@pawabase/client 0.0.0-stage → 0.1.3

package/dist/esm/http.js

@@ -0,0 +1,245 @@
+import { AbortError, NetworkError, TimeoutError, errorFromResponse, parseRetryAfter, } from "./errors.js";
+import { VERSION } from "./version.js";
+import { anySignal, backoff, queryString, sleep, trimSlash } from "./util.js";
+const SAFE_METHODS = new Set(["GET", "HEAD", "OPTIONS", "PUT", "DELETE"]);
+const RETRYABLE_STATUS = new Set([502, 503, 504]);
+const DEFAULT_RETRY = {
+    retries: 2,
+    baseDelayMs: 300,
+    maxDelayMs: 8000,
+    maxRetryAfterMs: 30_000,
+};
+function isStream(body) {
+    return typeof ReadableStream !== "undefined" && body instanceof ReadableStream;
+}
+function isRawBody(body) {
+    return (typeof body === "string" ||
+        (typeof Blob !== "undefined" && body instanceof Blob) ||
+        (typeof FormData !== "undefined" && body instanceof FormData) ||
+        (typeof URLSearchParams !== "undefined" && body instanceof URLSearchParams) ||
+        body instanceof ArrayBuffer ||
+        ArrayBuffer.isView(body) ||
+        isStream(body));
+}
+export class HttpClient {
+    config;
+    constructor(config) {
+        this.config = config;
+    }
+    url(path, query) {
+        const base = trimSlash(this.config.baseUrl);
+        return `${base}${path.startsWith("/") ? path : `/${path}`}${queryString(query)}`;
+    }
+    /** Make a request and return the parsed body (`undefined` for `204`). */
+    async request(options) {
+        const response = await this.send(options);
+        return (await this.read(response, options.parse ?? "json"));
+    }
+    /** Make a request and return the raw `Response`. Non-2xx answers throw. */
+    async send(options) {
+        const method = (options.method ?? "GET").toUpperCase();
+        const url = options.absoluteUrl ?? this.url(options.path, options.query);
+        const anonymous = options.absoluteUrl !== undefined;
+        const retry = this.retryPolicy(options.retry);
+        const body = options.body;
+        const replayable = !isStream(body);
+        const idempotent = options.idempotent === true || SAFE_METHODS.has(method);
+        let token = null;
+        if (anonymous)
+            token = null;
+        else if (options.accessToken !== undefined)
+            token = options.accessToken;
+        else if (options.auth !== "none" && this.config.tokens)
+            token = await this.config.tokens.getAccessToken();
+        let attempt = 0;
+        let refreshed = false;
+        for (;;) {
+            const info = { method, url, attempt };
+            const started = Date.now();
+            let response;
+            try {
+                response = await this.once(method, url, options, token, info, anonymous);
+            }
+            catch (error) {
+                const retriable = error instanceof NetworkError || error instanceof TimeoutError;
+                if (retriable && retry && idempotent && replayable && attempt < retry.retries) {
+                    const delayMs = backoff(attempt, retry);
+                    this.hook(() => this.config.hooks.onRetry?.({ ...info, reason: error.name, delayMs }));
+                    await sleep(delayMs, options.signal);
+                    attempt += 1;
+                    continue;
+                }
+                this.hook(() => this.config.hooks.onError?.(error, info));
+                throw error;
+            }
+            this.hook(() => this.config.hooks.onResponse?.({
+                ...info,
+                status: response.status,
+                durationMs: Date.now() - started,
+                requestId: response.headers.get("x-request-id"),
+            }));
+            if (response.ok)
+                return response;
+            if (options.throwOnError === false && !(response.status === 401 && token && !refreshed && this.config.tokens)) {
+                const retryable = response.status === 429 || (RETRYABLE_STATUS.has(response.status) && idempotent);
+                if (!retry || !retryable || attempt >= retry.retries)
+                    return response;
+            }
+            // A rejected token: refresh once and replay, unless the body cannot be replayed.
+            if (response.status === 401 &&
+                token &&
+                !refreshed &&
+                replayable &&
+                options.auth !== "none" &&
+                options.accessToken === undefined &&
+                this.config.tokens) {
+                refreshed = true;
+                const fresh = await this.config.tokens.onUnauthorized(token);
+                if (fresh && fresh !== token) {
+                    await this.discard(response);
+                    token = fresh;
+                    continue;
+                }
+            }
+            const error = await this.toError(response, method, url);
+            const delayMs = this.retryDelay(error, response, attempt, retry, idempotent, replayable);
+            if (delayMs !== null && retry) {
+                this.hook(() => this.config.hooks.onRetry?.({ ...info, reason: `status ${response.status}`, delayMs }));
+                await sleep(delayMs, options.signal);
+                attempt += 1;
+                continue;
+            }
+            this.hook(() => this.config.hooks.onError?.(error, info));
+            throw error;
+        }
+    }
+    retryPolicy(override) {
+        const chosen = override === undefined ? this.config.retry : override;
+        if (chosen === false)
+            return null;
+        const merged = { ...DEFAULT_RETRY, ...(this.config.retry === false ? {} : this.config.retry), ...chosen };
+        return merged.retries > 0 ? merged : null;
+    }
+    retryDelay(error, response, attempt, retry, idempotent, replayable) {
+        if (!retry || !replayable || attempt >= retry.retries)
+            return null;
+        const status = response.status;
+        // 429 is answered before a handler runs, so repeating any method is safe.
+        const retryable = status === 429 || (RETRYABLE_STATUS.has(status) && idempotent);
+        if (!retryable)
+            return null;
+        const asked = parseRetryAfter(response.headers.get("retry-after")) ?? error.retryAfter;
+        if (asked !== null && asked !== undefined) {
+            const ms = asked * 1000;
+            return ms > retry.maxRetryAfterMs ? null : Math.ceil(ms);
+        }
+        return backoff(attempt, retry);
+    }
+    async once(method, url, options, token, info, anonymous) {
+        const headers = {
+            accept: "application/json",
+            ...(anonymous ? {} : { apikey: this.config.apiKey, "x-client-info": `pawabase-js/${VERSION}`, ...this.config.headers }),
+            ...options.headers,
+        };
+        if (token)
+            headers["authorization"] = `Bearer ${token}`;
+        let body;
+        const raw = options.body;
+        if (raw !== undefined && raw !== null) {
+            if (isRawBody(raw)) {
+                body = raw;
+            }
+            else {
+                body = JSON.stringify(raw);
+                if (!Object.keys(headers).some((name) => name.toLowerCase() === "content-type")) {
+                    headers["content-type"] = "application/json";
+                }
+            }
+        }
+        this.hook(() => this.config.hooks.onRequest?.({
+            ...info,
+            headers: { ...headers, ...(headers["apikey"] ? { apikey: "***" } : {}), ...(headers["authorization"] ? { authorization: "Bearer ***" } : {}) },
+        }));
+        const timeoutMs = options.timeoutMs ?? this.config.timeoutMs;
+        const timeoutController = new AbortController();
+        const timer = timeoutMs > 0 ? setTimeout(() => timeoutController.abort(new TimeoutError(timeoutMs)), timeoutMs) : null;
+        const signal = anySignal([options.signal, timeoutMs > 0 ? timeoutController.signal : undefined]);
+        const init = { method, headers, ...(signal ? { signal } : {}) };
+        if (body !== undefined) {
+            init.body = body;
+            if (isStream(body))
+                init.duplex = "half";
+        }
+        try {
+            return await this.config.fetch(url, init);
+        }
+        catch (error) {
+            if (options.signal?.aborted)
+                throw new AbortError(undefined, { cause: error });
+            if (timeoutController.signal.aborted)
+                throw new TimeoutError(timeoutMs, { cause: error });
+            throw new NetworkError(`Could not reach ${new URL(url).origin}: ${error?.message ?? error}`, {
+                cause: error,
+                method,
+                url,
+            });
+        }
+        finally {
+            if (timer)
+                clearTimeout(timer);
+        }
+    }
+    async toError(response, method, url) {
+        let body;
+        const text = await response.text().catch(() => "");
+        if (text) {
+            try {
+                body = JSON.parse(text);
+            }
+            catch {
+                body = text;
+            }
+        }
+        return errorFromResponse({ status: response.status, body, headers: response.headers, method, url });
+    }
+    async discard(response) {
+        try {
+            await response.arrayBuffer();
+        }
+        catch {
+            /* the body is not needed */
+        }
+    }
+    async read(response, as) {
+        if (as === "response")
+            return response;
+        if (as === "stream")
+            return response.body;
+        if (as === "blob")
+            return response.blob();
+        if (as === "arrayBuffer")
+            return response.arrayBuffer();
+        if (response.status === 204 || response.status === 205)
+            return undefined;
+        const text = await response.text();
+        if (!text)
+            return undefined;
+        if (as === "text")
+            return text;
+        try {
+            return JSON.parse(text);
+        }
+        catch {
+            return text;
+        }
+    }
+    hook(fn) {
+        try {
+            fn();
+        }
+        catch {
+            /* hooks observe; they must not break requests */
+        }
+    }
+}
+//# sourceMappingURL=http.js.map

package/dist/esm/http.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"http.js","sourceRoot":"","sources":["../../src/http.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,UAAU,EACV,YAAY,EACZ,YAAY,EACZ,iBAAiB,EACjB,eAAe,GAEhB,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AACvC,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,WAAW,EAAE,KAAK,EAAE,SAAS,EAAmB,MAAM,WAAW,CAAC;AAyF/F,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC,CAAC;AAC1E,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC;AAElD,MAAM,aAAa,GAA2B;IAC5C,OAAO,EAAE,CAAC;IACV,WAAW,EAAE,GAAG;IAChB,UAAU,EAAE,IAAI;IAChB,eAAe,EAAE,MAAM;CACxB,CAAC;AAEF,SAAS,QAAQ,CAAC,IAAa;IAC7B,OAAO,OAAO,cAAc,KAAK,WAAW,IAAI,IAAI,YAAY,cAAc,CAAC;AACjF,CAAC;AAED,SAAS,SAAS,CAAC,IAAa;IAC9B,OAAO,CACL,OAAO,IAAI,KAAK,QAAQ;QACxB,CAAC,OAAO,IAAI,KAAK,WAAW,IAAI,IAAI,YAAY,IAAI,CAAC;QACrD,CAAC,OAAO,QAAQ,KAAK,WAAW,IAAI,IAAI,YAAY,QAAQ,CAAC;QAC7D,CAAC,OAAO,eAAe,KAAK,WAAW,IAAI,IAAI,YAAY,eAAe,CAAC;QAC3E,IAAI,YAAY,WAAW;QAC3B,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC;QACxB,QAAQ,CAAC,IAAI,CAAC,CACf,CAAC;AACJ,CAAC;AAED,MAAM,OAAO,UAAU;IACA;IAArB,YAAqB,MAAkB;QAAlB,WAAM,GAAN,MAAM,CAAY;IAAG,CAAC;IAE3C,GAAG,CAAC,IAAY,EAAE,KAA+B;QAC/C,MAAM,IAAI,GAAG,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAC5C,OAAO,GAAG,IAAI,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,GAAG,WAAW,CAAC,KAAK,CAAC,EAAE,CAAC;IACnF,CAAC;IAED,yEAAyE;IACzE,KAAK,CAAC,OAAO,CAAc,OAAuB;QAChD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC1C,OAAO,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,OAAO,CAAC,KAAK,IAAI,MAAM,CAAC,CAAM,CAAC;IACnE,CAAC;IAED,2EAA2E;IAC3E,KAAK,CAAC,IAAI,CAAC,OAAuB;QAChC,MAAM,MAAM,GAAG,CAAC,OAAO,CAAC,MAAM,IAAI,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC;QACvD,MAAM,GAAG,GAAG,OAAO,CAAC,WAAW,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC;QACzE,MAAM,SAAS,GAAG,OAAO,CAAC,WAAW,KAAK,SAAS,CAAC;QACpD,MAAM,KAAK,GAAG,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QAC9C,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;QAC1B,MAAM,UAAU,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QACnC,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,KAAK,IAAI,IAAI,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAE3E,IAAI,KAAK,GAAkB,IAAI,CAAC;QAChC,IAAI,SAAS;YAAE,KAAK,GAAG,IAAI,CAAC;aACvB,IAAI,OAAO,CAAC,WAAW,KAAK,SAAS;YAAE,KAAK,GAAG,OAAO,CAAC,WAAW,CAAC;aACnE,IAAI,OAAO,CAAC,IAAI,KAAK,MAAM,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM;YAAE,KAAK,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,cAAc,EAAE,CAAC;QAE1G,IAAI,OAAO,GAAG,CAAC,CAAC;QAChB,IAAI,SAAS,GAAG,KAAK,CAAC;QACtB,SAAS,CAAC;YACR,MAAM,IAAI,GAAgB,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC;YACnD,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YAC3B,IAAI,QAAkB,CAAC;YACvB,IAAI,CAAC;gBACH,QAAQ,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,CAAC,CAAC;YAC3E,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,SAAS,GAAG,KAAK,YAAY,YAAY,IAAI,KAAK,YAAY,YAAY,CAAC;gBACjF,IAAI,SAAS,IAAI,KAAK,IAAI,UAAU,IAAI,UAAU,IAAI,OAAO,GAAG,KAAK,CAAC,OAAO,EAAE,CAAC;oBAC9E,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;oBACxC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,EAAE,GAAG,IAAI,EAAE,MAAM,EAAG,KAAe,CAAC,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC;oBAClG,MAAM,KAAK,CAAC,OAAO,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;oBACrC,OAAO,IAAI,CAAC,CAAC;oBACb,SAAS;gBACX,CAAC;gBACD,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC;gBAC1D,MAAM,KAAK,CAAC;YACd,CAAC;YAED,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CACb,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,UAAU,EAAE,CAAC;gBAC7B,GAAG,IAAI;gBACP,MAAM,EAAE,QAAQ,CAAC,MAAM;gBACvB,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO;gBAChC,SAAS,EAAE,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC;aAChD,CAAC,CACH,CAAC;YACF,IAAI,QAAQ,CAAC,EAAE;gBAAE,OAAO,QAAQ,CAAC;YACjC,IAAI,OAAO,CAAC,YAAY,KAAK,KAAK,IAAI,CAAC,CAAC,QAAQ,CAAC,MAAM,KAAK,GAAG,IAAI,KAAK,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;gBAC9G,MAAM,SAAS,GAAG,QAAQ,CAAC,MAAM,KAAK,GAAG,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,UAAU,CAAC,CAAC;gBACnG,IAAI,CAAC,KAAK,IAAI,CAAC,SAAS,IAAI,OAAO,IAAI,KAAK,CAAC,OAAO;oBAAE,OAAO,QAAQ,CAAC;YACxE,CAAC;YAED,iFAAiF;YACjF,IACE,QAAQ,CAAC,MAAM,KAAK,GAAG;gBACvB,KAAK;gBACL,CAAC,SAAS;gBACV,UAAU;gBACV,OAAO,CAAC,IAAI,KAAK,MAAM;gBACvB,OAAO,CAAC,WAAW,KAAK,SAAS;gBACjC,IAAI,CAAC,MAAM,CAAC,MAAM,EAClB,CAAC;gBACD,SAAS,GAAG,IAAI,CAAC;gBACjB,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;gBAC7D,IAAI,KAAK,IAAI,KAAK,KAAK,KAAK,EAAE,CAAC;oBAC7B,MAAM,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;oBAC7B,KAAK,GAAG,KAAK,CAAC;oBACd,SAAS;gBACX,CAAC;YACH,CAAC;YAED,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC;YACxD,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,UAAU,CAAC,CAAC;YACzF,IAAI,OAAO,KAAK,IAAI,IAAI,KAAK,EAAE,CAAC;gBAC9B,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CACb,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,UAAU,QAAQ,CAAC,MAAM,EAAE,EAAE,OAAO,EAAE,CAAC,CACvF,CAAC;gBACF,MAAM,KAAK,CAAC,OAAO,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;gBACrC,OAAO,IAAI,CAAC,CAAC;gBACb,SAAS;YACX,CAAC;YACD,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC;YAC1D,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAEO,WAAW,CAAC,QAA0C;QAC5D,MAAM,MAAM,GAAG,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC;QACrE,IAAI,MAAM,KAAK,KAAK;YAAE,OAAO,IAAI,CAAC;QAClC,MAAM,MAAM,GAAG,EAAE,GAAG,aAAa,EAAE,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,KAAK,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,GAAG,MAAM,EAAE,CAAC;QAC1G,OAAO,MAAM,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC;IAC5C,CAAC;IAEO,UAAU,CAChB,KAAe,EACf,QAAkB,EAClB,OAAe,EACf,KAAoC,EACpC,UAAmB,EACnB,UAAmB;QAEnB,IAAI,CAAC,KAAK,IAAI,CAAC,UAAU,IAAI,OAAO,IAAI,KAAK,CAAC,OAAO;YAAE,OAAO,IAAI,CAAC;QACnE,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC;QAC/B,0EAA0E;QAC1E,MAAM,SAAS,GAAG,MAAM,KAAK,GAAG,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,UAAU,CAAC,CAAC;QACjF,IAAI,CAAC,SAAS;YAAE,OAAO,IAAI,CAAC;QAC5B,MAAM,KAAK,GAAG,eAAe,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,IAAI,KAAK,CAAC,UAAU,CAAC;QACvF,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YAC1C,MAAM,EAAE,GAAG,KAAK,GAAG,IAAI,CAAC;YACxB,OAAO,EAAE,GAAG,KAAK,CAAC,eAAe,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC3D,CAAC;QACD,OAAO,OAAO,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IACjC,CAAC;IAEO,KAAK,CAAC,IAAI,CAChB,MAAc,EACd,GAAW,EACX,OAAuB,EACvB,KAAoB,EACpB,IAAiB,EACjB,SAAkB;QAElB,MAAM,OAAO,GAA2B;YACtC,MAAM,EAAE,kBAAkB;YAC1B,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,eAAe,EAAE,eAAe,OAAO,EAAE,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACvH,GAAG,OAAO,CAAC,OAAO;SACnB,CAAC;QACF,IAAI,KAAK;YAAE,OAAO,CAAC,eAAe,CAAC,GAAG,UAAU,KAAK,EAAE,CAAC;QAExD,IAAI,IAA0B,CAAC;QAC/B,MAAM,GAAG,GAAG,OAAO,CAAC,IAAI,CAAC;QACzB,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;YACtC,IAAI,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC;gBACnB,IAAI,GAAG,GAAe,CAAC;YACzB,CAAC;iBAAM,CAAC;gBACN,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;gBAC3B,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,WAAW,EAAE,KAAK,cAAc,CAAC,EAAE,CAAC;oBAChF,OAAO,CAAC,cAAc,CAAC,GAAG,kBAAkB,CAAC;gBAC/C,CAAC;YACH,CAAC;QACH,CAAC;QAED,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CACb,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,SAAS,EAAE,CAAC;YAC5B,GAAG,IAAI;YACP,OAAO,EAAE,EAAE,GAAG,OAAO,EAAE,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE;SAC/I,CAAC,CACH,CAAC;QAEF,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC;QAC7D,MAAM,iBAAiB,GAAG,IAAI,eAAe,EAAE,CAAC;QAChD,MAAM,KAAK,GAAG,SAAS,GAAG,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,EAAE,CAAC,iBAAiB,CAAC,KAAK,CAAC,IAAI,YAAY,CAAC,SAAS,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QACvH,MAAM,MAAM,GAAG,SAAS,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,SAAS,GAAG,CAAC,CAAC,CAAC,CAAC,iBAAiB,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC;QACjG,MAAM,IAAI,GAAsC,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;QACnG,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;YACvB,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;YACjB,IAAI,QAAQ,CAAC,IAAI,CAAC;gBAAE,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QAC3C,CAAC;QACD,IAAI,CAAC;YACH,OAAO,MAAM,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QAC5C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,OAAO,CAAC,MAAM,EAAE,OAAO;gBAAE,MAAM,IAAI,UAAU,CAAC,SAAS,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;YAC/E,IAAI,iBAAiB,CAAC,MAAM,CAAC,OAAO;gBAAE,MAAM,IAAI,YAAY,CAAC,SAAS,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;YAC1F,MAAM,IAAI,YAAY,CAAC,mBAAmB,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,MAAM,KAAM,KAAe,EAAE,OAAO,IAAI,KAAK,EAAE,EAAE;gBACtG,KAAK,EAAE,KAAK;gBACZ,MAAM;gBACN,GAAG;aACJ,CAAC,CAAC;QACL,CAAC;gBAAS,CAAC;YACT,IAAI,KAAK;gBAAE,YAAY,CAAC,KAAK,CAAC,CAAC;QACjC,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,OAAO,CAAC,QAAkB,EAAE,MAAc,EAAE,GAAW;QACnE,IAAI,IAAa,CAAC;QAClB,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;QACnD,IAAI,IAAI,EAAE,CAAC;YACT,IAAI,CAAC;gBACH,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAC1B,CAAC;YAAC,MAAM,CAAC;gBACP,IAAI,GAAG,IAAI,CAAC;YACd,CAAC;QACH,CAAC;QACD,OAAO,iBAAiB,CAAC,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;IACtG,CAAC;IAEO,KAAK,CAAC,OAAO,CAAC,QAAkB;QACtC,IAAI,CAAC;YACH,MAAM,QAAQ,CAAC,WAAW,EAAE,CAAC;QAC/B,CAAC;QAAC,MAAM,CAAC;YACP,4BAA4B;QAC9B,CAAC;IACH,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,QAAkB,EAAE,EAAW;QACxC,IAAI,EAAE,KAAK,UAAU;YAAE,OAAO,QAAQ,CAAC;QACvC,IAAI,EAAE,KAAK,QAAQ;YAAE,OAAO,QAAQ,CAAC,IAAI,CAAC;QAC1C,IAAI,EAAE,KAAK,MAAM;YAAE,OAAO,QAAQ,CAAC,IAAI,EAAE,CAAC;QAC1C,IAAI,EAAE,KAAK,aAAa;YAAE,OAAO,QAAQ,CAAC,WAAW,EAAE,CAAC;QACxD,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG;YAAE,OAAO,SAAS,CAAC;QACzE,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;QACnC,IAAI,CAAC,IAAI;YAAE,OAAO,SAAS,CAAC;QAC5B,IAAI,EAAE,KAAK,MAAM;YAAE,OAAO,IAAI,CAAC;QAC/B,IAAI,CAAC;YACH,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC1B,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAEO,IAAI,CAAC,EAAc;QACzB,IAAI,CAAC;YACH,EAAE,EAAE,CAAC;QACP,CAAC;QAAC,MAAM,CAAC;YACP,iDAAiD;QACnD,CAAC;IACH,CAAC;CACF"}

package/dist/esm/index.d.ts

@@ -0,0 +1,22 @@
+export { PawabaseClient, createClient } from "./client.js";
+export type { ClientOptions, DatabaseShape } from "./client.js";
+export { AuthClient } from "./auth.js";
+export type { AuthChangeEvent, AuthListener, AuthOptions, IssuedToken, Passkey, PasskeyChallenge, SignInResult, SignUpResult, UpdateUserInput, UrlSessionResult, } from "./auth.js";
+export { MemoryStorage } from "./session-store.js";
+export type { SessionStorage } from "./session-store.js";
+export { QueryBuilder, ResourceClient } from "./data.js";
+export type { AnyRow, Condition, CreateManyResult, FilterOp, IterateOptions, QueryOptions, ReadOptions, ResourceTypes, } from "./data.js";
+export { FlowsClient, FunctionsClient, RoutesClient } from "./functions.js";
+export type { CallOptions, RouteOptions } from "./functions.js";
+export { BucketClient, StorageClient } from "./files.js";
+export type { TransferOptions, UploadBody, UploadOptions } from "./files.js";
+export { RealtimeChannel, RealtimeClient } from "./realtime.js";
+export type { ChannelEvents, ChannelOptions, PresenceChange, RealtimeOptions, RealtimeStatus, WebSocketConstructor, WebSocketLike, } from "./realtime.js";
+export { HttpClient } from "./http.js";
+export type { FetchLike, Hooks, RequestInfo, RequestOptions, ResponseInfo, RetryOptions, TokenProvider } from "./http.js";
+export * from "./errors.js";
+export type * from "./types.js";
+export { VERSION } from "./version.js";
+export { generateTypes } from "./typegen.js";
+export type { TypegenOptions } from "./typegen.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/esm/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC3D,YAAY,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAEhE,OAAO,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AACvC,YAAY,EACV,eAAe,EACf,YAAY,EACZ,WAAW,EACX,WAAW,EACX,OAAO,EACP,gBAAgB,EAChB,YAAY,EACZ,YAAY,EACZ,eAAe,EACf,gBAAgB,GACjB,MAAM,WAAW,CAAC;AACnB,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AACnD,YAAY,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AAEzD,OAAO,EAAE,YAAY,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AACzD,YAAY,EACV,MAAM,EACN,SAAS,EACT,gBAAgB,EAChB,QAAQ,EACR,cAAc,EACd,YAAY,EACZ,WAAW,EACX,aAAa,GACd,MAAM,WAAW,CAAC;AAEnB,OAAO,EAAE,WAAW,EAAE,eAAe,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAC5E,YAAY,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAEhE,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AACzD,YAAY,EAAE,eAAe,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAE7E,OAAO,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAChE,YAAY,EACV,aAAa,EACb,cAAc,EACd,cAAc,EACd,eAAe,EACf,cAAc,EACd,oBAAoB,EACpB,aAAa,GACd,MAAM,eAAe,CAAC;AAEvB,OAAO,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AACvC,YAAY,EAAE,SAAS,EAAE,KAAK,EAAE,WAAW,EAAE,cAAc,EAAE,YAAY,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,WAAW,CAAC;AAE1H,cAAc,aAAa,CAAC;AAC5B,mBAAmB,YAAY,CAAC;AAChC,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AACvC,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAC7C,YAAY,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC"}

package/dist/esm/index.js

@@ -0,0 +1,12 @@
+export { PawabaseClient, createClient } from "./client.js";
+export { AuthClient } from "./auth.js";
+export { MemoryStorage } from "./session-store.js";
+export { QueryBuilder, ResourceClient } from "./data.js";
+export { FlowsClient, FunctionsClient, RoutesClient } from "./functions.js";
+export { BucketClient, StorageClient } from "./files.js";
+export { RealtimeChannel, RealtimeClient } from "./realtime.js";
+export { HttpClient } from "./http.js";
+export * from "./errors.js";
+export { VERSION } from "./version.js";
+export { generateTypes } from "./typegen.js";
+//# sourceMappingURL=index.js.map

package/dist/esm/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAG3D,OAAO,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AAavC,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAGnD,OAAO,EAAE,YAAY,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AAYzD,OAAO,EAAE,WAAW,EAAE,eAAe,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAG5E,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAGzD,OAAO,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAWhE,OAAO,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AAGvC,cAAc,aAAa,CAAC;AAE5B,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AACvC,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC"}

package/dist/esm/manage/access.d.ts

@@ -0,0 +1,136 @@
+import { Service, type Api, type Body } from "./base.js";
+type When = Date | string;
+/** The environment's API keys: publishable (`pb_pk_…`, safe in apps) and secret (`pb_sk_…`, servers only). */
+export declare class Keys extends Service {
+    list(): Promise<Api>;
+    /** Every scope a key can hold, with what each allows (the choices for `create({ scopes })`). */
+    scopes(): Promise<Api>;
+    /**
+     * Make a key; the key itself is in the answer once. `scopes` limit what it may do (`resource:read`, `functions:invoke`…),
+     * `allowedIps` and `allowedRoutes` (`"GET /rest/v1/orders"`, `"/functions/v1/*"`) limit where and what it may call.
+     */
+    create(name: string, options?: {
+        role?: "publishable" | "secret";
+        scopes?: string[];
+        expiresAt?: When;
+        allowedIps?: string[];
+        allowedRoutes?: string[];
+    }): Promise<Api>;
+    revoke(keyId: string): Promise<Api>;
+    /** Replace a key with a new one; the old keeps working for `graceHours` (24 by default) so clients can switch. */
+    rotate(keyId: string, options?: {
+        graceHours?: number;
+    }): Promise<Api>;
+}
+/** Secrets functions and flows read (`ctx.runtime.secret(name)`). Values are never returned. */
+export declare class Secrets extends Service {
+    list(): Promise<Api>;
+    set(name: string, value: string, options?: {
+        description?: string;
+        rotateEveryDays?: number;
+    }): Promise<Api>;
+    /** Change the description or the rotation reminder (`0` clears it). */
+    update(name: string, options: {
+        description?: string;
+        rotateEveryDays?: number;
+    }): Promise<Api>;
+    /** Replace the value, keeping the old one for {@link rollback}. */
+    rotate(name: string, value?: string): Promise<Api>;
+    /** Put back the value a rotation replaced. */
+    rollback(name: string): Promise<Api>;
+    remove(name: string): Promise<Api>;
+}
+/** Custom domains the environment answers on, proved with a DNS record. */
+export declare class Domains extends Service {
+    list(): Promise<Api>;
+    /** Register a hostname: the answer says which DNS record proves you own it. */
+    add(hostname: string): Promise<Api>;
+    /** Check the DNS record now. */
+    verify(domainId: string): Promise<Api>;
+    remove(domainId: string): Promise<Api>;
+}
+export interface FirewallCondition {
+    /** `ip`, `country`, `method`, `path`, `host`, `query`, `header:<name>`, `query:<name>`, `user_agent`, `origin`, `referer`, `role`, `key_id`, `content_length`. */
+    field: string;
+    op: string;
+    value: unknown;
+}
+export interface FirewallRule {
+    name: string;
+    action?: "allow" | "block" | "log" | "rate_limit";
+    conditions?: FirewallCondition[];
+    /** How `conditions` combine: `all` (default) or `any`. */
+    logic?: "all" | "any";
+    match?: Record<string, string[]>;
+    rateLimit?: {
+        requests: number;
+        window_seconds: number;
+        by?: string;
+        ban_seconds?: number;
+    };
+    /** `enforce` (default) or `simulate`, which only records what the rule would have done. */
+    mode?: "enforce" | "simulate";
+    enabled?: boolean;
+    expiresAt?: When;
+    note?: string;
+}
+/**
+ * The firewall at the gateway: ordered rules (allow, block, log, rate limit), managed attack signatures, bans, and what it did.
+ *
+ * ```ts
+ * await m.firewall.addRule({ name: "Burst", action: "rate_limit",
+ *   conditions: [{ field: "path", op: "starts_with", value: "/auth/v1/token" }],
+ *   rateLimit: { requests: 10, window_seconds: 60, by: "ip", ban_seconds: 900 } });
+ * ```
+ */
+export declare class Firewall extends Service {
+    /** Rules in the order they are tried. */
+    rules(): Promise<Api>;
+    /** Add a rule at the end. */
+    addRule(rule: FirewallRule): Promise<Api>;
+    /** Change some fields of a rule, using the server's field names (`clear_expiry: true` removes an expiry). */
+    updateRule(ruleId: string, changes: Body): Promise<Api>;
+    removeRule(ruleId: string): Promise<Api>;
+    /** Set the order rules are tried in: every rule exactly once. */
+    order(ruleIds: string[]): Promise<Api>;
+    /** Managed rule sets (`sqli`, `xss`, `traversal`, `scanners`, `sensitive_files`, `no_user_agent`, `methods`) and automatic bans. */
+    config(): Promise<Api>;
+    /** `managed`: `{ sqli: "block", scanners: "log" }` (`off`, `log`, `block`). `autoBan`: `{ enabled, threshold, window_seconds, ban_seconds, statuses, exempt }`. */
+    setConfig(options: {
+        managed?: Record<string, string>;
+        autoBan?: Body;
+    }): Promise<Api>;
+    bans(options?: {
+        includeExpired?: boolean;
+    }): Promise<Api>;
+    /** Ban an address or CIDR range for `seconds` (`0`: until lifted). */
+    ban(ip: string, options?: {
+        seconds?: number;
+        reason?: string;
+    }): Promise<Api>;
+    liftBan(banId: string): Promise<Api>;
+    events(options?: {
+        action?: string;
+        source?: string;
+        ip?: string;
+        path?: string;
+        ruleId?: string;
+        limit?: number;
+    }): Promise<Api>;
+    /** Totals, a timeline, and the top addresses, paths, rules and countries. */
+    stats(options?: {
+        hours?: number;
+    }): Promise<Api>;
+    /** What the firewall would do with a request, step by step. Nothing is sent or counted. */
+    test(ip: string, options?: {
+        path?: string;
+        method?: string;
+        userAgent?: string;
+        query?: string;
+        headers?: Record<string, string>;
+        country?: string;
+        role?: string;
+    }): Promise<Api>;
+}
+export {};
+//# sourceMappingURL=access.d.ts.map

package/dist/esm/manage/access.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"access.d.ts","sourceRoot":"","sources":["../../../src/manage/access.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAO,KAAK,GAAG,EAAE,KAAK,IAAI,EAAE,MAAM,WAAW,CAAC;AAE9D,KAAK,IAAI,GAAG,IAAI,GAAG,MAAM,CAAC;AAG1B,8GAA8G;AAC9G,qBAAa,IAAK,SAAQ,OAAO;IAC/B,IAAI,IAAI,OAAO,CAAC,GAAG,CAAC;IAIpB,gGAAgG;IAChG,MAAM,IAAI,OAAO,CAAC,GAAG,CAAC;IAItB;;;OAGG;IACH,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,GAAE;QAAE,IAAI,CAAC,EAAE,aAAa,GAAG,QAAQ,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;QAAC,SAAS,CAAC,EAAE,IAAI,CAAC;QAAC,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;QAAC,aAAa,CAAC,EAAE,MAAM,EAAE,CAAA;KAAO,GAAG,OAAO,CAAC,GAAG,CAAC;IAW3K,MAAM,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC;IAInC,kHAAkH;IAClH,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,GAAE;QAAE,UAAU,CAAC,EAAE,MAAM,CAAA;KAAO,GAAG,OAAO,CAAC,GAAG,CAAC;CAG3E;AAED,gGAAgG;AAChG,qBAAa,OAAQ,SAAQ,OAAO;IAClC,IAAI,IAAI,OAAO,CAAC,GAAG,CAAC;IAIpB,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,GAAE;QAAE,WAAW,CAAC,EAAE,MAAM,CAAC;QAAC,eAAe,CAAC,EAAE,MAAM,CAAA;KAAO,GAAG,OAAO,CAAC,GAAG,CAAC;IAIhH,uEAAuE;IACvE,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE;QAAE,WAAW,CAAC,EAAE,MAAM,CAAC;QAAC,eAAe,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,GAAG,CAAC;IAI/F,mEAAmE;IACnE,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC;IAIlD,8CAA8C;IAC9C,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC;IAIpC,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC;CAGnC;AAED,2EAA2E;AAC3E,qBAAa,OAAQ,SAAQ,OAAO;IAClC,IAAI,IAAI,OAAO,CAAC,GAAG,CAAC;IAIpB,+EAA+E;IAC/E,GAAG,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC;IAInC,gCAAgC;IAChC,MAAM,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC;IAItC,MAAM,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC;CAGvC;AAED,MAAM,WAAW,iBAAiB;IAChC,kKAAkK;IAClK,KAAK,EAAE,MAAM,CAAC;IACd,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,OAAO,CAAC;CAChB;AAED,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,CAAC,EAAE,OAAO,GAAG,OAAO,GAAG,KAAK,GAAG,YAAY,CAAC;IAClD,UAAU,CAAC,EAAE,iBAAiB,EAAE,CAAC;IACjC,0DAA0D;IAC1D,KAAK,CAAC,EAAE,KAAK,GAAG,KAAK,CAAC;IACtB,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;IACjC,SAAS,CAAC,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,cAAc,EAAE,MAAM,CAAC;QAAC,EAAE,CAAC,EAAE,MAAM,CAAC;QAAC,WAAW,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAC5F,2FAA2F;IAC3F,IAAI,CAAC,EAAE,SAAS,GAAG,UAAU,CAAC;IAC9B,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,SAAS,CAAC,EAAE,IAAI,CAAC;IACjB,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED;;;;;;;;GAQG;AACH,qBAAa,QAAS,SAAQ,OAAO;IACnC,yCAAyC;IACzC,KAAK,IAAI,OAAO,CAAC,GAAG,CAAC;IAIrB,6BAA6B;IAC7B,OAAO,CAAC,IAAI,EAAE,YAAY,GAAG,OAAO,CAAC,GAAG,CAAC;IAezC,6GAA6G;IAC7G,UAAU,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC;IAIvD,UAAU,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC;IAIxC,iEAAiE;IACjE,KAAK,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,GAAG,CAAC;IAItC,oIAAoI;IACpI,MAAM,IAAI,OAAO,CAAC,GAAG,CAAC;IAItB,mKAAmK;IACnK,SAAS,CAAC,OAAO,EAAE;QAAE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAAC,OAAO,CAAC,EAAE,IAAI,CAAA;KAAE,GAAG,OAAO,CAAC,GAAG,CAAC;IAItF,IAAI,CAAC,OAAO,GAAE;QAAE,cAAc,CAAC,EAAE,OAAO,CAAA;KAAO,GAAG,OAAO,CAAC,GAAG,CAAC;IAI9D,sEAAsE;IACtE,GAAG,CAAC,EAAE,EAAE,MAAM,EAAE,OAAO,GAAE;QAAE,OAAO,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAO,GAAG,OAAO,CAAC,GAAG,CAAC;IAIlF,OAAO,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC;IAIpC,MAAM,CAAC,OAAO,GAAE;QAAE,MAAM,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAC;QAAC,EAAE,CAAC,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAO,GAAG,OAAO,CAAC,GAAG,CAAC;IAKrI,6EAA6E;IAC7E,KAAK,CAAC,OAAO,GAAE;QAAE,KAAK,CAAC,EAAE,MAAM,CAAA;KAAO,GAAG,OAAO,CAAC,GAAG,CAAC;IAIrD,2FAA2F;IAC3F,IAAI,CAAC,EAAE,EAAE,MAAM,EAAE,OAAO,GAAE;QAAE,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAA;KAAO,GAAG,OAAO,CAAC,GAAG,CAAC;CAYxL"}

package/dist/esm/manage/access.js

@@ -0,0 +1,155 @@
+import { Service, seg } from "./base.js";
+const iso = (value) => (value instanceof Date ? value.toISOString() : value);
+/** The environment's API keys: publishable (`pb_pk_…`, safe in apps) and secret (`pb_sk_…`, servers only). */
+export class Keys extends Service {
+    list() {
+        return this.get("/keys");
+    }
+    /** Every scope a key can hold, with what each allows (the choices for `create({ scopes })`). */
+    scopes() {
+        return this.project("GET", "/key-scopes");
+    }
+    /**
+     * Make a key; the key itself is in the answer once. `scopes` limit what it may do (`resource:read`, `functions:invoke`…),
+     * `allowedIps` and `allowedRoutes` (`"GET /rest/v1/orders"`, `"/functions/v1/*"`) limit where and what it may call.
+     */
+    create(name, options = {}) {
+        return this.post("/keys", {
+            name,
+            role: options.role ?? "publishable",
+            scopes: options.scopes ?? [],
+            expires_at: iso(options.expiresAt),
+            allowed_ips: options.allowedIps ?? [],
+            allowed_routes: options.allowedRoutes ?? [],
+        });
+    }
+    revoke(keyId) {
+        return this.post(seg("keys", keyId, "revoke"));
+    }
+    /** Replace a key with a new one; the old keeps working for `graceHours` (24 by default) so clients can switch. */
+    rotate(keyId, options = {}) {
+        return this.post(seg("keys", keyId, "rotate"), { grace_hours: options.graceHours ?? 24 });
+    }
+}
+/** Secrets functions and flows read (`ctx.runtime.secret(name)`). Values are never returned. */
+export class Secrets extends Service {
+    list() {
+        return this.get("/secrets");
+    }
+    set(name, value, options = {}) {
+        return this.put(seg("secrets", name), { value, description: options.description ?? "", rotate_every_days: options.rotateEveryDays });
+    }
+    /** Change the description or the rotation reminder (`0` clears it). */
+    update(name, options) {
+        return this.patch(seg("secrets", name), { description: options.description, rotate_every_days: options.rotateEveryDays });
+    }
+    /** Replace the value, keeping the old one for {@link rollback}. */
+    rotate(name, value) {
+        return this.post(seg("secrets", name, "rotate"), value ? { value } : {});
+    }
+    /** Put back the value a rotation replaced. */
+    rollback(name) {
+        return this.post(seg("secrets", name, "rollback"));
+    }
+    remove(name) {
+        return this.del(seg("secrets", name));
+    }
+}
+/** Custom domains the environment answers on, proved with a DNS record. */
+export class Domains extends Service {
+    list() {
+        return this.get("/domains");
+    }
+    /** Register a hostname: the answer says which DNS record proves you own it. */
+    add(hostname) {
+        return this.post("/domains", { hostname });
+    }
+    /** Check the DNS record now. */
+    verify(domainId) {
+        return this.post(seg("domains", domainId, "verify"));
+    }
+    remove(domainId) {
+        return this.del(seg("domains", domainId));
+    }
+}
+/**
+ * The firewall at the gateway: ordered rules (allow, block, log, rate limit), managed attack signatures, bans, and what it did.
+ *
+ * ```ts
+ * await m.firewall.addRule({ name: "Burst", action: "rate_limit",
+ *   conditions: [{ field: "path", op: "starts_with", value: "/auth/v1/token" }],
+ *   rateLimit: { requests: 10, window_seconds: 60, by: "ip", ban_seconds: 900 } });
+ * ```
+ */
+export class Firewall extends Service {
+    /** Rules in the order they are tried. */
+    rules() {
+        return this.get("/firewall");
+    }
+    /** Add a rule at the end. */
+    addRule(rule) {
+        return this.post("/firewall", {
+            name: rule.name,
+            action: rule.action ?? "block",
+            conditions: rule.conditions ?? [],
+            logic: rule.logic ?? "all",
+            match: rule.match ?? {},
+            rate_limit: rule.rateLimit,
+            mode: rule.mode ?? "enforce",
+            enabled: rule.enabled ?? true,
+            expires_at: iso(rule.expiresAt),
+            note: rule.note ?? "",
+        });
+    }
+    /** Change some fields of a rule, using the server's field names (`clear_expiry: true` removes an expiry). */
+    updateRule(ruleId, changes) {
+        return this.patch(seg("firewall", ruleId), changes);
+    }
+    removeRule(ruleId) {
+        return this.del(seg("firewall", ruleId));
+    }
+    /** Set the order rules are tried in: every rule exactly once. */
+    order(ruleIds) {
+        return this.put("/firewall-order", { ids: ruleIds });
+    }
+    /** Managed rule sets (`sqli`, `xss`, `traversal`, `scanners`, `sensitive_files`, `no_user_agent`, `methods`) and automatic bans. */
+    config() {
+        return this.get("/firewall-config");
+    }
+    /** `managed`: `{ sqli: "block", scanners: "log" }` (`off`, `log`, `block`). `autoBan`: `{ enabled, threshold, window_seconds, ban_seconds, statuses, exempt }`. */
+    setConfig(options) {
+        return this.put("/firewall-config", { managed: options.managed, auto_ban: options.autoBan });
+    }
+    bans(options = {}) {
+        return this.get("/firewall-bans", { all: options.includeExpired ? 1 : undefined });
+    }
+    /** Ban an address or CIDR range for `seconds` (`0`: until lifted). */
+    ban(ip, options = {}) {
+        return this.post("/firewall-bans", { ip, seconds: options.seconds ?? 0, reason: options.reason ?? "" });
+    }
+    liftBan(banId) {
+        return this.del(seg("firewall-bans", banId));
+    }
+    events(options = {}) {
+        const { ruleId, ...rest } = options;
+        return this.get("/firewall-events", { limit: 100, ...rest, rule_id: ruleId });
+    }
+    /** Totals, a timeline, and the top addresses, paths, rules and countries. */
+    stats(options = {}) {
+        return this.get("/firewall-stats", { hours: options.hours ?? 24 });
+    }
+    /** What the firewall would do with a request, step by step. Nothing is sent or counted. */
+    test(ip, options = {}) {
+        return this.post("/firewall-test", {
+            ip,
+            path: options.path ?? "/",
+            method: options.method ?? "GET",
+            user_agent: options.userAgent ?? "",
+            query: options.query ?? "",
+            headers: options.headers ?? {},
+            country: options.country ?? "",
+            role: options.role ?? "none",
+        });
+    }
+}
+//# sourceMappingURL=access.js.map

package/dist/esm/manage/access.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"access.js","sourceRoot":"","sources":["../../../src/manage/access.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,GAAG,EAAuB,MAAM,WAAW,CAAC;AAG9D,MAAM,GAAG,GAAG,CAAC,KAAY,EAAsB,EAAE,CAAC,CAAC,KAAK,YAAY,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;AAExG,8GAA8G;AAC9G,MAAM,OAAO,IAAK,SAAQ,OAAO;IAC/B,IAAI;QACF,OAAO,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IAC3B,CAAC;IAED,gGAAgG;IAChG,MAAM;QACJ,OAAO,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,aAAa,CAAC,CAAC;IAC5C,CAAC;IAED;;;OAGG;IACH,MAAM,CAAC,IAAY,EAAE,UAAqI,EAAE;QAC1J,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE;YACxB,IAAI;YACJ,IAAI,EAAE,OAAO,CAAC,IAAI,IAAI,aAAa;YACnC,MAAM,EAAE,OAAO,CAAC,MAAM,IAAI,EAAE;YAC5B,UAAU,EAAE,GAAG,CAAC,OAAO,CAAC,SAAS,CAAC;YAClC,WAAW,EAAE,OAAO,CAAC,UAAU,IAAI,EAAE;YACrC,cAAc,EAAE,OAAO,CAAC,aAAa,IAAI,EAAE;SAC5C,CAAC,CAAC;IACL,CAAC;IAED,MAAM,CAAC,KAAa;QAClB,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC,CAAC;IACjD,CAAC;IAED,kHAAkH;IAClH,MAAM,CAAC,KAAa,EAAE,UAAmC,EAAE;QACzD,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,KAAK,EAAE,QAAQ,CAAC,EAAE,EAAE,WAAW,EAAE,OAAO,CAAC,UAAU,IAAI,EAAE,EAAE,CAAC,CAAC;IAC5F,CAAC;CACF;AAED,gGAAgG;AAChG,MAAM,OAAO,OAAQ,SAAQ,OAAO;IAClC,IAAI;QACF,OAAO,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IAC9B,CAAC;IAED,GAAG,CAAC,IAAY,EAAE,KAAa,EAAE,UAA8D,EAAE;QAC/F,OAAO,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,SAAS,EAAE,IAAI,CAAC,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,OAAO,CAAC,WAAW,IAAI,EAAE,EAAE,iBAAiB,EAAE,OAAO,CAAC,eAAe,EAAE,CAAC,CAAC;IACvI,CAAC;IAED,uEAAuE;IACvE,MAAM,CAAC,IAAY,EAAE,OAA2D;QAC9E,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,SAAS,EAAE,IAAI,CAAC,EAAE,EAAE,WAAW,EAAE,OAAO,CAAC,WAAW,EAAE,iBAAiB,EAAE,OAAO,CAAC,eAAe,EAAE,CAAC,CAAC;IAC5H,CAAC;IAED,mEAAmE;IACnE,MAAM,CAAC,IAAY,EAAE,KAAc;QACjC,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,SAAS,EAAE,IAAI,EAAE,QAAQ,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IAC3E,CAAC;IAED,8CAA8C;IAC9C,QAAQ,CAAC,IAAY;QACnB,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,SAAS,EAAE,IAAI,EAAE,UAAU,CAAC,CAAC,CAAC;IACrD,CAAC;IAED,MAAM,CAAC,IAAY;QACjB,OAAO,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC,CAAC;IACxC,CAAC;CACF;AAED,2EAA2E;AAC3E,MAAM,OAAO,OAAQ,SAAQ,OAAO;IAClC,IAAI;QACF,OAAO,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IAC9B,CAAC;IAED,+EAA+E;IAC/E,GAAG,CAAC,QAAgB;QAClB,OAAO,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC;IAC7C,CAAC;IAED,gCAAgC;IAChC,MAAM,CAAC,QAAgB;QACrB,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,SAAS,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAC;IACvD,CAAC;IAED,MAAM,CAAC,QAAgB;QACrB,OAAO,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC,CAAC;IAC5C,CAAC;CACF;AAwBD;;;;;;;;GAQG;AACH,MAAM,OAAO,QAAS,SAAQ,OAAO;IACnC,yCAAyC;IACzC,KAAK;QACH,OAAO,IAAI,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;IAC/B,CAAC;IAED,6BAA6B;IAC7B,OAAO,CAAC,IAAkB;QACxB,OAAO,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE;YAC5B,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,MAAM,EAAE,IAAI,CAAC,MAAM,IAAI,OAAO;YAC9B,UAAU,EAAE,IAAI,CAAC,UAAU,IAAI,EAAE;YACjC,KAAK,EAAE,IAAI,CAAC,KAAK,IAAI,KAAK;YAC1B,KAAK,EAAE,IAAI,CAAC,KAAK,IAAI,EAAE;YACvB,UAAU,EAAE,IAAI,CAAC,SAAS;YAC1B,IAAI,EAAE,IAAI,CAAC,IAAI,IAAI,SAAS;YAC5B,OAAO,EAAE,IAAI,CAAC,OAAO,IAAI,IAAI;YAC7B,UAAU,EAAE,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC;YAC/B,IAAI,EAAE,IAAI,CAAC,IAAI,IAAI,EAAE;SACtB,CAAC,CAAC;IACL,CAAC;IAED,6GAA6G;IAC7G,UAAU,CAAC,MAAc,EAAE,OAAa;QACtC,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,UAAU,EAAE,MAAM,CAAC,EAAE,OAAO,CAAC,CAAC;IACtD,CAAC;IAED,UAAU,CAAC,MAAc;QACvB,OAAO,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC,CAAC;IAC3C,CAAC;IAED,iEAAiE;IACjE,KAAK,CAAC,OAAiB;QACrB,OAAO,IAAI,CAAC,GAAG,CAAC,iBAAiB,EAAE,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC,CAAC;IACvD,CAAC;IAED,oIAAoI;IACpI,MAAM;QACJ,OAAO,IAAI,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC;IACtC,CAAC;IAED,mKAAmK;IACnK,SAAS,CAAC,OAA6D;QACrE,OAAO,IAAI,CAAC,GAAG,CAAC,kBAAkB,EAAE,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,QAAQ,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC;IAC/F,CAAC;IAED,IAAI,CAAC,UAAwC,EAAE;QAC7C,OAAO,IAAI,CAAC,GAAG,CAAC,gBAAgB,EAAE,EAAE,GAAG,EAAE,OAAO,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC;IACrF,CAAC;IAED,sEAAsE;IACtE,GAAG,CAAC,EAAU,EAAE,UAAiD,EAAE;QACjE,OAAO,IAAI,CAAC,IAAI,CAAC,gBAAgB,EAAE,EAAE,EAAE,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,IAAI,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,IAAI,EAAE,EAAE,CAAC,CAAC;IAC1G,CAAC;IAED,OAAO,CAAC,KAAa;QACnB,OAAO,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,eAAe,EAAE,KAAK,CAAC,CAAC,CAAC;IAC/C,CAAC;IAED,MAAM,CAAC,UAA6G,EAAE;QACpH,MAAM,EAAE,MAAM,EAAE,GAAG,IAAI,EAAE,GAAG,OAAO,CAAC;QACpC,OAAO,IAAI,CAAC,GAAG,CAAC,kBAAkB,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC;IAChF,CAAC;IAED,6EAA6E;IAC7E,KAAK,CAAC,UAA8B,EAAE;QACpC,OAAO,IAAI,CAAC,GAAG,CAAC,iBAAiB,EAAE,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,IAAI,EAAE,EAAE,CAAC,CAAC;IACrE,CAAC;IAED,2FAA2F;IAC3F,IAAI,CAAC,EAAU,EAAE,UAAqJ,EAAE;QACtK,OAAO,IAAI,CAAC,IAAI,CAAC,gBAAgB,EAAE;YACjC,EAAE;YACF,IAAI,EAAE,OAAO,CAAC,IAAI,IAAI,GAAG;YACzB,MAAM,EAAE,OAAO,CAAC,MAAM,IAAI,KAAK;YAC/B,UAAU,EAAE,OAAO,CAAC,SAAS,IAAI,EAAE;YACnC,KAAK,EAAE,OAAO,CAAC,KAAK,IAAI,EAAE;YAC1B,OAAO,EAAE,OAAO,CAAC,OAAO,IAAI,EAAE;YAC9B,OAAO,EAAE,OAAO,CAAC,OAAO,IAAI,EAAE;YAC9B,IAAI,EAAE,OAAO,CAAC,IAAI,IAAI,MAAM;SAC7B,CAAC,CAAC;IACL,CAAC;CACF"}