@merittdev/horus-lens 0.0.3 → 0.1.1

package/dist/server.cjs

@@ -1,109 +0,0 @@
-"use strict";
-var __defProp = Object.defineProperty;
-var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
-var __getOwnPropNames = Object.getOwnPropertyNames;
-var __hasOwnProp = Object.prototype.hasOwnProperty;
-var __export = (target, all) => {
-  for (var name in all)
-    __defProp(target, name, { get: all[name], enumerable: true });
-};
-var __copyProps = (to, from, except, desc) => {
-  if (from && typeof from === "object" || typeof from === "function") {
-    for (let key of __getOwnPropNames(from))
-      if (!__hasOwnProp.call(to, key) && key !== except)
-        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
-  }
-  return to;
-};
-var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
-
-// src/server.ts
-var server_exports = {};
-__export(server_exports, {
-  HOSTED_LENS_API_URL: () => HOSTED_LENS_API_URL,
-  createLensProjectsRoute: () => createLensProjectsRoute,
-  createLensProxy: () => createLensProxy
-});
-module.exports = __toCommonJS(server_exports);
-
-// ../dashboard/dist/server.js
-var HOSTED_LENS_API_URL = "https://api-lens.meritt.app";
-function envProjects() {
-  const raw = process.env.LENS_PROJECTS;
-  if (raw) {
-    try {
-      const parsed = JSON.parse(raw);
-      if (Array.isArray(parsed)) {
-        return parsed.filter(
-          (p) => !!p && typeof p.name === "string" && typeof p.accessId === "string" && typeof p.secretKey === "string"
-        );
-      }
-    } catch {
-      console.warn("[lens] LENS_PROJECTS is not valid JSON \u2014 ignoring");
-    }
-  }
-  const accessId = process.env.LENS_ACCESS_ID;
-  const secretKey = process.env.LENS_SECRET_KEY;
-  if (accessId && secretKey) return [{ name: "default", accessId, secretKey }];
-  return [];
-}
-function resolveOptions(options) {
-  return {
-    apiUrl: (options?.apiUrl ?? process.env.LENS_API_URL ?? HOSTED_LENS_API_URL).replace(/\/+$/, ""),
-    projects: options?.projects ?? envProjects(),
-    adminToken: options?.adminToken ?? process.env.LENS_ADMIN_TOKEN ?? ""
-  };
-}
-function pickProject(projects, selector) {
-  if (projects.length === 0) return null;
-  if (selector) {
-    const match = projects.find((p) => p.name === selector || p.accessId === selector);
-    if (match) return match;
-  }
-  return projects[0] ?? null;
-}
-function createLensProxy(options) {
-  const handler = async (req, ctx) => {
-    const { apiUrl, projects, adminToken } = resolveOptions(options);
-    const { path } = await ctx.params;
-    const search = new URL(req.url).search;
-    const target = `${apiUrl}/${path.join("/")}${search}`;
-    const isProjectCreate = req.method === "POST" && path.join("/") === "v1/projects";
-    const wizardToken = req.headers.get("x-lens-token");
-    const project = pickProject(projects, req.headers.get("x-lens-project"));
-    const token = isProjectCreate ? adminToken : wizardToken?.startsWith("las_") ? wizardToken : project?.secretKey ?? "";
-    const body = req.method === "GET" || req.method === "HEAD" ? void 0 : await req.text();
-    const res = await fetch(target, {
-      method: req.method,
-      headers: {
-        authorization: `Bearer ${token}`,
-        ...body ? { "content-type": req.headers.get("content-type") ?? "application/json" } : {}
-      },
-      body,
-      cache: "no-store"
-    });
-    const buffer = await res.arrayBuffer();
-    return new Response(buffer, {
-      status: res.status,
-      headers: { "content-type": res.headers.get("content-type") ?? "application/json" }
-    });
-  };
-  return { GET: handler, POST: handler, PUT: handler, PATCH: handler, DELETE: handler };
-}
-function createLensProjectsRoute(options) {
-  return {
-    GET: () => {
-      const { projects } = resolveOptions(options);
-      return Response.json({
-        projects: projects.map(({ name, accessId }) => ({ name, accessId }))
-      });
-    }
-  };
-}
-// Annotate the CommonJS export names for ESM import in node:
-0 && (module.exports = {
-  HOSTED_LENS_API_URL,
-  createLensProjectsRoute,
-  createLensProxy
-});
-//# sourceMappingURL=server.cjs.map

package/dist/server.cjs.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/server.ts","../../dashboard/src/server/proxy.ts"],"sourcesContent":["export * from '@horus-lens/dashboard/server';\n","/**\n * Server-side glue for hosting <LensDashboard> — framework-agnostic (standard\n * Request/Response, so it drops into Next.js App Router route files, Remix\n * resource routes, etc.).\n *\n * This is the ONLY part of the package that reads environment variables, and\n * it only ever executes on the host's server:\n *\n *   LENS_PROJECTS     JSON array: [{\"name\",\"accessId\",\"secretKey\"}, …]\n *   LENS_ACCESS_ID /\n *   LENS_SECRET_KEY   legacy single-project fallback\n *   LENS_ADMIN_TOKEN  optional — enables project creation from the wizard\n *   LENS_API_URL      optional override (self-hosting / local dev)\n *\n * Usage (Next.js):\n *   // app/api/lens/[...path]/route.ts\n *   import { createLensProxy } from '@merittdev/horus-lens/server'\n *   export const { GET, POST, PUT, PATCH, DELETE } = createLensProxy()\n *\n *   // app/api/lens-projects/route.ts\n *   import { createLensProjectsRoute } from '@merittdev/horus-lens/server'\n *   export const { GET } = createLensProjectsRoute()\n */\n\n// Runs under Node on the host's server; typed locally to keep @types/node out\n// of this browser-focused package.\ndeclare const process: { env: Record<string, string | undefined> };\n\nexport const HOSTED_LENS_API_URL = 'https://api-lens.meritt.app';\n\nexport interface LensProjectEntry {\n  name: string;\n  accessId: string;\n  secretKey: string;\n}\n\nexport interface LensServerOptions {\n  /** Lens API base. Default: env LENS_API_URL, else the hosted API. */\n  apiUrl?: string;\n  /** Project registry. Default: env LENS_PROJECTS (JSON), else the legacy pair. */\n  projects?: LensProjectEntry[];\n  /** Admin token for POST /v1/projects. Default: env LENS_ADMIN_TOKEN. */\n  adminToken?: string;\n}\n\nfunction envProjects(): LensProjectEntry[] {\n  const raw = process.env.LENS_PROJECTS;\n  if (raw) {\n    try {\n      const parsed: unknown = JSON.parse(raw);\n      if (Array.isArray(parsed)) {\n        return parsed.filter(\n          (p): p is LensProjectEntry =>\n            !!p &&\n            typeof (p as LensProjectEntry).name === 'string' &&\n            typeof (p as LensProjectEntry).accessId === 'string' &&\n            typeof (p as LensProjectEntry).secretKey === 'string',\n        );\n      }\n    } catch {\n      console.warn('[lens] LENS_PROJECTS is not valid JSON — ignoring');\n    }\n  }\n  const accessId = process.env.LENS_ACCESS_ID;\n  const secretKey = process.env.LENS_SECRET_KEY;\n  if (accessId && secretKey) return [{ name: 'default', accessId, secretKey }];\n  return [];\n}\n\nfunction resolveOptions(options?: LensServerOptions) {\n  return {\n    apiUrl: (options?.apiUrl ?? process.env.LENS_API_URL ?? HOSTED_LENS_API_URL).replace(/\\/+$/, ''),\n    projects: options?.projects ?? envProjects(),\n    adminToken: options?.adminToken ?? process.env.LENS_ADMIN_TOKEN ?? '',\n  };\n}\n\nfunction pickProject(projects: LensProjectEntry[], selector: string | null): LensProjectEntry | null {\n  if (projects.length === 0) return null;\n  if (selector) {\n    const match = projects.find((p) => p.name === selector || p.accessId === selector);\n    if (match) return match;\n  }\n  return projects[0] ?? null;\n}\n\n/** Next.js App Router passes ctx.params as a Promise (15+) or plain object. */\ntype RouteContext = { params: { path: string[] } | Promise<{ path: string[] }> };\ntype ProxyHandler = (req: Request, ctx: RouteContext) => Promise<Response>;\n\n/**\n * Authenticated pass-through to the Lens API. Credentials attach HERE, on the\n * server: the browser only ever names a project via `x-lens-project`. During\n * first-run provisioning the wizard forwards its just-minted secret via\n * `x-lens-token`, which wins over the registry.\n */\nexport function createLensProxy(options?: LensServerOptions): Record<\n  'GET' | 'POST' | 'PUT' | 'PATCH' | 'DELETE',\n  ProxyHandler\n> {\n  const handler: ProxyHandler = async (req, ctx) => {\n    const { apiUrl, projects, adminToken } = resolveOptions(options);\n    const { path } = await ctx.params;\n    const search = new URL(req.url).search;\n    const target = `${apiUrl}/${path.join('/')}${search}`;\n\n    const isProjectCreate = req.method === 'POST' && path.join('/') === 'v1/projects';\n    const wizardToken = req.headers.get('x-lens-token');\n    const project = pickProject(projects, req.headers.get('x-lens-project'));\n\n    const token = isProjectCreate\n      ? adminToken\n      : wizardToken?.startsWith('las_')\n        ? wizardToken\n        : (project?.secretKey ?? '');\n\n    const body = req.method === 'GET' || req.method === 'HEAD' ? undefined : await req.text();\n\n    const res = await fetch(target, {\n      method: req.method,\n      headers: {\n        authorization: `Bearer ${token}`,\n        ...(body ? { 'content-type': req.headers.get('content-type') ?? 'application/json' } : {}),\n      },\n      body,\n      cache: 'no-store',\n    });\n\n    const buffer = await res.arrayBuffer();\n    return new Response(buffer, {\n      status: res.status,\n      headers: { 'content-type': res.headers.get('content-type') ?? 'application/json' },\n    });\n  };\n\n  return { GET: handler, POST: handler, PUT: handler, PATCH: handler, DELETE: handler };\n}\n\n/** Names + access ids for the project switcher — never the secrets. */\nexport function createLensProjectsRoute(options?: LensServerOptions): { GET: () => Response } {\n  return {\n    GET: () => {\n      const { projects } = resolveOptions(options);\n      return Response.json({\n        projects: projects.map(({ name, accessId }) => ({ name, accessId })),\n      });\n    },\n  };\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;;;AC4BO,IAAM,sBAAsB;AAiBnC,SAAS,cAAkC;AACzC,QAAM,MAAM,QAAQ,IAAI;AACxB,MAAI,KAAK;AACP,QAAI;AACF,YAAM,SAAkB,KAAK,MAAM,GAAG;AACtC,UAAI,MAAM,QAAQ,MAAM,GAAG;AACzB,eAAO,OAAO;UACZ,CAAC,MACC,CAAC,CAAC,KACF,OAAQ,EAAuB,SAAS,YACxC,OAAQ,EAAuB,aAAa,YAC5C,OAAQ,EAAuB,cAAc;QACjD;MACF;IACF,QAAQ;AACN,cAAQ,KAAK,wDAAmD;IAClE;EACF;AACA,QAAM,WAAW,QAAQ,IAAI;AAC7B,QAAM,YAAY,QAAQ,IAAI;AAC9B,MAAI,YAAY,UAAW,QAAO,CAAC,EAAE,MAAM,WAAW,UAAU,UAAU,CAAC;AAC3E,SAAO,CAAC;AACV;AAEA,SAAS,eAAe,SAA6B;AACnD,SAAO;IACL,SAAS,SAAS,UAAU,QAAQ,IAAI,gBAAgB,qBAAqB,QAAQ,QAAQ,EAAE;IAC/F,UAAU,SAAS,YAAY,YAAY;IAC3C,YAAY,SAAS,cAAc,QAAQ,IAAI,oBAAoB;EACrE;AACF;AAEA,SAAS,YAAY,UAA8B,UAAkD;AACnG,MAAI,SAAS,WAAW,EAAG,QAAO;AAClC,MAAI,UAAU;AACZ,UAAM,QAAQ,SAAS,KAAK,CAAC,MAAM,EAAE,SAAS,YAAY,EAAE,aAAa,QAAQ;AACjF,QAAI,MAAO,QAAO;EACpB;AACA,SAAO,SAAS,CAAC,KAAK;AACxB;AAYO,SAAS,gBAAgB,SAG9B;AACA,QAAM,UAAwB,OAAO,KAAK,QAAQ;AAChD,UAAM,EAAE,QAAQ,UAAU,WAAW,IAAI,eAAe,OAAO;AAC/D,UAAM,EAAE,KAAK,IAAI,MAAM,IAAI;AAC3B,UAAM,SAAS,IAAI,IAAI,IAAI,GAAG,EAAE;AAChC,UAAM,SAAS,GAAG,MAAM,IAAI,KAAK,KAAK,GAAG,CAAC,GAAG,MAAM;AAEnD,UAAM,kBAAkB,IAAI,WAAW,UAAU,KAAK,KAAK,GAAG,MAAM;AACpE,UAAM,cAAc,IAAI,QAAQ,IAAI,cAAc;AAClD,UAAM,UAAU,YAAY,UAAU,IAAI,QAAQ,IAAI,gBAAgB,CAAC;AAEvE,UAAM,QAAQ,kBACV,aACA,aAAa,WAAW,MAAM,IAC5B,cACC,SAAS,aAAa;AAE7B,UAAM,OAAO,IAAI,WAAW,SAAS,IAAI,WAAW,SAAS,SAAY,MAAM,IAAI,KAAK;AAExF,UAAM,MAAM,MAAM,MAAM,QAAQ;MAC9B,QAAQ,IAAI;MACZ,SAAS;QACP,eAAe,UAAU,KAAK;QAC9B,GAAI,OAAO,EAAE,gBAAgB,IAAI,QAAQ,IAAI,cAAc,KAAK,mBAAmB,IAAI,CAAC;MAC1F;MACA;MACA,OAAO;IACT,CAAC;AAED,UAAM,SAAS,MAAM,IAAI,YAAY;AACrC,WAAO,IAAI,SAAS,QAAQ;MAC1B,QAAQ,IAAI;MACZ,SAAS,EAAE,gBAAgB,IAAI,QAAQ,IAAI,cAAc,KAAK,mBAAmB;IACnF,CAAC;EACH;AAEA,SAAO,EAAE,KAAK,SAAS,MAAM,SAAS,KAAK,SAAS,OAAO,SAAS,QAAQ,QAAQ;AACtF;AAGO,SAAS,wBAAwB,SAAsD;AAC5F,SAAO;IACL,KAAK,MAAM;AACT,YAAM,EAAE,SAAS,IAAI,eAAe,OAAO;AAC3C,aAAO,SAAS,KAAK;QACnB,UAAU,SAAS,IAAI,CAAC,EAAE,MAAM,SAAS,OAAO,EAAE,MAAM,SAAS,EAAE;MACrE,CAAC;IACH;EACF;AACF;","names":[]}

package/dist/server.d.cts

@@ -1,59 +0,0 @@
-/**
- * Server-side glue for hosting <LensDashboard> — framework-agnostic (standard
- * Request/Response, so it drops into Next.js App Router route files, Remix
- * resource routes, etc.).
- *
- * This is the ONLY part of the package that reads environment variables, and
- * it only ever executes on the host's server:
- *
- *   LENS_PROJECTS     JSON array: [{"name","accessId","secretKey"}, …]
- *   LENS_ACCESS_ID /
- *   LENS_SECRET_KEY   legacy single-project fallback
- *   LENS_ADMIN_TOKEN  optional — enables project creation from the wizard
- *   LENS_API_URL      optional override (self-hosting / local dev)
- *
- * Usage (Next.js):
- *   // app/api/lens/[...path]/route.ts
- *   import { createLensProxy } from '@merittdev/horus-lens/server'
- *   export const { GET, POST, PUT, PATCH, DELETE } = createLensProxy()
- *
- *   // app/api/lens-projects/route.ts
- *   import { createLensProjectsRoute } from '@merittdev/horus-lens/server'
- *   export const { GET } = createLensProjectsRoute()
- */
-declare const HOSTED_LENS_API_URL = "https://api-lens.meritt.app";
-interface LensProjectEntry {
-    name: string;
-    accessId: string;
-    secretKey: string;
-}
-interface LensServerOptions {
-    /** Lens API base. Default: env LENS_API_URL, else the hosted API. */
-    apiUrl?: string;
-    /** Project registry. Default: env LENS_PROJECTS (JSON), else the legacy pair. */
-    projects?: LensProjectEntry[];
-    /** Admin token for POST /v1/projects. Default: env LENS_ADMIN_TOKEN. */
-    adminToken?: string;
-}
-/** Next.js App Router passes ctx.params as a Promise (15+) or plain object. */
-type RouteContext = {
-    params: {
-        path: string[];
-    } | Promise<{
-        path: string[];
-    }>;
-};
-type ProxyHandler = (req: Request, ctx: RouteContext) => Promise<Response>;
-/**
- * Authenticated pass-through to the Lens API. Credentials attach HERE, on the
- * server: the browser only ever names a project via `x-lens-project`. During
- * first-run provisioning the wizard forwards its just-minted secret via
- * `x-lens-token`, which wins over the registry.
- */
-declare function createLensProxy(options?: LensServerOptions): Record<'GET' | 'POST' | 'PUT' | 'PATCH' | 'DELETE', ProxyHandler>;
-/** Names + access ids for the project switcher — never the secrets. */
-declare function createLensProjectsRoute(options?: LensServerOptions): {
-    GET: () => Response;
-};
-
-export { HOSTED_LENS_API_URL, type LensProjectEntry, type LensServerOptions, createLensProjectsRoute, createLensProxy };

package/dist/server.d.ts

@@ -1,59 +0,0 @@
-/**
- * Server-side glue for hosting <LensDashboard> — framework-agnostic (standard
- * Request/Response, so it drops into Next.js App Router route files, Remix
- * resource routes, etc.).
- *
- * This is the ONLY part of the package that reads environment variables, and
- * it only ever executes on the host's server:
- *
- *   LENS_PROJECTS     JSON array: [{"name","accessId","secretKey"}, …]
- *   LENS_ACCESS_ID /
- *   LENS_SECRET_KEY   legacy single-project fallback
- *   LENS_ADMIN_TOKEN  optional — enables project creation from the wizard
- *   LENS_API_URL      optional override (self-hosting / local dev)
- *
- * Usage (Next.js):
- *   // app/api/lens/[...path]/route.ts
- *   import { createLensProxy } from '@merittdev/horus-lens/server'
- *   export const { GET, POST, PUT, PATCH, DELETE } = createLensProxy()
- *
- *   // app/api/lens-projects/route.ts
- *   import { createLensProjectsRoute } from '@merittdev/horus-lens/server'
- *   export const { GET } = createLensProjectsRoute()
- */
-declare const HOSTED_LENS_API_URL = "https://api-lens.meritt.app";
-interface LensProjectEntry {
-    name: string;
-    accessId: string;
-    secretKey: string;
-}
-interface LensServerOptions {
-    /** Lens API base. Default: env LENS_API_URL, else the hosted API. */
-    apiUrl?: string;
-    /** Project registry. Default: env LENS_PROJECTS (JSON), else the legacy pair. */
-    projects?: LensProjectEntry[];
-    /** Admin token for POST /v1/projects. Default: env LENS_ADMIN_TOKEN. */
-    adminToken?: string;
-}
-/** Next.js App Router passes ctx.params as a Promise (15+) or plain object. */
-type RouteContext = {
-    params: {
-        path: string[];
-    } | Promise<{
-        path: string[];
-    }>;
-};
-type ProxyHandler = (req: Request, ctx: RouteContext) => Promise<Response>;
-/**
- * Authenticated pass-through to the Lens API. Credentials attach HERE, on the
- * server: the browser only ever names a project via `x-lens-project`. During
- * first-run provisioning the wizard forwards its just-minted secret via
- * `x-lens-token`, which wins over the registry.
- */
-declare function createLensProxy(options?: LensServerOptions): Record<'GET' | 'POST' | 'PUT' | 'PATCH' | 'DELETE', ProxyHandler>;
-/** Names + access ids for the project switcher — never the secrets. */
-declare function createLensProjectsRoute(options?: LensServerOptions): {
-    GET: () => Response;
-};
-
-export { HOSTED_LENS_API_URL, type LensProjectEntry, type LensServerOptions, createLensProjectsRoute, createLensProxy };

package/dist/server.js

@@ -1,82 +0,0 @@
-import "./chunk-PZ5AY32C.js";
-
-// ../dashboard/dist/server.js
-var HOSTED_LENS_API_URL = "https://api-lens.meritt.app";
-function envProjects() {
-  const raw = process.env.LENS_PROJECTS;
-  if (raw) {
-    try {
-      const parsed = JSON.parse(raw);
-      if (Array.isArray(parsed)) {
-        return parsed.filter(
-          (p) => !!p && typeof p.name === "string" && typeof p.accessId === "string" && typeof p.secretKey === "string"
-        );
-      }
-    } catch {
-      console.warn("[lens] LENS_PROJECTS is not valid JSON \u2014 ignoring");
-    }
-  }
-  const accessId = process.env.LENS_ACCESS_ID;
-  const secretKey = process.env.LENS_SECRET_KEY;
-  if (accessId && secretKey) return [{ name: "default", accessId, secretKey }];
-  return [];
-}
-function resolveOptions(options) {
-  return {
-    apiUrl: (options?.apiUrl ?? process.env.LENS_API_URL ?? HOSTED_LENS_API_URL).replace(/\/+$/, ""),
-    projects: options?.projects ?? envProjects(),
-    adminToken: options?.adminToken ?? process.env.LENS_ADMIN_TOKEN ?? ""
-  };
-}
-function pickProject(projects, selector) {
-  if (projects.length === 0) return null;
-  if (selector) {
-    const match = projects.find((p) => p.name === selector || p.accessId === selector);
-    if (match) return match;
-  }
-  return projects[0] ?? null;
-}
-function createLensProxy(options) {
-  const handler = async (req, ctx) => {
-    const { apiUrl, projects, adminToken } = resolveOptions(options);
-    const { path } = await ctx.params;
-    const search = new URL(req.url).search;
-    const target = `${apiUrl}/${path.join("/")}${search}`;
-    const isProjectCreate = req.method === "POST" && path.join("/") === "v1/projects";
-    const wizardToken = req.headers.get("x-lens-token");
-    const project = pickProject(projects, req.headers.get("x-lens-project"));
-    const token = isProjectCreate ? adminToken : wizardToken?.startsWith("las_") ? wizardToken : project?.secretKey ?? "";
-    const body = req.method === "GET" || req.method === "HEAD" ? void 0 : await req.text();
-    const res = await fetch(target, {
-      method: req.method,
-      headers: {
-        authorization: `Bearer ${token}`,
-        ...body ? { "content-type": req.headers.get("content-type") ?? "application/json" } : {}
-      },
-      body,
-      cache: "no-store"
-    });
-    const buffer = await res.arrayBuffer();
-    return new Response(buffer, {
-      status: res.status,
-      headers: { "content-type": res.headers.get("content-type") ?? "application/json" }
-    });
-  };
-  return { GET: handler, POST: handler, PUT: handler, PATCH: handler, DELETE: handler };
-}
-function createLensProjectsRoute(options) {
-  return {
-    GET: () => {
-      const { projects } = resolveOptions(options);
-      return Response.json({
-        projects: projects.map(({ name, accessId }) => ({ name, accessId }))
-      });
-    }
-  };
-}
-export {
-  HOSTED_LENS_API_URL,
-  createLensProjectsRoute,
-  createLensProxy
-};
-//# sourceMappingURL=server.js.map

package/dist/server.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../../dashboard/src/server/proxy.ts"],"sourcesContent":["/**\n * Server-side glue for hosting <LensDashboard> — framework-agnostic (standard\n * Request/Response, so it drops into Next.js App Router route files, Remix\n * resource routes, etc.).\n *\n * This is the ONLY part of the package that reads environment variables, and\n * it only ever executes on the host's server:\n *\n *   LENS_PROJECTS     JSON array: [{\"name\",\"accessId\",\"secretKey\"}, …]\n *   LENS_ACCESS_ID /\n *   LENS_SECRET_KEY   legacy single-project fallback\n *   LENS_ADMIN_TOKEN  optional — enables project creation from the wizard\n *   LENS_API_URL      optional override (self-hosting / local dev)\n *\n * Usage (Next.js):\n *   // app/api/lens/[...path]/route.ts\n *   import { createLensProxy } from '@merittdev/horus-lens/server'\n *   export const { GET, POST, PUT, PATCH, DELETE } = createLensProxy()\n *\n *   // app/api/lens-projects/route.ts\n *   import { createLensProjectsRoute } from '@merittdev/horus-lens/server'\n *   export const { GET } = createLensProjectsRoute()\n */\n\n// Runs under Node on the host's server; typed locally to keep @types/node out\n// of this browser-focused package.\ndeclare const process: { env: Record<string, string | undefined> };\n\nexport const HOSTED_LENS_API_URL = 'https://api-lens.meritt.app';\n\nexport interface LensProjectEntry {\n  name: string;\n  accessId: string;\n  secretKey: string;\n}\n\nexport interface LensServerOptions {\n  /** Lens API base. Default: env LENS_API_URL, else the hosted API. */\n  apiUrl?: string;\n  /** Project registry. Default: env LENS_PROJECTS (JSON), else the legacy pair. */\n  projects?: LensProjectEntry[];\n  /** Admin token for POST /v1/projects. Default: env LENS_ADMIN_TOKEN. */\n  adminToken?: string;\n}\n\nfunction envProjects(): LensProjectEntry[] {\n  const raw = process.env.LENS_PROJECTS;\n  if (raw) {\n    try {\n      const parsed: unknown = JSON.parse(raw);\n      if (Array.isArray(parsed)) {\n        return parsed.filter(\n          (p): p is LensProjectEntry =>\n            !!p &&\n            typeof (p as LensProjectEntry).name === 'string' &&\n            typeof (p as LensProjectEntry).accessId === 'string' &&\n            typeof (p as LensProjectEntry).secretKey === 'string',\n        );\n      }\n    } catch {\n      console.warn('[lens] LENS_PROJECTS is not valid JSON — ignoring');\n    }\n  }\n  const accessId = process.env.LENS_ACCESS_ID;\n  const secretKey = process.env.LENS_SECRET_KEY;\n  if (accessId && secretKey) return [{ name: 'default', accessId, secretKey }];\n  return [];\n}\n\nfunction resolveOptions(options?: LensServerOptions) {\n  return {\n    apiUrl: (options?.apiUrl ?? process.env.LENS_API_URL ?? HOSTED_LENS_API_URL).replace(/\\/+$/, ''),\n    projects: options?.projects ?? envProjects(),\n    adminToken: options?.adminToken ?? process.env.LENS_ADMIN_TOKEN ?? '',\n  };\n}\n\nfunction pickProject(projects: LensProjectEntry[], selector: string | null): LensProjectEntry | null {\n  if (projects.length === 0) return null;\n  if (selector) {\n    const match = projects.find((p) => p.name === selector || p.accessId === selector);\n    if (match) return match;\n  }\n  return projects[0] ?? null;\n}\n\n/** Next.js App Router passes ctx.params as a Promise (15+) or plain object. */\ntype RouteContext = { params: { path: string[] } | Promise<{ path: string[] }> };\ntype ProxyHandler = (req: Request, ctx: RouteContext) => Promise<Response>;\n\n/**\n * Authenticated pass-through to the Lens API. Credentials attach HERE, on the\n * server: the browser only ever names a project via `x-lens-project`. During\n * first-run provisioning the wizard forwards its just-minted secret via\n * `x-lens-token`, which wins over the registry.\n */\nexport function createLensProxy(options?: LensServerOptions): Record<\n  'GET' | 'POST' | 'PUT' | 'PATCH' | 'DELETE',\n  ProxyHandler\n> {\n  const handler: ProxyHandler = async (req, ctx) => {\n    const { apiUrl, projects, adminToken } = resolveOptions(options);\n    const { path } = await ctx.params;\n    const search = new URL(req.url).search;\n    const target = `${apiUrl}/${path.join('/')}${search}`;\n\n    const isProjectCreate = req.method === 'POST' && path.join('/') === 'v1/projects';\n    const wizardToken = req.headers.get('x-lens-token');\n    const project = pickProject(projects, req.headers.get('x-lens-project'));\n\n    const token = isProjectCreate\n      ? adminToken\n      : wizardToken?.startsWith('las_')\n        ? wizardToken\n        : (project?.secretKey ?? '');\n\n    const body = req.method === 'GET' || req.method === 'HEAD' ? undefined : await req.text();\n\n    const res = await fetch(target, {\n      method: req.method,\n      headers: {\n        authorization: `Bearer ${token}`,\n        ...(body ? { 'content-type': req.headers.get('content-type') ?? 'application/json' } : {}),\n      },\n      body,\n      cache: 'no-store',\n    });\n\n    const buffer = await res.arrayBuffer();\n    return new Response(buffer, {\n      status: res.status,\n      headers: { 'content-type': res.headers.get('content-type') ?? 'application/json' },\n    });\n  };\n\n  return { GET: handler, POST: handler, PUT: handler, PATCH: handler, DELETE: handler };\n}\n\n/** Names + access ids for the project switcher — never the secrets. */\nexport function createLensProjectsRoute(options?: LensServerOptions): { GET: () => Response } {\n  return {\n    GET: () => {\n      const { projects } = resolveOptions(options);\n      return Response.json({\n        projects: projects.map(({ name, accessId }) => ({ name, accessId })),\n      });\n    },\n  };\n}\n"],"mappings":";;;AA4BO,IAAM,sBAAsB;AAiBnC,SAAS,cAAkC;AACzC,QAAM,MAAM,QAAQ,IAAI;AACxB,MAAI,KAAK;AACP,QAAI;AACF,YAAM,SAAkB,KAAK,MAAM,GAAG;AACtC,UAAI,MAAM,QAAQ,MAAM,GAAG;AACzB,eAAO,OAAO;UACZ,CAAC,MACC,CAAC,CAAC,KACF,OAAQ,EAAuB,SAAS,YACxC,OAAQ,EAAuB,aAAa,YAC5C,OAAQ,EAAuB,cAAc;QACjD;MACF;IACF,QAAQ;AACN,cAAQ,KAAK,wDAAmD;IAClE;EACF;AACA,QAAM,WAAW,QAAQ,IAAI;AAC7B,QAAM,YAAY,QAAQ,IAAI;AAC9B,MAAI,YAAY,UAAW,QAAO,CAAC,EAAE,MAAM,WAAW,UAAU,UAAU,CAAC;AAC3E,SAAO,CAAC;AACV;AAEA,SAAS,eAAe,SAA6B;AACnD,SAAO;IACL,SAAS,SAAS,UAAU,QAAQ,IAAI,gBAAgB,qBAAqB,QAAQ,QAAQ,EAAE;IAC/F,UAAU,SAAS,YAAY,YAAY;IAC3C,YAAY,SAAS,cAAc,QAAQ,IAAI,oBAAoB;EACrE;AACF;AAEA,SAAS,YAAY,UAA8B,UAAkD;AACnG,MAAI,SAAS,WAAW,EAAG,QAAO;AAClC,MAAI,UAAU;AACZ,UAAM,QAAQ,SAAS,KAAK,CAAC,MAAM,EAAE,SAAS,YAAY,EAAE,aAAa,QAAQ;AACjF,QAAI,MAAO,QAAO;EACpB;AACA,SAAO,SAAS,CAAC,KAAK;AACxB;AAYO,SAAS,gBAAgB,SAG9B;AACA,QAAM,UAAwB,OAAO,KAAK,QAAQ;AAChD,UAAM,EAAE,QAAQ,UAAU,WAAW,IAAI,eAAe,OAAO;AAC/D,UAAM,EAAE,KAAK,IAAI,MAAM,IAAI;AAC3B,UAAM,SAAS,IAAI,IAAI,IAAI,GAAG,EAAE;AAChC,UAAM,SAAS,GAAG,MAAM,IAAI,KAAK,KAAK,GAAG,CAAC,GAAG,MAAM;AAEnD,UAAM,kBAAkB,IAAI,WAAW,UAAU,KAAK,KAAK,GAAG,MAAM;AACpE,UAAM,cAAc,IAAI,QAAQ,IAAI,cAAc;AAClD,UAAM,UAAU,YAAY,UAAU,IAAI,QAAQ,IAAI,gBAAgB,CAAC;AAEvE,UAAM,QAAQ,kBACV,aACA,aAAa,WAAW,MAAM,IAC5B,cACC,SAAS,aAAa;AAE7B,UAAM,OAAO,IAAI,WAAW,SAAS,IAAI,WAAW,SAAS,SAAY,MAAM,IAAI,KAAK;AAExF,UAAM,MAAM,MAAM,MAAM,QAAQ;MAC9B,QAAQ,IAAI;MACZ,SAAS;QACP,eAAe,UAAU,KAAK;QAC9B,GAAI,OAAO,EAAE,gBAAgB,IAAI,QAAQ,IAAI,cAAc,KAAK,mBAAmB,IAAI,CAAC;MAC1F;MACA;MACA,OAAO;IACT,CAAC;AAED,UAAM,SAAS,MAAM,IAAI,YAAY;AACrC,WAAO,IAAI,SAAS,QAAQ;MAC1B,QAAQ,IAAI;MACZ,SAAS,EAAE,gBAAgB,IAAI,QAAQ,IAAI,cAAc,KAAK,mBAAmB;IACnF,CAAC;EACH;AAEA,SAAO,EAAE,KAAK,SAAS,MAAM,SAAS,KAAK,SAAS,OAAO,SAAS,QAAQ,QAAQ;AACtF;AAGO,SAAS,wBAAwB,SAAsD;AAC5F,SAAO;IACL,KAAK,MAAM;AACT,YAAM,EAAE,SAAS,IAAI,eAAe,OAAO;AAC3C,aAAO,SAAS,KAAK;QACnB,UAAU,SAAS,IAAI,CAAC,EAAE,MAAM,SAAS,OAAO,EAAE,MAAM,SAAS,EAAE;MACrE,CAAC;IACH;EACF;AACF;","names":[]}