@reopt-ai/data-contract 0.5.0 → 0.6.1

package/dist/{chunk-XI3VP5DN.cjs → chunk-VGB2VJO4.cjs}

@@ -1,6 +1,12 @@
-"use strict";Object.defineProperty(exports, "__esModule", {value: true});// src/ingest.ts
+"use strict";Object.defineProperty(exports, "__esModule", {value: true});
+
+var _chunkPHPTCLRUcjs = require('./chunk-PHPTCLRU.cjs');
+
+
+var _chunk3EEANNYNcjs = require('./chunk-3EEANNYN.cjs');
+
+// src/ingest.ts
 var _zod = require('zod');
-var RESERVED_EVENT_NAMES = ["session_start", "session_end", "screen_view"];
 var MAX_TRACK_PAYLOAD_BYTES = 512e3;
 var zClientEventMetadata = {
   /**
@@ -11,14 +17,27 @@ var zClientEventMetadata = {
    */
   eventId: _zod.z.uuid(),
   /** Event time, epoch milliseconds. */
-  timestamp: _zod.z.number().int().nonnegative()
+  timestamp: _zod.z.number().int().nonnegative(),
+  /**
+   * The browser device this event belongs to, for events a server records
+   * on a visitor's behalf (a form submission, an order). Lets one server
+   * batch carry events from many visitors — a forwarder cannot split its
+   * batches per device without breaking its failure model and its
+   * `accepted + duplicates + rejected === sent` invariant.
+   *
+   * Honoured in `server` mode only, where it takes precedence over the
+   * `reopt-device-id` request header. Ignored in `browser` mode: there the
+   * header is authoritative and a body field would be trivially forged.
+   * Same character set as every identity id.
+   */
+  deviceId: _zod.z.string().regex(_chunkPHPTCLRUcjs.IDENTITY_ID_PATTERN, "expected an identity id").optional()
 };
 var zTrackPayload = _zod.z.object({
   name: _zod.z.string().min(1).max(200),
   properties: _zod.z.record(_zod.z.string(), _zod.z.unknown()).optional(),
   profileId: _zod.z.string().max(500).or(_zod.z.number()).optional()
-}).refine((data) => !RESERVED_EVENT_NAMES.includes(data.name), {
-  message: `Event name cannot be one of the reserved names: ${RESERVED_EVENT_NAMES.join(", ")}`,
+}).refine((data) => !_chunk3EEANNYNcjs.RESERVED_EVENT_NAMES.includes(data.name), {
+  message: `Event name cannot be one of the reserved names: ${_chunk3EEANNYNcjs.RESERVED_EVENT_NAMES.join(", ")}`,
   path: ["name"]
 });
 var zIdentifyPayload = _zod.z.object({
@@ -76,12 +95,17 @@ var ingestCounts = {
   /** Always `[]` in `browser` mode, where a bad row fails the whole batch. */
   rejected: _zod.z.array(zIngestRejection)
 };
+var zSessionCredential = _zod.z.object({
+  id: _zod.z.string().regex(_chunkPHPTCLRUcjs.IDENTITY_ID_PATTERN),
+  token: _zod.z.string().regex(/^[A-Za-z0-9_-]{43}$/)
+});
 var zIngestOkResponse = _zod.z.object({
   status: _zod.z.literal("ok"),
   requestId: _zod.z.string(),
   mode: zIngestMode,
   ...ingestCounts,
-  queued: _zod.z.boolean()
+  queued: _zod.z.boolean(),
+  session: zSessionCredential.optional()
 });
 var zIngestAcceptedResponse = _zod.z.object({
   status: _zod.z.literal("accepted"),
@@ -89,7 +113,8 @@ var zIngestAcceptedResponse = _zod.z.object({
   mode: zIngestMode,
   ...ingestCounts,
   backgroundQueued: _zod.z.literal(false),
-  replay: _zod.z.literal("unmaterialized-raw-events")
+  replay: _zod.z.literal("unmaterialized-raw-events"),
+  session: zSessionCredential.optional()
 });
 var zIngestResponse = _zod.z.discriminatedUnion("status", [zIngestOkResponse, zIngestAcceptedResponse]);
 function reconcileIngestResponse(response, sentCount) {
@@ -150,5 +175,5 @@ var zIngestError = _zod.z.object({
 
 
 
-exports.RESERVED_EVENT_NAMES = RESERVED_EVENT_NAMES; exports.MAX_TRACK_PAYLOAD_BYTES = MAX_TRACK_PAYLOAD_BYTES; exports.zTrackPayload = zTrackPayload; exports.zIdentifyPayload = zIdentifyPayload; exports.zIncrementPayload = zIncrementPayload; exports.zDecrementPayload = zDecrementPayload; exports.zTrackHandlerPayload = zTrackHandlerPayload; exports.INGEST_MODES = INGEST_MODES; exports.zIngestMode = zIngestMode; exports.INGEST_REJECTION_REASONS = INGEST_REJECTION_REASONS; exports.zIngestRejectionReason = zIngestRejectionReason; exports.zIngestRejection = zIngestRejection; exports.zIngestOkResponse = zIngestOkResponse; exports.zIngestAcceptedResponse = zIngestAcceptedResponse; exports.zIngestResponse = zIngestResponse; exports.reconcileIngestResponse = reconcileIngestResponse; exports.INGEST_ERROR_CODES = INGEST_ERROR_CODES; exports.zIngestErrorCode = zIngestErrorCode; exports.zIngestError = zIngestError;
-//# sourceMappingURL=chunk-XI3VP5DN.cjs.map
+exports.MAX_TRACK_PAYLOAD_BYTES = MAX_TRACK_PAYLOAD_BYTES; exports.zTrackPayload = zTrackPayload; exports.zIdentifyPayload = zIdentifyPayload; exports.zIncrementPayload = zIncrementPayload; exports.zDecrementPayload = zDecrementPayload; exports.zTrackHandlerPayload = zTrackHandlerPayload; exports.INGEST_MODES = INGEST_MODES; exports.zIngestMode = zIngestMode; exports.INGEST_REJECTION_REASONS = INGEST_REJECTION_REASONS; exports.zIngestRejectionReason = zIngestRejectionReason; exports.zIngestRejection = zIngestRejection; exports.zSessionCredential = zSessionCredential; exports.zIngestOkResponse = zIngestOkResponse; exports.zIngestAcceptedResponse = zIngestAcceptedResponse; exports.zIngestResponse = zIngestResponse; exports.reconcileIngestResponse = reconcileIngestResponse; exports.INGEST_ERROR_CODES = INGEST_ERROR_CODES; exports.zIngestErrorCode = zIngestErrorCode; exports.zIngestError = zIngestError;
+//# sourceMappingURL=chunk-VGB2VJO4.cjs.map

package/dist/chunk-VGB2VJO4.cjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["/Users/eric/reopt-ai/reopt-data/packages/data-contract/dist/chunk-VGB2VJO4.cjs","../src/ingest.ts"],"names":[],"mappings":"AAAA;AACE;AACF,wDAA6B;AAC7B;AACE;AACF,wDAA6B;AAC7B;AACA;ACIA,0BAAkB;AAgBX,IAAM,wBAAA,EAA0B,KAAA;AAEvC,IAAM,qBAAA,EAAuB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAO3B,OAAA,EAAS,MAAA,CAAE,IAAA,CAAK,CAAA;AAAA;AAAA,EAEhB,SAAA,EAAW,MAAA,CAAE,MAAA,CAAO,CAAA,CAAE,GAAA,CAAI,CAAA,CAAE,WAAA,CAAY,CAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAaxC,QAAA,EAAU,MAAA,CAAE,MAAA,CAAO,CAAA,CAAE,KAAA,CAAM,qCAAA,EAAqB,yBAAyB,CAAA,CAAE,QAAA,CAAS;AACtF,CAAA;AAEO,IAAM,cAAA,EAAgB,MAAA,CAC1B,MAAA,CAAO;AAAA,EACN,IAAA,EAAM,MAAA,CAAE,MAAA,CAAO,CAAA,CAAE,GAAA,CAAI,CAAC,CAAA,CAAE,GAAA,CAAI,GAAG,CAAA;AAAA,EAC/B,UAAA,EAAY,MAAA,CAAE,MAAA,CAAO,MAAA,CAAE,MAAA,CAAO,CAAA,EAAG,MAAA,CAAE,OAAA,CAAQ,CAAC,CAAA,CAAE,QAAA,CAAS,CAAA;AAAA,EACvD,SAAA,EAAW,MAAA,CAAE,MAAA,CAAO,CAAA,CAAE,GAAA,CAAI,GAAG,CAAA,CAAE,EAAA,CAAG,MAAA,CAAE,MAAA,CAAO,CAAC,CAAA,CAAE,QAAA,CAAS;AACzD,CAAC,CAAA,CACA,MAAA,CAAO,CAAC,IAAA,EAAA,GAAS,CAAC,sCAAA,CAAqB,QAAA,CAAS,IAAA,CAAK,IAAa,CAAA,EAAG;AAAA,EACpE,OAAA,EAAS,CAAA,gDAAA,EAAmD,sCAAA,CAAqB,IAAA,CAAK,IAAI,CAAC,CAAA,CAAA;AAC9E,EAAA;AACd;AAEsC;AACY,EAAA;AACX,EAAA;AACD,EAAA;AACJ,EAAA;AACA,EAAA;AACoB,EAAA;AACxD;AAEyC;AACW,EAAA;AAChB,EAAA;AACG,EAAA;AACvC;AAEyC;AACW,EAAA;AAChB,EAAA;AACG,EAAA;AACvC;AAEgE;AACuB,EAAA;AACM,EAAA;AACpB,EAAA;AACA,EAAA;AACzE;AAqB+C;AACF;AAUN;AAAA;AAEtC,EAAA;AAAA;AAEA,EAAA;AAAA;AAEA,EAAA;AACF;AACqE;AAG5B;AAAA;AAErB,EAAA;AAAA;AAEkB,EAAA;AAC5B,EAAA;AACqB,EAAA;AAC9B;AAGoB;AAAA;AAEoB,EAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAME,EAAA;AAAA;AAEP,EAAA;AACpC;AAQ2C;AACD,EAAA;AACK,EAAA;AAC9C;AAIyC;AAClB,EAAA;AACF,EAAA;AACd,EAAA;AACH,EAAA;AACe,EAAA;AACmB,EAAA;AACtC;AAQ+C;AAClB,EAAA;AACR,EAAA;AACd,EAAA;AACH,EAAA;AAC8B,EAAA;AACY,EAAA;AACR,EAAA;AACtC;AAEiF;AAcY;AACd,EAAA;AAChF;AAQkC;AAAA;AAEhC,EAAA;AAAA;AAEA,EAAA;AAAA;AAEA,EAAA;AAAA;AAEA,EAAA;AAAA;AAEA,EAAA;AAAA;AAEA,EAAA;AAAA;AAEA,EAAA;AAAA;AAEA,EAAA;AAAA;AAEA,EAAA;AAAA;AAEA,EAAA;AAAA;AAEA,EAAA;AACF;AACyD;AAGpB;AACZ,EAAA;AACjB,EAAA;AACU,EAAA;AACa,EAAA;AAAA;AAEA,EAAA;AACE,EAAA;AAChC;ADlG6F;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA","file":"/Users/eric/reopt-ai/reopt-data/packages/data-contract/dist/chunk-VGB2VJO4.cjs","sourcesContent":[null,"/**\n * `POST /api/track` — the ingest contract.\n *\n * The request shape is shared by both credential modes. The *response* shape\n * is where server-ingest differs: it reports per-event rejections instead of\n * failing a whole batch, because a forwarder that stalls on one malformed row\n * stops forwarding forever.\n *\n * Absorbed from the former internal `@reopt/ingest-contract`; that package is\n * now a deprecated re-export of this module.\n */\nimport { z } from \"zod\";\nimport { IDENTITY_ID_PATTERN } from \"./identity.js\";\n\nexport {\n  AUTO_EVENT_NAMES,\n  AUTO_EVENT_PROPERTIES,\n  AUTO_EVENT_ROLLUP_KEYS,\n  RESERVED_EVENT_NAMES,\n  SCROLL_DEPTH_BUCKETS,\n  scrollDepthBucket,\n  type AutoEventName,\n  type ScrollDepthBucket,\n} from \"./events.js\";\nimport { RESERVED_EVENT_NAMES } from \"./events.js\";\n\n/** Hard cap enforced by the route before the body is even parsed. */\nexport const MAX_TRACK_PAYLOAD_BYTES = 512_000;\n\nconst zClientEventMetadata = {\n  /**\n   * Client-generated UUID. This is the project-scoped idempotency key stored as\n   * `RawEvent.clientEventId`; the server uses a separate globally unique raw\n   * event id internally. Re-sending the same eventId to the same project is\n   * always safe and always reported as a duplicate.\n   */\n  eventId: z.uuid(),\n  /** Event time, epoch milliseconds. */\n  timestamp: z.number().int().nonnegative(),\n  /**\n   * The browser device this event belongs to, for events a server records\n   * on a visitor's behalf (a form submission, an order). Lets one server\n   * batch carry events from many visitors — a forwarder cannot split its\n   * batches per device without breaking its failure model and its\n   * `accepted + duplicates + rejected === sent` invariant.\n   *\n   * Honoured in `server` mode only, where it takes precedence over the\n   * `reopt-device-id` request header. Ignored in `browser` mode: there the\n   * header is authoritative and a body field would be trivially forged.\n   * Same character set as every identity id.\n   */\n  deviceId: z.string().regex(IDENTITY_ID_PATTERN, \"expected an identity id\").optional(),\n};\n\nexport const zTrackPayload = z\n  .object({\n    name: z.string().min(1).max(200),\n    properties: z.record(z.string(), z.unknown()).optional(),\n    profileId: z.string().max(500).or(z.number()).optional(),\n  })\n  .refine((data) => !RESERVED_EVENT_NAMES.includes(data.name as never), {\n    message: `Event name cannot be one of the reserved names: ${RESERVED_EVENT_NAMES.join(\", \")}`,\n    path: [\"name\"],\n  });\n\nexport const zIdentifyPayload = z.object({\n  profileId: z.string().min(1).max(500).or(z.number()),\n  firstName: z.string().max(200).optional(),\n  lastName: z.string().max(200).optional(),\n  email: z.email().max(320).optional(),\n  avatar: z.url().max(2000).optional(),\n  properties: z.record(z.string(), z.unknown()).optional(),\n});\n\nexport const zIncrementPayload = z.object({\n  profileId: z.string().min(1).max(500).or(z.number()),\n  property: z.string().min(1).max(200),\n  value: z.number().positive().optional(),\n});\n\nexport const zDecrementPayload = z.object({\n  profileId: z.string().min(1).max(500).or(z.number()),\n  property: z.string().min(1).max(200),\n  value: z.number().positive().optional(),\n});\n\nexport const zTrackHandlerPayload = z.discriminatedUnion(\"type\", [\n  z.object({ type: z.literal(\"track\"), payload: zTrackPayload, ...zClientEventMetadata }),\n  z.object({ type: z.literal(\"identify\"), payload: zIdentifyPayload, ...zClientEventMetadata }),\n  z.object({ type: z.literal(\"increment\"), payload: zIncrementPayload, ...zClientEventMetadata }),\n  z.object({ type: z.literal(\"decrement\"), payload: zDecrementPayload, ...zClientEventMetadata }),\n]);\n\nexport type ITrackPayload = z.infer<typeof zTrackPayload>;\nexport type IIdentifyPayload = z.infer<typeof zIdentifyPayload>;\nexport type IIncrementPayload = z.infer<typeof zIncrementPayload>;\nexport type IDecrementPayload = z.infer<typeof zDecrementPayload>;\nexport type ITrackHandlerPayload = z.infer<typeof zTrackHandlerPayload>;\n\n// ─── Ingest mode ────────────────────────────────────────────────────────────\n\n/**\n * Decided by the credential presented, never by a header the caller sets:\n * `reopt-write-key` alone → `browser`, `reopt-client-id` + `reopt-client-secret`\n * → `server`. A separate mode header could disagree with the credential; this\n * cannot.\n *\n * `browser` keeps the 5-second click dedup and device-scoped sessions.\n * `server` drops both and relies solely on `eventId` idempotency — a server\n * batch legitimately contains the same event name many times within one second,\n * and its \"device\" is a process, not a person.\n */\nexport const INGEST_MODES = [\"browser\", \"server\"] as const;\nexport const zIngestMode = z.enum(INGEST_MODES);\nexport type IngestMode = z.infer<typeof zIngestMode>;\n\n// ─── Response ───────────────────────────────────────────────────────────────\n\n/**\n * Why a single event in a batch was dropped. These are permanent: re-sending\n * the same row produces the same rejection, so a forwarder should count it as\n * skipped and advance its cursor rather than retry.\n */\nexport const INGEST_REJECTION_REASONS = [\n  /** Failed the zod schema (bad eventId, missing name, wrong types…). */\n  \"validation_failed\",\n  /** Used one of RESERVED_EVENT_NAMES. */\n  \"reserved_name\",\n  /** Another row earlier in the same batch already claimed this eventId. */\n  \"duplicate_in_batch\",\n] as const;\nexport const zIngestRejectionReason = z.enum(INGEST_REJECTION_REASONS);\nexport type IngestRejectionReason = z.infer<typeof zIngestRejectionReason>;\n\nexport const zIngestRejection = z.object({\n  /** May be absent or malformed on `validation_failed` — hence `string`, not `uuid`. */\n  eventId: z.string(),\n  /** Position in the submitted batch. The only reliable identifier when eventId itself is bad. */\n  index: z.number().int().nonnegative(),\n  reason: zIngestRejectionReason,\n  message: z.string().optional(),\n});\nexport type IngestRejection = z.infer<typeof zIngestRejection>;\n\nconst ingestCounts = {\n  /** Raw events newly persisted by this request. */\n  accepted: z.number().int().nonnegative(),\n  /**\n   * Events the server already had. In `server` mode this is exactly the\n   * eventId-idempotency count; in `browser` mode it also includes the\n   * 5-second click dedup.\n   */\n  duplicates: z.number().int().nonnegative(),\n  /** Always `[]` in `browser` mode, where a bad row fails the whole batch. */\n  rejected: z.array(zIngestRejection),\n};\n\n/**\n * The session ingest filed this batch under, with the token that lets the\n * browser (or a server acting for it) join the same session later with\n * authority — see `signSessionToken` in `./identity`. Browser mode only;\n * absent when the batch carried no sessionable event.\n */\nexport const zSessionCredential = z.object({\n  id: z.string().regex(IDENTITY_ID_PATTERN),\n  token: z.string().regex(/^[A-Za-z0-9_-]{43}$/),\n});\nexport type SessionCredential = z.infer<typeof zSessionCredential>;\n\n/** 200 — accepted and handed to the materialize queue. */\nexport const zIngestOkResponse = z.object({\n  status: z.literal(\"ok\"),\n  requestId: z.string(),\n  mode: zIngestMode,\n  ...ingestCounts,\n  queued: z.boolean(),\n  session: zSessionCredential.optional(),\n});\n\n/**\n * 202 — raw events landed, but enqueueing the materialize task failed. No data\n * is lost: the `replay-unmaterialized` cron picks these up. A forwarder should\n * treat this as success and advance its cursor. Carries the same counts as 200\n * so the reconciliation below works here too.\n */\nexport const zIngestAcceptedResponse = z.object({\n  status: z.literal(\"accepted\"),\n  requestId: z.string(),\n  mode: zIngestMode,\n  ...ingestCounts,\n  backgroundQueued: z.literal(false),\n  replay: z.literal(\"unmaterialized-raw-events\"),\n  session: zSessionCredential.optional(),\n});\n\nexport const zIngestResponse = z.discriminatedUnion(\"status\", [zIngestOkResponse, zIngestAcceptedResponse]);\n\nexport type IngestOkResponse = z.infer<typeof zIngestOkResponse>;\nexport type IngestAcceptedResponse = z.infer<typeof zIngestAcceptedResponse>;\nexport type IngestResponse = z.infer<typeof zIngestResponse>;\n\n/**\n * The reconciliation a forwarder runs on every 2xx:\n *\n *     accepted + duplicates + rejected.length === events sent\n *\n * A mismatch means the server silently dropped something, which is exactly the\n * failure mode this contract exists to make impossible to miss.\n */\nexport function reconcileIngestResponse(response: IngestResponse, sentCount: number): boolean {\n  return response.accepted + response.duplicates + response.rejected.length === sentCount;\n}\n\n// ─── Errors ─────────────────────────────────────────────────────────────────\n\n/**\n * Stable machine-readable codes. Branch on these, never on `error`/`message`,\n * which are prose and may be reworded.\n */\nexport const INGEST_ERROR_CODES = [\n  /** 401 — unknown or mismatched credentials. Stop and alert; do not retry. */\n  \"unauthorized\",\n  /** 400 — body was not valid JSON. */\n  \"invalid_json\",\n  /** 400 — request exceeded MAX_TRACK_PAYLOAD_BYTES. Split the batch. */\n  \"payload_too_large\",\n  /** 400 — zero events submitted. */\n  \"empty_batch\",\n  /** 400 — batch contained a `type: \"alias\"` event, which is not supported. */\n  \"alias_unsupported\",\n  /** 400 — the project has no organization; it cannot be billed or quota-checked. */\n  \"project_without_organization\",\n  /** 400 — `browser` mode only: a row failed validation. `server` mode reports these in `rejected[]`. */\n  \"validation_failed\",\n  /** 429 — per-project request rate limit. `Retry-After` set. Pause this tick, keep the cursor. */\n  \"rate_limited\",\n  /** 429 — the organization's monthly event quota is exhausted. `Retry-After` set (capped at 1h). Alert: a human must raise the limit. */\n  \"quota_exceeded\",\n  /** 410 — the project is being deleted. Permanent; stop sending. */\n  \"project_purging\",\n  /** 500 — unexpected server failure. Back off and retry. */\n  \"internal_error\",\n] as const;\nexport const zIngestErrorCode = z.enum(INGEST_ERROR_CODES);\nexport type IngestErrorCode = z.infer<typeof zIngestErrorCode>;\n\nexport const zIngestError = z.object({\n  status: z.number().int(),\n  code: zIngestErrorCode,\n  error: z.string(),\n  message: z.string().optional(),\n  /** zod issues, when `code === \"validation_failed\"`. */\n  errors: z.unknown().optional(),\n  requestId: z.string().optional(),\n});\nexport type IngestError = z.infer<typeof zIngestError>;\n"]}

package/dist/{chunk-OLSMH4RY.cjs → chunk-YSAEOYPD.cjs}

@@ -1,12 +1,5 @@
 "use strict";Object.defineProperty(exports, "__esModule", {value: true}); var _class;// src/index.ts
 var _zod = require('zod');
-var CONTRACT_VERSION = "0.5.0";
-var CONTRACT_VERSION_HEADER = "x-reopt-contract-version";
-var CLIENT_ID_HEADER = "reopt-client-id";
-var CLIENT_SECRET_HEADER = "reopt-client-secret";
-var WRITE_KEY_HEADER = "reopt-write-key";
-var DEVICE_ID_HEADER = "reopt-device-id";
-var REQUEST_ID_HEADER = "x-request-id";
 var zDate = _zod.z.string().regex(/^\d{4}-\d{2}-\d{2}$/, "expected YYYY-MM-DD").refine(isRealCalendarDate, "date does not exist");
 function isRealCalendarDate(value) {
   if (!/^\d{4}-\d{2}-\d{2}$/.test(value)) return false;
@@ -56,12 +49,5 @@ var DataApiError = (_class = class _DataApiError extends Error {
 
 
 
-
-
-
-
-
-
-
-exports.CONTRACT_VERSION = CONTRACT_VERSION; exports.CONTRACT_VERSION_HEADER = CONTRACT_VERSION_HEADER; exports.CLIENT_ID_HEADER = CLIENT_ID_HEADER; exports.CLIENT_SECRET_HEADER = CLIENT_SECRET_HEADER; exports.WRITE_KEY_HEADER = WRITE_KEY_HEADER; exports.DEVICE_ID_HEADER = DEVICE_ID_HEADER; exports.REQUEST_ID_HEADER = REQUEST_ID_HEADER; exports.zDate = zDate; exports.zInstant = zInstant; exports.DataApiError = DataApiError;
-//# sourceMappingURL=chunk-OLSMH4RY.cjs.map
+exports.zDate = zDate; exports.zInstant = zInstant; exports.DataApiError = DataApiError;
+//# sourceMappingURL=chunk-YSAEOYPD.cjs.map

package/dist/chunk-YSAEOYPD.cjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["/Users/eric/reopt-ai/reopt-data/packages/data-contract/dist/chunk-YSAEOYPD.cjs","../src/index.ts"],"names":[],"mappings":"AAAA;ACiBA,0BAAkB;AAgBX,IAAM,MAAA,EAAQ,MAAA,CAClB,MAAA,CAAO,CAAA,CACP,KAAA,CAAM,qBAAA,EAAuB,qBAAqB,CAAA,CAClD,MAAA,CAAO,kBAAA,EAAoB,qBAAqB,CAAA;AAEnD,SAAS,kBAAA,CAAmB,KAAA,EAAwB;AAClD,EAAA,GAAA,CAAI,CAAC,qBAAA,CAAsB,IAAA,CAAK,KAAK,CAAA,EAAG,OAAO,KAAA;AAC/C,EAAA,MAAM,CAAC,IAAA,EAAM,KAAA,EAAO,GAAG,EAAA,EAAI,KAAA,CAAM,KAAA,CAAM,GAAG,CAAA,CAAE,GAAA,CAAI,MAAM,CAAA;AACtD,EAAA,MAAM,QAAA,EAAU,IAAI,IAAA,CAAK,IAAA,CAAK,GAAA,CAAI,IAAA,EAAO,MAAA,EAAS,CAAA,EAAG,GAAI,CAAC,CAAA;AAC1D,EAAA,OAAO,OAAA,CAAQ,cAAA,CAAe,EAAA,IAAM,KAAA,GAAQ,OAAA,CAAQ,WAAA,CAAY,EAAA,IAAM,MAAA,EAAS,EAAA,GAAK,OAAA,CAAQ,UAAA,CAAW,EAAA,IAAM,GAAA;AAC/G;AAGO,IAAM,SAAA,EAAW,MAAA,CAAE,MAAA,CAAO,CAAA,CAAE,GAAA,CAAI,EAAE,CAAA;AA4BlC,IAAM,aAAA,YAAN,MAAM,cAAA,QAAqB,MAAM;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,iBAM7B,eAAA,EAAiB,KAAA;AAAA,EAEjB;AAAA,EACA;AAAA,EACA;AAAA;AAAA,EAEA;AAAA;AAAA,EAEA;AAAA,EAET,WAAA,CAAY,IAAA,EAOT;AACD,IAAA,KAAA,CAAM,IAAA,CAAK,OAAO,qCAAA;AAClB,IAAA,IAAA,CAAK,KAAA,EAAO,cAAA;AACZ,IAAA,IAAA,CAAK,OAAA,EAAS,IAAA,CAAK,MAAA;AACnB,IAAA,IAAA,CAAK,KAAA,EAAO,IAAA,CAAK,IAAA;AACjB,IAAA,IAAA,CAAK,UAAA,EAAY,IAAA,CAAK,SAAA;AACtB,IAAA,IAAA,CAAK,aAAA,EAAe,IAAA,CAAK,YAAA;AACzB,IAAA,IAAA,CAAK,QAAA,EAAU,IAAA,CAAK,OAAA;AAAA,EACtB;AAAA;AAAA,EAGA,IAAI,SAAA,CAAA,EAAqB;AACvB,IAAA,OAAO,IAAA,CAAK,OAAA,IAAW,IAAA,GAAO,IAAA,CAAK,OAAA,GAAU,GAAA;AAAA,EAC/C;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,OAAO,EAAA,CAAG,KAAA,EAAuC;AAC/C,IAAA,OACE,MAAA,WAAiB,cAAA,GAChB,OAAO,MAAA,IAAU,SAAA,GAAY,MAAA,IAAU,KAAA,GAAS,KAAA,CAAuC,eAAA,IAAmB,IAAA;AAAA,EAE/G;AACF,UAAA;AD7EA;AACA;AACE;AACA;AACA;AACF,wFAAC","file":"/Users/eric/reopt-ai/reopt-data/packages/data-contract/dist/chunk-YSAEOYPD.cjs","sourcesContent":[null,"/**\n * `@reopt-ai/data-contract` — the wire contract between reopt-data and its\n * server-credential consumers (RFC-0023).\n *\n * Subpaths:\n *   `@reopt-ai/data-contract`         this module — version, shared primitives, errors\n *   `@reopt-ai/data-contract/ingest`  POST /api/track request + response schemas\n *   `@reopt-ai/data-contract/query`   POST /api/v1/query/* request + response schemas\n *   `@reopt-ai/data-contract/control` provisioning request + response schemas\n *   `@reopt-ai/data-contract/client`  createDataClient() — typed fetch over all\n *   `@reopt-ai/data-contract/events`   event names + property keys (no zod)\n *   `@reopt-ai/data-contract/identity` cookie/header names and encodings shared by\n *                                     the SDKs, the Next.js proxy and ingest\n *\n * Only `/client` touches `fetch`; everything else is pure zod. The single\n * runtime dependency is zod, deliberately — consumers bundle this.\n */\nimport { z } from \"zod\";\n\nexport {\n  CONTRACT_VERSION,\n  CONTRACT_VERSION_HEADER,\n  CLIENT_ID_HEADER,\n  CLIENT_SECRET_HEADER,\n  WRITE_KEY_HEADER,\n  DEVICE_ID_HEADER,\n  REQUEST_ID_HEADER,\n} from \"./version.js\";\n\n/**\n * A real calendar date. The query's resolved IANA zone decides which instants\n * its inclusive day covers.\n */\nexport const zDate = z\n  .string()\n  .regex(/^\\d{4}-\\d{2}-\\d{2}$/, \"expected YYYY-MM-DD\")\n  .refine(isRealCalendarDate, \"date does not exist\");\n\nfunction isRealCalendarDate(value: string): boolean {\n  if (!/^\\d{4}-\\d{2}-\\d{2}$/.test(value)) return false;\n  const [year, month, day] = value.split(\"-\").map(Number);\n  const instant = new Date(Date.UTC(year!, month! - 1, day!));\n  return instant.getUTCFullYear() === year && instant.getUTCMonth() === month! - 1 && instant.getUTCDate() === day;\n}\n\n/** ISO-8601 instant, as produced by `Date#toISOString()`. */\nexport const zInstant = z.string().min(20);\n\n/**\n * Client credentials. The same pair authenticates both planes; what a given\n * client may reach is decided server-side by `Client.scopes`\n * (`\"ingest\"` / `\"query\"` / `\"provision\"`).\n */\nexport interface ClientCredentials {\n  clientId: string;\n  clientSecret: string;\n}\n\n/**\n * Credentials are optional on the client itself because the provisioning\n * surface does not use them — it authenticates per call with a platform or\n * organization key. A caller that only provisions should not have to invent an\n * empty client id to satisfy a constructor.\n *\n * Reaching ingest or query without them fails with `credentials_missing`\n * rather than sending an unauthenticated request and reporting the 401 as a\n * server problem.\n */\nexport type OptionalClientCredentials = Partial<ClientCredentials>;\n\n/**\n * Every non-2xx response from either plane, plus the two failures the client\n * itself raises (`contract_mismatch`, `network_error`).\n */\nexport class DataApiError extends Error {\n  /**\n   * Brand for {@link DataApiError.is}. A bundler that inlines this module into\n   * more than one entry point produces two distinct classes, and `instanceof`\n   * silently stops matching — the brand survives that, and realm boundaries.\n   */\n  readonly isDataApiError = true as const;\n\n  readonly status: number;\n  readonly code: string;\n  readonly requestId?: string;\n  /** Parsed from `Retry-After`, in milliseconds. Only set on 429. */\n  readonly retryAfterMs?: number;\n  /** zod issues for `validation_failed`, or the raw body when unparseable. */\n  readonly details?: unknown;\n\n  constructor(init: {\n    message: string;\n    status: number;\n    code: string;\n    requestId?: string;\n    retryAfterMs?: number;\n    details?: unknown;\n  }) {\n    super(init.message);\n    this.name = \"DataApiError\";\n    this.status = init.status;\n    this.code = init.code;\n    this.requestId = init.requestId;\n    this.retryAfterMs = init.retryAfterMs;\n    this.details = init.details;\n  }\n\n  /** 429 and 5xx are worth retrying; 4xx are the caller's fault and are not. */\n  get retryable(): boolean {\n    return this.status === 429 || this.status >= 500;\n  }\n\n  /**\n   * Prefer this over `instanceof` in a `catch`. It holds even when the class\n   * has been duplicated — across CJS entry points, across bundler chunks, or\n   * across realms — where `instanceof` quietly returns false.\n   */\n  static is(value: unknown): value is DataApiError {\n    return (\n      value instanceof DataApiError ||\n      (typeof value === \"object\" && value !== null && (value as { isDataApiError?: unknown }).isDataApiError === true)\n    );\n  }\n}\n"]}

package/dist/client.cjs

@@ -1,6 +1,6 @@
 "use strict";Object.defineProperty(exports, "__esModule", {value: true}); function _nullishCoalesce(lhs, rhsFn) { if (lhs != null) { return lhs; } else { return rhsFn(); } } function _optionalChain(ops) { let lastAccessLHS = undefined; let value = ops[0]; let i = 1; while (i < ops.length) { const op = ops[i]; const fn = ops[i + 1]; i += 2; if ((op === 'optionalAccess' || op === 'optionalCall') && value == null) { return undefined; } if (op === 'access' || op === 'optionalAccess') { lastAccessLHS = value; value = fn(value); } else if (op === 'call' || op === 'optionalCall') { value = fn((...args) => value.call(lastAccessLHS, ...args)); lastAccessLHS = undefined; } } return value; }
 
-var _chunkXI3VP5DNcjs = require('./chunk-XI3VP5DN.cjs');
+var _chunkVGB2VJO4cjs = require('./chunk-VGB2VJO4.cjs');
 
 
 
@@ -12,7 +12,7 @@ var _chunkXI3VP5DNcjs = require('./chunk-XI3VP5DN.cjs');
 
 
 
-var _chunk4B4AY44Fcjs = require('./chunk-4B4AY44F.cjs');
+var _chunkLA5F5KR6cjs = require('./chunk-LA5F5KR6.cjs');
 
 
 
@@ -20,15 +20,19 @@ var _chunk4B4AY44Fcjs = require('./chunk-4B4AY44F.cjs');
 
 
 
-var _chunkVQ2CD5MGcjs = require('./chunk-VQ2CD5MG.cjs');
+var _chunkFUGY5ANJcjs = require('./chunk-FUGY5ANJ.cjs');
 
 
+var _chunkYSAEOYPDcjs = require('./chunk-YSAEOYPD.cjs');
+require('./chunk-PHPTCLRU.cjs');
 
 
 
 
 
-var _chunkOLSMH4RYcjs = require('./chunk-OLSMH4RY.cjs');
+
+var _chunkJB4MJQX7cjs = require('./chunk-JB4MJQX7.cjs');
+require('./chunk-3EEANNYN.cjs');
 
 // src/client.ts
 var TRACK_PATH = "/api/track";
@@ -76,7 +80,7 @@ function toApiError(status, rawBody, retryAfterMs, requestId) {
   try {
     parsed = JSON.parse(rawBody);
   } catch (e) {
-    return new (0, _chunkOLSMH4RYcjs.DataApiError)({
+    return new (0, _chunkYSAEOYPDcjs.DataApiError)({
       message: `reopt-data responded ${status} with a non-JSON body`,
       status,
       code: status >= 500 ? "internal_error" : "unknown_error",
@@ -88,7 +92,7 @@ function toApiError(status, rawBody, retryAfterMs, requestId) {
   const body = _nullishCoalesce(parsed, () => ( {}));
   const code = typeof body.code === "string" ? body.code : status >= 500 ? "internal_error" : "unknown_error";
   const message = typeof body.message === "string" && body.message || typeof body.error === "string" && body.error || `reopt-data responded ${status}`;
-  return new (0, _chunkOLSMH4RYcjs.DataApiError)({
+  return new (0, _chunkYSAEOYPDcjs.DataApiError)({
     message,
     status,
     code,
@@ -110,10 +114,10 @@ function createDataClient(options) {
     maxDelayMs: _nullishCoalesce(_optionalChain([options, 'access', _11 => _11.retry, 'optionalAccess', _12 => _12.maxDelayMs]), () => ( DEFAULTS.maxDelayMs)),
     respectRetryAfter: _nullishCoalesce(_optionalChain([options, 'access', _13 => _13.retry, 'optionalAccess', _14 => _14.respectRetryAfter]), () => ( true))
   };
-  const userAgent = options.userAgent ? `reopt-data-contract/${_chunkOLSMH4RYcjs.CONTRACT_VERSION} ${options.userAgent}` : `reopt-data-contract/${_chunkOLSMH4RYcjs.CONTRACT_VERSION}`;
+  const userAgent = options.userAgent ? `reopt-data-contract/${_chunkJB4MJQX7cjs.CONTRACT_VERSION} ${options.userAgent}` : `reopt-data-contract/${_chunkJB4MJQX7cjs.CONTRACT_VERSION}`;
   function requireClientCredentials() {
     if (!options.clientId || !options.clientSecret) {
-      throw new (0, _chunkOLSMH4RYcjs.DataApiError)({
+      throw new (0, _chunkYSAEOYPDcjs.DataApiError)({
         message: "createDataClient was given no client credentials \u2014 pass clientId and clientSecret to use the ingest or query planes",
         status: 0,
         code: "credentials_missing"
@@ -135,7 +139,7 @@ function createDataClient(options) {
         headers: {
           "content-type": "application/json",
           "user-agent": userAgent,
-          ...options.clientId && options.clientSecret ? { [_chunkOLSMH4RYcjs.CLIENT_ID_HEADER]: options.clientId, [_chunkOLSMH4RYcjs.CLIENT_SECRET_HEADER]: options.clientSecret } : {},
+          ...options.clientId && options.clientSecret ? { [_chunkJB4MJQX7cjs.CLIENT_ID_HEADER]: options.clientId, [_chunkJB4MJQX7cjs.CLIENT_SECRET_HEADER]: options.clientSecret } : {},
           ...extraHeaders
         },
         body: JSON.stringify(body),
@@ -154,7 +158,7 @@ function createDataClient(options) {
         response = await requestOnce(method, path, body, extraHeaders, signal);
       } catch (cause) {
         if (_optionalChain([signal, 'optionalAccess', _20 => _20.aborted])) throw cause;
-        lastError = new (0, _chunkOLSMH4RYcjs.DataApiError)({
+        lastError = new (0, _chunkYSAEOYPDcjs.DataApiError)({
           message: cause instanceof Error ? cause.message : String(cause),
           status: 0,
           code: "network_error",
@@ -166,16 +170,16 @@ function createDataClient(options) {
         }
         throw lastError;
       }
-      const requestId = _nullishCoalesce(response.headers.get(_chunkOLSMH4RYcjs.REQUEST_ID_HEADER), () => ( void 0));
-      const serverContractVersion = response.headers.get(_chunkOLSMH4RYcjs.CONTRACT_VERSION_HEADER);
+      const requestId = _nullishCoalesce(response.headers.get(_chunkJB4MJQX7cjs.REQUEST_ID_HEADER), () => ( void 0));
+      const serverContractVersion = response.headers.get(_chunkJB4MJQX7cjs.CONTRACT_VERSION_HEADER);
       const rawBody = await response.text();
-      if (serverContractVersion !== _chunkOLSMH4RYcjs.CONTRACT_VERSION) {
-        throw new (0, _chunkOLSMH4RYcjs.DataApiError)({
-          message: serverContractVersion ? `reopt-data contract ${serverContractVersion} does not match client contract ${_chunkOLSMH4RYcjs.CONTRACT_VERSION}` : "reopt-data response did not declare its contract version",
+      if (serverContractVersion !== _chunkJB4MJQX7cjs.CONTRACT_VERSION) {
+        throw new (0, _chunkYSAEOYPDcjs.DataApiError)({
+          message: serverContractVersion ? `reopt-data contract ${serverContractVersion} does not match client contract ${_chunkJB4MJQX7cjs.CONTRACT_VERSION}` : "reopt-data response did not declare its contract version",
           status: response.status,
           code: "contract_mismatch",
           requestId,
-          details: { expected: _chunkOLSMH4RYcjs.CONTRACT_VERSION, received: serverContractVersion }
+          details: { expected: _chunkJB4MJQX7cjs.CONTRACT_VERSION, received: serverContractVersion }
         });
       }
       if (response.ok) {
@@ -183,7 +187,7 @@ function createDataClient(options) {
         try {
           json = JSON.parse(rawBody);
         } catch (cause) {
-          throw new (0, _chunkOLSMH4RYcjs.DataApiError)({
+          throw new (0, _chunkYSAEOYPDcjs.DataApiError)({
             message: "reopt-data returned a 2xx with an unparseable body",
             status: response.status,
             code: "contract_mismatch",
@@ -194,7 +198,7 @@ function createDataClient(options) {
         try {
           return parse(json);
         } catch (cause) {
-          throw new (0, _chunkOLSMH4RYcjs.DataApiError)({
+          throw new (0, _chunkYSAEOYPDcjs.DataApiError)({
             message: "reopt-data returned a 2xx that does not match the contract",
             status: response.status,
             code: "contract_mismatch",
@@ -208,7 +212,7 @@ function createDataClient(options) {
       if (!lastError.retryable || attempt === retry.maxRetries) throw lastError;
       await sleep(_nullishCoalesce(retryAfterMs, () => ( backoffDelay(attempt, retry))), signal);
     }
-    throw _nullishCoalesce(lastError, () => ( new (0, _chunkOLSMH4RYcjs.DataApiError)({ message: "reopt-data request failed", status: 0, code: "network_error" })));
+    throw _nullishCoalesce(lastError, () => ( new (0, _chunkYSAEOYPDcjs.DataApiError)({ message: "reopt-data request failed", status: 0, code: "network_error" })));
   }
   async function post(path, body, parse, signal) {
     requireClientCredentials();
@@ -217,37 +221,37 @@ function createDataClient(options) {
   return {
     ingest: {
       track(events, init) {
-        return post(TRACK_PATH, events, (value) => _chunkXI3VP5DNcjs.zIngestResponse.parse(value), _optionalChain([init, 'optionalAccess', _21 => _21.signal]));
+        return post(TRACK_PATH, events, (value) => _chunkVGB2VJO4cjs.zIngestResponse.parse(value), _optionalChain([init, 'optionalAccess', _21 => _21.signal]));
       }
     },
     query: {
       eventsTimeseries(input, init) {
         return post(
-          _chunkVQ2CD5MGcjs.QUERY_API_PATHS.eventsTimeseries,
+          _chunkFUGY5ANJcjs.QUERY_API_PATHS.eventsTimeseries,
           input,
-          (value) => _chunkVQ2CD5MGcjs.zEventsTimeseriesResponse.parse(value),
+          (value) => _chunkFUGY5ANJcjs.zEventsTimeseriesResponse.parse(value),
           _optionalChain([init, 'optionalAccess', _22 => _22.signal])
         );
       },
       funnel(input, init) {
-        return post(_chunkVQ2CD5MGcjs.QUERY_API_PATHS.funnel, input, (value) => _chunkVQ2CD5MGcjs.zFunnelResponse.parse(value), _optionalChain([init, 'optionalAccess', _23 => _23.signal]));
+        return post(_chunkFUGY5ANJcjs.QUERY_API_PATHS.funnel, input, (value) => _chunkFUGY5ANJcjs.zFunnelResponse.parse(value), _optionalChain([init, 'optionalAccess', _23 => _23.signal]));
       },
       retention(input, init) {
-        return post(_chunkVQ2CD5MGcjs.QUERY_API_PATHS.retention, input, (value) => _chunkVQ2CD5MGcjs.zRetentionResponse.parse(value), _optionalChain([init, 'optionalAccess', _24 => _24.signal]));
+        return post(_chunkFUGY5ANJcjs.QUERY_API_PATHS.retention, input, (value) => _chunkFUGY5ANJcjs.zRetentionResponse.parse(value), _optionalChain([init, 'optionalAccess', _24 => _24.signal]));
       },
       trafficOverview(input, init) {
         return post(
-          _chunkVQ2CD5MGcjs.QUERY_API_PATHS.trafficOverview,
+          _chunkFUGY5ANJcjs.QUERY_API_PATHS.trafficOverview,
           input,
-          (value) => _chunkVQ2CD5MGcjs.zTrafficOverviewResponse.parse(value),
+          (value) => _chunkFUGY5ANJcjs.zTrafficOverviewResponse.parse(value),
           _optionalChain([init, 'optionalAccess', _25 => _25.signal])
         );
       },
       trafficSources(input, init) {
         return post(
-          _chunkVQ2CD5MGcjs.QUERY_API_PATHS.trafficSources,
+          _chunkFUGY5ANJcjs.QUERY_API_PATHS.trafficSources,
           input,
-          (value) => _chunkVQ2CD5MGcjs.zTrafficSourcesResponse.parse(value),
+          (value) => _chunkFUGY5ANJcjs.zTrafficSourcesResponse.parse(value),
           _optionalChain([init, 'optionalAccess', _26 => _26.signal])
         );
       }
@@ -256,70 +260,70 @@ function createDataClient(options) {
       createOrganization(input, auth, init) {
         return send(
           "POST",
-          _chunk4B4AY44Fcjs.CONTROL_API_PATHS.organizations,
+          _chunkLA5F5KR6cjs.CONTROL_API_PATHS.organizations,
           input,
-          (value) => _chunk4B4AY44Fcjs.zCreateOrganizationResponse.parse(value),
-          { [_chunk4B4AY44Fcjs.PLATFORM_KEY_HEADER]: auth.platformKey },
+          (value) => _chunkLA5F5KR6cjs.zCreateOrganizationResponse.parse(value),
+          { [_chunkLA5F5KR6cjs.PLATFORM_KEY_HEADER]: auth.platformKey },
           _optionalChain([init, 'optionalAccess', _27 => _27.signal])
         );
       },
       rotateOrgKey(organizationId, auth, init) {
         return send(
           "POST",
-          _chunk4B4AY44Fcjs.CONTROL_API_PATHS.organizationKeys(organizationId),
+          _chunkLA5F5KR6cjs.CONTROL_API_PATHS.organizationKeys(organizationId),
           {},
-          (value) => _chunk4B4AY44Fcjs.zRotateOrganizationKeyResponse.parse(value),
-          { [_chunk4B4AY44Fcjs.PLATFORM_KEY_HEADER]: auth.platformKey },
+          (value) => _chunkLA5F5KR6cjs.zRotateOrganizationKeyResponse.parse(value),
+          { [_chunkLA5F5KR6cjs.PLATFORM_KEY_HEADER]: auth.platformKey },
           _optionalChain([init, 'optionalAccess', _28 => _28.signal])
         );
       },
       updateOrganizationQuota(organizationId, input, auth, init) {
         return send(
           "PATCH",
-          _chunk4B4AY44Fcjs.CONTROL_API_PATHS.organization(organizationId),
+          _chunkLA5F5KR6cjs.CONTROL_API_PATHS.organization(organizationId),
           input,
-          (value) => _chunk4B4AY44Fcjs.zUpdateOrganizationQuotaResponse.parse(value),
-          { [_chunk4B4AY44Fcjs.PLATFORM_KEY_HEADER]: auth.platformKey },
+          (value) => _chunkLA5F5KR6cjs.zUpdateOrganizationQuotaResponse.parse(value),
+          { [_chunkLA5F5KR6cjs.PLATFORM_KEY_HEADER]: auth.platformKey },
           _optionalChain([init, 'optionalAccess', _29 => _29.signal])
         );
       },
       createProject(input, auth, init) {
         return send(
           "POST",
-          _chunk4B4AY44Fcjs.CONTROL_API_PATHS.projects,
+          _chunkLA5F5KR6cjs.CONTROL_API_PATHS.projects,
           input,
-          (value) => _chunk4B4AY44Fcjs.zCreateProjectResponse.parse(value),
-          { [_chunk4B4AY44Fcjs.ORG_KEY_HEADER]: auth.orgKey },
+          (value) => _chunkLA5F5KR6cjs.zCreateProjectResponse.parse(value),
+          { [_chunkLA5F5KR6cjs.ORG_KEY_HEADER]: auth.orgKey },
           _optionalChain([init, 'optionalAccess', _30 => _30.signal])
         );
       },
       rotateServerClientSecret(projectId, clientId, auth, init) {
         return send(
           "POST",
-          _chunk4B4AY44Fcjs.CONTROL_API_PATHS.clientRotate(projectId, clientId),
+          _chunkLA5F5KR6cjs.CONTROL_API_PATHS.clientRotate(projectId, clientId),
           {},
-          (value) => _chunk4B4AY44Fcjs.zRotateClientSecretResponse.parse(value),
-          { [_chunk4B4AY44Fcjs.ORG_KEY_HEADER]: auth.orgKey },
+          (value) => _chunkLA5F5KR6cjs.zRotateClientSecretResponse.parse(value),
+          { [_chunkLA5F5KR6cjs.ORG_KEY_HEADER]: auth.orgKey },
           _optionalChain([init, 'optionalAccess', _31 => _31.signal])
         );
       },
       deleteProject(projectId, input, auth, init) {
         return send(
           "DELETE",
-          _chunk4B4AY44Fcjs.CONTROL_API_PATHS.project(projectId),
+          _chunkLA5F5KR6cjs.CONTROL_API_PATHS.project(projectId),
           input,
-          (value) => _chunk4B4AY44Fcjs.zDeleteProjectResponse.parse(value),
-          { [_chunk4B4AY44Fcjs.ORG_KEY_HEADER]: auth.orgKey },
+          (value) => _chunkLA5F5KR6cjs.zDeleteProjectResponse.parse(value),
+          { [_chunkLA5F5KR6cjs.ORG_KEY_HEADER]: auth.orgKey },
           _optionalChain([init, 'optionalAccess', _32 => _32.signal])
         );
       },
       upsertEventMeta(projectId, name, input, auth, init) {
         return send(
           "PUT",
-          _chunk4B4AY44Fcjs.CONTROL_API_PATHS.projectEvent(projectId, name),
+          _chunkLA5F5KR6cjs.CONTROL_API_PATHS.projectEvent(projectId, name),
           input,
-          (value) => _chunk4B4AY44Fcjs.zEventMetaResponse.parse(value),
-          { [_chunk4B4AY44Fcjs.ORG_KEY_HEADER]: auth.orgKey },
+          (value) => _chunkLA5F5KR6cjs.zEventMetaResponse.parse(value),
+          { [_chunkLA5F5KR6cjs.ORG_KEY_HEADER]: auth.orgKey },
           _optionalChain([init, 'optionalAccess', _33 => _33.signal])
         );
       }

package/dist/client.cjs.map

@@ -1 +1 @@
-{"version":3,"sources":["/Users/eric/reopt-ai/reopt-data/packages/data-contract/dist/client.cjs","../src/client.ts"],"names":[],"mappings":"AAAA;AACE;AACF,wDAA6B;AAC7B;AACE;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACF,wDAA6B;AAC7B;AACE;AACA;AACA;AACA;AACA;AACA;AACF,wDAA6B;AAC7B;AACE;AACA;AACA;AACA;AACA;AACA;AACF,wDAA6B;AAC7B;AACA;ACgCA,IAAM,WAAA,EAAa,YAAA;AA6GnB,IAAM,SAAA,EAAW;AAAA,EACf,SAAA,EAAW,GAAA;AAAA,EACX,UAAA,EAAY,CAAA;AAAA,EACZ,WAAA,EAAa,GAAA;AAAA,EACb,UAAA,EAAY;AACd,CAAA;AAEA,SAAS,gBAAA,CAAiB,OAAA,EAAyB;AACjD,EAAA,OAAO,OAAA,CAAQ,OAAA,CAAQ,MAAA,EAAQ,EAAE,CAAA;AACnC;AAGA,SAAS,eAAA,CAAgB,MAAA,EAA2C;AAClE,EAAA,GAAA,CAAI,CAAC,MAAA,EAAQ,OAAO,KAAA,CAAA;AAEpB,EAAA,MAAM,QAAA,EAAU,MAAA,CAAO,MAAM,CAAA;AAC7B,EAAA,GAAA,CAAI,MAAA,CAAO,QAAA,CAAS,OAAO,EAAA,GAAK,QAAA,GAAW,CAAA,EAAG,OAAO,IAAA,CAAK,KAAA,CAAM,QAAA,EAAU,GAAI,CAAA;AAE9E,EAAA,MAAM,GAAA,EAAK,IAAA,CAAK,KAAA,CAAM,MAAM,CAAA;AAC5B,EAAA,GAAA,CAAI,MAAA,CAAO,QAAA,CAAS,EAAE,CAAA,EAAG,OAAO,IAAA,CAAK,GAAA,CAAI,CAAA,EAAG,GAAA,EAAK,IAAA,CAAK,GAAA,CAAI,CAAC,CAAA;AAE3D,EAAA,OAAO,KAAA,CAAA;AACT;AAEA,SAAS,KAAA,CAAM,EAAA,EAAY,MAAA,EAAqC;AAC9D,EAAA,OAAO,IAAI,OAAA,CAAQ,CAAC,OAAA,EAAS,MAAA,EAAA,GAAW;AACtC,IAAA,GAAA,iBAAI,MAAA,2BAAQ,SAAA,EAAS;AACnB,MAAA,MAAA,kBAAO,MAAA,CAAO,MAAA,UAAU,IAAI,KAAA,CAAM,SAAS,GAAC,CAAA;AAC5C,MAAA,MAAA;AAAA,IACF;AACA,IAAA,MAAM,MAAA,EAAQ,UAAA,CAAW,CAAA,EAAA,GAAM;AAC7B,sBAAA,MAAA,6BAAQ,mBAAA,mBAAoB,OAAA,EAAS,OAAO,GAAA;AAC5C,MAAA,OAAA,CAAQ,CAAA;AAAA,IACV,CAAA,EAAG,EAAE,CAAA;AACL,IAAA,MAAM,QAAA,EAAU,CAAA,EAAA,GAAM;AACpB,MAAA,YAAA,CAAa,KAAK,CAAA;AAClB,MAAA,MAAA,kCAAO,MAAA,6BAAQ,QAAA,UAAU,IAAI,KAAA,CAAM,SAAS,GAAC,CAAA;AAAA,IAC/C,CAAA;AACA,oBAAA,MAAA,6BAAQ,gBAAA,mBAAiB,OAAA,EAAS,OAAA,EAAS,EAAE,IAAA,EAAM,KAAK,CAAC,GAAA;AAAA,EAC3D,CAAC,CAAA;AACH;AAEA,SAAS,YAAA,CAAa,OAAA,EAAiB,KAAA,EAAiD;AACtF,EAAA,MAAM,YAAA,EAAc,KAAA,CAAM,YAAA,EAAc,EAAA,GAAK,OAAA;AAC7C,EAAA,MAAM,OAAA,EAAS,IAAA,CAAK,GAAA,CAAI,WAAA,EAAa,KAAA,CAAM,UAAU,CAAA;AAGrD,EAAA,OAAO,IAAA,CAAK,KAAA,CAAM,OAAA,EAAA,CAAU,IAAA,EAAM,IAAA,CAAK,MAAA,CAAO,EAAA,EAAI,GAAA,CAAI,CAAA;AACxD;AAOA,SAAS,UAAA,CACP,MAAA,EACA,OAAA,EACA,YAAA,EACA,SAAA,EACc;AACd,EAAA,IAAI,MAAA;AACJ,EAAA,IAAI;AACF,IAAA,OAAA,EAAS,IAAA,CAAK,KAAA,CAAM,OAAO,CAAA;AAAA,EAC7B,EAAA,UAAQ;AACN,IAAA,OAAO,IAAI,mCAAA,CAAa;AAAA,MACtB,OAAA,EAAS,CAAA,qBAAA,EAAwB,MAAM,CAAA,qBAAA,CAAA;AAAA,MACvC,MAAA;AAAA,MACA,IAAA,EAAM,OAAA,GAAU,IAAA,EAAM,iBAAA,EAAmB,eAAA;AAAA,MACzC,SAAA;AAAA,MACA,YAAA;AAAA,MACA,OAAA,EAAS,OAAA,CAAQ,KAAA,CAAM,CAAA,EAAG,GAAI;AAAA,IAChC,CAAC,CAAA;AAAA,EACH;AAEA,EAAA,MAAM,KAAA,mBAAQ,MAAA,UAAU,CAAC,GAAA;AACzB,EAAA,MAAM,KAAA,EAAO,OAAO,IAAA,CAAK,KAAA,IAAS,SAAA,EAAW,IAAA,CAAK,KAAA,EAAO,OAAA,GAAU,IAAA,EAAM,iBAAA,EAAmB,eAAA;AAC5F,EAAA,MAAM,QAAA,EACH,OAAO,IAAA,CAAK,QAAA,IAAY,SAAA,GAAY,IAAA,CAAK,QAAA,GACzC,OAAO,IAAA,CAAK,MAAA,IAAU,SAAA,GAAY,IAAA,CAAK,MAAA,GACxC,CAAA,qBAAA,EAAwB,MAAM,CAAA,CAAA;AAER,EAAA;AACtB,IAAA;AACA,IAAA;AACA,IAAA;AACgF,IAAA;AAChF,IAAA;AACwB,IAAA;AACzB,EAAA;AACH;AAEyE;AACvB,EAAA;AACJ,EAAA;AACT,EAAA;AAC6D,IAAA;AAChG,EAAA;AAEgD,EAAA;AACA,EAAA;AACI,IAAA;AACE,IAAA;AACF,IAAA;AACK,IAAA;AACzD,EAAA;AAI2C,EAAA;AAMqC,EAAA;AAC9B,IAAA;AACvB,MAAA;AAEnB,QAAA;AACM,QAAA;AACF,QAAA;AACP,MAAA;AACH,IAAA;AACwE,IAAA;AAC1E,EAAA;AAQqB,EAAA;AACoB,IAAA;AACzB,IAAA;AACyE,MAAA;AACrF,MAAA;AACF,IAAA;AACmF,IAAA;AACpB,oBAAA;AAE3D,IAAA;AACwC,MAAA;AACxC,QAAA;AACS,QAAA;AACS,UAAA;AACF,UAAA;AAGT,UAAA;AACF,UAAA;AACL,QAAA;AACyB,QAAA;AACN,QAAA;AACpB,MAAA;AACD,IAAA;AACkB,MAAA;AACgC,sBAAA;AACpD,IAAA;AACF,EAAA;AASc,EAAA;AACR,IAAA;AAE0D,IAAA;AACxD,MAAA;AACA,MAAA;AACmE,QAAA;AACvD,MAAA;AAEa,QAAA;AACE,QAAA;AACmC,UAAA;AACtD,UAAA;AACF,UAAA;AACG,UAAA;AACV,QAAA;AAC+B,QAAA;AACkB,UAAA;AAChD,UAAA;AACF,QAAA;AACM,QAAA;AACR,MAAA;AAE6D,MAAA;AACa,MAAA;AACtC,MAAA;AAEY,MAAA;AACvB,QAAA;AAGjB,UAAA;AACa,UAAA;AACX,UAAA;AACN,UAAA;AACuE,UAAA;AACxE,QAAA;AACH,MAAA;AAEiB,MAAA;AACX,QAAA;AACA,QAAA;AACuB,UAAA;AACX,QAAA;AACS,UAAA;AACZ,YAAA;AACQ,YAAA;AACX,YAAA;AACN,YAAA;AACS,YAAA;AACV,UAAA;AACH,QAAA;AAEI,QAAA;AACe,UAAA;AACH,QAAA;AACS,UAAA;AACZ,YAAA;AACQ,YAAA;AACX,YAAA;AACN,YAAA;AACS,YAAA;AACV,UAAA;AACH,QAAA;AACF,MAAA;AAEsG,MAAA;AAC9B,MAAA;AAER,MAAA;AACA,MAAA;AAClE,IAAA;AAG8G,IAAA;AAChH,EAAA;AASoH,EAAA;AACzF,IAAA;AACwB,IAAA;AACnD,EAAA;AAEO,EAAA;AACG,IAAA;AACc,MAAA;AACmE,QAAA;AACvF,MAAA;AACF,IAAA;AACO,IAAA;AACyB,MAAA;AACrB,QAAA;AACW,UAAA;AAChB,UAAA;AACgD,UAAA;AAC1C,0BAAA;AACR,QAAA;AACF,MAAA;AACoB,MAAA;AAC8E,QAAA;AAClG,MAAA;AACuB,MAAA;AACiF,QAAA;AACxG,MAAA;AAC6B,MAAA;AACpB,QAAA;AACW,UAAA;AAChB,UAAA;AAC+C,UAAA;AACzC,0BAAA;AACR,QAAA;AACF,MAAA;AAC4B,MAAA;AACnB,QAAA;AACW,UAAA;AAChB,UAAA;AAC8C,UAAA;AACxC,0BAAA;AACR,QAAA;AACF,MAAA;AACF,IAAA;AACS,IAAA;AAC+B,MAAA;AAC7B,QAAA;AACL,UAAA;AACkB,UAAA;AAClB,UAAA;AACkD,UAAA;AACR,UAAA;AACpC,0BAAA;AACR,QAAA;AACF,MAAA;AACyC,MAAA;AAChC,QAAA;AACL,UAAA;AACiD,UAAA;AAChD,UAAA;AACoD,UAAA;AACX,UAAA;AACpC,0BAAA;AACR,QAAA;AACF,MAAA;AAC2D,MAAA;AAClD,QAAA;AACL,UAAA;AAC6C,UAAA;AAC7C,UAAA;AACuD,UAAA;AACb,UAAA;AACpC,0BAAA;AACR,QAAA;AACF,MAAA;AACiC,MAAA;AACxB,QAAA;AACL,UAAA;AACkB,UAAA;AAClB,UAAA;AAC6C,UAAA;AACb,UAAA;AAC1B,0BAAA;AACR,QAAA;AACF,MAAA;AAC0D,MAAA;AACjD,QAAA;AACL,UAAA;AACkD,UAAA;AACjD,UAAA;AACiD,UAAA;AAClB,UAAA;AAC1B,0BAAA;AACR,QAAA;AACF,MAAA;AAC4C,MAAA;AACnC,QAAA;AACL,UAAA;AACmC,UAAA;AACnC,UAAA;AAC6C,UAAA;AACb,UAAA;AAC1B,0BAAA;AACR,QAAA;AACF,MAAA;AACoD,MAAA;AAC3C,QAAA;AACL,UAAA;AAC8C,UAAA;AAC9C,UAAA;AACyC,UAAA;AACT,UAAA;AAC1B,0BAAA;AACR,QAAA;AACF,MAAA;AACF,IAAA;AACF,EAAA;AACF;ADtNqJ;AACA;AACA","file":"/Users/eric/reopt-ai/reopt-data/packages/data-contract/dist/client.cjs","sourcesContent":[null,"/**\n * `createDataClient` — typed fetch over the ingest and query planes.\n *\n * Deliberately stateless: no queue, no buffer, no background flush. Batch\n * assembly and cursor management belong to the caller (a forwarder already has\n * a cursor and byte-batching; duplicating that here would give it two).\n *\n * Every response is parsed with the contract schema, so a server that drifts\n * from the contract surfaces as `contract_mismatch` instead of quietly\n * returning something the caller then mis-reads.\n */\nimport {\n  CLIENT_ID_HEADER,\n  CLIENT_SECRET_HEADER,\n  CONTRACT_VERSION,\n  CONTRACT_VERSION_HEADER,\n  DataApiError,\n  REQUEST_ID_HEADER,\n  type OptionalClientCredentials,\n} from \"./index.js\";\nimport { zIngestResponse, type IngestResponse, type ITrackHandlerPayload } from \"./ingest.js\";\nimport {\n  CONTROL_API_PATHS,\n  ORG_KEY_HEADER,\n  PLATFORM_KEY_HEADER,\n  zCreateOrganizationResponse,\n  zCreateProjectResponse,\n  zDeleteProjectResponse,\n  zRotateClientSecretResponse,\n  zRotateOrganizationKeyResponse,\n  zUpdateOrganizationQuotaResponse,\n  zEventMetaResponse,\n  type CreateOrganizationInput,\n  type EventMetaResponse,\n  type UpsertEventMetaInput,\n  type CreateOrganizationResponse,\n  type CreateProjectInput,\n  type CreateProjectResponse,\n  type DeleteProjectInput,\n  type DeleteProjectResponse,\n  type RotateClientSecretResponse,\n  type RotateOrganizationKeyResponse,\n  type UpdateOrganizationQuotaInput,\n  type UpdateOrganizationQuotaResponse,\n} from \"./control.js\";\nimport {\n  QUERY_API_PATHS,\n  zEventsTimeseriesResponse,\n  zFunnelResponse,\n  zRetentionResponse,\n  zTrafficOverviewResponse,\n  zTrafficSourcesResponse,\n  type EventsTimeseriesInput,\n  type EventsTimeseriesResponse,\n  type FunnelInput,\n  type FunnelResponse,\n  type RetentionInput,\n  type RetentionResponse,\n  type TrafficOverviewInput,\n  type TrafficOverviewResponse,\n  type TrafficSourcesInput,\n  type TrafficSourcesResponse,\n} from \"./query.js\";\n\nconst TRACK_PATH = \"/api/track\";\n\nexport interface DataClientRetryOptions {\n  /** Attempts after the first. Only 429 and 5xx are retried. Default 2. */\n  maxRetries?: number;\n  /** First backoff step; doubles each attempt, with jitter. Default 500ms. */\n  baseDelayMs?: number;\n  /** Cap on a single backoff step. Default 20s. */\n  maxDelayMs?: number;\n  /** Prefer the server's `Retry-After` over the computed backoff. Default true. */\n  respectRetryAfter?: boolean;\n}\n\nexport interface DataClientOptions extends OptionalClientCredentials {\n  /** Origin of the reopt-data deployment, e.g. `https://data.reopt.app`. Trailing slash ignored. */\n  baseUrl: string;\n  /** Injected so callers can pass a framework-instrumented fetch. Defaults to `globalThis.fetch`. */\n  fetch?: typeof globalThis.fetch;\n  /** Per-attempt timeout. Default 10s. */\n  timeoutMs?: number;\n  retry?: DataClientRetryOptions;\n  /** Appended to the default `reopt-data-contract/<version>`. */\n  userAgent?: string;\n}\n\nexport interface DataRequestInit {\n  signal?: AbortSignal;\n}\n\n/**\n * Provisioning credentials are passed per call rather than held on the client,\n * because they are a different authority from the client credential the rest of\n * the surface uses — and because a long-lived object holding the platform key\n * is a wider blast radius than a value the caller reads at the moment it needs\n * it.\n */\nexport interface PlatformAuth {\n  platformKey: string;\n}\n\nexport interface OrganizationAuth {\n  orgKey: string;\n}\n\nexport interface DataClient {\n  ingest: {\n    /**\n     * `POST /api/track`. Send events as one batch; splitting to stay under\n     * the 512KB body cap is the caller's job, since only the caller knows how\n     * to resume a partially-sent range.\n     */\n    track(events: ITrackHandlerPayload[], init?: DataRequestInit): Promise<IngestResponse>;\n  };\n  query: {\n    eventsTimeseries(input: EventsTimeseriesInput, init?: DataRequestInit): Promise<EventsTimeseriesResponse>;\n    funnel(input: FunnelInput, init?: DataRequestInit): Promise<FunnelResponse>;\n    retention(input: RetentionInput, init?: DataRequestInit): Promise<RetentionResponse>;\n    trafficOverview(input: TrafficOverviewInput, init?: DataRequestInit): Promise<TrafficOverviewResponse>;\n    trafficSources(input: TrafficSourcesInput, init?: DataRequestInit): Promise<TrafficSourcesResponse>;\n  };\n  control: {\n    /** Idempotent on `externalId`. `orgKey` comes back only on first creation. */\n    createOrganization(\n      input: CreateOrganizationInput,\n      auth: PlatformAuth,\n      init?: DataRequestInit\n    ): Promise<CreateOrganizationResponse>;\n    /** Issues a new key and revokes every previous one. The recovery path for a lost key. */\n    rotateOrgKey(\n      organizationId: string,\n      auth: PlatformAuth,\n      init?: DataRequestInit\n    ): Promise<RotateOrganizationKeyResponse>;\n    updateOrganizationQuota(\n      organizationId: string,\n      input: UpdateOrganizationQuotaInput,\n      auth: PlatformAuth,\n      init?: DataRequestInit\n    ): Promise<UpdateOrganizationQuotaResponse>;\n    /** Idempotent on `externalId`. `clientSecret` comes back only on first creation. */\n    createProject(\n      input: CreateProjectInput,\n      auth: OrganizationAuth,\n      init?: DataRequestInit\n    ): Promise<CreateProjectResponse>;\n    rotateServerClientSecret(\n      projectId: string,\n      clientId: string,\n      auth: OrganizationAuth,\n      init?: DataRequestInit\n    ): Promise<RotateClientSecretResponse>;\n    /** Irreversible. Idempotent: a project that is already gone still answers 202. */\n    deleteProject(\n      projectId: string,\n      input: DeleteProjectInput,\n      auth: OrganizationAuth,\n      init?: DataRequestInit\n    ): Promise<DeleteProjectResponse>;\n    /** Idempotent: a repeat with the same body changes nothing and answers 200. */\n    upsertEventMeta(\n      projectId: string,\n      name: string,\n      input: UpsertEventMetaInput,\n      auth: OrganizationAuth,\n      init?: DataRequestInit\n    ): Promise<EventMetaResponse>;\n  };\n}\n\nconst DEFAULTS = {\n  timeoutMs: 10_000,\n  maxRetries: 2,\n  baseDelayMs: 500,\n  maxDelayMs: 20_000,\n} as const;\n\nfunction normalizeBaseUrl(baseUrl: string): string {\n  return baseUrl.replace(/\\/+$/, \"\");\n}\n\n/** `Retry-After` is either delta-seconds or an HTTP date; both are legal. */\nfunction parseRetryAfter(header: string | null): number | undefined {\n  if (!header) return undefined;\n\n  const seconds = Number(header);\n  if (Number.isFinite(seconds) && seconds >= 0) return Math.round(seconds * 1000);\n\n  const at = Date.parse(header);\n  if (Number.isFinite(at)) return Math.max(0, at - Date.now());\n\n  return undefined;\n}\n\nfunction sleep(ms: number, signal?: AbortSignal): Promise<void> {\n  return new Promise((resolve, reject) => {\n    if (signal?.aborted) {\n      reject(signal.reason ?? new Error(\"Aborted\"));\n      return;\n    }\n    const timer = setTimeout(() => {\n      signal?.removeEventListener(\"abort\", onAbort);\n      resolve();\n    }, ms);\n    const onAbort = () => {\n      clearTimeout(timer);\n      reject(signal?.reason ?? new Error(\"Aborted\"));\n    };\n    signal?.addEventListener(\"abort\", onAbort, { once: true });\n  });\n}\n\nfunction backoffDelay(attempt: number, retry: Required<DataClientRetryOptions>): number {\n  const exponential = retry.baseDelayMs * 2 ** attempt;\n  const capped = Math.min(exponential, retry.maxDelayMs);\n  // Full jitter — a fleet of forwarders that all got 429 should not all come\n  // back at the same instant.\n  return Math.round(capped * (0.5 + Math.random() * 0.5));\n}\n\n/**\n * Body of a non-2xx response. Both planes share `{ status, code, error, ... }`,\n * so one reader covers them; anything else is reported as `internal_error`\n * with the raw text kept in `details`.\n */\nfunction toApiError(\n  status: number,\n  rawBody: string,\n  retryAfterMs: number | undefined,\n  requestId?: string\n): DataApiError {\n  let parsed: unknown;\n  try {\n    parsed = JSON.parse(rawBody);\n  } catch {\n    return new DataApiError({\n      message: `reopt-data responded ${status} with a non-JSON body`,\n      status,\n      code: status >= 500 ? \"internal_error\" : \"unknown_error\",\n      requestId,\n      retryAfterMs,\n      details: rawBody.slice(0, 2000),\n    });\n  }\n\n  const body = (parsed ?? {}) as Record<string, unknown>;\n  const code = typeof body.code === \"string\" ? body.code : status >= 500 ? \"internal_error\" : \"unknown_error\";\n  const message =\n    (typeof body.message === \"string\" && body.message) ||\n    (typeof body.error === \"string\" && body.error) ||\n    `reopt-data responded ${status}`;\n\n  return new DataApiError({\n    message,\n    status,\n    code,\n    requestId: (typeof body.requestId === \"string\" ? body.requestId : undefined) ?? requestId,\n    retryAfterMs,\n    details: body.errors ?? undefined,\n  });\n}\n\nexport function createDataClient(options: DataClientOptions): DataClient {\n  const baseUrl = normalizeBaseUrl(options.baseUrl);\n  const doFetch = options.fetch ?? globalThis.fetch;\n  if (typeof doFetch !== \"function\") {\n    throw new TypeError(\"createDataClient: no fetch implementation available — pass options.fetch\");\n  }\n\n  const timeoutMs = options.timeoutMs ?? DEFAULTS.timeoutMs;\n  const retry: Required<DataClientRetryOptions> = {\n    maxRetries: options.retry?.maxRetries ?? DEFAULTS.maxRetries,\n    baseDelayMs: options.retry?.baseDelayMs ?? DEFAULTS.baseDelayMs,\n    maxDelayMs: options.retry?.maxDelayMs ?? DEFAULTS.maxDelayMs,\n    respectRetryAfter: options.retry?.respectRetryAfter ?? true,\n  };\n\n  const userAgent = options.userAgent\n    ? `reopt-data-contract/${CONTRACT_VERSION} ${options.userAgent}`\n    : `reopt-data-contract/${CONTRACT_VERSION}`;\n\n  /**\n   * Client credentials, or a clear failure. The ingest and query planes cannot\n   * run without them; the provisioning plane never uses them.\n   */\n  function requireClientCredentials(): { clientId: string; clientSecret: string } {\n    if (!options.clientId || !options.clientSecret) {\n      throw new DataApiError({\n        message:\n          \"createDataClient was given no client credentials — pass clientId and clientSecret to use the ingest or query planes\",\n        status: 0,\n        code: \"credentials_missing\",\n      });\n    }\n    return { clientId: options.clientId, clientSecret: options.clientSecret };\n  }\n\n  async function requestOnce(\n    method: \"POST\" | \"PUT\" | \"PATCH\" | \"DELETE\",\n    path: string,\n    body: unknown,\n    extraHeaders: Record<string, string>,\n    signal?: AbortSignal\n  ): Promise<Response> {\n    const controller = new AbortController();\n    const timer = setTimeout(\n      () => controller.abort(new Error(`reopt-data request timed out after ${timeoutMs}ms`)),\n      timeoutMs\n    );\n    const onCallerAbort = () => controller.abort(signal?.reason ?? new Error(\"Aborted\"));\n    signal?.addEventListener(\"abort\", onCallerAbort, { once: true });\n\n    try {\n      return await doFetch(`${baseUrl}${path}`, {\n        method,\n        headers: {\n          \"content-type\": \"application/json\",\n          \"user-agent\": userAgent,\n          ...(options.clientId && options.clientSecret\n            ? { [CLIENT_ID_HEADER]: options.clientId, [CLIENT_SECRET_HEADER]: options.clientSecret }\n            : {}),\n          ...extraHeaders,\n        },\n        body: JSON.stringify(body),\n        signal: controller.signal,\n      });\n    } finally {\n      clearTimeout(timer);\n      signal?.removeEventListener(\"abort\", onCallerAbort);\n    }\n  }\n\n  async function send<T>(\n    method: \"POST\" | \"PUT\" | \"PATCH\" | \"DELETE\",\n    path: string,\n    body: unknown,\n    parse: (value: unknown) => T,\n    extraHeaders: Record<string, string> = {},\n    signal?: AbortSignal\n  ): Promise<T> {\n    let lastError: DataApiError | undefined;\n\n    for (let attempt = 0; attempt <= retry.maxRetries; attempt++) {\n      let response: Response;\n      try {\n        response = await requestOnce(method, path, body, extraHeaders, signal);\n      } catch (cause) {\n        // A caller-initiated abort is not a transport failure — propagate it.\n        if (signal?.aborted) throw cause;\n        lastError = new DataApiError({\n          message: cause instanceof Error ? cause.message : String(cause),\n          status: 0,\n          code: \"network_error\",\n          details: cause,\n        });\n        if (attempt < retry.maxRetries) {\n          await sleep(backoffDelay(attempt, retry), signal);\n          continue;\n        }\n        throw lastError;\n      }\n\n      const requestId = response.headers.get(REQUEST_ID_HEADER) ?? undefined;\n      const serverContractVersion = response.headers.get(CONTRACT_VERSION_HEADER);\n      const rawBody = await response.text();\n\n      if (serverContractVersion !== CONTRACT_VERSION) {\n        throw new DataApiError({\n          message: serverContractVersion\n            ? `reopt-data contract ${serverContractVersion} does not match client contract ${CONTRACT_VERSION}`\n            : \"reopt-data response did not declare its contract version\",\n          status: response.status,\n          code: \"contract_mismatch\",\n          requestId,\n          details: { expected: CONTRACT_VERSION, received: serverContractVersion },\n        });\n      }\n\n      if (response.ok) {\n        let json: unknown;\n        try {\n          json = JSON.parse(rawBody);\n        } catch (cause) {\n          throw new DataApiError({\n            message: \"reopt-data returned a 2xx with an unparseable body\",\n            status: response.status,\n            code: \"contract_mismatch\",\n            requestId,\n            details: cause,\n          });\n        }\n\n        try {\n          return parse(json);\n        } catch (cause) {\n          throw new DataApiError({\n            message: \"reopt-data returned a 2xx that does not match the contract\",\n            status: response.status,\n            code: \"contract_mismatch\",\n            requestId,\n            details: cause,\n          });\n        }\n      }\n\n      const retryAfterMs = retry.respectRetryAfter ? parseRetryAfter(response.headers.get(\"retry-after\")) : undefined;\n      lastError = toApiError(response.status, rawBody, retryAfterMs, requestId);\n\n      if (!lastError.retryable || attempt === retry.maxRetries) throw lastError;\n      await sleep(retryAfterMs ?? backoffDelay(attempt, retry), signal);\n    }\n\n    /* c8 ignore next -- the loop either returns or throws */\n    throw lastError ?? new DataApiError({ message: \"reopt-data request failed\", status: 0, code: \"network_error\" });\n  }\n\n  /**\n   * The ingest and query planes; both require client credentials.\n   *\n   * `async` so a missing credential rejects rather than throwing\n   * synchronously — an async method that sometimes throws before returning a\n   * promise slips past every `.catch()` a caller writes.\n   */\n  async function post<T>(path: string, body: unknown, parse: (value: unknown) => T, signal?: AbortSignal): Promise<T> {\n    requireClientCredentials();\n    return send(\"POST\", path, body, parse, {}, signal);\n  }\n\n  return {\n    ingest: {\n      track(events, init) {\n        return post(TRACK_PATH, events, (value) => zIngestResponse.parse(value), init?.signal);\n      },\n    },\n    query: {\n      eventsTimeseries(input, init) {\n        return post(\n          QUERY_API_PATHS.eventsTimeseries,\n          input,\n          (value) => zEventsTimeseriesResponse.parse(value),\n          init?.signal\n        );\n      },\n      funnel(input, init) {\n        return post(QUERY_API_PATHS.funnel, input, (value) => zFunnelResponse.parse(value), init?.signal);\n      },\n      retention(input, init) {\n        return post(QUERY_API_PATHS.retention, input, (value) => zRetentionResponse.parse(value), init?.signal);\n      },\n      trafficOverview(input, init) {\n        return post(\n          QUERY_API_PATHS.trafficOverview,\n          input,\n          (value) => zTrafficOverviewResponse.parse(value),\n          init?.signal\n        );\n      },\n      trafficSources(input, init) {\n        return post(\n          QUERY_API_PATHS.trafficSources,\n          input,\n          (value) => zTrafficSourcesResponse.parse(value),\n          init?.signal\n        );\n      },\n    },\n    control: {\n      createOrganization(input, auth, init) {\n        return send(\n          \"POST\",\n          CONTROL_API_PATHS.organizations,\n          input,\n          (value) => zCreateOrganizationResponse.parse(value),\n          { [PLATFORM_KEY_HEADER]: auth.platformKey },\n          init?.signal\n        );\n      },\n      rotateOrgKey(organizationId, auth, init) {\n        return send(\n          \"POST\",\n          CONTROL_API_PATHS.organizationKeys(organizationId),\n          {},\n          (value) => zRotateOrganizationKeyResponse.parse(value),\n          { [PLATFORM_KEY_HEADER]: auth.platformKey },\n          init?.signal\n        );\n      },\n      updateOrganizationQuota(organizationId, input, auth, init) {\n        return send(\n          \"PATCH\",\n          CONTROL_API_PATHS.organization(organizationId),\n          input,\n          (value) => zUpdateOrganizationQuotaResponse.parse(value),\n          { [PLATFORM_KEY_HEADER]: auth.platformKey },\n          init?.signal\n        );\n      },\n      createProject(input, auth, init) {\n        return send(\n          \"POST\",\n          CONTROL_API_PATHS.projects,\n          input,\n          (value) => zCreateProjectResponse.parse(value),\n          { [ORG_KEY_HEADER]: auth.orgKey },\n          init?.signal\n        );\n      },\n      rotateServerClientSecret(projectId, clientId, auth, init) {\n        return send(\n          \"POST\",\n          CONTROL_API_PATHS.clientRotate(projectId, clientId),\n          {},\n          (value) => zRotateClientSecretResponse.parse(value),\n          { [ORG_KEY_HEADER]: auth.orgKey },\n          init?.signal\n        );\n      },\n      deleteProject(projectId, input, auth, init) {\n        return send(\n          \"DELETE\",\n          CONTROL_API_PATHS.project(projectId),\n          input,\n          (value) => zDeleteProjectResponse.parse(value),\n          { [ORG_KEY_HEADER]: auth.orgKey },\n          init?.signal\n        );\n      },\n      upsertEventMeta(projectId, name, input, auth, init) {\n        return send(\n          \"PUT\",\n          CONTROL_API_PATHS.projectEvent(projectId, name),\n          input,\n          (value) => zEventMetaResponse.parse(value),\n          { [ORG_KEY_HEADER]: auth.orgKey },\n          init?.signal\n        );\n      },\n    },\n  };\n}\n"]}
+{"version":3,"sources":["/Users/eric/reopt-ai/reopt-data/packages/data-contract/dist/client.cjs","../src/client.ts"],"names":[],"mappings":"AAAA;AACE;AACF,wDAA6B;AAC7B;AACE;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACF,wDAA6B;AAC7B;AACE;AACA;AACA;AACA;AACA;AACA;AACF,wDAA6B;AAC7B;AACE;AACF,wDAA6B;AAC7B,gCAA6B;AAC7B;AACE;AACA;AACA;AACA;AACA;AACF,wDAA6B;AAC7B,gCAA6B;AAC7B;AACA;AC4BA,IAAM,WAAA,EAAa,YAAA;AA6GnB,IAAM,SAAA,EAAW;AAAA,EACf,SAAA,EAAW,GAAA;AAAA,EACX,UAAA,EAAY,CAAA;AAAA,EACZ,WAAA,EAAa,GAAA;AAAA,EACb,UAAA,EAAY;AACd,CAAA;AAEA,SAAS,gBAAA,CAAiB,OAAA,EAAyB;AACjD,EAAA,OAAO,OAAA,CAAQ,OAAA,CAAQ,MAAA,EAAQ,EAAE,CAAA;AACnC;AAGA,SAAS,eAAA,CAAgB,MAAA,EAA2C;AAClE,EAAA,GAAA,CAAI,CAAC,MAAA,EAAQ,OAAO,KAAA,CAAA;AAEpB,EAAA,MAAM,QAAA,EAAU,MAAA,CAAO,MAAM,CAAA;AAC7B,EAAA,GAAA,CAAI,MAAA,CAAO,QAAA,CAAS,OAAO,EAAA,GAAK,QAAA,GAAW,CAAA,EAAG,OAAO,IAAA,CAAK,KAAA,CAAM,QAAA,EAAU,GAAI,CAAA;AAE9E,EAAA,MAAM,GAAA,EAAK,IAAA,CAAK,KAAA,CAAM,MAAM,CAAA;AAC5B,EAAA,GAAA,CAAI,MAAA,CAAO,QAAA,CAAS,EAAE,CAAA,EAAG,OAAO,IAAA,CAAK,GAAA,CAAI,CAAA,EAAG,GAAA,EAAK,IAAA,CAAK,GAAA,CAAI,CAAC,CAAA;AAE3D,EAAA,OAAO,KAAA,CAAA;AACT;AAEA,SAAS,KAAA,CAAM,EAAA,EAAY,MAAA,EAAqC;AAC9D,EAAA,OAAO,IAAI,OAAA,CAAQ,CAAC,OAAA,EAAS,MAAA,EAAA,GAAW;AACtC,IAAA,GAAA,iBAAI,MAAA,2BAAQ,SAAA,EAAS;AACnB,MAAA,MAAA,kBAAO,MAAA,CAAO,MAAA,UAAU,IAAI,KAAA,CAAM,SAAS,GAAC,CAAA;AAC5C,MAAA,MAAA;AAAA,IACF;AACA,IAAA,MAAM,MAAA,EAAQ,UAAA,CAAW,CAAA,EAAA,GAAM;AAC7B,sBAAA,MAAA,6BAAQ,mBAAA,mBAAoB,OAAA,EAAS,OAAO,GAAA;AAC5C,MAAA,OAAA,CAAQ,CAAA;AAAA,IACV,CAAA,EAAG,EAAE,CAAA;AACL,IAAA,MAAM,QAAA,EAAU,CAAA,EAAA,GAAM;AACpB,MAAA,YAAA,CAAa,KAAK,CAAA;AAClB,MAAA,MAAA,kCAAO,MAAA,6BAAQ,QAAA,UAAU,IAAI,KAAA,CAAM,SAAS,GAAC,CAAA;AAAA,IAC/C,CAAA;AACA,oBAAA,MAAA,6BAAQ,gBAAA,mBAAiB,OAAA,EAAS,OAAA,EAAS,EAAE,IAAA,EAAM,KAAK,CAAC,GAAA;AAAA,EAC3D,CAAC,CAAA;AACH;AAEA,SAAS,YAAA,CAAa,OAAA,EAAiB,KAAA,EAAiD;AACtF,EAAA,MAAM,YAAA,EAAc,KAAA,CAAM,YAAA,EAAc,EAAA,GAAK,OAAA;AAC7C,EAAA,MAAM,OAAA,EAAS,IAAA,CAAK,GAAA,CAAI,WAAA,EAAa,KAAA,CAAM,UAAU,CAAA;AAGrD,EAAA,OAAO,IAAA,CAAK,KAAA,CAAM,OAAA,EAAA,CAAU,IAAA,EAAM,IAAA,CAAK,MAAA,CAAO,EAAA,EAAI,GAAA,CAAI,CAAA;AACxD;AAOA,SAAS,UAAA,CACP,MAAA,EACA,OAAA,EACA,YAAA,EACA,SAAA,EACc;AACd,EAAA,IAAI,MAAA;AACJ,EAAA,IAAI;AACF,IAAA,OAAA,EAAS,IAAA,CAAK,KAAA,CAAM,OAAO,CAAA;AAAA,EAC7B,EAAA,UAAQ;AACN,IAAA,OAAO,IAAI,mCAAA,CAAa;AAAA,MACtB,OAAA,EAAS,CAAA,qBAAA,EAAwB,MAAM,CAAA,qBAAA,CAAA;AAAA,MACvC,MAAA;AAAA,MACA,IAAA,EAAM,OAAA,GAAU,IAAA,EAAM,iBAAA,EAAmB,eAAA;AAAA,MACzC,SAAA;AAAA,MACA,YAAA;AAAA,MACA,OAAA,EAAS,OAAA,CAAQ,KAAA,CAAM,CAAA,EAAG,GAAI;AAAA,IAChC,CAAC,CAAA;AAAA,EACH;AAEA,EAAA,MAAM,KAAA,mBAAQ,MAAA,UAAU,CAAC,GAAA;AACzB,EAAA,MAAM,KAAA,EAAO,OAAO,IAAA,CAAK,KAAA,IAAS,SAAA,EAAW,IAAA,CAAK,KAAA,EAAO,OAAA,GAAU,IAAA,EAAM,iBAAA,EAAmB,eAAA;AAC5F,EAAA,MAAM,QAAA,EACH,OAAO,IAAA,CAAK,QAAA,IAAY,SAAA,GAAY,IAAA,CAAK,QAAA,GACzC,OAAO,IAAA,CAAK,MAAA,IAAU,SAAA,GAAY,IAAA,CAAK,MAAA,GACxC,CAAA,qBAAA,EAAwB,MAAM,CAAA,CAAA;AAER,EAAA;AACtB,IAAA;AACA,IAAA;AACA,IAAA;AACgF,IAAA;AAChF,IAAA;AACwB,IAAA;AACzB,EAAA;AACH;AAEyE;AACvB,EAAA;AACJ,EAAA;AACT,EAAA;AAC6D,IAAA;AAChG,EAAA;AAEgD,EAAA;AACA,EAAA;AACI,IAAA;AACE,IAAA;AACF,IAAA;AACK,IAAA;AACzD,EAAA;AAI2C,EAAA;AAMqC,EAAA;AAC9B,IAAA;AACvB,MAAA;AAEnB,QAAA;AACM,QAAA;AACF,QAAA;AACP,MAAA;AACH,IAAA;AACwE,IAAA;AAC1E,EAAA;AAQqB,EAAA;AACoB,IAAA;AACzB,IAAA;AACyE,MAAA;AACrF,MAAA;AACF,IAAA;AACmF,IAAA;AACpB,oBAAA;AAE3D,IAAA;AACwC,MAAA;AACxC,QAAA;AACS,QAAA;AACS,UAAA;AACF,UAAA;AAGT,UAAA;AACF,UAAA;AACL,QAAA;AACyB,QAAA;AACN,QAAA;AACpB,MAAA;AACD,IAAA;AACkB,MAAA;AACgC,sBAAA;AACpD,IAAA;AACF,EAAA;AASc,EAAA;AACR,IAAA;AAE0D,IAAA;AACxD,MAAA;AACA,MAAA;AACmE,QAAA;AACvD,MAAA;AAEa,QAAA;AACE,QAAA;AACmC,UAAA;AACtD,UAAA;AACF,UAAA;AACG,UAAA;AACV,QAAA;AAC+B,QAAA;AACkB,UAAA;AAChD,UAAA;AACF,QAAA;AACM,QAAA;AACR,MAAA;AAE6D,MAAA;AACa,MAAA;AACtC,MAAA;AAEY,MAAA;AACvB,QAAA;AAGjB,UAAA;AACa,UAAA;AACX,UAAA;AACN,UAAA;AACuE,UAAA;AACxE,QAAA;AACH,MAAA;AAEiB,MAAA;AACX,QAAA;AACA,QAAA;AACuB,UAAA;AACX,QAAA;AACS,UAAA;AACZ,YAAA;AACQ,YAAA;AACX,YAAA;AACN,YAAA;AACS,YAAA;AACV,UAAA;AACH,QAAA;AAEI,QAAA;AACe,UAAA;AACH,QAAA;AACS,UAAA;AACZ,YAAA;AACQ,YAAA;AACX,YAAA;AACN,YAAA;AACS,YAAA;AACV,UAAA;AACH,QAAA;AACF,MAAA;AAEsG,MAAA;AAC9B,MAAA;AAER,MAAA;AACA,MAAA;AAClE,IAAA;AAG8G,IAAA;AAChH,EAAA;AASoH,EAAA;AACzF,IAAA;AACwB,IAAA;AACnD,EAAA;AAEO,EAAA;AACG,IAAA;AACc,MAAA;AACmE,QAAA;AACvF,MAAA;AACF,IAAA;AACO,IAAA;AACyB,MAAA;AACrB,QAAA;AACW,UAAA;AAChB,UAAA;AACgD,UAAA;AAC1C,0BAAA;AACR,QAAA;AACF,MAAA;AACoB,MAAA;AAC8E,QAAA;AAClG,MAAA;AACuB,MAAA;AACiF,QAAA;AACxG,MAAA;AAC6B,MAAA;AACpB,QAAA;AACW,UAAA;AAChB,UAAA;AAC+C,UAAA;AACzC,0BAAA;AACR,QAAA;AACF,MAAA;AAC4B,MAAA;AACnB,QAAA;AACW,UAAA;AAChB,UAAA;AAC8C,UAAA;AACxC,0BAAA;AACR,QAAA;AACF,MAAA;AACF,IAAA;AACS,IAAA;AAC+B,MAAA;AAC7B,QAAA;AACL,UAAA;AACkB,UAAA;AAClB,UAAA;AACkD,UAAA;AACR,UAAA;AACpC,0BAAA;AACR,QAAA;AACF,MAAA;AACyC,MAAA;AAChC,QAAA;AACL,UAAA;AACiD,UAAA;AAChD,UAAA;AACoD,UAAA;AACX,UAAA;AACpC,0BAAA;AACR,QAAA;AACF,MAAA;AAC2D,MAAA;AAClD,QAAA;AACL,UAAA;AAC6C,UAAA;AAC7C,UAAA;AACuD,UAAA;AACb,UAAA;AACpC,0BAAA;AACR,QAAA;AACF,MAAA;AACiC,MAAA;AACxB,QAAA;AACL,UAAA;AACkB,UAAA;AAClB,UAAA;AAC6C,UAAA;AACb,UAAA;AAC1B,0BAAA;AACR,QAAA;AACF,MAAA;AAC0D,MAAA;AACjD,QAAA;AACL,UAAA;AACkD,UAAA;AACjD,UAAA;AACiD,UAAA;AAClB,UAAA;AAC1B,0BAAA;AACR,QAAA;AACF,MAAA;AAC4C,MAAA;AACnC,QAAA;AACL,UAAA;AACmC,UAAA;AACnC,UAAA;AAC6C,UAAA;AACb,UAAA;AAC1B,0BAAA;AACR,QAAA;AACF,MAAA;AACoD,MAAA;AAC3C,QAAA;AACL,UAAA;AAC8C,UAAA;AAC9C,UAAA;AACyC,UAAA;AACT,UAAA;AAC1B,0BAAA;AACR,QAAA;AACF,MAAA;AACF,IAAA;AACF,EAAA;AACF;ADlNqJ;AACA;AACA","file":"/Users/eric/reopt-ai/reopt-data/packages/data-contract/dist/client.cjs","sourcesContent":[null,"/**\n * `createDataClient` — typed fetch over the ingest and query planes.\n *\n * Deliberately stateless: no queue, no buffer, no background flush. Batch\n * assembly and cursor management belong to the caller (a forwarder already has\n * a cursor and byte-batching; duplicating that here would give it two).\n *\n * Every response is parsed with the contract schema, so a server that drifts\n * from the contract surfaces as `contract_mismatch` instead of quietly\n * returning something the caller then mis-reads.\n */\nimport {\n  CLIENT_ID_HEADER,\n  CLIENT_SECRET_HEADER,\n  CONTRACT_VERSION,\n  CONTRACT_VERSION_HEADER,\n  DataApiError,\n  REQUEST_ID_HEADER,\n  type OptionalClientCredentials,\n} from \"./index.js\";\nimport { zIngestResponse, type IngestResponse, type ITrackHandlerPayload } from \"./ingest.js\";\nimport {\n  CONTROL_API_PATHS,\n  ORG_KEY_HEADER,\n  PLATFORM_KEY_HEADER,\n  zCreateOrganizationResponse,\n  zCreateProjectResponse,\n  zDeleteProjectResponse,\n  zRotateClientSecretResponse,\n  zRotateOrganizationKeyResponse,\n  zUpdateOrganizationQuotaResponse,\n  zEventMetaResponse,\n  type CreateOrganizationInput,\n  type EventMetaResponse,\n  type UpsertEventMetaInput,\n  type CreateOrganizationResponse,\n  type CreateProjectInput,\n  type CreateProjectResponse,\n  type DeleteProjectInput,\n  type DeleteProjectResponse,\n  type RotateClientSecretResponse,\n  type RotateOrganizationKeyResponse,\n  type UpdateOrganizationQuotaInput,\n  type UpdateOrganizationQuotaResponse,\n} from \"./control.js\";\nimport {\n  QUERY_API_PATHS,\n  zEventsTimeseriesResponse,\n  zFunnelResponse,\n  zRetentionResponse,\n  zTrafficOverviewResponse,\n  zTrafficSourcesResponse,\n  type EventsTimeseriesInput,\n  type EventsTimeseriesResponse,\n  type FunnelInput,\n  type FunnelResponse,\n  type RetentionInput,\n  type RetentionResponse,\n  type TrafficOverviewInput,\n  type TrafficOverviewResponse,\n  type TrafficSourcesInput,\n  type TrafficSourcesResponse,\n} from \"./query.js\";\n\nconst TRACK_PATH = \"/api/track\";\n\nexport interface DataClientRetryOptions {\n  /** Attempts after the first. Only 429 and 5xx are retried. Default 2. */\n  maxRetries?: number;\n  /** First backoff step; doubles each attempt, with jitter. Default 500ms. */\n  baseDelayMs?: number;\n  /** Cap on a single backoff step. Default 20s. */\n  maxDelayMs?: number;\n  /** Prefer the server's `Retry-After` over the computed backoff. Default true. */\n  respectRetryAfter?: boolean;\n}\n\nexport interface DataClientOptions extends OptionalClientCredentials {\n  /** Origin of the reopt-data deployment, e.g. `https://data.reopt.app`. Trailing slash ignored. */\n  baseUrl: string;\n  /** Injected so callers can pass a framework-instrumented fetch. Defaults to `globalThis.fetch`. */\n  fetch?: typeof globalThis.fetch;\n  /** Per-attempt timeout. Default 10s. */\n  timeoutMs?: number;\n  retry?: DataClientRetryOptions;\n  /** Appended to the default `reopt-data-contract/<version>`. */\n  userAgent?: string;\n}\n\nexport interface DataRequestInit {\n  signal?: AbortSignal;\n}\n\n/**\n * Provisioning credentials are passed per call rather than held on the client,\n * because they are a different authority from the client credential the rest of\n * the surface uses — and because a long-lived object holding the platform key\n * is a wider blast radius than a value the caller reads at the moment it needs\n * it.\n */\nexport interface PlatformAuth {\n  platformKey: string;\n}\n\nexport interface OrganizationAuth {\n  orgKey: string;\n}\n\nexport interface DataClient {\n  ingest: {\n    /**\n     * `POST /api/track`. Send events as one batch; splitting to stay under\n     * the 512KB body cap is the caller's job, since only the caller knows how\n     * to resume a partially-sent range.\n     */\n    track(events: ITrackHandlerPayload[], init?: DataRequestInit): Promise<IngestResponse>;\n  };\n  query: {\n    eventsTimeseries(input: EventsTimeseriesInput, init?: DataRequestInit): Promise<EventsTimeseriesResponse>;\n    funnel(input: FunnelInput, init?: DataRequestInit): Promise<FunnelResponse>;\n    retention(input: RetentionInput, init?: DataRequestInit): Promise<RetentionResponse>;\n    trafficOverview(input: TrafficOverviewInput, init?: DataRequestInit): Promise<TrafficOverviewResponse>;\n    trafficSources(input: TrafficSourcesInput, init?: DataRequestInit): Promise<TrafficSourcesResponse>;\n  };\n  control: {\n    /** Idempotent on `externalId`. `orgKey` comes back only on first creation. */\n    createOrganization(\n      input: CreateOrganizationInput,\n      auth: PlatformAuth,\n      init?: DataRequestInit\n    ): Promise<CreateOrganizationResponse>;\n    /** Issues a new key and revokes every previous one. The recovery path for a lost key. */\n    rotateOrgKey(\n      organizationId: string,\n      auth: PlatformAuth,\n      init?: DataRequestInit\n    ): Promise<RotateOrganizationKeyResponse>;\n    updateOrganizationQuota(\n      organizationId: string,\n      input: UpdateOrganizationQuotaInput,\n      auth: PlatformAuth,\n      init?: DataRequestInit\n    ): Promise<UpdateOrganizationQuotaResponse>;\n    /** Idempotent on `externalId`. `clientSecret` comes back only on first creation. */\n    createProject(\n      input: CreateProjectInput,\n      auth: OrganizationAuth,\n      init?: DataRequestInit\n    ): Promise<CreateProjectResponse>;\n    rotateServerClientSecret(\n      projectId: string,\n      clientId: string,\n      auth: OrganizationAuth,\n      init?: DataRequestInit\n    ): Promise<RotateClientSecretResponse>;\n    /** Irreversible. Idempotent: a project that is already gone still answers 202. */\n    deleteProject(\n      projectId: string,\n      input: DeleteProjectInput,\n      auth: OrganizationAuth,\n      init?: DataRequestInit\n    ): Promise<DeleteProjectResponse>;\n    /** Idempotent: a repeat with the same body changes nothing and answers 200. */\n    upsertEventMeta(\n      projectId: string,\n      name: string,\n      input: UpsertEventMetaInput,\n      auth: OrganizationAuth,\n      init?: DataRequestInit\n    ): Promise<EventMetaResponse>;\n  };\n}\n\nconst DEFAULTS = {\n  timeoutMs: 10_000,\n  maxRetries: 2,\n  baseDelayMs: 500,\n  maxDelayMs: 20_000,\n} as const;\n\nfunction normalizeBaseUrl(baseUrl: string): string {\n  return baseUrl.replace(/\\/+$/, \"\");\n}\n\n/** `Retry-After` is either delta-seconds or an HTTP date; both are legal. */\nfunction parseRetryAfter(header: string | null): number | undefined {\n  if (!header) return undefined;\n\n  const seconds = Number(header);\n  if (Number.isFinite(seconds) && seconds >= 0) return Math.round(seconds * 1000);\n\n  const at = Date.parse(header);\n  if (Number.isFinite(at)) return Math.max(0, at - Date.now());\n\n  return undefined;\n}\n\nfunction sleep(ms: number, signal?: AbortSignal): Promise<void> {\n  return new Promise((resolve, reject) => {\n    if (signal?.aborted) {\n      reject(signal.reason ?? new Error(\"Aborted\"));\n      return;\n    }\n    const timer = setTimeout(() => {\n      signal?.removeEventListener(\"abort\", onAbort);\n      resolve();\n    }, ms);\n    const onAbort = () => {\n      clearTimeout(timer);\n      reject(signal?.reason ?? new Error(\"Aborted\"));\n    };\n    signal?.addEventListener(\"abort\", onAbort, { once: true });\n  });\n}\n\nfunction backoffDelay(attempt: number, retry: Required<DataClientRetryOptions>): number {\n  const exponential = retry.baseDelayMs * 2 ** attempt;\n  const capped = Math.min(exponential, retry.maxDelayMs);\n  // Full jitter — a fleet of forwarders that all got 429 should not all come\n  // back at the same instant.\n  return Math.round(capped * (0.5 + Math.random() * 0.5));\n}\n\n/**\n * Body of a non-2xx response. Both planes share `{ status, code, error, ... }`,\n * so one reader covers them; anything else is reported as `internal_error`\n * with the raw text kept in `details`.\n */\nfunction toApiError(\n  status: number,\n  rawBody: string,\n  retryAfterMs: number | undefined,\n  requestId?: string\n): DataApiError {\n  let parsed: unknown;\n  try {\n    parsed = JSON.parse(rawBody);\n  } catch {\n    return new DataApiError({\n      message: `reopt-data responded ${status} with a non-JSON body`,\n      status,\n      code: status >= 500 ? \"internal_error\" : \"unknown_error\",\n      requestId,\n      retryAfterMs,\n      details: rawBody.slice(0, 2000),\n    });\n  }\n\n  const body = (parsed ?? {}) as Record<string, unknown>;\n  const code = typeof body.code === \"string\" ? body.code : status >= 500 ? \"internal_error\" : \"unknown_error\";\n  const message =\n    (typeof body.message === \"string\" && body.message) ||\n    (typeof body.error === \"string\" && body.error) ||\n    `reopt-data responded ${status}`;\n\n  return new DataApiError({\n    message,\n    status,\n    code,\n    requestId: (typeof body.requestId === \"string\" ? body.requestId : undefined) ?? requestId,\n    retryAfterMs,\n    details: body.errors ?? undefined,\n  });\n}\n\nexport function createDataClient(options: DataClientOptions): DataClient {\n  const baseUrl = normalizeBaseUrl(options.baseUrl);\n  const doFetch = options.fetch ?? globalThis.fetch;\n  if (typeof doFetch !== \"function\") {\n    throw new TypeError(\"createDataClient: no fetch implementation available — pass options.fetch\");\n  }\n\n  const timeoutMs = options.timeoutMs ?? DEFAULTS.timeoutMs;\n  const retry: Required<DataClientRetryOptions> = {\n    maxRetries: options.retry?.maxRetries ?? DEFAULTS.maxRetries,\n    baseDelayMs: options.retry?.baseDelayMs ?? DEFAULTS.baseDelayMs,\n    maxDelayMs: options.retry?.maxDelayMs ?? DEFAULTS.maxDelayMs,\n    respectRetryAfter: options.retry?.respectRetryAfter ?? true,\n  };\n\n  const userAgent = options.userAgent\n    ? `reopt-data-contract/${CONTRACT_VERSION} ${options.userAgent}`\n    : `reopt-data-contract/${CONTRACT_VERSION}`;\n\n  /**\n   * Client credentials, or a clear failure. The ingest and query planes cannot\n   * run without them; the provisioning plane never uses them.\n   */\n  function requireClientCredentials(): { clientId: string; clientSecret: string } {\n    if (!options.clientId || !options.clientSecret) {\n      throw new DataApiError({\n        message:\n          \"createDataClient was given no client credentials — pass clientId and clientSecret to use the ingest or query planes\",\n        status: 0,\n        code: \"credentials_missing\",\n      });\n    }\n    return { clientId: options.clientId, clientSecret: options.clientSecret };\n  }\n\n  async function requestOnce(\n    method: \"POST\" | \"PUT\" | \"PATCH\" | \"DELETE\",\n    path: string,\n    body: unknown,\n    extraHeaders: Record<string, string>,\n    signal?: AbortSignal\n  ): Promise<Response> {\n    const controller = new AbortController();\n    const timer = setTimeout(\n      () => controller.abort(new Error(`reopt-data request timed out after ${timeoutMs}ms`)),\n      timeoutMs\n    );\n    const onCallerAbort = () => controller.abort(signal?.reason ?? new Error(\"Aborted\"));\n    signal?.addEventListener(\"abort\", onCallerAbort, { once: true });\n\n    try {\n      return await doFetch(`${baseUrl}${path}`, {\n        method,\n        headers: {\n          \"content-type\": \"application/json\",\n          \"user-agent\": userAgent,\n          ...(options.clientId && options.clientSecret\n            ? { [CLIENT_ID_HEADER]: options.clientId, [CLIENT_SECRET_HEADER]: options.clientSecret }\n            : {}),\n          ...extraHeaders,\n        },\n        body: JSON.stringify(body),\n        signal: controller.signal,\n      });\n    } finally {\n      clearTimeout(timer);\n      signal?.removeEventListener(\"abort\", onCallerAbort);\n    }\n  }\n\n  async function send<T>(\n    method: \"POST\" | \"PUT\" | \"PATCH\" | \"DELETE\",\n    path: string,\n    body: unknown,\n    parse: (value: unknown) => T,\n    extraHeaders: Record<string, string> = {},\n    signal?: AbortSignal\n  ): Promise<T> {\n    let lastError: DataApiError | undefined;\n\n    for (let attempt = 0; attempt <= retry.maxRetries; attempt++) {\n      let response: Response;\n      try {\n        response = await requestOnce(method, path, body, extraHeaders, signal);\n      } catch (cause) {\n        // A caller-initiated abort is not a transport failure — propagate it.\n        if (signal?.aborted) throw cause;\n        lastError = new DataApiError({\n          message: cause instanceof Error ? cause.message : String(cause),\n          status: 0,\n          code: \"network_error\",\n          details: cause,\n        });\n        if (attempt < retry.maxRetries) {\n          await sleep(backoffDelay(attempt, retry), signal);\n          continue;\n        }\n        throw lastError;\n      }\n\n      const requestId = response.headers.get(REQUEST_ID_HEADER) ?? undefined;\n      const serverContractVersion = response.headers.get(CONTRACT_VERSION_HEADER);\n      const rawBody = await response.text();\n\n      if (serverContractVersion !== CONTRACT_VERSION) {\n        throw new DataApiError({\n          message: serverContractVersion\n            ? `reopt-data contract ${serverContractVersion} does not match client contract ${CONTRACT_VERSION}`\n            : \"reopt-data response did not declare its contract version\",\n          status: response.status,\n          code: \"contract_mismatch\",\n          requestId,\n          details: { expected: CONTRACT_VERSION, received: serverContractVersion },\n        });\n      }\n\n      if (response.ok) {\n        let json: unknown;\n        try {\n          json = JSON.parse(rawBody);\n        } catch (cause) {\n          throw new DataApiError({\n            message: \"reopt-data returned a 2xx with an unparseable body\",\n            status: response.status,\n            code: \"contract_mismatch\",\n            requestId,\n            details: cause,\n          });\n        }\n\n        try {\n          return parse(json);\n        } catch (cause) {\n          throw new DataApiError({\n            message: \"reopt-data returned a 2xx that does not match the contract\",\n            status: response.status,\n            code: \"contract_mismatch\",\n            requestId,\n            details: cause,\n          });\n        }\n      }\n\n      const retryAfterMs = retry.respectRetryAfter ? parseRetryAfter(response.headers.get(\"retry-after\")) : undefined;\n      lastError = toApiError(response.status, rawBody, retryAfterMs, requestId);\n\n      if (!lastError.retryable || attempt === retry.maxRetries) throw lastError;\n      await sleep(retryAfterMs ?? backoffDelay(attempt, retry), signal);\n    }\n\n    /* c8 ignore next -- the loop either returns or throws */\n    throw lastError ?? new DataApiError({ message: \"reopt-data request failed\", status: 0, code: \"network_error\" });\n  }\n\n  /**\n   * The ingest and query planes; both require client credentials.\n   *\n   * `async` so a missing credential rejects rather than throwing\n   * synchronously — an async method that sometimes throws before returning a\n   * promise slips past every `.catch()` a caller writes.\n   */\n  async function post<T>(path: string, body: unknown, parse: (value: unknown) => T, signal?: AbortSignal): Promise<T> {\n    requireClientCredentials();\n    return send(\"POST\", path, body, parse, {}, signal);\n  }\n\n  return {\n    ingest: {\n      track(events, init) {\n        return post(TRACK_PATH, events, (value) => zIngestResponse.parse(value), init?.signal);\n      },\n    },\n    query: {\n      eventsTimeseries(input, init) {\n        return post(\n          QUERY_API_PATHS.eventsTimeseries,\n          input,\n          (value) => zEventsTimeseriesResponse.parse(value),\n          init?.signal\n        );\n      },\n      funnel(input, init) {\n        return post(QUERY_API_PATHS.funnel, input, (value) => zFunnelResponse.parse(value), init?.signal);\n      },\n      retention(input, init) {\n        return post(QUERY_API_PATHS.retention, input, (value) => zRetentionResponse.parse(value), init?.signal);\n      },\n      trafficOverview(input, init) {\n        return post(\n          QUERY_API_PATHS.trafficOverview,\n          input,\n          (value) => zTrafficOverviewResponse.parse(value),\n          init?.signal\n        );\n      },\n      trafficSources(input, init) {\n        return post(\n          QUERY_API_PATHS.trafficSources,\n          input,\n          (value) => zTrafficSourcesResponse.parse(value),\n          init?.signal\n        );\n      },\n    },\n    control: {\n      createOrganization(input, auth, init) {\n        return send(\n          \"POST\",\n          CONTROL_API_PATHS.organizations,\n          input,\n          (value) => zCreateOrganizationResponse.parse(value),\n          { [PLATFORM_KEY_HEADER]: auth.platformKey },\n          init?.signal\n        );\n      },\n      rotateOrgKey(organizationId, auth, init) {\n        return send(\n          \"POST\",\n          CONTROL_API_PATHS.organizationKeys(organizationId),\n          {},\n          (value) => zRotateOrganizationKeyResponse.parse(value),\n          { [PLATFORM_KEY_HEADER]: auth.platformKey },\n          init?.signal\n        );\n      },\n      updateOrganizationQuota(organizationId, input, auth, init) {\n        return send(\n          \"PATCH\",\n          CONTROL_API_PATHS.organization(organizationId),\n          input,\n          (value) => zUpdateOrganizationQuotaResponse.parse(value),\n          { [PLATFORM_KEY_HEADER]: auth.platformKey },\n          init?.signal\n        );\n      },\n      createProject(input, auth, init) {\n        return send(\n          \"POST\",\n          CONTROL_API_PATHS.projects,\n          input,\n          (value) => zCreateProjectResponse.parse(value),\n          { [ORG_KEY_HEADER]: auth.orgKey },\n          init?.signal\n        );\n      },\n      rotateServerClientSecret(projectId, clientId, auth, init) {\n        return send(\n          \"POST\",\n          CONTROL_API_PATHS.clientRotate(projectId, clientId),\n          {},\n          (value) => zRotateClientSecretResponse.parse(value),\n          { [ORG_KEY_HEADER]: auth.orgKey },\n          init?.signal\n        );\n      },\n      deleteProject(projectId, input, auth, init) {\n        return send(\n          \"DELETE\",\n          CONTROL_API_PATHS.project(projectId),\n          input,\n          (value) => zDeleteProjectResponse.parse(value),\n          { [ORG_KEY_HEADER]: auth.orgKey },\n          init?.signal\n        );\n      },\n      upsertEventMeta(projectId, name, input, auth, init) {\n        return send(\n          \"PUT\",\n          CONTROL_API_PATHS.projectEvent(projectId, name),\n          input,\n          (value) => zEventMetaResponse.parse(value),\n          { [ORG_KEY_HEADER]: auth.orgKey },\n          init?.signal\n        );\n      },\n    },\n  };\n}\n"]}

package/dist/client.d.cts

@@ -3,6 +3,8 @@ import { ITrackHandlerPayload, IngestResponse } from './ingest.cjs';
 import { CreateOrganizationInput, CreateOrganizationResponse, RotateOrganizationKeyResponse, UpdateOrganizationQuotaInput, UpdateOrganizationQuotaResponse, CreateProjectInput, CreateProjectResponse, RotateClientSecretResponse, DeleteProjectInput, DeleteProjectResponse, UpsertEventMetaInput, EventMetaResponse } from './control.cjs';
 import { EventsTimeseriesInput, EventsTimeseriesResponse, FunnelInput, FunnelResponse, RetentionInput, RetentionResponse, TrafficOverviewInput, TrafficOverviewResponse, TrafficSourcesInput, TrafficSourcesResponse } from './query.cjs';
 import 'zod';
+import './version-BzeRTpta.cjs';
+import './events.cjs';
 
 /**
  * `createDataClient` — typed fetch over the ingest and query planes.

package/dist/client.d.ts

@@ -3,6 +3,8 @@ import { ITrackHandlerPayload, IngestResponse } from './ingest.js';
 import { CreateOrganizationInput, CreateOrganizationResponse, RotateOrganizationKeyResponse, UpdateOrganizationQuotaInput, UpdateOrganizationQuotaResponse, CreateProjectInput, CreateProjectResponse, RotateClientSecretResponse, DeleteProjectInput, DeleteProjectResponse, UpsertEventMetaInput, EventMetaResponse } from './control.js';
 import { EventsTimeseriesInput, EventsTimeseriesResponse, FunnelInput, FunnelResponse, RetentionInput, RetentionResponse, TrafficOverviewInput, TrafficOverviewResponse, TrafficSourcesInput, TrafficSourcesResponse } from './query.js';
 import 'zod';
+import './version-BzeRTpta.js';
+import './events.js';
 
 /**
  * `createDataClient` — typed fetch over the ingest and query planes.

package/dist/client.js

@@ -1,6 +1,6 @@
 import {
   zIngestResponse
-} from "./chunk-MFZEIH5Z.js";
+} from "./chunk-EZ2TA4S6.js";
 import {
   CONTROL_API_PATHS,
   ORG_KEY_HEADER,
@@ -12,7 +12,7 @@ import {
   zRotateClientSecretResponse,
   zRotateOrganizationKeyResponse,
   zUpdateOrganizationQuotaResponse
-} from "./chunk-AHXPQQKO.js";
+} from "./chunk-IY4MXH35.js";
 import {
   QUERY_API_PATHS,
   zEventsTimeseriesResponse,
@@ -20,15 +20,19 @@ import {
   zRetentionResponse,
   zTrafficOverviewResponse,
   zTrafficSourcesResponse
-} from "./chunk-BCGR27G2.js";
+} from "./chunk-L3WJGIKD.js";
+import {
+  DataApiError
+} from "./chunk-33BCA2LH.js";
+import "./chunk-GCQZNME3.js";
 import {
   CLIENT_ID_HEADER,
   CLIENT_SECRET_HEADER,
   CONTRACT_VERSION,
   CONTRACT_VERSION_HEADER,
-  DataApiError,
   REQUEST_ID_HEADER
-} from "./chunk-2LZBZXBF.js";
+} from "./chunk-HLQAZ6JW.js";
+import "./chunk-FP2X3PRK.js";
 
 // src/client.ts
 var TRACK_PATH = "/api/track";