@hasna/contacts 0.6.36 → 0.7.0

package/dist/mcp/storage-tools.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"storage-tools.d.ts","sourceRoot":"","sources":["../../src/mcp/storage-tools.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AA0CzE,wBAAgB,4BAA4B,CAAC,MAAM,EAAE,SAAS,GAAG,IAAI,CA4CpE"}
+{"version":3,"file":"storage-tools.d.ts","sourceRoot":"","sources":["../../src/mcp/storage-tools.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AA8BzE,wBAAgB,4BAA4B,CAAC,MAAM,EAAE,SAAS,GAAG,IAAI,CAapE"}

package/dist/sdk/index.d.ts

@@ -1,16 +1,18 @@
+/** @hasna/contacts SDK — explicit authenticated HTTPS `/v1` client. */
+import { ContactsV1Client as GeneratedContactsV1Client, ApiError, type ContactsV1ClientOptions as GeneratedContactsV1ClientOptions } from "./v1.generated.js";
+export interface ContactsV1ClientOptions extends Omit<GeneratedContactsV1ClientOptions, "baseUrl" | "apiKey"> {
+    /** Explicit HTTPS service authority. No default is composed. */
+    baseUrl: string;
+    /** API key sent to the configured authority. Required and never logged. */
+    apiKey: string;
+}
 /**
- * @hasna/contacts SDK — typed `/v1` cloud client.
- *
- * Generated from the serve OpenAPI document (src/server/openapi.ts).
- * Regenerate with `bun run scripts/generate-sdk.ts`.
- *
- *   import { ContactsV1Client } from "@hasna/contacts/sdk";
- *   const client = new ContactsV1Client({
- *     baseUrl: process.env.CONTACTS_API_URL!,   // self_hosted service URL
- *     apiKey: process.env.CONTACTS_API_KEY!,     // contracts-issued key
- *   });
- *   const { contacts } = await client.listContacts({ limit: 20 });
+ * Validated wrapper around the generated API surface. Redirects are never
+ * followed, so credentials cannot cross to another authority.
  */
-export { ContactsV1Client, ApiError as ContactsV1ApiError } from "./v1.generated.js";
-export type { ContactsV1ClientOptions, Contact as ContactsV1Contact, Company as ContactsV1Company, Tag as ContactsV1Tag, CreateContactInput as ContactsV1CreateContactInput, UpdateContactInput as ContactsV1UpdateContactInput, CreateCompanyInput as ContactsV1CreateCompanyInput, UpdateCompanyInput as ContactsV1UpdateCompanyInput, CreateTagInput as ContactsV1CreateTagInput, UpdateTagInput as ContactsV1UpdateTagInput, ProjectIdsInput as ContactsV1ProjectIdsInput, ContactProjectMembershipSnapshot as ContactsV1ProjectMembershipSnapshot, ContactProjectMembershipMutationInput as ContactsV1ProjectMembershipMutationInput, ContactProjectMembershipMutationResult as ContactsV1ProjectMembershipMutationResult, ContactProjectMembershipListResult as ContactsV1ProjectMembershipListResult, } from "./v1.generated.js";
+export declare class ContactsV1Client extends GeneratedContactsV1Client {
+    constructor(options: ContactsV1ClientOptions);
+}
+export { ApiError as ContactsV1ApiError };
+export type { Contact as ContactsV1Contact, Company as ContactsV1Company, Tag as ContactsV1Tag, CreateContactInput as ContactsV1CreateContactInput, UpdateContactInput as ContactsV1UpdateContactInput, CreateCompanyInput as ContactsV1CreateCompanyInput, UpdateCompanyInput as ContactsV1UpdateCompanyInput, CreateTagInput as ContactsV1CreateTagInput, UpdateTagInput as ContactsV1UpdateTagInput, ProjectIdsInput as ContactsV1ProjectIdsInput, ContactProjectMembershipSnapshot as ContactsV1ProjectMembershipSnapshot, ContactProjectMembershipMutationInput as ContactsV1ProjectMembershipMutationInput, ContactProjectMembershipMutationResult as ContactsV1ProjectMembershipMutationResult, ContactProjectMembershipListResult as ContactsV1ProjectMembershipListResult, } from "./v1.generated.js";
 //# sourceMappingURL=index.d.ts.map

package/dist/sdk/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/sdk/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AACH,OAAO,EAAE,gBAAgB,EAAE,QAAQ,IAAI,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AACrF,YAAY,EACV,uBAAuB,EACvB,OAAO,IAAI,iBAAiB,EAC5B,OAAO,IAAI,iBAAiB,EAC5B,GAAG,IAAI,aAAa,EACpB,kBAAkB,IAAI,4BAA4B,EAClD,kBAAkB,IAAI,4BAA4B,EAClD,kBAAkB,IAAI,4BAA4B,EAClD,kBAAkB,IAAI,4BAA4B,EAClD,cAAc,IAAI,wBAAwB,EAC1C,cAAc,IAAI,wBAAwB,EAC1C,eAAe,IAAI,yBAAyB,EAC5C,gCAAgC,IAAI,mCAAmC,EACvE,qCAAqC,IAAI,wCAAwC,EACjF,sCAAsC,IAAI,yCAAyC,EACnF,kCAAkC,IAAI,qCAAqC,GAC5E,MAAM,mBAAmB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/sdk/index.ts"],"names":[],"mappings":"AAAA,uEAAuE;AACvE,OAAO,EACL,gBAAgB,IAAI,yBAAyB,EAC7C,QAAQ,EACR,KAAK,uBAAuB,IAAI,gCAAgC,EACjE,MAAM,mBAAmB,CAAC;AAE3B,MAAM,WAAW,uBACf,SAAQ,IAAI,CAAC,gCAAgC,EAAE,SAAS,GAAG,QAAQ,CAAC;IACpE,gEAAgE;IAChE,OAAO,EAAE,MAAM,CAAC;IAChB,2EAA2E;IAC3E,MAAM,EAAE,MAAM,CAAC;CAChB;AA8BD;;;GAGG;AACH,qBAAa,gBAAiB,SAAQ,yBAAyB;gBACjD,OAAO,EAAE,uBAAuB;CAS7C;AAED,OAAO,EAAE,QAAQ,IAAI,kBAAkB,EAAE,CAAC;AAC1C,YAAY,EACV,OAAO,IAAI,iBAAiB,EAC5B,OAAO,IAAI,iBAAiB,EAC5B,GAAG,IAAI,aAAa,EACpB,kBAAkB,IAAI,4BAA4B,EAClD,kBAAkB,IAAI,4BAA4B,EAClD,kBAAkB,IAAI,4BAA4B,EAClD,kBAAkB,IAAI,4BAA4B,EAClD,cAAc,IAAI,wBAAwB,EAC1C,cAAc,IAAI,wBAAwB,EAC1C,eAAe,IAAI,yBAAyB,EAC5C,gCAAgC,IAAI,mCAAmC,EACvE,qCAAqC,IAAI,wCAAwC,EACjF,sCAAsC,IAAI,yCAAyC,EACnF,kCAAkC,IAAI,qCAAqC,GAC5E,MAAM,mBAAmB,CAAC"}

package/dist/sdk/index.js

@@ -244,7 +244,50 @@ class ContactsV1Client {
     });
   }
 }
+
+// src/sdk/index.ts
+function validateBaseUrl(raw) {
+  let url;
+  try {
+    url = new URL(raw);
+  } catch {
+    throw new Error("ContactsV1Client baseUrl must be an absolute HTTPS URL.");
+  }
+  if (url.protocol !== "https:")
+    throw new Error("ContactsV1Client baseUrl must use HTTPS.");
+  if (url.username || url.password)
+    throw new Error("ContactsV1Client baseUrl must not contain credentials.");
+  if (url.search || url.hash)
+    throw new Error("ContactsV1Client baseUrl must not contain a query or fragment.");
+  const path = url.pathname.replace(/\/+$/, "");
+  if (path && path !== "/v1") {
+    throw new Error("ContactsV1Client baseUrl must be an authority root or end in /v1.");
+  }
+  url.pathname = "";
+  return url.toString().replace(/\/+$/, "");
+}
+function validateApiKey(apiKey) {
+  const key = apiKey.trim();
+  if (!key)
+    throw new Error("ContactsV1Client requires an API key.");
+  if (/[^\t\x20-\x7e]/.test(key)) {
+    throw new Error("ContactsV1Client API key contains bytes that are invalid in an HTTP header.");
+  }
+  return key;
+}
+
+class ContactsV1Client2 extends ContactsV1Client {
+  constructor(options) {
+    const fetchImpl = options.fetch ?? globalThis.fetch;
+    super({
+      ...options,
+      baseUrl: validateBaseUrl(options.baseUrl),
+      apiKey: validateApiKey(options.apiKey),
+      fetch: (input, init) => fetchImpl(input, { ...init, redirect: "manual" })
+    });
+  }
+}
 export {
-  ContactsV1Client,
+  ContactsV1Client2 as ContactsV1Client,
   ApiError as ContactsV1ApiError
 };

package/dist/server/cloud.d.ts

@@ -1,23 +1,22 @@
 /**
- * Cloud (A1 pure-remote) service wiring for `contacts-serve`.
+ * PostgreSQL service wiring for `contacts-serve`.
  *
  * This module powers the versioned `/v1` API and its API-key auth. Per Amendment
  * A1 the serve process reads and writes the shared RDS Postgres DIRECTLY through
  * the vendored @hasna/contracts storage kit — there is NO local sync/cache in
  * the service. Everything is lazy: nothing touches Postgres or crypto until the
- * first `/v1` / `/ready` request, so the local-first CLI/dashboard SQLite paths
- * keep ZERO cloud dependencies.
+ * first `/v1` / `/ready` request. Public clients never import this server-only
+ * PostgreSQL boundary.
  */
 import { ApiKeyStore, type ApiKeyVerifier } from "@hasna/contracts/auth";
-import type { PoolQueryClient } from "../generated/storage-kit/query.js";
+import { type PoolQueryClient } from "../generated/storage-kit/query.js";
 export declare const CONTACTS_APP_SLUG = "contacts";
+export declare function validatePostgresDatabaseUrl(value: string): string;
 /** Resolve the remote DATABASE_URL from the supported env vars (priority order). */
 export declare function resolveCloudDatabaseUrl(env?: NodeJS.ProcessEnv): string | undefined;
 /** Resolve the HMAC signing secret used to verify API keys. */
 export declare function resolveSigningSecret(env?: NodeJS.ProcessEnv): string | undefined;
-/** True when this process is configured to serve the cloud `/v1` API.
- * Explicit remote mode remains cloud even when its DSN is missing so readiness
- * fails closed instead of presenting the process as a healthy local server. */
+/** True when this server process has its PostgreSQL backend configured. */
 export declare function isCloudModeEnabled(env?: NodeJS.ProcessEnv): boolean;
 /** The vendored-kit Postgres pool client backing every `/v1` handler. */
 export declare function getCloudClient(): PoolQueryClient;

package/dist/server/cloud.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"cloud.d.ts","sourceRoot":"","sources":["../../src/server/cloud.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AACH,OAAO,EAAgB,WAAW,EAAE,KAAK,cAAc,EAAwB,MAAM,uBAAuB,CAAC;AAE7G,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,mCAAmC,CAAC;AAIzE,eAAO,MAAM,iBAAiB,aAAa,CAAC;AAE5C,oFAAoF;AACpF,wBAAgB,uBAAuB,CAAC,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,MAAM,GAAG,SAAS,CAOhG;AAED,+DAA+D;AAC/D,wBAAgB,oBAAoB,CAAC,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,MAAM,GAAG,SAAS,CAO7F;AAED;;+EAE+E;AAC/E,wBAAgB,kBAAkB,CAAC,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,OAAO,CAGhF;AAQD,yEAAyE;AACzE,wBAAgB,cAAc,IAAI,eAAe,CA2BhD;AAYD,wBAAgB,cAAc,IAAI,WAAW,CAI5C;AAED;;;;GAIG;AACH,wBAAgB,gBAAgB,IAAI,cAAc,CAejD;AAED;;;;;GAKG;AACH,wBAAsB,iBAAiB,IAAI,OAAO,CAAC,IAAI,CAAC,CAUvD;AAED;;;;;;;;;GASG;AACH,wBAAsB,2BAA2B,IAAI,OAAO,CAAC,IAAI,CAAC,CAYjE;AAED,iEAAiE;AACjE,wBAAsB,SAAS,IAAI,OAAO,CAAC,OAAO,CAAC,CAGlD;AAED,4BAA4B;AAC5B,wBAAsB,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC,CAOhD"}
+{"version":3,"file":"cloud.d.ts","sourceRoot":"","sources":["../../src/server/cloud.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AACH,OAAO,EAAgB,WAAW,EAAE,KAAK,cAAc,EAAwB,MAAM,uBAAuB,CAAC;AAE7G,OAAO,EAAqB,KAAK,eAAe,EAAE,MAAM,mCAAmC,CAAC;AAI5F,eAAO,MAAM,iBAAiB,aAAa,CAAC;AAU5C,wBAAgB,2BAA2B,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CASjE;AAED,oFAAoF;AACpF,wBAAgB,uBAAuB,CAAC,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,MAAM,GAAG,SAAS,CAGhG;AAED,+DAA+D;AAC/D,wBAAgB,oBAAoB,CAAC,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,MAAM,GAAG,SAAS,CAE7F;AAED,2EAA2E;AAC3E,wBAAgB,kBAAkB,CAAC,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,OAAO,CAEhF;AAQD,yEAAyE;AACzE,wBAAgB,cAAc,IAAI,eAAe,CAoBhD;AAYD,wBAAgB,cAAc,IAAI,WAAW,CAI5C;AAED;;;;GAIG;AACH,wBAAgB,gBAAgB,IAAI,cAAc,CAejD;AAED;;;;;GAKG;AACH,wBAAsB,iBAAiB,IAAI,OAAO,CAAC,IAAI,CAAC,CAUvD;AAED;;;;;;;;;GASG;AACH,wBAAsB,2BAA2B,IAAI,OAAO,CAAC,IAAI,CAAC,CAYjE;AAED,iEAAiE;AACjE,wBAAsB,SAAS,IAAI,OAAO,CAAC,OAAO,CAAC,CAGlD;AAED,4BAA4B;AAC5B,wBAAsB,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC,CAOhD"}

package/dist/server/index.d.ts

@@ -1,3 +1,4 @@
 #!/usr/bin/env bun
-export {};
+/** Canonical contacts-serve entrypoint: authenticated `/v1` over PostgreSQL. */
+import "./cloud-index.js";
 //# sourceMappingURL=index.d.ts.map

package/dist/server/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/server/index.ts"],"names":[],"mappings":""}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/server/index.ts"],"names":[],"mappings":";AACA,gFAAgF;AAChF,OAAO,kBAAkB,CAAC"}