@fonderie/client 0.17.1 → 0.19.0

package/dist/index.d.cts

@@ -17,7 +17,8 @@ declare class FonderieApiError extends Error {
     readonly explanation: string;
     readonly status: number;
     readonly details?: unknown | undefined;
-    constructor(reason: string, explanation: string, status: number, details?: unknown | undefined);
+    readonly requestId?: string | undefined;
+    constructor(reason: string, explanation: string, status: number, details?: unknown | undefined, requestId?: string | undefined);
 }
 interface IRequestOptions {
     method: string;
@@ -42,6 +43,7 @@ declare class HttpClient {
     private defaultTtlMs;
     private refresh;
     constructor(baseUrl: string, deps?: IHttpDeps);
+    absolute(path: string): string;
     clearCache(): void;
     request<T>(opts: IRequestOptions): Promise<T>;
     private exec;
@@ -466,6 +468,19 @@ interface ISessionDTO {
 interface ISessionsResult {
     sessions: ISessionDTO[];
 }
+interface IMediaAssetDTO {
+    id: string;
+    url: string;
+    contentType: string;
+    byteSize: number;
+    ownerType: string;
+    ownerId: string;
+    purpose: string;
+    createdAt: string;
+}
+interface IMediaAssetResult {
+    asset: IMediaAssetDTO;
+}
 interface IWebhookEndpointDTO {
     id: string;
     url: string;
@@ -907,6 +922,25 @@ declare class CustomersClient {
     removeLabel(labelId: string): Promise<IApiResponse<undefined>>;
 }
 
+interface IUploadMediaInput {
+    dataBase64: string;
+    purpose?: string;
+    ownerType?: string;
+    ownerId?: string;
+}
+declare class MediaClient {
+    private http;
+    private tokens;
+    constructor(http: HttpClient, tokens: TokenStore);
+    setAccessToken(token: string | undefined): void;
+    upload(input: IUploadMediaInput): Promise<IApiResponse<IMediaAssetResult>>;
+    delete(id: string): Promise<IApiResponse<{
+        id: string;
+    }>>;
+    assetUrl(id: string): string;
+    assetIdFromUrl(url: string | null | undefined): string | null;
+}
+
 interface ICreateWebhookEndpointInput {
     url: string;
     events?: string[];
@@ -1048,6 +1082,7 @@ declare class FonderieClient {
     readonly audit: AuditClient;
     readonly webhooks: WebhooksClient;
     readonly customers: CustomersClient;
+    readonly media: MediaClient;
     private http;
     private tokens;
     private workspaceId;
@@ -1144,4 +1179,4 @@ declare class CourierAdminClient {
     rollback(type: string, input: IRollbackTemplateInput, locale?: string | null): Promise<IApiResponse<ITemplateEntry>>;
 }
 
-export { AuditClient, AuthClient, BillingClient, ConfigAdminClient, CourierAdminClient, type CustomerLabelType, type CustomerSex, type CustomerType, CustomersClient, FonderieApiError, FonderieClient, type IAcceptInvitationResult, type IAddAddressInput, type IAddEmailInput, type IAddPhoneInput, type IAddRelationshipInput, type IAddressDTO, type IApiError, type IApiResponse, type IAuditEventDTO, type IAuditPageResult, type IBlacklistCustomerInput, type ICache, type ICancelSubscriptionInput, type IChangePasswordInput, type ICheckoutInput, type ICheckoutUrlResult, type IClientAuthConfig, type IConfigAdminClientOptions, type IConfigEntry, type IConfigRevision, type ICourierAdminClientOptions, type ICreateCustomerInput, type ICreatePlanInput, type ICreateRoleInput, type ICreateWebhookEndpointInput, type ICreateWorkspaceInput, type ICustomerAddressDTO, type ICustomerAddressListResult, type ICustomerAddressResult, type ICustomerDTO, type ICustomerDetailD2DTO, type ICustomerDetailDTO, type ICustomerEmailDTO, type ICustomerEmailListResult, type ICustomerEmailResult, type ICustomerLabelDTO, type ICustomerLabelListResult, type ICustomerListResult, type ICustomerNoteDTO, type ICustomerNoteListResult, type ICustomerNoteResult, type ICustomerPhoneDTO, type ICustomerPhoneListResult, type ICustomerPhoneResult, type ICustomerRelationshipDTO, type ICustomerRelationshipExpandedD2DTO, type ICustomerRelationshipExpandedDTO, type ICustomerRelationshipListResult, type ICustomerRelationshipResult, type ICustomerResult, type ICustomerShallowDTO, type ICustomerTagListResult, type IFonderieClientOptions, type IGetCustomerInput, type IGetLoginHistoryInput, type IInvitationDTO, type IInvitationListResult, type IInviteEntry, type IInviteResult, type IInvoiceDTO, type IInvoicesResult, type IListAuditEventsInput, type IListCustomersInput, type ILoginEventDTO, type ILoginHistoryPageResult, type ILoginInput, type ILoginResult, type IMeResult, type IMemberDTO, type IMemberListResult, type IMemoryCacheOptions, type IMfaEnabledResult, type IMfaRequiredResult, type IMfaSetupResult, type IPaymentMethodDTO, type IPaymentMethodResult, type IPlanDTO, type IPlanFeature, type IPlanListResult, type IPlanResult, type IPortalUrlResult, type IReadOptions, type IRecordUsageInput, type IRefreshResult, type IRegisterInput, type IRegisterResult, type IRequestConfig, type IResendVerificationResult, type IResetPasswordInput, type IRevealSecretResult, type IRoleDTO, type IRoleListResult, type IRolePermission, type IRolePermissionInput, type IRolePermissionsResult, type IRoleResult, type IRollbackInput, type IRollbackTemplateInput, type ISecretEntry, type ISecretRevision, type ISessionDTO, type ISessionsResult, type ISetConfigInput, type ISetSecretInput, type ISetTemplateInput, type ISubscriptionChangeResult, type ISubscriptionDTO, type ISubscriptionResult, type ITemplateEntry, type ITemplateRevision, type ITestWebhookResult, type ITokens, type IUpdateCustomerInput, type IUpdatePlanInput, type IUpdatePreferencesInput, type IUpdateProfileInput, type IUpdateRoleInput, type IUpdateSettingsInput, type IUpdateWebhookEndpointInput, type IUpdateWorkspaceInput, type IUsageResult, type IUserDTO, type IUserPreferences, type IVerifyEmailResult, type IWalletCheckoutInput, type IWalletDTO, type IWalletPreferencesInput, type IWalletPurchaseInput, type IWalletPurchaseResult, type IWalletResult, type IWalletTransactionDTO, type IWalletTransactionsResult, type IWebhookDeliveryDTO, type IWebhookDeliveryListResult, type IWebhookEndpointCreatedDTO, type IWebhookEndpointDTO, type IWebhookEndpointListResult, type IWorkspaceAddressDTO, type IWorkspaceDTO, type IWorkspaceListResult, type IWorkspaceResult, type IWorkspaceSettingsDTO, type IWorkspaceSettingsResult, type SubscriberType, WebhooksClient, WorkspacesClient, createMemoryCache, isMfaRequired };
+export { AuditClient, AuthClient, BillingClient, ConfigAdminClient, CourierAdminClient, type CustomerLabelType, type CustomerSex, type CustomerType, CustomersClient, FonderieApiError, FonderieClient, type IAcceptInvitationResult, type IAddAddressInput, type IAddEmailInput, type IAddPhoneInput, type IAddRelationshipInput, type IAddressDTO, type IApiError, type IApiResponse, type IAuditEventDTO, type IAuditPageResult, type IBlacklistCustomerInput, type ICache, type ICancelSubscriptionInput, type IChangePasswordInput, type ICheckoutInput, type ICheckoutUrlResult, type IClientAuthConfig, type IConfigAdminClientOptions, type IConfigEntry, type IConfigRevision, type ICourierAdminClientOptions, type ICreateCustomerInput, type ICreatePlanInput, type ICreateRoleInput, type ICreateWebhookEndpointInput, type ICreateWorkspaceInput, type ICustomerAddressDTO, type ICustomerAddressListResult, type ICustomerAddressResult, type ICustomerDTO, type ICustomerDetailD2DTO, type ICustomerDetailDTO, type ICustomerEmailDTO, type ICustomerEmailListResult, type ICustomerEmailResult, type ICustomerLabelDTO, type ICustomerLabelListResult, type ICustomerListResult, type ICustomerNoteDTO, type ICustomerNoteListResult, type ICustomerNoteResult, type ICustomerPhoneDTO, type ICustomerPhoneListResult, type ICustomerPhoneResult, type ICustomerRelationshipDTO, type ICustomerRelationshipExpandedD2DTO, type ICustomerRelationshipExpandedDTO, type ICustomerRelationshipListResult, type ICustomerRelationshipResult, type ICustomerResult, type ICustomerShallowDTO, type ICustomerTagListResult, type IFonderieClientOptions, type IGetCustomerInput, type IGetLoginHistoryInput, type IInvitationDTO, type IInvitationListResult, type IInviteEntry, type IInviteResult, type IInvoiceDTO, type IInvoicesResult, type IListAuditEventsInput, type IListCustomersInput, type ILoginEventDTO, type ILoginHistoryPageResult, type ILoginInput, type ILoginResult, type IMeResult, type IMediaAssetDTO, type IMediaAssetResult, type IMemberDTO, type IMemberListResult, type IMemoryCacheOptions, type IMfaEnabledResult, type IMfaRequiredResult, type IMfaSetupResult, type IPaymentMethodDTO, type IPaymentMethodResult, type IPlanDTO, type IPlanFeature, type IPlanListResult, type IPlanResult, type IPortalUrlResult, type IReadOptions, type IRecordUsageInput, type IRefreshResult, type IRegisterInput, type IRegisterResult, type IRequestConfig, type IResendVerificationResult, type IResetPasswordInput, type IRevealSecretResult, type IRoleDTO, type IRoleListResult, type IRolePermission, type IRolePermissionInput, type IRolePermissionsResult, type IRoleResult, type IRollbackInput, type IRollbackTemplateInput, type ISecretEntry, type ISecretRevision, type ISessionDTO, type ISessionsResult, type ISetConfigInput, type ISetSecretInput, type ISetTemplateInput, type ISubscriptionChangeResult, type ISubscriptionDTO, type ISubscriptionResult, type ITemplateEntry, type ITemplateRevision, type ITestWebhookResult, type ITokens, type IUpdateCustomerInput, type IUpdatePlanInput, type IUpdatePreferencesInput, type IUpdateProfileInput, type IUpdateRoleInput, type IUpdateSettingsInput, type IUpdateWebhookEndpointInput, type IUpdateWorkspaceInput, type IUploadMediaInput, type IUsageResult, type IUserDTO, type IUserPreferences, type IVerifyEmailResult, type IWalletCheckoutInput, type IWalletDTO, type IWalletPreferencesInput, type IWalletPurchaseInput, type IWalletPurchaseResult, type IWalletResult, type IWalletTransactionDTO, type IWalletTransactionsResult, type IWebhookDeliveryDTO, type IWebhookDeliveryListResult, type IWebhookEndpointCreatedDTO, type IWebhookEndpointDTO, type IWebhookEndpointListResult, type IWorkspaceAddressDTO, type IWorkspaceDTO, type IWorkspaceListResult, type IWorkspaceResult, type IWorkspaceSettingsDTO, type IWorkspaceSettingsResult, MediaClient, type SubscriberType, WebhooksClient, WorkspacesClient, createMemoryCache, isMfaRequired };

package/dist/index.d.ts

@@ -17,7 +17,8 @@ declare class FonderieApiError extends Error {
     readonly explanation: string;
     readonly status: number;
     readonly details?: unknown | undefined;
-    constructor(reason: string, explanation: string, status: number, details?: unknown | undefined);
+    readonly requestId?: string | undefined;
+    constructor(reason: string, explanation: string, status: number, details?: unknown | undefined, requestId?: string | undefined);
 }
 interface IRequestOptions {
     method: string;
@@ -42,6 +43,7 @@ declare class HttpClient {
     private defaultTtlMs;
     private refresh;
     constructor(baseUrl: string, deps?: IHttpDeps);
+    absolute(path: string): string;
     clearCache(): void;
     request<T>(opts: IRequestOptions): Promise<T>;
     private exec;
@@ -466,6 +468,19 @@ interface ISessionDTO {
 interface ISessionsResult {
     sessions: ISessionDTO[];
 }
+interface IMediaAssetDTO {
+    id: string;
+    url: string;
+    contentType: string;
+    byteSize: number;
+    ownerType: string;
+    ownerId: string;
+    purpose: string;
+    createdAt: string;
+}
+interface IMediaAssetResult {
+    asset: IMediaAssetDTO;
+}
 interface IWebhookEndpointDTO {
     id: string;
     url: string;
@@ -907,6 +922,25 @@ declare class CustomersClient {
     removeLabel(labelId: string): Promise<IApiResponse<undefined>>;
 }
 
+interface IUploadMediaInput {
+    dataBase64: string;
+    purpose?: string;
+    ownerType?: string;
+    ownerId?: string;
+}
+declare class MediaClient {
+    private http;
+    private tokens;
+    constructor(http: HttpClient, tokens: TokenStore);
+    setAccessToken(token: string | undefined): void;
+    upload(input: IUploadMediaInput): Promise<IApiResponse<IMediaAssetResult>>;
+    delete(id: string): Promise<IApiResponse<{
+        id: string;
+    }>>;
+    assetUrl(id: string): string;
+    assetIdFromUrl(url: string | null | undefined): string | null;
+}
+
 interface ICreateWebhookEndpointInput {
     url: string;
     events?: string[];
@@ -1048,6 +1082,7 @@ declare class FonderieClient {
     readonly audit: AuditClient;
     readonly webhooks: WebhooksClient;
     readonly customers: CustomersClient;
+    readonly media: MediaClient;
     private http;
     private tokens;
     private workspaceId;
@@ -1144,4 +1179,4 @@ declare class CourierAdminClient {
     rollback(type: string, input: IRollbackTemplateInput, locale?: string | null): Promise<IApiResponse<ITemplateEntry>>;
 }
 
-export { AuditClient, AuthClient, BillingClient, ConfigAdminClient, CourierAdminClient, type CustomerLabelType, type CustomerSex, type CustomerType, CustomersClient, FonderieApiError, FonderieClient, type IAcceptInvitationResult, type IAddAddressInput, type IAddEmailInput, type IAddPhoneInput, type IAddRelationshipInput, type IAddressDTO, type IApiError, type IApiResponse, type IAuditEventDTO, type IAuditPageResult, type IBlacklistCustomerInput, type ICache, type ICancelSubscriptionInput, type IChangePasswordInput, type ICheckoutInput, type ICheckoutUrlResult, type IClientAuthConfig, type IConfigAdminClientOptions, type IConfigEntry, type IConfigRevision, type ICourierAdminClientOptions, type ICreateCustomerInput, type ICreatePlanInput, type ICreateRoleInput, type ICreateWebhookEndpointInput, type ICreateWorkspaceInput, type ICustomerAddressDTO, type ICustomerAddressListResult, type ICustomerAddressResult, type ICustomerDTO, type ICustomerDetailD2DTO, type ICustomerDetailDTO, type ICustomerEmailDTO, type ICustomerEmailListResult, type ICustomerEmailResult, type ICustomerLabelDTO, type ICustomerLabelListResult, type ICustomerListResult, type ICustomerNoteDTO, type ICustomerNoteListResult, type ICustomerNoteResult, type ICustomerPhoneDTO, type ICustomerPhoneListResult, type ICustomerPhoneResult, type ICustomerRelationshipDTO, type ICustomerRelationshipExpandedD2DTO, type ICustomerRelationshipExpandedDTO, type ICustomerRelationshipListResult, type ICustomerRelationshipResult, type ICustomerResult, type ICustomerShallowDTO, type ICustomerTagListResult, type IFonderieClientOptions, type IGetCustomerInput, type IGetLoginHistoryInput, type IInvitationDTO, type IInvitationListResult, type IInviteEntry, type IInviteResult, type IInvoiceDTO, type IInvoicesResult, type IListAuditEventsInput, type IListCustomersInput, type ILoginEventDTO, type ILoginHistoryPageResult, type ILoginInput, type ILoginResult, type IMeResult, type IMemberDTO, type IMemberListResult, type IMemoryCacheOptions, type IMfaEnabledResult, type IMfaRequiredResult, type IMfaSetupResult, type IPaymentMethodDTO, type IPaymentMethodResult, type IPlanDTO, type IPlanFeature, type IPlanListResult, type IPlanResult, type IPortalUrlResult, type IReadOptions, type IRecordUsageInput, type IRefreshResult, type IRegisterInput, type IRegisterResult, type IRequestConfig, type IResendVerificationResult, type IResetPasswordInput, type IRevealSecretResult, type IRoleDTO, type IRoleListResult, type IRolePermission, type IRolePermissionInput, type IRolePermissionsResult, type IRoleResult, type IRollbackInput, type IRollbackTemplateInput, type ISecretEntry, type ISecretRevision, type ISessionDTO, type ISessionsResult, type ISetConfigInput, type ISetSecretInput, type ISetTemplateInput, type ISubscriptionChangeResult, type ISubscriptionDTO, type ISubscriptionResult, type ITemplateEntry, type ITemplateRevision, type ITestWebhookResult, type ITokens, type IUpdateCustomerInput, type IUpdatePlanInput, type IUpdatePreferencesInput, type IUpdateProfileInput, type IUpdateRoleInput, type IUpdateSettingsInput, type IUpdateWebhookEndpointInput, type IUpdateWorkspaceInput, type IUsageResult, type IUserDTO, type IUserPreferences, type IVerifyEmailResult, type IWalletCheckoutInput, type IWalletDTO, type IWalletPreferencesInput, type IWalletPurchaseInput, type IWalletPurchaseResult, type IWalletResult, type IWalletTransactionDTO, type IWalletTransactionsResult, type IWebhookDeliveryDTO, type IWebhookDeliveryListResult, type IWebhookEndpointCreatedDTO, type IWebhookEndpointDTO, type IWebhookEndpointListResult, type IWorkspaceAddressDTO, type IWorkspaceDTO, type IWorkspaceListResult, type IWorkspaceResult, type IWorkspaceSettingsDTO, type IWorkspaceSettingsResult, type SubscriberType, WebhooksClient, WorkspacesClient, createMemoryCache, isMfaRequired };
+export { AuditClient, AuthClient, BillingClient, ConfigAdminClient, CourierAdminClient, type CustomerLabelType, type CustomerSex, type CustomerType, CustomersClient, FonderieApiError, FonderieClient, type IAcceptInvitationResult, type IAddAddressInput, type IAddEmailInput, type IAddPhoneInput, type IAddRelationshipInput, type IAddressDTO, type IApiError, type IApiResponse, type IAuditEventDTO, type IAuditPageResult, type IBlacklistCustomerInput, type ICache, type ICancelSubscriptionInput, type IChangePasswordInput, type ICheckoutInput, type ICheckoutUrlResult, type IClientAuthConfig, type IConfigAdminClientOptions, type IConfigEntry, type IConfigRevision, type ICourierAdminClientOptions, type ICreateCustomerInput, type ICreatePlanInput, type ICreateRoleInput, type ICreateWebhookEndpointInput, type ICreateWorkspaceInput, type ICustomerAddressDTO, type ICustomerAddressListResult, type ICustomerAddressResult, type ICustomerDTO, type ICustomerDetailD2DTO, type ICustomerDetailDTO, type ICustomerEmailDTO, type ICustomerEmailListResult, type ICustomerEmailResult, type ICustomerLabelDTO, type ICustomerLabelListResult, type ICustomerListResult, type ICustomerNoteDTO, type ICustomerNoteListResult, type ICustomerNoteResult, type ICustomerPhoneDTO, type ICustomerPhoneListResult, type ICustomerPhoneResult, type ICustomerRelationshipDTO, type ICustomerRelationshipExpandedD2DTO, type ICustomerRelationshipExpandedDTO, type ICustomerRelationshipListResult, type ICustomerRelationshipResult, type ICustomerResult, type ICustomerShallowDTO, type ICustomerTagListResult, type IFonderieClientOptions, type IGetCustomerInput, type IGetLoginHistoryInput, type IInvitationDTO, type IInvitationListResult, type IInviteEntry, type IInviteResult, type IInvoiceDTO, type IInvoicesResult, type IListAuditEventsInput, type IListCustomersInput, type ILoginEventDTO, type ILoginHistoryPageResult, type ILoginInput, type ILoginResult, type IMeResult, type IMediaAssetDTO, type IMediaAssetResult, type IMemberDTO, type IMemberListResult, type IMemoryCacheOptions, type IMfaEnabledResult, type IMfaRequiredResult, type IMfaSetupResult, type IPaymentMethodDTO, type IPaymentMethodResult, type IPlanDTO, type IPlanFeature, type IPlanListResult, type IPlanResult, type IPortalUrlResult, type IReadOptions, type IRecordUsageInput, type IRefreshResult, type IRegisterInput, type IRegisterResult, type IRequestConfig, type IResendVerificationResult, type IResetPasswordInput, type IRevealSecretResult, type IRoleDTO, type IRoleListResult, type IRolePermission, type IRolePermissionInput, type IRolePermissionsResult, type IRoleResult, type IRollbackInput, type IRollbackTemplateInput, type ISecretEntry, type ISecretRevision, type ISessionDTO, type ISessionsResult, type ISetConfigInput, type ISetSecretInput, type ISetTemplateInput, type ISubscriptionChangeResult, type ISubscriptionDTO, type ISubscriptionResult, type ITemplateEntry, type ITemplateRevision, type ITestWebhookResult, type ITokens, type IUpdateCustomerInput, type IUpdatePlanInput, type IUpdatePreferencesInput, type IUpdateProfileInput, type IUpdateRoleInput, type IUpdateSettingsInput, type IUpdateWebhookEndpointInput, type IUpdateWorkspaceInput, type IUploadMediaInput, type IUsageResult, type IUserDTO, type IUserPreferences, type IVerifyEmailResult, type IWalletCheckoutInput, type IWalletDTO, type IWalletPreferencesInput, type IWalletPurchaseInput, type IWalletPurchaseResult, type IWalletResult, type IWalletTransactionDTO, type IWalletTransactionsResult, type IWebhookDeliveryDTO, type IWebhookDeliveryListResult, type IWebhookEndpointCreatedDTO, type IWebhookEndpointDTO, type IWebhookEndpointListResult, type IWorkspaceAddressDTO, type IWorkspaceDTO, type IWorkspaceListResult, type IWorkspaceResult, type IWorkspaceSettingsDTO, type IWorkspaceSettingsResult, MediaClient, type SubscriberType, WebhooksClient, WorkspacesClient, createMemoryCache, isMfaRequired };

package/dist/index.js

@@ -37,19 +37,26 @@ function createMemoryCache(opts = {}) {
 
 // src/http.ts
 var FonderieApiError = class extends Error {
-  constructor(reason, explanation, status, details) {
+  constructor(reason, explanation, status, details, requestId) {
     super(explanation);
     this.reason = reason;
     this.explanation = explanation;
     this.status = status;
     this.details = details;
+    this.requestId = requestId;
     this.name = "FonderieApiError";
   }
   reason;
   explanation;
   status;
   details;
+  requestId;
 };
+function newRequestId() {
+  const c = globalThis.crypto;
+  if (c?.randomUUID) return c.randomUUID();
+  return `r-${Date.now().toString(36)}-${Math.random().toString(36).slice(2, 10)}`;
+}
 var HttpClient = class {
   constructor(baseUrl, deps = {}) {
     this.baseUrl = baseUrl;
@@ -61,6 +68,12 @@ var HttpClient = class {
   cache;
   defaultTtlMs;
   refresh;
+  // Absolute URL for a path on this client's origin — for endpoints a browser
+  // navigates to or embeds (e.g. a public `<img src>`) rather than fetches
+  // through request(). Mirrors the `${baseUrl}${path}` join request() uses.
+  absolute(path) {
+    return `${this.baseUrl}${path}`;
+  }
   // Drop all cached responses — sign-out must not leave one session's data
   // servable to the next.
   clearCache() {
@@ -91,7 +104,11 @@ var HttpClient = class {
     return data;
   }
   async exec(opts, retried = false) {
-    const headers = { "Content-Type": "application/json" };
+    const requestId = newRequestId();
+    const headers = {
+      "Content-Type": "application/json",
+      "X-Request-ID": requestId
+    };
     if (opts.token) headers["Authorization"] = `Bearer ${opts.token}`;
     if (opts.cookie) headers["Cookie"] = opts.cookie;
     if (opts.workspaceId) headers["X-Workspace-ID"] = opts.workspaceId;
@@ -99,18 +116,19 @@ var HttpClient = class {
     const fetchInit = { method: opts.method, headers, credentials: "include" };
     if (opts.body !== void 0) fetchInit.body = JSON.stringify(opts.body);
     const res = await fetch(`${this.baseUrl}${opts.path}`, fetchInit);
+    const rid = res.headers.get("x-request-id") ?? requestId;
     if (res.status === 401 && this.refresh && !retried && !opts.path.startsWith("/auth/")) {
       const newToken = await this.refresh();
       if (newToken) return this.exec({ ...opts, token: newToken }, true);
     }
     if (res.status === 204) {
-      if (!res.ok) throw new FonderieApiError("unknown", res.statusText, res.status);
+      if (!res.ok) throw new FonderieApiError("unknown", res.statusText, res.status, void 0, rid);
       return void 0;
     }
     const data = await res.json();
     if (!res.ok || res.status === 202) {
       const err = data;
-      throw new FonderieApiError(err.reason, err.explanation, res.status, err.details);
+      throw new FonderieApiError(err.reason, err.explanation, res.status, err.details, rid);
     }
     return data;
   }
@@ -983,6 +1001,55 @@ var CustomersClient = class {
   }
 };
 
+// src/modules/media.ts
+var MediaClient = class {
+  constructor(http, tokens) {
+    this.http = http;
+    this.tokens = tokens;
+  }
+  http;
+  tokens;
+  setAccessToken(token) {
+    this.tokens.set(token);
+  }
+  // POST /media — store an image; returns the asset with its monomorphic
+  // /media/:id url. requireAuth server-side.
+  upload(input) {
+    return this.http.request({
+      method: "POST",
+      path: "/media",
+      body: input,
+      token: this.tokens.get()
+    });
+  }
+  // DELETE /media/:id — uploader-only (403 for anyone else).
+  delete(id) {
+    return this.http.request({
+      method: "DELETE",
+      path: `/media/${encodeURIComponent(id)}`,
+      token: this.tokens.get()
+    });
+  }
+  // Absolute URL for a stored asset — an `<img src>` target. The GET /media/:id
+  // route is public and cached (it can't carry a Bearer token), so turn an
+  // upload's `asset.id` into a browser-loadable URL with this, and use it as
+  // the avatarUrl handed to auth's updateProfile.
+  assetUrl(id) {
+    return this.http.absolute(`/media/${encodeURIComponent(id)}`);
+  }
+  // Inverse of assetUrl: pull the asset id out of one of THIS brick's
+  // /media/:id URLs (absolute or relative); null for empty/external URLs. Lets
+  // avatar cleanup delete only assets we minted (matched as a UUID), never a
+  // placeholder or third-party avatar URL.
+  assetIdFromUrl(url) {
+    if (!url) return null;
+    const m = url.match(
+      /\/media\/([0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12})(?:[/?#]|$)/i
+    );
+    return m ? m[1] : null;
+  }
+};
+
 // src/modules/webhooks.ts
 var WebhooksClient = class {
   constructor(http, tokens) {
@@ -1318,6 +1385,7 @@ var FonderieClient = class {
   audit;
   webhooks;
   customers;
+  media;
   http;
   tokens;
   workspaceId;
@@ -1340,6 +1408,7 @@ var FonderieClient = class {
     this.audit = new AuditClient(this.http, this.tokens);
     this.webhooks = new WebhooksClient(this.http, this.tokens);
     this.customers = new CustomersClient(this.http, this.tokens);
+    this.media = new MediaClient(this.http, this.tokens);
     if (opts.workspaceId !== void 0) this.setWorkspaceId(opts.workspaceId);
   }
   // Single-flight refresh: POST /auth/refresh with the app-supplied refresh
@@ -1627,6 +1696,7 @@ export {
   CustomersClient,
   FonderieApiError,
   FonderieClient,
+  MediaClient,
   WebhooksClient,
   WorkspacesClient,
   createMemoryCache,