@nodaro/sdk 2.28.0 → 2.31.0

package/dist/chunk-6OGGJQVA.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/resources/templates.ts"],"names":[],"mappings":";AAwGO,IAAM,oBAAN,MAAwB;AAAA,EAC7B,YAAoB,MAAA,EAA0B;AAA1B,IAAA,IAAA,CAAA,MAAA,GAAA,MAAA;AAAA,EAA2B;AAAA,EAA3B,MAAA;AAAA;AAAA,EAGpB,MAAA,CAAO,MAAA,GAAgC,EAAC,EAAmC;AACzE,IAAA,OAAO,IAAA,CAAK,MAAA,CAAO,OAAA,CAAQ,KAAA,EAAO,sBAAA,EAAwB,EAAE,KAAA,EAAO,EAAE,GAAG,MAAA,EAAO,EAAG,CAAA;AAAA,EACpF;AAAA;AAAA,EAGA,IAAI,IAAA,EAAiC;AACnC,IAAA,OAAO,IAAA,CAAK,OAAO,OAAA,CAAQ,KAAA,EAAO,iBAAiB,kBAAA,CAAmB,IAAI,CAAC,CAAA,CAAE,CAAA;AAAA,EAC/E;AAAA;AAAA,EAGA,KAAA,CAAM,MAAc,MAAA,EAA2D;AAC7E,IAAA,OAAO,IAAA,CAAK,OAAO,OAAA,CAAQ,MAAA,EAAQ,iBAAiB,kBAAA,CAAmB,IAAI,CAAC,CAAA,MAAA,CAAA,EAAU;AAAA,MACpF,IAAA,EAAM;AAAA,KACP,CAAA;AAAA,EACH;AACF","file":"chunk-6OGGJQVA.js","sourcesContent":["import type { NodaroClientCore } from \"../core.js\"\n\n/**\n * Workflow-template marketplace — the PUBLIC-BY-DESIGN surfaces only:\n * browse cards, a single template with its full snapshot, and the free\n * clone-into-my-project action. Creator/admin surfaces (publish, mine,\n * favorites, metadata patch, tutorial flags) are deliberately NOT part of\n * the public SDK contract; first-party apps reach them via\n * `client.request()`.\n */\n\n/** Card returned by the marketplace browse (no snapshot payload). */\nexport interface TemplateBrowseCard {\n  id: string\n  slug: string\n  name: string\n  description: string | null\n  /** The listed price; when `estimatedPerMinuteCredits` is above 0, its fixed part. */\n  estimatedCredits: number\n  /**\n   * Credits per minute of the recording the template is given, when its price\n   * follows that recording's length (an Apply EDL render of a whole episode,\n   * an Edit Plan pass): the price is `estimatedCredits` plus this per minute.\n   * 0 or absent when the price does not depend on a recording's length.\n   */\n  estimatedPerMinuteCredits?: number\n  /**\n   * The listed price is a range: `estimatedCredits` / `estimatedPerMinuteCredits`\n   * are \"from\" (the saved settings), these \"up to\" — the most a run can cost over\n   * the template's exposed fields. Present only when they differ from \"from\".\n   */\n  maxEstimatedCredits?: number\n  maxEstimatedPerMinuteCredits?: number\n  category: string\n  outputTypes: string[]\n  tags: string[]\n  nodeTypesUsed: string[]\n  providersUsed: string[]\n  nodeCount: number\n  complexity: string\n  previewMediaUrl: string | null\n  previewMediaType: \"image\" | \"video\" | null\n  creatorId: string\n  creatorDisplayName: string | null\n  cloneCount: number\n  favoriteCount: number\n  createdAt: string\n}\n\nexport type TemplateSort = \"newest\" | \"popular\" | \"most-favorited\"\n\nexport interface BrowseTemplatesParams {\n  /** Opaque cursor from the previous page's `nextCursor`. */\n  cursor?: string\n  limit?: number\n  category?: string\n  outputType?: string\n  tag?: string\n  /** Full-text search over name/description/tags. */\n  search?: string\n  sort?: TemplateSort\n  /** Only templates using this node type. */\n  nodeType?: string\n  /** Only templates using this provider/model id. */\n  provider?: string\n  complexity?: string\n}\n\nexport interface BrowseTemplatesResult {\n  data: TemplateBrowseCard[]\n  /** Pass back as `cursor` to fetch the next page; `null` on the last page. */\n  nextCursor: string | null\n}\n\n/**\n * A single public template (`GET /v1/templates/:slug`) — the browse-card\n * fields plus the full workflow snapshot the viewer/clone consume. The route\n * returns the whole camelCased row, so additional columns may appear beyond\n * the ones typed here; the index signature keeps them reachable without\n * casting.\n */\nexport interface Template extends TemplateBrowseCard {\n  markdownDescription: string | null\n  /** React Flow node snapshots (generic node JSON, execution data stripped on clone). */\n  snapshotNodes: unknown[]\n  snapshotEdges: unknown[]\n  snapshotSettings: Record<string, unknown>\n  /** Channels the template is listed in (e.g. \"marketplace\", \"tutorial\"). */\n  listedIn: string[]\n  readonly [key: string]: unknown\n}\n\nexport interface CloneTemplateParams {\n  /** Target project (must belong to the caller). */\n  projectId: string\n  /** Optional name for the cloned workflow; defaults to the template's name. */\n  name?: string\n}\n\nexport interface CloneTemplateResult {\n  workflowId: string\n  projectId: string\n}\n\nexport class TemplatesResource {\n  constructor(private client: NodaroClientCore) {}\n\n  /** Browse the public template marketplace (cursor-paginated, no auth required). */\n  browse(params: BrowseTemplatesParams = {}): Promise<BrowseTemplatesResult> {\n    return this.client.request(\"GET\", \"/v1/templates/browse\", { query: { ...params } })\n  }\n\n  /** Fetch one public template by slug, including its full workflow snapshot. */\n  get(slug: string): Promise<Template> {\n    return this.client.request(\"GET\", `/v1/templates/${encodeURIComponent(slug)}`)\n  }\n\n  /** Clone a template into one of the caller's projects. Free — no credits charged. */\n  clone(slug: string, params: CloneTemplateParams): Promise<CloneTemplateResult> {\n    return this.client.request(\"POST\", `/v1/templates/${encodeURIComponent(slug)}/clone`, {\n      body: params,\n    })\n  }\n}\n"]}

package/dist/chunk-7A7HYFGM.js

@@ -0,0 +1,3 @@
+
+//# sourceMappingURL=chunk-7A7HYFGM.js.map
+//# sourceMappingURL=chunk-7A7HYFGM.js.map

package/dist/chunk-7A7HYFGM.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":[],"names":[],"mappings":"","file":"chunk-7A7HYFGM.js"}

package/dist/chunk-7ISSKQ6S.cjs

@@ -0,0 +1,106 @@
+'use strict';
+
+// src/resources/credits.ts
+var MODEL_COSTS_LIMIT = 50;
+var CreditsResource = class {
+  constructor(client) {
+    this.client = client;
+  }
+  client;
+  /**
+   * `GET /v1/user/credits` → the authenticated user's credit balance and tier
+   * info. Throws `UnauthorizedError` (401) when signed out, and the SDK's
+   * other typed errors on the usual statuses.
+   */
+  async balance() {
+    const res = await this.client.request(
+      "GET",
+      "/v1/user/credits"
+    );
+    return res.data;
+  }
+  /**
+   * `GET /v1/credits/transactions` → one page of the caller's credit
+   * transactions, newest first, with `nextCursor` for the next page (`null`
+   * at the end). Read `credits_charged` for what each run cost — it can be
+   * below the hold (`credits_reserved`) and is `null` while the hold is open.
+   * Cloud-only route: a self-hosted instance answers 404.
+   */
+  transactions(options = {}) {
+    return this.client.request("GET", "/v1/credits/transactions", {
+      query: { limit: options.limit, cursor: options.cursor }
+    });
+  }
+  /**
+   * `POST /v1/credits/model-costs` → per-identifier credit cost, for editor
+   * cost previews. Capped at the first {@link MODEL_COSTS_LIMIT} identifiers
+   * (the route's request limit). Preserves the `{ data, missing, errors }`
+   * fault-isolation shape verbatim (see {@link ModelCostsResult}).
+   */
+  modelCosts(ids) {
+    return this.client.request("POST", "/v1/credits/model-costs", {
+      body: { models: ids.slice(0, MODEL_COSTS_LIMIT) }
+    });
+  }
+  /**
+   * `POST /v1/credits/claim-signup-grant` → claims the account's free signup
+   * grant, once, with the browser signals of the page making the claim.
+   *
+   * Call it once per page load as soon as the session is known, and never
+   * wait on it for rendering: it is idempotent (a decided account answers
+   * with its state and `granted: false`), it costs the user nothing when it
+   * fails (the next load asks again), and the signals are what make the
+   * claim worth sending — collect them with `collectSignupKeys()` from
+   * `@nodaro/sdk/signup-signals` and pass whatever came back, `{}` included.
+   * Cloud-only route: a self-hosted instance answers 404.
+   */
+  claimSignupGrant(keys = {}) {
+    return this.client.request("POST", "/v1/credits/claim-signup-grant", {
+      body: keys
+    });
+  }
+  /**
+   * `POST /v1/credits/welcome-offer/claim` → the user's "yes" to the welcome
+   * offer, as ONE server action: the marketing-email consent is recorded,
+   * then the free signup grant is claimed with that consent. The abuse gate
+   * still decides — consent is necessary, not sufficient — so read `grant`:
+   * `"granted"` (the grant has landed: this call topped the subscription credits up to `credits` — not added on top — or it had landed before), `"withheld"` (refused), `"revoked"` (taken back earlier; nothing moves), `"unclaimed"` (nothing moved — treat as a failure and let the user retry).
+   * Pass the browser signals from `collectSignupKeys()` and your app's slug.
+   *
+   * **Browser session only.** Usable from a first-party web app signed in
+   * with a Supabase session (the consent is a person's choice in a browser);
+   * an API key or OAuth app token is refused with 403. 409
+   * `welcome_offer_disabled` while the deployment has the offer off — show
+   * it only when `balance().welcomeOffer` is present. Cloud-only route: a
+   * self-hosted instance answers 404.
+   */
+  claimWelcomeOffer(input = {}) {
+    return this.client.request("POST", "/v1/credits/welcome-offer/claim", {
+      body: input
+    });
+  }
+  /**
+   * `POST /v1/credits/welcome-offer/seen` → records that the one-time welcome
+   * popup was shown, so `balance().welcomeOffer.popupSeen` turns true on every
+   * app. Idempotent (the first stamp wins); a failed call only means the popup
+   * may show once more, so callers usually ignore errors.
+   *
+   * **Browser session only**, like {@link claimWelcomeOffer}: 403 for an API
+   * key or OAuth app token, 409 `welcome_offer_disabled` while the offer is
+   * off, 404 on a self-hosted instance.
+   */
+  markWelcomeOfferSeen() {
+    return this.client.request("POST", "/v1/credits/welcome-offer/seen");
+  }
+  // NOTE: no `estimate(...)` helper. The backend exposes
+  // `POST /v1/credits/estimate-workflow` (body `{ nodes }` → `{ data: {
+  // totalCredits, nodeCount } }`), but no consumer has a settled shape for it
+  // yet (studio pre-checks `balance >= Σ modelCosts` client-side rather than
+  // calling an estimate endpoint). Adding it now would be inventing an API
+  // surface ahead of a real caller, so it's deliberately omitted — add it when
+  // a consumer needs it, shaped to that need.
+};
+
+exports.CreditsResource = CreditsResource;
+//# sourceMappingURL=chunk-7ISSKQ6S.cjs.map
+//# sourceMappingURL=chunk-7ISSKQ6S.cjs.map

package/dist/chunk-7ISSKQ6S.cjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/resources/credits.ts"],"names":[],"mappings":";;;AA2KA,IAAM,iBAAA,GAAoB,EAAA;AAEnB,IAAM,kBAAN,MAAsB;AAAA,EAC3B,YAAoB,MAAA,EAA0B;AAA1B,IAAA,IAAA,CAAA,MAAA,GAAA,MAAA;AAAA,EAA2B;AAAA,EAA3B,MAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOpB,MAAM,OAAA,GAAgC;AACpC,IAAA,MAAM,GAAA,GAAM,MAAM,IAAA,CAAK,MAAA,CAAO,OAAA;AAAA,MAC5B,KAAA;AAAA,MACA;AAAA,KACF;AACA,IAAA,OAAO,GAAA,CAAI,IAAA;AAAA,EACb;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EASA,YAAA,CAAa,OAAA,GAAqC,EAAC,EAAoC;AACrF,IAAA,OAAO,IAAA,CAAK,MAAA,CAAO,OAAA,CAAgC,KAAA,EAAO,0BAAA,EAA4B;AAAA,MACpF,OAAO,EAAE,KAAA,EAAO,QAAQ,KAAA,EAAO,MAAA,EAAQ,QAAQ,MAAA;AAAO,KACvD,CAAA;AAAA,EACH;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,WAAW,GAAA,EAA0C;AACnD,IAAA,OAAO,IAAA,CAAK,MAAA,CAAO,OAAA,CAA0B,MAAA,EAAQ,yBAAA,EAA2B;AAAA,MAC9E,MAAM,EAAE,MAAA,EAAQ,IAAI,KAAA,CAAM,CAAA,EAAG,iBAAiB,CAAA;AAAE,KACjD,CAAA;AAAA,EACH;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAcA,gBAAA,CAAiB,IAAA,GAAmB,EAAC,EAAoC;AACvE,IAAA,OAAO,IAAA,CAAK,MAAA,CAAO,OAAA,CAAgC,MAAA,EAAQ,gCAAA,EAAkC;AAAA,MAC3F,IAAA,EAAM;AAAA,KACP,CAAA;AAAA,EACH;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAiBA,iBAAA,CAAkB,KAAA,GAAgC,EAAC,EAAqC;AACtF,IAAA,OAAO,IAAA,CAAK,MAAA,CAAO,OAAA,CAAiC,MAAA,EAAQ,iCAAA,EAAmC;AAAA,MAC7F,IAAA,EAAM;AAAA,KACP,CAAA;AAAA,EACH;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAYA,oBAAA,GAAwD;AACtD,IAAA,OAAO,IAAA,CAAK,MAAA,CAAO,OAAA,CAAgC,MAAA,EAAQ,gCAAgC,CAAA;AAAA,EAC7F;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AASF","file":"chunk-7ISSKQ6S.cjs","sourcesContent":["import type { NodaroClientCore } from \"../core.js\"\n\n/**\n * Authenticated user's credit balance — the shape of `GET /v1/user/credits`'s\n * `data` field. Mirrors the canonical `UserBalance` from the backend billing\n * module (`backend/src/ee/billing/credits.ts`), the source of truth: keep this\n * in sync if that interface changes.\n */\nexport interface UserBalance {\n  total: number\n  subscription: number\n  topup: number\n  dailySpent: number\n  dailyLimit: number | null\n  monthlyAllocation: number\n  /** Stored billing tier. Display should prefer `effectiveTier`. */\n  tier: string\n  /** Derived entitlement tier: \"payg\" when stored-free with purchased credits. */\n  effectiveTier: string\n  features: Record<string, unknown>\n  periodEnd: string | null\n  /** Credits earned for app usage (free tier only — earned by running flows). */\n  appCreditsAllowance: number\n  /** Present when a deployment uses an external shared wallet. Raw credits;\n   * null means unavailable. Do not substitute the personal `total` balance. */\n  externalWallet?: { available: number | null }\n  /**\n   * Where the account's free signup grant stands. `\"withheld\"` means the\n   * account works but the grant did not land — show the activation path.\n   * Absent where the deployment has no signup grant.\n   */\n  freeGrantState?: FreeGrantState\n  /**\n   * Present only with `freeGrantState: \"withheld\"`, when the claim showed no\n   * browser signals at all: the app may say \"free credits need a regular\n   * browser — reload\", because a reload in one judges the account again.\n   */\n  freeGrantNotice?: \"browser_unmeasured\"\n  /**\n   * The welcome-credits opt-in. PRESENT only while the deployment has the\n   * offer switched on — absent means \"no popup, no banner, no block\".\n   */\n  welcomeOffer?: WelcomeOfferState\n}\n\n/** Where an account's free signup grant stands. */\nexport type FreeGrantState = \"unclaimed\" | \"granted\" | \"withheld\" | \"revoked\"\n\n/** `UserBalance.welcomeOffer` — what an app needs to show the welcome offer. */\nexport interface WelcomeOfferState {\n  /** The one-time popup was already shown (see `markWelcomeOfferSeen`). */\n  popupSeen: boolean\n  /**\n   * The account already has its credits (granted elsewhere) but still owes\n   * the email consent: the web apps block creation until it is given — the\n   * claim records it.\n   */\n  consentPending: boolean\n  /** The credits a claim grants. Name this figure in the offer; never hard-code it. */\n  credits: number\n}\n\n/** What `claimWelcomeOffer` sends: the browser signals plus the app answering. */\nexport interface WelcomeOfferClaimInput extends SignupKeys {\n  /**\n   * The answering app's slug (lowercase letters, digits and `-`, up to 40\n   * characters), recorded with the consent. A value outside that grammar is\n   * stored as absent, never refused.\n   */\n  sourceApp?: string\n}\n\n/** The answer of `POST /v1/credits/welcome-offer/claim`. */\nexport interface WelcomeOfferClaimResult {\n  /** The email consent is recorded. */\n  consent: \"granted\"\n  /** Where the free grant stands after the claim — `\"withheld\"` when the abuse gate refused it. */\n  grant: FreeGrantState\n  /** The grant's figure. A grant tops the subscription credits UP TO it (it is not added on top), so a claim that lands it leaves the subscription credits at no less than this. */\n  credits: number\n}\n\n/** The answer of `POST /v1/credits/welcome-offer/seen`. */\nexport interface WelcomeOfferSeenResult {\n  ok: true\n}\n\n/**\n * Result of `POST /v1/credits/model-costs` — a batch cost lookup for editor\n * cost previews. `data` maps each priced identifier → its credit cost.\n *\n * Per-model fault isolation (the route runs the lookups under\n * `Promise.allSettled`): identifiers with no pricing row are reported in\n * `missing` (undisplayable until an operator seeds a price) and lookup\n * failures in `errors`, instead of failing the whole batch. Callers typically\n * render `'—'` for any identifier that lands in `missing`. The hard-fail\n * policy still triggers at reservation time when the user actually runs the\n * node — this preview lookup is intentionally lenient.\n */\nexport interface ModelCostsResult {\n  data: Record<string, number>\n  missing: string[]\n  errors: string[]\n}\n\n/**\n * The two browser signals a claim reports — SHA-256 hex digests computed by\n * `@nodaro/sdk/signup-signals` (`collectSignupKeys`). Either may be absent:\n * a browser that cannot be measured still claims, and the server treats the\n * absence as what it is. Any other value is stored as absent server-side.\n */\nexport interface SignupKeys {\n  browserKey?: string\n  deviceKey?: string\n}\n\n/** The answer of `POST /v1/credits/claim-signup-grant`. */\nexport interface SignupGrantClaimResult {\n  /** Where the account's free grant stands after this call. */\n  state: FreeGrantState\n  /** True only when THIS call moved the credits — a repeat is `false` with the same state. */\n  granted: boolean\n}\n\n/**\n * One row of `GET /v1/credits/transactions` — a run's reservation and how it\n * settled.\n *\n * Which amount to read: a run first HOLDS credits and is then settled — charged\n * all or part of the hold, the rest returned. `credits_charged` is what the run\n * cost (`null` while the hold is still open, `0` once refunded); sum it for\n * spend. `credits_reserved` is the hold, which never changes. `credits_used`\n * is the same hold under its original name, kept for existing integrations.\n */\nexport interface CreditTransaction {\n  id: string\n  /** ISO-8601. Also the paging cursor: pass the last row's value as `cursor`. */\n  created_at: string\n  /** Settled charge; `null` while `status` is `\"reserved\"`, `0` when refunded. */\n  credits_charged: number | null\n  /** The hold taken when the run was accepted. */\n  credits_reserved: number | null\n  /** The hold, under its original name. Prefer `credits_charged`. */\n  credits_used: number | null\n  /** The model or operation the credits were for. */\n  action: string | null\n  provider: string | null\n  /** Reservation lifecycle: `\"reserved\"`, `\"committed\"` or `\"refunded\"`. */\n  status: string | null\n  /** The caller's own billing details for the run (model, which pool paid, …). */\n  metadata: Record<string, unknown>\n  /** `\"workspace\"` when a class or team budget paid, not your balance. */\n  payer: \"user\" | \"workspace\"\n  workspaceId: string | null\n}\n\n/** A page of {@link CreditTransaction}s, newest first. */\nexport interface CreditTransactionsPage {\n  data: CreditTransaction[]\n  /** Pass as `cursor` for the next page; `null` when there are no more rows. */\n  nextCursor: string | null\n}\n\nexport interface CreditTransactionsOptions {\n  /** Rows per page, 1–50 (server default 20). */\n  limit?: number\n  /** The `nextCursor` of the previous page. */\n  cursor?: string\n}\n\n/** Max identifiers per `model-costs` batch — the route caps the request at 50. */\nconst MODEL_COSTS_LIMIT = 50\n\nexport class CreditsResource {\n  constructor(private client: NodaroClientCore) {}\n\n  /**\n   * `GET /v1/user/credits` → the authenticated user's credit balance and tier\n   * info. Throws `UnauthorizedError` (401) when signed out, and the SDK's\n   * other typed errors on the usual statuses.\n   */\n  async balance(): Promise<UserBalance> {\n    const res = await this.client.request<{ data: UserBalance }>(\n      \"GET\",\n      \"/v1/user/credits\",\n    )\n    return res.data\n  }\n\n  /**\n   * `GET /v1/credits/transactions` → one page of the caller's credit\n   * transactions, newest first, with `nextCursor` for the next page (`null`\n   * at the end). Read `credits_charged` for what each run cost — it can be\n   * below the hold (`credits_reserved`) and is `null` while the hold is open.\n   * Cloud-only route: a self-hosted instance answers 404.\n   */\n  transactions(options: CreditTransactionsOptions = {}): Promise<CreditTransactionsPage> {\n    return this.client.request<CreditTransactionsPage>(\"GET\", \"/v1/credits/transactions\", {\n      query: { limit: options.limit, cursor: options.cursor },\n    })\n  }\n\n  /**\n   * `POST /v1/credits/model-costs` → per-identifier credit cost, for editor\n   * cost previews. Capped at the first {@link MODEL_COSTS_LIMIT} identifiers\n   * (the route's request limit). Preserves the `{ data, missing, errors }`\n   * fault-isolation shape verbatim (see {@link ModelCostsResult}).\n   */\n  modelCosts(ids: string[]): Promise<ModelCostsResult> {\n    return this.client.request<ModelCostsResult>(\"POST\", \"/v1/credits/model-costs\", {\n      body: { models: ids.slice(0, MODEL_COSTS_LIMIT) },\n    })\n  }\n\n  /**\n   * `POST /v1/credits/claim-signup-grant` → claims the account's free signup\n   * grant, once, with the browser signals of the page making the claim.\n   *\n   * Call it once per page load as soon as the session is known, and never\n   * wait on it for rendering: it is idempotent (a decided account answers\n   * with its state and `granted: false`), it costs the user nothing when it\n   * fails (the next load asks again), and the signals are what make the\n   * claim worth sending — collect them with `collectSignupKeys()` from\n   * `@nodaro/sdk/signup-signals` and pass whatever came back, `{}` included.\n   * Cloud-only route: a self-hosted instance answers 404.\n   */\n  claimSignupGrant(keys: SignupKeys = {}): Promise<SignupGrantClaimResult> {\n    return this.client.request<SignupGrantClaimResult>(\"POST\", \"/v1/credits/claim-signup-grant\", {\n      body: keys,\n    })\n  }\n\n  /**\n   * `POST /v1/credits/welcome-offer/claim` → the user's \"yes\" to the welcome\n   * offer, as ONE server action: the marketing-email consent is recorded,\n   * then the free signup grant is claimed with that consent. The abuse gate\n   * still decides — consent is necessary, not sufficient — so read `grant`:\n   * `\"granted\"` (the grant has landed: this call topped the subscription credits up to `credits` — not added on top — or it had landed before), `\"withheld\"` (refused), `\"revoked\"` (taken back earlier; nothing moves), `\"unclaimed\"` (nothing moved — treat as a failure and let the user retry).\n   * Pass the browser signals from `collectSignupKeys()` and your app's slug.\n   *\n   * **Browser session only.** Usable from a first-party web app signed in\n   * with a Supabase session (the consent is a person's choice in a browser);\n   * an API key or OAuth app token is refused with 403. 409\n   * `welcome_offer_disabled` while the deployment has the offer off — show\n   * it only when `balance().welcomeOffer` is present. Cloud-only route: a\n   * self-hosted instance answers 404.\n   */\n  claimWelcomeOffer(input: WelcomeOfferClaimInput = {}): Promise<WelcomeOfferClaimResult> {\n    return this.client.request<WelcomeOfferClaimResult>(\"POST\", \"/v1/credits/welcome-offer/claim\", {\n      body: input,\n    })\n  }\n\n  /**\n   * `POST /v1/credits/welcome-offer/seen` → records that the one-time welcome\n   * popup was shown, so `balance().welcomeOffer.popupSeen` turns true on every\n   * app. Idempotent (the first stamp wins); a failed call only means the popup\n   * may show once more, so callers usually ignore errors.\n   *\n   * **Browser session only**, like {@link claimWelcomeOffer}: 403 for an API\n   * key or OAuth app token, 409 `welcome_offer_disabled` while the offer is\n   * off, 404 on a self-hosted instance.\n   */\n  markWelcomeOfferSeen(): Promise<WelcomeOfferSeenResult> {\n    return this.client.request<WelcomeOfferSeenResult>(\"POST\", \"/v1/credits/welcome-offer/seen\")\n  }\n\n  // NOTE: no `estimate(...)` helper. The backend exposes\n  // `POST /v1/credits/estimate-workflow` (body `{ nodes }` → `{ data: {\n  // totalCredits, nodeCount } }`), but no consumer has a settled shape for it\n  // yet (studio pre-checks `balance >= Σ modelCosts` client-side rather than\n  // calling an estimate endpoint). Adding it now would be inventing an API\n  // surface ahead of a real caller, so it's deliberately omitted — add it when\n  // a consumer needs it, shaped to that need.\n}\n"]}

package/dist/chunk-7LSFG2AF.js

@@ -0,0 +1,194 @@
+export { OBJECT_ASPECT_DEFAULTS, OBJECT_ASPECT_OPTIONS, OBJECT_ASSET_TYPES, OBJECT_ATTACH_COLUMNS } from '@nodaro/shared/entities';
+
+// src/resources/objects.ts
+var ObjectsResource = class {
+  constructor(client) {
+    this.client = client;
+  }
+  client;
+  /**
+   * List the caller's objects. By default returns active objects only;
+   * pass `archived: true` to fetch soft-deleted rows for an "archive" view.
+   * Optional `projectId` scopes the result to a single project; `q` keeps the
+   * objects whose name or description contains it.
+   */
+  list(params = {}) {
+    const query = {};
+    if (params.archived) query.archived = "true";
+    if (params.projectId) query.projectId = params.projectId;
+    if (params.q) query.q = params.q;
+    if (params.limit !== void 0) query.limit = String(params.limit);
+    if (params.cursor) query.cursor = params.cursor;
+    return this.client.request("GET", "/v1/objects", { query });
+  }
+  /**
+   * Convenience wrapper for `list({ archived: true })`. Returns soft-deleted
+   * rows so callers can drive a UI "Archived" tab without re-encoding the
+   * query param.
+   *
+   * `archived` is omitted from the param type — it's always set to `true` here.
+   */
+  listArchived(params = {}) {
+    return this.list({ ...params, archived: true });
+  }
+  /**
+   * Fetch a single object including in-flight asset job state. Soft-deleted
+   * (archived) rows are NOT returned by id — the route enforces
+   * `deleted_at IS NULL` so archived objects 404 (uniform Pass 10 F-90b
+   * "not_found" — does not leak the deleted vs non-existent distinction).
+   */
+  async get(id) {
+    const res = await this.client.request(
+      "GET",
+      `/v1/objects/${encodeURIComponent(id)}`
+    );
+    return { ...res, canonicalDescription: res.canonicalDescription || null };
+  }
+  /**
+   * Create a new object. `name` + `nodeId` are required — the route 400s
+   * otherwise. Returns the new row's id.
+   *
+   * Note: the underlying route is the same `POST /v1/objects` upsert that
+   * powers `update()`. This convenience wrapper enforces the INSERT-required
+   * fields at the type level and never sends an `id`.
+   */
+  create(data) {
+    return this.client.request("POST", "/v1/objects", { body: data });
+  }
+  /**
+   * Update an object. Only the fields you pass are written — undefined keys
+   * are NOT touched on the row. Worker-owned asset buckets are intentionally
+   * not exposed on this surface (see `UpdateObjectInput` for the rationale).
+   *
+   * Optimistic-concurrency: pass `expectedUpdatedAt` to require the row's
+   * `updated_at` still matches; on mismatch the route returns 409
+   * `concurrent_modification` carrying the fresh `updatedAt`. The SDK
+   * surfaces that as a generic `NodaroError` with the same code (per Phase
+   * E1 calibration finding — error centralization in `throwApiError`).
+   */
+  update(id, data) {
+    return this.client.request("POST", "/v1/objects", {
+      body: { id, ...data }
+    });
+  }
+  /**
+   * Soft-delete (archive) an object. The row is hidden from `list()` by
+   * default but recoverable via `restore(id)` or visible under
+   * `listArchived()`. Idempotent — repeating a delete on an already-archived
+   * row is a no-op.
+   */
+  delete(id) {
+    return this.client.request("DELETE", `/v1/objects/${encodeURIComponent(id)}`);
+  }
+  /**
+   * Hard-delete (permanent) an object — the row + every R2 asset it
+   * references. Archived rows ONLY: active objects return 400 `not_archived`.
+   * Call `delete()` first to archive, then `permanentDelete()` to destroy.
+   *
+   * Mirrors the `app_runs` permanent-delete pattern (archive-first) so a
+   * stray SDK / curl caller cannot bypass the studio's archive-first UI
+   * flow.
+   */
+  permanentDelete(id) {
+    return this.client.request("DELETE", `/v1/objects/${encodeURIComponent(id)}`, {
+      query: { permanent: "true" }
+    });
+  }
+  /**
+   * Un-archive an object. If the original name now collides (case-
+   * insensitive) with an active row, the server auto-suffixes "(restored)"
+   * and returns the effective name.
+   */
+  restore(id) {
+    return this.client.request("POST", `/v1/objects/${encodeURIComponent(id)}/restore`);
+  }
+  /**
+   * Fire `POST /v1/generate-object` to produce one or more candidate main
+   * images. With `count > 1`, all jobs are reserved up-front before any
+   * is enqueued — mid-batch failures roll back atomically.
+   *
+   * When `attachToObjectId` is set AND `count === 1`, the worker writes
+   * the result directly to the row's `source_image_url`; otherwise you must
+   * call `approveMainImage()` after picking a candidate.
+   */
+  async generate(data) {
+    const res = await this.client.request(
+      "POST",
+      "/v1/generate-object",
+      { body: data }
+    );
+    const jobIds = res.jobIds ?? (res.jobId ? [res.jobId] : []);
+    return res.jobId ? { jobIds, jobId: res.jobId } : { jobIds };
+  }
+  /**
+   * Fire `POST /v1/generate-object-asset` to produce a single variant.
+   * When the studio path is set (`attachToObjectId` + `attachToColumn` +
+   * `attachName`), the worker appends `{ name: attachName, url: <result> }`
+   * to the named JSONB array column on completion.
+   *
+   * Note: `attachToColumn` is REQUIRED for `assetType === "custom"` — the
+   * worker can't infer the bucket from the asset type. For canonical asset
+   * types (`angles` / `materials` / `variations` / `motion`), the column is
+   * derived automatically by the route.
+   */
+  generateAsset(data) {
+    return this.client.request("POST", "/v1/generate-object-asset", { body: data });
+  }
+  /**
+   * Fire `POST /v1/generate-object-motion` to animate the object's main
+   * image into a motion clip. Image-to-video, single clip per call; the
+   * attach column is hardcoded to `motion_clips` server-side (objects have a
+   * single motion bucket so the caller doesn't supply `attachToColumn`).
+   * When the studio path is set (`attachToObjectId` + `attachName`), the
+   * worker appends `{ name: attachName, url: <result> }` to the row's
+   * `motion_clips` column on completion.
+   *
+   * Defaults: `provider` → `"kling-turbo"`, `aspectRatio` → `"1:1"` (set
+   * server-side via `resolveObjectAspectRatio({ assetType: "motion" })`).
+   */
+  generateMotion(data) {
+    return this.client.request("POST", "/v1/generate-object-motion", { body: data });
+  }
+  /**
+   * Approve a completed `generate-object` job as the object's main image.
+   * Sets `source_image_url` and fires the LLM caption (Claude Sonnet vision)
+   * inline. Returns the new main-image URL plus the caption.
+   *
+   * Caption-failure semantics: the route still sends `""` on LLM sub-failure,
+   * but the SDK normalizes `""` → `null` here so `canonicalDescription` carries
+   * the same `string | null` semantics as characters. The main image is still
+   * set; call `recaption()` to retry.
+   *
+   * Optimistic-concurrency: pass `expectedUpdatedAt` to gate the update on
+   * the row's current `updated_at`; on mismatch the route returns 409
+   * `concurrent_modification` carrying the fresh token.
+   */
+  async approveMainImage(id, candidateJobId, expectedUpdatedAt) {
+    const res = await this.client.request(
+      "POST",
+      `/v1/objects/${encodeURIComponent(id)}/approve-main-image`,
+      { body: { candidateJobId, expectedUpdatedAt } }
+    );
+    return { sourceImageUrl: res.sourceImageUrl, canonicalDescription: res.canonicalDescription || null };
+  }
+  /**
+   * Re-fire the LLM caption against the object's current main image. 502s
+   * on LLM failure (unlike `approveMainImage` which preserves the side-effect
+   * and returns ""); returns 400 `main_image_required` if no main image is
+   * set yet.
+   *
+   * The route is a pure idempotent retry — it does NOT accept an
+   * `expectedUpdatedAt` token (per Phase E1 calibration finding: backend
+   * route is idempotent retry, not gated on optimistic-concurrency).
+   */
+  recaption(id) {
+    return this.client.request(
+      "POST",
+      `/v1/objects/${encodeURIComponent(id)}/llm-caption`
+    );
+  }
+};
+
+export { ObjectsResource };
+//# sourceMappingURL=chunk-7LSFG2AF.js.map
+//# sourceMappingURL=chunk-7LSFG2AF.js.map

package/dist/chunk-7LSFG2AF.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/resources/objects.ts"],"names":[],"mappings":";;;AAwYO,IAAM,kBAAN,MAAsB;AAAA,EAC3B,YAAoB,MAAA,EAA0B;AAA1B,IAAA,IAAA,CAAA,MAAA,GAAA,MAAA;AAAA,EAA2B;AAAA,EAA3B,MAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQpB,IAAA,CAAK,MAAA,GAA4B,EAAC,EAA+D;AAC/F,IAAA,MAAM,QAA4C,EAAC;AACnD,IAAA,IAAI,MAAA,CAAO,QAAA,EAAU,KAAA,CAAM,QAAA,GAAW,MAAA;AACtC,IAAA,IAAI,MAAA,CAAO,SAAA,EAAW,KAAA,CAAM,SAAA,GAAY,MAAA,CAAO,SAAA;AAC/C,IAAA,IAAI,MAAA,CAAO,CAAA,EAAG,KAAA,CAAM,CAAA,GAAI,MAAA,CAAO,CAAA;AAC/B,IAAA,IAAI,OAAO,KAAA,KAAU,MAAA,QAAiB,KAAA,GAAQ,MAAA,CAAO,OAAO,KAAK,CAAA;AACjE,IAAA,IAAI,MAAA,CAAO,MAAA,EAAQ,KAAA,CAAM,MAAA,GAAS,MAAA,CAAO,MAAA;AACzC,IAAA,OAAO,KAAK,MAAA,CAAO,OAAA,CAAQ,OAAO,aAAA,EAAe,EAAE,OAAO,CAAA;AAAA,EAC5D;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EASA,YAAA,CAAa,MAAA,GAA8C,EAAC,EAA+D;AACzH,IAAA,OAAO,KAAK,IAAA,CAAK,EAAE,GAAG,MAAA,EAAQ,QAAA,EAAU,MAAM,CAAA;AAAA,EAChD;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,MAAM,IAAI,EAAA,EAAmC;AAC3C,IAAA,MAAM,GAAA,GAAM,MAAM,IAAA,CAAK,MAAA,CAAO,OAAA;AAAA,MAC5B,KAAA;AAAA,MACA,CAAA,YAAA,EAAe,kBAAA,CAAmB,EAAE,CAAC,CAAA;AAAA,KACvC;AAIA,IAAA,OAAO,EAAE,GAAG,GAAA,EAAK,oBAAA,EAAsB,GAAA,CAAI,wBAAwB,IAAA,EAAK;AAAA,EAC1E;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAUA,OAAO,IAAA,EAAkD;AACvD,IAAA,OAAO,IAAA,CAAK,OAAO,OAAA,CAAQ,MAAA,EAAQ,eAAe,EAAE,IAAA,EAAM,MAAM,CAAA;AAAA,EAClE;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAaA,MAAA,CAAO,IAAY,IAAA,EAAsD;AACvE,IAAA,OAAO,IAAA,CAAK,MAAA,CAAO,OAAA,CAAQ,MAAA,EAAQ,aAAA,EAAe;AAAA,MAChD,IAAA,EAAM,EAAE,EAAA,EAAI,GAAG,IAAA;AAAK,KACrB,CAAA;AAAA,EACH;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,OAAO,EAAA,EAAwD;AAC7D,IAAA,OAAO,IAAA,CAAK,OAAO,OAAA,CAAQ,QAAA,EAAU,eAAe,kBAAA,CAAmB,EAAE,CAAC,CAAA,CAAE,CAAA;AAAA,EAC9E;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAWA,gBAAgB,EAAA,EAAyD;AACvE,IAAA,OAAO,IAAA,CAAK,OAAO,OAAA,CAAQ,QAAA,EAAU,eAAe,kBAAA,CAAmB,EAAE,CAAC,CAAA,CAAA,EAAI;AAAA,MAC5E,KAAA,EAAO,EAAE,SAAA,EAAW,MAAA;AAAO,KAC5B,CAAA;AAAA,EACH;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,QAAQ,EAAA,EAAmD;AACzD,IAAA,OAAO,IAAA,CAAK,OAAO,OAAA,CAAQ,MAAA,EAAQ,eAAe,kBAAA,CAAmB,EAAE,CAAC,CAAA,QAAA,CAAU,CAAA;AAAA,EACpF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAWA,MAAM,SAAS,IAAA,EAA0D;AACvE,IAAA,MAAM,GAAA,GAAM,MAAM,IAAA,CAAK,MAAA,CAAO,OAAA;AAAA,MAC5B,MAAA;AAAA,MAAQ,qBAAA;AAAA,MAAuB,EAAE,MAAM,IAAA;AAAK,KAC9C;AAEA,IAAA,MAAM,MAAA,GAAS,IAAI,MAAA,KAAW,GAAA,CAAI,QAAQ,CAAC,GAAA,CAAI,KAAK,CAAA,GAAI,EAAC,CAAA;AACzD,IAAA,OAAO,GAAA,CAAI,QAAQ,EAAE,MAAA,EAAQ,OAAO,GAAA,CAAI,KAAA,EAAM,GAAI,EAAE,MAAA,EAAO;AAAA,EAC7D;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAaA,cACE,IAAA,EACoC;AACpC,IAAA,OAAO,IAAA,CAAK,OAAO,OAAA,CAAQ,MAAA,EAAQ,6BAA6B,EAAE,IAAA,EAAM,MAAM,CAAA;AAAA,EAChF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAcA,eACE,IAAA,EACqC;AACrC,IAAA,OAAO,IAAA,CAAK,OAAO,OAAA,CAAQ,MAAA,EAAQ,8BAA8B,EAAE,IAAA,EAAM,MAAM,CAAA;AAAA,EACjF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAgBA,MAAM,gBAAA,CACJ,EAAA,EACA,cAAA,EACA,iBAAA,EACuC;AACvC,IAAA,MAAM,GAAA,GAAM,MAAM,IAAA,CAAK,MAAA,CAAO,OAAA;AAAA,MAC5B,MAAA;AAAA,MACA,CAAA,YAAA,EAAe,kBAAA,CAAmB,EAAE,CAAC,CAAA,mBAAA,CAAA;AAAA,MACrC,EAAE,IAAA,EAAM,EAAE,cAAA,EAAgB,mBAAkB;AAAE,KAChD;AAGA,IAAA,OAAO,EAAE,cAAA,EAAgB,GAAA,CAAI,gBAAgB,oBAAA,EAAsB,GAAA,CAAI,wBAAwB,IAAA,EAAK;AAAA,EACtG;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAYA,UAAU,EAAA,EAA4C;AACpD,IAAA,OAAO,KAAK,MAAA,CAAO,OAAA;AAAA,MACjB,MAAA;AAAA,MACA,CAAA,YAAA,EAAe,kBAAA,CAAmB,EAAE,CAAC,CAAA,YAAA;AAAA,KACvC;AAAA,EACF;AACF","file":"chunk-7LSFG2AF.js","sourcesContent":["import type { ObjectAspectRatio, ObjectAssetType, ObjectAttachColumn } from \"@nodaro/shared/entities\"\nexport type { ObjectAssetType, ObjectAttachColumn, ObjectAspectRatio } from \"@nodaro/shared/entities\"\nexport { OBJECT_ASSET_TYPES, OBJECT_ATTACH_COLUMNS, OBJECT_ASPECT_OPTIONS, OBJECT_ASPECT_DEFAULTS } from \"@nodaro/shared/entities\"\nimport type { NodaroClientCore } from \"../core.js\"\nimport type { GenerationSessionParams } from \"./nodes.js\"\n\n/**\n * Re-export the shared `ObjectAssetType` / `ObjectAttachColumn` unions and\n * their runtime tuples so SDK consumers don't have to add `@nodaro/shared` as\n * a second dependency just to typecheck the `assetType` / `attachToColumn`\n * fields. Single source of truth lives in `@nodaro/shared/entity-prompts`.\n *\n * `ObjectAspectRatio` is re-exported alongside them — `generateMotion`'s\n * `aspectRatio` field is the 5-value object enum (1:1 / 3:4 / 16:9 / 9:16 /\n * 4:3) from `@nodaro/shared/object-aspect-defaults`. Distinct from\n * `CharacterAspectRatio` because objects support an extra 4:3 framing for\n * product-showcase shots.\n */\n\n/**\n * Reference-photo kind discriminator — the mood-board roles a user can attach\n * to an object. Mirrors the `reference_photos.kind` field accepted by\n * `backend/src/routes/objects.ts` (the route accepts open strings; this SDK\n * type narrows to the 6 canonical roles surfaced by the Studio). `other` is\n * the free-form bucket.\n */\nexport type ObjectReferencePhotoKind =\n  | \"front\"\n  | \"side\"\n  | \"detail\"\n  | \"context\"\n  | \"moodBoard\"\n  | \"other\"\n\nexport interface ObjectReferencePhoto {\n  url: string\n  kind: ObjectReferencePhotoKind\n}\n\n/**\n * An object record returned by Nodaro's REST API. Mirrors the camelCase\n * shape produced by `backend/src/routes/objects.ts::toCamel()`.\n *\n * Asset buckets (`angles`, `materials`, `variations`, `motionClips`) are\n * independent JSONB arrays keyed by a human-readable variant name (e.g.\n * `\"front\"`, `\"wood\"`, `\"weathered\"`). Each entry's `url` points at an\n * R2-hosted asset.\n *\n * Identity-foundation fields:\n *   - `referencePhotos` — caller-supplied mood-board refs (cap 20). Objects\n *     do NOT carry a `piiConsentAt` field (location Phase 2 #7 only).\n *   - `canonicalDescription` — ~80–120-word LLM-authored visual caption,\n *     populated by `approveMainImage()` / `recaption()`. The wire still sends\n *     `\"\"` on caption sub-failure (the breaking wire change is deferred to a\n *     major bump), but `get()` normalizes `\"\"` → `null` so consumers see the\n *     same `string | null` semantics as characters.\n *   - `styleLock` — whether asset gens should anchor to the canonical style\n *     captured at approval time. Defaults to `true` on new rows.\n *\n * `Object` shadows the JS global, which TypeScript handles cleanly via\n * local-scope resolution. Consumers who need both can alias as\n * `import type { Object as NodaroObject } from \"@nodaro/sdk\"`.\n */\nexport interface Object {\n  id: string\n  userId: string\n  nodeId: string\n  projectId: string | null\n  name: string\n  description: string | null\n  category: string | null\n  style: string | null\n  sourceImageUrl: string | null\n  /** MODEL_CATALOG image-model id the main image was generated with (or `null`).\n   *  Set on create + editable via the update route. */\n  imageProvider: string | null\n  angles: Array<{ name: string; url: string }>\n  materials: Array<{ name: string; url: string }>\n  variations: Array<{ name: string; url: string }>\n  motionClips: Array<{ name: string; url: string }>\n  /** Named Product Boards — dense reference sheets, one per variant/colorway\n   *  (the `generate-image/product-board` factory preset rendered from the\n   *  object's images). A first-class bucket: community publish snapshots it\n   *  and clone hands the consumer their own copy to extend. Defaults to `[]`.\n   *  `type` marks an image-collage `\"identity\"` sheet vs a plain `\"looks\"`\n   *  board; `sourceImages` are the R2 URLs it was collaged from. Both optional\n   *  + backward-compatible (legacy boards have neither). */\n  boards?: Array<{ name: string; url: string; type?: \"looks\" | \"identity\"; sourceImages?: string[] }> | null\n  referencePhotos: ObjectReferencePhoto[]\n  /** `null` when no caption is set (or the LLM caption sub-failed) — the wire\n   *  sends `\"\"`, normalized to `null` in `get()` to match character semantics. */\n  canonicalDescription: string | null\n  styleLock: boolean\n  /** The user's chosen DEFAULT asset take per variant (Studio version history).\n   *  OPAQUE map: key `\"<bucket>:<variant>\"` (e.g. `\"angles:front\"`) → the chosen\n   *  asset URL (one already present in that bucket). Stored verbatim — keys are\n   *  NOT normalized; soft-capped server-side at 200 keys / 2048-char values\n   *  (overflow dropped silently). Defaults to `{}`. */\n  selectedAssetByVariant?: Record<string, string> | null\n  deletedAt: string | null\n  createdAt: string\n  updatedAt: string\n}\n\n/**\n * GET /v1/objects/:id may append a `pendingJobs` bucket the studio uses to\n * rehydrate spinners after a reload. Optional on the SDK surface — it doesn't\n * appear on `list()` rows.\n */\nexport interface ObjectDetail extends Object {\n  pendingJobs?: Array<{\n    jobId: string\n    assetType: string\n    name: string\n    status: string\n  }>\n}\n\n/**\n * Body for `client.objects.create()`. Mirrors the INSERT branch of\n * `upsertObjectBody` in `backend/src/routes/objects.ts`. `name` + `nodeId`\n * are required on create.\n */\nexport interface CreateObjectInput {\n  nodeId: string\n  name: string\n  description?: string\n  category?: ObjectCategory\n  style?: string\n  workflowId?: string\n  projectId?: string\n  sourceImageUrl?: string\n  /** Persistent image-model id (a MODEL_CATALOG image model). Validated\n   *  server-side — unknown / non-image / \"\" is stored as `null`. */\n  imageProvider?: string | null\n  referencePhotos?: ObjectReferencePhoto[]\n  canonicalDescription?: string\n  styleLock?: boolean\n  /** The user's chosen DEFAULT asset take per variant. OPAQUE\n   *  `\"<bucket>:<variant>\"` → chosen-URL map; a write REPLACES the whole map.\n   *  Keys stored verbatim; soft-capped server-side at 200 keys / 2048-char values. */\n  selectedAssetByVariant?: Record<string, string>\n}\n\n/**\n * The 10-value Object category enum. Mirrors the literal accepted by\n * `POST /v1/generate-object` and surfaced in the Object Studio category\n * picker. Distinct from location's geography-based set.\n */\nexport type ObjectCategory =\n  | \"furniture\"\n  | \"vehicle\"\n  | \"weapon\"\n  | \"food\"\n  | \"clothing\"\n  | \"electronics\"\n  | \"nature\"\n  | \"tool\"\n  | \"animal\"\n  | \"other\"\n\n/**\n * Body for `client.objects.update()`. Mirrors the UPDATE branch of\n * `upsertObjectBody` in `backend/src/routes/objects.ts`.\n *\n * Worker-owned asset buckets (`angles` / `materials` / `variations` /\n * `motionClips`) are deliberately omitted — the route drops them on UPDATE\n * so a Studio auto-save with a stale snapshot cannot clobber the worker's\n * atomic `append_object_asset()` writes.\n *\n * `expectedUpdatedAt` is the optimistic-concurrency token: when present, the\n * UPDATE only succeeds if the row's `updated_at` still matches; on mismatch\n * the route returns 409 so the studio can re-fetch + merge.\n */\nexport interface UpdateObjectInput {\n  name?: string\n  description?: string\n  category?: ObjectCategory\n  style?: string\n  sourceImageUrl?: string\n  /** Persistent image-model id (a MODEL_CATALOG image model). Validated\n   *  server-side — unknown / non-image / \"\" is stored as `null`. */\n  imageProvider?: string | null\n  referencePhotos?: ObjectReferencePhoto[]\n  canonicalDescription?: string\n  styleLock?: boolean\n  /** The user's chosen DEFAULT asset take per variant. OPAQUE\n   *  `\"<bucket>:<variant>\"` → chosen-URL map; a write REPLACES the whole map\n   *  (omit to leave untouched). Keys stored verbatim; soft-capped server-side\n   *  at 200 keys / 2048-char values. */\n  selectedAssetByVariant?: Record<string, string>\n  /** Named Product Boards (see `Object.boards`) — whole-array replace,\n   *  USER-owned (unlike the worker-owned buckets it flows through UPDATE).\n   *  Server caps: 24 boards, 200-char names, 30 sourceImages per board. */\n  boards?: Array<{ name: string; url: string; type?: \"looks\" | \"identity\"; sourceImages?: string[] }>\n  expectedUpdatedAt?: string\n}\n\nexport interface UpdateObjectResult {\n  id: string\n  updatedAt: string\n}\n\n/**\n * Combined create + update body (parameter for both branches). Exported for\n * callers that want to drive a single `upsert` flow without picking between\n * `Create*` and `Update*`. Mirrors the `upsertObjectBody` Zod schema in\n * `backend/src/routes/objects.ts`. `nodeId` + `name` are required on INSERT;\n * `id` flips the route into UPDATE mode.\n */\nexport interface UpsertObjectInput extends CreateObjectInput {\n  id?: string\n  expectedUpdatedAt?: string\n}\n\nexport type UpsertObjectResult = { id: string } | UpdateObjectResult\n\nexport interface ListObjectsParams {\n  /** When true, return archived objects instead of active ones. */\n  archived?: boolean\n  /** Optional project filter — server-scoped to the caller's user. */\n  projectId?: string\n  /**\n   * Search words: only the objects whose name or description contains every\n   * word (split on spaces, the first 5), in any order, ignoring case. Each\n   * word is matched as written (`%`, `_` and `*` are not wildcards;\n   * punctuation is kept); blank means no search; up to 200 characters.\n   * Combines with the other filters and with `cursor` paging.\n   */\n  q?: string\n  /**\n   * Max rows to return (cap 500). OPT-IN: omitted, the server returns the\n   * full legacy listing with no `nextCursor`; supplied, the response is one\n   * page plus `nextCursor` — keep passing it back until it is `null`.\n   */\n  limit?: number\n  /** Opaque cursor from a prior page's `nextCursor` (fetches the next page). */\n  cursor?: string\n}\n\n/**\n * Input for `client.objects.generate()` — fires the\n * `POST /v1/generate-object` route. Produces 1–10 candidate\n * main images; each lands as one `jobs` row in `pending` state and is then\n * enqueued for the worker.\n *\n * When `attachToObjectId` is set AND `count === 1`, the worker writes the\n * resulting URL directly to `objects.source_image_url` on completion —\n * caller doesn't need a separate `approveMainImage` call. Multi-candidate\n * batches MUST go through explicit approval so the user picks the winner.\n *\n * `seedPromptHint` (Pass 7 F-77) flows the parameter-picker's prompt fragment\n * through to the worker so a catalog selection (e.g. \"antique brass lantern\")\n * gets appended to the generated prompt context.\n */\nexport interface GenerateObjectInput extends GenerationSessionParams {\n  name: string\n  description?: string\n  userPrompt?: string\n  category?: ObjectCategory\n  style?: \"realistic\" | \"anime\" | \"3d-pixar\" | \"illustration\"\n  sourceImageUrl?: string\n  provider?: string\n  /** Number of candidate images to generate (1–10; server-validated). */\n  count?: number\n  /** Auto-attach the result to this object row (single-candidate only). */\n  attachToObjectId?: string\n  /** Parameter-picker prompt-fragment pass-through. */\n  seedPromptHint?: string\n  /** Optional name to set on the attached row alongside the main image. */\n  attachName?: string\n  /** Optimistic-concurrency token for the single-candidate auto-attach path. */\n  expectedUpdatedAt?: string\n}\n\n/**\n * `generate()` response — `jobIds` is ALWAYS present (the harmonized contract,\n * matching characters). `jobId` is a deprecated back-compat alias populated only\n * on `count === 1`; prefer `jobIds`. (Will be removed on the next major.)\n */\nexport interface GenerateObjectResult {\n  jobIds: string[]\n  /** @deprecated count===1 back-compat alias — use `jobIds`. */\n  jobId?: string\n}\n\n/**\n * Input for `client.objects.generateAsset()` — fires the\n * `POST /v1/generate-object-asset` route. Produces a single\n * angles / materials / variations / custom variant.\n *\n * When all three studio-path fields are set (`attachToObjectId` +\n * `attachToColumn` + `attachName`), the worker appends\n * `{ name: attachName, url: <result> }` to the named JSONB array column on\n * the user's object row on completion. `attachToColumn` is REQUIRED for\n * `assetType === \"custom\"` — the worker can't infer the bucket from the\n * asset type.\n */\nexport interface GenerateObjectAssetInput extends GenerationSessionParams {\n  assetType: ObjectAssetType\n  variant: string\n  name: string\n  description?: string\n  userPrompt?: string\n  category?: string\n  style?: \"realistic\" | \"anime\" | \"3d-pixar\" | \"illustration\"\n  sourceImageUrl?: string\n  provider?: string\n  attachToObjectId?: string\n  attachToColumn?: ObjectAttachColumn\n  attachName?: string\n  /** Parameter-picker prompt-fragment pass-through (Pass 7 F-77). */\n  seedPromptHint?: string\n}\n\nexport interface GenerateObjectAssetResult {\n  jobId: string\n}\n\n/**\n * Input for `client.objects.generateMotion()` — fires the\n * `POST /v1/generate-object-motion` route. Produces a single motion clip\n * (rotation, orbit, hover, drift, etc.) animated FROM a static product-shot\n * image.\n *\n * Mirrors `client.locations.generateMotion()` minus the location-specific\n * atmospheric fields. The route hardcodes the attach column to `motion_clips`\n * — callers supply `attachToObjectId` + `attachName` only.\n *\n * `sourceImageUrl` is REQUIRED — image-to-video needs a source frame and the\n * route has no fallback (no `source_image_url` column to pull from on the\n * objects row at this point in the flow; the studio path supplies the\n * canonical product-shot URL explicitly).\n *\n * Object-specific defaults vs location:\n *   - `provider` defaults to `\"kling-turbo\"` (not location's `\"kling\"`)\n *   - `aspectRatio` defaults to `\"1:1\"` server-side via\n *     `resolveObjectAspectRatio({ assetType: \"motion\" })` — objects are\n *     product-showcase framing, not cinematic establishing shots.\n *\n * When the studio path is set (`attachToObjectId` + `attachName`), the\n * worker appends `{ name: attachName, url: <result> }` to the object row's\n * `motion_clips` JSONB column on completion.\n */\nexport interface GenerateObjectMotionInput extends GenerationSessionParams {\n  motionPrompt: string\n  sourceImageUrl: string\n  provider?: string\n  name: string\n  /** Source clip URL — when set, worker routes to video-to-video refine. */\n  refineFromVideoUrl?: string\n  category?: string\n  style?: \"realistic\" | \"anime\" | \"3d-pixar\" | \"illustration\"\n  canonicalDescription?: string\n  /** Parameter-picker prompt-fragment pass-through (Pass 7 F-77). */\n  seedPromptHint?: string\n  attachToObjectId?: string\n  attachName?: string\n  /**\n   * Optional aspect ratio override. Defaults to 1:1 server-side. One of the\n   * 5-value `ObjectAspectRatio` union (1:1 / 3:4 / 16:9 / 9:16 / 4:3) —\n   * objects have their own enum (with 4:3 added) vs the character set.\n   */\n  aspectRatio?: ObjectAspectRatio\n  /**\n   * Optional clip duration in seconds. Validated server-side against the chosen\n   * provider's allowed durations (e.g. kling 5/10, wan-i2v 5/10/15); omitted →\n   * the model's own default (no behavior change). Mirrors generate-video's\n   * per-model i2v duration lever.\n   */\n  duration?: number\n}\n\nexport interface GenerateObjectMotionResult {\n  jobId: string\n}\n\nexport interface ApproveObjectMainImageResult {\n  sourceImageUrl: string\n  /**\n   * LLM-authored caption. `null` when the LLM caption sub-failed — the wire\n   * sends `\"\"`, normalized to `null` here so consumers see the same\n   * `string | null` semantics as characters. The main image is still set; call\n   * `recaption()` to retry.\n   */\n  canonicalDescription: string | null\n}\n\nexport interface RecaptionObjectResult {\n  canonicalDescription: string\n}\n\nexport class ObjectsResource {\n  constructor(private client: NodaroClientCore) {}\n\n  /**\n   * List the caller's objects. By default returns active objects only;\n   * pass `archived: true` to fetch soft-deleted rows for an \"archive\" view.\n   * Optional `projectId` scopes the result to a single project; `q` keeps the\n   * objects whose name or description contains it.\n   */\n  list(params: ListObjectsParams = {}): Promise<{ objects: Object[]; nextCursor?: string | null }> {\n    const query: Record<string, string | undefined> = {}\n    if (params.archived) query.archived = \"true\"\n    if (params.projectId) query.projectId = params.projectId\n    if (params.q) query.q = params.q\n    if (params.limit !== undefined) query.limit = String(params.limit)\n    if (params.cursor) query.cursor = params.cursor\n    return this.client.request(\"GET\", \"/v1/objects\", { query })\n  }\n\n  /**\n   * Convenience wrapper for `list({ archived: true })`. Returns soft-deleted\n   * rows so callers can drive a UI \"Archived\" tab without re-encoding the\n   * query param.\n   *\n   * `archived` is omitted from the param type — it's always set to `true` here.\n   */\n  listArchived(params: Omit<ListObjectsParams, \"archived\"> = {}): Promise<{ objects: Object[]; nextCursor?: string | null }> {\n    return this.list({ ...params, archived: true })\n  }\n\n  /**\n   * Fetch a single object including in-flight asset job state. Soft-deleted\n   * (archived) rows are NOT returned by id — the route enforces\n   * `deleted_at IS NULL` so archived objects 404 (uniform Pass 10 F-90b\n   * \"not_found\" — does not leak the deleted vs non-existent distinction).\n   */\n  async get(id: string): Promise<ObjectDetail> {\n    const res = await this.client.request<ObjectDetail>(\n      \"GET\",\n      `/v1/objects/${encodeURIComponent(id)}`,\n    )\n    // Normalize the wire `\"\"` caption (DB null / LLM sub-failure) → null so\n    // consumers see the same `string | null` semantics as characters. New\n    // object — never mutate the response.\n    return { ...res, canonicalDescription: res.canonicalDescription || null }\n  }\n\n  /**\n   * Create a new object. `name` + `nodeId` are required — the route 400s\n   * otherwise. Returns the new row's id.\n   *\n   * Note: the underlying route is the same `POST /v1/objects` upsert that\n   * powers `update()`. This convenience wrapper enforces the INSERT-required\n   * fields at the type level and never sends an `id`.\n   */\n  create(data: CreateObjectInput): Promise<{ id: string }> {\n    return this.client.request(\"POST\", \"/v1/objects\", { body: data })\n  }\n\n  /**\n   * Update an object. Only the fields you pass are written — undefined keys\n   * are NOT touched on the row. Worker-owned asset buckets are intentionally\n   * not exposed on this surface (see `UpdateObjectInput` for the rationale).\n   *\n   * Optimistic-concurrency: pass `expectedUpdatedAt` to require the row's\n   * `updated_at` still matches; on mismatch the route returns 409\n   * `concurrent_modification` carrying the fresh `updatedAt`. The SDK\n   * surfaces that as a generic `NodaroError` with the same code (per Phase\n   * E1 calibration finding — error centralization in `throwApiError`).\n   */\n  update(id: string, data: UpdateObjectInput): Promise<UpdateObjectResult> {\n    return this.client.request(\"POST\", \"/v1/objects\", {\n      body: { id, ...data },\n    })\n  }\n\n  /**\n   * Soft-delete (archive) an object. The row is hidden from `list()` by\n   * default but recoverable via `restore(id)` or visible under\n   * `listArchived()`. Idempotent — repeating a delete on an already-archived\n   * row is a no-op.\n   */\n  delete(id: string): Promise<{ success: true; archived: true }> {\n    return this.client.request(\"DELETE\", `/v1/objects/${encodeURIComponent(id)}`)\n  }\n\n  /**\n   * Hard-delete (permanent) an object — the row + every R2 asset it\n   * references. Archived rows ONLY: active objects return 400 `not_archived`.\n   * Call `delete()` first to archive, then `permanentDelete()` to destroy.\n   *\n   * Mirrors the `app_runs` permanent-delete pattern (archive-first) so a\n   * stray SDK / curl caller cannot bypass the studio's archive-first UI\n   * flow.\n   */\n  permanentDelete(id: string): Promise<{ success: true; permanent: true }> {\n    return this.client.request(\"DELETE\", `/v1/objects/${encodeURIComponent(id)}`, {\n      query: { permanent: \"true\" },\n    })\n  }\n\n  /**\n   * Un-archive an object. If the original name now collides (case-\n   * insensitive) with an active row, the server auto-suffixes \"(restored)\"\n   * and returns the effective name.\n   */\n  restore(id: string): Promise<{ id: string; name: string }> {\n    return this.client.request(\"POST\", `/v1/objects/${encodeURIComponent(id)}/restore`)\n  }\n\n  /**\n   * Fire `POST /v1/generate-object` to produce one or more candidate main\n   * images. With `count > 1`, all jobs are reserved up-front before any\n   * is enqueued — mid-batch failures roll back atomically.\n   *\n   * When `attachToObjectId` is set AND `count === 1`, the worker writes\n   * the result directly to the row's `source_image_url`; otherwise you must\n   * call `approveMainImage()` after picking a candidate.\n   */\n  async generate(data: GenerateObjectInput): Promise<GenerateObjectResult> {\n    const res = await this.client.request<{ jobId?: string; jobIds?: string[] }>(\n      \"POST\", \"/v1/generate-object\", { body: data },\n    )\n    // Tolerate the legacy `{ jobId }`-only shape (older server): synthesize jobIds.\n    const jobIds = res.jobIds ?? (res.jobId ? [res.jobId] : [])\n    return res.jobId ? { jobIds, jobId: res.jobId } : { jobIds }\n  }\n\n  /**\n   * Fire `POST /v1/generate-object-asset` to produce a single variant.\n   * When the studio path is set (`attachToObjectId` + `attachToColumn` +\n   * `attachName`), the worker appends `{ name: attachName, url: <result> }`\n   * to the named JSONB array column on completion.\n   *\n   * Note: `attachToColumn` is REQUIRED for `assetType === \"custom\"` — the\n   * worker can't infer the bucket from the asset type. For canonical asset\n   * types (`angles` / `materials` / `variations` / `motion`), the column is\n   * derived automatically by the route.\n   */\n  generateAsset(\n    data: GenerateObjectAssetInput,\n  ): Promise<GenerateObjectAssetResult> {\n    return this.client.request(\"POST\", \"/v1/generate-object-asset\", { body: data })\n  }\n\n  /**\n   * Fire `POST /v1/generate-object-motion` to animate the object's main\n   * image into a motion clip. Image-to-video, single clip per call; the\n   * attach column is hardcoded to `motion_clips` server-side (objects have a\n   * single motion bucket so the caller doesn't supply `attachToColumn`).\n   * When the studio path is set (`attachToObjectId` + `attachName`), the\n   * worker appends `{ name: attachName, url: <result> }` to the row's\n   * `motion_clips` column on completion.\n   *\n   * Defaults: `provider` → `\"kling-turbo\"`, `aspectRatio` → `\"1:1\"` (set\n   * server-side via `resolveObjectAspectRatio({ assetType: \"motion\" })`).\n   */\n  generateMotion(\n    data: GenerateObjectMotionInput,\n  ): Promise<GenerateObjectMotionResult> {\n    return this.client.request(\"POST\", \"/v1/generate-object-motion\", { body: data })\n  }\n\n  /**\n   * Approve a completed `generate-object` job as the object's main image.\n   * Sets `source_image_url` and fires the LLM caption (Claude Sonnet vision)\n   * inline. Returns the new main-image URL plus the caption.\n   *\n   * Caption-failure semantics: the route still sends `\"\"` on LLM sub-failure,\n   * but the SDK normalizes `\"\"` → `null` here so `canonicalDescription` carries\n   * the same `string | null` semantics as characters. The main image is still\n   * set; call `recaption()` to retry.\n   *\n   * Optimistic-concurrency: pass `expectedUpdatedAt` to gate the update on\n   * the row's current `updated_at`; on mismatch the route returns 409\n   * `concurrent_modification` carrying the fresh token.\n   */\n  async approveMainImage(\n    id: string,\n    candidateJobId: string,\n    expectedUpdatedAt?: string,\n  ): Promise<ApproveObjectMainImageResult> {\n    const res = await this.client.request<{ sourceImageUrl: string; canonicalDescription: string | null }>(\n      \"POST\",\n      `/v1/objects/${encodeURIComponent(id)}/approve-main-image`,\n      { body: { candidateJobId, expectedUpdatedAt } },\n    )\n    // Normalize the wire `\"\"` (LLM sub-failure) → null; build a new object\n    // rather than mutating the response.\n    return { sourceImageUrl: res.sourceImageUrl, canonicalDescription: res.canonicalDescription || null }\n  }\n\n  /**\n   * Re-fire the LLM caption against the object's current main image. 502s\n   * on LLM failure (unlike `approveMainImage` which preserves the side-effect\n   * and returns \"\"); returns 400 `main_image_required` if no main image is\n   * set yet.\n   *\n   * The route is a pure idempotent retry — it does NOT accept an\n   * `expectedUpdatedAt` token (per Phase E1 calibration finding: backend\n   * route is idempotent retry, not gated on optimistic-concurrency).\n   */\n  recaption(id: string): Promise<RecaptionObjectResult> {\n    return this.client.request(\n      \"POST\",\n      `/v1/objects/${encodeURIComponent(id)}/llm-caption`,\n    )\n  }\n}\n"]}

package/dist/chunk-7MYKT2L4.cjs

@@ -0,0 +1,4 @@
+'use strict';
+
+//# sourceMappingURL=chunk-7MYKT2L4.cjs.map
+//# sourceMappingURL=chunk-7MYKT2L4.cjs.map

package/dist/chunk-7MYKT2L4.cjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":[],"names":[],"mappings":"","file":"chunk-7MYKT2L4.cjs"}

package/dist/chunk-7QOCWJKD.cjs

@@ -0,0 +1,25 @@
+'use strict';
+
+// src/resources/models.ts
+var ModelsResource = class {
+  constructor(client) {
+    this.client = client;
+  }
+  client;
+  /** Browse the models available on this instance — capability sheets,
+   *  per-variant credit pricing, prompt tips, and the `doctrineCovered`
+   *  truth flag. Public endpoint; cached 5 minutes. */
+  list(opts = {}) {
+    const qs = new URLSearchParams();
+    if (opts.kind) qs.set("kind", opts.kind);
+    if (opts.mode) qs.set("mode", opts.mode);
+    if (opts.family) qs.set("family", opts.family);
+    if (opts.featuredOnly) qs.set("featuredOnly", "true");
+    const query = qs.toString();
+    return this.client.request("GET", `/v1/models${query ? `?${query}` : ""}`);
+  }
+};
+
+exports.ModelsResource = ModelsResource;
+//# sourceMappingURL=chunk-7QOCWJKD.cjs.map
+//# sourceMappingURL=chunk-7QOCWJKD.cjs.map

package/dist/chunk-7QOCWJKD.cjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/resources/models.ts"],"names":[],"mappings":";;;AAyEO,IAAM,iBAAN,MAAqB;AAAA,EAC1B,YAAoB,MAAA,EAA0B;AAA1B,IAAA,IAAA,CAAA,MAAA,GAAA,MAAA;AAAA,EAA2B;AAAA,EAA3B,MAAA;AAAA;AAAA;AAAA;AAAA,EAKpB,IAAA,CAAK,IAAA,GAA0B,EAAC,EAA8B;AAC5D,IAAA,MAAM,EAAA,GAAK,IAAI,eAAA,EAAgB;AAC/B,IAAA,IAAI,KAAK,IAAA,EAAM,EAAA,CAAG,GAAA,CAAI,MAAA,EAAQ,KAAK,IAAI,CAAA;AACvC,IAAA,IAAI,KAAK,IAAA,EAAM,EAAA,CAAG,GAAA,CAAI,MAAA,EAAQ,KAAK,IAAI,CAAA;AACvC,IAAA,IAAI,KAAK,MAAA,EAAQ,EAAA,CAAG,GAAA,CAAI,QAAA,EAAU,KAAK,MAAM,CAAA;AAC7C,IAAA,IAAI,IAAA,CAAK,YAAA,EAAc,EAAA,CAAG,GAAA,CAAI,gBAAgB,MAAM,CAAA;AACpD,IAAA,MAAM,KAAA,GAAQ,GAAG,QAAA,EAAS;AAC1B,IAAA,OAAO,IAAA,CAAK,MAAA,CAAO,OAAA,CAAQ,KAAA,EAAO,CAAA,UAAA,EAAa,QAAQ,CAAA,CAAA,EAAI,KAAK,CAAA,CAAA,GAAK,EAAE,CAAA,CAAE,CAAA;AAAA,EAC3E;AACF","file":"chunk-7QOCWJKD.cjs","sourcesContent":["import type { NodaroClientCore } from \"../core.js\"\n\n/**\n * The company that made a model. `id` is stable — one id per company, the\n * company's name lowercased and hyphenated (`\"google\"`, `\"black-forest-labs\"`)\n * — so an app may key its own assets on it; a newer server can add makers, so\n * handle an id you do not know. `name` is the company's display name.\n */\nexport interface ModelMaker {\n  id: string\n  name: string\n}\n\n/**\n * Model-catalog types. Mirrors the backend's `GET /v1/models` projection\n * (itself shared with the MCP `list_models` tool) so the SDK stays\n * dependency-free — same convention as `PickerCatalog` / `NodeDescriptor`.\n */\nexport interface ModelSummary {\n  id: string\n  label: string\n  /** The company that made the model. Not the same as the family it is\n   *  grouped under: a few families name a lab or a product line (Tongyi-MAI\n   *  and HappyHorse are Alibaba's, Depth Anything is ByteDance's). Absent on\n   *  an older server. */\n  maker?: ModelMaker\n  /** The maker's official mark (an SVG) on this deployment's media CDN, or\n   *  null when the deployment does not publish one for this maker — draw a\n   *  fallback (the maker's name or initial) then. The address carries its\n   *  file's version, so a replaced mark arrives under a new address. Absent\n   *  on an older server. */\n  logoUrl?: string | null\n  description: string\n  modes: string[]\n  useCases: string[]\n  /** Per-variant credit pricing: the credits a run of each variant is\n   *  charged, the figure on the node's Run button. Cloud only — editions\n   *  without a credit system (community/business) omit the field entirely. */\n  pricing?: Array<{ identifier: string; credits: number; note?: string }>\n  featured?: boolean\n  features?: string[]\n  aspectRatios?: string[]\n  resolutions?: string[]\n  qualities?: string[]\n  durations?: number[]\n  /** Compact per-model prompting tips (present when a doctrine exists). */\n  promptTips?: string[]\n  /** TRUE only when a sourced per-family prompt doctrine exists for this\n   *  model — gate \"vendor doctrine · real rewrite\" badges on this and show\n   *  a generic label otherwise (never overclaim). */\n  doctrineCovered: boolean\n}\n\nexport interface ModelFamilyGroup {\n  family: string\n  models: ModelSummary[]\n}\n\nexport interface ModelsListResult {\n  sections: Array<{ kind: \"image\" | \"video\" | \"audio\"; families: ModelFamilyGroup[] }>\n  recommendations: Array<{ id: string; title: string; modelIds: string[]; reason?: string } & Record<string, unknown>>\n  totalModels: number\n}\n\nexport interface ListModelsOptions {\n  kind?: \"image\" | \"video\" | \"audio\"\n  /** Operation filter, e.g. \"t2v\", \"i2v\", \"t2i\". */\n  mode?: string\n  /** Vendor / lab name, e.g. \"Google\", \"Bytedance\". */\n  family?: string\n  featuredOnly?: boolean\n}\n\nexport class ModelsResource {\n  constructor(private client: NodaroClientCore) {}\n\n  /** Browse the models available on this instance — capability sheets,\n   *  per-variant credit pricing, prompt tips, and the `doctrineCovered`\n   *  truth flag. Public endpoint; cached 5 minutes. */\n  list(opts: ListModelsOptions = {}): Promise<ModelsListResult> {\n    const qs = new URLSearchParams()\n    if (opts.kind) qs.set(\"kind\", opts.kind)\n    if (opts.mode) qs.set(\"mode\", opts.mode)\n    if (opts.family) qs.set(\"family\", opts.family)\n    if (opts.featuredOnly) qs.set(\"featuredOnly\", \"true\")\n    const query = qs.toString()\n    return this.client.request(\"GET\", `/v1/models${query ? `?${query}` : \"\"}`)\n  }\n}\n"]}

package/dist/chunk-A2ZAFAWC.cjs

@@ -0,0 +1,4 @@
+'use strict';
+
+//# sourceMappingURL=chunk-A2ZAFAWC.cjs.map
+//# sourceMappingURL=chunk-A2ZAFAWC.cjs.map

package/dist/chunk-A2ZAFAWC.cjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":[],"names":[],"mappings":"","file":"chunk-A2ZAFAWC.cjs"}

package/dist/chunk-A3S55XGF.cjs

@@ -0,0 +1,54 @@
+'use strict';
+
+// src/resources/developer-apps.ts
+var DeveloperAppsResource = class {
+  constructor(client) {
+    this.client = client;
+  }
+  client;
+  /** List the authenticated user's developer apps. */
+  list() {
+    return this.client.request("GET", "/v1/developer-apps");
+  }
+  /** Get a developer app by ID. */
+  get(id) {
+    return this.client.request("GET", `/v1/developer-apps/${encodeURIComponent(id)}`);
+  }
+  /**
+   * Create a new developer app. Returns the app PLUS a one-time `clientSecret`
+   * — store it now, the secret hash is the only copy kept server-side.
+   */
+  create(input) {
+    return this.client.request("POST", "/v1/developer-apps", { body: input });
+  }
+  /** Update a developer app's metadata, redirect URIs, origins, or requested scopes. */
+  update(id, input) {
+    return this.client.request(
+      "PATCH",
+      `/v1/developer-apps/${encodeURIComponent(id)}`,
+      { body: input }
+    );
+  }
+  /** Delete a developer app. Returns `{ success: true }`. Throws
+   *  `NotFoundError` when the id doesn't exist or isn't yours. */
+  delete(id) {
+    return this.client.request(
+      "DELETE",
+      `/v1/developer-apps/${encodeURIComponent(id)}`
+    );
+  }
+  /**
+   * Generate a new `clientSecret`. The previous secret is invalidated.
+   * Server returns ONLY the new secret, not the full app record.
+   */
+  rotateSecret(id) {
+    return this.client.request(
+      "POST",
+      `/v1/developer-apps/${encodeURIComponent(id)}/rotate-secret`
+    );
+  }
+};
+
+exports.DeveloperAppsResource = DeveloperAppsResource;
+//# sourceMappingURL=chunk-A3S55XGF.cjs.map
+//# sourceMappingURL=chunk-A3S55XGF.cjs.map

package/dist/chunk-A3S55XGF.cjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/resources/developer-apps.ts"],"names":[],"mappings":";;;AAwEO,IAAM,wBAAN,MAA4B;AAAA,EACjC,YAAoB,MAAA,EAA0B;AAA1B,IAAA,IAAA,CAAA,MAAA,GAAA,MAAA;AAAA,EAA2B;AAAA,EAA3B,MAAA;AAAA;AAAA,EAGpB,IAAA,GAA0C;AACxC,IAAA,OAAO,IAAA,CAAK,MAAA,CAAO,OAAA,CAAQ,KAAA,EAAO,oBAAoB,CAAA;AAAA,EACxD;AAAA;AAAA,EAGA,IAAI,EAAA,EAA6C;AAC/C,IAAA,OAAO,IAAA,CAAK,OAAO,OAAA,CAAQ,KAAA,EAAO,sBAAsB,kBAAA,CAAmB,EAAE,CAAC,CAAA,CAAE,CAAA;AAAA,EAClF;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,OAAO,KAAA,EAA6E;AAClF,IAAA,OAAO,IAAA,CAAK,OAAO,OAAA,CAAQ,MAAA,EAAQ,sBAAsB,EAAE,IAAA,EAAM,OAAO,CAAA;AAAA,EAC1E;AAAA;AAAA,EAGA,MAAA,CAAO,IAAY,KAAA,EAAiE;AAClF,IAAA,OAAO,KAAK,MAAA,CAAO,OAAA;AAAA,MACjB,OAAA;AAAA,MACA,CAAA,mBAAA,EAAsB,kBAAA,CAAmB,EAAE,CAAC,CAAA,CAAA;AAAA,MAC5C,EAAE,MAAM,KAAA;AAAM,KAChB;AAAA,EACF;AAAA;AAAA;AAAA,EAIA,OAAO,EAAA,EAAwC;AAC7C,IAAA,OAAO,KAAK,MAAA,CAAO,OAAA;AAAA,MACjB,QAAA;AAAA,MACA,CAAA,mBAAA,EAAsB,kBAAA,CAAmB,EAAE,CAAC,CAAA;AAAA,KAC9C;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,aAAa,EAAA,EAAyC;AACpD,IAAA,OAAO,KAAK,MAAA,CAAO,OAAA;AAAA,MACjB,MAAA;AAAA,MACA,CAAA,mBAAA,EAAsB,kBAAA,CAAmB,EAAE,CAAC,CAAA,cAAA;AAAA,KAC9C;AAAA,EACF;AACF","file":"chunk-A3S55XGF.cjs","sourcesContent":["import type { OAuthScope } from \"@nodaro/shared/apps\"\nimport type { NodaroClientCore } from \"../core.js\"\n\n/**\n * OAuth scopes that a developer app may request — the server's own list\n * (`OAUTH_SCOPES` in `@nodaro/shared`), so it cannot fall behind.\n */\nexport type DeveloperAppScope = OAuthScope\n\nexport type DeveloperAppStatus = \"active\" | \"suspended\" | \"pending_review\"\n\n/**\n * How the app came to exist. `user` is an app someone registered by hand in\n * the dashboard; the others register themselves (MCP clients via Dynamic\n * Client Registration, first-party MCP, a connected community instance).\n * Only `user` apps count toward the per-user registration cap.\n */\nexport type DeveloperAppKind = \"user\" | \"dynamic_mcp\" | \"first_party_mcp\" | \"community_instance\"\n\nexport interface DeveloperApp {\n  id: string\n  name: string\n  description: string | null\n  logoUrl: string | null\n  homepageUrl: string | null\n  redirectUris: string[]\n  allowedOrigins: string[]\n  scopesRequested: DeveloperAppScope[]\n  clientId: string\n  status: DeveloperAppStatus\n  /** Absent from servers older than this field; treat missing as `\"user\"`. */\n  kind?: DeveloperAppKind | (string & {})\n  createdAt: string\n  updatedAt: string\n}\n\n/**\n * One-shot create response — `clientSecret` is returned exactly ONCE here.\n * Store it securely; subsequent `get`/`list` calls will not include it.\n */\nexport interface CreateDeveloperAppResult extends DeveloperApp {\n  clientSecret: string\n}\n\nexport interface CreateDeveloperAppInput {\n  name: string\n  description?: string\n  homepageUrl?: string\n  logoUrl?: string\n  /** At least 1, at most 10 redirect URIs. Each must be https or http://localhost. */\n  redirectUris: string[]\n  /** Up to 5 bare origins (no path/query/hash), e.g. \"https://example.com\". */\n  allowedOrigins?: string[]\n  /** At least 1 scope required. */\n  scopesRequested: DeveloperAppScope[]\n}\n\nexport interface UpdateDeveloperAppInput {\n  name?: string\n  description?: string\n  homepageUrl?: string\n  logoUrl?: string\n  redirectUris?: string[]\n  allowedOrigins?: string[]\n  scopesRequested?: DeveloperAppScope[]\n}\n\nexport interface RotateSecretResult {\n  /** New client secret. Returned exactly once — old secret is invalidated. */\n  clientSecret: string\n}\n\nexport class DeveloperAppsResource {\n  constructor(private client: NodaroClientCore) {}\n\n  /** List the authenticated user's developer apps. */\n  list(): Promise<{ data: DeveloperApp[] }> {\n    return this.client.request(\"GET\", \"/v1/developer-apps\")\n  }\n\n  /** Get a developer app by ID. */\n  get(id: string): Promise<{ data: DeveloperApp }> {\n    return this.client.request(\"GET\", `/v1/developer-apps/${encodeURIComponent(id)}`)\n  }\n\n  /**\n   * Create a new developer app. Returns the app PLUS a one-time `clientSecret`\n   * — store it now, the secret hash is the only copy kept server-side.\n   */\n  create(input: CreateDeveloperAppInput): Promise<{ data: CreateDeveloperAppResult }> {\n    return this.client.request(\"POST\", \"/v1/developer-apps\", { body: input })\n  }\n\n  /** Update a developer app's metadata, redirect URIs, origins, or requested scopes. */\n  update(id: string, input: UpdateDeveloperAppInput): Promise<{ data: DeveloperApp }> {\n    return this.client.request(\n      \"PATCH\",\n      `/v1/developer-apps/${encodeURIComponent(id)}`,\n      { body: input },\n    )\n  }\n\n  /** Delete a developer app. Returns `{ success: true }`. Throws\n   *  `NotFoundError` when the id doesn't exist or isn't yours. */\n  delete(id: string): Promise<{ success: true }> {\n    return this.client.request(\n      \"DELETE\",\n      `/v1/developer-apps/${encodeURIComponent(id)}`,\n    )\n  }\n\n  /**\n   * Generate a new `clientSecret`. The previous secret is invalidated.\n   * Server returns ONLY the new secret, not the full app record.\n   */\n  rotateSecret(id: string): Promise<RotateSecretResult> {\n    return this.client.request(\n      \"POST\",\n      `/v1/developer-apps/${encodeURIComponent(id)}/rotate-secret`,\n    )\n  }\n}\n"]}

package/dist/chunk-A3THLBFG.js

@@ -0,0 +1,3 @@
+
+//# sourceMappingURL=chunk-A3THLBFG.js.map
+//# sourceMappingURL=chunk-A3THLBFG.js.map

package/dist/chunk-A3THLBFG.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":[],"names":[],"mappings":"","file":"chunk-A3THLBFG.js"}