@instantdb/admin 0.22.99-experimental.add-user-perm-rules.20792844601.1 → 0.22.99-experimental.add-user-perm-rules.20792984656.1

package/dist/commonjs/index.js

@@ -1,13 +1,4 @@
 "use strict";
-var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
-    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
-    return new (P || (P = Promise))(function (resolve, reject) {
-        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
-        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
-        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
-        step((generator = generator.apply(thisArg, _arguments || [])).next());
-    });
-};
 var __importDefault = (this && this.__importDefault) || function (mod) {
     return (mod && mod.__esModule) ? mod : { "default": mod };
 };
@@ -27,14 +18,14 @@ function configWithDefaults(config) {
     const defaultConfig = {
         apiURI: 'https://api.instantdb.com',
     };
-    const r = Object.assign(Object.assign({}, defaultConfig), config);
+    const r = { ...defaultConfig, ...config };
     return r;
 }
 function instantConfigWithDefaults(config) {
     const defaultConfig = {
         apiURI: 'https://api.instantdb.com',
     };
-    const r = Object.assign(Object.assign({}, defaultConfig), config);
+    const r = { ...defaultConfig, ...config };
     return r;
 }
 function withImpersonation(headers, opts) {
@@ -97,32 +88,32 @@ function isNextJSVersionThatCachesFetchByDefault() {
 function getDefaultFetchOpts() {
     return isNextJSVersionThatCachesFetchByDefault() ? { cache: 'no-store' } : {};
 }
-function jsonReject(rejectFn, res) {
-    return __awaiter(this, void 0, void 0, function* () {
-        const body = yield res.text();
-        try {
-            const json = JSON.parse(body);
-            return rejectFn(new core_1.InstantAPIError({ status: res.status, body: json }));
-        }
-        catch (_e) {
-            return rejectFn(new core_1.InstantAPIError({
-                status: res.status,
-                body: { type: undefined, message: body },
-            }));
-        }
-    });
+async function jsonReject(rejectFn, res) {
+    const body = await res.text();
+    try {
+        const json = JSON.parse(body);
+        return rejectFn(new core_1.InstantAPIError({ status: res.status, body: json }));
+    }
+    catch (_e) {
+        return rejectFn(new core_1.InstantAPIError({
+            status: res.status,
+            body: { type: undefined, message: body },
+        }));
+    }
 }
-function jsonFetch(input, init) {
-    return __awaiter(this, void 0, void 0, function* () {
-        const defaultFetchOpts = getDefaultFetchOpts();
-        const headers = Object.assign(Object.assign({}, ((init === null || init === void 0 ? void 0 : init.headers) || {})), { 'Instant-Admin-Version': version_ts_1.default, 'Instant-Core-Version': core_1.version });
-        const res = yield fetch(input, Object.assign(Object.assign(Object.assign({}, defaultFetchOpts), init), { headers }));
-        if (res.status === 200) {
-            const json = yield res.json();
-            return Promise.resolve(json);
-        }
-        return jsonReject((x) => Promise.reject(x), res);
-    });
+async function jsonFetch(input, init) {
+    const defaultFetchOpts = getDefaultFetchOpts();
+    const headers = {
+        ...(init?.headers || {}),
+        'Instant-Admin-Version': version_ts_1.default,
+        'Instant-Core-Version': core_1.version,
+    };
+    const res = await fetch(input, { ...defaultFetchOpts, ...init, headers });
+    if (res.status === 200) {
+        const json = await res.json();
+        return Promise.resolve(json);
+    }
+    return jsonReject((x) => Promise.reject(x), res);
 }
 /**
  *
@@ -154,8 +145,12 @@ function init(
 // Allows config with missing `useDateObjects`, but keeps `UseDates`
 // as a non-nullable in the InstantConfig type.
 config) {
-    var _a, _b, _c;
-    const configStrict = Object.assign(Object.assign({}, config), { appId: (_a = config.appId) === null || _a === void 0 ? void 0 : _a.trim(), adminToken: (_b = config.adminToken) === null || _b === void 0 ? void 0 : _b.trim(), useDateObjects: ((_c = config.useDateObjects) !== null && _c !== void 0 ? _c : false) });
+    const configStrict = {
+        ...config,
+        appId: config.appId?.trim(),
+        adminToken: config.adminToken?.trim(),
+        useDateObjects: (config.useDateObjects ?? false),
+    };
     return new InstantAdminDatabase(configStrict);
 }
 /**
@@ -179,175 +174,171 @@ function steps(inputChunks) {
     return chunks.flatMap(core_1.getOps);
 }
 class Rooms {
+    config;
     constructor(config) {
         this.config = config;
     }
-    getPresence(roomType, roomId) {
-        return __awaiter(this, void 0, void 0, function* () {
-            const res = yield jsonFetch(`${this.config.apiURI}/admin/rooms/presence?room-type=${String(roomType)}&room-id=${roomId}`, {
-                method: 'GET',
-                headers: authorizedHeaders(this.config),
-            });
-            return res.sessions || {};
+    async getPresence(roomType, roomId) {
+        const res = await jsonFetch(`${this.config.apiURI}/admin/rooms/presence?room-type=${String(roomType)}&room-id=${roomId}`, {
+            method: 'GET',
+            headers: authorizedHeaders(this.config),
         });
+        return res.sessions || {};
     }
 }
 class Auth {
+    config;
     constructor(config) {
-        /**
-         * Generates a magic code for the user with the given email.
-         * This is useful if you want to use your own email provider
-         * to send magic codes.
-         *
-         * @example
-         *   // Generate a magic code
-         *   const { code } = await db.auth.generateMagicCode({ email })
-         *   // Send the magic code to the user with your own email provider
-         *   await customEmailProvider.sendMagicCode(email, code)
-         *
-         * @see https://instantdb.com/docs/backend#custom-magic-codes
-         */
-        this.generateMagicCode = (email) => __awaiter(this, void 0, void 0, function* () {
-            return jsonFetch(`${this.config.apiURI}/admin/magic_code`, {
-                method: 'POST',
-                headers: authorizedHeaders(this.config),
-                body: JSON.stringify({ email }),
-            });
+        this.config = config;
+        this.createToken = this.createToken.bind(this);
+    }
+    /**
+     * Generates a magic code for the user with the given email.
+     * This is useful if you want to use your own email provider
+     * to send magic codes.
+     *
+     * @example
+     *   // Generate a magic code
+     *   const { code } = await db.auth.generateMagicCode({ email })
+     *   // Send the magic code to the user with your own email provider
+     *   await customEmailProvider.sendMagicCode(email, code)
+     *
+     * @see https://instantdb.com/docs/backend#custom-magic-codes
+     */
+    generateMagicCode = async (email) => {
+        return jsonFetch(`${this.config.apiURI}/admin/magic_code`, {
+            method: 'POST',
+            headers: authorizedHeaders(this.config),
+            body: JSON.stringify({ email }),
         });
-        /**
-         * Sends a magic code to the user with the given email.
-         * This uses Instant's built-in email provider.
-         *
-         * @example
-         *   // Send an email to user with magic code
-         *   await db.auth.sendMagicCode({ email })
-         *
-         * @see https://instantdb.com/docs/backend#custom-magic-codes
-         */
-        this.sendMagicCode = (email) => __awaiter(this, void 0, void 0, function* () {
-            return jsonFetch(`${this.config.apiURI}/admin/send_magic_code`, {
-                method: 'POST',
-                headers: authorizedHeaders(this.config),
-                body: JSON.stringify({ email }),
-            });
+    };
+    /**
+     * Sends a magic code to the user with the given email.
+     * This uses Instant's built-in email provider.
+     *
+     * @example
+     *   // Send an email to user with magic code
+     *   await db.auth.sendMagicCode({ email })
+     *
+     * @see https://instantdb.com/docs/backend#custom-magic-codes
+     */
+    sendMagicCode = async (email) => {
+        return jsonFetch(`${this.config.apiURI}/admin/send_magic_code`, {
+            method: 'POST',
+            headers: authorizedHeaders(this.config),
+            body: JSON.stringify({ email }),
         });
-        /**
-         * Verifies a magic code for the user with the given email.
-         *
-         * @example
-         *   const user = await db.auth.verifyMagicCode({ email, code })
-         *   console.log("Verified user:", user)
-         *
-         * @see https://instantdb.com/docs/backend#custom-magic-codes
-         */
-        this.verifyMagicCode = (email, code) => __awaiter(this, void 0, void 0, function* () {
-            const { user } = yield jsonFetch(`${this.config.apiURI}/admin/verify_magic_code`, {
-                method: 'POST',
-                headers: authorizedHeaders(this.config),
-                body: JSON.stringify({ email, code }),
-            });
-            return user;
+    };
+    /**
+     * Verifies a magic code for the user with the given email.
+     *
+     * @example
+     *   const user = await db.auth.verifyMagicCode({ email, code })
+     *   console.log("Verified user:", user)
+     *
+     * @see https://instantdb.com/docs/backend#custom-magic-codes
+     */
+    verifyMagicCode = async (email, code) => {
+        const { user } = await jsonFetch(`${this.config.apiURI}/admin/verify_magic_code`, {
+            method: 'POST',
+            headers: authorizedHeaders(this.config),
+            body: JSON.stringify({ email, code }),
         });
-        /**
-         * Verifies a given token and returns the associated user.
-         *
-         * This is often useful for writing custom endpoints, where you need
-         * to authenticate users.
-         *
-         * @example
-         *   app.post('/custom_endpoint', async (req, res) => {
-         *     const user = await db.auth.verifyToken(req.headers['token'])
-         *     if (!user) {
-         *       return res.status(401).send('Uh oh, you are not authenticated')
-         *     }
-         *     // ...
-         *   })
-         * @see https://instantdb.com/docs/backend#custom-endpoints
-         */
-        this.verifyToken = (token) => __awaiter(this, void 0, void 0, function* () {
-            const res = yield jsonFetch(`${this.config.apiURI}/runtime/auth/verify_refresh_token`, {
-                method: 'POST',
-                headers: { 'content-type': 'application/json' },
-                body: JSON.stringify({
-                    'app-id': this.config.appId,
-                    'refresh-token': token,
-                }),
-            });
-            return res.user;
+        return user;
+    };
+    async createToken(input) {
+        const body = typeof input === 'string' ? { email: input } : input;
+        const ret = await jsonFetch(`${this.config.apiURI}/admin/refresh_tokens`, {
+            method: 'POST',
+            headers: authorizedHeaders(this.config),
+            body: JSON.stringify(body),
         });
-        /**
-         * Retrieves an app user by id, email, or refresh token.
-         *
-         * @example
-         *   try {
-         *     const user = await db.auth.getUser({ email })
-         *     console.log("Found user:", user)
-         *   } catch (err) {
-         *     console.error("Failed to retrieve user:", err.message);
-         *   }
-         *
-         * @see https://instantdb.com/docs/backend#retrieve-a-user
-         */
-        this.getUser = (params) => __awaiter(this, void 0, void 0, function* () {
-            const qs = Object.entries(params)
-                .map(([k, v]) => `${k}=${encodeURIComponent(v)}`)
-                .join('&');
-            const response = yield jsonFetch(`${this.config.apiURI}/admin/users?${qs}`, {
-                method: 'GET',
-                headers: authorizedHeaders(this.config),
-            });
-            return response.user;
+        return ret.user.refresh_token;
+    }
+    /**
+     * Verifies a given token and returns the associated user.
+     *
+     * This is often useful for writing custom endpoints, where you need
+     * to authenticate users.
+     *
+     * @example
+     *   app.post('/custom_endpoint', async (req, res) => {
+     *     const user = await db.auth.verifyToken(req.headers['token'])
+     *     if (!user) {
+     *       return res.status(401).send('Uh oh, you are not authenticated')
+     *     }
+     *     // ...
+     *   })
+     * @see https://instantdb.com/docs/backend#custom-endpoints
+     */
+    verifyToken = async (token) => {
+        const res = await jsonFetch(`${this.config.apiURI}/runtime/auth/verify_refresh_token`, {
+            method: 'POST',
+            headers: { 'content-type': 'application/json' },
+            body: JSON.stringify({
+                'app-id': this.config.appId,
+                'refresh-token': token,
+            }),
         });
-        /**
-         * Deletes an app user by id, email, or refresh token.
-         *
-         * NB: This _only_ deletes the user; it does not delete all user data.
-         * You will need to handle this manually.
-         *
-         * @example
-         *   try {
-         *     const deletedUser = await db.auth.deleteUser({ email })
-         *     console.log("Deleted user:", deletedUser)
-         *   } catch (err) {
-         *     console.error("Failed to delete user:", err.message);
-         *   }
-         *
-         * @see https://instantdb.com/docs/backend#delete-a-user
-         */
-        this.deleteUser = (params) => __awaiter(this, void 0, void 0, function* () {
-            const qs = Object.entries(params).map(([k, v]) => `${k}=${v}`);
-            const response = yield jsonFetch(`${this.config.apiURI}/admin/users?${qs}`, {
-                method: 'DELETE',
-                headers: authorizedHeaders(this.config),
-            });
-            return response.deleted;
+        return res.user;
+    };
+    /**
+     * Retrieves an app user by id, email, or refresh token.
+     *
+     * @example
+     *   try {
+     *     const user = await db.auth.getUser({ email })
+     *     console.log("Found user:", user)
+     *   } catch (err) {
+     *     console.error("Failed to retrieve user:", err.message);
+     *   }
+     *
+     * @see https://instantdb.com/docs/backend#retrieve-a-user
+     */
+    getUser = async (params) => {
+        const qs = Object.entries(params)
+            .map(([k, v]) => `${k}=${encodeURIComponent(v)}`)
+            .join('&');
+        const response = await jsonFetch(`${this.config.apiURI}/admin/users?${qs}`, {
+            method: 'GET',
+            headers: authorizedHeaders(this.config),
         });
-        this.config = config;
-        this.createToken = this.createToken.bind(this);
-    }
-    createToken(input) {
-        return __awaiter(this, void 0, void 0, function* () {
-            const body = typeof input === 'string' ? { email: input } : input;
-            const ret = yield jsonFetch(`${this.config.apiURI}/admin/refresh_tokens`, {
-                method: 'POST',
-                headers: authorizedHeaders(this.config),
-                body: JSON.stringify(body),
-            });
-            return ret.user.refresh_token;
+        return response.user;
+    };
+    /**
+     * Deletes an app user by id, email, or refresh token.
+     *
+     * NB: This _only_ deletes the user; it does not delete all user data.
+     * You will need to handle this manually.
+     *
+     * @example
+     *   try {
+     *     const deletedUser = await db.auth.deleteUser({ email })
+     *     console.log("Deleted user:", deletedUser)
+     *   } catch (err) {
+     *     console.error("Failed to delete user:", err.message);
+     *   }
+     *
+     * @see https://instantdb.com/docs/backend#delete-a-user
+     */
+    deleteUser = async (params) => {
+        const qs = Object.entries(params).map(([k, v]) => `${k}=${v}`);
+        const response = await jsonFetch(`${this.config.apiURI}/admin/users?${qs}`, {
+            method: 'DELETE',
+            headers: authorizedHeaders(this.config),
         });
-    }
-    signOut(input) {
-        return __awaiter(this, void 0, void 0, function* () {
-            // If input is a string, we assume it's an email.
-            // This is because of backwards compatibility: we used to only
-            // accept email strings. Eventually we can remove this
-            const params = typeof input === 'string' ? { email: input } : input;
-            const config = this.config;
-            yield jsonFetch(`${config.apiURI}/admin/sign_out`, {
-                method: 'POST',
-                headers: authorizedHeaders(config),
-                body: JSON.stringify(params),
-            });
+        return response.deleted;
+    };
+    async signOut(input) {
+        // If input is a string, we assume it's an email.
+        // This is because of backwards compatibility: we used to only
+        // accept email strings. Eventually we can remove this
+        const params = typeof input === 'string' ? { email: input } : input;
+        const config = this.config;
+        await jsonFetch(`${config.apiURI}/admin/sign_out`, {
+            method: 'POST',
+            headers: authorizedHeaders(config),
+            body: JSON.stringify(params),
         });
     }
 }
@@ -360,127 +351,137 @@ const isWebReadable = (v) => v && typeof v.getReader === 'function';
  * Functions to manage file storage.
  */
 class Storage {
+    config;
+    impersonationOpts;
     constructor(config, impersonationOpts) {
-        /**
-         * Uploads file at the provided path. Accepts a Buffer or a Readable stream.
-         *
-         * @see https://instantdb.com/docs/storage
-         * @example
-         *   const buffer = fs.readFileSync('demo.png');
-         *   const isSuccess = await db.storage.uploadFile('photos/demo.png', buffer);
-         */
-        this.uploadFile = (path_1, file_1, ...args_1) => __awaiter(this, [path_1, file_1, ...args_1], void 0, function* (path, file, metadata = {}) {
-            const headers = Object.assign(Object.assign({}, authorizedHeaders(this.config, this.impersonationOpts)), { path });
-            if (metadata.contentDisposition) {
-                headers['content-disposition'] = metadata.contentDisposition;
-            }
-            // headers.content-type will become "undefined" (string)
-            // if not removed from the object
-            delete headers['content-type'];
-            if (metadata.contentType) {
-                headers['content-type'] = metadata.contentType;
-            }
-            let duplex;
-            if (isNodeReadable(file)) {
-                duplex = 'half'; // one-way stream
-            }
-            if (isNodeReadable(file) || isWebReadable(file)) {
-                if (!metadata.fileSize) {
-                    throw new Error('fileSize is required in metadata when uploading streams');
-                }
-                headers['content-length'] = metadata.fileSize.toString();
+        this.config = config;
+        this.impersonationOpts = impersonationOpts;
+    }
+    /**
+     * Uploads file at the provided path. Accepts a Buffer or a Readable stream.
+     *
+     * @see https://instantdb.com/docs/storage
+     * @example
+     *   const buffer = fs.readFileSync('demo.png');
+     *   const isSuccess = await db.storage.uploadFile('photos/demo.png', buffer);
+     */
+    uploadFile = async (path, file, metadata = {}) => {
+        const headers = {
+            ...authorizedHeaders(this.config, this.impersonationOpts),
+            path,
+        };
+        if (metadata.contentDisposition) {
+            headers['content-disposition'] = metadata.contentDisposition;
+        }
+        // headers.content-type will become "undefined" (string)
+        // if not removed from the object
+        delete headers['content-type'];
+        if (metadata.contentType) {
+            headers['content-type'] = metadata.contentType;
+        }
+        let duplex;
+        if (isNodeReadable(file)) {
+            duplex = 'half'; // one-way stream
+        }
+        if (isNodeReadable(file) || isWebReadable(file)) {
+            if (!metadata.fileSize) {
+                throw new Error('fileSize is required in metadata when uploading streams');
             }
-            let options = Object.assign({ method: 'PUT', headers, body: file }, (duplex && { duplex }));
-            return jsonFetch(`${this.config.apiURI}/admin/storage/upload`, options);
+            headers['content-length'] = metadata.fileSize.toString();
+        }
+        let options = {
+            method: 'PUT',
+            headers,
+            body: file,
+            ...(duplex && { duplex }),
+        };
+        return jsonFetch(`${this.config.apiURI}/admin/storage/upload`, options);
+    };
+    /**
+     * Deletes a file by its path name (e.g. "photos/demo.png").
+     *
+     * @see https://instantdb.com/docs/storage
+     * @example
+     *   await db.storage.delete("photos/demo.png");
+     */
+    delete = async (pathname) => {
+        return jsonFetch(`${this.config.apiURI}/admin/storage/files?filename=${encodeURIComponent(pathname)}`, {
+            method: 'DELETE',
+            headers: authorizedHeaders(this.config, this.impersonationOpts),
         });
-        /**
-         * Deletes a file by its path name (e.g. "photos/demo.png").
-         *
-         * @see https://instantdb.com/docs/storage
-         * @example
-         *   await db.storage.delete("photos/demo.png");
-         */
-        this.delete = (pathname) => __awaiter(this, void 0, void 0, function* () {
-            return jsonFetch(`${this.config.apiURI}/admin/storage/files?filename=${encodeURIComponent(pathname)}`, {
-                method: 'DELETE',
-                headers: authorizedHeaders(this.config, this.impersonationOpts),
-            });
+    };
+    /**
+     * Deletes multiple files by their path names (e.g. "photos/demo.png", "essays/demo.txt").
+     *
+     * @see https://instantdb.com/docs/storage
+     * @example
+     *   await db.storage.deleteMany(["images/1.png", "images/2.png", "images/3.png"]);
+     */
+    deleteMany = async (pathnames) => {
+        return jsonFetch(`${this.config.apiURI}/admin/storage/files/delete`, {
+            method: 'POST',
+            headers: authorizedHeaders(this.config, this.impersonationOpts),
+            body: JSON.stringify({ filenames: pathnames }),
         });
-        /**
-         * Deletes multiple files by their path names (e.g. "photos/demo.png", "essays/demo.txt").
-         *
-         * @see https://instantdb.com/docs/storage
-         * @example
-         *   await db.storage.deleteMany(["images/1.png", "images/2.png", "images/3.png"]);
-         */
-        this.deleteMany = (pathnames) => __awaiter(this, void 0, void 0, function* () {
-            return jsonFetch(`${this.config.apiURI}/admin/storage/files/delete`, {
-                method: 'POST',
-                headers: authorizedHeaders(this.config, this.impersonationOpts),
-                body: JSON.stringify({ filenames: pathnames }),
-            });
+    };
+    /**
+     * @deprecated. This method will be removed in the future. Use `uploadFile`
+     * instead
+     */
+    upload = async (pathname, file, metadata = {}) => {
+        const { data: presignedUrl } = await jsonFetch(`${this.config.apiURI}/admin/storage/signed-upload-url`, {
+            method: 'POST',
+            headers: authorizedHeaders(this.config),
+            body: JSON.stringify({
+                app_id: this.config.appId,
+                filename: pathname,
+            }),
         });
-        /**
-         * @deprecated. This method will be removed in the future. Use `uploadFile`
-         * instead
-         */
-        this.upload = (pathname_1, file_1, ...args_1) => __awaiter(this, [pathname_1, file_1, ...args_1], void 0, function* (pathname, file, metadata = {}) {
-            const { data: presignedUrl } = yield jsonFetch(`${this.config.apiURI}/admin/storage/signed-upload-url`, {
-                method: 'POST',
-                headers: authorizedHeaders(this.config),
-                body: JSON.stringify({
-                    app_id: this.config.appId,
-                    filename: pathname,
-                }),
-            });
-            const headers = {};
-            const contentType = metadata.contentType;
-            if (contentType) {
-                headers['Content-Type'] = contentType;
-            }
-            const { ok } = yield fetch(presignedUrl, {
-                method: 'PUT',
-                body: file,
-                headers,
-            });
-            return ok;
+        const headers = {};
+        const contentType = metadata.contentType;
+        if (contentType) {
+            headers['Content-Type'] = contentType;
+        }
+        const { ok } = await fetch(presignedUrl, {
+            method: 'PUT',
+            body: file,
+            headers,
         });
-        /**
-         * @deprecated. This method will be removed in the future. Use `query` instead
-         * @example
-         * const files = await db.query({ $files: {}})
-         */
-        this.list = () => __awaiter(this, void 0, void 0, function* () {
-            const { data } = yield jsonFetch(`${this.config.apiURI}/admin/storage/files`, {
-                method: 'GET',
-                headers: authorizedHeaders(this.config),
-            });
-            return data;
+        return ok;
+    };
+    /**
+     * @deprecated. This method will be removed in the future. Use `query` instead
+     * @example
+     * const files = await db.query({ $files: {}})
+     */
+    list = async () => {
+        const { data } = await jsonFetch(`${this.config.apiURI}/admin/storage/files`, {
+            method: 'GET',
+            headers: authorizedHeaders(this.config),
         });
-        /**
-         * @deprecated. getDownloadUrl will be removed in the future.
-         * Use `query` instead to query and fetch for valid urls
-         *
-         * db.useQuery({
-         *   $files: {
-         *     $: {
-         *       where: {
-         *         path: "moop.png"
-         *       }
-         *     }
-         *   }
-         * })
-         */
-        this.getDownloadUrl = (pathname) => __awaiter(this, void 0, void 0, function* () {
-            const { data } = yield jsonFetch(`${this.config.apiURI}/admin/storage/signed-download-url?app_id=${this.config.appId}&filename=${encodeURIComponent(pathname)}`, {
-                method: 'GET',
-                headers: authorizedHeaders(this.config),
-            });
-            return data;
+        return data;
+    };
+    /**
+     * @deprecated. getDownloadUrl will be removed in the future.
+     * Use `query` instead to query and fetch for valid urls
+     *
+     * db.useQuery({
+     *   $files: {
+     *     $: {
+     *       where: {
+     *         path: "moop.png"
+     *       }
+     *     }
+     *   }
+     * })
+     */
+    getDownloadUrl = async (pathname) => {
+        const { data } = await jsonFetch(`${this.config.apiURI}/admin/storage/signed-download-url?app_id=${this.config.appId}&filename=${encodeURIComponent(pathname)}`, {
+            method: 'GET',
+            headers: authorizedHeaders(this.config),
         });
-        this.config = config;
-        this.impersonationOpts = impersonationOpts;
-    }
+        return data;
+    };
 }
 /**
  *
@@ -492,158 +493,72 @@ class Storage {
  *  const db = init({ appId: "my-app-id", adminToken: "my-admin-token" })
  */
 class InstantAdminDatabase {
+    config;
+    auth;
+    storage;
+    rooms;
+    impersonationOpts;
+    tx = (0, core_1.txInit)();
     constructor(_config) {
-        this.tx = (0, core_1.txInit)();
-        /**
-         * Sometimes you want to scope queries to a specific user.
-         *
-         * You can provide a user's auth token, email, or impersonate a guest.
-         *
-         * @see https://instantdb.com/docs/backend#impersonating-users
-         * @example
-         *  await db.asUser({email: "stopa@instantdb.com"}).query({ goals: {} })
-         */
-        this.asUser = (opts) => {
-            const newClient = new InstantAdminDatabase(Object.assign({}, this.config));
-            newClient.impersonationOpts = opts;
-            newClient.storage = new Storage(this.config, opts);
-            return newClient;
-        };
-        /**
-         * Use this to query your data!
-         *
-         * @see https://instantdb.com/docs/instaql
-         *
-         * @example
-         *  // fetch all goals
-         *  await db.query({ goals: {} })
-         *
-         *  // goals where the title is "Get Fit"
-         *  await db.query({ goals: { $: { where: { title: "Get Fit" } } } })
-         *
-         *  // all goals, _alongside_ their todos
-         *  await db.query({ goals: { todos: {} } })
-         */
-        this.query = (query, opts = {}) => {
-            if (query && opts && 'ruleParams' in opts) {
-                query = Object.assign({ $$ruleParams: opts['ruleParams'] }, query);
-            }
-            if (!this.config.disableValidation) {
-                (0, core_1.validateQuery)(query, this.config.schema);
-            }
-            const fetchOpts = opts.fetchOpts || {};
-            const fetchOptsHeaders = fetchOpts['headers'] || {};
-            return jsonFetch(`${this.config.apiURI}/admin/query`, Object.assign(Object.assign({}, fetchOpts), { method: 'POST', headers: Object.assign(Object.assign({}, fetchOptsHeaders), authorizedHeaders(this.config, this.impersonationOpts)), body: JSON.stringify({
-                    query: query,
-                    'inference?': !!this.config.schema,
-                }) }));
-        };
-        /**
-         * Use this to write data! You can create, update, delete, and link objects
-         *
-         * @see https://instantdb.com/docs/instaml
-         *
-         * @example
-         *   // Create a new object in the `goals` namespace
-         *   const goalId = id();
-         *   db.transact(db.tx.goals[goalId].update({title: "Get fit"}))
-         *
-         *   // Update the title
-         *   db.transact(db.tx.goals[goalId].update({title: "Get super fit"}))
-         *
-         *   // Delete it
-         *   db.transact(db.tx.goals[goalId].delete())
-         *
-         *   // Or create an association:
-         *   todoId = id();
-         *   db.transact([
-         *    db.tx.todos[todoId].update({ title: 'Go on a run' }),
-         *    db.tx.goals[goalId].link({todos: todoId}),
-         *  ])
-         */
-        this.transact = (inputChunks) => {
-            if (!this.config.disableValidation) {
-                (0, core_1.validateTransactions)(inputChunks, this.config.schema);
-            }
-            return jsonFetch(`${this.config.apiURI}/admin/transact`, {
-                method: 'POST',
-                headers: authorizedHeaders(this.config, this.impersonationOpts),
-                body: JSON.stringify({
-                    steps: steps(inputChunks),
-                    'throw-on-missing-attrs?': !!this.config.schema,
-                }),
-            });
-        };
-        /**
-         * Like `query`, but returns debugging information
-         * for permissions checks along with the result.
-         * Useful for inspecting the values returned by the permissions checks.
-         * Note, this will return debug information for *all* entities
-         * that match the query's `where` clauses.
-         *
-         * Requires a user/guest context to be set with `asUser`,
-         * since permissions checks are user-specific.
-         *
-         * Accepts an optional configuration object with a `rules` key.
-         * The provided rules will override the rules in the database for the query.
-         *
-         * @see https://instantdb.com/docs/instaql
-         *
-         * @example
-         *  await db.asUser({ guest: true }).debugQuery(
-         *    { goals: {} },
-         *    { rules: { goals: { allow: { read: "auth.id != null" } } }
-         *  )
-         */
-        this.debugQuery = (query, opts) => __awaiter(this, void 0, void 0, function* () {
-            if (query && opts && 'ruleParams' in opts) {
-                query = Object.assign({ $$ruleParams: opts['ruleParams'] }, query);
-            }
-            const response = yield jsonFetch(`${this.config.apiURI}/admin/query_perms_check`, {
-                method: 'POST',
-                headers: authorizedHeaders(this.config, this.impersonationOpts),
-                body: JSON.stringify({ query, 'rules-override': opts === null || opts === void 0 ? void 0 : opts.rules }),
-            });
-            return {
-                result: response.result,
-                checkResults: response['check-results'],
-            };
-        });
-        /**
-         * Like `transact`, but does not write to the database.
-         * Returns debugging information for permissions checks.
-         * Useful for inspecting the values returned by the permissions checks.
-         *
-         * Requires a user/guest context to be set with `asUser`,
-         * since permissions checks are user-specific.
-         *
-         * Accepts an optional configuration object with a `rules` key.
-         * The provided rules will override the rules in the database for the duration of the transaction.
-         *
-         * @example
-         *   const goalId = id();
-         *   db.asUser({ guest: true }).debugTransact(
-         *      [db.tx.goals[goalId].update({title: "Get fit"})],
-         *      { rules: { goals: { allow: { update: "auth.id != null" } } }
-         *   )
-         */
-        this.debugTransact = (inputChunks, opts) => {
-            return jsonFetch(`${this.config.apiURI}/admin/transact_perms_check`, {
-                method: 'POST',
-                headers: authorizedHeaders(this.config, this.impersonationOpts),
-                body: JSON.stringify({
-                    steps: steps(inputChunks),
-                    'rules-override': opts === null || opts === void 0 ? void 0 : opts.rules,
-                    // @ts-expect-error because we're using a private API (for now)
-                    'dangerously-commit-tx': opts === null || opts === void 0 ? void 0 : opts.__dangerouslyCommit,
-                }),
-            });
-        };
         this.config = instantConfigWithDefaults(_config);
         this.auth = new Auth(this.config);
         this.storage = new Storage(this.config, this.impersonationOpts);
         this.rooms = new Rooms(this.config);
     }
+    /**
+     * Sometimes you want to scope queries to a specific user.
+     *
+     * You can provide a user's auth token, email, or impersonate a guest.
+     *
+     * @see https://instantdb.com/docs/backend#impersonating-users
+     * @example
+     *  await db.asUser({email: "stopa@instantdb.com"}).query({ goals: {} })
+     */
+    asUser = (opts) => {
+        const newClient = new InstantAdminDatabase({
+            ...this.config,
+        });
+        newClient.impersonationOpts = opts;
+        newClient.storage = new Storage(this.config, opts);
+        return newClient;
+    };
+    /**
+     * Use this to query your data!
+     *
+     * @see https://instantdb.com/docs/instaql
+     *
+     * @example
+     *  // fetch all goals
+     *  await db.query({ goals: {} })
+     *
+     *  // goals where the title is "Get Fit"
+     *  await db.query({ goals: { $: { where: { title: "Get Fit" } } } })
+     *
+     *  // all goals, _alongside_ their todos
+     *  await db.query({ goals: { todos: {} } })
+     */
+    query = (query, opts = {}) => {
+        if (query && opts && 'ruleParams' in opts) {
+            query = { $$ruleParams: opts['ruleParams'], ...query };
+        }
+        if (!this.config.disableValidation) {
+            (0, core_1.validateQuery)(query, this.config.schema);
+        }
+        const fetchOpts = opts.fetchOpts || {};
+        const fetchOptsHeaders = fetchOpts['headers'] || {};
+        return jsonFetch(`${this.config.apiURI}/admin/query`, {
+            ...fetchOpts,
+            method: 'POST',
+            headers: {
+                ...fetchOptsHeaders,
+                ...authorizedHeaders(this.config, this.impersonationOpts),
+            },
+            body: JSON.stringify({
+                query: query,
+                'inference?': !!this.config.schema,
+            }),
+        });
+    };
     /**
      * Use this to to get a live view of your data!
      *
@@ -681,14 +596,17 @@ class InstantAdminDatabase {
      */
     subscribeQuery(query, cb, opts = {}) {
         if (query && opts && 'ruleParams' in opts) {
-            query = Object.assign({ $$ruleParams: opts['ruleParams'] }, query);
+            query = { $$ruleParams: opts['ruleParams'], ...query };
         }
         if (!this.config.disableValidation) {
             (0, core_1.validateQuery)(query, this.config.schema);
         }
         const fetchOpts = opts.fetchOpts || {};
         const fetchOptsHeaders = fetchOpts['headers'] || {};
-        const headers = Object.assign(Object.assign({}, fetchOptsHeaders), authorizedHeaders(this.config, this.impersonationOpts));
+        const headers = {
+            ...fetchOptsHeaders,
+            ...authorizedHeaders(this.config, this.impersonationOpts),
+        };
         const inference = !!this.config.schema;
         return (0, subscribe_ts_1.subscribe)(query, cb, {
             headers,
@@ -696,5 +614,106 @@ class InstantAdminDatabase {
             apiURI: this.config.apiURI,
         });
     }
+    /**
+     * Use this to write data! You can create, update, delete, and link objects
+     *
+     * @see https://instantdb.com/docs/instaml
+     *
+     * @example
+     *   // Create a new object in the `goals` namespace
+     *   const goalId = id();
+     *   db.transact(db.tx.goals[goalId].update({title: "Get fit"}))
+     *
+     *   // Update the title
+     *   db.transact(db.tx.goals[goalId].update({title: "Get super fit"}))
+     *
+     *   // Delete it
+     *   db.transact(db.tx.goals[goalId].delete())
+     *
+     *   // Or create an association:
+     *   todoId = id();
+     *   db.transact([
+     *    db.tx.todos[todoId].update({ title: 'Go on a run' }),
+     *    db.tx.goals[goalId].link({todos: todoId}),
+     *  ])
+     */
+    transact = (inputChunks) => {
+        if (!this.config.disableValidation) {
+            (0, core_1.validateTransactions)(inputChunks, this.config.schema);
+        }
+        return jsonFetch(`${this.config.apiURI}/admin/transact`, {
+            method: 'POST',
+            headers: authorizedHeaders(this.config, this.impersonationOpts),
+            body: JSON.stringify({
+                steps: steps(inputChunks),
+                'throw-on-missing-attrs?': !!this.config.schema,
+            }),
+        });
+    };
+    /**
+     * Like `query`, but returns debugging information
+     * for permissions checks along with the result.
+     * Useful for inspecting the values returned by the permissions checks.
+     * Note, this will return debug information for *all* entities
+     * that match the query's `where` clauses.
+     *
+     * Requires a user/guest context to be set with `asUser`,
+     * since permissions checks are user-specific.
+     *
+     * Accepts an optional configuration object with a `rules` key.
+     * The provided rules will override the rules in the database for the query.
+     *
+     * @see https://instantdb.com/docs/instaql
+     *
+     * @example
+     *  await db.asUser({ guest: true }).debugQuery(
+     *    { goals: {} },
+     *    { rules: { goals: { allow: { read: "auth.id != null" } } }
+     *  )
+     */
+    debugQuery = async (query, opts) => {
+        if (query && opts && 'ruleParams' in opts) {
+            query = { $$ruleParams: opts['ruleParams'], ...query };
+        }
+        const response = await jsonFetch(`${this.config.apiURI}/admin/query_perms_check`, {
+            method: 'POST',
+            headers: authorizedHeaders(this.config, this.impersonationOpts),
+            body: JSON.stringify({ query, 'rules-override': opts?.rules }),
+        });
+        return {
+            result: response.result,
+            checkResults: response['check-results'],
+        };
+    };
+    /**
+     * Like `transact`, but does not write to the database.
+     * Returns debugging information for permissions checks.
+     * Useful for inspecting the values returned by the permissions checks.
+     *
+     * Requires a user/guest context to be set with `asUser`,
+     * since permissions checks are user-specific.
+     *
+     * Accepts an optional configuration object with a `rules` key.
+     * The provided rules will override the rules in the database for the duration of the transaction.
+     *
+     * @example
+     *   const goalId = id();
+     *   db.asUser({ guest: true }).debugTransact(
+     *      [db.tx.goals[goalId].update({title: "Get fit"})],
+     *      { rules: { goals: { allow: { update: "auth.id != null" } } }
+     *   )
+     */
+    debugTransact = (inputChunks, opts) => {
+        return jsonFetch(`${this.config.apiURI}/admin/transact_perms_check`, {
+            method: 'POST',
+            headers: authorizedHeaders(this.config, this.impersonationOpts),
+            body: JSON.stringify({
+                steps: steps(inputChunks),
+                'rules-override': opts?.rules,
+                // @ts-expect-error because we're using a private API (for now)
+                'dangerously-commit-tx': opts?.__dangerouslyCommit,
+            }),
+        });
+    };
 }
 //# sourceMappingURL=index.js.map