@instantdb/platform 0.22.99-experimental.add-user-perm-rules.20792844601.1 → 0.22.99

package/dist/esm/api.js

@@ -1,50 +1,33 @@
-var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
-    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
-    return new (P || (P = Promise))(function (resolve, reject) {
-        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
-        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
-        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
-        step((generator = generator.apply(thisArg, _arguments || [])).next());
-    });
-};
-var __classPrivateFieldSet = (this && this.__classPrivateFieldSet) || function (receiver, state, value, kind, f) {
-    if (kind === "m") throw new TypeError("Private method is not writable");
-    if (kind === "a" && !f) throw new TypeError("Private accessor was defined without a setter");
-    if (typeof state === "function" ? receiver !== state || !f : !state.has(receiver)) throw new TypeError("Cannot write private member to an object whose class did not declare it");
-    return (kind === "a" ? f.call(receiver, value) : f ? f.value = value : state.set(receiver, value)), value;
-};
-var __classPrivateFieldGet = (this && this.__classPrivateFieldGet) || function (receiver, state, kind, f) {
-    if (kind === "a" && !f) throw new TypeError("Private accessor was defined without a getter");
-    if (typeof state === "function" ? receiver !== state || !f : !state.has(receiver)) throw new TypeError("Cannot read private member from an object whose class did not declare it");
-    return kind === "m" ? f : kind === "a" ? f.call(receiver) : f ? f.value : state.get(receiver);
-};
-var _PlatformApi_auth, _PlatformApi_apiURI;
 import { InstantAPIError, version as coreVersion, i, } from '@instantdb/core';
 import version from "./version.js";
 import { attrFwdLabel, attrFwdName, attrRevName, identName, } from "./schema.js";
 import { ProgressPromise } from "./ProgressPromise.js";
 import { capitalizeFirstLetter, deriveClientType, rels, sortedEntries, } from "./util.js";
 import { exchangeRefreshToken } from "./serverOAuth.js";
-function jsonFetch(input, init) {
-    return __awaiter(this, void 0, void 0, function* () {
-        const headers = Object.assign(Object.assign({}, ((init === null || init === void 0 ? void 0 : init.headers) || {})), { 'Instant-Platform-Version': version, 'Instant-Core-Version': coreVersion, 'X-Instant-Source': 'platform-sdk', 'X-Instant-Version': version });
-        const res = yield fetch(input, Object.assign(Object.assign({}, init), { headers }));
-        if (res.status === 200) {
-            const json = yield res.json();
-            return Promise.resolve(json);
-        }
-        const body = yield res.text();
-        try {
-            const json = JSON.parse(body);
-            return Promise.reject(new InstantAPIError({ status: res.status, body: json }));
-        }
-        catch (_e) {
-            return Promise.reject(new InstantAPIError({
-                status: res.status,
-                body: { type: undefined, message: body },
-            }));
-        }
-    });
+async function jsonFetch(input, init) {
+    const headers = {
+        ...(init?.headers || {}),
+        'Instant-Platform-Version': version,
+        'Instant-Core-Version': coreVersion,
+        'X-Instant-Source': 'platform-sdk',
+        'X-Instant-Version': version,
+    };
+    const res = await fetch(input, { ...init, headers });
+    if (res.status === 200) {
+        const json = await res.json();
+        return Promise.resolve(json);
+    }
+    const body = await res.text();
+    try {
+        const json = JSON.parse(body);
+        return Promise.reject(new InstantAPIError({ status: res.status, body: json }));
+    }
+    catch (_e) {
+        return Promise.reject(new InstantAPIError({
+            status: res.status,
+            body: { type: undefined, message: body },
+        }));
+    }
 }
 function attrDefForType(type) {
     switch (type) {
@@ -67,7 +50,7 @@ function attrDefForType(type) {
     }
 }
 function apiSchemaAttrToDataAttrDef(attr, opts) {
-    const derivedType = deriveClientType(attr, opts === null || opts === void 0 ? void 0 : opts.disableTypeInference);
+    const derivedType = deriveClientType(attr, opts?.disableTypeInference);
     let i = attrDefForType(derivedType.type);
     if (attr['unique?']) {
         i = i.unique();
@@ -131,7 +114,13 @@ export function apiSchemaToInstantSchemaDef(apiSchema, opts) {
     return i.schema({ entities, links });
 }
 function coerceApp(app) {
-    const base = Object.assign({ id: app.id, title: app.title, createdAt: new Date(app.created_at), orgId: app.org_id }, (app['admin-token'] ? { adminToken: app['admin-token'] } : {}));
+    const base = {
+        id: app.id,
+        title: app.title,
+        createdAt: new Date(app.created_at),
+        orgId: app.org_id,
+        ...(app['admin-token'] ? { adminToken: app['admin-token'] } : {}),
+    };
     // `in` narrows the union, so it’s safe to read `perms` / `schema`
     // when the property exists. :contentReference[oaicite:0]{index=0}
     const permsPart = ('perms' in app ? { perms: app.perms } : {});
@@ -140,7 +129,7 @@ function coerceApp(app) {
             schema: apiSchemaToInstantSchemaDef(app.schema),
         }
         : {});
-    return Object.assign(Object.assign(Object.assign({}, base), permsPart), schemaPart);
+    return { ...base, ...permsPart, ...schemaPart };
 }
 function coerceOrg(org) {
     return {
@@ -149,167 +138,157 @@ function coerceOrg(org) {
         createdAt: new Date(org.created_at),
     };
 }
-function getApps(apiURI, token, opts) {
-    return __awaiter(this, void 0, void 0, function* () {
-        const url = new URL(`${apiURI}/superadmin/apps`);
-        const include = [];
-        if (opts === null || opts === void 0 ? void 0 : opts.includePerms) {
-            include.push('perms');
-        }
-        if (opts === null || opts === void 0 ? void 0 : opts.includeSchema) {
-            include.push('schema');
-        }
-        if (include.length) {
-            url.searchParams.set('include', include.join(','));
-        }
-        const resp = yield jsonFetch(url.toString(), {
-            method: 'GET',
-            headers: {
-                Authorization: `Bearer ${token}`,
-            },
-        });
-        return { apps: resp.apps.map(coerceApp) };
+async function getApps(apiURI, token, opts) {
+    const url = new URL(`${apiURI}/superadmin/apps`);
+    const include = [];
+    if (opts?.includePerms) {
+        include.push('perms');
+    }
+    if (opts?.includeSchema) {
+        include.push('schema');
+    }
+    if (include.length) {
+        url.searchParams.set('include', include.join(','));
+    }
+    const resp = await jsonFetch(url.toString(), {
+        method: 'GET',
+        headers: {
+            Authorization: `Bearer ${token}`,
+        },
     });
-}
-function getOrgs(apiURI, token) {
-    return __awaiter(this, void 0, void 0, function* () {
-        const url = new URL(`${apiURI}/superadmin/orgs`);
-        const resp = yield jsonFetch(url.toString(), {
-            method: 'GET',
-            headers: {
-                Authorization: `Bearer ${token}`,
-            },
-        });
-        return { orgs: resp.orgs.map(coerceOrg) };
+    return { apps: resp.apps.map(coerceApp) };
+}
+async function getOrgs(apiURI, token) {
+    const url = new URL(`${apiURI}/superadmin/orgs`);
+    const resp = await jsonFetch(url.toString(), {
+        method: 'GET',
+        headers: {
+            Authorization: `Bearer ${token}`,
+        },
     });
+    return { orgs: resp.orgs.map(coerceOrg) };
 }
-function getAppsForOrg(apiURI, token, orgId, opts) {
-    return __awaiter(this, void 0, void 0, function* () {
-        const url = new URL(`${apiURI}/superadmin/orgs/${orgId}/apps`);
-        const include = [];
-        if (opts === null || opts === void 0 ? void 0 : opts.includePerms) {
-            include.push('perms');
-        }
-        if (opts === null || opts === void 0 ? void 0 : opts.includeSchema) {
-            include.push('schema');
-        }
-        if (include.length) {
-            url.searchParams.set('include', include.join(','));
-        }
-        const resp = yield jsonFetch(url.toString(), {
-            method: 'GET',
-            headers: {
-                Authorization: `Bearer ${token}`,
-            },
-        });
-        return { apps: resp.apps.map(coerceApp) };
+async function getAppsForOrg(apiURI, token, orgId, opts) {
+    const url = new URL(`${apiURI}/superadmin/orgs/${orgId}/apps`);
+    const include = [];
+    if (opts?.includePerms) {
+        include.push('perms');
+    }
+    if (opts?.includeSchema) {
+        include.push('schema');
+    }
+    if (include.length) {
+        url.searchParams.set('include', include.join(','));
+    }
+    const resp = await jsonFetch(url.toString(), {
+        method: 'GET',
+        headers: {
+            Authorization: `Bearer ${token}`,
+        },
     });
+    return { apps: resp.apps.map(coerceApp) };
 }
-function getAppSchema(apiURI, token, appId) {
-    return __awaiter(this, void 0, void 0, function* () {
-        const { schema } = yield jsonFetch(`${apiURI}/superadmin/apps/${appId}/schema`, {
-            method: 'GET',
-            headers: {
-                Authorization: `Bearer ${token}`,
-            },
-        });
-        return { schema: apiSchemaToInstantSchemaDef(schema) };
+async function getAppSchema(apiURI, token, appId) {
+    const { schema } = await jsonFetch(`${apiURI}/superadmin/apps/${appId}/schema`, {
+        method: 'GET',
+        headers: {
+            Authorization: `Bearer ${token}`,
+        },
     });
+    return { schema: apiSchemaToInstantSchemaDef(schema) };
 }
-function getAppPerms(apiURI, token, appId) {
-    return __awaiter(this, void 0, void 0, function* () {
-        return yield jsonFetch(`${apiURI}/superadmin/apps/${appId}/perms`, {
-            method: 'GET',
-            headers: {
-                Authorization: `Bearer ${token}`,
-            },
-        });
+async function getAppPerms(apiURI, token, appId) {
+    return await jsonFetch(`${apiURI}/superadmin/apps/${appId}/perms`, {
+        method: 'GET',
+        headers: {
+            Authorization: `Bearer ${token}`,
+        },
     });
 }
-function getApp(apiURI, token, appId, opts) {
-    return __awaiter(this, void 0, void 0, function* () {
-        let permsPromise = null;
-        let schemaPromise = null;
-        if (opts === null || opts === void 0 ? void 0 : opts.includePerms) {
-            permsPromise = getAppPerms(apiURI, token, appId);
-        }
-        if (opts === null || opts === void 0 ? void 0 : opts.includeSchema) {
-            schemaPromise = getAppSchema(apiURI, token, appId);
-        }
-        const { app: apiApp } = yield jsonFetch(`${apiURI}/superadmin/apps/${appId}`, {
-            method: 'GET',
-            headers: {
-                Authorization: `Bearer ${token}`,
-            },
-        });
-        if (!permsPromise && !schemaPromise) {
-            const app = coerceApp(apiApp);
-            return { app };
-        }
-        const app = Object.assign(Object.assign(Object.assign({}, coerceApp(apiApp)), (permsPromise ? { perms: (yield permsPromise).perms } : {})), (schemaPromise ? { schema: (yield schemaPromise).schema } : {}));
-        return {
-            app,
-        };
+async function getApp(apiURI, token, appId, opts) {
+    let permsPromise = null;
+    let schemaPromise = null;
+    if (opts?.includePerms) {
+        permsPromise = getAppPerms(apiURI, token, appId);
+    }
+    if (opts?.includeSchema) {
+        schemaPromise = getAppSchema(apiURI, token, appId);
+    }
+    const { app: apiApp } = await jsonFetch(`${apiURI}/superadmin/apps/${appId}`, {
+        method: 'GET',
+        headers: {
+            Authorization: `Bearer ${token}`,
+        },
     });
+    if (!permsPromise && !schemaPromise) {
+        const app = coerceApp(apiApp);
+        return { app };
+    }
+    const app = {
+        ...coerceApp(apiApp),
+        ...(permsPromise ? { perms: (await permsPromise).perms } : {}),
+        ...(schemaPromise ? { schema: (await schemaPromise).schema } : {}),
+    };
+    return {
+        app,
+    };
 }
-function createApp(apiURI, token, fields) {
-    return __awaiter(this, void 0, void 0, function* () {
-        const apiFields = fields;
-        apiFields.org_id = fields.orgId;
-        const { app } = yield jsonFetch(`${apiURI}/superadmin/apps`, {
-            method: 'POST',
-            headers: {
-                'Content-Type': 'application/json',
-                Authorization: `Bearer ${token}`,
-            },
-            body: JSON.stringify(apiFields),
-        });
-        const withAdminToken = Object.assign(Object.assign({}, coerceApp(app)), { adminToken: app['admin-token'] });
-        return {
-            app: withAdminToken,
-        };
+async function createApp(apiURI, token, fields) {
+    const apiFields = fields;
+    apiFields.org_id = fields.orgId;
+    const { app } = await jsonFetch(`${apiURI}/superadmin/apps`, {
+        method: 'POST',
+        headers: {
+            'Content-Type': 'application/json',
+            Authorization: `Bearer ${token}`,
+        },
+        body: JSON.stringify(apiFields),
     });
+    const withAdminToken = {
+        ...coerceApp(app),
+        adminToken: app['admin-token'],
+    };
+    return {
+        app: withAdminToken,
+    };
 }
-function createTemporaryApp(apiURI, fields) {
-    return __awaiter(this, void 0, void 0, function* () {
-        const response = yield jsonFetch(`${apiURI}/dash/apps/ephemeral`, {
-            method: 'POST',
-            headers: {
-                'Content-Type': 'application/json',
-            },
-            body: JSON.stringify(fields),
-        });
-        const withAdminToken = Object.assign(Object.assign({}, coerceApp(response.app)), { adminToken: response.app['admin-token'] });
-        return {
-            app: withAdminToken,
-            expiresMs: response.expires_ms,
-        };
+async function createTemporaryApp(apiURI, fields) {
+    const response = await jsonFetch(`${apiURI}/dash/apps/ephemeral`, {
+        method: 'POST',
+        headers: {
+            'Content-Type': 'application/json',
+        },
+        body: JSON.stringify(fields),
     });
+    const withAdminToken = {
+        ...coerceApp(response.app),
+        adminToken: response.app['admin-token'],
+    };
+    return {
+        app: withAdminToken,
+        expiresMs: response.expires_ms,
+    };
 }
-function updateApp(apiURI, token, appId, fields) {
-    return __awaiter(this, void 0, void 0, function* () {
-        const { app } = yield jsonFetch(`${apiURI}/superadmin/apps/${appId}`, {
-            method: 'POST',
-            headers: {
-                'Content-Type': 'application/json',
-                Authorization: `Bearer ${token}`,
-            },
-            body: JSON.stringify(fields),
-        });
-        return { app: coerceApp(app) };
+async function updateApp(apiURI, token, appId, fields) {
+    const { app } = await jsonFetch(`${apiURI}/superadmin/apps/${appId}`, {
+        method: 'POST',
+        headers: {
+            'Content-Type': 'application/json',
+            Authorization: `Bearer ${token}`,
+        },
+        body: JSON.stringify(fields),
     });
-}
-function deleteApp(apiURI, token, appId) {
-    return __awaiter(this, void 0, void 0, function* () {
-        const { app } = yield jsonFetch(`${apiURI}/superadmin/apps/${appId}`, {
-            method: 'DELETE',
-            headers: {
-                'Content-Type': 'application/json',
-                Authorization: `Bearer ${token}`,
-            },
-        });
-        return { app: coerceApp(app) };
+    return { app: coerceApp(app) };
+}
+async function deleteApp(apiURI, token, appId) {
+    const { app } = await jsonFetch(`${apiURI}/superadmin/apps/${appId}`, {
+        method: 'DELETE',
+        headers: {
+            'Content-Type': 'application/json',
+            Authorization: `Bearer ${token}`,
+        },
     });
+    return { app: coerceApp(app) };
 }
 function translatePlanStep(apiStep) {
     const [stepType, stepParams] = apiStep;
@@ -435,27 +414,29 @@ function translatePushStep(apiStep, jobs) {
     if (planStep.type !== backgroundJob.type) {
         throw new Error('Invalid type');
     }
-    return Object.assign(Object.assign({}, planStep), { backgroundJob });
+    return { ...planStep, backgroundJob };
 }
 function translatePushSteps(apiSteps, jobs) {
     return apiSteps.map((step) => translatePushStep(step, jobs));
 }
-function planSchemaPush(apiURI, token, appId, body) {
-    return __awaiter(this, void 0, void 0, function* () {
-        const resp = yield jsonFetch(`${apiURI}/superadmin/apps/${appId}/schema/push/plan`, {
-            method: 'POST',
-            headers: {
-                'Content-Type': 'application/json',
-                Authorization: `Bearer ${token}`,
-            },
-            body: JSON.stringify(Object.assign(Object.assign({}, body), { check_types: true, supports_background_updates: true })),
-        });
-        return {
-            newSchema: apiSchemaToInstantSchemaDef(resp['new-schema']),
-            currentSchema: apiSchemaToInstantSchemaDef(resp['current-schema']),
-            steps: translatePlanSteps(resp['steps']),
-        };
+async function planSchemaPush(apiURI, token, appId, body) {
+    const resp = await jsonFetch(`${apiURI}/superadmin/apps/${appId}/schema/push/plan`, {
+        method: 'POST',
+        headers: {
+            'Content-Type': 'application/json',
+            Authorization: `Bearer ${token}`,
+        },
+        body: JSON.stringify({
+            ...body,
+            check_types: true,
+            supports_background_updates: true,
+        }),
     });
+    return {
+        newSchema: apiSchemaToInstantSchemaDef(resp['new-schema']),
+        currentSchema: apiSchemaToInstantSchemaDef(resp['current-schema']),
+        steps: translatePlanSteps(resp['steps']),
+    };
 }
 function allJobsComplete(jobs) {
     return !!jobs.find((j) => j.job_status === 'completed' || j.job_status === 'errored');
@@ -472,47 +453,44 @@ function latestJobUpdate(jobs) {
     }, null);
     return res;
 }
-function jobFetchLoop(apiURI, token, appId, groupId, startingJobs, onFetch) {
-    return __awaiter(this, void 0, void 0, function* () {
-        let interval = 100;
-        let lastJobs = startingJobs;
-        let errorCount = 0;
-        while (!allJobsComplete(lastJobs)) {
-            yield new Promise((resolve) => setTimeout(resolve, interval));
-            try {
-                const nextJobs = (yield jsonFetch(`${apiURI}/dash/apps/${appId}/indexing-jobs/group/${groupId}`, {
-                    method: 'GET',
-                    headers: {
-                        Authorization: `Bearer ${token}`,
-                    },
-                })).jobs;
-                onFetch(nextJobs);
-                if (allJobsComplete(nextJobs)) {
-                    return nextJobs;
-                }
-                errorCount = 0;
-                const lastUpdate = latestJobUpdate(lastJobs);
-                const thisUpdate = latestJobUpdate(nextJobs);
-                interval =
-                    thisUpdate === null || (lastUpdate && lastUpdate >= thisUpdate)
-                        ? Math.min(interval * 2, 10000)
-                        : 100;
+async function jobFetchLoop(apiURI, token, appId, groupId, startingJobs, onFetch) {
+    let interval = 100;
+    let lastJobs = startingJobs;
+    let errorCount = 0;
+    while (!allJobsComplete(lastJobs)) {
+        await new Promise((resolve) => setTimeout(resolve, interval));
+        try {
+            const nextJobs = (await jsonFetch(`${apiURI}/dash/apps/${appId}/indexing-jobs/group/${groupId}`, {
+                method: 'GET',
+                headers: {
+                    Authorization: `Bearer ${token}`,
+                },
+            })).jobs;
+            onFetch(nextJobs);
+            if (allJobsComplete(nextJobs)) {
+                return nextJobs;
             }
-            catch (e) {
-                if (errorCount > 3) {
-                    throw e;
-                }
-                else {
-                    errorCount++;
-                    interval = Math.min(interval * 2, 10000);
-                }
+            errorCount = 0;
+            const lastUpdate = latestJobUpdate(lastJobs);
+            const thisUpdate = latestJobUpdate(nextJobs);
+            interval =
+                thisUpdate === null || (lastUpdate && lastUpdate >= thisUpdate)
+                    ? Math.min(interval * 2, 10000)
+                    : 100;
+        }
+        catch (e) {
+            if (errorCount > 3) {
+                throw e;
+            }
+            else {
+                errorCount++;
+                interval = Math.min(interval * 2, 10000);
             }
         }
-        return lastJobs;
-    });
+    }
+    return lastJobs;
 }
 function formatJob(job) {
-    var _a;
     const baseJob = {
         id: job.id,
         createdAt: new Date(job.created_at),
@@ -521,7 +499,7 @@ function formatJob(job) {
         workEstimate: job.work_estimate,
         workCompleted: job.work_completed,
         error: job.error,
-        invalidTriplesSample: (_a = job.invalid_triples_sample) === null || _a === void 0 ? void 0 : _a.map((s) => {
+        invalidTriplesSample: job.invalid_triples_sample?.map((s) => {
             return { entityId: s.entity_id, value: s.value, jsonType: s.json_type };
         }),
     };
@@ -532,13 +510,21 @@ function formatJob(job) {
         case 'required':
         case 'remove-required':
         case 'remove-unique': {
-            return Object.assign(Object.assign({}, baseJob), { type: job.job_type });
+            return { ...baseJob, type: job.job_type };
         }
         case 'check-data-type': {
-            return Object.assign(Object.assign({}, baseJob), { type: job.job_type, checkedDataType: job.checked_data_type });
+            return {
+                ...baseJob,
+                type: job.job_type,
+                checkedDataType: job.checked_data_type,
+            };
         }
         case 'unique': {
-            return Object.assign(Object.assign({}, baseJob), { type: job.job_type, invalidUniqueValue: job.invalid_unique_value });
+            return {
+                ...baseJob,
+                type: job.job_type,
+                invalidUniqueValue: job.invalid_unique_value,
+            };
         }
         default: {
             const neverType = job.job_type;
@@ -569,23 +555,27 @@ function stepSummary(steps) {
     };
 }
 function schemaPush(apiURI, token, appId, body) {
-    return new ProgressPromise((progress, resolve, reject) => __awaiter(this, void 0, void 0, function* () {
+    return new ProgressPromise(async (progress, resolve, reject) => {
         try {
-            const resp = yield jsonFetch(`${apiURI}/superadmin/apps/${appId}/schema/push/apply`, {
+            const resp = await jsonFetch(`${apiURI}/superadmin/apps/${appId}/schema/push/apply`, {
                 method: 'POST',
                 headers: {
                     'Content-Type': 'application/json',
                     Authorization: `Bearer ${token}`,
                 },
-                body: JSON.stringify(Object.assign(Object.assign({}, body), { check_types: true, supports_background_updates: true })),
+                body: JSON.stringify({
+                    ...body,
+                    check_types: true,
+                    supports_background_updates: true,
+                }),
             });
             const indexingJobs = resp['indexing-jobs'];
             const jobs = !indexingJobs
                 ? []
-                : yield jobFetchLoop(apiURI, token, appId, indexingJobs['group-id'], indexingJobs['jobs'], (jobs) => {
+                : await jobFetchLoop(apiURI, token, appId, indexingJobs['group-id'], indexingJobs['jobs'], (jobs) => {
                     progress(stepSummary(translatePushSteps(resp.steps, jobs)));
                 });
-            const schemaRes = yield getAppSchema(apiURI, token, appId);
+            const schemaRes = await getAppSchema(apiURI, token, appId);
             resolve({
                 newSchema: schemaRes.schema,
                 steps: translatePushSteps(resp.steps, jobs),
@@ -595,32 +585,28 @@ function schemaPush(apiURI, token, appId, body) {
         catch (e) {
             reject(e);
         }
-    }));
+    });
 }
-function pushPerms(apiURI, token, appId, body) {
-    return __awaiter(this, void 0, void 0, function* () {
-        const result = yield jsonFetch(`${apiURI}/superadmin/apps/${appId}/perms`, {
-            method: 'POST',
-            headers: {
-                'Content-Type': 'application/json',
-                Authorization: `Bearer ${token}`,
-            },
-            body: JSON.stringify({ code: body.perms }),
-        });
-        return { perms: result.rules.code };
+async function pushPerms(apiURI, token, appId, body) {
+    const result = await jsonFetch(`${apiURI}/superadmin/apps/${appId}/perms`, {
+        method: 'POST',
+        headers: {
+            'Content-Type': 'application/json',
+            Authorization: `Bearer ${token}`,
+        },
+        body: JSON.stringify({ code: body.perms }),
     });
+    return { perms: result.rules.code };
 }
-function tokenInfo(apiURI, token) {
-    return __awaiter(this, void 0, void 0, function* () {
-        const result = yield jsonFetch(`${apiURI}/platform/oauth/token-info?access_token=${token}`, {
-            method: 'GET',
-        });
-        return {
-            tokenType: result.token_type,
-            scopes: result.scopes,
-            expiresAt: new Date(Date.now() + (result.expires_in - 60) * 1000),
-        };
+async function tokenInfo(apiURI, token) {
+    const result = await jsonFetch(`${apiURI}/platform/oauth/token-info?access_token=${token}`, {
+        method: 'GET',
     });
+    return {
+        tokenType: result.token_type,
+        scopes: result.scopes,
+        expiresAt: new Date(Date.now() + (result.expires_in - 60) * 1000),
+    };
 }
 export class PlatformApiMissingAuthError extends Error {
     constructor() {
@@ -643,6 +629,8 @@ export class PlatformApiMissingAuthError extends Error {
  * ```
  */
 export class PlatformApi {
+    #auth;
+    #apiURI;
     /**
      * @param config – Runtime configuration.
      * @param config.auth.token – OAuth access-token obtained via the oauth flow
@@ -650,83 +638,76 @@ export class PlatformApi {
      * @throws {Error} When `token` is missing.
      */
     constructor(config) {
-        _PlatformApi_auth.set(this, void 0);
-        _PlatformApi_apiURI.set(this, void 0);
-        __classPrivateFieldSet(this, _PlatformApi_auth, config === null || config === void 0 ? void 0 : config.auth, "f");
-        __classPrivateFieldSet(this, _PlatformApi_apiURI, (config === null || config === void 0 ? void 0 : config.apiURI) || 'https://api.instantdb.com', "f");
+        this.#auth = config?.auth;
+        this.#apiURI = config?.apiURI || 'https://api.instantdb.com';
     }
     token() {
-        if (!__classPrivateFieldGet(this, _PlatformApi_auth, "f")) {
+        if (!this.#auth) {
             throw new PlatformApiMissingAuthError();
         }
-        if ('token' in __classPrivateFieldGet(this, _PlatformApi_auth, "f")) {
-            return __classPrivateFieldGet(this, _PlatformApi_auth, "f").token;
+        if ('token' in this.#auth) {
+            return this.#auth.token;
         }
-        return __classPrivateFieldGet(this, _PlatformApi_auth, "f").accessToken;
+        return this.#auth.accessToken;
     }
     canRefreshToken() {
-        if (!__classPrivateFieldGet(this, _PlatformApi_auth, "f")) {
+        if (!this.#auth) {
             throw new PlatformApiMissingAuthError();
         }
-        return ('refreshToken' in __classPrivateFieldGet(this, _PlatformApi_auth, "f") &&
-            'clientId' in __classPrivateFieldGet(this, _PlatformApi_auth, "f") &&
-            'clientSecret' in __classPrivateFieldGet(this, _PlatformApi_auth, "f") &&
-            __classPrivateFieldGet(this, _PlatformApi_auth, "f").refreshToken != null &&
-            __classPrivateFieldGet(this, _PlatformApi_auth, "f").clientId != null &&
-            __classPrivateFieldGet(this, _PlatformApi_auth, "f").clientSecret != null);
+        return ('refreshToken' in this.#auth &&
+            'clientId' in this.#auth &&
+            'clientSecret' in this.#auth &&
+            this.#auth.refreshToken != null &&
+            this.#auth.clientId != null &&
+            this.#auth.clientSecret != null);
     }
-    refreshToken() {
-        return __awaiter(this, void 0, void 0, function* () {
-            if (!__classPrivateFieldGet(this, _PlatformApi_auth, "f")) {
-                throw new PlatformApiMissingAuthError();
-            }
-            if (!this.canRefreshToken() ||
-                // Checked in canRefreshToken, but this lets
-                // typescript refine this.#auth here
-                !('clientId' in __classPrivateFieldGet(this, _PlatformApi_auth, "f"))) {
-                return null;
-            }
-            const token = yield exchangeRefreshToken({
-                apiURI: __classPrivateFieldGet(this, _PlatformApi_apiURI, "f"),
-                clientId: __classPrivateFieldGet(this, _PlatformApi_auth, "f").clientId,
-                clientSecret: __classPrivateFieldGet(this, _PlatformApi_auth, "f").clientSecret,
-                refreshToken: __classPrivateFieldGet(this, _PlatformApi_auth, "f").refreshToken,
-            });
-            __classPrivateFieldGet(this, _PlatformApi_auth, "f").accessToken = token.accessToken;
-            if (__classPrivateFieldGet(this, _PlatformApi_auth, "f").onRefresh) {
-                yield __classPrivateFieldGet(this, _PlatformApi_auth, "f").onRefresh(token);
-            }
-            return token;
+    async refreshToken() {
+        if (!this.#auth) {
+            throw new PlatformApiMissingAuthError();
+        }
+        if (!this.canRefreshToken() ||
+            // Checked in canRefreshToken, but this lets
+            // typescript refine this.#auth here
+            !('clientId' in this.#auth)) {
+            return null;
+        }
+        const token = await exchangeRefreshToken({
+            apiURI: this.#apiURI,
+            clientId: this.#auth.clientId,
+            clientSecret: this.#auth.clientSecret,
+            refreshToken: this.#auth.refreshToken,
         });
+        this.#auth.accessToken = token.accessToken;
+        if (this.#auth.onRefresh) {
+            await this.#auth.onRefresh(token);
+        }
+        return token;
     }
-    withRetry(f, args) {
-        return __awaiter(this, void 0, void 0, function* () {
-            var _a, _b;
-            let attempt = 0;
-            const [apiURI, tokenInArg, ...restArgs] = args;
-            let token = tokenInArg;
-            while (attempt < 2) {
-                try {
-                    return yield f(apiURI, token, ...restArgs);
-                }
-                catch (e) {
-                    if (e instanceof InstantAPIError &&
-                        (e.status === 401 ||
-                            ((_a = e.body) === null || _a === void 0 ? void 0 : _a.type) === 'record-expired' ||
-                            (((_b = e.body) === null || _b === void 0 ? void 0 : _b.type) === 'record-not-found' &&
-                                e.body.hint['record-type'].match(/token/i))) &&
-                        this.canRefreshToken()) {
-                        const refreshedToken = yield this.refreshToken();
-                        if (refreshedToken) {
-                            token = refreshedToken.accessToken;
-                            attempt++;
-                            continue;
-                        }
+    async withRetry(f, args) {
+        let attempt = 0;
+        const [apiURI, tokenInArg, ...restArgs] = args;
+        let token = tokenInArg;
+        while (attempt < 2) {
+            try {
+                return await f(apiURI, token, ...restArgs);
+            }
+            catch (e) {
+                if (e instanceof InstantAPIError &&
+                    (e.status === 401 ||
+                        e.body?.type === 'record-expired' ||
+                        (e.body?.type === 'record-not-found' &&
+                            e.body.hint['record-type'].match(/token/i))) &&
+                    this.canRefreshToken()) {
+                    const refreshedToken = await this.refreshToken();
+                    if (refreshedToken) {
+                        token = refreshedToken.accessToken;
+                        attempt++;
+                        continue;
                     }
-                    throw e;
                 }
+                throw e;
             }
-        });
+        }
     }
     /**
      * Fetch a single app by its id.
@@ -745,10 +726,8 @@ export class PlatformApi {
      * @returns A typed wrapper containing the app, whose shape is expanded
      *   according to `Opts`.
      */
-    getApp(appId, opts) {
-        return __awaiter(this, void 0, void 0, function* () {
-            return this.withRetry(getApp, [__classPrivateFieldGet(this, _PlatformApi_apiURI, "f"), this.token(), appId, opts]);
-        });
+    async getApp(appId, opts) {
+        return this.withRetry(getApp, [this.#apiURI, this.token(), appId, opts]);
     }
     /**
      * List **all apps** owned by the auth owner.
@@ -764,10 +743,8 @@ export class PlatformApi {
      * @param opts – `{ includeSchema?: boolean; includePerms?: boolean }`
      * @returns An array wrapper; each element’s shape follows `Opts`.
      */
-    getApps(opts) {
-        return __awaiter(this, void 0, void 0, function* () {
-            return this.withRetry(getApps, [__classPrivateFieldGet(this, _PlatformApi_apiURI, "f"), this.token(), opts]);
-        });
+    async getApps(opts) {
+        return this.withRetry(getApps, [this.#apiURI, this.token(), opts]);
     }
     /**
      * List **all orgs** that the auth owner is a member of.
@@ -778,10 +755,8 @@ export class PlatformApi {
      *
      * @returns An array of orgs
      */
-    getOrgs() {
-        return __awaiter(this, void 0, void 0, function* () {
-            return this.withRetry(getOrgs, [__classPrivateFieldGet(this, _PlatformApi_apiURI, "f"), this.token()]);
-        });
+    async getOrgs() {
+        return this.withRetry(getOrgs, [this.#apiURI, this.token()]);
     }
     /**
      * List **all apps** owned by the auth owner.
@@ -797,15 +772,13 @@ export class PlatformApi {
      * @param opts – `{ includeSchema?: boolean; includePerms?: boolean }`
      * @returns An array wrapper; each element’s shape follows `Opts`.
      */
-    getAppsForOrg(orgId, opts) {
-        return __awaiter(this, void 0, void 0, function* () {
-            return this.withRetry(getAppsForOrg, [
-                __classPrivateFieldGet(this, _PlatformApi_apiURI, "f"),
-                this.token(),
-                orgId,
-                opts,
-            ]);
-        });
+    async getAppsForOrg(orgId, opts) {
+        return this.withRetry(getAppsForOrg, [
+            this.#apiURI,
+            this.token(),
+            orgId,
+            opts,
+        ]);
     }
     /**
      * Gets the schema for an app by its id.
@@ -816,10 +789,8 @@ export class PlatformApi {
      *
      * @param appId -- UUID of the app
      */
-    getSchema(appId) {
-        return __awaiter(this, void 0, void 0, function* () {
-            return this.withRetry(getAppSchema, [__classPrivateFieldGet(this, _PlatformApi_apiURI, "f"), this.token(), appId]);
-        });
+    async getSchema(appId) {
+        return this.withRetry(getAppSchema, [this.#apiURI, this.token(), appId]);
     }
     /**
      * Gets the permissions for an app by its id.
@@ -830,10 +801,8 @@ export class PlatformApi {
      *
      * @param appId -- UUID of the app
      */
-    getPerms(appId) {
-        return __awaiter(this, void 0, void 0, function* () {
-            return this.withRetry(getAppPerms, [__classPrivateFieldGet(this, _PlatformApi_apiURI, "f"), this.token(), appId]);
-        });
+    async getPerms(appId) {
+        return this.withRetry(getAppPerms, [this.#apiURI, this.token(), appId]);
     }
     /**
      * Create a new app.
@@ -861,10 +830,8 @@ export class PlatformApi {
      * @param fields.perms -- Optional permissions for the app
      * @param fields.orgId -- Optional id of the org that the app will be placed in
      */
-    createApp(fields) {
-        return __awaiter(this, void 0, void 0, function* () {
-            return this.withRetry(createApp, [__classPrivateFieldGet(this, _PlatformApi_apiURI, "f"), this.token(), fields]);
-        });
+    async createApp(fields) {
+        return this.withRetry(createApp, [this.#apiURI, this.token(), fields]);
     }
     /**
      * Create a new temporary app.
@@ -888,10 +855,8 @@ export class PlatformApi {
      * @param fields.schema -- Optional schema for the app
      * @param fields.perms -- Optional permissions for the app
      */
-    createTemporaryApp(fields) {
-        return __awaiter(this, void 0, void 0, function* () {
-            return createTemporaryApp(__classPrivateFieldGet(this, _PlatformApi_apiURI, "f"), fields);
-        });
+    async createTemporaryApp(fields) {
+        return createTemporaryApp(this.#apiURI, fields);
     }
     /**
      * Update the title of an app by its id.
@@ -905,15 +870,13 @@ export class PlatformApi {
      * @param appId -- UUID of the app
      * @param fields.title -- New title for the app
      */
-    updateApp(appId, fields) {
-        return __awaiter(this, void 0, void 0, function* () {
-            return this.withRetry(updateApp, [
-                __classPrivateFieldGet(this, _PlatformApi_apiURI, "f"),
-                this.token(),
-                appId,
-                fields,
-            ]);
-        });
+    async updateApp(appId, fields) {
+        return this.withRetry(updateApp, [
+            this.#apiURI,
+            this.token(),
+            appId,
+            fields,
+        ]);
     }
     /**
      * Delete an app by its id.
@@ -924,10 +887,8 @@ export class PlatformApi {
      *
      * @param appId -- UUID of the app
      */
-    deleteApp(appId) {
-        return __awaiter(this, void 0, void 0, function* () {
-            return this.withRetry(deleteApp, [__classPrivateFieldGet(this, _PlatformApi_apiURI, "f"), this.token(), appId]);
-        });
+    async deleteApp(appId) {
+        return this.withRetry(deleteApp, [this.#apiURI, this.token(), appId]);
     }
     /**
      * Dry-run a **schema push** and receive a _plan_ of steps the server would
@@ -937,15 +898,13 @@ export class PlatformApi {
      * const { steps } = await api.planSchemaPush(appId, body);
      * ```
      */
-    planSchemaPush(appId, body) {
-        return __awaiter(this, void 0, void 0, function* () {
-            return this.withRetry(planSchemaPush, [
-                __classPrivateFieldGet(this, _PlatformApi_apiURI, "f"),
-                this.token(),
-                appId,
-                body,
-            ]);
-        });
+    async planSchemaPush(appId, body) {
+        return this.withRetry(planSchemaPush, [
+            this.#apiURI,
+            this.token(),
+            appId,
+            body,
+        ]);
     }
     /**
      * Execute a **schema push**. The server returns a long-running job
@@ -974,19 +933,19 @@ export class PlatformApi {
      * ```
      */
     schemaPush(appId, body) {
-        if (!__classPrivateFieldGet(this, _PlatformApi_auth, "f")) {
+        if (!this.#auth) {
             throw new PlatformApiMissingAuthError();
         }
-        return new ProgressPromise((progress, resolve, reject) => __awaiter(this, void 0, void 0, function* () {
+        return new ProgressPromise(async (progress, resolve, reject) => {
             // It's tricky to add withRetry to the background process that fetches the jobs,
             // so we'll just refresh the token at the start.
             if (this.canRefreshToken()) {
                 try {
-                    yield this.refreshToken();
+                    await this.refreshToken();
                 }
                 catch (_e) { }
             }
-            schemaPush(__classPrivateFieldGet(this, _PlatformApi_apiURI, "f"), this.token(), appId, body).subscribe({
+            schemaPush(this.#apiURI, this.token(), appId, body).subscribe({
                 complete(v) {
                     resolve(v);
                 },
@@ -997,7 +956,7 @@ export class PlatformApi {
                     progress(v);
                 },
             });
-        }));
+        });
     }
     /**
      * Update permission rules for an app by its id.
@@ -1013,22 +972,17 @@ export class PlatformApi {
      * });
      * ```
      */
-    pushPerms(appId, body) {
-        return __awaiter(this, void 0, void 0, function* () {
-            if (!__classPrivateFieldGet(this, _PlatformApi_auth, "f")) {
-                throw new PlatformApiMissingAuthError();
-            }
-            return this.withRetry(pushPerms, [__classPrivateFieldGet(this, _PlatformApi_apiURI, "f"), this.token(), appId, body]);
-        });
+    async pushPerms(appId, body) {
+        if (!this.#auth) {
+            throw new PlatformApiMissingAuthError();
+        }
+        return this.withRetry(pushPerms, [this.#apiURI, this.token(), appId, body]);
     }
-    tokenInfo() {
-        return __awaiter(this, void 0, void 0, function* () {
-            if (!__classPrivateFieldGet(this, _PlatformApi_auth, "f")) {
-                throw new PlatformApiMissingAuthError();
-            }
-            return this.withRetry(tokenInfo, [__classPrivateFieldGet(this, _PlatformApi_apiURI, "f"), this.token()]);
-        });
+    async tokenInfo() {
+        if (!this.#auth) {
+            throw new PlatformApiMissingAuthError();
+        }
+        return this.withRetry(tokenInfo, [this.#apiURI, this.token()]);
     }
 }
-_PlatformApi_auth = new WeakMap(), _PlatformApi_apiURI = new WeakMap();
 //# sourceMappingURL=api.js.map