@phpsandbox/sdk 0.4.0 → 0.6.0-canary.0

package/dist/index.d.ts

@@ -1,3 +1,6 @@
+import { AppRuntime, type AppRuntimeOptions } from './app.js';
+export { AppRuntime };
+export type { AppRuntimeOptions };
 import { type Identity } from './identity.js';
 export type { Identity } from './identity.js';
 import { NotebookPublication } from './publication/index.js';
@@ -19,6 +22,8 @@ import { ServerApi } from './servers.js';
 import { Feedback } from './feedback.js';
 import { IntegrationApi, SandboxIntegrationApi } from './integrations/index.js';
 import { PaymentsApi, NotebookPayments } from './payments.js';
+import { CustomersApi } from './customers.js';
+export * from './customers.js';
 export * from './payments.js';
 export type { Disposable } from './types.js';
 export { LspConnection } from './lsp.js';
@@ -174,6 +179,8 @@ export interface NotebookSecretData {
     name: string;
     type: SecretType;
     environment: SecretEnvironment;
+    managedBy?: string | null;
+    inheritOnFork?: boolean;
     createdAt: string | null;
     updatedAt: string | null;
 }
@@ -181,6 +188,9 @@ export interface NotebookSecretListOptions {
     environment?: SecretEnvironment;
 }
 export interface UpsertNotebookSecretInput {
+    /** Platform-owned secrets cannot be inherited by forks. Requires a platform credential. */
+    managed?: boolean;
+    inheritOnFork?: boolean;
     value: string;
     type?: SecretType;
     environment?: SecretEnvironment;
@@ -278,6 +288,7 @@ export interface NotebookMailData {
     createdAt: string;
     diffForHumans: string;
     html: string | null;
+    text?: string | null;
 }
 export interface NotebookMailStateData {
     enabled: boolean;
@@ -332,6 +343,7 @@ declare class ClientImplementation {
     readonly servers: ServerApi;
     readonly integrations: IntegrationApi;
     readonly payments: PaymentsApi;
+    readonly customers: CustomersApi;
     readonly options: PHPSandboxClientOptions;
     private readonly runtimeTransportValue;
     get runtimeTransport(): RuntimeTransport;
@@ -368,9 +380,11 @@ export declare class PHPSandbox {
     readonly servers: ServerApi;
     readonly integrations: IntegrationApi;
     readonly payments: PaymentsApi;
+    readonly customers: CustomersApi;
     private constructor();
     whoami(): Promise<Identity>;
     get runtimeTransport(): RuntimeTransport;
+    static app(options?: AppRuntimeOptions): AppRuntime;
     static realtime(token: string, url?: string, options?: PHPSandboxClientOptions): PHPSandbox;
     static rest(token: string, url?: string, options?: PHPSandboxClientOptions): PHPSandbox;
 }
@@ -467,6 +481,16 @@ declare class NotebookMail {
     private readonly notebookId;
     constructor(client: Client, notebookId: string);
     status(): Promise<NotebookMailStateData>;
+    /** Capture a platform-generated development email in the notebook inbox. Never sends externally. */
+    capture(input: {
+        requestId: string;
+        from: string;
+        fromName: string;
+        to: string;
+        subject: string;
+        text: string;
+        html?: string;
+    }): Promise<NotebookMailData>;
     enable(): Promise<NotebookMailStateData>;
     disable(): Promise<void>;
     list(options?: NotebookMailListOptions): Promise<PaginatedApiResponse<NotebookMailData>>;

package/dist/index.js

@@ -10,6 +10,8 @@ var __classPrivateFieldSet = (this && this.__classPrivateFieldSet) || function (
     return (kind === "a" ? f.call(receiver, value) : f ? f.value = value : state.set(receiver, value)), value;
 };
 var _NotebookInstance_instances, _NotebookInstance_initPromise, _NotebookInstance_init;
+import { AppRuntime, resolveAppConfiguration } from './app.js';
+export { AppRuntime };
 import { identitySchema } from './identity.js';
 import { NotebookPublication } from './publication/index.js';
 import { Filesystem } from './filesystem.js';
@@ -32,6 +34,8 @@ import { Feedback } from './feedback.js';
 import { IntegrationApi, SandboxIntegrationApi } from './integrations/index.js';
 import { authenticatedRequest } from './http.js';
 import { PaymentsApi, NotebookPayments } from './payments.js';
+import { CustomersApi } from './customers.js';
+export * from './customers.js';
 export * from './payments.js';
 export { LspConnection } from './lsp.js';
 export { FileChangeFilter, FileChangeType, FileType } from './filesystem.js';
@@ -89,6 +93,7 @@ class ClientImplementation {
         this.servers = new ServerApi(this);
         this.integrations = new IntegrationApi(this);
         this.payments = new PaymentsApi(this);
+        this.customers = new CustomersApi(this);
         this.options = { ...options };
         this.runtimeTransportValue = runtimeTransport;
         this.baseUrl = normalizeApiBaseUrl(url);
@@ -224,6 +229,7 @@ export class PHPSandbox {
         this.servers = client.servers;
         this.integrations = client.integrations;
         this.payments = client.payments;
+        this.customers = client.customers;
     }
     async whoami() {
         const { data } = await this.client.get('/auth/whoami');
@@ -236,6 +242,10 @@ export class PHPSandbox {
     get runtimeTransport() {
         return this.client.runtimeTransport;
     }
+    static app(options = {}) {
+        const { token, url, mode } = resolveAppConfiguration(options);
+        return new AppRuntime(new ClientImplementation(token, url, {}, 'rest'), token, mode);
+    }
     static realtime(token, url = 'https://api.phpsandbox.io/v1', options = {}) {
         return new PHPSandbox(new ClientImplementation(token, url, options));
     }
@@ -598,6 +608,11 @@ class NotebookMail {
         const response = await this.client.get(`/notebook/${this.notebookId}/mail`);
         return response.data;
     }
+    /** Capture a platform-generated development email in the notebook inbox. Never sends externally. */
+    async capture(input) {
+        const response = await this.client.post(`/notebook/${this.notebookId}/mails`, input);
+        return response.data;
+    }
     async enable() {
         const response = await this.client.put(`/notebook/${this.notebookId}/mail`);
         return response.data;

package/dist/payments.d.ts

@@ -43,6 +43,10 @@ declare const applicationsSchema: z.ZodObject<{
 }, z.core.$strip>;
 export type PaymentApplicationsData = z.infer<typeof applicationsSchema>;
 declare const bindingSchema: z.ZodObject<{
+    target: z.ZodOptional<z.ZodEnum<{
+        preview: "preview";
+        publication: "publication";
+    }>>;
     id: z.ZodString;
     notebookId: z.ZodString;
     applicationId: z.ZodNullable<z.ZodString>;
@@ -164,6 +168,10 @@ declare const activationSchema: z.ZodObject<{
     expiresAt: z.ZodString;
     blockers: z.ZodArray<z.ZodString>;
     binding: z.ZodObject<{
+        target: z.ZodOptional<z.ZodEnum<{
+            preview: "preview";
+            publication: "publication";
+        }>>;
         id: z.ZodString;
         notebookId: z.ZodString;
         applicationId: z.ZodNullable<z.ZodString>;
@@ -205,6 +213,7 @@ declare const activationSchema: z.ZodObject<{
 }, z.core.$strip>;
 export type PaymentActivationReview = z.infer<typeof activationSchema>;
 export interface ConfigurePaymentsInput {
+    target?: 'preview' | 'publication';
     expectedRevision: number;
     applicationId?: string | null;
     callbackPath?: string;
@@ -217,6 +226,7 @@ export interface CreatePaymentPriceInput {
     currency: string;
 }
 export interface CreatePaymentCheckoutInput {
+    customerId?: string;
     requestId: string;
     orderId: string;
     priceId: string;
@@ -333,7 +343,13 @@ export type PaymentEvent = z.infer<typeof paymentEventSchema>;
 export declare function verifyPaymentEvent(body: string, signature: string, token: string, mode: PaymentMode, now?: number): Promise<PaymentEvent>;
 export declare class PaymentRuntime {
     private readonly client;
-    constructor(client: Client);
+    private readonly appCredential?;
+    constructor(client: Client, appCredential?: {
+        token: string;
+        mode: PaymentMode;
+    } | undefined);
+    /** Verify the phpsandbox-signature header against the configured app environment. */
+    verifyEvent(body: string, signature: string): Promise<PaymentEvent>;
     checkout(input: CreatePaymentCheckoutInput): Promise<PaymentTransactionData>;
     transaction(id: string): Promise<PaymentTransactionData>;
     subscribe(input: CreatePaymentCheckoutInput): Promise<PaymentSubscriptionData>;

package/dist/payments.js

@@ -32,6 +32,7 @@ const applicationsSchema = z.object({
     })),
 });
 const bindingSchema = z.object({
+    target: z.enum(['preview', 'publication']).optional(),
     id: z.string(),
     notebookId: z.string(),
     applicationId: z.string().nullable(),
@@ -207,7 +208,7 @@ const paymentEventSchema = z.discriminatedUnion('type', [
 ]);
 /** Verify the original bytes before parsing JSON. Use only in trusted server code. */
 export async function verifyPaymentEvent(body, signature, token, mode, now = Date.now()) {
-    if (!/^hpay_[a-f0-9]{64}$/.test(token)) {
+    if (!/^(?:hpay|happ)_[a-f0-9]{64}$/.test(token)) {
         throw new Error('Invalid application payment credential.');
     }
     const match = /^t=(\d+),v1=([a-f0-9]{64})$/.exec(signature);
@@ -229,8 +230,16 @@ export async function verifyPaymentEvent(body, signature, token, mode, now = Dat
     return event;
 }
 export class PaymentRuntime {
-    constructor(client) {
+    constructor(client, appCredential) {
         this.client = client;
+        this.appCredential = appCredential;
+    }
+    /** Verify the phpsandbox-signature header against the configured app environment. */
+    async verifyEvent(body, signature) {
+        if (!this.appCredential) {
+            throw new Error('Initialize the server app client with PHPSandbox.app() to verify payment events.');
+        }
+        return verifyPaymentEvent(body, signature, this.appCredential.token, this.appCredential.mode);
     }
     async checkout(input) {
         return transactionSchema.parse((await this.client.post('/platform/payments/runtime/checkouts', input)).data);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@phpsandbox/sdk",
-  "version": "0.4.0",
+  "version": "0.6.0-canary.0",
   "description": "The TypeScript SDK for PHPSandbox cloud development environments",
   "keywords": [
     "cloud",