@scalemule/nextjs 0.1.26 → 0.1.27

package/dist/index.d.mts

@@ -9,6 +9,19 @@ export { ClientConfig, RequestOptions, createClient } from './client.mjs';
 import { S as ScaleMuleConfig, U as User, L as LoginResponse, A as ApiError$1, a as UseAuthReturn, b as UseBillingReturn, c as ListFilesParams, d as UseContentReturn, e as UseUserReturn, f as UseAnalyticsOptions, g as UseAnalyticsReturn } from './index-zQloSkpW.mjs';
 export { h as AccountBalance, i as AnalyticsEvent, j as ApiResponse, B as BatchTrackRequest, k as BillingPayment, l as BillingPayout, m as BillingRefund, n as BillingTransaction, C as ChangeEmailRequest, o as ChangePasswordRequest, p as ClientContext, q as ConnectedAccount, D as DeviceFingerprint, r as DeviceInfo, E as EnhancedAnalyticsEvent, F as ForgotPasswordRequest, K as KnownAccountInfo, s as LinkedAccount, t as ListFilesResponse, u as LoginDeviceInfo, v as LoginRequest, w as LoginResponseWithMFA, x as LoginRiskInfo, M as MFAChallengeResponse, y as MFAMethod, z as MFASMSSetupResponse, G as MFASetupRequest, H as MFAStatus, I as MFATOTPSetupResponse, J as MFAVerifyRequest, O as OAuthCallbackRequest, N as OAuthCallbackResponse, P as OAuthConfig, Q as OAuthProvider, R as OAuthStartResponse, T as PageViewData, V as PayoutSchedule, W as PhoneLoginRequest, X as PhoneSendCodeRequest, Y as PhoneVerifyRequest, Z as Profile, _ as RefreshResponse, $ as RegisterRequest, a0 as ResetPasswordRequest, a1 as ScaleMuleApiError, a2 as ScaleMuleEnvironment, a3 as Session, a4 as SignedUploadCompleteRequest, a5 as SignedUploadRequest, a6 as SignedUploadResponse, a7 as SignedUploadUrl, a8 as StorageAdapter, a9 as StorageFile, aa as TrackEventResponse, ab as TransactionSummary, ac as UTMParams, ad as UpdateProfileRequest, ae as UploadOptions, af as UploadResponse, ag as VerifyEmailRequest } from './index-zQloSkpW.mjs';
 
+/**
+ * Tri-state file visibility — `'private' | 'app_public' | 'anonymous_visible'`.
+ *
+ * Locally redeclared here rather than imported from `@scalemule/sdk`
+ * so this package can ship before the sdk's `Visibility` export is
+ * published. Once `@scalemule/sdk` ≥ the version that exports
+ * `Visibility` is the minimum dep version, swap this for an `import
+ * type { Visibility } from '@scalemule/sdk'`.
+ *
+ * Keep the union members in lockstep with the storage migration's
+ * ENUM and the SDK's typed export.
+ */
+type Visibility = 'private' | 'app_public' | 'anonymous_visible';
 /**
  * Result of a single {@link useMedia} upload call.
  *
@@ -33,8 +46,24 @@ interface MediaUploadResult {
     hls_url_promise: Promise<string | null>;
     /** The file's MIME type — preserved from the input File / Blob. */
     mime_type: string;
-    /** Whether the resulting storage object is public-readable. */
+    /** Whether the resulting storage object is public-readable.
+     * Derived from `visibility !== 'private'` for back-compat with
+     * callers that still branch on the boolean. */
     is_public: boolean;
+    /**
+     * Resolved tri-state visibility from the storage service. Use this
+     * over `is_public` for new code — `is_public: true` covers both
+     * `'app_public'` (auth-gated CDN) and `'anonymous_visible'`
+     * (unsigned public CDN), which have different delivery contracts.
+     */
+    visibility: Visibility;
+    /**
+     * Stable unsigned public-CDN URL — populated only when
+     * `visibility === 'anonymous_visible'`. Drop directly into
+     * `<img src>` on logged-out pages. For other visibilities use
+     * `original_view_url` (signed) or the photo transform URL.
+     */
+    cdn_url: string | null;
 }
 /**
  * Per-app media-pipeline policy. Drives release-gating + processing
@@ -55,10 +84,34 @@ interface MediaUploadResult {
  */
 type MediaPolicy = 'fast_trusted' | 'safe_visible' | 'safe_public' | 'moderated' | 'compliance';
 interface UseMediaUploadOptions {
-    /** Whether the resulting storage object should be public-readable.
+    /**
+     * Tri-state visibility (preferred — see {@link Visibility} in
+     * `@scalemule/sdk`). Three modes:
+     *   - `'private'`           — owner + app members only (DEFAULT)
+     *   - `'app_public'`        — readable by any authenticated end-user
+     *                             in the same application; same semantics
+     *                             the legacy `is_public: true` flag has
+     *                             always had
+     *   - `'anonymous_visible'` — world-readable on the unsigned public
+     *                             CDN. Returned `cdn_url` is safe to drop
+     *                             into `<img src>` on a logged-out page.
+     *
+     * If both `visibility` and `is_public` are passed, `visibility`
+     * wins. `'anonymous_visible'` requires the operator to have
+     * provisioned the anonymous-delivery bucket — the storage service
+     * surfaces 503 `ANONYMOUS_DELIVERY_NOT_CONFIGURED` otherwise (the
+     * SDK never silently demotes).
+     */
+    visibility?: Visibility;
+    /**
+     * Legacy two-state visibility flag. `true` → `app_public`; `false`
+     * → `private`. Prefer the typed `visibility` field for new code —
+     * `is_public: true` cannot express `anonymous_visible`.
+     *
      * Default: `false` (private). Public is opt-in for surfaces that
      * genuinely need it (avatars, public listings). Chat / DM uploads
-     * should always be private. */
+     * should always be private.
+     */
     is_public?: boolean;
     /**
      * Per-call media-policy override. Defaults to `safe_visible` (visible

package/dist/index.d.ts

@@ -9,6 +9,19 @@ export { ClientConfig, RequestOptions, createClient } from './client.js';
 import { S as ScaleMuleConfig, U as User, L as LoginResponse, A as ApiError$1, a as UseAuthReturn, b as UseBillingReturn, c as ListFilesParams, d as UseContentReturn, e as UseUserReturn, f as UseAnalyticsOptions, g as UseAnalyticsReturn } from './index-zQloSkpW.js';
 export { h as AccountBalance, i as AnalyticsEvent, j as ApiResponse, B as BatchTrackRequest, k as BillingPayment, l as BillingPayout, m as BillingRefund, n as BillingTransaction, C as ChangeEmailRequest, o as ChangePasswordRequest, p as ClientContext, q as ConnectedAccount, D as DeviceFingerprint, r as DeviceInfo, E as EnhancedAnalyticsEvent, F as ForgotPasswordRequest, K as KnownAccountInfo, s as LinkedAccount, t as ListFilesResponse, u as LoginDeviceInfo, v as LoginRequest, w as LoginResponseWithMFA, x as LoginRiskInfo, M as MFAChallengeResponse, y as MFAMethod, z as MFASMSSetupResponse, G as MFASetupRequest, H as MFAStatus, I as MFATOTPSetupResponse, J as MFAVerifyRequest, O as OAuthCallbackRequest, N as OAuthCallbackResponse, P as OAuthConfig, Q as OAuthProvider, R as OAuthStartResponse, T as PageViewData, V as PayoutSchedule, W as PhoneLoginRequest, X as PhoneSendCodeRequest, Y as PhoneVerifyRequest, Z as Profile, _ as RefreshResponse, $ as RegisterRequest, a0 as ResetPasswordRequest, a1 as ScaleMuleApiError, a2 as ScaleMuleEnvironment, a3 as Session, a4 as SignedUploadCompleteRequest, a5 as SignedUploadRequest, a6 as SignedUploadResponse, a7 as SignedUploadUrl, a8 as StorageAdapter, a9 as StorageFile, aa as TrackEventResponse, ab as TransactionSummary, ac as UTMParams, ad as UpdateProfileRequest, ae as UploadOptions, af as UploadResponse, ag as VerifyEmailRequest } from './index-zQloSkpW.js';
 
+/**
+ * Tri-state file visibility — `'private' | 'app_public' | 'anonymous_visible'`.
+ *
+ * Locally redeclared here rather than imported from `@scalemule/sdk`
+ * so this package can ship before the sdk's `Visibility` export is
+ * published. Once `@scalemule/sdk` ≥ the version that exports
+ * `Visibility` is the minimum dep version, swap this for an `import
+ * type { Visibility } from '@scalemule/sdk'`.
+ *
+ * Keep the union members in lockstep with the storage migration's
+ * ENUM and the SDK's typed export.
+ */
+type Visibility = 'private' | 'app_public' | 'anonymous_visible';
 /**
  * Result of a single {@link useMedia} upload call.
  *
@@ -33,8 +46,24 @@ interface MediaUploadResult {
     hls_url_promise: Promise<string | null>;
     /** The file's MIME type — preserved from the input File / Blob. */
     mime_type: string;
-    /** Whether the resulting storage object is public-readable. */
+    /** Whether the resulting storage object is public-readable.
+     * Derived from `visibility !== 'private'` for back-compat with
+     * callers that still branch on the boolean. */
     is_public: boolean;
+    /**
+     * Resolved tri-state visibility from the storage service. Use this
+     * over `is_public` for new code — `is_public: true` covers both
+     * `'app_public'` (auth-gated CDN) and `'anonymous_visible'`
+     * (unsigned public CDN), which have different delivery contracts.
+     */
+    visibility: Visibility;
+    /**
+     * Stable unsigned public-CDN URL — populated only when
+     * `visibility === 'anonymous_visible'`. Drop directly into
+     * `<img src>` on logged-out pages. For other visibilities use
+     * `original_view_url` (signed) or the photo transform URL.
+     */
+    cdn_url: string | null;
 }
 /**
  * Per-app media-pipeline policy. Drives release-gating + processing
@@ -55,10 +84,34 @@ interface MediaUploadResult {
  */
 type MediaPolicy = 'fast_trusted' | 'safe_visible' | 'safe_public' | 'moderated' | 'compliance';
 interface UseMediaUploadOptions {
-    /** Whether the resulting storage object should be public-readable.
+    /**
+     * Tri-state visibility (preferred — see {@link Visibility} in
+     * `@scalemule/sdk`). Three modes:
+     *   - `'private'`           — owner + app members only (DEFAULT)
+     *   - `'app_public'`        — readable by any authenticated end-user
+     *                             in the same application; same semantics
+     *                             the legacy `is_public: true` flag has
+     *                             always had
+     *   - `'anonymous_visible'` — world-readable on the unsigned public
+     *                             CDN. Returned `cdn_url` is safe to drop
+     *                             into `<img src>` on a logged-out page.
+     *
+     * If both `visibility` and `is_public` are passed, `visibility`
+     * wins. `'anonymous_visible'` requires the operator to have
+     * provisioned the anonymous-delivery bucket — the storage service
+     * surfaces 503 `ANONYMOUS_DELIVERY_NOT_CONFIGURED` otherwise (the
+     * SDK never silently demotes).
+     */
+    visibility?: Visibility;
+    /**
+     * Legacy two-state visibility flag. `true` → `app_public`; `false`
+     * → `private`. Prefer the typed `visibility` field for new code —
+     * `is_public: true` cannot express `anonymous_visible`.
+     *
      * Default: `false` (private). Public is opt-in for surfaces that
      * genuinely need it (avatars, public listings). Chat / DM uploads
-     * should always be private. */
+     * should always be private.
+     */
     is_public?: boolean;
     /**
      * Per-call media-policy override. Defaults to `safe_visible` (visible

package/dist/index.js

@@ -9544,7 +9544,9 @@ function useMedia() {
     async (file, options) => {
       setUploading(true);
       setError(null);
-      const isPublic = options?.is_public ?? false;
+      const visibility = options?.visibility ?? (options?.is_public === true ? "app_public" : options?.is_public === false ? "private" : "private");
+      const isPublic = visibility !== "private";
+      const isAnonymous = visibility === "anonymous_visible";
       const mimeType = file.type || "application/octet-stream";
       const policy = options?.policy ?? providerDefaultPolicy ?? "safe_visible";
       const gateOnPipeline = policy === "safe_public" || policy === "moderated" || policy === "compliance";
@@ -9554,7 +9556,31 @@ function useMedia() {
         onProgress: options?.onProgress,
         signal: options?.signal
       };
+      const storageAnon = storage;
       try {
+        if (isAnonymous) {
+          const r2 = await storageAnon.uploadAnonymous(file, sharedOpts);
+          if (r2.error || !r2.data) {
+            throw r2.error ?? { code: "upload_error", message: "Upload failed", status: 0 };
+          }
+          const f2 = r2.data;
+          return {
+            file_id: f2.id,
+            photo_id: null,
+            // For anon files, original_view_url is the same unsigned
+            // CDN URL — no signed alternative exists. Callers should
+            // prefer `cdn_url` (more specific) but `original_view_url`
+            // works too for back-compat with code that already reads
+            // that field.
+            original_view_url: f2.cdn_url ?? null,
+            optimized_url_promise: Promise.resolve(null),
+            hls_url_promise: Promise.resolve(null),
+            mime_type: mimeType,
+            is_public: true,
+            visibility: "anonymous_visible",
+            cdn_url: f2.cdn_url ?? null
+          };
+        }
         if (mimeType.startsWith("image/") && !options?.skipPhotoRegister && !isPublic) {
           const r2 = await photo.uploadViaStorage(file, sharedOpts);
           if (r2.error || !r2.data) {
@@ -9570,7 +9596,9 @@ function useMedia() {
             optimized_url_promise: r2.data.optimized_url_promise,
             hls_url_promise: Promise.resolve(null),
             mime_type: mimeType,
-            is_public: false
+            is_public: false,
+            visibility: "private",
+            cdn_url: null
           };
         }
         if (mimeType.startsWith("video/") && !isPublic) {
@@ -9588,7 +9616,9 @@ function useMedia() {
             optimized_url_promise: Promise.resolve(null),
             hls_url_promise: r2.data.hls_url_promise,
             mime_type: mimeType,
-            is_public: false
+            is_public: false,
+            visibility: "private",
+            cdn_url: null
           };
         }
         if (mimeType.startsWith("audio/") && !isPublic) {
@@ -9603,13 +9633,15 @@ function useMedia() {
             optimized_url_promise: Promise.resolve(null),
             hls_url_promise: Promise.resolve(null),
             mime_type: mimeType,
-            is_public: false
+            is_public: false,
+            visibility: "private",
+            cdn_url: null
           };
         }
         if (mimeType.startsWith("image/") && isPublic) {
           const r2 = await storage.upload(file, {
             ...sharedOpts,
-            isPublic: true,
+            visibility: "app_public",
             skipCompression: true
           });
           if (r2.error || !r2.data) {
@@ -9623,10 +9655,16 @@ function useMedia() {
             optimized_url_promise: Promise.resolve(null),
             hls_url_promise: Promise.resolve(null),
             mime_type: mimeType,
-            is_public: f2.is_public ?? true
+            is_public: f2.is_public ?? true,
+            visibility: f2.visibility ?? "app_public",
+            cdn_url: f2.cdn_url ?? null
           };
         }
-        const r = isPublic ? await storage.upload(file, { ...sharedOpts, isPublic: true, skipCompression: true }) : await storage.uploadPrivate(file, sharedOpts);
+        const r = isPublic ? await storage.upload(file, {
+          ...sharedOpts,
+          visibility: "app_public",
+          skipCompression: true
+        }) : await storage.uploadPrivate(file, sharedOpts);
         if (r.error || !r.data) {
           throw r.error ?? { code: "upload_error", message: "Upload failed", status: 0 };
         }
@@ -9638,7 +9676,9 @@ function useMedia() {
           optimized_url_promise: Promise.resolve(null),
           hls_url_promise: Promise.resolve(null),
           mime_type: mimeType,
-          is_public: f.is_public ?? isPublic
+          is_public: f.is_public ?? isPublic,
+          visibility: f.visibility ?? (isPublic ? "app_public" : "private"),
+          cdn_url: f.cdn_url ?? null
         };
       } catch (err) {
         const e = err;

package/dist/index.mjs

@@ -9524,7 +9524,9 @@ function useMedia() {
     async (file, options) => {
       setUploading(true);
       setError(null);
-      const isPublic = options?.is_public ?? false;
+      const visibility = options?.visibility ?? (options?.is_public === true ? "app_public" : options?.is_public === false ? "private" : "private");
+      const isPublic = visibility !== "private";
+      const isAnonymous = visibility === "anonymous_visible";
       const mimeType = file.type || "application/octet-stream";
       const policy = options?.policy ?? providerDefaultPolicy ?? "safe_visible";
       const gateOnPipeline = policy === "safe_public" || policy === "moderated" || policy === "compliance";
@@ -9534,7 +9536,31 @@ function useMedia() {
         onProgress: options?.onProgress,
         signal: options?.signal
       };
+      const storageAnon = storage;
       try {
+        if (isAnonymous) {
+          const r2 = await storageAnon.uploadAnonymous(file, sharedOpts);
+          if (r2.error || !r2.data) {
+            throw r2.error ?? { code: "upload_error", message: "Upload failed", status: 0 };
+          }
+          const f2 = r2.data;
+          return {
+            file_id: f2.id,
+            photo_id: null,
+            // For anon files, original_view_url is the same unsigned
+            // CDN URL — no signed alternative exists. Callers should
+            // prefer `cdn_url` (more specific) but `original_view_url`
+            // works too for back-compat with code that already reads
+            // that field.
+            original_view_url: f2.cdn_url ?? null,
+            optimized_url_promise: Promise.resolve(null),
+            hls_url_promise: Promise.resolve(null),
+            mime_type: mimeType,
+            is_public: true,
+            visibility: "anonymous_visible",
+            cdn_url: f2.cdn_url ?? null
+          };
+        }
         if (mimeType.startsWith("image/") && !options?.skipPhotoRegister && !isPublic) {
           const r2 = await photo.uploadViaStorage(file, sharedOpts);
           if (r2.error || !r2.data) {
@@ -9550,7 +9576,9 @@ function useMedia() {
             optimized_url_promise: r2.data.optimized_url_promise,
             hls_url_promise: Promise.resolve(null),
             mime_type: mimeType,
-            is_public: false
+            is_public: false,
+            visibility: "private",
+            cdn_url: null
           };
         }
         if (mimeType.startsWith("video/") && !isPublic) {
@@ -9568,7 +9596,9 @@ function useMedia() {
             optimized_url_promise: Promise.resolve(null),
             hls_url_promise: r2.data.hls_url_promise,
             mime_type: mimeType,
-            is_public: false
+            is_public: false,
+            visibility: "private",
+            cdn_url: null
           };
         }
         if (mimeType.startsWith("audio/") && !isPublic) {
@@ -9583,13 +9613,15 @@ function useMedia() {
             optimized_url_promise: Promise.resolve(null),
             hls_url_promise: Promise.resolve(null),
             mime_type: mimeType,
-            is_public: false
+            is_public: false,
+            visibility: "private",
+            cdn_url: null
           };
         }
         if (mimeType.startsWith("image/") && isPublic) {
           const r2 = await storage.upload(file, {
             ...sharedOpts,
-            isPublic: true,
+            visibility: "app_public",
             skipCompression: true
           });
           if (r2.error || !r2.data) {
@@ -9603,10 +9635,16 @@ function useMedia() {
             optimized_url_promise: Promise.resolve(null),
             hls_url_promise: Promise.resolve(null),
             mime_type: mimeType,
-            is_public: f2.is_public ?? true
+            is_public: f2.is_public ?? true,
+            visibility: f2.visibility ?? "app_public",
+            cdn_url: f2.cdn_url ?? null
           };
         }
-        const r = isPublic ? await storage.upload(file, { ...sharedOpts, isPublic: true, skipCompression: true }) : await storage.uploadPrivate(file, sharedOpts);
+        const r = isPublic ? await storage.upload(file, {
+          ...sharedOpts,
+          visibility: "app_public",
+          skipCompression: true
+        }) : await storage.uploadPrivate(file, sharedOpts);
         if (r.error || !r.data) {
           throw r.error ?? { code: "upload_error", message: "Upload failed", status: 0 };
         }
@@ -9618,7 +9656,9 @@ function useMedia() {
           optimized_url_promise: Promise.resolve(null),
           hls_url_promise: Promise.resolve(null),
           mime_type: mimeType,
-          is_public: f.is_public ?? isPublic
+          is_public: f.is_public ?? isPublic,
+          visibility: f.visibility ?? (isPublic ? "app_public" : "private"),
+          cdn_url: f.cdn_url ?? null
         };
       } catch (err) {
         const e = err;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@scalemule/nextjs",
-  "version": "0.1.26",
+  "version": "0.1.27",
   "description": "ScaleMule SDK for Next.js applications - authentication, storage, and user management",
   "main": "dist/index.js",
   "module": "dist/index.mjs",
@@ -60,7 +60,7 @@
   "dependencies": {
     "@scalemule/ledvery": "^0.0.1",
     "@scalemule/money": "^0.0.1",
-    "@scalemule/sdk": "^0.0.49"
+    "@scalemule/sdk": "^0.0.55"
   },
   "peerDependencies": {
     "next": ">=14.0.0",