@nodaro/sdk 2.28.0 → 2.31.0

package/dist/chunk-WK4VXPPZ.cjs

@@ -0,0 +1,104 @@
+'use strict';
+
+// src/resources/collections.ts
+var CollectionsResource = class {
+  constructor(client) {
+    this.client = client;
+  }
+  client;
+  /** `GET /v1/collections` → your collections with their record counts, whether the server has collections at all, and your caps. */
+  list() {
+    return this.client.request("GET", "/v1/collections");
+  }
+  /** `GET /v1/collections/:id` → one collection. */
+  get(id) {
+    return this.client.request("GET", `/v1/collections/${encodeURIComponent(id)}`);
+  }
+  /** `POST /v1/collections` → a new collection (`409 name_taken` when you have one by that name, `403 collection_limit_reached` at your cap). */
+  create(input) {
+    return this.client.request("POST", "/v1/collections", { body: input });
+  }
+  /** `PATCH /v1/collections/:id` → rename or re-describe a collection. */
+  update(id, input) {
+    return this.client.request("PATCH", `/v1/collections/${encodeURIComponent(id)}`, { body: input });
+  }
+  /** `DELETE /v1/collections/:id` → remove a collection and every record in it. */
+  async delete(id) {
+    await this.client.request("DELETE", `/v1/collections/${encodeURIComponent(id)}`);
+  }
+  /**
+   * `GET /v1/collections/:id/records` → the records, newest first (`order: "oldest"`
+   * flips it). Narrow with `q` (words), `since` / `until` (ISO) and `usage`
+   * (`all`, `unused` — not used yet — or `used`); page with `cursor` / `limit`
+   * (1-100, default 50). Each record carries `usedAt` / `usedBy`, and its
+   * `source` the saving workflow's name and project when it is yours.
+   */
+  records(id, params = {}) {
+    return this.client.request("GET", `/v1/collections/${encodeURIComponent(id)}/records`, {
+      query: {
+        q: params.q,
+        since: params.since,
+        until: params.until,
+        usage: params.usage,
+        status: params.status,
+        order: params.order,
+        cursor: params.cursor,
+        offset: params.offset,
+        limit: params.limit
+      }
+    });
+  }
+  /** `POST /v1/collections/:id/records/:recordId/restore` → bring a record back from the Trash; the record. */
+  restoreRecord(id, recordId) {
+    return this.client.request("POST", `/v1/collections/${encodeURIComponent(id)}/records/${encodeURIComponent(recordId)}/restore`);
+  }
+  /** `POST /v1/collections/:id/records/bulk` → move up to 100 records to the Trash, bring them back, or delete records already in the Trash for good, in one call. */
+  bulkRecords(id, input) {
+    return this.client.request("POST", `/v1/collections/${encodeURIComponent(id)}/records/bulk`, { body: input });
+  }
+  /**
+   * `PATCH /v1/collections/:id/records/:recordId` → mark a record used (or not
+   * used again). `source` says who is marking it (defaults to the API). A
+   * server before the usage release answers `503 not_available`.
+   */
+  setUsed(id, recordId, used, source) {
+    return this.client.request("PATCH", `/v1/collections/${encodeURIComponent(id)}/records/${encodeURIComponent(recordId)}`, {
+      body: { used, ...source ? { source } : {} }
+    });
+  }
+  /**
+   * `POST /v1/collections/:id/records` → save one record. Give the fields, or
+   * `item` (any JSON — a feed post, a search result) and let the server map it;
+   * explicit fields win. `outcome` is `inserted`, `duplicate` (the same link or
+   * dedupe key is already there — the existing record comes back) or `replayed`
+   * (a write with the same `idempotencyKey` already happened).
+   */
+  addRecord(id, input, opts = {}) {
+    return this.client.request("POST", `/v1/collections/${encodeURIComponent(id)}/records`, {
+      body: input,
+      ...opts.idempotencyKey ? { headers: { "Idempotency-Key": opts.idempotencyKey } } : {}
+    });
+  }
+  /**
+   * `DELETE /v1/collections/:id/records/:recordId` → the record moves to the
+   * collection's Trash (`restoreRecord` brings it back; `deleteRecordForever`
+   * removes it for good).
+   */
+  async deleteRecord(id, recordId) {
+    await this.client.request("DELETE", `/v1/collections/${encodeURIComponent(id)}/records/${encodeURIComponent(recordId)}`);
+  }
+  /** `DELETE /v1/collections/:id/records/:recordId/permanent` → a record already in the Trash is deleted for good (`409 not_in_trash` for a live one). */
+  async deleteRecordForever(id, recordId) {
+    await this.client.request("DELETE", `/v1/collections/${encodeURIComponent(id)}/records/${encodeURIComponent(recordId)}/permanent`);
+  }
+  /** `GET /v1/collections/:id/export` → the whole collection as CSV (default) or JSON text, newest first; `since`, `until`, `usage` and `q` narrow it. */
+  export(id, params = {}) {
+    return this.client.requestText("GET", `/v1/collections/${encodeURIComponent(id)}/export`, {
+      query: { format: params.format, since: params.since, until: params.until, usage: params.usage, q: params.q }
+    });
+  }
+};
+
+exports.CollectionsResource = CollectionsResource;
+//# sourceMappingURL=chunk-WK4VXPPZ.cjs.map
+//# sourceMappingURL=chunk-WK4VXPPZ.cjs.map

package/dist/chunk-WK4VXPPZ.cjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/resources/collections.ts"],"names":[],"mappings":";;;AA6BO,IAAM,sBAAN,MAA0B;AAAA,EAC/B,YAAoB,MAAA,EAA0B;AAA1B,IAAA,IAAA,CAAA,MAAA,GAAA,MAAA;AAAA,EAA2B;AAAA,EAA3B,MAAA;AAAA;AAAA,EAGpB,IAAA,GAAuC;AACrC,IAAA,OAAO,IAAA,CAAK,MAAA,CAAO,OAAA,CAA+B,KAAA,EAAO,iBAAiB,CAAA;AAAA,EAC5E;AAAA;AAAA,EAGA,IAAI,EAAA,EAAiC;AACnC,IAAA,OAAO,IAAA,CAAK,OAAO,OAAA,CAAoB,KAAA,EAAO,mBAAmB,kBAAA,CAAmB,EAAE,CAAC,CAAA,CAAE,CAAA;AAAA,EAC3F;AAAA;AAAA,EAGA,OAAO,KAAA,EAAmD;AACxD,IAAA,OAAO,IAAA,CAAK,OAAO,OAAA,CAAoB,MAAA,EAAQ,mBAAmB,EAAE,IAAA,EAAM,OAAO,CAAA;AAAA,EACnF;AAAA;AAAA,EAGA,MAAA,CAAO,IAAY,KAAA,EAAmD;AACpE,IAAA,OAAO,IAAA,CAAK,MAAA,CAAO,OAAA,CAAoB,OAAA,EAAS,CAAA,gBAAA,EAAmB,kBAAA,CAAmB,EAAE,CAAC,CAAA,CAAA,EAAI,EAAE,IAAA,EAAM,KAAA,EAAO,CAAA;AAAA,EAC9G;AAAA;AAAA,EAGA,MAAM,OAAO,EAAA,EAA2B;AACtC,IAAA,MAAM,IAAA,CAAK,OAAO,OAAA,CAA2B,QAAA,EAAU,mBAAmB,kBAAA,CAAmB,EAAE,CAAC,CAAA,CAAE,CAAA;AAAA,EACpG;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EASA,OAAA,CAAQ,EAAA,EAAY,MAAA,GAAsC,EAAC,EAAyC;AAClG,IAAA,OAAO,IAAA,CAAK,OAAO,OAAA,CAAqC,KAAA,EAAO,mBAAmB,kBAAA,CAAmB,EAAE,CAAC,CAAA,QAAA,CAAA,EAAY;AAAA,MAClH,KAAA,EAAO;AAAA,QACL,GAAG,MAAA,CAAO,CAAA;AAAA,QACV,OAAO,MAAA,CAAO,KAAA;AAAA,QACd,OAAO,MAAA,CAAO,KAAA;AAAA,QACd,OAAO,MAAA,CAAO,KAAA;AAAA,QACd,QAAQ,MAAA,CAAO,MAAA;AAAA,QACf,OAAO,MAAA,CAAO,KAAA;AAAA,QACd,QAAQ,MAAA,CAAO,MAAA;AAAA,QACf,QAAQ,MAAA,CAAO,MAAA;AAAA,QACf,OAAO,MAAA,CAAO;AAAA;AAChB,KACD,CAAA;AAAA,EACH;AAAA;AAAA,EAGA,aAAA,CAAc,IAAY,QAAA,EAA6C;AACrE,IAAA,OAAO,IAAA,CAAK,MAAA,CAAO,OAAA,CAA0B,MAAA,EAAQ,CAAA,gBAAA,EAAmB,kBAAA,CAAmB,EAAE,CAAC,CAAA,SAAA,EAAY,kBAAA,CAAmB,QAAQ,CAAC,CAAA,QAAA,CAAU,CAAA;AAAA,EAClJ;AAAA;AAAA,EAGA,WAAA,CAAY,IAAY,KAAA,EAAyE;AAC/F,IAAA,OAAO,IAAA,CAAK,MAAA,CAAO,OAAA,CAAqC,MAAA,EAAQ,CAAA,gBAAA,EAAmB,kBAAA,CAAmB,EAAE,CAAC,CAAA,aAAA,CAAA,EAAiB,EAAE,IAAA,EAAM,KAAA,EAAO,CAAA;AAAA,EAC3I;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,OAAA,CAAQ,EAAA,EAAY,QAAA,EAAkB,IAAA,EAAe,MAAA,EAA4D;AAC/G,IAAA,OAAO,IAAA,CAAK,MAAA,CAAO,OAAA,CAA0B,OAAA,EAAS,CAAA,gBAAA,EAAmB,kBAAA,CAAmB,EAAE,CAAC,CAAA,SAAA,EAAY,kBAAA,CAAmB,QAAQ,CAAC,CAAA,CAAA,EAAI;AAAA,MACzI,IAAA,EAAM,EAAE,IAAA,EAAM,GAAI,SAAS,EAAE,MAAA,EAAO,GAAI,EAAC;AAAG,KAC7C,CAAA;AAAA,EACH;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EASA,SAAA,CAAU,EAAA,EAAY,KAAA,EAAiC,IAAA,GAAoC,EAAC,EAAuC;AACjI,IAAA,OAAO,IAAA,CAAK,OAAO,OAAA,CAAmC,MAAA,EAAQ,mBAAmB,kBAAA,CAAmB,EAAE,CAAC,CAAA,QAAA,CAAA,EAAY;AAAA,MACjH,IAAA,EAAM,KAAA;AAAA,MACN,GAAI,IAAA,CAAK,cAAA,GAAiB,EAAE,OAAA,EAAS,EAAE,iBAAA,EAAmB,IAAA,CAAK,cAAA,EAAe,EAAE,GAAI;AAAC,KACtF,CAAA;AAAA,EACH;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,MAAM,YAAA,CAAa,EAAA,EAAY,QAAA,EAAiC;AAC9D,IAAA,MAAM,IAAA,CAAK,MAAA,CAAO,OAAA,CAA2B,QAAA,EAAU,CAAA,gBAAA,EAAmB,kBAAA,CAAmB,EAAE,CAAC,CAAA,SAAA,EAAY,kBAAA,CAAmB,QAAQ,CAAC,CAAA,CAAE,CAAA;AAAA,EAC5I;AAAA;AAAA,EAGA,MAAM,mBAAA,CAAoB,EAAA,EAAY,QAAA,EAAiC;AACrE,IAAA,MAAM,IAAA,CAAK,MAAA,CAAO,OAAA,CAA2B,QAAA,EAAU,CAAA,gBAAA,EAAmB,kBAAA,CAAmB,EAAE,CAAC,CAAA,SAAA,EAAY,kBAAA,CAAmB,QAAQ,CAAC,CAAA,UAAA,CAAY,CAAA;AAAA,EACtJ;AAAA;AAAA,EAGA,MAAA,CAAO,EAAA,EAAY,MAAA,GAAmH,EAAC,EAAoB;AACzJ,IAAA,OAAO,IAAA,CAAK,OAAO,WAAA,CAAY,KAAA,EAAO,mBAAmB,kBAAA,CAAmB,EAAE,CAAC,CAAA,OAAA,CAAA,EAAW;AAAA,MACxF,OAAO,EAAE,MAAA,EAAQ,MAAA,CAAO,MAAA,EAAQ,OAAO,MAAA,CAAO,KAAA,EAAO,KAAA,EAAO,MAAA,CAAO,OAAO,KAAA,EAAO,MAAA,CAAO,KAAA,EAAO,CAAA,EAAG,OAAO,CAAA;AAAE,KAC5G,CAAA;AAAA,EACH;AACF","file":"chunk-WK4VXPPZ.cjs","sourcesContent":["import type { NodaroClientCore } from \"../core.js\"\nimport type {\n  AddCollectionRecordInput,\n  AddCollectionRecordResult,\n  BulkCollectionRecordsInput,\n  BulkCollectionRecordsResult,\n  Collection,\n  CollectionExportFormat,\n  CollectionRecord,\n  CollectionRecordSource,\n  CollectionUsage,\n  CreateCollectionInput,\n  ListCollectionRecordsParams,\n  ListCollectionRecordsResult,\n  ListCollectionsResult,\n  UpdateCollectionInput,\n} from \"@nodaro/shared/nodes\"\n\n/**\n * Collections — where a workflow's records live.\n *\n * A collection is a named set of records (a title, a text, a link, media\n * links, extra fields) that the Save to Collection node writes one record per\n * item into and the Read Collection node reads back; this resource browses,\n * searches, adds, removes and exports them from code. Text and links only,\n * never files. The same link saved twice is one record. Past the plan's cap the\n * oldest records are evicted after a write (the answer says how many).\n * OAuth app tokens need `assets:read` for reads and `assets:write` for writes.\n */\nexport class CollectionsResource {\n  constructor(private client: NodaroClientCore) {}\n\n  /** `GET /v1/collections` → your collections with their record counts, whether the server has collections at all, and your caps. */\n  list(): Promise<ListCollectionsResult> {\n    return this.client.request<ListCollectionsResult>(\"GET\", \"/v1/collections\")\n  }\n\n  /** `GET /v1/collections/:id` → one collection. */\n  get(id: string): Promise<Collection> {\n    return this.client.request<Collection>(\"GET\", `/v1/collections/${encodeURIComponent(id)}`)\n  }\n\n  /** `POST /v1/collections` → a new collection (`409 name_taken` when you have one by that name, `403 collection_limit_reached` at your cap). */\n  create(input: CreateCollectionInput): Promise<Collection> {\n    return this.client.request<Collection>(\"POST\", \"/v1/collections\", { body: input })\n  }\n\n  /** `PATCH /v1/collections/:id` → rename or re-describe a collection. */\n  update(id: string, input: UpdateCollectionInput): Promise<Collection> {\n    return this.client.request<Collection>(\"PATCH\", `/v1/collections/${encodeURIComponent(id)}`, { body: input })\n  }\n\n  /** `DELETE /v1/collections/:id` → remove a collection and every record in it. */\n  async delete(id: string): Promise<void> {\n    await this.client.request<{ success: true }>(\"DELETE\", `/v1/collections/${encodeURIComponent(id)}`)\n  }\n\n  /**\n   * `GET /v1/collections/:id/records` → the records, newest first (`order: \"oldest\"`\n   * flips it). Narrow with `q` (words), `since` / `until` (ISO) and `usage`\n   * (`all`, `unused` — not used yet — or `used`); page with `cursor` / `limit`\n   * (1-100, default 50). Each record carries `usedAt` / `usedBy`, and its\n   * `source` the saving workflow's name and project when it is yours.\n   */\n  records(id: string, params: ListCollectionRecordsParams = {}): Promise<ListCollectionRecordsResult> {\n    return this.client.request<ListCollectionRecordsResult>(\"GET\", `/v1/collections/${encodeURIComponent(id)}/records`, {\n      query: {\n        q: params.q,\n        since: params.since,\n        until: params.until,\n        usage: params.usage,\n        status: params.status,\n        order: params.order,\n        cursor: params.cursor,\n        offset: params.offset,\n        limit: params.limit,\n      },\n    })\n  }\n\n  /** `POST /v1/collections/:id/records/:recordId/restore` → bring a record back from the Trash; the record. */\n  restoreRecord(id: string, recordId: string): Promise<CollectionRecord> {\n    return this.client.request<CollectionRecord>(\"POST\", `/v1/collections/${encodeURIComponent(id)}/records/${encodeURIComponent(recordId)}/restore`)\n  }\n\n  /** `POST /v1/collections/:id/records/bulk` → move up to 100 records to the Trash, bring them back, or delete records already in the Trash for good, in one call. */\n  bulkRecords(id: string, input: BulkCollectionRecordsInput): Promise<BulkCollectionRecordsResult> {\n    return this.client.request<BulkCollectionRecordsResult>(\"POST\", `/v1/collections/${encodeURIComponent(id)}/records/bulk`, { body: input })\n  }\n\n  /**\n   * `PATCH /v1/collections/:id/records/:recordId` → mark a record used (or not\n   * used again). `source` says who is marking it (defaults to the API). A\n   * server before the usage release answers `503 not_available`.\n   */\n  setUsed(id: string, recordId: string, used: boolean, source?: CollectionRecordSource): Promise<CollectionRecord> {\n    return this.client.request<CollectionRecord>(\"PATCH\", `/v1/collections/${encodeURIComponent(id)}/records/${encodeURIComponent(recordId)}`, {\n      body: { used, ...(source ? { source } : {}) },\n    })\n  }\n\n  /**\n   * `POST /v1/collections/:id/records` → save one record. Give the fields, or\n   * `item` (any JSON — a feed post, a search result) and let the server map it;\n   * explicit fields win. `outcome` is `inserted`, `duplicate` (the same link or\n   * dedupe key is already there — the existing record comes back) or `replayed`\n   * (a write with the same `idempotencyKey` already happened).\n   */\n  addRecord(id: string, input: AddCollectionRecordInput, opts: { idempotencyKey?: string } = {}): Promise<AddCollectionRecordResult> {\n    return this.client.request<AddCollectionRecordResult>(\"POST\", `/v1/collections/${encodeURIComponent(id)}/records`, {\n      body: input,\n      ...(opts.idempotencyKey ? { headers: { \"Idempotency-Key\": opts.idempotencyKey } } : {}),\n    })\n  }\n\n  /**\n   * `DELETE /v1/collections/:id/records/:recordId` → the record moves to the\n   * collection's Trash (`restoreRecord` brings it back; `deleteRecordForever`\n   * removes it for good).\n   */\n  async deleteRecord(id: string, recordId: string): Promise<void> {\n    await this.client.request<{ success: true }>(\"DELETE\", `/v1/collections/${encodeURIComponent(id)}/records/${encodeURIComponent(recordId)}`)\n  }\n\n  /** `DELETE /v1/collections/:id/records/:recordId/permanent` → a record already in the Trash is deleted for good (`409 not_in_trash` for a live one). */\n  async deleteRecordForever(id: string, recordId: string): Promise<void> {\n    await this.client.request<{ success: true }>(\"DELETE\", `/v1/collections/${encodeURIComponent(id)}/records/${encodeURIComponent(recordId)}/permanent`)\n  }\n\n  /** `GET /v1/collections/:id/export` → the whole collection as CSV (default) or JSON text, newest first; `since`, `until`, `usage` and `q` narrow it. */\n  export(id: string, params: { format?: CollectionExportFormat; since?: string; until?: string; usage?: CollectionUsage; q?: string } = {}): Promise<string> {\n    return this.client.requestText(\"GET\", `/v1/collections/${encodeURIComponent(id)}/export`, {\n      query: { format: params.format, since: params.since, until: params.until, usage: params.usage, q: params.q },\n    })\n  }\n}\n"]}

package/dist/chunk-WSA4LMWR.cjs

@@ -0,0 +1,96 @@
+'use strict';
+
+// src/webhook-signature.ts
+var WebhookSignatureError = class extends Error {
+  code;
+  constructor(code, message) {
+    super(message);
+    this.name = "WebhookSignatureError";
+    this.code = code;
+  }
+};
+var DEFAULT_TOLERANCE_SECONDS = 300;
+var HEX_SIGNATURE = /^[0-9a-f]{64}$/;
+function toBytes(payload) {
+  if (typeof payload === "string") return new TextEncoder().encode(payload);
+  if (payload instanceof Uint8Array) return payload;
+  return new Uint8Array(payload);
+}
+function hexToBytes(hex) {
+  const out = new Uint8Array(hex.length / 2);
+  for (let i = 0; i < out.length; i++) out[i] = parseInt(hex.slice(i * 2, i * 2 + 2), 16);
+  return out;
+}
+function constantTimeEqual(a, b) {
+  if (a.length !== b.length) return false;
+  let diff = 0;
+  for (let i = 0; i < a.length; i++) diff |= a[i] ^ b[i];
+  return diff === 0;
+}
+function parseHeader(raw) {
+  let timestamp = null;
+  const signatures = [];
+  for (const part of raw.split(",")) {
+    const eq = part.indexOf("=");
+    if (eq <= 0) continue;
+    const key = part.slice(0, eq).trim();
+    const value = part.slice(eq + 1).trim();
+    if (key === "t") {
+      if (!/^\d{1,15}$/.test(value)) {
+        throw new WebhookSignatureError("malformed_header", "Nodaro-Signature has no valid timestamp (t=)");
+      }
+      timestamp = Number(value);
+    } else if (key === "v1") {
+      signatures.push(value.toLowerCase());
+    }
+  }
+  if (timestamp === null) throw new WebhookSignatureError("malformed_header", "Nodaro-Signature has no timestamp (t=)");
+  if (signatures.length === 0) throw new WebhookSignatureError("malformed_header", "Nodaro-Signature has no v1 signature");
+  return { timestamp, signatures };
+}
+async function verifyWebhookSignature(options) {
+  const { payload, secret } = options;
+  const tolerance = options.toleranceSeconds ?? DEFAULT_TOLERANCE_SECONDS;
+  if (typeof tolerance !== "number" || !Number.isFinite(tolerance) || tolerance < 0) {
+    throw new RangeError("toleranceSeconds must be a finite number of seconds, 0 or more");
+  }
+  if (!secret) throw new WebhookSignatureError("missing_secret", "No signing secret was given");
+  const header = typeof options.header === "string" ? options.header : options.header?.[0];
+  if (!header || !header.trim()) throw new WebhookSignatureError("missing_header", "The request has no Nodaro-Signature header");
+  const { timestamp, signatures } = parseHeader(header);
+  const subtle = globalThis.crypto?.subtle;
+  if (!subtle) throw new WebhookSignatureError("crypto_unavailable", "Web Crypto (crypto.subtle) is not available in this runtime");
+  const body = toBytes(payload);
+  const prefix = new TextEncoder().encode(`${timestamp}.`);
+  const message = new Uint8Array(prefix.length + body.length);
+  message.set(prefix, 0);
+  message.set(body, prefix.length);
+  const key = await subtle.importKey("raw", new TextEncoder().encode(secret), { name: "HMAC", hash: "SHA-256" }, false, ["sign"]);
+  const expected = new Uint8Array(await subtle.sign("HMAC", key, message));
+  let matched = false;
+  for (const candidate of signatures) {
+    const wellFormed = HEX_SIGNATURE.test(candidate);
+    const bytes = wellFormed ? hexToBytes(candidate) : new Uint8Array(expected.length);
+    if (constantTimeEqual(bytes, expected) && wellFormed) matched = true;
+  }
+  if (!matched) throw new WebhookSignatureError("signature_mismatch", "The Nodaro-Signature does not match the body");
+  if (tolerance > 0) {
+    const now = Math.floor(Date.now() / 1e3);
+    if (Math.abs(now - timestamp) > tolerance) {
+      throw new WebhookSignatureError(
+        "timestamp_outside_tolerance",
+        `The signature's timestamp is more than ${tolerance} seconds from now`
+      );
+    }
+  }
+  try {
+    return JSON.parse(new TextDecoder().decode(body));
+  } catch {
+    throw new WebhookSignatureError("invalid_payload", "The signed body is not JSON");
+  }
+}
+
+exports.WebhookSignatureError = WebhookSignatureError;
+exports.verifyWebhookSignature = verifyWebhookSignature;
+//# sourceMappingURL=chunk-WSA4LMWR.cjs.map
+//# sourceMappingURL=chunk-WSA4LMWR.cjs.map

package/dist/chunk-WSA4LMWR.cjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/webhook-signature.ts"],"names":[],"mappings":";;;AA0BO,IAAM,qBAAA,GAAN,cAAoC,KAAA,CAAM;AAAA,EACtC,IAAA;AAAA,EAET,WAAA,CAAY,MAAiC,OAAA,EAAiB;AAC5D,IAAA,KAAA,CAAM,OAAO,CAAA;AACb,IAAA,IAAA,CAAK,IAAA,GAAO,uBAAA;AACZ,IAAA,IAAA,CAAK,IAAA,GAAO,IAAA;AAAA,EACd;AACF;AAkBA,IAAM,yBAAA,GAA4B,GAAA;AAClC,IAAM,aAAA,GAAgB,gBAAA;AAEtB,SAAS,QAAQ,OAAA,EAAwD;AACvE,EAAA,IAAI,OAAO,YAAY,QAAA,EAAU,OAAO,IAAI,WAAA,EAAY,CAAE,OAAO,OAAO,CAAA;AACxE,EAAA,IAAI,OAAA,YAAmB,YAAY,OAAO,OAAA;AAC1C,EAAA,OAAO,IAAI,WAAW,OAAO,CAAA;AAC/B;AAEA,SAAS,WAAW,GAAA,EAAyB;AAC3C,EAAA,MAAM,GAAA,GAAM,IAAI,UAAA,CAAW,GAAA,CAAI,SAAS,CAAC,CAAA;AACzC,EAAA,KAAA,IAAS,IAAI,CAAA,EAAG,CAAA,GAAI,IAAI,MAAA,EAAQ,CAAA,EAAA,MAAS,CAAC,CAAA,GAAI,QAAA,CAAS,GAAA,CAAI,MAAM,CAAA,GAAI,CAAA,EAAG,IAAI,CAAA,GAAI,CAAC,GAAG,EAAE,CAAA;AACtF,EAAA,OAAO,GAAA;AACT;AAGA,SAAS,iBAAA,CAAkB,GAAe,CAAA,EAAwB;AAChE,EAAA,IAAI,CAAA,CAAE,MAAA,KAAW,CAAA,CAAE,MAAA,EAAQ,OAAO,KAAA;AAClC,EAAA,IAAI,IAAA,GAAO,CAAA;AACX,EAAA,KAAA,IAAS,CAAA,GAAI,CAAA,EAAG,CAAA,GAAI,CAAA,CAAE,MAAA,EAAQ,CAAA,EAAA,EAAK,IAAA,IAAQ,CAAA,CAAE,CAAC,CAAA,GAAK,CAAA,CAAE,CAAC,CAAA;AACtD,EAAA,OAAO,IAAA,KAAS,CAAA;AAClB;AAEA,SAAS,YAAY,GAAA,EAA0D;AAC7E,EAAA,IAAI,SAAA,GAA2B,IAAA;AAC/B,EAAA,MAAM,aAAuB,EAAC;AAC9B,EAAA,KAAA,MAAW,IAAA,IAAQ,GAAA,CAAI,KAAA,CAAM,GAAG,CAAA,EAAG;AACjC,IAAA,MAAM,EAAA,GAAK,IAAA,CAAK,OAAA,CAAQ,GAAG,CAAA;AAC3B,IAAA,IAAI,MAAM,CAAA,EAAG;AACb,IAAA,MAAM,MAAM,IAAA,CAAK,KAAA,CAAM,CAAA,EAAG,EAAE,EAAE,IAAA,EAAK;AACnC,IAAA,MAAM,QAAQ,IAAA,CAAK,KAAA,CAAM,EAAA,GAAK,CAAC,EAAE,IAAA,EAAK;AACtC,IAAA,IAAI,QAAQ,GAAA,EAAK;AACf,MAAA,IAAI,CAAC,YAAA,CAAa,IAAA,CAAK,KAAK,CAAA,EAAG;AAC7B,QAAA,MAAM,IAAI,qBAAA,CAAsB,kBAAA,EAAoB,8CAA8C,CAAA;AAAA,MACpG;AACA,MAAA,SAAA,GAAY,OAAO,KAAK,CAAA;AAAA,IAC1B,CAAA,MAAA,IAAW,QAAQ,IAAA,EAAM;AACvB,MAAA,UAAA,CAAW,IAAA,CAAK,KAAA,CAAM,WAAA,EAAa,CAAA;AAAA,IACrC;AAAA,EACF;AACA,EAAA,IAAI,cAAc,IAAA,EAAM,MAAM,IAAI,qBAAA,CAAsB,oBAAoB,wCAAwC,CAAA;AACpH,EAAA,IAAI,WAAW,MAAA,KAAW,CAAA,QAAS,IAAI,qBAAA,CAAsB,oBAAoB,sCAAsC,CAAA;AACvH,EAAA,OAAO,EAAE,WAAW,UAAA,EAAW;AACjC;AAoBA,eAAsB,uBAAuB,OAAA,EAA+D;AAC1G,EAAA,MAAM,EAAE,OAAA,EAAS,MAAA,EAAO,GAAI,OAAA;AAC5B,EAAA,MAAM,SAAA,GAAY,QAAQ,gBAAA,IAAoB,yBAAA;AAC9C,EAAA,IAAI,OAAO,cAAc,QAAA,IAAY,CAAC,OAAO,QAAA,CAAS,SAAS,CAAA,IAAK,SAAA,GAAY,CAAA,EAAG;AAGjF,IAAA,MAAM,IAAI,WAAW,gEAAgE,CAAA;AAAA,EACvF;AACA,EAAA,IAAI,CAAC,MAAA,EAAQ,MAAM,IAAI,qBAAA,CAAsB,kBAAkB,6BAA6B,CAAA;AAE5F,EAAA,MAAM,MAAA,GAAS,OAAO,OAAA,CAAQ,MAAA,KAAW,WAAW,OAAA,CAAQ,MAAA,GAAS,OAAA,CAAQ,MAAA,GAAS,CAAC,CAAA;AACvF,EAAA,IAAI,CAAC,MAAA,IAAU,CAAC,MAAA,CAAO,IAAA,IAAQ,MAAM,IAAI,qBAAA,CAAsB,gBAAA,EAAkB,4CAA4C,CAAA;AAC7H,EAAA,MAAM,EAAE,SAAA,EAAW,UAAA,EAAW,GAAI,YAAY,MAAM,CAAA;AAEpD,EAAA,MAAM,MAAA,GAAS,WAAW,MAAA,EAAQ,MAAA;AAClC,EAAA,IAAI,CAAC,MAAA,EAAQ,MAAM,IAAI,qBAAA,CAAsB,sBAAsB,6DAA6D,CAAA;AAEhI,EAAA,MAAM,IAAA,GAAO,QAAQ,OAAO,CAAA;AAC5B,EAAA,MAAM,SAAS,IAAI,WAAA,GAAc,MAAA,CAAO,CAAA,EAAG,SAAS,CAAA,CAAA,CAAG,CAAA;AACvD,EAAA,MAAM,UAAU,IAAI,UAAA,CAAW,MAAA,CAAO,MAAA,GAAS,KAAK,MAAM,CAAA;AAC1D,EAAA,OAAA,CAAQ,GAAA,CAAI,QAAQ,CAAC,CAAA;AACrB,EAAA,OAAA,CAAQ,GAAA,CAAI,IAAA,EAAM,MAAA,CAAO,MAAM,CAAA;AAE/B,EAAA,MAAM,GAAA,GAAM,MAAM,MAAA,CAAO,SAAA,CAAU,OAAO,IAAI,WAAA,GAAc,MAAA,CAAO,MAAM,GAAG,EAAE,IAAA,EAAM,QAAQ,IAAA,EAAM,SAAA,IAAa,KAAA,EAAO,CAAC,MAAM,CAAC,CAAA;AAC9H,EAAA,MAAM,QAAA,GAAW,IAAI,UAAA,CAAW,MAAM,OAAO,IAAA,CAAK,MAAA,EAAQ,GAAA,EAAK,OAAO,CAAC,CAAA;AAEvE,EAAA,IAAI,OAAA,GAAU,KAAA;AACd,EAAA,KAAA,MAAW,aAAa,UAAA,EAAY;AAGlC,IAAA,MAAM,UAAA,GAAa,aAAA,CAAc,IAAA,CAAK,SAAS,CAAA;AAC/C,IAAA,MAAM,KAAA,GAAQ,aAAa,UAAA,CAAW,SAAS,IAAI,IAAI,UAAA,CAAW,SAAS,MAAM,CAAA;AACjF,IAAA,IAAI,iBAAA,CAAkB,KAAA,EAAO,QAAQ,CAAA,IAAK,YAAY,OAAA,GAAU,IAAA;AAAA,EAClE;AACA,EAAA,IAAI,CAAC,OAAA,EAAS,MAAM,IAAI,qBAAA,CAAsB,sBAAsB,8CAA8C,CAAA;AAElH,EAAA,IAAI,YAAY,CAAA,EAAG;AACjB,IAAA,MAAM,MAAM,IAAA,CAAK,KAAA,CAAM,IAAA,CAAK,GAAA,KAAQ,GAAI,CAAA;AACxC,IAAA,IAAI,IAAA,CAAK,GAAA,CAAI,GAAA,GAAM,SAAS,IAAI,SAAA,EAAW;AACzC,MAAA,MAAM,IAAI,qBAAA;AAAA,QACR,6BAAA;AAAA,QACA,0CAA0C,SAAS,CAAA,iBAAA;AAAA,OACrD;AAAA,IACF;AAAA,EACF;AAEA,EAAA,IAAI;AACF,IAAA,OAAO,KAAK,KAAA,CAAM,IAAI,aAAY,CAAE,MAAA,CAAO,IAAI,CAAC,CAAA;AAAA,EAClD,CAAA,CAAA,MAAQ;AACN,IAAA,MAAM,IAAI,qBAAA,CAAsB,iBAAA,EAAmB,6BAA6B,CAAA;AAAA,EAClF;AACF","file":"chunk-WSA4LMWR.cjs","sourcesContent":["/**\n * Verifying a Nodaro webhook on the receiving side.\n *\n * Every delivery carries\n *\n *   Nodaro-Signature: t=<unix seconds>,v1=<hex HMAC-SHA256(secret, \"<t>.<raw body>\")>\n *\n * where `secret` is the endpoint's whole signing secret (`whsec_…`, as\n * `client.webhooks.create()` / `rotateSecret()` returned it) used as the\n * UTF-8 key, and the message is the timestamp, a dot, and the exact body\n * bytes received. Pure Web Crypto (`crypto.subtle`): runs in Node 20+, Deno,\n * Bun, Cloudflare Workers, Vercel Edge and browsers. The comparison is\n * constant-time.\n */\nimport type { WebhookEvent } from \"./resources/webhooks.js\"\n\nexport type WebhookSignatureErrorCode =\n  | \"missing_secret\"\n  | \"missing_header\"\n  | \"malformed_header\"\n  | \"signature_mismatch\"\n  | \"timestamp_outside_tolerance\"\n  | \"invalid_payload\"\n  | \"crypto_unavailable\"\n\n/** Thrown by {@link verifyWebhookSignature}: refuse the request (a 400 is fine). */\nexport class WebhookSignatureError extends Error {\n  readonly code: WebhookSignatureErrorCode\n\n  constructor(code: WebhookSignatureErrorCode, message: string) {\n    super(message)\n    this.name = \"WebhookSignatureError\"\n    this.code = code\n  }\n}\n\nexport interface VerifyWebhookSignatureOptions {\n  /** The raw request body, exactly as received — not re-serialized JSON. */\n  payload: string | Uint8Array | ArrayBuffer\n  /** The `Nodaro-Signature` header (the first value, if it came more than once). */\n  header: string | readonly string[] | null | undefined\n  /** The endpoint's signing secret (`whsec_…`). */\n  secret: string\n  /**\n   * Refuse a signature older or newer than this many seconds (replay\n   * protection). Default 300. `0` turns the check off — not recommended.\n   * Anything that is not a finite number ≥ 0 throws a `RangeError` rather\n   * than quietly turning the check off.\n   */\n  toleranceSeconds?: number\n}\n\nconst DEFAULT_TOLERANCE_SECONDS = 300\nconst HEX_SIGNATURE = /^[0-9a-f]{64}$/\n\nfunction toBytes(payload: string | Uint8Array | ArrayBuffer): Uint8Array {\n  if (typeof payload === \"string\") return new TextEncoder().encode(payload)\n  if (payload instanceof Uint8Array) return payload\n  return new Uint8Array(payload)\n}\n\nfunction hexToBytes(hex: string): Uint8Array {\n  const out = new Uint8Array(hex.length / 2)\n  for (let i = 0; i < out.length; i++) out[i] = parseInt(hex.slice(i * 2, i * 2 + 2), 16)\n  return out\n}\n\n/** Compares every byte whatever it finds, so the time taken says nothing. */\nfunction constantTimeEqual(a: Uint8Array, b: Uint8Array): boolean {\n  if (a.length !== b.length) return false\n  let diff = 0\n  for (let i = 0; i < a.length; i++) diff |= a[i]! ^ b[i]!\n  return diff === 0\n}\n\nfunction parseHeader(raw: string): { timestamp: number; signatures: string[] } {\n  let timestamp: number | null = null\n  const signatures: string[] = []\n  for (const part of raw.split(\",\")) {\n    const eq = part.indexOf(\"=\")\n    if (eq <= 0) continue\n    const key = part.slice(0, eq).trim()\n    const value = part.slice(eq + 1).trim()\n    if (key === \"t\") {\n      if (!/^\\d{1,15}$/.test(value)) {\n        throw new WebhookSignatureError(\"malformed_header\", \"Nodaro-Signature has no valid timestamp (t=)\")\n      }\n      timestamp = Number(value)\n    } else if (key === \"v1\") {\n      signatures.push(value.toLowerCase())\n    }\n  }\n  if (timestamp === null) throw new WebhookSignatureError(\"malformed_header\", \"Nodaro-Signature has no timestamp (t=)\")\n  if (signatures.length === 0) throw new WebhookSignatureError(\"malformed_header\", \"Nodaro-Signature has no v1 signature\")\n  return { timestamp, signatures }\n}\n\n/**\n * Check a webhook request's `Nodaro-Signature` and return its event.\n * Throws {@link WebhookSignatureError} (with a `code`) when it does not check out.\n *\n * Act on the event this returns — its `id` (to de-duplicate) and `type` (to\n * route) — never on the `Nodaro-Delivery` / `Nodaro-Event` headers: only the\n * timestamp and the body are signed. During a secret rotation's grace the\n * header carries a `v1=` for each secret; either matching is enough.\n *\n * ```ts\n * const event = await verifyWebhookSignature({\n *   payload: rawBody,\n *   header: request.headers.get(\"nodaro-signature\"),\n *   secret: process.env.NODARO_WEBHOOK_SECRET!,\n * })\n * if (event.type === \"job.completed\") console.info(event.data.job.output_data)\n * ```\n */\nexport async function verifyWebhookSignature(options: VerifyWebhookSignatureOptions): Promise<WebhookEvent> {\n  const { payload, secret } = options\n  const tolerance = options.toleranceSeconds ?? DEFAULT_TOLERANCE_SECONDS\n  if (typeof tolerance !== \"number\" || !Number.isFinite(tolerance) || tolerance < 0) {\n    // A programming error, not a request to refuse: say so instead of\n    // quietly accepting replays (NaN or a negative would skip the check).\n    throw new RangeError(\"toleranceSeconds must be a finite number of seconds, 0 or more\")\n  }\n  if (!secret) throw new WebhookSignatureError(\"missing_secret\", \"No signing secret was given\")\n\n  const header = typeof options.header === \"string\" ? options.header : options.header?.[0]\n  if (!header || !header.trim()) throw new WebhookSignatureError(\"missing_header\", \"The request has no Nodaro-Signature header\")\n  const { timestamp, signatures } = parseHeader(header)\n\n  const subtle = globalThis.crypto?.subtle\n  if (!subtle) throw new WebhookSignatureError(\"crypto_unavailable\", \"Web Crypto (crypto.subtle) is not available in this runtime\")\n\n  const body = toBytes(payload)\n  const prefix = new TextEncoder().encode(`${timestamp}.`)\n  const message = new Uint8Array(prefix.length + body.length)\n  message.set(prefix, 0)\n  message.set(body, prefix.length)\n\n  const key = await subtle.importKey(\"raw\", new TextEncoder().encode(secret), { name: \"HMAC\", hash: \"SHA-256\" }, false, [\"sign\"])\n  const expected = new Uint8Array(await subtle.sign(\"HMAC\", key, message))\n\n  let matched = false\n  for (const candidate of signatures) {\n    // A candidate that is not 64 hex characters cannot match; it is still\n    // compared (as a zero buffer) so every candidate costs the same.\n    const wellFormed = HEX_SIGNATURE.test(candidate)\n    const bytes = wellFormed ? hexToBytes(candidate) : new Uint8Array(expected.length)\n    if (constantTimeEqual(bytes, expected) && wellFormed) matched = true\n  }\n  if (!matched) throw new WebhookSignatureError(\"signature_mismatch\", \"The Nodaro-Signature does not match the body\")\n\n  if (tolerance > 0) {\n    const now = Math.floor(Date.now() / 1000)\n    if (Math.abs(now - timestamp) > tolerance) {\n      throw new WebhookSignatureError(\n        \"timestamp_outside_tolerance\",\n        `The signature's timestamp is more than ${tolerance} seconds from now`,\n      )\n    }\n  }\n\n  try {\n    return JSON.parse(new TextDecoder().decode(body)) as WebhookEvent\n  } catch {\n    throw new WebhookSignatureError(\"invalid_payload\", \"The signed body is not JSON\")\n  }\n}\n"]}

package/dist/chunk-WUIEZ6Z4.cjs

@@ -0,0 +1,360 @@
+'use strict';
+
+var chunkN6GLZOE4_cjs = require('./chunk-N6GLZOE4.cjs');
+var edl = require('@nodaro/shared/edl');
+var nodes = require('@nodaro/shared/nodes');
+
+// src/resources/edit-use-case-inputs.ts
+var TRAILER_FORMATS = ["9:16", "1:1", "4:5", "16:9"];
+var CLIP_PACK_MIN_TARGET_SEC = 5;
+var CLIP_PACK_MAX_TARGET_SEC = 180;
+function tightenBody(input) {
+  const { mediaUrl, ...rest } = input;
+  return { mediaUrls: [mediaUrl], ...Object.fromEntries(Object.entries(rest).filter(([, v]) => v !== void 0)) };
+}
+function chaptersBody(input) {
+  return {
+    mediaUrls: [input.mediaUrl],
+    ...input.planTier !== void 0 ? { planTier: input.planTier } : {},
+    ...input.instructions !== void 0 ? { instructions: input.instructions } : {},
+    ...input.styleGuide !== void 0 ? { styleGuide: input.styleGuide } : {}
+  };
+}
+function trailerBody(input) {
+  return {
+    mediaUrls: [input.mediaUrl],
+    ...input.introCardUrl !== void 0 ? { introCardUrl: input.introCardUrl } : {},
+    // An empty list is sent as is: the route refuses it (at least one format).
+    ...input.formats !== void 0 ? { formats: input.formats } : {},
+    ...input.reviewBeforeRender !== void 0 ? { reviewBeforeRender: input.reviewBeforeRender } : {},
+    ...input.planTier !== void 0 ? { planTier: input.planTier } : {},
+    ...input.instructions !== void 0 ? { instructions: input.instructions } : {},
+    ...input.styleGuide !== void 0 ? { styleGuide: input.styleGuide } : {}
+  };
+}
+function clipPackBody(input) {
+  const { mediaUrl, ...rest } = input;
+  return { mediaUrls: [mediaUrl], ...Object.fromEntries(Object.entries(rest).filter(([, v]) => v !== void 0)) };
+}
+var continuePathOf = (type) => `/v1/${type}/continue`;
+function idempotencyHeaders(options) {
+  return options?.idempotencyKey ? { headers: { "Idempotency-Key": options.idempotencyKey } } : {};
+}
+var EditResource = class {
+  constructor(client) {
+    this.client = client;
+  }
+  client;
+  /**
+   * Detect silence ranges in an audio/video source (`POST /v1/silence-detect`).
+   * Keyless — one ffmpeg pass over the source's audio proxy.
+   */
+  silenceDetect(input) {
+    return this.client.request("POST", "/v1/silence-detect", {
+      body: {
+        audioUrl: input.audioUrl,
+        ...input.thresholdDb !== void 0 ? { thresholdDb: input.thresholdDb } : {},
+        ...input.minSilenceMs !== void 0 ? { minSilenceMs: input.minSilenceMs } : {},
+        ...input.padMs !== void 0 ? { padMs: input.padMs } : {},
+        ...input.workflowId !== void 0 ? { workflowId: input.workflowId } : {}
+      }
+    });
+  }
+  /**
+   * Measure how far apart the clocks of 2–6 recordings of one conversation are
+   * (`POST /v1/audio-sync`), by cross-correlating their audio — keyless, one
+   * ffmpeg decode per source. The finished job's `output_data.json` is an
+   * {@link AudioSyncResult}. A malformed request (fewer than 2 or more than 6
+   * sources, a repeated id, a `reference` that is not one of the ids) throws a
+   * typed `NodaroError` (400, `code: "validation_error"`) before any credits
+   * are reserved.
+   */
+  audioSync(input) {
+    return this.client.request("POST", "/v1/audio-sync", {
+      body: {
+        sources: input.sources.map((s) => ({ id: s.id, url: s.url })),
+        ...input.reference !== void 0 ? { reference: input.reference } : {},
+        ...input.workflowId !== void 0 ? { workflowId: input.workflowId } : {}
+      }
+    });
+  }
+  /**
+   * Which camera each speaker is on, from the cameras' own microphones (`POST
+   * /v1/speaker-map`), keyless. `output_data.json` is a `SpeakerMapResult`: pass
+   * it to {@link cameraSwitch} as `speakerMapResult`. A malformed request throws
+   * a `NodaroError` (400 `validation_error`; 422 `no_speakers` for a transcript
+   * with no speaker labels) before any credits are reserved.
+   */
+  speakerMap(input) {
+    return this.client.request("POST", "/v1/speaker-map", {
+      body: {
+        sources: input.sources.map((s) => ({ id: s.id, url: s.url, ...s.kind ? { kind: s.kind } : {} })),
+        transcript: input.transcript,
+        ...input.offsets !== void 0 ? { offsets: input.offsets } : {},
+        ...input.masterSourceId !== void 0 ? { masterSourceId: input.masterSourceId } : {},
+        ...input.wideSourceId !== void 0 ? { wideSourceId: input.wideSourceId } : {},
+        ...input.marginDb !== void 0 ? { marginDb: input.marginDb } : {},
+        ...input.workflowId !== void 0 ? { workflowId: input.workflowId } : {}
+      }
+    });
+  }
+  /**
+   * Render an edit decision list into a video or audio cut (`POST /v1/apply-edl`).
+   * The EDL is validated at ingress — an unresolvable source or a picture-less
+   * segment on a video edit throws a typed `NodaroError` (400, `code:
+   * "invalid_edl"`) before any credits are reserved.
+   */
+  applyEdl(input) {
+    return this.client.request("POST", "/v1/apply-edl", {
+      body: {
+        edl: input.edl,
+        ...input.sources !== void 0 ? { sources: input.sources } : {},
+        ...input.transcript !== void 0 ? { transcript: input.transcript } : {},
+        ...input.output !== void 0 ? { output: input.output } : {},
+        ...input.quality !== void 0 ? { quality: input.quality } : {},
+        ...input.crossfadeMs !== void 0 ? { crossfadeMs: input.crossfadeMs } : {},
+        ...input.clipKey !== void 0 ? { clipKey: input.clipKey } : {},
+        ...input.planBasis !== void 0 ? { planBasis: input.planBasis } : {},
+        ...input.workflowId !== void 0 ? { workflowId: input.workflowId } : {}
+      }
+    });
+  }
+  /**
+   * Tighten Episode (`POST /v1/tighten-episode`): tighten a podcast recording
+   * in one call — transcribe, cut the silences and filler, render, with
+   * optional captions, music and framing. Answers the run's job to poll; its
+   * `output_data` holds the episode. The run is priced as its steps at their own
+   * rates plus the listed per-run fee. Quote it first with
+   * {@link estimateTightenEpisode}.
+   */
+  tightenEpisode(input, options) {
+    return this.client.request("POST", "/v1/tighten-episode", { body: tightenBody(input), ...idempotencyHeaders(options) });
+  }
+  /**
+   * What a Tighten Episode run is estimated at (`POST /v1/tighten-episode/estimate`):
+   * its steps at their own rates plus its per-run fee. Nothing is created or
+   * charged. The estimate leans high: the render is priced at the recording's
+   * full length, while the charge follows the minutes actually rendered.
+   */
+  estimateTightenEpisode(input) {
+    return this.client.request("POST", "/v1/tighten-episode/estimate", { body: tightenBody(input) });
+  }
+  /**
+   * Chapters (`POST /v1/episode-chapters`): transcribe a recording and list its
+   * chapters in one call. Answers the run's job to poll; the finished job's
+   * `output_data.text` is the list as show notes (one `0:00 Title` line per
+   * chapter; once a chapter starts at 1:00:00 or later, every line is
+   * `H:MM:SS`), `output_data.json` the list itself (`{ startMs, title }[]`, the
+   * same rows; the first starts at 0). A run that finds no chapters fails,
+   * and its fee is refunded. Priced as its steps at their own rates plus the
+   * listed per-run fee; quote it first with {@link estimateEpisodeChapters}.
+   */
+  episodeChapters(input, options) {
+    return this.client.request("POST", "/v1/episode-chapters", { body: chaptersBody(input), ...idempotencyHeaders(options) });
+  }
+  /**
+   * What a Chapters run is estimated at (`POST /v1/episode-chapters/estimate`):
+   * its steps at their own rates plus its per-run fee. Nothing is created or
+   * charged. A recording whose length cannot be read is estimated at the
+   * 180-minute ceiling.
+   */
+  estimateEpisodeChapters(input) {
+    return this.client.request("POST", "/v1/episode-chapters/estimate", { body: chaptersBody(input) });
+  }
+  /**
+   * Trailer (`POST /v1/episode-trailer`): cut a 20–40 s trailer of a recording
+   * and deliver it in each chosen format (padded, never cropped), optionally
+   * after an intro card, in one call. The finished job's `output_data.formats`
+   * is `{ format, url }[]` in format order, the first also `output_data.videoUrl`;
+   * a format that failed is named in `output_data.failedFormats` (the run keeps
+   * the others). With `reviewBeforeRender` the run stops at a preview
+   * (`videoUrl`, no formats yet). Priced as its steps at their own rates plus
+   * the listed per-run fee; quote it first with {@link estimateEpisodeTrailer}.
+   */
+  episodeTrailer(input, options) {
+    return this.client.request("POST", "/v1/episode-trailer", { body: trailerBody(input), ...idempotencyHeaders(options) });
+  }
+  /**
+   * What a Trailer run is estimated at (`POST /v1/episode-trailer/estimate`):
+   * its steps at their own rates plus its per-run fee. Nothing is created or
+   * charged. The trailer is quoted at 40 seconds, the longest trailer the
+   * plan cuts; a Render final is quoted on the trailer the run cut (with the
+   * review's edits), plus the intro card.
+   */
+  estimateEpisodeTrailer(input) {
+    return this.client.request("POST", "/v1/episode-trailer/estimate", { body: trailerBody(input) });
+  }
+  /**
+   * Clip Pack (`POST /v1/clip-pack`): cut a recording into a pack of short
+   * clips in one call — the plan finds the best moments (`count`, default 8,
+   * of about `targetDurationSec`, default 60), each is rendered (framed 9:16
+   * with the speakers stacked by default; `framing: null` keeps the
+   * recording's shape) and captioned. An audio recording makes audio clips.
+   * The finished job's `output_data.clips` is `{ url, title?, hook?, clipKey,
+   * thumbnailUrl?, captionsFailed? }[]` in plan order, the first also
+   * `output_data.videoUrl` (`audioUrl` for audio clips). Every clip is tried:
+   * one that cannot be rendered is skipped, not charged and counted on
+   * `failedClips` (the pack keeps the others and its fee); a clip whose
+   * captions failed comes uncaptioned (`captionsFailed`, counted on
+   * `failedCaptions`). When no clip renders the run fails and its fee is
+   * refunded. With `reviewBeforeRender` the run stops at previews; Render
+   * final ({@link continueUseCase}) renders only the clips the edit keeps.
+   * Priced as its steps at their own rates plus the listed per-run fee;
+   * quote it first with {@link estimateClipPack}.
+   */
+  clipPack(input, options) {
+    return this.client.request("POST", "/v1/clip-pack", { body: clipPackBody(input), ...idempotencyHeaders(options) });
+  }
+  /**
+   * What a Clip Pack run is estimated at (`POST /v1/clip-pack/estimate`): its
+   * steps at their own rates plus its per-run fee. Nothing is created or
+   * charged. Each clip is quoted at twice the target length (the plan may cut
+   * a clip longer than asked); the charge follows each clip's real length.
+   */
+  estimateClipPack(input) {
+    return this.client.request("POST", "/v1/clip-pack/estimate", { body: clipPackBody(input) });
+  }
+  /**
+   * Continue a use-case run as a new job (`POST /v1/<type>/continue`, the
+   * run's own type: `input.nodeType`, else the type the job records, read with
+   * `GET /v1/jobs/:id`; when that read cannot tell, this rejects with a
+   * `NodaroError` coded `use_case_type_unknown` — pass `nodeType` then):
+   * `"from-failed"` keeps the steps that finished and runs the rest (the fee
+   * is held again; the failed run's was refunded);
+   * `"render-final"` renders the full-quality result after a review-on preview,
+   * with the preview's settings and no fee. A refusal that names another job
+   * (`already_running`, `continuation_superseded`,
+   * `render_final_already_rendered`) throws a `ContinuationRefusedError`
+   * carrying that `jobId`.
+   */
+  async continueUseCase(input, options) {
+    if (input.nodeType !== void 0 && !nodes.isUseCaseNodeType(input.nodeType)) {
+      throw new chunkN6GLZOE4_cjs.NodaroError(
+        `continueUseCase: nodeType "${String(input.nodeType)}" is not a use-case node type (${nodes.USE_CASE_NODE_TYPES.join(", ")})`,
+        "invalid_node_type",
+        400
+      );
+    }
+    const type = input.nodeType ?? await this.runTypeOf(input.jobId);
+    return this.client.request("POST", continuePathOf(type), {
+      body: { jobId: input.jobId, mode: input.mode, ...input.editedEdl !== void 0 ? { editedEdl: input.editedEdl } : {} },
+      ...idempotencyHeaders(options)
+    });
+  }
+  /**
+   * The use-case type a run records (`input_data.type`, else its `job_type`).
+   * When the key lacks the `jobs:read` scope (403 naming that scope) or the job
+   * names no use-case type, the type cannot be read: this rejects with a
+   * `NodaroError` (`use_case_type_unknown`, 400) asking for `nodeType`, and
+   * nothing is posted (decided 2026-10-18: no route is guessed for the run).
+   * Any other failure of the read, any other 403 included, is thrown as is.
+   */
+  async runTypeOf(jobId) {
+    const unknown = () => new chunkN6GLZOE4_cjs.NodaroError("continueUseCase: the run's node type cannot be read \u2014 pass nodeType", "use_case_type_unknown", 400);
+    let row;
+    try {
+      row = (await this.client.request("GET", `/v1/jobs/${encodeURIComponent(jobId)}`)).data;
+    } catch (err) {
+      if (err instanceof chunkN6GLZOE4_cjs.ForbiddenError && err.missingScope === "jobs:read") throw unknown();
+      throw err;
+    }
+    const input = row?.input_data;
+    const recorded = input && typeof input === "object" && !Array.isArray(input) ? input.type : void 0;
+    const type = typeof recorded === "string" && recorded.length > 0 ? recorded : row?.job_type;
+    if (!nodes.isUseCaseNodeType(type)) throw unknown();
+    return type;
+  }
+  /**
+   * Plan a transcript-driven cut (`POST /v1/edit-plan`). Reads a timed
+   * transcript (plus optional silence ranges) and the media sources, and plans
+   * the edit. The finished job's `output_data` holds the plan: an `Edl`
+   * (`"tighten"` or `"trailer"`), an {@link EdlClipSet} (`"clips"`), or a
+   * {@link ChapterSet} (`"chapters"`) — normalize it with {@link unwrapEditPlanOutput}.
+   *
+   * On a self-hosted install the request relays to nodaro.ai and needs the
+   * install connected (a 503 `code: "nodaro_connection_required"` otherwise);
+   * on nodaro.ai it runs directly.
+   */
+  editPlan(input) {
+    const planned = edl.resolveEditPlanSources(input.sources, {
+      offsets: input.offsets,
+      transcriptSourceId: input.transcriptSourceId
+    });
+    if (!planned.ok) {
+      const message = planned.issues.map((issue) => edl.describeAudioSyncOffsetIssue(issue)).join("; ");
+      return Promise.reject(new chunkN6GLZOE4_cjs.NodaroError(`editPlan: ${message}`, "edit_plan_sources", 400));
+    }
+    const transcript = planned.transcriptSourceId ? { ...input.transcript, sourceId: planned.transcriptSourceId } : input.transcript;
+    return this.client.request("POST", "/v1/edit-plan", {
+      body: {
+        mode: input.mode,
+        planTier: input.planTier,
+        transcript,
+        sources: planned.sources,
+        ...input.silence !== void 0 ? { silence: input.silence } : {},
+        ...input.instructions !== void 0 ? { instructions: input.instructions } : {},
+        ...input.styleGuide !== void 0 ? { styleGuide: input.styleGuide } : {},
+        ...input.count !== void 0 ? { count: input.count } : {},
+        ...input.targetDurationSec !== void 0 ? { targetDurationSec: input.targetDurationSec } : {},
+        ...input.targetAspect !== void 0 ? { targetAspect: input.targetAspect } : {},
+        ...input.platform !== void 0 ? { platform: input.platform } : {},
+        ...input.workflowId !== void 0 ? { workflowId: input.workflowId } : {}
+      }
+    });
+  }
+  /**
+   * Camera Switch (podcast B5): choose which camera shows each cut of `edl`
+   * by who is speaking — the sound never changes. Cloud edition; a flat
+   * price. The finished job's `output_data.json` is the switched EDL (feed it
+   * to {@link applyEdl}) and `output_data.transcript` the transcript with
+   * `speakerNames` applied. A transcript with no speaker labels rejects with
+   * a {@link NodaroError} (`code: "no_speakers"`) before any request or charge.
+   */
+  cameraSwitch(input) {
+    if (edl.transcriptSpeakerLabels(input.transcript).length === 0) {
+      return Promise.reject(new chunkN6GLZOE4_cjs.NodaroError(
+        "cameraSwitch: the transcript has no speaker labels \u2014 transcribe with speaker detection on",
+        "no_speakers",
+        422
+      ));
+    }
+    const result = input.speakerMapResult;
+    if (result !== void 0 && !edl.speakerMapResultOf(result)) return Promise.reject(new chunkN6GLZOE4_cjs.NodaroError("cameraSwitch: speakerMapResult is not a Speaker Map result \u2014 pass that job's output_data.json", "not_a_speaker_map", 400));
+    const speakerMap = result !== void 0 ? edl.cameraSwitchSpeakerMap({ speakerMap: input.speakerMap }, input.edl, input.transcript, { speakerMap: result }) : input.speakerMap;
+    return this.client.request("POST", "/v1/camera-switch", {
+      body: {
+        edl: input.edl,
+        transcript: input.transcript,
+        ...speakerMap !== void 0 ? { speakerMap } : {},
+        ...input.speakerNames !== void 0 ? { speakerNames: input.speakerNames } : {},
+        ...input.minShotMs !== void 0 ? { minShotMs: input.minShotMs } : {},
+        ...input.leadMs !== void 0 ? { leadMs: input.leadMs } : {},
+        ...input.maxShotMs !== void 0 ? { maxShotMs: input.maxShotMs } : {},
+        ...input.wideEvery !== void 0 ? { wideEvery: input.wideEvery } : {},
+        ...input.layoutHints !== void 0 ? { layoutHints: input.layoutHints } : {},
+        ...input.workflowId !== void 0 ? { workflowId: input.workflowId } : {}
+      }
+    });
+  }
+  /**
+   * Remap a transcript through an EDL — a PURE client-side transform (NO
+   * request). Returns a new transcript whose word (and segment) timings are on
+   * the EDL's rendered output clock, dropping words that fall in cut regions and
+   * clipping straddlers. Runs `@nodaro/shared`'s canonical
+   * `remapTranscriptThroughEdl`, the same remap `applyEdl` performs server-side.
+   */
+  remapTranscript(edl$1, transcript) {
+    return edl.remapTranscriptThroughEdl(edl$1, transcript);
+  }
+};
+
+Object.defineProperty(exports, "USE_CASE_NODE_TYPES", {
+  enumerable: true,
+  get: function () { return nodes.USE_CASE_NODE_TYPES; }
+});
+exports.CLIP_PACK_MAX_TARGET_SEC = CLIP_PACK_MAX_TARGET_SEC;
+exports.CLIP_PACK_MIN_TARGET_SEC = CLIP_PACK_MIN_TARGET_SEC;
+exports.EditResource = EditResource;
+exports.TRAILER_FORMATS = TRAILER_FORMATS;
+//# sourceMappingURL=chunk-WUIEZ6Z4.cjs.map
+//# sourceMappingURL=chunk-WUIEZ6Z4.cjs.map