@pawabase/client 0.0.0-stage → 0.1.0

package/dist/cjs/http.js

@@ -0,0 +1,249 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.HttpClient = void 0;
+const errors_js_1 = require("./errors.js");
+const version_js_1 = require("./version.js");
+const util_js_1 = require("./util.js");
+const SAFE_METHODS = new Set(["GET", "HEAD", "OPTIONS", "PUT", "DELETE"]);
+const RETRYABLE_STATUS = new Set([502, 503, 504]);
+const DEFAULT_RETRY = {
+    retries: 2,
+    baseDelayMs: 300,
+    maxDelayMs: 8000,
+    maxRetryAfterMs: 30_000,
+};
+function isStream(body) {
+    return typeof ReadableStream !== "undefined" && body instanceof ReadableStream;
+}
+function isRawBody(body) {
+    return (typeof body === "string" ||
+        (typeof Blob !== "undefined" && body instanceof Blob) ||
+        (typeof FormData !== "undefined" && body instanceof FormData) ||
+        (typeof URLSearchParams !== "undefined" && body instanceof URLSearchParams) ||
+        body instanceof ArrayBuffer ||
+        ArrayBuffer.isView(body) ||
+        isStream(body));
+}
+class HttpClient {
+    config;
+    constructor(config) {
+        this.config = config;
+    }
+    url(path, query) {
+        const base = (0, util_js_1.trimSlash)(this.config.baseUrl);
+        return `${base}${path.startsWith("/") ? path : `/${path}`}${(0, util_js_1.queryString)(query)}`;
+    }
+    /** Make a request and return the parsed body (`undefined` for `204`). */
+    async request(options) {
+        const response = await this.send(options);
+        return (await this.read(response, options.parse ?? "json"));
+    }
+    /** Make a request and return the raw `Response`. Non-2xx answers throw. */
+    async send(options) {
+        const method = (options.method ?? "GET").toUpperCase();
+        const url = options.absoluteUrl ?? this.url(options.path, options.query);
+        const anonymous = options.absoluteUrl !== undefined;
+        const retry = this.retryPolicy(options.retry);
+        const body = options.body;
+        const replayable = !isStream(body);
+        const idempotent = options.idempotent === true || SAFE_METHODS.has(method);
+        let token = null;
+        if (anonymous)
+            token = null;
+        else if (options.accessToken !== undefined)
+            token = options.accessToken;
+        else if (options.auth !== "none" && this.config.tokens)
+            token = await this.config.tokens.getAccessToken();
+        let attempt = 0;
+        let refreshed = false;
+        for (;;) {
+            const info = { method, url, attempt };
+            const started = Date.now();
+            let response;
+            try {
+                response = await this.once(method, url, options, token, info, anonymous);
+            }
+            catch (error) {
+                const retriable = error instanceof errors_js_1.NetworkError || error instanceof errors_js_1.TimeoutError;
+                if (retriable && retry && idempotent && replayable && attempt < retry.retries) {
+                    const delayMs = (0, util_js_1.backoff)(attempt, retry);
+                    this.hook(() => this.config.hooks.onRetry?.({ ...info, reason: error.name, delayMs }));
+                    await (0, util_js_1.sleep)(delayMs, options.signal);
+                    attempt += 1;
+                    continue;
+                }
+                this.hook(() => this.config.hooks.onError?.(error, info));
+                throw error;
+            }
+            this.hook(() => this.config.hooks.onResponse?.({
+                ...info,
+                status: response.status,
+                durationMs: Date.now() - started,
+                requestId: response.headers.get("x-request-id"),
+            }));
+            if (response.ok)
+                return response;
+            if (options.throwOnError === false && !(response.status === 401 && token && !refreshed && this.config.tokens)) {
+                const retryable = response.status === 429 || (RETRYABLE_STATUS.has(response.status) && idempotent);
+                if (!retry || !retryable || attempt >= retry.retries)
+                    return response;
+            }
+            // A rejected token: refresh once and replay, unless the body cannot be replayed.
+            if (response.status === 401 &&
+                token &&
+                !refreshed &&
+                replayable &&
+                options.auth !== "none" &&
+                options.accessToken === undefined &&
+                this.config.tokens) {
+                refreshed = true;
+                const fresh = await this.config.tokens.onUnauthorized(token);
+                if (fresh && fresh !== token) {
+                    await this.discard(response);
+                    token = fresh;
+                    continue;
+                }
+            }
+            const error = await this.toError(response, method, url);
+            const delayMs = this.retryDelay(error, response, attempt, retry, idempotent, replayable);
+            if (delayMs !== null && retry) {
+                this.hook(() => this.config.hooks.onRetry?.({ ...info, reason: `status ${response.status}`, delayMs }));
+                await (0, util_js_1.sleep)(delayMs, options.signal);
+                attempt += 1;
+                continue;
+            }
+            this.hook(() => this.config.hooks.onError?.(error, info));
+            throw error;
+        }
+    }
+    retryPolicy(override) {
+        const chosen = override === undefined ? this.config.retry : override;
+        if (chosen === false)
+            return null;
+        const merged = { ...DEFAULT_RETRY, ...(this.config.retry === false ? {} : this.config.retry), ...chosen };
+        return merged.retries > 0 ? merged : null;
+    }
+    retryDelay(error, response, attempt, retry, idempotent, replayable) {
+        if (!retry || !replayable || attempt >= retry.retries)
+            return null;
+        const status = response.status;
+        // 429 is answered before a handler runs, so repeating any method is safe.
+        const retryable = status === 429 || (RETRYABLE_STATUS.has(status) && idempotent);
+        if (!retryable)
+            return null;
+        const asked = (0, errors_js_1.parseRetryAfter)(response.headers.get("retry-after")) ?? error.retryAfter;
+        if (asked !== null && asked !== undefined) {
+            const ms = asked * 1000;
+            return ms > retry.maxRetryAfterMs ? null : Math.ceil(ms);
+        }
+        return (0, util_js_1.backoff)(attempt, retry);
+    }
+    async once(method, url, options, token, info, anonymous) {
+        const headers = {
+            accept: "application/json",
+            ...(anonymous ? {} : { apikey: this.config.apiKey, "x-client-info": `pawabase-js/${version_js_1.VERSION}`, ...this.config.headers }),
+            ...options.headers,
+        };
+        if (token)
+            headers["authorization"] = `Bearer ${token}`;
+        let body;
+        const raw = options.body;
+        if (raw !== undefined && raw !== null) {
+            if (isRawBody(raw)) {
+                body = raw;
+            }
+            else {
+                body = JSON.stringify(raw);
+                if (!Object.keys(headers).some((name) => name.toLowerCase() === "content-type")) {
+                    headers["content-type"] = "application/json";
+                }
+            }
+        }
+        this.hook(() => this.config.hooks.onRequest?.({
+            ...info,
+            headers: { ...headers, ...(headers["apikey"] ? { apikey: "***" } : {}), ...(headers["authorization"] ? { authorization: "Bearer ***" } : {}) },
+        }));
+        const timeoutMs = options.timeoutMs ?? this.config.timeoutMs;
+        const timeoutController = new AbortController();
+        const timer = timeoutMs > 0 ? setTimeout(() => timeoutController.abort(new errors_js_1.TimeoutError(timeoutMs)), timeoutMs) : null;
+        const signal = (0, util_js_1.anySignal)([options.signal, timeoutMs > 0 ? timeoutController.signal : undefined]);
+        const init = { method, headers, ...(signal ? { signal } : {}) };
+        if (body !== undefined) {
+            init.body = body;
+            if (isStream(body))
+                init.duplex = "half";
+        }
+        try {
+            return await this.config.fetch(url, init);
+        }
+        catch (error) {
+            if (options.signal?.aborted)
+                throw new errors_js_1.AbortError(undefined, { cause: error });
+            if (timeoutController.signal.aborted)
+                throw new errors_js_1.TimeoutError(timeoutMs, { cause: error });
+            throw new errors_js_1.NetworkError(`Could not reach ${new URL(url).origin}: ${error?.message ?? error}`, {
+                cause: error,
+                method,
+                url,
+            });
+        }
+        finally {
+            if (timer)
+                clearTimeout(timer);
+        }
+    }
+    async toError(response, method, url) {
+        let body;
+        const text = await response.text().catch(() => "");
+        if (text) {
+            try {
+                body = JSON.parse(text);
+            }
+            catch {
+                body = text;
+            }
+        }
+        return (0, errors_js_1.errorFromResponse)({ status: response.status, body, headers: response.headers, method, url });
+    }
+    async discard(response) {
+        try {
+            await response.arrayBuffer();
+        }
+        catch {
+            /* the body is not needed */
+        }
+    }
+    async read(response, as) {
+        if (as === "response")
+            return response;
+        if (as === "stream")
+            return response.body;
+        if (as === "blob")
+            return response.blob();
+        if (as === "arrayBuffer")
+            return response.arrayBuffer();
+        if (response.status === 204 || response.status === 205)
+            return undefined;
+        const text = await response.text();
+        if (!text)
+            return undefined;
+        if (as === "text")
+            return text;
+        try {
+            return JSON.parse(text);
+        }
+        catch {
+            return text;
+        }
+    }
+    hook(fn) {
+        try {
+            fn();
+        }
+        catch {
+            /* hooks observe; they must not break requests */
+        }
+    }
+}
+exports.HttpClient = HttpClient;
+//# sourceMappingURL=http.js.map

package/dist/cjs/http.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"http.js","sourceRoot":"","sources":["../../src/http.ts"],"names":[],"mappings":";;;AAAA,2CAOqB;AACrB,6CAAuC;AACvC,uCAA+F;AAyF/F,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC,CAAC;AAC1E,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC;AAElD,MAAM,aAAa,GAA2B;IAC5C,OAAO,EAAE,CAAC;IACV,WAAW,EAAE,GAAG;IAChB,UAAU,EAAE,IAAI;IAChB,eAAe,EAAE,MAAM;CACxB,CAAC;AAEF,SAAS,QAAQ,CAAC,IAAa;IAC7B,OAAO,OAAO,cAAc,KAAK,WAAW,IAAI,IAAI,YAAY,cAAc,CAAC;AACjF,CAAC;AAED,SAAS,SAAS,CAAC,IAAa;IAC9B,OAAO,CACL,OAAO,IAAI,KAAK,QAAQ;QACxB,CAAC,OAAO,IAAI,KAAK,WAAW,IAAI,IAAI,YAAY,IAAI,CAAC;QACrD,CAAC,OAAO,QAAQ,KAAK,WAAW,IAAI,IAAI,YAAY,QAAQ,CAAC;QAC7D,CAAC,OAAO,eAAe,KAAK,WAAW,IAAI,IAAI,YAAY,eAAe,CAAC;QAC3E,IAAI,YAAY,WAAW;QAC3B,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC;QACxB,QAAQ,CAAC,IAAI,CAAC,CACf,CAAC;AACJ,CAAC;AAED,MAAa,UAAU;IACA;IAArB,YAAqB,MAAkB;QAAlB,WAAM,GAAN,MAAM,CAAY;IAAG,CAAC;IAE3C,GAAG,CAAC,IAAY,EAAE,KAA+B;QAC/C,MAAM,IAAI,GAAG,IAAA,mBAAS,EAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAC5C,OAAO,GAAG,IAAI,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,GAAG,IAAA,qBAAW,EAAC,KAAK,CAAC,EAAE,CAAC;IACnF,CAAC;IAED,yEAAyE;IACzE,KAAK,CAAC,OAAO,CAAc,OAAuB;QAChD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC1C,OAAO,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,OAAO,CAAC,KAAK,IAAI,MAAM,CAAC,CAAM,CAAC;IACnE,CAAC;IAED,2EAA2E;IAC3E,KAAK,CAAC,IAAI,CAAC,OAAuB;QAChC,MAAM,MAAM,GAAG,CAAC,OAAO,CAAC,MAAM,IAAI,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC;QACvD,MAAM,GAAG,GAAG,OAAO,CAAC,WAAW,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC;QACzE,MAAM,SAAS,GAAG,OAAO,CAAC,WAAW,KAAK,SAAS,CAAC;QACpD,MAAM,KAAK,GAAG,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QAC9C,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;QAC1B,MAAM,UAAU,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QACnC,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,KAAK,IAAI,IAAI,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAE3E,IAAI,KAAK,GAAkB,IAAI,CAAC;QAChC,IAAI,SAAS;YAAE,KAAK,GAAG,IAAI,CAAC;aACvB,IAAI,OAAO,CAAC,WAAW,KAAK,SAAS;YAAE,KAAK,GAAG,OAAO,CAAC,WAAW,CAAC;aACnE,IAAI,OAAO,CAAC,IAAI,KAAK,MAAM,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM;YAAE,KAAK,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,cAAc,EAAE,CAAC;QAE1G,IAAI,OAAO,GAAG,CAAC,CAAC;QAChB,IAAI,SAAS,GAAG,KAAK,CAAC;QACtB,SAAS,CAAC;YACR,MAAM,IAAI,GAAgB,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC;YACnD,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YAC3B,IAAI,QAAkB,CAAC;YACvB,IAAI,CAAC;gBACH,QAAQ,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,CAAC,CAAC;YAC3E,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,SAAS,GAAG,KAAK,YAAY,wBAAY,IAAI,KAAK,YAAY,wBAAY,CAAC;gBACjF,IAAI,SAAS,IAAI,KAAK,IAAI,UAAU,IAAI,UAAU,IAAI,OAAO,GAAG,KAAK,CAAC,OAAO,EAAE,CAAC;oBAC9E,MAAM,OAAO,GAAG,IAAA,iBAAO,EAAC,OAAO,EAAE,KAAK,CAAC,CAAC;oBACxC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,EAAE,GAAG,IAAI,EAAE,MAAM,EAAG,KAAe,CAAC,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC;oBAClG,MAAM,IAAA,eAAK,EAAC,OAAO,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;oBACrC,OAAO,IAAI,CAAC,CAAC;oBACb,SAAS;gBACX,CAAC;gBACD,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC;gBAC1D,MAAM,KAAK,CAAC;YACd,CAAC;YAED,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CACb,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,UAAU,EAAE,CAAC;gBAC7B,GAAG,IAAI;gBACP,MAAM,EAAE,QAAQ,CAAC,MAAM;gBACvB,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO;gBAChC,SAAS,EAAE,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC;aAChD,CAAC,CACH,CAAC;YACF,IAAI,QAAQ,CAAC,EAAE;gBAAE,OAAO,QAAQ,CAAC;YACjC,IAAI,OAAO,CAAC,YAAY,KAAK,KAAK,IAAI,CAAC,CAAC,QAAQ,CAAC,MAAM,KAAK,GAAG,IAAI,KAAK,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;gBAC9G,MAAM,SAAS,GAAG,QAAQ,CAAC,MAAM,KAAK,GAAG,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,UAAU,CAAC,CAAC;gBACnG,IAAI,CAAC,KAAK,IAAI,CAAC,SAAS,IAAI,OAAO,IAAI,KAAK,CAAC,OAAO;oBAAE,OAAO,QAAQ,CAAC;YACxE,CAAC;YAED,iFAAiF;YACjF,IACE,QAAQ,CAAC,MAAM,KAAK,GAAG;gBACvB,KAAK;gBACL,CAAC,SAAS;gBACV,UAAU;gBACV,OAAO,CAAC,IAAI,KAAK,MAAM;gBACvB,OAAO,CAAC,WAAW,KAAK,SAAS;gBACjC,IAAI,CAAC,MAAM,CAAC,MAAM,EAClB,CAAC;gBACD,SAAS,GAAG,IAAI,CAAC;gBACjB,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;gBAC7D,IAAI,KAAK,IAAI,KAAK,KAAK,KAAK,EAAE,CAAC;oBAC7B,MAAM,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;oBAC7B,KAAK,GAAG,KAAK,CAAC;oBACd,SAAS;gBACX,CAAC;YACH,CAAC;YAED,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC;YACxD,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,UAAU,CAAC,CAAC;YACzF,IAAI,OAAO,KAAK,IAAI,IAAI,KAAK,EAAE,CAAC;gBAC9B,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CACb,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,UAAU,QAAQ,CAAC,MAAM,EAAE,EAAE,OAAO,EAAE,CAAC,CACvF,CAAC;gBACF,MAAM,IAAA,eAAK,EAAC,OAAO,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;gBACrC,OAAO,IAAI,CAAC,CAAC;gBACb,SAAS;YACX,CAAC;YACD,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC;YAC1D,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAEO,WAAW,CAAC,QAA0C;QAC5D,MAAM,MAAM,GAAG,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC;QACrE,IAAI,MAAM,KAAK,KAAK;YAAE,OAAO,IAAI,CAAC;QAClC,MAAM,MAAM,GAAG,EAAE,GAAG,aAAa,EAAE,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,KAAK,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,GAAG,MAAM,EAAE,CAAC;QAC1G,OAAO,MAAM,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC;IAC5C,CAAC;IAEO,UAAU,CAChB,KAAe,EACf,QAAkB,EAClB,OAAe,EACf,KAAoC,EACpC,UAAmB,EACnB,UAAmB;QAEnB,IAAI,CAAC,KAAK,IAAI,CAAC,UAAU,IAAI,OAAO,IAAI,KAAK,CAAC,OAAO;YAAE,OAAO,IAAI,CAAC;QACnE,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC;QAC/B,0EAA0E;QAC1E,MAAM,SAAS,GAAG,MAAM,KAAK,GAAG,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,UAAU,CAAC,CAAC;QACjF,IAAI,CAAC,SAAS;YAAE,OAAO,IAAI,CAAC;QAC5B,MAAM,KAAK,GAAG,IAAA,2BAAe,EAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,IAAI,KAAK,CAAC,UAAU,CAAC;QACvF,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YAC1C,MAAM,EAAE,GAAG,KAAK,GAAG,IAAI,CAAC;YACxB,OAAO,EAAE,GAAG,KAAK,CAAC,eAAe,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC3D,CAAC;QACD,OAAO,IAAA,iBAAO,EAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IACjC,CAAC;IAEO,KAAK,CAAC,IAAI,CAChB,MAAc,EACd,GAAW,EACX,OAAuB,EACvB,KAAoB,EACpB,IAAiB,EACjB,SAAkB;QAElB,MAAM,OAAO,GAA2B;YACtC,MAAM,EAAE,kBAAkB;YAC1B,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,eAAe,EAAE,eAAe,oBAAO,EAAE,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACvH,GAAG,OAAO,CAAC,OAAO;SACnB,CAAC;QACF,IAAI,KAAK;YAAE,OAAO,CAAC,eAAe,CAAC,GAAG,UAAU,KAAK,EAAE,CAAC;QAExD,IAAI,IAA0B,CAAC;QAC/B,MAAM,GAAG,GAAG,OAAO,CAAC,IAAI,CAAC;QACzB,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;YACtC,IAAI,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC;gBACnB,IAAI,GAAG,GAAe,CAAC;YACzB,CAAC;iBAAM,CAAC;gBACN,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;gBAC3B,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,WAAW,EAAE,KAAK,cAAc,CAAC,EAAE,CAAC;oBAChF,OAAO,CAAC,cAAc,CAAC,GAAG,kBAAkB,CAAC;gBAC/C,CAAC;YACH,CAAC;QACH,CAAC;QAED,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CACb,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,SAAS,EAAE,CAAC;YAC5B,GAAG,IAAI;YACP,OAAO,EAAE,EAAE,GAAG,OAAO,EAAE,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE;SAC/I,CAAC,CACH,CAAC;QAEF,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC;QAC7D,MAAM,iBAAiB,GAAG,IAAI,eAAe,EAAE,CAAC;QAChD,MAAM,KAAK,GAAG,SAAS,GAAG,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,EAAE,CAAC,iBAAiB,CAAC,KAAK,CAAC,IAAI,wBAAY,CAAC,SAAS,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QACvH,MAAM,MAAM,GAAG,IAAA,mBAAS,EAAC,CAAC,OAAO,CAAC,MAAM,EAAE,SAAS,GAAG,CAAC,CAAC,CAAC,CAAC,iBAAiB,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC;QACjG,MAAM,IAAI,GAAsC,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;QACnG,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;YACvB,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;YACjB,IAAI,QAAQ,CAAC,IAAI,CAAC;gBAAE,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QAC3C,CAAC;QACD,IAAI,CAAC;YACH,OAAO,MAAM,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QAC5C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,OAAO,CAAC,MAAM,EAAE,OAAO;gBAAE,MAAM,IAAI,sBAAU,CAAC,SAAS,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;YAC/E,IAAI,iBAAiB,CAAC,MAAM,CAAC,OAAO;gBAAE,MAAM,IAAI,wBAAY,CAAC,SAAS,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;YAC1F,MAAM,IAAI,wBAAY,CAAC,mBAAmB,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,MAAM,KAAM,KAAe,EAAE,OAAO,IAAI,KAAK,EAAE,EAAE;gBACtG,KAAK,EAAE,KAAK;gBACZ,MAAM;gBACN,GAAG;aACJ,CAAC,CAAC;QACL,CAAC;gBAAS,CAAC;YACT,IAAI,KAAK;gBAAE,YAAY,CAAC,KAAK,CAAC,CAAC;QACjC,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,OAAO,CAAC,QAAkB,EAAE,MAAc,EAAE,GAAW;QACnE,IAAI,IAAa,CAAC;QAClB,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;QACnD,IAAI,IAAI,EAAE,CAAC;YACT,IAAI,CAAC;gBACH,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAC1B,CAAC;YAAC,MAAM,CAAC;gBACP,IAAI,GAAG,IAAI,CAAC;YACd,CAAC;QACH,CAAC;QACD,OAAO,IAAA,6BAAiB,EAAC,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;IACtG,CAAC;IAEO,KAAK,CAAC,OAAO,CAAC,QAAkB;QACtC,IAAI,CAAC;YACH,MAAM,QAAQ,CAAC,WAAW,EAAE,CAAC;QAC/B,CAAC;QAAC,MAAM,CAAC;YACP,4BAA4B;QAC9B,CAAC;IACH,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,QAAkB,EAAE,EAAW;QACxC,IAAI,EAAE,KAAK,UAAU;YAAE,OAAO,QAAQ,CAAC;QACvC,IAAI,EAAE,KAAK,QAAQ;YAAE,OAAO,QAAQ,CAAC,IAAI,CAAC;QAC1C,IAAI,EAAE,KAAK,MAAM;YAAE,OAAO,QAAQ,CAAC,IAAI,EAAE,CAAC;QAC1C,IAAI,EAAE,KAAK,aAAa;YAAE,OAAO,QAAQ,CAAC,WAAW,EAAE,CAAC;QACxD,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG;YAAE,OAAO,SAAS,CAAC;QACzE,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;QACnC,IAAI,CAAC,IAAI;YAAE,OAAO,SAAS,CAAC;QAC5B,IAAI,EAAE,KAAK,MAAM;YAAE,OAAO,IAAI,CAAC;QAC/B,IAAI,CAAC;YACH,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC1B,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAEO,IAAI,CAAC,EAAc;QACzB,IAAI,CAAC;YACH,EAAE,EAAE,CAAC;QACP,CAAC;QAAC,MAAM,CAAC;YACP,iDAAiD;QACnD,CAAC;IACH,CAAC;CACF;AArOD,gCAqOC"}

package/dist/cjs/index.d.ts

@@ -0,0 +1,22 @@
+export { PawabaseClient, createClient } from "./client.js";
+export type { ClientOptions, DatabaseShape } from "./client.js";
+export { AuthClient } from "./auth.js";
+export type { AuthChangeEvent, AuthListener, AuthOptions, IssuedToken, Passkey, PasskeyChallenge, SignInResult, SignUpResult, UpdateUserInput, UrlSessionResult, } from "./auth.js";
+export { MemoryStorage } from "./session-store.js";
+export type { SessionStorage } from "./session-store.js";
+export { QueryBuilder, ResourceClient } from "./data.js";
+export type { AnyRow, Condition, CreateManyResult, FilterOp, IterateOptions, QueryOptions, ReadOptions, ResourceTypes, } from "./data.js";
+export { FlowsClient, FunctionsClient, RoutesClient } from "./functions.js";
+export type { CallOptions, RouteOptions } from "./functions.js";
+export { BucketClient, StorageClient } from "./files.js";
+export type { TransferOptions, UploadBody, UploadOptions } from "./files.js";
+export { RealtimeChannel, RealtimeClient } from "./realtime.js";
+export type { ChannelEvents, ChannelOptions, PresenceChange, RealtimeOptions, RealtimeStatus, WebSocketConstructor, WebSocketLike, } from "./realtime.js";
+export { HttpClient } from "./http.js";
+export type { FetchLike, Hooks, RequestInfo, RequestOptions, ResponseInfo, RetryOptions, TokenProvider } from "./http.js";
+export * from "./errors.js";
+export type * from "./types.js";
+export { VERSION } from "./version.js";
+export { generateTypes } from "./typegen.js";
+export type { TypegenOptions } from "./typegen.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/cjs/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC3D,YAAY,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAEhE,OAAO,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AACvC,YAAY,EACV,eAAe,EACf,YAAY,EACZ,WAAW,EACX,WAAW,EACX,OAAO,EACP,gBAAgB,EAChB,YAAY,EACZ,YAAY,EACZ,eAAe,EACf,gBAAgB,GACjB,MAAM,WAAW,CAAC;AACnB,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AACnD,YAAY,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AAEzD,OAAO,EAAE,YAAY,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AACzD,YAAY,EACV,MAAM,EACN,SAAS,EACT,gBAAgB,EAChB,QAAQ,EACR,cAAc,EACd,YAAY,EACZ,WAAW,EACX,aAAa,GACd,MAAM,WAAW,CAAC;AAEnB,OAAO,EAAE,WAAW,EAAE,eAAe,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAC5E,YAAY,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAEhE,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AACzD,YAAY,EAAE,eAAe,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAE7E,OAAO,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAChE,YAAY,EACV,aAAa,EACb,cAAc,EACd,cAAc,EACd,eAAe,EACf,cAAc,EACd,oBAAoB,EACpB,aAAa,GACd,MAAM,eAAe,CAAC;AAEvB,OAAO,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AACvC,YAAY,EAAE,SAAS,EAAE,KAAK,EAAE,WAAW,EAAE,cAAc,EAAE,YAAY,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,WAAW,CAAC;AAE1H,cAAc,aAAa,CAAC;AAC5B,mBAAmB,YAAY,CAAC;AAChC,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AACvC,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAC7C,YAAY,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC"}

package/dist/cjs/index.js

@@ -0,0 +1,45 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.generateTypes = exports.VERSION = exports.HttpClient = exports.RealtimeClient = exports.RealtimeChannel = exports.StorageClient = exports.BucketClient = exports.RoutesClient = exports.FunctionsClient = exports.FlowsClient = exports.ResourceClient = exports.QueryBuilder = exports.MemoryStorage = exports.AuthClient = exports.createClient = exports.PawabaseClient = void 0;
+var client_js_1 = require("./client.js");
+Object.defineProperty(exports, "PawabaseClient", { enumerable: true, get: function () { return client_js_1.PawabaseClient; } });
+Object.defineProperty(exports, "createClient", { enumerable: true, get: function () { return client_js_1.createClient; } });
+var auth_js_1 = require("./auth.js");
+Object.defineProperty(exports, "AuthClient", { enumerable: true, get: function () { return auth_js_1.AuthClient; } });
+var session_store_js_1 = require("./session-store.js");
+Object.defineProperty(exports, "MemoryStorage", { enumerable: true, get: function () { return session_store_js_1.MemoryStorage; } });
+var data_js_1 = require("./data.js");
+Object.defineProperty(exports, "QueryBuilder", { enumerable: true, get: function () { return data_js_1.QueryBuilder; } });
+Object.defineProperty(exports, "ResourceClient", { enumerable: true, get: function () { return data_js_1.ResourceClient; } });
+var functions_js_1 = require("./functions.js");
+Object.defineProperty(exports, "FlowsClient", { enumerable: true, get: function () { return functions_js_1.FlowsClient; } });
+Object.defineProperty(exports, "FunctionsClient", { enumerable: true, get: function () { return functions_js_1.FunctionsClient; } });
+Object.defineProperty(exports, "RoutesClient", { enumerable: true, get: function () { return functions_js_1.RoutesClient; } });
+var files_js_1 = require("./files.js");
+Object.defineProperty(exports, "BucketClient", { enumerable: true, get: function () { return files_js_1.BucketClient; } });
+Object.defineProperty(exports, "StorageClient", { enumerable: true, get: function () { return files_js_1.StorageClient; } });
+var realtime_js_1 = require("./realtime.js");
+Object.defineProperty(exports, "RealtimeChannel", { enumerable: true, get: function () { return realtime_js_1.RealtimeChannel; } });
+Object.defineProperty(exports, "RealtimeClient", { enumerable: true, get: function () { return realtime_js_1.RealtimeClient; } });
+var http_js_1 = require("./http.js");
+Object.defineProperty(exports, "HttpClient", { enumerable: true, get: function () { return http_js_1.HttpClient; } });
+__exportStar(require("./errors.js"), exports);
+var version_js_1 = require("./version.js");
+Object.defineProperty(exports, "VERSION", { enumerable: true, get: function () { return version_js_1.VERSION; } });
+var typegen_js_1 = require("./typegen.js");
+Object.defineProperty(exports, "generateTypes", { enumerable: true, get: function () { return typegen_js_1.generateTypes; } });
+//# sourceMappingURL=index.js.map

package/dist/cjs/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;AAAA,yCAA2D;AAAlD,2GAAA,cAAc,OAAA;AAAE,yGAAA,YAAY,OAAA;AAGrC,qCAAuC;AAA9B,qGAAA,UAAU,OAAA;AAanB,uDAAmD;AAA1C,iHAAA,aAAa,OAAA;AAGtB,qCAAyD;AAAhD,uGAAA,YAAY,OAAA;AAAE,yGAAA,cAAc,OAAA;AAYrC,+CAA4E;AAAnE,2GAAA,WAAW,OAAA;AAAE,+GAAA,eAAe,OAAA;AAAE,4GAAA,YAAY,OAAA;AAGnD,uCAAyD;AAAhD,wGAAA,YAAY,OAAA;AAAE,yGAAA,aAAa,OAAA;AAGpC,6CAAgE;AAAvD,8GAAA,eAAe,OAAA;AAAE,6GAAA,cAAc,OAAA;AAWxC,qCAAuC;AAA9B,qGAAA,UAAU,OAAA;AAGnB,8CAA4B;AAE5B,2CAAuC;AAA9B,qGAAA,OAAO,OAAA;AAChB,2CAA6C;AAApC,2GAAA,aAAa,OAAA"}

package/dist/cjs/manage/access.d.ts

@@ -0,0 +1,136 @@
+import { Service, type Api, type Body } from "./base.js";
+type When = Date | string;
+/** The environment's API keys: publishable (`pb_pk_…`, safe in apps) and secret (`pb_sk_…`, servers only). */
+export declare class Keys extends Service {
+    list(): Promise<Api>;
+    /** Every scope a key can hold, with what each allows (the choices for `create({ scopes })`). */
+    scopes(): Promise<Api>;
+    /**
+     * Make a key; the key itself is in the answer once. `scopes` limit what it may do (`resource:read`, `functions:invoke`…),
+     * `allowedIps` and `allowedRoutes` (`"GET /rest/v1/orders"`, `"/functions/v1/*"`) limit where and what it may call.
+     */
+    create(name: string, options?: {
+        role?: "publishable" | "secret";
+        scopes?: string[];
+        expiresAt?: When;
+        allowedIps?: string[];
+        allowedRoutes?: string[];
+    }): Promise<Api>;
+    revoke(keyId: string): Promise<Api>;
+    /** Replace a key with a new one; the old keeps working for `graceHours` (24 by default) so clients can switch. */
+    rotate(keyId: string, options?: {
+        graceHours?: number;
+    }): Promise<Api>;
+}
+/** Secrets functions and flows read (`ctx.runtime.secret(name)`). Values are never returned. */
+export declare class Secrets extends Service {
+    list(): Promise<Api>;
+    set(name: string, value: string, options?: {
+        description?: string;
+        rotateEveryDays?: number;
+    }): Promise<Api>;
+    /** Change the description or the rotation reminder (`0` clears it). */
+    update(name: string, options: {
+        description?: string;
+        rotateEveryDays?: number;
+    }): Promise<Api>;
+    /** Replace the value, keeping the old one for {@link rollback}. */
+    rotate(name: string, value?: string): Promise<Api>;
+    /** Put back the value a rotation replaced. */
+    rollback(name: string): Promise<Api>;
+    remove(name: string): Promise<Api>;
+}
+/** Custom domains the environment answers on, proved with a DNS record. */
+export declare class Domains extends Service {
+    list(): Promise<Api>;
+    /** Register a hostname: the answer says which DNS record proves you own it. */
+    add(hostname: string): Promise<Api>;
+    /** Check the DNS record now. */
+    verify(domainId: string): Promise<Api>;
+    remove(domainId: string): Promise<Api>;
+}
+export interface FirewallCondition {
+    /** `ip`, `country`, `method`, `path`, `host`, `query`, `header:<name>`, `query:<name>`, `user_agent`, `origin`, `referer`, `role`, `key_id`, `content_length`. */
+    field: string;
+    op: string;
+    value: unknown;
+}
+export interface FirewallRule {
+    name: string;
+    action?: "allow" | "block" | "log" | "rate_limit";
+    conditions?: FirewallCondition[];
+    /** How `conditions` combine: `all` (default) or `any`. */
+    logic?: "all" | "any";
+    match?: Record<string, string[]>;
+    rateLimit?: {
+        requests: number;
+        window_seconds: number;
+        by?: string;
+        ban_seconds?: number;
+    };
+    /** `enforce` (default) or `simulate`, which only records what the rule would have done. */
+    mode?: "enforce" | "simulate";
+    enabled?: boolean;
+    expiresAt?: When;
+    note?: string;
+}
+/**
+ * The firewall at the gateway: ordered rules (allow, block, log, rate limit), managed attack signatures, bans, and what it did.
+ *
+ * ```ts
+ * await m.firewall.addRule({ name: "Burst", action: "rate_limit",
+ *   conditions: [{ field: "path", op: "starts_with", value: "/auth/v1/token" }],
+ *   rateLimit: { requests: 10, window_seconds: 60, by: "ip", ban_seconds: 900 } });
+ * ```
+ */
+export declare class Firewall extends Service {
+    /** Rules in the order they are tried. */
+    rules(): Promise<Api>;
+    /** Add a rule at the end. */
+    addRule(rule: FirewallRule): Promise<Api>;
+    /** Change some fields of a rule, using the server's field names (`clear_expiry: true` removes an expiry). */
+    updateRule(ruleId: string, changes: Body): Promise<Api>;
+    removeRule(ruleId: string): Promise<Api>;
+    /** Set the order rules are tried in: every rule exactly once. */
+    order(ruleIds: string[]): Promise<Api>;
+    /** Managed rule sets (`sqli`, `xss`, `traversal`, `scanners`, `sensitive_files`, `no_user_agent`, `methods`) and automatic bans. */
+    config(): Promise<Api>;
+    /** `managed`: `{ sqli: "block", scanners: "log" }` (`off`, `log`, `block`). `autoBan`: `{ enabled, threshold, window_seconds, ban_seconds, statuses, exempt }`. */
+    setConfig(options: {
+        managed?: Record<string, string>;
+        autoBan?: Body;
+    }): Promise<Api>;
+    bans(options?: {
+        includeExpired?: boolean;
+    }): Promise<Api>;
+    /** Ban an address or CIDR range for `seconds` (`0`: until lifted). */
+    ban(ip: string, options?: {
+        seconds?: number;
+        reason?: string;
+    }): Promise<Api>;
+    liftBan(banId: string): Promise<Api>;
+    events(options?: {
+        action?: string;
+        source?: string;
+        ip?: string;
+        path?: string;
+        ruleId?: string;
+        limit?: number;
+    }): Promise<Api>;
+    /** Totals, a timeline, and the top addresses, paths, rules and countries. */
+    stats(options?: {
+        hours?: number;
+    }): Promise<Api>;
+    /** What the firewall would do with a request, step by step. Nothing is sent or counted. */
+    test(ip: string, options?: {
+        path?: string;
+        method?: string;
+        userAgent?: string;
+        query?: string;
+        headers?: Record<string, string>;
+        country?: string;
+        role?: string;
+    }): Promise<Api>;
+}
+export {};
+//# sourceMappingURL=access.d.ts.map

package/dist/cjs/manage/access.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"access.d.ts","sourceRoot":"","sources":["../../../src/manage/access.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAO,KAAK,GAAG,EAAE,KAAK,IAAI,EAAE,MAAM,WAAW,CAAC;AAE9D,KAAK,IAAI,GAAG,IAAI,GAAG,MAAM,CAAC;AAG1B,8GAA8G;AAC9G,qBAAa,IAAK,SAAQ,OAAO;IAC/B,IAAI,IAAI,OAAO,CAAC,GAAG,CAAC;IAIpB,gGAAgG;IAChG,MAAM,IAAI,OAAO,CAAC,GAAG,CAAC;IAItB;;;OAGG;IACH,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,GAAE;QAAE,IAAI,CAAC,EAAE,aAAa,GAAG,QAAQ,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;QAAC,SAAS,CAAC,EAAE,IAAI,CAAC;QAAC,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;QAAC,aAAa,CAAC,EAAE,MAAM,EAAE,CAAA;KAAO,GAAG,OAAO,CAAC,GAAG,CAAC;IAW3K,MAAM,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC;IAInC,kHAAkH;IAClH,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,GAAE;QAAE,UAAU,CAAC,EAAE,MAAM,CAAA;KAAO,GAAG,OAAO,CAAC,GAAG,CAAC;CAG3E;AAED,gGAAgG;AAChG,qBAAa,OAAQ,SAAQ,OAAO;IAClC,IAAI,IAAI,OAAO,CAAC,GAAG,CAAC;IAIpB,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,GAAE;QAAE,WAAW,CAAC,EAAE,MAAM,CAAC;QAAC,eAAe,CAAC,EAAE,MAAM,CAAA;KAAO,GAAG,OAAO,CAAC,GAAG,CAAC;IAIhH,uEAAuE;IACvE,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE;QAAE,WAAW,CAAC,EAAE,MAAM,CAAC;QAAC,eAAe,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,GAAG,CAAC;IAI/F,mEAAmE;IACnE,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC;IAIlD,8CAA8C;IAC9C,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC;IAIpC,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC;CAGnC;AAED,2EAA2E;AAC3E,qBAAa,OAAQ,SAAQ,OAAO;IAClC,IAAI,IAAI,OAAO,CAAC,GAAG,CAAC;IAIpB,+EAA+E;IAC/E,GAAG,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC;IAInC,gCAAgC;IAChC,MAAM,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC;IAItC,MAAM,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC;CAGvC;AAED,MAAM,WAAW,iBAAiB;IAChC,kKAAkK;IAClK,KAAK,EAAE,MAAM,CAAC;IACd,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,OAAO,CAAC;CAChB;AAED,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,CAAC,EAAE,OAAO,GAAG,OAAO,GAAG,KAAK,GAAG,YAAY,CAAC;IAClD,UAAU,CAAC,EAAE,iBAAiB,EAAE,CAAC;IACjC,0DAA0D;IAC1D,KAAK,CAAC,EAAE,KAAK,GAAG,KAAK,CAAC;IACtB,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;IACjC,SAAS,CAAC,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,cAAc,EAAE,MAAM,CAAC;QAAC,EAAE,CAAC,EAAE,MAAM,CAAC;QAAC,WAAW,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAC5F,2FAA2F;IAC3F,IAAI,CAAC,EAAE,SAAS,GAAG,UAAU,CAAC;IAC9B,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,SAAS,CAAC,EAAE,IAAI,CAAC;IACjB,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED;;;;;;;;GAQG;AACH,qBAAa,QAAS,SAAQ,OAAO;IACnC,yCAAyC;IACzC,KAAK,IAAI,OAAO,CAAC,GAAG,CAAC;IAIrB,6BAA6B;IAC7B,OAAO,CAAC,IAAI,EAAE,YAAY,GAAG,OAAO,CAAC,GAAG,CAAC;IAezC,6GAA6G;IAC7G,UAAU,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC;IAIvD,UAAU,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC;IAIxC,iEAAiE;IACjE,KAAK,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,GAAG,CAAC;IAItC,oIAAoI;IACpI,MAAM,IAAI,OAAO,CAAC,GAAG,CAAC;IAItB,mKAAmK;IACnK,SAAS,CAAC,OAAO,EAAE;QAAE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAAC,OAAO,CAAC,EAAE,IAAI,CAAA;KAAE,GAAG,OAAO,CAAC,GAAG,CAAC;IAItF,IAAI,CAAC,OAAO,GAAE;QAAE,cAAc,CAAC,EAAE,OAAO,CAAA;KAAO,GAAG,OAAO,CAAC,GAAG,CAAC;IAI9D,sEAAsE;IACtE,GAAG,CAAC,EAAE,EAAE,MAAM,EAAE,OAAO,GAAE;QAAE,OAAO,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAO,GAAG,OAAO,CAAC,GAAG,CAAC;IAIlF,OAAO,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC;IAIpC,MAAM,CAAC,OAAO,GAAE;QAAE,MAAM,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAC;QAAC,EAAE,CAAC,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAO,GAAG,OAAO,CAAC,GAAG,CAAC;IAKrI,6EAA6E;IAC7E,KAAK,CAAC,OAAO,GAAE;QAAE,KAAK,CAAC,EAAE,MAAM,CAAA;KAAO,GAAG,OAAO,CAAC,GAAG,CAAC;IAIrD,2FAA2F;IAC3F,IAAI,CAAC,EAAE,EAAE,MAAM,EAAE,OAAO,GAAE;QAAE,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAA;KAAO,GAAG,OAAO,CAAC,GAAG,CAAC;CAYxL"}

package/dist/cjs/manage/access.js

@@ -0,0 +1,162 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.Firewall = exports.Domains = exports.Secrets = exports.Keys = void 0;
+const base_js_1 = require("./base.js");
+const iso = (value) => (value instanceof Date ? value.toISOString() : value);
+/** The environment's API keys: publishable (`pb_pk_…`, safe in apps) and secret (`pb_sk_…`, servers only). */
+class Keys extends base_js_1.Service {
+    list() {
+        return this.get("/keys");
+    }
+    /** Every scope a key can hold, with what each allows (the choices for `create({ scopes })`). */
+    scopes() {
+        return this.project("GET", "/key-scopes");
+    }
+    /**
+     * Make a key; the key itself is in the answer once. `scopes` limit what it may do (`resource:read`, `functions:invoke`…),
+     * `allowedIps` and `allowedRoutes` (`"GET /rest/v1/orders"`, `"/functions/v1/*"`) limit where and what it may call.
+     */
+    create(name, options = {}) {
+        return this.post("/keys", {
+            name,
+            role: options.role ?? "publishable",
+            scopes: options.scopes ?? [],
+            expires_at: iso(options.expiresAt),
+            allowed_ips: options.allowedIps ?? [],
+            allowed_routes: options.allowedRoutes ?? [],
+        });
+    }
+    revoke(keyId) {
+        return this.post((0, base_js_1.seg)("keys", keyId, "revoke"));
+    }
+    /** Replace a key with a new one; the old keeps working for `graceHours` (24 by default) so clients can switch. */
+    rotate(keyId, options = {}) {
+        return this.post((0, base_js_1.seg)("keys", keyId, "rotate"), { grace_hours: options.graceHours ?? 24 });
+    }
+}
+exports.Keys = Keys;
+/** Secrets functions and flows read (`ctx.runtime.secret(name)`). Values are never returned. */
+class Secrets extends base_js_1.Service {
+    list() {
+        return this.get("/secrets");
+    }
+    set(name, value, options = {}) {
+        return this.put((0, base_js_1.seg)("secrets", name), { value, description: options.description ?? "", rotate_every_days: options.rotateEveryDays });
+    }
+    /** Change the description or the rotation reminder (`0` clears it). */
+    update(name, options) {
+        return this.patch((0, base_js_1.seg)("secrets", name), { description: options.description, rotate_every_days: options.rotateEveryDays });
+    }
+    /** Replace the value, keeping the old one for {@link rollback}. */
+    rotate(name, value) {
+        return this.post((0, base_js_1.seg)("secrets", name, "rotate"), value ? { value } : {});
+    }
+    /** Put back the value a rotation replaced. */
+    rollback(name) {
+        return this.post((0, base_js_1.seg)("secrets", name, "rollback"));
+    }
+    remove(name) {
+        return this.del((0, base_js_1.seg)("secrets", name));
+    }
+}
+exports.Secrets = Secrets;
+/** Custom domains the environment answers on, proved with a DNS record. */
+class Domains extends base_js_1.Service {
+    list() {
+        return this.get("/domains");
+    }
+    /** Register a hostname: the answer says which DNS record proves you own it. */
+    add(hostname) {
+        return this.post("/domains", { hostname });
+    }
+    /** Check the DNS record now. */
+    verify(domainId) {
+        return this.post((0, base_js_1.seg)("domains", domainId, "verify"));
+    }
+    remove(domainId) {
+        return this.del((0, base_js_1.seg)("domains", domainId));
+    }
+}
+exports.Domains = Domains;
+/**
+ * The firewall at the gateway: ordered rules (allow, block, log, rate limit), managed attack signatures, bans, and what it did.
+ *
+ * ```ts
+ * await m.firewall.addRule({ name: "Burst", action: "rate_limit",
+ *   conditions: [{ field: "path", op: "starts_with", value: "/auth/v1/token" }],
+ *   rateLimit: { requests: 10, window_seconds: 60, by: "ip", ban_seconds: 900 } });
+ * ```
+ */
+class Firewall extends base_js_1.Service {
+    /** Rules in the order they are tried. */
+    rules() {
+        return this.get("/firewall");
+    }
+    /** Add a rule at the end. */
+    addRule(rule) {
+        return this.post("/firewall", {
+            name: rule.name,
+            action: rule.action ?? "block",
+            conditions: rule.conditions ?? [],
+            logic: rule.logic ?? "all",
+            match: rule.match ?? {},
+            rate_limit: rule.rateLimit,
+            mode: rule.mode ?? "enforce",
+            enabled: rule.enabled ?? true,
+            expires_at: iso(rule.expiresAt),
+            note: rule.note ?? "",
+        });
+    }
+    /** Change some fields of a rule, using the server's field names (`clear_expiry: true` removes an expiry). */
+    updateRule(ruleId, changes) {
+        return this.patch((0, base_js_1.seg)("firewall", ruleId), changes);
+    }
+    removeRule(ruleId) {
+        return this.del((0, base_js_1.seg)("firewall", ruleId));
+    }
+    /** Set the order rules are tried in: every rule exactly once. */
+    order(ruleIds) {
+        return this.put("/firewall-order", { ids: ruleIds });
+    }
+    /** Managed rule sets (`sqli`, `xss`, `traversal`, `scanners`, `sensitive_files`, `no_user_agent`, `methods`) and automatic bans. */
+    config() {
+        return this.get("/firewall-config");
+    }
+    /** `managed`: `{ sqli: "block", scanners: "log" }` (`off`, `log`, `block`). `autoBan`: `{ enabled, threshold, window_seconds, ban_seconds, statuses, exempt }`. */
+    setConfig(options) {
+        return this.put("/firewall-config", { managed: options.managed, auto_ban: options.autoBan });
+    }
+    bans(options = {}) {
+        return this.get("/firewall-bans", { all: options.includeExpired ? 1 : undefined });
+    }
+    /** Ban an address or CIDR range for `seconds` (`0`: until lifted). */
+    ban(ip, options = {}) {
+        return this.post("/firewall-bans", { ip, seconds: options.seconds ?? 0, reason: options.reason ?? "" });
+    }
+    liftBan(banId) {
+        return this.del((0, base_js_1.seg)("firewall-bans", banId));
+    }
+    events(options = {}) {
+        const { ruleId, ...rest } = options;
+        return this.get("/firewall-events", { limit: 100, ...rest, rule_id: ruleId });
+    }
+    /** Totals, a timeline, and the top addresses, paths, rules and countries. */
+    stats(options = {}) {
+        return this.get("/firewall-stats", { hours: options.hours ?? 24 });
+    }
+    /** What the firewall would do with a request, step by step. Nothing is sent or counted. */
+    test(ip, options = {}) {
+        return this.post("/firewall-test", {
+            ip,
+            path: options.path ?? "/",
+            method: options.method ?? "GET",
+            user_agent: options.userAgent ?? "",
+            query: options.query ?? "",
+            headers: options.headers ?? {},
+            country: options.country ?? "",
+            role: options.role ?? "none",
+        });
+    }
+}
+exports.Firewall = Firewall;
+//# sourceMappingURL=access.js.map