@kividb/client 0.1.2 → 0.1.4

package/README.md

@@ -180,6 +180,10 @@ const { data: objects } = await kdb.storage.from("avatars").list("user-42/");
 await kdb.storage.from("avatars").remove(["user-42/photo.png"]);
 
 const { data: signed } = await kdb.storage.from("private-docs").createSignedUrl("report.pdf", 3600);
+// signed *render* URL — a private-bucket thumbnail usable in an <img> tag:
+const { data: thumb } = await kdb.storage
+  .from("private-docs")
+  .createSignedUrl("photo.png", 3600, { transform: { width: 128, format: "webp" } });
 kdb.storage.from("avatars").getPublicUrl("user-42/photo.png");           // public buckets
 kdb.storage.from("avatars").getRenderUrl("user-42/photo.png", { width: 128, format: "webp" });
 ```

package/dist/index.cjs

@@ -725,9 +725,14 @@ var BucketApi = class {
       { token: this.token() }
     );
   }
-  /** Mint a time-boxed signed URL for a private object (default 1 hour). */
-  createSignedUrl(path, expiresIn = 3600) {
-    return request(
+  /**
+   * Mint a time-boxed signed URL for a private object (default 1 hour). Pass
+   * `transform` to get a signed RENDER URL instead — a private-bucket
+   * thumbnail that works in an `<img>` tag. The signature covers the object
+   * (not the transform), so one token serves any rendition of it.
+   */
+  async createSignedUrl(path, expiresIn = 3600, options = {}) {
+    const res = await request(
       `${this.ctx.storage}/${this.ctx.project}/sign/${encodeURIComponent(this.bucket)}/${encodePath(path)}`,
       {
         method: "POST",
@@ -735,6 +740,11 @@ var BucketApi = class {
         body: JSON.stringify({ expiresIn })
       }
     );
+    if (!res.data || !options.transform) return res;
+    const rendered = new URL(this.getRenderUrl(path, options.transform));
+    rendered.searchParams.set("exp", String(res.data.exp));
+    rendered.searchParams.set("token", res.data.token);
+    return { data: { ...res.data, url: rendered.toString() }, error: null };
   }
   /** The token-less public URL for an object in a public bucket. */
   getPublicUrl(path) {

package/dist/index.d.cts

@@ -491,8 +491,15 @@ declare class BucketApi {
     }>>;
     /** List objects in the bucket, optionally under a path prefix. */
     list(prefix?: string): Promise<KividbResponse<StorageObjectInfo[]>>;
-    /** Mint a time-boxed signed URL for a private object (default 1 hour). */
-    createSignedUrl(path: string, expiresIn?: number): Promise<KividbResponse<SignedUrl>>;
+    /**
+     * Mint a time-boxed signed URL for a private object (default 1 hour). Pass
+     * `transform` to get a signed RENDER URL instead — a private-bucket
+     * thumbnail that works in an `<img>` tag. The signature covers the object
+     * (not the transform), so one token serves any rendition of it.
+     */
+    createSignedUrl(path: string, expiresIn?: number, options?: {
+        transform?: TransformOptions;
+    }): Promise<KividbResponse<SignedUrl>>;
     /** The token-less public URL for an object in a public bucket. */
     getPublicUrl(path: string): string;
     /** A transform (render) URL — resize/reformat an image on the fly. */

package/dist/index.d.ts

@@ -491,8 +491,15 @@ declare class BucketApi {
     }>>;
     /** List objects in the bucket, optionally under a path prefix. */
     list(prefix?: string): Promise<KividbResponse<StorageObjectInfo[]>>;
-    /** Mint a time-boxed signed URL for a private object (default 1 hour). */
-    createSignedUrl(path: string, expiresIn?: number): Promise<KividbResponse<SignedUrl>>;
+    /**
+     * Mint a time-boxed signed URL for a private object (default 1 hour). Pass
+     * `transform` to get a signed RENDER URL instead — a private-bucket
+     * thumbnail that works in an `<img>` tag. The signature covers the object
+     * (not the transform), so one token serves any rendition of it.
+     */
+    createSignedUrl(path: string, expiresIn?: number, options?: {
+        transform?: TransformOptions;
+    }): Promise<KividbResponse<SignedUrl>>;
     /** The token-less public URL for an object in a public bucket. */
     getPublicUrl(path: string): string;
     /** A transform (render) URL — resize/reformat an image on the fly. */

package/dist/index.js

@@ -687,9 +687,14 @@ var BucketApi = class {
       { token: this.token() }
     );
   }
-  /** Mint a time-boxed signed URL for a private object (default 1 hour). */
-  createSignedUrl(path, expiresIn = 3600) {
-    return request(
+  /**
+   * Mint a time-boxed signed URL for a private object (default 1 hour). Pass
+   * `transform` to get a signed RENDER URL instead — a private-bucket
+   * thumbnail that works in an `<img>` tag. The signature covers the object
+   * (not the transform), so one token serves any rendition of it.
+   */
+  async createSignedUrl(path, expiresIn = 3600, options = {}) {
+    const res = await request(
       `${this.ctx.storage}/${this.ctx.project}/sign/${encodeURIComponent(this.bucket)}/${encodePath(path)}`,
       {
         method: "POST",
@@ -697,6 +702,11 @@ var BucketApi = class {
         body: JSON.stringify({ expiresIn })
       }
     );
+    if (!res.data || !options.transform) return res;
+    const rendered = new URL(this.getRenderUrl(path, options.transform));
+    rendered.searchParams.set("exp", String(res.data.exp));
+    rendered.searchParams.set("token", res.data.token);
+    return { data: { ...res.data, url: rendered.toString() }, error: null };
   }
   /** The token-less public URL for an object in a public bucket. */
   getPublicUrl(path) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@kividb/client",
-  "version": "0.1.2",
+  "version": "0.1.4",
   "description": "JavaScript/TypeScript client SDK for kividb — typed database queries, auth, realtime, and storage",
   "license": "MIT",
   "repository": {