@fonderie/client 0.17.1 → 0.19.0

package/brain/signatures.md

@@ -48,6 +48,7 @@ new FonderieClient(opts: IFonderieClientOptions): FonderieClient
   .audit: AuditClient
   .webhooks: WebhooksClient
   .customers: CustomersClient
+  .media: MediaClient
   .setAccessToken(token: string | undefined): void
   .clearCache(): void
   .setWorkspaceId(workspaceId: string | undefined): void
@@ -58,11 +59,12 @@ new FonderieClient(opts: IFonderieClientOptions): FonderieClient
   .patch<T = unknown>(path: string, body?: unknown, config?: IRequestConfig | undefined): Promise<IApiResponse<T>>
   .delete<T = unknown>(path: string, config?: IRequestConfig | undefined): Promise<IApiResponse<T>>
 
-new FonderieApiError(reason: string, explanation: string, status: number, details?: unknown): FonderieApiError
+new FonderieApiError(reason: string, explanation: string, status: number, details?: unknown, requestId?: string | undefined): FonderieApiError
   .reason: string
   .explanation: string
   .status: number
   .details: unknown
+  .requestId: string | undefined
   .name: string
   .message: string
   .stack: string
@@ -377,6 +379,20 @@ new CustomersClient(http: HttpClient, tokens: TokenStore): CustomersClient
   .listLabels(type: CustomerLabelType, opts?: IReadOptions | undefined): Promise<IApiResponse<ICustomerLabelListResult>>
   .removeLabel(labelId: string): Promise<IApiResponse<undefined>>
 
+interface IUploadMediaInput {
+    dataBase64: string;
+    purpose?: string;
+    ownerType?: string;
+    ownerId?: string;
+}
+
+new MediaClient(http: HttpClient, tokens: TokenStore): MediaClient
+  .setAccessToken(token: string | undefined): void
+  .upload(input: IUploadMediaInput): Promise<IApiResponse<IMediaAssetResult>>
+  .delete(id: string): Promise<IApiResponse<{ id: string; }>>
+  .assetUrl(id: string): string
+  .assetIdFromUrl(url: string | null | undefined): string | null
+
 interface ICreateWebhookEndpointInput {
     url: string;
     events?: string[];
@@ -800,6 +816,21 @@ interface ILoginResult {
     requiresVerification?: boolean;
 }
 
+interface IMediaAssetDTO {
+    id: string;
+    url: string;
+    contentType: string;
+    byteSize: number;
+    ownerType: string;
+    ownerId: string;
+    purpose: string;
+    createdAt: string;
+}
+
+interface IMediaAssetResult {
+    asset: IMediaAssetDTO;
+}
+
 interface IMemberDTO {
     userId: string;
     workspaceId: string;

package/dist/index.cjs

@@ -28,6 +28,7 @@ __export(index_exports, {
   CustomersClient: () => CustomersClient,
   FonderieApiError: () => FonderieApiError,
   FonderieClient: () => FonderieClient,
+  MediaClient: () => MediaClient,
   WebhooksClient: () => WebhooksClient,
   WorkspacesClient: () => WorkspacesClient,
   createMemoryCache: () => createMemoryCache,
@@ -74,19 +75,26 @@ function createMemoryCache(opts = {}) {
 
 // src/http.ts
 var FonderieApiError = class extends Error {
-  constructor(reason, explanation, status, details) {
+  constructor(reason, explanation, status, details, requestId) {
     super(explanation);
     this.reason = reason;
     this.explanation = explanation;
     this.status = status;
     this.details = details;
+    this.requestId = requestId;
     this.name = "FonderieApiError";
   }
   reason;
   explanation;
   status;
   details;
+  requestId;
 };
+function newRequestId() {
+  const c = globalThis.crypto;
+  if (c?.randomUUID) return c.randomUUID();
+  return `r-${Date.now().toString(36)}-${Math.random().toString(36).slice(2, 10)}`;
+}
 var HttpClient = class {
   constructor(baseUrl, deps = {}) {
     this.baseUrl = baseUrl;
@@ -98,6 +106,12 @@ var HttpClient = class {
   cache;
   defaultTtlMs;
   refresh;
+  // Absolute URL for a path on this client's origin — for endpoints a browser
+  // navigates to or embeds (e.g. a public `<img src>`) rather than fetches
+  // through request(). Mirrors the `${baseUrl}${path}` join request() uses.
+  absolute(path) {
+    return `${this.baseUrl}${path}`;
+  }
   // Drop all cached responses — sign-out must not leave one session's data
   // servable to the next.
   clearCache() {
@@ -128,7 +142,11 @@ var HttpClient = class {
     return data;
   }
   async exec(opts, retried = false) {
-    const headers = { "Content-Type": "application/json" };
+    const requestId = newRequestId();
+    const headers = {
+      "Content-Type": "application/json",
+      "X-Request-ID": requestId
+    };
     if (opts.token) headers["Authorization"] = `Bearer ${opts.token}`;
     if (opts.cookie) headers["Cookie"] = opts.cookie;
     if (opts.workspaceId) headers["X-Workspace-ID"] = opts.workspaceId;
@@ -136,18 +154,19 @@ var HttpClient = class {
     const fetchInit = { method: opts.method, headers, credentials: "include" };
     if (opts.body !== void 0) fetchInit.body = JSON.stringify(opts.body);
     const res = await fetch(`${this.baseUrl}${opts.path}`, fetchInit);
+    const rid = res.headers.get("x-request-id") ?? requestId;
     if (res.status === 401 && this.refresh && !retried && !opts.path.startsWith("/auth/")) {
       const newToken = await this.refresh();
       if (newToken) return this.exec({ ...opts, token: newToken }, true);
     }
     if (res.status === 204) {
-      if (!res.ok) throw new FonderieApiError("unknown", res.statusText, res.status);
+      if (!res.ok) throw new FonderieApiError("unknown", res.statusText, res.status, void 0, rid);
       return void 0;
     }
     const data = await res.json();
     if (!res.ok || res.status === 202) {
       const err = data;
-      throw new FonderieApiError(err.reason, err.explanation, res.status, err.details);
+      throw new FonderieApiError(err.reason, err.explanation, res.status, err.details, rid);
     }
     return data;
   }
@@ -1020,6 +1039,55 @@ var CustomersClient = class {
   }
 };
 
+// src/modules/media.ts
+var MediaClient = class {
+  constructor(http, tokens) {
+    this.http = http;
+    this.tokens = tokens;
+  }
+  http;
+  tokens;
+  setAccessToken(token) {
+    this.tokens.set(token);
+  }
+  // POST /media — store an image; returns the asset with its monomorphic
+  // /media/:id url. requireAuth server-side.
+  upload(input) {
+    return this.http.request({
+      method: "POST",
+      path: "/media",
+      body: input,
+      token: this.tokens.get()
+    });
+  }
+  // DELETE /media/:id — uploader-only (403 for anyone else).
+  delete(id) {
+    return this.http.request({
+      method: "DELETE",
+      path: `/media/${encodeURIComponent(id)}`,
+      token: this.tokens.get()
+    });
+  }
+  // Absolute URL for a stored asset — an `<img src>` target. The GET /media/:id
+  // route is public and cached (it can't carry a Bearer token), so turn an
+  // upload's `asset.id` into a browser-loadable URL with this, and use it as
+  // the avatarUrl handed to auth's updateProfile.
+  assetUrl(id) {
+    return this.http.absolute(`/media/${encodeURIComponent(id)}`);
+  }
+  // Inverse of assetUrl: pull the asset id out of one of THIS brick's
+  // /media/:id URLs (absolute or relative); null for empty/external URLs. Lets
+  // avatar cleanup delete only assets we minted (matched as a UUID), never a
+  // placeholder or third-party avatar URL.
+  assetIdFromUrl(url) {
+    if (!url) return null;
+    const m = url.match(
+      /\/media\/([0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12})(?:[/?#]|$)/i
+    );
+    return m ? m[1] : null;
+  }
+};
+
 // src/modules/webhooks.ts
 var WebhooksClient = class {
   constructor(http, tokens) {
@@ -1355,6 +1423,7 @@ var FonderieClient = class {
   audit;
   webhooks;
   customers;
+  media;
   http;
   tokens;
   workspaceId;
@@ -1377,6 +1446,7 @@ var FonderieClient = class {
     this.audit = new AuditClient(this.http, this.tokens);
     this.webhooks = new WebhooksClient(this.http, this.tokens);
     this.customers = new CustomersClient(this.http, this.tokens);
+    this.media = new MediaClient(this.http, this.tokens);
     if (opts.workspaceId !== void 0) this.setWorkspaceId(opts.workspaceId);
   }
   // Single-flight refresh: POST /auth/refresh with the app-supplied refresh
@@ -1665,6 +1735,7 @@ function isMfaRequired(result) {
   CustomersClient,
   FonderieApiError,
   FonderieClient,
+  MediaClient,
   WebhooksClient,
   WorkspacesClient,
   createMemoryCache,