organizations/${enc(id)}/teams`).then((r) => r.teams),
+        createTeam: (id, input) => this.request('POST', `/v1/organizations/${enc(id)}/teams`, { body: input }).then((r) => r.team),
+    };
+    teams = {
+        delete: (teamId) => this.request('DELETE', `/v1/teams/${enc(teamId)}`),
+        addMember: (teamId, userId) => this.request('PUT', `/v1/teams/${enc(teamId)}/members/${enc(userId)}`, { body: {} }),
+        removeMember: (teamId, userId) => this.request('DELETE', `/v1/teams/${enc(teamId)}/members/${enc(userId)}`),
+    };
+    /* ── Files (files:read / files:write) ─────────────────────────────────────────── */
+    files = {
+        createUpload: (input) => this.request('POST', '/v1/files/uploads', { body: input }),
+        complete: (fileId, input = {}) => this.request('POST', `/v1/files/${enc(fileId)}/complete`, { body: input }).then((r) => r.file),
+        get: (fileId) => this.request('GET', `/v1/files/${enc(fileId)}`).then((r) => r.file),
+        download: (fileId) => this.request('POST', `/v1/files/${enc(fileId)}/download`, { body: {} }),
+        update: (fileId, input) => this.request('PATCH', `/v1/files/${enc(fileId)}`, { body: input }).then((r) => r.file),
+        keepPermanently: (fileId) => this.files.update(fileId, { storage_class: 'permanent' }),
+        delete: (fileId) => this.request('DELETE', `/v1/files/${enc(fileId)}`),
+        recent: (limit = 20) => this.request('GET', '/v1/files/recent', { query: { limit } }).then((r) => r.files),
+        addRelationship: (sourceFileId, input) => this.request('POST', `/v1/files/${enc(sourceFileId)}/relationships`, { body: input }).then((r) => r.relationship),
+    };
+    folders = {
+        create: (input) => this.request('POST', '/v1/folders', { body: input }).then((r) => r.folder),
+        get: (folderId) => this.request('GET', `/v1/folders/${enc(folderId)}`).then((r) => r.folder),
+        /** `null` lists the organisation root. */
+        children: (folderId) => this.request('GET', `/v1/folders/${folderId ? enc(folderId) : 'root'}/children`),
+        update: (folderId, input) => this.request('PATCH', `/v1/folders/${enc(folderId)}`, { body: input }).then((r) => r.folder),
+        delete: (folderId) => this.request('DELETE', `/v1/folders/${enc(folderId)}`),
+    };
+    permissions = {
+        list: (type, id) => this.request('GET', `/v1/${type}s/${enc(id)}/permissions`).then((r) => r.grants),
+        grant: (type, id, input) => this.request('PUT', `/v1/${type}s/${enc(id)}/permissions`, { body: input }).then((r) => r.grant),
+        revoke: (type, id, grantId) => this.request('DELETE', `/v1/${type}s/${enc(id)}/permissions/${enc(grantId)}`),
+    };
+    shares = {
+        create: (type, id, input = {}) => this.request('POST', `/v1/${type}s/${enc(id)}/shares`, { body: input }).then((r) => r.share),
+        revoke: (shareId) => this.request('DELETE', `/v1/shares/${enc(shareId)}`),
+        /** Anonymous: resolve a share token from a link landing page. */
+        resolve: (token) => this.request('GET', `/v1/shares/resolve/${enc(token)}`),
+    };
+    storage = {
+        usage: () => this.request('GET', '/v1/storage/usage'),
+    };
+}
+function enc(s) { return encodeURIComponent(s); }
+//# sourceMappingURL=client.js.map

package/dist/client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.js","sourceRoot":"","sources":["../src/client.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,gBAAgB,EAAE,MAAM,UAAU,CAAC;AAgB5C;;;GAGG;AACH,MAAM,OAAO,YAAY;IAIM;IAHZ,IAAI,CAAS;IACb,CAAC,CAAe;IAEjC,YAA6B,GAAiB;QAAjB,QAAG,GAAH,GAAG,CAAc;QAC5C,IAAI,CAAC,IAAI,GAAG,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QAC3C,IAAI,CAAC,CAAC,GAAG,GAAG,CAAC,KAAK,IAAI,KAAK,CAAC;IAC9B,CAAC;IAED,+FAA+F;IAC/F,SAAS,CAAC,WAAmB;QAC3B,OAAO,IAAI,YAAY,CAAC,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,WAAW,EAAE,CAAC,CAAC;IACxD,CAAC;IAED,KAAK,CAAC,OAAO,CAAI,MAAc,EAAE,IAAY,EAAE,OAA0C,EAAE;QACzF,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC;QACtC,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC;YAAE,IAAI,CAAC,KAAK,SAAS,IAAI,CAAC,KAAK,IAAI;gBAAE,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;QAC7H,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC,EAAE,MAAM,EAAE,kBAAkB,EAAE,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC;QACzF,MAAM,KAAK,GAAG,OAAO,IAAI,CAAC,GAAG,CAAC,WAAW,KAAK,UAAU,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,WAAW,CAAC;QAC/G,IAAI,KAAK;YAAE,OAAO,CAAC,GAAG,CAAC,eAAe,EAAE,UAAU,KAAK,EAAE,CAAC,CAAC;QAC3D,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS;YAAE,OAAO,CAAC,GAAG,CAAC,cAAc,EAAE,kBAAkB,CAAC,CAAC;QAC7E,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,CAAC,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,EAAE,WAAW,EAAE,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC,CAAC;QAC7J,IAAI,CAAC,GAAG,CAAC,EAAE;YAAE,MAAM,gBAAgB,CAAC,GAAG,CAAC,CAAC;QACzC,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;QAC9B,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAM,CAAC;IAC7C,CAAC;IAED,qFAAqF;IACrF,EAAE,GAAG;QACH,GAAG,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,OAAO,CAAK,KAAK,EAAE,QAAQ,CAAC;QAC5C,aAAa,EAAE,CAAC,KAAwB,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAuB,OAAO,EAAE,QAAQ,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;QACnH,cAAc,EAAE,CAAC,KAAyD,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAe,MAAM,EAAE,iBAAiB,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;QACrJ,kBAAkB,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,OAAO,CAAe,MAAM,EAAE,4BAA4B,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;QACxG,aAAa,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,OAAO,CAA2C,KAAK,EAAE,sBAAsB,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC;QACvI,kBAAkB,EAAE,CAAC,KAAuB,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAwC,MAAM,EAAE,sBAAsB,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,YAAY,CAAC;QACjL,QAAQ,EAAE;YACR,IAAI,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,OAAO,CAA8B,KAAK,EAAE,iBAAiB,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC;YACvG,MAAM,EAAE,CAAC,EAAU,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAA4C,QAAQ,EAAE,mBAAmB,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC;YACvH,YAAY,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,OAAO,CAAgC,MAAM,EAAE,+BAA+B,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;SACvH;QACD,aAAa,EAAE;YACb,IAAI,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,OAAO,CAA2B,KAAK,EAAE,uBAAuB,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;YACtG,UAAU,EAAE,CAAC,QAAgB,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAe,QAAQ,EAAE,yBAAyB,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;SACjH;KACF,CAAC;IAEF,sFAAsF;IACtF,aAAa,GAAG;QACd,GAAG,EAAE,CAAC,EAAU,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAiE,KAAK,EAAE,qBAAqB,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,YAAY,CAAC;QACpK,MAAM,EAAE,CAAC,EAAU,EAAE,KAAwB,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAwC,OAAO,EAAE,qBAAqB,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,YAAY,CAAC;QAC3L,OAAO,EAAE,CAAC,EAAU,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAwB,KAAK,EAAE,qBAAqB,GAAG,CAAC,EAAE,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC;QAClI,aAAa,EAAE,CAAC,EAAU,EAAE,MAAc,EAAE,IAAa,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAe,OAAO,EAAE,qBAAqB,GAAG,CAAC,EAAE,CAAC,YAAY,GAAG,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,EAAE,CAAC;QAC5K,YAAY,EAAE,CAAC,EAAU,EAAE,MAAc,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAe,QAAQ,EAAE,qBAAqB,GAAG,CAAC,EAAE,CAAC,YAAY,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;QACzI,OAAO,EAAE,CAAC,EAAU,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAwB,KAAK,EAAE,qBAAqB,GAAG,CAAC,EAAE,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC;QAClI,MAAM,EAAE,CAAC,EAAU,EAAE,KAAmD,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAqB,MAAM,EAAE,qBAAqB,GAAG,CAAC,EAAE,CAAC,UAAU,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC;QACpM,YAAY,EAAE,CAAC,EAAU,EAAE,QAAgB,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAe,QAAQ,EAAE,qBAAqB,GAAG,CAAC,EAAE,CAAC,YAAY,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC7I,KAAK,EAAE,CAAC,EAAU,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAoB,KAAK,EAAE,qBAAqB,GAAG,CAAC,EAAE,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC;QACxH,UAAU,EAAE,CAAC,EAAU,EAAE,KAAuB,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAiB,MAAM,EAAE,qBAAqB,GAAG,CAAC,EAAE,CAAC,QAAQ,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;KACrK,CAAC;IAEF,KAAK,GAAG;QACN,MAAM,EAAE,CAAC,MAAc,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAe,QAAQ,EAAE,aAAa,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;QAC5F,SAAS,EAAE,CAAC,MAAc,EAAE,MAAc,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAe,KAAK,EAAE,aAAa,GAAG,CAAC,MAAM,CAAC,YAAY,GAAG,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;QACjJ,YAAY,EAAE,CAAC,MAAc,EAAE,MAAc,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAe,QAAQ,EAAE,aAAa,GAAG,CAAC,MAAM,CAAC,YAAY,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;KAC1I,CAAC;IAEF,qFAAqF;IACrF,KAAK,GAAG;QACN,YAAY,EAAE,CAAC,KAA0J,EAAE,EAAE,CAC3K,IAAI,CAAC,OAAO,CAAe,MAAM,EAAE,mBAAmB,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;QAC1E,QAAQ,EAAE,CAAC,MAAc,EAAE,QAAgE,EAAE,EAAE,EAAE,CAC/F,IAAI,CAAC,OAAO,CAAuB,MAAM,EAAE,aAAa,GAAG,CAAC,MAAM,CAAC,WAAW,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;QACtH,GAAG,EAAE,CAAC,MAAc,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAuB,KAAK,EAAE,aAAa,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;QAClH,QAAQ,EAAE,CAAC,MAAc,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAiB,MAAM,EAAE,aAAa,GAAG,CAAC,MAAM,CAAC,WAAW,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;QACrH,MAAM,EAAE,CAAC,MAAc,EAAE,KAAiF,EAAE,EAAE,CAC5G,IAAI,CAAC,OAAO,CAAuB,OAAO,EAAE,aAAa,GAAG,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;QAC9G,eAAe,EAAE,CAAC,MAAc,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,EAAE,aAAa,EAAE,WAAW,EAAE,CAAC;QAC9F,MAAM,EAAE,CAAC,MAAc,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAe,QAAQ,EAAE,aAAa,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;QAC5F,MAAM,EAAE,CAAC,KAAK,GAAG,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAA0B,KAAK,EAAE,kBAAkB,EAAE,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC;QACnI,eAAe,EAAE,CAAC,YAAoB,EAAE,KAA6D,EAAE,EAAE,CACvG,IAAI,CAAC,OAAO,CAA+G,MAAM,EAAE,aAAa,GAAG,CAAC,YAAY,CAAC,gBAAgB,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,YAAY,CAAC;KAClO,CAAC;IAEF,OAAO,GAAG;QACR,MAAM,EAAE,CAAC,KAA0F,EAAE,EAAE,CACrG,IAAI,CAAC,OAAO,CAA2B,MAAM,EAAE,aAAa,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC;QACtG,GAAG,EAAE,CAAC,QAAgB,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAA2B,KAAK,EAAE,eAAe,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC;QAC9H,0CAA0C;QAC1C,QAAQ,EAAE,CAAC,QAAuB,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAA6E,KAAK,EAAE,eAAe,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,MAAM,WAAW,CAAC;QACnM,MAAM,EAAE,CAAC,QAAgB,EAAE,KAA0D,EAAE,EAAE,CACvF,IAAI,CAAC,OAAO,CAA2B,OAAO,EAAE,eAAe,GAAG,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC;QACxH,MAAM,EAAE,CAAC,QAAgB,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAe,QAAQ,EAAE,eAAe,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;KACnG,CAAC;IAEF,WAAW,GAAG;QACZ,IAAI,EAAE,CAAC,IAAkB,EAAE,EAAU,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAsB,KAAK,EAAE,OAAO,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC,cAAc,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC;QAC/I,KAAK,EAAE,CAAC,IAAkB,EAAE,EAAU,EAAE,KAAkF,EAAE,EAAE,CAC5H,IAAI,CAAC,OAAO,CAAmB,KAAK,EAAE,OAAO,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC,cAAc,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC;QACpH,MAAM,EAAE,CAAC,IAAkB,EAAE,EAAU,EAAE,OAAe,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAe,QAAQ,EAAE,OAAO,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC,gBAAgB,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;KACzJ,CAAC;IAEF,MAAM,GAAG;QACP,MAAM,EAAE,CAAC,IAAkB,EAAE,EAAU,EAAE,QAA8D,EAAE,EAAE,EAAE,CAC3G,IAAI,CAAC,OAAO,CAAuB,MAAM,EAAE,OAAO,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC,SAAS,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC;QACpH,MAAM,EAAE,CAAC,OAAe,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAe,QAAQ,EAAE,cAAc,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;QAC/F,iEAAiE;QACjE,OAAO,EAAE,CAAC,KAAa,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAoK,KAAK,EAAE,sBAAsB,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;KACvP,CAAC;IAEF,OAAO,GAAG;QACR,KAAK,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,OAAO,CAAe,KAAK,EAAE,mBAAmB,CAAC;KACpE,CAAC;CACH;AAED,SAAS,GAAG,CAAC,CAAS,IAAI,OAAO,kBAAkB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC"}

package/dist/errors.d.ts

@@ -0,0 +1,28 @@
+/** Error returned by the Core API: `code` is stable and documented, `details` carries field errors for 422. */
+export declare class EndorrApiError extends Error {
+    readonly status: number;
+    readonly code: string;
+    readonly details?: {
+        path?: string;
+        message: string;
+    }[] | undefined;
+    readonly requestId?: string | undefined;
+    constructor(status: number, code: string, message: string, details?: {
+        path?: string;
+        message: string;
+    }[] | undefined, requestId?: string | undefined);
+    /** Field-level message for 422 responses. */
+    fieldError(path: string): string | undefined;
+    get isUnauthorized(): boolean;
+    get isForbidden(): boolean;
+    get isNotFound(): boolean;
+}
+/** Error from the OAuth token/authorization endpoints (RFC 6749 §5.2). */
+export declare class EndorrOAuthError extends Error {
+    readonly error: string;
+    readonly description?: string | undefined;
+    readonly status?: number | undefined;
+    constructor(error: string, description?: string | undefined, status?: number | undefined);
+}
+export declare function throwForResponse(res: Response): Promise<never>;
+//# sourceMappingURL=errors.d.ts.map

package/dist/errors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../src/errors.ts"],"names":[],"mappings":"AAAA,+GAA+G;AAC/G,qBAAa,cAAe,SAAQ,KAAK;aAErB,MAAM,EAAE,MAAM;aACd,IAAI,EAAE,MAAM;aAEZ,OAAO,CAAC,EAAE;QAAE,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,EAAE;aAC9C,SAAS,CAAC,EAAE,MAAM;gBAJlB,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,MAAM,EAC5B,OAAO,EAAE,MAAM,EACC,OAAO,CAAC,EAAE;QAAE,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,EAAE,YAAA,EAC9C,SAAS,CAAC,EAAE,MAAM,YAAA;IAKpC,6CAA6C;IAC7C,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS;IAG5C,IAAI,cAAc,YAAkC;IACpD,IAAI,WAAW,YAAkC;IACjD,IAAI,UAAU,YAAkC;CACjD;AAED,0EAA0E;AAC1E,qBAAa,gBAAiB,SAAQ,KAAK;aACb,KAAK,EAAE,MAAM;aAAkB,WAAW,CAAC,EAAE,MAAM;aAAkB,MAAM,CAAC,EAAE,MAAM;gBAApF,KAAK,EAAE,MAAM,EAAkB,WAAW,CAAC,EAAE,MAAM,YAAA,EAAkB,MAAM,CAAC,EAAE,MAAM,YAAA;CAIjH;AAED,wBAAsB,gBAAgB,CAAC,GAAG,EAAE,QAAQ,GAAG,OAAO,CAAC,KAAK,CAAC,CAKpE"}

package/dist/errors.js

@@ -0,0 +1,45 @@
+/** Error returned by the Core API: `code` is stable and documented, `details` carries field errors for 422. */
+export class EndorrApiError extends Error {
+    status;
+    code;
+    details;
+    requestId;
+    constructor(status, code, message, details, requestId) {
+        super(message);
+        this.status = status;
+        this.code = code;
+        this.details = details;
+        this.requestId = requestId;
+        this.name = 'EndorrApiError';
+    }
+    /** Field-level message for 422 responses. */
+    fieldError(path) {
+        return this.details?.find((d) => d.path === path)?.message;
+    }
+    get isUnauthorized() { return this.status === 401; }
+    get isForbidden() { return this.status === 403; }
+    get isNotFound() { return this.status === 404; }
+}
+/** Error from the OAuth token/authorization endpoints (RFC 6749 §5.2). */
+export class EndorrOAuthError extends Error {
+    error;
+    description;
+    status;
+    constructor(error, description, status) {
+        super(description ? `${error}: ${description}` : error);
+        this.error = error;
+        this.description = description;
+        this.status = status;
+        this.name = 'EndorrOAuthError';
+    }
+}
+export async function throwForResponse(res) {
+    let body = null;
+    try {
+        body = await res.json();
+    }
+    catch { /* not json */ }
+    const e = body?.error;
+    throw new EndorrApiError(res.status, e?.code ?? 'http_error', e?.message ?? `Endorr Core answered ${res.status}`, e?.details, e?.request_id ?? res.headers.get('x-request-id') ?? undefined);
+}
+//# sourceMappingURL=errors.js.map

package/dist/errors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.js","sourceRoot":"","sources":["../src/errors.ts"],"names":[],"mappings":"AAAA,+GAA+G;AAC/G,MAAM,OAAO,cAAe,SAAQ,KAAK;IAErB;IACA;IAEA;IACA;IALlB,YACkB,MAAc,EACd,IAAY,EAC5B,OAAe,EACC,OAA8C,EAC9C,SAAkB;QAElC,KAAK,CAAC,OAAO,CAAC,CAAC;QANC,WAAM,GAAN,MAAM,CAAQ;QACd,SAAI,GAAJ,IAAI,CAAQ;QAEZ,YAAO,GAAP,OAAO,CAAuC;QAC9C,cAAS,GAAT,SAAS,CAAS;QAGlC,IAAI,CAAC,IAAI,GAAG,gBAAgB,CAAC;IAC/B,CAAC;IACD,6CAA6C;IAC7C,UAAU,CAAC,IAAY;QACrB,OAAO,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,EAAE,OAAO,CAAC;IAC7D,CAAC;IACD,IAAI,cAAc,KAAK,OAAO,IAAI,CAAC,MAAM,KAAK,GAAG,CAAC,CAAC,CAAC;IACpD,IAAI,WAAW,KAAK,OAAO,IAAI,CAAC,MAAM,KAAK,GAAG,CAAC,CAAC,CAAC;IACjD,IAAI,UAAU,KAAK,OAAO,IAAI,CAAC,MAAM,KAAK,GAAG,CAAC,CAAC,CAAC;CACjD;AAED,0EAA0E;AAC1E,MAAM,OAAO,gBAAiB,SAAQ,KAAK;IACb;IAA+B;IAAsC;IAAjG,YAA4B,KAAa,EAAkB,WAAoB,EAAkB,MAAe;QAC9G,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,GAAG,KAAK,KAAK,WAAW,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;QAD9B,UAAK,GAAL,KAAK,CAAQ;QAAkB,gBAAW,GAAX,WAAW,CAAS;QAAkB,WAAM,GAAN,MAAM,CAAS;QAE9G,IAAI,CAAC,IAAI,GAAG,kBAAkB,CAAC;IACjC,CAAC;CACF;AAED,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,GAAa;IAClD,IAAI,IAAI,GAAY,IAAI,CAAC;IACzB,IAAI,CAAC;QAAC,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC,CAAC,cAAc,CAAC,CAAC;IACzD,MAAM,CAAC,GAAI,IAAoI,EAAE,KAAK,CAAC;IACvJ,MAAM,IAAI,cAAc,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC,EAAE,IAAI,IAAI,YAAY,EAAE,CAAC,EAAE,OAAO,IAAI,wBAAwB,GAAG,CAAC,MAAM,EAAE,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,UAAU,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,SAAS,CAAC,CAAC;AAC/L,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,9 @@
+export { EndorrOAuth, generatePkce, randomState, DEFAULT_SCOPES } from './oauth';
+export type { OAuthConfig, AuthorizationUrlOptions } from './oauth';
+export { EndorrClient } from './client';
+export type { ClientConfig } from './client';
+export { uploadFile } from './upload';
+export type { UploadOptions } from './upload';
+export { EndorrApiError, EndorrOAuthError } from './errors';
+export * from './types';
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,WAAW,EAAE,cAAc,EAAE,MAAM,SAAS,CAAC;AACjF,YAAY,EAAE,WAAW,EAAE,uBAAuB,EAAE,MAAM,SAAS,CAAC;AACpE,OAAO,EAAE,YAAY,EAAE,MAAM,UAAU,CAAC;AACxC,YAAY,EAAE,YAAY,EAAE,MAAM,UAAU,CAAC;AAC7C,OAAO,EAAE,UAAU,EAAE,MAAM,UAAU,CAAC;AACtC,YAAY,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAC9C,OAAO,EAAE,cAAc,EAAE,gBAAgB,EAAE,MAAM,UAAU,CAAC;AAC5D,cAAc,SAAS,CAAC"}

package/dist/index.js

@@ -0,0 +1,6 @@
+export { EndorrOAuth, generatePkce, randomState, DEFAULT_SCOPES } from './oauth';
+export { EndorrClient } from './client';
+export { uploadFile } from './upload';
+export { EndorrApiError, EndorrOAuthError } from './errors';
+export * from './types';
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,WAAW,EAAE,cAAc,EAAE,MAAM,SAAS,CAAC;AAEjF,OAAO,EAAE,YAAY,EAAE,MAAM,UAAU,CAAC;AAExC,OAAO,EAAE,UAAU,EAAE,MAAM,UAAU,CAAC;AAEtC,OAAO,EAAE,cAAc,EAAE,gBAAgB,EAAE,MAAM,UAAU,CAAC;AAC5D,cAAc,SAAS,CAAC"}

package/dist/nextjs.d.ts

@@ -0,0 +1,44 @@
+import { EndorrOAuth, type OAuthConfig } from './oauth';
+import type { IdTokenClaims, TokenSet } from './types';
+/**
+ * Next.js (App Router) helpers for the Login with Endorr dance.
+ *
+ *   // app/auth/endorr/login/route.ts
+ *   export const { GET } = endorrLoginHandler(auth);
+ *   // app/auth/endorr/callback/route.ts
+ *   export const { GET } = endorrCallbackHandler(auth, { onSuccess: async ({ tokens, claims }) => { …create your session…; return NextResponse.redirect('/') } });
+ *
+ * The pending login (state, PKCE verifier, nonce, return path) travels in one short-lived,
+ * HttpOnly, HMAC-signed cookie, so no server-side store is needed.
+ */
+export interface NextAuthConfig extends OAuthConfig {
+    /** 32+ byte secret used to sign the transient login cookie. */
+    cookieSecret: string;
+    cookieName?: string;
+    /** Force Secure cookies (defaults to true when redirectUri is https). */
+    secureCookies?: boolean;
+}
+export interface CallbackSuccess {
+    tokens: TokenSet;
+    claims: IdTokenClaims;
+    returnTo: string;
+    request: Request;
+}
+export interface CallbackHandlers {
+    onSuccess: (ctx: CallbackSuccess) => Promise<Response> | Response;
+    onError?: (error: Error, request: Request) => Promise<Response> | Response;
+}
+export declare function createEndorrAuth(cfg: NextAuthConfig): {
+    oauth: EndorrOAuth;
+    login: (req: Request) => Promise<Response>;
+    callback: (req: Request, handlers: CallbackHandlers) => Promise<Response>;
+};
+export type EndorrAuth = ReturnType<typeof createEndorrAuth>;
+/** Route-file sugar: `export const { GET } = endorrLoginHandler(auth)`. */
+export declare function endorrLoginHandler(auth: EndorrAuth): {
+    GET: (req: Request) => Promise<Response>;
+};
+export declare function endorrCallbackHandler(auth: EndorrAuth, handlers: CallbackHandlers): {
+    GET: (req: Request) => Promise<Response>;
+};
+//# sourceMappingURL=nextjs.d.ts.map

package/dist/nextjs.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"nextjs.d.ts","sourceRoot":"","sources":["../src/nextjs.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAA6B,KAAK,WAAW,EAAE,MAAM,SAAS,CAAC;AACnF,OAAO,KAAK,EAAE,aAAa,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAEvD;;;;;;;;;;GAUG;AACH,MAAM,WAAW,cAAe,SAAQ,WAAW;IACjD,+DAA+D;IAC/D,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,yEAAyE;IACzE,aAAa,CAAC,EAAE,OAAO,CAAC;CACzB;AAwCD,MAAM,WAAW,eAAe;IAAG,MAAM,EAAE,QAAQ,CAAC;IAAC,MAAM,EAAE,aAAa,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,OAAO,CAAA;CAAE;AAChH,MAAM,WAAW,gBAAgB;IAC/B,SAAS,EAAE,CAAC,GAAG,EAAE,eAAe,KAAK,OAAO,CAAC,QAAQ,CAAC,GAAG,QAAQ,CAAC;IAClE,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,KAAK,OAAO,CAAC,QAAQ,CAAC,GAAG,QAAQ,CAAC;CAC5E;AAED,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,cAAc;;iBAKxB,OAAO,KAAG,OAAO,CAAC,QAAQ,CAAC;oBAkBxB,OAAO,YAAY,gBAAgB,KAAG,OAAO,CAAC,QAAQ,CAAC;EAqBrF;AAED,MAAM,MAAM,UAAU,GAAG,UAAU,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAE7D,2EAA2E;AAC3E,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,UAAU;eAC7B,OAAO;EAC5B;AACD,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,gBAAgB;eAC5D,OAAO;EAC5B"}