@giaeulate/baas-sdk 1.1.1 → 1.3.0

package/dist/index.d.ts

@@ -0,0 +1,1037 @@
+/**
+ * SDK Shared Types
+ */
+/** HTTP method types */
+type HttpMethod = 'GET' | 'POST' | 'PUT' | 'PATCH' | 'DELETE';
+/** Request options for the HTTP client */
+interface RequestOptions {
+    method?: HttpMethod;
+    body?: unknown;
+    headers?: Record<string, string>;
+    skipAuth?: boolean;
+}
+/** Query filter for data operations */
+type QueryFilter = {
+    column: string;
+    operator: string;
+    value: any;
+};
+/** Pagination options */
+interface PaginationOptions {
+    limit?: number;
+    offset?: number;
+}
+/** Generic API response with error */
+interface ApiResponse<T = any> {
+    data?: T;
+    error?: string;
+    success?: boolean;
+}
+/** Realtime Event types */
+type RealtimeAction = 'INSERT' | 'UPDATE' | 'DELETE' | '*';
+/** Structure of a Realtime event payload */
+interface RealtimePayload<T = any> {
+    table: string;
+    action: 'insert' | 'update' | 'delete';
+    record: T;
+    old_record?: T;
+    timestamp: string;
+}
+/** Callback function for realtime subscriptions */
+type RealtimeCallback<T = any> = (payload: RealtimePayload<T>) => void;
+
+/**
+ * Core HTTP Client
+ * Base class providing HTTP request infrastructure for all SDK modules
+ */
+
+/** Privilege class of the API key. anon = RLS applies (safe for browsers);
+ *  service_role = RLS bypass / admin (server-side only). Both share the
+ *  `baas_sk_` prefix, so the type cannot be inferred — it must be declared. */
+type KeyType = 'anon' | 'service_role';
+interface ClientOptions {
+    /** Defaults to 'service_role' for backward-compat. Set 'anon' in any client
+     *  bundle (browser / mobile app) — see warnIfUnsafeKey. */
+    keyType?: KeyType;
+}
+declare class HttpClient {
+    url: string;
+    apiKey: string;
+    keyType: KeyType;
+    token: string | null;
+    private environment;
+    private _onForceLogout;
+    constructor(url?: string, apiKey?: string, options?: ClientOptions);
+    /** SECURITY: a service_role key bypasses RLS and grants admin over every
+     *  tenant. If it ends up in a browser bundle, anyone can extract it. Warn
+     *  loudly when a non-anon key is constructed in a browser context. */
+    private warnIfUnsafeKey;
+    /**
+     * Set the auth token manually (e.g. restoring from SecureStore in React Native).
+     * Persists to both the in-memory property and localStorage so getDynamicToken() works.
+     */
+    setToken(token: string | null): void;
+    /**
+     * Register a callback invoked on forced logout (401).
+     * Use this in React Native instead of the default window.location redirect.
+     */
+    onForceLogout(callback: () => void): void;
+    protected cleanValue(val: string | null): string | null;
+    /**
+     * Public header generator for adapters
+     */
+    getHeaders(contentType?: string): Record<string, string>;
+    getDynamicToken(): string | null;
+    /**
+     * Core HTTP request method - DRY principle
+     */
+    protected request<T = any>(endpoint: string, options?: RequestOptions): Promise<T>;
+    protected get<T = any>(endpoint: string): Promise<T>;
+    protected post<T = any>(endpoint: string, body?: unknown): Promise<T>;
+    protected put<T = any>(endpoint: string, body?: unknown): Promise<T>;
+    protected patch<T = any>(endpoint: string, body?: unknown): Promise<T>;
+    protected delete<T = any>(endpoint: string): Promise<T>;
+    private getCSRFToken;
+    setEnvironment(env: string): void;
+    getEnvironment(): string;
+    logout(): void;
+    forceLogout(): void;
+    handleIPBlocked(ip?: string): void;
+}
+
+/**
+ * Environments Module - Test/Prod environment management
+ */
+
+interface EnvironmentStatus {
+    test_exists: boolean;
+    test_status?: string;
+    test_created_at?: string;
+    test_schema_name?: string;
+    prod_schema_name: string;
+    table_count: number;
+}
+interface PromoteResult {
+    tables_promoted: number;
+    status: string;
+}
+interface EnvironmentsModule {
+    status(): Promise<EnvironmentStatus>;
+    init(): Promise<any>;
+    promote(): Promise<PromoteResult>;
+    revert(): Promise<any>;
+    setActive(env: 'test' | 'prod'): void;
+    getActive(): string;
+}
+
+/**
+ * QueryBuilder - Fluent API for data queries
+ */
+
+declare class QueryBuilder {
+    private table;
+    private url;
+    private client;
+    private queryParams;
+    private filters;
+    constructor(table: string, url: string, client: HttpClient);
+    select(columns?: string): this;
+    eq(column: string, value: any): this;
+    neq(column: string, value: any): this;
+    gt(column: string, value: any): this;
+    gte(column: string, value: any): this;
+    lt(column: string, value: any): this;
+    lte(column: string, value: any): this;
+    like(column: string, value: any): this;
+    ilike(column: string, value: any): this;
+    is(column: string, value: any): this;
+    in(column: string, values: any[]): this;
+    not(column: string, operator: string, value: any): this;
+    /** Array/jsonb/range contains (@>). Arrays become a `{a,b}` literal. */
+    contains(column: string, values: any): this;
+    /** Array/jsonb/range contained-by (<@). */
+    containedBy(column: string, values: any): this;
+    /** Array/range overlap (&&). */
+    overlaps(column: string, values: any): this;
+    /** Full-text search (@@). type: fts|plfts|phfts|wfts (tsquery flavour). */
+    textSearch(column: string, query: string, type?: 'fts' | 'plfts' | 'phfts' | 'wfts'): this;
+    private arrayLiteral;
+    /** OR group: `or=(c1,c2)`. Members are dotted `col.op.value` strings. */
+    or(filters: string): this;
+    /** AND group: `and=(c1,c2)` — e.g. a range `qty.gt.5,qty.lt.20`. */
+    and(filters: string): this;
+    /** Negated AND group: `not.and=(...)`. */
+    notAnd(filters: string): this;
+    /** Negated OR group: `not.or=(...)`. */
+    notOr(filters: string): this;
+    order(column: string, { ascending }?: {
+        ascending?: boolean | undefined;
+    }): this;
+    limit(count: number): this;
+    offset(count: number): this;
+    get(): Promise<{
+        data: null;
+        error: any;
+        status: number;
+    } | {
+        data: any;
+        error: null;
+        status: number;
+    }>;
+    insert(data: any): Promise<{
+        data: null;
+        error: any;
+        status: number;
+    } | {
+        data: any;
+        error: null;
+        status: number;
+    }>;
+    update(id: string | number, data: any): Promise<{
+        data: null;
+        error: any;
+        status: number;
+    } | {
+        data: any;
+        error: null;
+        status: number;
+    }>;
+    delete(id: string | number): Promise<{
+        data: null;
+        error: any;
+        status: number;
+    } | {
+        data: any;
+        error: null;
+        status: number;
+    } | {
+        success: boolean;
+    }>;
+    /** Insert-or-update on conflict. [onConflict] is the conflict-target column(s). */
+    upsert(data: any, onConflict: string): Promise<{
+        data: null;
+        error: any;
+        status: number;
+    } | {
+        data: any;
+        error: null;
+        status: number;
+    }>;
+    /**
+     * Count rows matching the current filters (PostgREST parity). Sends
+     * `Prefer: count=exact` and parses the total from the `Content-Range`
+     * response header. Returns `{ count, error, status }`.
+     */
+    count(): Promise<{
+        count: number;
+        error: string | null;
+        status: number;
+    }>;
+    private getHeaders;
+    private handleResponse;
+}
+
+/**
+ * Auth Module - Authentication operations
+ */
+
+interface MFASetupResponse {
+    secret: string;
+    qr_code_url: string;
+    recovery_codes: string[];
+}
+interface AuthModule {
+    login(email: string, password: string): Promise<any>;
+    logout(): Promise<void>;
+    verifyMFA(mfaToken: string, code: string): Promise<any>;
+    verifyMFAWithRecoveryCode(mfaToken: string, recoveryCode: string): Promise<any>;
+    setupMFA(): Promise<MFASetupResponse>;
+    enableMFA(secret: string, code: string, recoveryCodes?: string[]): Promise<any>;
+    disableMFA(code: string): Promise<any>;
+    getProfile(): Promise<any>;
+    register(email: string, password: string): Promise<any>;
+    forgotPassword(email: string): Promise<any>;
+    resetPassword(token: string, newPassword: string): Promise<any>;
+    validateResetToken(token: string): Promise<any>;
+    verifyEmail(token: string): Promise<any>;
+    requestEmailVerification(): Promise<any>;
+    signInAnonymous(): Promise<any>;
+    requestOtp(email: string, createUser?: boolean): Promise<any>;
+    verifyOtp(type: 'email_otp' | 'magic_link', email: string, token: string): Promise<any>;
+    upgradeAnonymous(email: string, password: string): Promise<any>;
+    getAuthProviders(): Promise<any>;
+    getAuthProvider(provider: string): Promise<any>;
+    configureAuthProvider(provider: string, clientID: string, clientSecret: string, enabled: boolean): Promise<any>;
+}
+
+/**
+ * Users Module - User management operations
+ */
+
+interface UsersModule {
+    list(limit?: number, offset?: number): Promise<any>;
+    update(id: string, updates: {
+        email?: string;
+        role?: string;
+        email_verified?: boolean;
+    }): Promise<any>;
+    delete(id: string): Promise<any>;
+}
+
+/**
+ * Database Module - Schema, table, and column operations
+ */
+
+interface DatabaseModule {
+    getSchemas(options?: {
+        search?: string;
+        limit?: number;
+        offset?: number;
+    }): Promise<any>;
+    getSchema(name: string): Promise<any>;
+    saveSchemas(data: {
+        table_name: string;
+        definition: any;
+    }): Promise<any>;
+    createTable(tableName: string, definition: Record<string, string | {
+        type: string;
+        nullable?: boolean;
+        unique?: boolean;
+        default?: string;
+    }>): Promise<any>;
+    dropTable(tableName: string): Promise<any>;
+    renameTable(tableName: string, newName: string): Promise<any>;
+    addColumn(tableName: string, column: {
+        name: string;
+        type: string;
+        nullable?: boolean;
+        default_value?: string;
+    }): Promise<any>;
+    dropColumn(tableName: string, columnName: string): Promise<any>;
+    modifyColumn(tableName: string, columnName: string, changes: {
+        type: string;
+        nullable?: boolean;
+    }): Promise<any>;
+    renameColumn(tableName: string, columnName: string, newName: string): Promise<any>;
+    setColumnDefault(tableName: string, columnName: string, defaultValue: string | null): Promise<any>;
+    addForeignKey(tableName: string, fk: {
+        column: string;
+        ref_table: string;
+        ref_column: string;
+        on_delete?: string;
+        on_update?: string;
+    }): Promise<any>;
+    listForeignKeys(tableName: string): Promise<any>;
+    dropForeignKey(tableName: string, constraintName: string): Promise<any>;
+    addUniqueConstraint(tableName: string, columnName: string): Promise<any>;
+    dropConstraint(tableName: string, constraintName: string): Promise<any>;
+    raw(query: string): Promise<any>;
+    queryData(tableName: string, options: {
+        page?: number;
+        limit?: number;
+        filters?: any[];
+    }): Promise<any>;
+    downloadExport(tableName: string, format: 'sql' | 'csv' | 'backup', filters?: any[]): Promise<any>;
+}
+
+/**
+ * Storage Module - File & bucket operations (MinIO-backed)
+ *
+ * Files:   upload, list, get (metadata + presigned URL), delete
+ * Buckets: create, list, get, delete, listFiles
+ */
+
+interface StorageFile {
+    id: string;
+    bucket_id: string;
+    name: string;
+    mime_type: string;
+    size: number;
+    created_at: string;
+}
+interface StorageFileWithUrl {
+    metadata: StorageFile;
+    url: string;
+}
+interface StorageBucket {
+    id: string;
+    name: string;
+    is_public: boolean;
+    created_at: string;
+}
+interface StorageModule {
+    /** Upload a file. Optionally target a specific bucket by ID. */
+    upload(file: File, bucketId?: string): Promise<StorageFile>;
+    /** List all files across buckets. */
+    listFiles(): Promise<StorageFile[]>;
+    /** Get file metadata + a presigned download URL. expiresIn (seconds) controls
+     *  the URL lifetime (default 15m, server cap 7d). */
+    getFile(fileId: string, expiresIn?: number): Promise<StorageFileWithUrl>;
+    /** Create a time-limited signed download URL (Supabase createSignedUrl parity). */
+    createSignedUrl(fileId: string, expiresIn?: number): Promise<{
+        signedUrl: string;
+    }>;
+    /** Delete a file by ID. */
+    deleteFile(fileId: string): Promise<void>;
+    /** Create a new bucket. */
+    createBucket(name: string, isPublic?: boolean): Promise<StorageBucket>;
+    /** Update mutable bucket fields (is_public). */
+    updateBucket(bucketId: string, opts: {
+        isPublic?: boolean;
+    }): Promise<StorageBucket>;
+    /** List all buckets. */
+    listBuckets(): Promise<StorageBucket[]>;
+    /** Get bucket info by ID. */
+    getBucket(bucketId: string): Promise<StorageBucket>;
+    /** Delete an empty bucket. */
+    deleteBucket(bucketId: string): Promise<void>;
+    /** List files inside a specific bucket. */
+    listBucketFiles(bucketId: string): Promise<StorageFile[]>;
+    /** Download a file's bytes via the backend download route (streams + enforces
+     *  the bucket's public/RLS rules; the Bearer is sent so private files work).
+     *  Returns a Blob. */
+    download(fileId: string): Promise<Blob>;
+    /** @deprecated Use upload(file, bucketId?) instead. */
+    upload(table: string, file: File): Promise<any>;
+}
+
+/**
+ * Backups Module - Database backup operations
+ */
+
+interface BackupsModule {
+    create(options?: {
+        name?: string;
+        tables?: string[];
+    }): Promise<any>;
+    list(): Promise<any>;
+    get(backupId: string): Promise<any>;
+    restore(backupId: string): Promise<any>;
+    delete(backupId: string): Promise<any>;
+    getDownloadUrl(backupId: string): string;
+    listTables(): Promise<any>;
+    importFile(formData: FormData): Promise<any>;
+}
+
+/**
+ * Migrations Module - Database migration operations
+ */
+
+interface MigrationsModule {
+    create(input: {
+        name: string;
+        description?: string;
+        up_sql: string;
+        down_sql?: string;
+    }): Promise<any>;
+    list(): Promise<any>;
+    get(id: string): Promise<any>;
+    apply(id: string): Promise<any>;
+    rollback(id: string): Promise<any>;
+    delete(id: string): Promise<any>;
+    generate(tableName: string, changes: any[]): Promise<any>;
+}
+
+/**
+ * Functions Module - Edge function operations
+ */
+
+interface FunctionsModule {
+    invoke(id: string, data?: any): Promise<any>;
+    get(id: string): Promise<any>;
+    list(): Promise<any>;
+    create(name: string, code: string, options?: {
+        runtime?: 'wazero' | 'deno';
+        timeout_ms?: number;
+    }): Promise<any>;
+    delete(id: string): Promise<any>;
+    update(id: string, code: string, options?: {
+        runtime?: 'wazero' | 'deno';
+        timeout_ms?: number;
+    }): Promise<any>;
+    executeCode(code: string, options?: {
+        data?: any;
+        runtime?: 'wazero' | 'deno';
+        timeout_ms?: number;
+    }): Promise<any>;
+    listHooks(): Promise<any>;
+    createHook(data: {
+        event_type: string;
+        function_id: string;
+        table_name?: string;
+        config?: any;
+    }): Promise<any>;
+    deleteHook(id: string): Promise<any>;
+}
+
+/**
+ * Jobs Module - Scheduled jobs (CRON) operations
+ */
+
+interface JobInput {
+    name: string;
+    schedule: string;
+    function_id: string;
+    description?: string;
+    payload?: Record<string, any>;
+    timezone?: string;
+}
+interface JobUpdateInput {
+    name?: string;
+    schedule?: string;
+    function_id?: string;
+    description?: string;
+    payload?: Record<string, any>;
+    timezone?: string;
+    enabled?: boolean;
+}
+interface JobsModule {
+    create(input: JobInput): Promise<any>;
+    list(): Promise<any>;
+    get(id: string): Promise<any>;
+    update(id: string, input: JobUpdateInput): Promise<any>;
+    delete(id: string): Promise<any>;
+    toggle(id: string, enabled: boolean): Promise<any>;
+    runNow(id: string): Promise<any>;
+    getExecutions(id: string, limit?: number): Promise<any>;
+}
+
+/**
+ * Environment Variables Module
+ */
+
+interface EnvVarsModule {
+    create(input: {
+        key: string;
+        value: string;
+        is_secret?: boolean;
+    }): Promise<any>;
+    list(): Promise<any>;
+    get(id: string): Promise<any>;
+    update(id: string, value: string): Promise<any>;
+    delete(id: string): Promise<any>;
+}
+
+/**
+ * Email Module - Email service operations
+ */
+
+interface EmailConfig {
+    provider: string;
+    smtp_host?: string;
+    smtp_port?: number;
+    smtp_user?: string;
+    smtp_password?: string;
+    sendgrid_api_key?: string;
+    resend_api_key?: string;
+    from_email: string;
+    from_name?: string;
+}
+interface EmailTemplate {
+    name: string;
+    subject: string;
+    text_body?: string;
+    html_body?: string;
+}
+interface SendEmailInput {
+    to: string[];
+    subject: string;
+    text_body?: string;
+    html_body?: string;
+    template_id?: string;
+    template_data?: Record<string, any>;
+}
+interface EmailModule {
+    send(input: SendEmailInput): Promise<any>;
+    getConfig(): Promise<any>;
+    saveConfig(config: EmailConfig): Promise<any>;
+    createTemplate(template: EmailTemplate): Promise<any>;
+    listTemplates(): Promise<any>;
+    getTemplate(id: string): Promise<any>;
+    updateTemplate(id: string, template: Partial<EmailTemplate>): Promise<any>;
+    deleteTemplate(id: string): Promise<any>;
+    getLogs(options?: {
+        limit?: number;
+        offset?: number;
+    }): Promise<any>;
+}
+
+/**
+ * Search Module - Full-text search operations
+ */
+
+interface SearchOptions {
+    tables?: string[];
+    columns?: string[];
+    limit?: number;
+    offset?: number;
+}
+interface SearchModule {
+    search(query: string, options?: SearchOptions): Promise<any>;
+    createIndex(table: string, columns: string[]): Promise<any>;
+}
+
+/**
+ * GraphQL Module
+ */
+
+interface GraphQLModule {
+    query(query: string, variables?: Record<string, any>): Promise<any>;
+    getSchema(): Promise<any>;
+    getPlaygroundUrl(): string;
+}
+
+/**
+ * Metrics Module - Monitoring and metrics operations
+ */
+
+interface RequestLogsOptions {
+    limit?: number;
+    offset?: number;
+    method?: string;
+    status?: string;
+    path?: string;
+}
+interface ApplicationLogsOptions {
+    limit?: number;
+    offset?: number;
+    level?: string;
+    source?: string;
+    search?: string;
+}
+interface TimeseriesOptions {
+    interval?: string;
+    start?: string;
+    end?: string;
+}
+interface MetricsModule {
+    getDashboardStats(): Promise<any>;
+    getRequestLogs(options?: RequestLogsOptions): Promise<any>;
+    getApplicationLogs(options?: ApplicationLogsOptions): Promise<any>;
+    getTimeseries(metric: string, options?: TimeseriesOptions): Promise<any>;
+}
+
+/**
+ * Audit Module - Audit log operations
+ */
+
+interface AuditLogsOptions {
+    limit?: number;
+    offset?: number;
+    action?: string;
+    user_id?: string;
+    method?: string;
+    path?: string;
+    status_code?: number;
+    start_date?: string;
+    end_date?: string;
+}
+interface AuditModule {
+    list(options?: AuditLogsOptions): Promise<any>;
+    getActions(): Promise<any>;
+    exportLogs(format: 'csv' | 'json', options?: AuditLogsOptions): Promise<any>;
+    purgePreview(olderThanDays: number): Promise<any>;
+    purge(olderThanDays: number): Promise<any>;
+}
+
+/**
+ * Webhooks Module
+ */
+
+interface WebhookInput {
+    url: string;
+    event_types: string[];
+}
+interface WebhookUpdateInput {
+    url: string;
+    event_types: string[];
+    is_active: boolean;
+}
+interface WebhooksModule {
+    list(): Promise<any>;
+    get(id: string): Promise<any>;
+    create(input: WebhookInput): Promise<any>;
+    update(id: string, input: WebhookUpdateInput): Promise<any>;
+    delete(id: string): Promise<any>;
+    test(id: string): Promise<any>;
+}
+
+/**
+ * Log Drains Module
+ */
+
+interface LogDrainInput {
+    name: string;
+    type: string;
+    url: string;
+    token?: string;
+    headers?: Record<string, string>;
+    filters?: {
+        levels?: string[];
+        sources?: string[];
+    };
+}
+interface LogDrainUpdateInput {
+    name?: string;
+    url?: string;
+    token?: string;
+    headers?: Record<string, string>;
+    filters?: {
+        levels?: string[];
+        sources?: string[];
+    };
+    enabled?: boolean;
+}
+interface LogDrainsModule {
+    create(input: LogDrainInput): Promise<any>;
+    list(): Promise<any>;
+    get(id: string): Promise<any>;
+    update(id: string, input: LogDrainUpdateInput): Promise<any>;
+    delete(id: string): Promise<any>;
+    toggle(id: string, enabled: boolean): Promise<any>;
+    test(id: string): Promise<any>;
+}
+
+/**
+ * Branches Module - Database branches operations
+ */
+
+interface BranchesModule {
+    create(input: {
+        name: string;
+        source_branch?: string;
+    }): Promise<any>;
+    list(): Promise<any>;
+    get(id: string): Promise<any>;
+    delete(id: string): Promise<any>;
+    merge(id: string, targetBranchId: string): Promise<any>;
+    reset(id: string): Promise<any>;
+}
+
+/**
+ * Realtime Module - WebSocket subscriptions
+ */
+
+interface Subscription {
+    unsubscribe: () => void;
+}
+interface RealtimeModule {
+    subscribe<T = any>(table: string, action: RealtimeAction, callback: RealtimeCallback<T>): Promise<Subscription>;
+}
+
+/**
+ * API Keys Module
+ */
+
+interface ApiKeysModule {
+    create(name: string, permissions?: string[], expiresAt?: string): Promise<any>;
+    list(): Promise<any>;
+    revoke(keyId: string): Promise<any>;
+    delete(keyId: string): Promise<any>;
+    getInstanceToken(): Promise<any>;
+    regenerateInstanceToken(): Promise<any>;
+}
+
+/**
+ * CORS Origins Module
+ */
+
+interface CorsOriginsModule {
+    list(): Promise<any>;
+    create(origin: string, description?: string): Promise<any>;
+    delete(id: string): Promise<any>;
+}
+
+/**
+ * Policies Module - Row-Level Security policy management
+ */
+
+interface Policy {
+    id: string;
+    table_name: string;
+    action: 'select' | 'insert' | 'update' | 'delete';
+    role: string;
+    condition: string;
+    created_at?: string;
+}
+interface CreatePolicyInput {
+    table_name: string;
+    action: 'select' | 'insert' | 'update' | 'delete';
+    role: string;
+    condition: string;
+}
+interface PoliciesModule {
+    create(input: CreatePolicyInput): Promise<Policy>;
+    list(): Promise<Policy[]>;
+    delete(id: string): Promise<any>;
+}
+
+/**
+ * IP Whitelist Module - IP-based access control
+ */
+
+interface IPWhitelistEntry {
+    id: string;
+    ip_address: string;
+    description: string;
+    created_at?: string;
+}
+interface IPWhitelistModule {
+    list(): Promise<IPWhitelistEntry[]>;
+    create(ipAddress: string, description?: string): Promise<IPWhitelistEntry>;
+    delete(id: string): Promise<any>;
+}
+
+/**
+ * Cache Management Module
+ */
+
+type CacheStrategy = 'no_cache' | 'ttl_only' | 'cdc_invalidation' | 'write_through';
+interface CacheStatus {
+    connected: boolean;
+    backend: string;
+    version: string;
+    ping_latency_ms: number;
+    circuit_state: string;
+    cdc_lag_seconds: number;
+}
+interface CacheStats {
+    memory_used: string;
+    memory_used_bytes: number;
+    db_size: number;
+    uptime_seconds: number;
+    ops_per_sec: number;
+    namespaces_total: number;
+}
+interface CachePolicy {
+    namespace: string;
+    strategy: CacheStrategy;
+    ttl_seconds: number;
+    use_versioning: boolean;
+    is_default: boolean;
+}
+interface CacheKey {
+    key: string;
+    ttl_seconds: number;
+}
+interface CacheKeysResponse {
+    keys: CacheKey[];
+    next_cursor: number;
+    has_more: boolean;
+}
+interface CacheKeyInspect {
+    key: string;
+    exists: boolean;
+    ttl_seconds: number;
+    size_bytes: number;
+    value_preview: string;
+    value_truncated: boolean;
+}
+interface CacheModule {
+    getStatus(): Promise<CacheStatus>;
+    getStats(): Promise<CacheStats>;
+    listPolicies(): Promise<{
+        policies: CachePolicy[];
+    }>;
+    updatePolicy(namespace: string, body: {
+        strategy: CacheStrategy;
+        ttl_seconds: number;
+        use_versioning: boolean;
+    }): Promise<any>;
+    removePolicy(namespace: string): Promise<any>;
+    invalidateNamespace(namespace: string): Promise<any>;
+    invalidateAll(): Promise<any>;
+    listKeys(prefix: string, cursor?: number, count?: number): Promise<CacheKeysResponse>;
+    inspectKey(key: string): Promise<CacheKeyInspect>;
+}
+
+/**
+ * Main BaaS Client - Composes all feature modules
+ *
+ * Usage:
+ * ```ts
+ * const client = new BaasClient();
+ *
+ * // Authentication
+ * await client.auth.login('user@example.com', 'password');
+ *
+ * // Database operations
+ * const schemas = await client.database.getSchemas();
+ *
+ * // Query builder (fluent API)
+ * const users = await client.from('users').select('*').limit(10).get();
+ * ```
+ */
+declare class BaasClient extends HttpClient {
+    readonly auth: AuthModule;
+    readonly users: UsersModule;
+    readonly database: DatabaseModule;
+    readonly storage: StorageModule;
+    readonly backups: BackupsModule;
+    readonly migrations: MigrationsModule;
+    readonly functions: FunctionsModule;
+    readonly jobs: JobsModule;
+    readonly envVars: EnvVarsModule;
+    readonly email: EmailModule;
+    readonly searchService: SearchModule;
+    readonly graphqlService: GraphQLModule;
+    readonly metrics: MetricsModule;
+    readonly audit: AuditModule;
+    readonly webhooks: WebhooksModule;
+    readonly logDrains: LogDrainsModule;
+    readonly branches: BranchesModule;
+    readonly realtime: RealtimeModule;
+    readonly apiKeys: ApiKeysModule;
+    readonly environments: EnvironmentsModule;
+    readonly corsOrigins: CorsOriginsModule;
+    readonly policies: PoliciesModule;
+    readonly ipWhitelist: IPWhitelistModule;
+    readonly cache: CacheModule;
+    constructor(url?: string, apiKey?: string, options?: ClientOptions);
+    /**
+     * Create a query builder for fluent data queries
+     */
+    from(table: string): QueryBuilder;
+    /**
+     * Invoke a PL/pgSQL function (PostgREST `.rpc()` parity). Runs under the
+     * caller's RLS context; args bind by name and are $N-safe. Pass [params] for
+     * POST (named args in the body) or set `opts.get = true` for the GET variant.
+     */
+    rpc(fn: string, params?: Record<string, any>, opts?: {
+        get?: boolean;
+    }): Promise<any>;
+    login(email: string, password: string): Promise<any>;
+    verifyMFA(mfaToken: string, code: string): Promise<any>;
+    getProfile(): Promise<any>;
+    register(email: string, password: string): Promise<any>;
+    forgotPassword(email: string): Promise<any>;
+    resetPassword(token: string, newPassword: string): Promise<any>;
+    validateResetToken(token: string): Promise<any>;
+    verifyEmail(token: string): Promise<any>;
+    requestEmailVerification(): Promise<any>;
+    getAuthProviders(): Promise<any>;
+    getAuthProvider(provider: string): Promise<any>;
+    configureAuthProvider(provider: string, clientID: string, clientSecret: string, enabled: boolean): Promise<any>;
+    listUsers(limit?: number, offset?: number): Promise<any>;
+    updateUser(id: string, updates: any): Promise<any>;
+    deleteUser(id: string): Promise<any>;
+    raw(query: string): Promise<any>;
+    getSchemas(options?: any): Promise<any>;
+    getSchema(name: string): Promise<any>;
+    createTable(tableName: string, definition: any): Promise<any>;
+    dropTable(tableName: string): Promise<any>;
+    renameTable(tableName: string, newName: string): Promise<any>;
+    addColumn(tableName: string, column: any): Promise<any>;
+    dropColumn(tableName: string, columnName: string): Promise<any>;
+    modifyColumn(tableName: string, columnName: string, changes: any): Promise<any>;
+    renameColumn(tableName: string, columnName: string, newName: string): Promise<any>;
+    setColumnDefault(tableName: string, columnName: string, defaultValue: string | null): Promise<any>;
+    addForeignKey(tableName: string, fk: any): Promise<any>;
+    listForeignKeys(tableName: string): Promise<any>;
+    dropForeignKey(tableName: string, constraintName: string): Promise<any>;
+    addUniqueConstraint(tableName: string, columnName: string): Promise<any>;
+    dropConstraint(tableName: string, constraintName: string): Promise<any>;
+    queryData(tableName: string, options: any): Promise<any>;
+    downloadExport(tableName: string, format: 'sql' | 'csv' | 'backup', filters?: any[]): Promise<any>;
+    upload(file: File, bucketId?: string): Promise<StorageFile>;
+    listStorageFiles(): Promise<StorageFile[]>;
+    getStorageFile(fileId: string): Promise<StorageFileWithUrl>;
+    deleteStorageFile(fileId: string): Promise<void>;
+    createStorageBucket(name: string, isPublic?: boolean): Promise<StorageBucket>;
+    listStorageBuckets(): Promise<StorageBucket[]>;
+    getStorageBucket(bucketId: string): Promise<StorageBucket>;
+    deleteStorageBucket(bucketId: string): Promise<void>;
+    listStorageBucketFiles(bucketId: string): Promise<StorageFile[]>;
+    invokeFunction(id: string, data?: any): Promise<any>;
+    createApiKey(name: string, permissions?: string[], expiresAt?: string): Promise<any>;
+    listApiKeys(): Promise<any>;
+    revokeApiKey(keyId: string): Promise<any>;
+    deleteApiKey(keyId: string): Promise<any>;
+    getInstanceToken(): Promise<any>;
+    regenerateInstanceToken(): Promise<any>;
+    createBackup(options?: any): Promise<any>;
+    listBackups(): Promise<any>;
+    getBackup(backupId: string): Promise<any>;
+    restoreBackup(backupId: string): Promise<any>;
+    deleteBackup(backupId: string): Promise<any>;
+    getBackupDownloadUrl(backupId: string): string;
+    listBackupTables(): Promise<any>;
+    importFile(formData: FormData): Promise<any>;
+    search(query: string, options?: any): Promise<any>;
+    createSearchIndex(table: string, columns: string[]): Promise<any>;
+    graphql(query: string, variables?: Record<string, any>): Promise<any>;
+    getGraphQLPlaygroundUrl(): string;
+    createMigration(input: any): Promise<any>;
+    listMigrations(): Promise<any>;
+    getMigration(id: string): Promise<any>;
+    applyMigration(id: string): Promise<any>;
+    rollbackMigration(id: string): Promise<any>;
+    deleteMigration(id: string): Promise<any>;
+    generateMigration(tableName: string, changes: any[]): Promise<any>;
+    sendEmail(input: any): Promise<any>;
+    getEmailConfig(): Promise<any>;
+    saveEmailConfig(config: any): Promise<any>;
+    createEmailTemplate(template: any): Promise<any>;
+    listEmailTemplates(): Promise<any>;
+    getEmailTemplate(id: string): Promise<any>;
+    updateEmailTemplate(id: string, template: any): Promise<any>;
+    deleteEmailTemplate(id: string): Promise<any>;
+    getEmailLogs(options?: any): Promise<any>;
+    getDashboardStats(): Promise<any>;
+    getRequestLogs(options?: any): Promise<any>;
+    getApplicationLogs(options?: any): Promise<any>;
+    getMetricTimeseries(metric: string, options?: any): Promise<any>;
+    createJob(input: any): Promise<any>;
+    listJobs(): Promise<any>;
+    getJob(id: string): Promise<any>;
+    updateJob(id: string, input: any): Promise<any>;
+    deleteJob(id: string): Promise<any>;
+    toggleJob(id: string, enabled: boolean): Promise<any>;
+    runJobNow(id: string): Promise<any>;
+    getJobExecutions(id: string, limit?: number): Promise<any>;
+    createEnvVar(input: any): Promise<any>;
+    listEnvVars(): Promise<any>;
+    getEnvVar(id: string): Promise<any>;
+    updateEnvVar(id: string, value: string): Promise<any>;
+    deleteEnvVar(id: string): Promise<any>;
+    createBranch(input: any): Promise<any>;
+    listBranches(): Promise<any>;
+    getBranch(id: string): Promise<any>;
+    deleteBranch(id: string): Promise<any>;
+    mergeBranch(id: string, targetBranchId: string): Promise<any>;
+    resetBranch(id: string): Promise<any>;
+    createLogDrain(input: any): Promise<any>;
+    listLogDrains(): Promise<any>;
+    getLogDrain(id: string): Promise<any>;
+    updateLogDrain(id: string, input: any): Promise<any>;
+    deleteLogDrain(id: string): Promise<any>;
+    toggleLogDrain(id: string, enabled: boolean): Promise<any>;
+    testLogDrain(id: string): Promise<any>;
+    listWebhooks(): Promise<any>;
+    getWebhook(id: string): Promise<any>;
+    createWebhook(input: any): Promise<any>;
+    updateWebhook(id: string, input: any): Promise<any>;
+    deleteWebhook(id: string): Promise<any>;
+    testWebhook(id: string): Promise<any>;
+    listAuditLogs(options?: any): Promise<any>;
+    getAuditActions(): Promise<any>;
+    exportAuditLogs(format: 'csv' | 'json', options?: any): Promise<any>;
+    previewPurgeAuditLogs(olderThanDays: number): Promise<any>;
+    purgeAuditLogs(olderThanDays: number): Promise<any>;
+    subscribe<T = any>(table: string, action: RealtimeAction, callback: RealtimeCallback<T>): Promise<Subscription>;
+    getEnvironmentStatus(): Promise<EnvironmentStatus>;
+    initTestEnvironment(): Promise<any>;
+    promoteTestToProd(): Promise<PromoteResult>;
+    revertTestEnvironment(): Promise<any>;
+    listCorsOrigins(): Promise<any>;
+    addCorsOrigin(origin: string, description?: string): Promise<any>;
+    deleteCorsOrigin(id: string): Promise<any>;
+    listPolicies(): Promise<Policy[]>;
+    createPolicy(input: any): Promise<Policy>;
+    deletePolicy(id: string): Promise<any>;
+    listIPWhitelist(): Promise<IPWhitelistEntry[]>;
+    addIPWhitelistEntry(ipAddress: string, description?: string): Promise<IPWhitelistEntry>;
+    deleteIPWhitelistEntry(id: string): Promise<any>;
+}
+
+export { type ApiKeysModule, type ApiResponse, type ApplicationLogsOptions, type AuditLogsOptions, type AuditModule, type AuthModule, BaasClient, type BackupsModule, type BranchesModule, type CacheKey, type CacheKeyInspect, type CacheKeysResponse, type CacheModule, type CachePolicy, type CacheStats, type CacheStatus, type CacheStrategy, type CorsOriginsModule, type CreatePolicyInput, type DatabaseModule, type EmailConfig, type EmailModule, type EmailTemplate, type EnvVarsModule, type EnvironmentsModule, type FunctionsModule, type GraphQLModule, HttpClient, type HttpMethod, type IPWhitelistEntry, type IPWhitelistModule, type JobInput, type JobUpdateInput, type JobsModule, type LogDrainInput, type LogDrainUpdateInput, type LogDrainsModule, type MetricsModule, type MigrationsModule, type PaginationOptions, type PoliciesModule, type Policy, QueryBuilder, type QueryFilter, type RealtimeModule, type RequestLogsOptions, type RequestOptions, type SearchModule, type SearchOptions, type SendEmailInput, type StorageBucket, type StorageFile, type StorageFileWithUrl, type StorageModule, type Subscription, type TimeseriesOptions, type UsersModule, type WebhookInput, type WebhookUpdateInput, type WebhooksModule };