@somewhere-cloud/sdk 0.0.0-stage → 0.13.0

package/dist/esm/resources/storage.js

@@ -0,0 +1,186 @@
+import { SomewhereError } from '../errors.js';
+/**
+ * Prefix-oriented file API.
+ *
+ * Routes through `/v1/fs/*` (the platform's structured filesystem).
+ * "Buckets" are prefix directories under the project's file namespace:
+ * `sw.storage.from('avatars').upload('a.png', ...)` writes to
+ * `/v1/fs/{project_id}/avatars/a.png`.
+ *
+ * For browser uploads with per-user or per-team rules, declare a file
+ * collection in db/schema.ts and use the generated `somewhere:files` client
+ * instead: docs({ topic: 'declared-files' }).
+ */
+export class StorageClient {
+    constructor(client) {
+        this.client = client;
+    }
+    from(bucket) {
+        return new StorageFileApi(this.client, bucket);
+    }
+}
+export class StorageFileApi {
+    constructor(client, bucket) {
+        this.client = client;
+        this.bucket = bucket;
+    }
+    async upload(path, fileBody, options = {}) {
+        const projectId = this.requireProjectId('upload');
+        const fullPath = this.fullKey(path);
+        try {
+            const result = await this.client.putBytes(`/fs/${enc(projectId)}/${encKey(fullPath)}`, fileBody, options.contentType ?? inferContentType(fileBody) ?? 'application/octet-stream');
+            return {
+                data: {
+                    path,
+                    fullPath: result.path ?? fullPath,
+                    id: result.path ?? fullPath,
+                },
+                error: null,
+                status: 200,
+            };
+        }
+        catch (err) {
+            return toResultError(err);
+        }
+    }
+    async download(path) {
+        const projectId = this.requireProjectId('download');
+        const fullPath = this.fullKey(path);
+        try {
+            const result = await this.client.getBytes(`/fs/${enc(projectId)}/${encKey(fullPath)}`);
+            return { data: result, error: null, status: 200 };
+        }
+        catch (err) {
+            return toResultError(err);
+        }
+    }
+    /**
+     * List files in this bucket (or a sub-prefix).
+     * Routes to `GET /v1/fs/{pid}/{bucket}/{prefix}` which returns
+     * a directory listing when the path is a directory.
+     */
+    async list(prefix = '', _options = {}) {
+        const projectId = this.requireProjectId('list');
+        const dirPath = prefix ? this.fullKey(prefix) : this.bucket;
+        try {
+            const result = await this.client.getBytes(`/fs/${enc(projectId)}/${encKey(dirPath)}`);
+            if (result.contentType.includes('application/json')) {
+                const text = new TextDecoder().decode(result.body);
+                const parsed = JSON.parse(text);
+                const data = parsed?.ok ? parsed.data : parsed;
+                if (data?.type === 'directory' && Array.isArray(data.entries)) {
+                    const objects = data.entries.map((e) => ({
+                        name: e.name,
+                        size: e.size_bytes ?? 0,
+                        content_type: e.content_type,
+                        updated_at: e.updated_at,
+                    }));
+                    return { data: objects, error: null, status: 200 };
+                }
+            }
+            return { data: [], error: null, status: 200 };
+        }
+        catch (err) {
+            return toResultError(err);
+        }
+    }
+    async remove(paths) {
+        const projectId = this.requireProjectId('remove');
+        const removed = [];
+        for (const p of paths) {
+            const fullPath = this.fullKey(p);
+            try {
+                await this.client.call('DELETE', `/fs/${enc(projectId)}/${encKey(fullPath)}`);
+                removed.push({ name: p, size: 0 });
+            }
+            catch (err) {
+                return toResultError(err);
+            }
+        }
+        return { data: removed, error: null, status: 200 };
+    }
+    getPublicUrl(path) {
+        const projectId = this.requireProjectId('getPublicUrl');
+        const fullPath = this.fullKey(path);
+        const publicUrl = `${this.client.baseUrl}/fs/${enc(projectId)}/${encKey(fullPath)}`;
+        return { data: { publicUrl } };
+    }
+    async signedUrl(path, options = {}) {
+        const projectId = this.requireProjectId('signedUrl');
+        const fullPath = this.fullKey(path);
+        try {
+            const body = { path: '/' + fullPath };
+            if (typeof options.expiresIn === 'number')
+                body.expires_in = options.expiresIn;
+            const res = await this.client.call('POST', `/fs/${enc(projectId)}/sign`, body);
+            return { data: res, error: null, status: 200 };
+        }
+        catch (err) {
+            return toResultError(err);
+        }
+    }
+    /**
+     * Alias of `signedUrl`. `createSignedUrl(path, expiresIn)` resolves to
+     * `{ data: { signedUrl, ...meta }, error }`.
+     */
+    async createSignedUrl(path, expiresIn) {
+        const res = await this.signedUrl(path, { expiresIn });
+        if (res.error || !res.data) {
+            return { data: null, error: res.error, status: res.status };
+        }
+        return {
+            data: { ...res.data, signedUrl: res.data.url },
+            error: null,
+            status: res.status,
+        };
+    }
+    async integrityCheck(options = {}) {
+        const projectId = this.requireProjectId('integrityCheck');
+        try {
+            const body = {};
+            if (options.autoClean === true)
+                body.auto_clean = true;
+            if (typeof options.limit === 'number')
+                body.limit = options.limit;
+            if (typeof options.cursor === 'string')
+                body.cursor = options.cursor;
+            const res = await this.client.call('POST', `/fs/${enc(projectId)}/integrity-check`, body);
+            return { data: res, error: null, status: 200 };
+        }
+        catch (err) {
+            return toResultError(err);
+        }
+    }
+    fullKey(path) {
+        const trimmed = path.startsWith('/') ? path.slice(1) : path;
+        return `${this.bucket}/${trimmed}`;
+    }
+    requireProjectId(method) {
+        return this.client.requireProjectId(undefined, `storage.from('${this.bucket}').${method}`);
+    }
+}
+function enc(s) {
+    return encodeURIComponent(s);
+}
+function encKey(key) {
+    return key
+        .split('/')
+        .map(encodeURIComponent)
+        .join('/');
+}
+function inferContentType(body) {
+    if (typeof Blob !== 'undefined' && body instanceof Blob && body.type) {
+        return body.type;
+    }
+    if (typeof body === 'string') {
+        return 'text/plain; charset=utf-8';
+    }
+    return null;
+}
+function toResultError(err) {
+    if (err instanceof SomewhereError) {
+        return { data: null, error: err, status: err.statusCode };
+    }
+    throw err;
+}
+//# sourceMappingURL=storage.js.map

package/dist/esm/resources/storage.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"storage.js","sourceRoot":"","sources":["../../../src/resources/storage.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAU9C;;;;;;;;;;;GAWG;AACH,MAAM,OAAO,aAAa;IACxB,YAA6B,MAAc;QAAd,WAAM,GAAN,MAAM,CAAQ;IAAG,CAAC;IAE/C,IAAI,CAAC,MAAc;QACjB,OAAO,IAAI,cAAc,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACjD,CAAC;CACF;AAOD,MAAM,OAAO,cAAc;IACzB,YACmB,MAAc,EACd,MAAc;QADd,WAAM,GAAN,MAAM,CAAQ;QACd,WAAM,GAAN,MAAM,CAAQ;IAC9B,CAAC;IAEJ,KAAK,CAAC,MAAM,CACV,IAAY,EACZ,QAAkB,EAClB,UAAyB,EAAE;QAE3B,MAAM,SAAS,GAAG,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC,CAAC;QAClD,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QACpC,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAKvC,OAAO,GAAG,CAAC,SAAS,CAAC,IAAI,MAAM,CAAC,QAAQ,CAAC,EAAE,EAC3C,QAAQ,EACR,OAAO,CAAC,WAAW,IAAI,gBAAgB,CAAC,QAAQ,CAAC,IAAI,0BAA0B,CAChF,CAAC;YACF,OAAO;gBACL,IAAI,EAAE;oBACJ,IAAI;oBACJ,QAAQ,EAAE,MAAM,CAAC,IAAI,IAAI,QAAQ;oBACjC,EAAE,EAAE,MAAM,CAAC,IAAI,IAAI,QAAQ;iBAC5B;gBACD,KAAK,EAAE,IAAI;gBACX,MAAM,EAAE,GAAG;aACZ,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,aAAa,CAAC,GAAG,CAAC,CAAC;QAC5B,CAAC;IACH,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,IAAY;QACzB,MAAM,SAAS,GAAG,IAAI,CAAC,gBAAgB,CAAC,UAAU,CAAC,CAAC;QACpD,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QACpC,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CACvC,OAAO,GAAG,CAAC,SAAS,CAAC,IAAI,MAAM,CAAC,QAAQ,CAAC,EAAE,CAC5C,CAAC;YACF,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;QACpD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,aAAa,CAAC,GAAG,CAAC,CAAC;QAC5B,CAAC;IACH,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,IAAI,CACR,MAAM,GAAG,EAAE,EACX,WAAgD,EAAE;QAElD,MAAM,SAAS,GAAG,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC;QAChD,MAAM,OAAO,GAAG,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC;QAC5D,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CACvC,OAAO,GAAG,CAAC,SAAS,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,EAAE,CAC3C,CAAC;YACF,IAAI,MAAM,CAAC,WAAW,CAAC,QAAQ,CAAC,kBAAkB,CAAC,EAAE,CAAC;gBACpD,MAAM,IAAI,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;gBACnD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;gBAChC,MAAM,IAAI,GAAG,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC;gBAC/C,IAAI,IAAI,EAAE,IAAI,KAAK,WAAW,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;oBAC9D,MAAM,OAAO,GAAwB,IAAI,CAAC,OAAO,CAAC,GAAG,CACnD,CAAC,CAMA,EAAE,EAAE,CAAC,CAAC;wBACL,IAAI,EAAE,CAAC,CAAC,IAAI;wBACZ,IAAI,EAAE,CAAC,CAAC,UAAU,IAAI,CAAC;wBACvB,YAAY,EAAE,CAAC,CAAC,YAAY;wBAC5B,UAAU,EAAE,CAAC,CAAC,UAAU;qBACzB,CAAC,CACH,CAAC;oBACF,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;gBACrD,CAAC;YACH,CAAC;YACD,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;QAChD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,aAAa,CAAsB,GAAG,CAAC,CAAC;QACjD,CAAC;IACH,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,KAAe;QAC1B,MAAM,SAAS,GAAG,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC,CAAC;QAClD,MAAM,OAAO,GAAwB,EAAE,CAAC;QACxC,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;YACtB,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;YACjC,IAAI,CAAC;gBACH,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CACpB,QAAQ,EACR,OAAO,GAAG,CAAC,SAAS,CAAC,IAAI,MAAM,CAAC,QAAQ,CAAC,EAAE,CAC5C,CAAC;gBACF,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC;YACrC,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,OAAO,aAAa,CAAsB,GAAG,CAAC,CAAC;YACjD,CAAC;QACH,CAAC;QACD,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;IACrD,CAAC;IAED,YAAY,CAAC,IAAY;QACvB,MAAM,SAAS,GAAG,IAAI,CAAC,gBAAgB,CAAC,cAAc,CAAC,CAAC;QACxD,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QACpC,MAAM,SAAS,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,OAAO,GAAG,CAAC,SAAS,CAAC,IAAI,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;QACpF,OAAO,EAAE,IAAI,EAAE,EAAE,SAAS,EAAE,EAAE,CAAC;IACjC,CAAC;IAED,KAAK,CAAC,SAAS,CACb,IAAY,EACZ,UAAkC,EAAE;QAEpC,MAAM,SAAS,GAAG,IAAI,CAAC,gBAAgB,CAAC,WAAW,CAAC,CAAC;QACrD,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QACpC,IAAI,CAAC;YACH,MAAM,IAAI,GAA4B,EAAE,IAAI,EAAE,GAAG,GAAG,QAAQ,EAAE,CAAC;YAC/D,IAAI,OAAO,OAAO,CAAC,SAAS,KAAK,QAAQ;gBAAE,IAAI,CAAC,UAAU,GAAG,OAAO,CAAC,SAAS,CAAC;YAC/E,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,OAAO,GAAG,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;YAC/E,OAAO,EAAE,IAAI,EAAE,GAAsB,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;QACpE,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,aAAa,CAAC,GAAG,CAAC,CAAC;QAC5B,CAAC;IACH,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,eAAe,CACnB,IAAY,EACZ,SAAiB;QAEjB,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC;QACtD,IAAI,GAAG,CAAC,KAAK,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;YAC3B,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,CAAC;QAC9D,CAAC;QACD,OAAO;YACL,IAAI,EAAE,EAAE,GAAG,GAAG,CAAC,IAAI,EAAE,SAAS,EAAE,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE;YAC9C,KAAK,EAAE,IAAI;YACX,MAAM,EAAE,GAAG,CAAC,MAAM;SACnB,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,cAAc,CAClB,UAAoE,EAAE;QAEtE,MAAM,SAAS,GAAG,IAAI,CAAC,gBAAgB,CAAC,gBAAgB,CAAC,CAAC;QAC1D,IAAI,CAAC;YACH,MAAM,IAAI,GAA4B,EAAE,CAAC;YACzC,IAAI,OAAO,CAAC,SAAS,KAAK,IAAI;gBAAE,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC;YACvD,IAAI,OAAO,OAAO,CAAC,KAAK,KAAK,QAAQ;gBAAE,IAAI,CAAC,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC;YAClE,IAAI,OAAO,OAAO,CAAC,MAAM,KAAK,QAAQ;gBAAE,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;YACrE,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,OAAO,GAAG,CAAC,SAAS,CAAC,kBAAkB,EAAE,IAAI,CAAC,CAAC;YAC1F,OAAO,EAAE,IAAI,EAAE,GAA2B,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;QACzE,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,aAAa,CAAC,GAAG,CAAC,CAAC;QAC5B,CAAC;IACH,CAAC;IAEO,OAAO,CAAC,IAAY;QAC1B,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QAC5D,OAAO,GAAG,IAAI,CAAC,MAAM,IAAI,OAAO,EAAE,CAAC;IACrC,CAAC;IAEO,gBAAgB,CAAC,MAAc;QACrC,OAAO,IAAI,CAAC,MAAM,CAAC,gBAAgB,CACjC,SAAS,EACT,iBAAiB,IAAI,CAAC,MAAM,MAAM,MAAM,EAAE,CAC3C,CAAC;IACJ,CAAC;CACF;AAED,SAAS,GAAG,CAAC,CAAS;IACpB,OAAO,kBAAkB,CAAC,CAAC,CAAC,CAAC;AAC/B,CAAC;AAED,SAAS,MAAM,CAAC,GAAW;IACzB,OAAO,GAAG;SACP,KAAK,CAAC,GAAG,CAAC;SACV,GAAG,CAAC,kBAAkB,CAAC;SACvB,IAAI,CAAC,GAAG,CAAC,CAAC;AACf,CAAC;AAED,SAAS,gBAAgB,CAAC,IAAc;IACtC,IAAI,OAAO,IAAI,KAAK,WAAW,IAAI,IAAI,YAAY,IAAI,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;QACrE,OAAO,IAAI,CAAC,IAAI,CAAC;IACnB,CAAC;IACD,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;QAC7B,OAAO,2BAA2B,CAAC;IACrC,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,aAAa,CAAI,GAAY;IACpC,IAAI,GAAG,YAAY,cAAc,EAAE,CAAC;QAClC,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,CAAC,UAAU,EAAE,CAAC;IAC5D,CAAC;IACD,MAAM,GAAG,CAAC;AACZ,CAAC"}

package/dist/esm/resources/tasks.js

@@ -0,0 +1,95 @@
+import { SomewhereError } from '../errors.js';
+export class TasksClient {
+    constructor(client) {
+        this.client = client;
+    }
+    async create(input) {
+        const projectId = this.client.requireProjectId(input.projectId, 'tasks.create');
+        const { projectId: _omit, ...rest } = input;
+        try {
+            const result = await this.client.call('POST', '/tasks', {
+                body: { project_id: projectId, ...rest },
+            });
+            return { data: result, error: null, status: 200 };
+        }
+        catch (err) {
+            return toResultError(err);
+        }
+    }
+    async list(options = {}) {
+        const projectId = this.client.requireProjectId(options.projectId, 'tasks.list');
+        const q = new URLSearchParams({ project_id: projectId });
+        if (options.status) {
+            const v = Array.isArray(options.status) ? options.status[0] : options.status;
+            if (v)
+                q.set('status', v);
+        }
+        if (options.assignee)
+            q.set('assignee', options.assignee);
+        if (options.area)
+            q.set('area', options.area);
+        if (options.limit != null)
+            q.set('limit', String(options.limit));
+        try {
+            const result = await this.client.call('GET', `/tasks?${q}`);
+            const data = Array.isArray(result) ? result : (result?.tasks ?? []);
+            return { data, error: null, status: 200 };
+        }
+        catch (err) {
+            return toResultError(err);
+        }
+    }
+    async get(id, options = {}) {
+        const projectId = this.client.requireProjectId(options.projectId, 'tasks.get');
+        try {
+            const result = await this.client.call('GET', `/tasks/${encodeURIComponent(id)}?project_id=${encodeURIComponent(projectId)}`);
+            return { data: result, error: null, status: 200 };
+        }
+        catch (err) {
+            return toResultError(err);
+        }
+    }
+    async update(id, input) {
+        const projectId = this.client.requireProjectId(input.projectId, 'tasks.update');
+        const { projectId: _omit, ...rest } = input;
+        try {
+            const result = await this.client.call('PATCH', `/tasks/${encodeURIComponent(id)}`, {
+                body: { project_id: projectId, ...rest },
+            });
+            return { data: result, error: null, status: 200 };
+        }
+        catch (err) {
+            return toResultError(err);
+        }
+    }
+    async delete(id, options = {}) {
+        const projectId = this.client.requireProjectId(options.projectId, 'tasks.delete');
+        try {
+            await this.client.call('DELETE', `/tasks/${encodeURIComponent(id)}?project_id=${encodeURIComponent(projectId)}`);
+            return { data: { deleted: true }, error: null, status: 200 };
+        }
+        catch (err) {
+            return toResultError(err);
+        }
+    }
+    async comment(id, body, options = {}) {
+        const projectId = this.client.requireProjectId(options.projectId, 'tasks.comment');
+        try {
+            const result = await this.client.call('POST', `/tasks/${encodeURIComponent(id)}/comments`, { body: { project_id: projectId, body } });
+            return { data: result, error: null, status: 200 };
+        }
+        catch (err) {
+            return toResultError(err);
+        }
+    }
+}
+function arr(v) {
+    return Array.isArray(v) ? v : [v];
+}
+function toResultError(err) {
+    if (err instanceof SomewhereError) {
+        return { data: null, error: err, status: err.statusCode };
+    }
+    throw err;
+}
+//# sourceMappingURL=tasks.js.map

package/dist/esm/resources/tasks.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tasks.js","sourceRoot":"","sources":["../../../src/resources/tasks.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAsE9C,MAAM,OAAO,WAAW;IACtB,YAA6B,MAAc;QAAd,WAAM,GAAN,MAAM,CAAQ;IAAG,CAAC;IAE/C,KAAK,CAAC,MAAM,CAAC,KAAsB;QACjC,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC,gBAAgB,CAAC,KAAK,CAAC,SAAS,EAAE,cAAc,CAAC,CAAC;QAChF,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,GAAG,IAAI,EAAE,GAAG,KAAK,CAAC;QAC5C,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CAAO,MAAM,EAAE,QAAQ,EAAE;gBAC5D,IAAI,EAAE,EAAE,UAAU,EAAE,SAAS,EAAE,GAAG,IAAI,EAAE;aACzC,CAAC,CAAC;YACH,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;QACpD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,aAAa,CAAC,GAAG,CAAC,CAAC;QAC5B,CAAC;IACH,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,UAA2B,EAAE;QACtC,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC,gBAAgB,CAAC,OAAO,CAAC,SAAS,EAAE,YAAY,CAAC,CAAC;QAChF,MAAM,CAAC,GAAG,IAAI,eAAe,CAAC,EAAE,UAAU,EAAE,SAAS,EAAE,CAAC,CAAC;QACzD,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;YACnB,MAAM,CAAC,GAAG,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC;YAC7E,IAAI,CAAC;gBAAE,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC;QAC5B,CAAC;QACD,IAAI,OAAO,CAAC,QAAQ;YAAE,CAAC,CAAC,GAAG,CAAC,UAAU,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC;QAC1D,IAAI,OAAO,CAAC,IAAI;YAAE,CAAC,CAAC,GAAG,CAAC,MAAM,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;QAC9C,IAAI,OAAO,CAAC,KAAK,IAAI,IAAI;YAAE,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;QACjE,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CACnC,KAAK,EACL,UAAU,CAAC,EAAE,CACd,CAAC;YACF,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC;YACpE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;QAC5C,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,aAAa,CAAC,GAAG,CAAC,CAAC;QAC5B,CAAC;IACH,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,EAAU,EAAE,UAAkC,EAAE;QACxD,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC,gBAAgB,CAAC,OAAO,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;QAC/E,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CACnC,KAAK,EACL,UAAU,kBAAkB,CAAC,EAAE,CAAC,eAAe,kBAAkB,CAAC,SAAS,CAAC,EAAE,CAC/E,CAAC;YACF,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;QACpD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,aAAa,CAAC,GAAG,CAAC,CAAC;QAC5B,CAAC;IACH,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,EAAU,EAAE,KAAsB;QAC7C,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC,gBAAgB,CAAC,KAAK,CAAC,SAAS,EAAE,cAAc,CAAC,CAAC;QAChF,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,GAAG,IAAI,EAAE,GAAG,KAAK,CAAC;QAC5C,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CAAO,OAAO,EAAE,UAAU,kBAAkB,CAAC,EAAE,CAAC,EAAE,EAAE;gBACvF,IAAI,EAAE,EAAE,UAAU,EAAE,SAAS,EAAE,GAAG,IAAI,EAAE;aACzC,CAAC,CAAC;YACH,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;QACpD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,aAAa,CAAC,GAAG,CAAC,CAAC;QAC5B,CAAC;IACH,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,EAAU,EAAE,UAAkC,EAAE;QAC3D,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC,gBAAgB,CAAC,OAAO,CAAC,SAAS,EAAE,cAAc,CAAC,CAAC;QAClF,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CACpB,QAAQ,EACR,UAAU,kBAAkB,CAAC,EAAE,CAAC,eAAe,kBAAkB,CAAC,SAAS,CAAC,EAAE,CAC/E,CAAC;YACF,OAAO,EAAE,IAAI,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;QAC/D,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,aAAa,CAAC,GAAG,CAAC,CAAC;QAC5B,CAAC;IACH,CAAC;IAED,KAAK,CAAC,OAAO,CACX,EAAU,EACV,IAAY,EACZ,UAAkC,EAAE;QAEpC,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC,gBAAgB,CAAC,OAAO,CAAC,SAAS,EAAE,eAAe,CAAC,CAAC;QACnF,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CACnC,MAAM,EACN,UAAU,kBAAkB,CAAC,EAAE,CAAC,WAAW,EAC3C,EAAE,IAAI,EAAE,EAAE,UAAU,EAAE,SAAS,EAAE,IAAI,EAAE,EAAE,CAC1C,CAAC;YACF,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;QACpD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,aAAa,CAAC,GAAG,CAAC,CAAC;QAC5B,CAAC;IACH,CAAC;CACF;AAED,SAAS,GAAG,CAAI,CAAU;IACxB,OAAO,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACpC,CAAC;AAED,SAAS,aAAa,CAAI,GAAY;IACpC,IAAI,GAAG,YAAY,cAAc,EAAE,CAAC;QAClC,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,CAAC,UAAU,EAAE,CAAC;IAC5D,CAAC;IACD,MAAM,GAAG,CAAC;AACZ,CAAC"}

package/dist/esm/resources/video.js

@@ -0,0 +1,46 @@
+/**
+ * Video upload + playback. The platform issues a one-time direct upload
+ * URL — bytes go straight from the user's browser to the upstream
+ * delivery network, never through the platform — then exposes
+ * playback URLs (HLS + DASH) and a thumbnail once the video is ready.
+ *
+ *     // 1. Get a one-time upload URL (server side).
+ *     const { data } = await sw.video.createUploadUrl({ title: 'demo' })
+ *     // 2. POST the file bytes to data.upload_url from the browser.
+ *     // 3. Poll for readiness.
+ *     const v = await sw.video.get(data.video_id)
+ *     if (v.data?.ready) play(v.data.hls_url)
+ */
+export class VideoClient {
+    constructor(client) {
+        this.client = client;
+    }
+    async createUploadUrl(input = {}) {
+        const project_id = this.client.requireProjectId(input.projectId, 'video.createUploadUrl');
+        return this.client.safeCall('POST', '/video/upload-url', {
+            auth: 'developer',
+            body: {
+                project_id,
+                title: input.title,
+                max_duration_seconds: input.max_duration_seconds,
+                require_signed_urls: input.require_signed_urls,
+            },
+        });
+    }
+    async list(opts = {}) {
+        const project_id = this.client.requireProjectId(opts.projectId, 'video.list');
+        return this.client.safeCall('GET', '/video', {
+            auth: 'developer',
+            query: { project_id, limit: opts.limit },
+        });
+    }
+    async get(id) {
+        return this.client.safeCall('GET', `/video/${encodeURIComponent(id)}`, {
+            auth: 'developer',
+        });
+    }
+    async delete(id) {
+        return this.client.safeCall('DELETE', `/video/${encodeURIComponent(id)}`, { auth: 'developer' });
+    }
+}
+//# sourceMappingURL=video.js.map

package/dist/esm/resources/video.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"video.js","sourceRoot":"","sources":["../../../src/resources/video.ts"],"names":[],"mappings":"AASA;;;;;;;;;;;;GAYG;AACH,MAAM,OAAO,WAAW;IACtB,YAA6B,MAAc;QAAd,WAAM,GAAN,MAAM,CAAQ;IAAG,CAAC;IAE/C,KAAK,CAAC,eAAe,CAAC,QAA+B,EAAE;QACrD,MAAM,UAAU,GAAG,IAAI,CAAC,MAAM,CAAC,gBAAgB,CAAC,KAAK,CAAC,SAAS,EAAE,uBAAuB,CAAC,CAAC;QAC1F,OAAO,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAyB,MAAM,EAAE,mBAAmB,EAAE;YAC/E,IAAI,EAAE,WAAW;YACjB,IAAI,EAAE;gBACJ,UAAU;gBACV,KAAK,EAAE,KAAK,CAAC,KAAK;gBAClB,oBAAoB,EAAE,KAAK,CAAC,oBAAoB;gBAChD,mBAAmB,EAAE,KAAK,CAAC,mBAAmB;aAC/C;SACF,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,OAA+C,EAAE;QAC1D,MAAM,UAAU,GAAG,IAAI,CAAC,MAAM,CAAC,gBAAgB,CAAC,IAAI,CAAC,SAAS,EAAE,YAAY,CAAC,CAAC;QAC9E,OAAO,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAoB,KAAK,EAAE,QAAQ,EAAE;YAC9D,IAAI,EAAE,WAAW;YACjB,KAAK,EAAE,EAAE,UAAU,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE;SACzC,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,EAAU;QAClB,OAAO,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAc,KAAK,EAAE,UAAU,kBAAkB,CAAC,EAAE,CAAC,EAAE,EAAE;YAClF,IAAI,EAAE,WAAW;SAClB,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,EAAU;QACrB,OAAO,IAAI,CAAC,MAAM,CAAC,QAAQ,CACzB,QAAQ,EACR,UAAU,kBAAkB,CAAC,EAAE,CAAC,EAAE,EAClC,EAAE,IAAI,EAAE,WAAW,EAAE,CACtB,CAAC;IACJ,CAAC;CACF"}

package/dist/esm/types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=types.js.map

package/dist/esm/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/types.ts"],"names":[],"mappings":""}

package/dist/types/auth/client.d.ts

@@ -0,0 +1,272 @@
+/**
+ * @somewhere-cloud/sdk/auth — framework-agnostic session client.
+ *
+ * ONLY-PATH CONTRACT (tsk_acd56ee8): a browser uses same-origin httpOnly
+ * cookie sessions and holds zero credentials. This package is an optional UI
+ * adapter over that runtime contract, not a new transport.
+ *
+ * Explicit header mode exists for scripts/native clients and compatibility
+ * with older browser integrations. In that mode it wraps fetch so that:
+ *
+ *   1. Every authed request carries `Authorization: Bearer <access>` AND
+ *      `X-Refresh-Token: <refresh>` (the ride-along), letting the server
+ *      auto-refresh an expired access token in-band.
+ *   2. When the server rotates the session it returns `X-New-Access-Token` +
+ *      `X-New-Refresh-Token`; we persist the NEW PAIR ATOMICALLY (one write,
+ *      both or neither). A half-write is how sessions desync.
+ *   3. A network blip (fetch throws) NEVER clears the session — we re-throw
+ *      and keep the tokens. Logging the user out because their wifi hiccuped
+ *      is the single most common hand-rolled-auth bug.
+ *   4. CROSS-TAB: when another tab rotates the session, this tab picks the
+ *      new pair up off the `storage` event instead of riding its stale copy
+ *      past the server's reuse-grace window (which reads as a phantom
+ *      logout in every background tab). A 401 on a request that carried a
+ *      since-rotated pair retries ONCE with the freshest stored pair before
+ *      concluding the session is dead.
+ *
+ * COOKIE MODE (0.2.0+, the BROWSER DEFAULT): instead of holding tokens in
+ * localStorage (XSS-exfiltratable), the backend sets the session as httpOnly
+ * cookies and the browser owns it — this client stores NO tokens, sends
+ * `credentials: 'include'`, and caches only the (non-secret) user object for
+ * optimistic rendering. Mode is negotiated per sign-in: the client hints
+ * `X-Sw-Auth-Mode: cookie`; only a server that actually set the cookies
+ * replies `cookie_session: true`. A backend that doesn't (its handler omits
+ * cookie mode) gets a typed `AuthError` with code
+ * `COOKIE_SESSION_NOT_CONFIRMED` and NOTHING is stored — the client never
+ * quietly puts a token pair where page scripts can read it (0.9.0). An
+ * EXISTING stored header session is adopted as-is (no forced re-auth) and
+ * migrates to cookies transparently on the next login.
+ *
+ * SESSION STATE AND ORDERING (tsk_166b8ddf): `getState()` and
+ * `onChange` report what the backend last said: 'checking' before any answer
+ * (a cached user is unverified), 'authenticated', 'signed-out', or
+ * 'indeterminate' when a check failed (network, 5xx, unreadable body) — the
+ * last-known user is kept but is not verified. Identity changes are ordered:
+ *
+ *   - Each sign-in/sign-up/completion and signOut() advances a generation when
+ *     it is CALLED. A /me answer, a 401, or a token rotation that started under
+ *     an earlier generation never writes user, session or status.
+ *   - Cookie-changing calls from one client (login, signup, magic-link verify,
+ *     OAuth completions, logout) run one at a time in call order, so their
+ *     Set-Cookie responses cannot land out of order. A sign-in answered after a
+ *     newer signOut()/sign-in rejects with code 'AUTH_SUPERSEDED' and changes
+ *     nothing locally; the queued logout still runs after it on the server.
+ *   - This orders one client instance only. Another tab, or a request the
+ *     server processes late, can still change the shared cookies; the next
+ *     check reports it. A timed-out call (mutationTimeoutMs covers the
+ *     request, its body and any follow-up /me) is abandoned locally and writes
+ *     nothing afterwards, but the server may still have acted on it.
+ *   - signOut() drops local credentials at once and retains the last-known user
+ *     while `signingOut` is true. Only a successful /logout confirms server
+ *     sign-out; a failure clears the local user but leaves `signOutUnconfirmed`
+ *     true so the next signOut() retries it.
+ *
+ * The token trio originates from the app's own backend (login/signup are
+ * developer-key-gated on the platform, so they can't be called from the
+ * browser). Mount `somewhereAuth` from `@somewhere-cloud/sdk/server` at
+ * `/api/auth/*` to expose the standard endpoints this client talks to.
+ */
+export interface Session {
+    accessToken: string;
+    refreshToken: string;
+}
+export type AppUserRole = 'user' | 'admin';
+export interface User {
+    id: string;
+    email: string | null;
+    /** Platform-owned app role. Optional while cached users and older servers
+     *  roll forward. Use it for UI rendering only; enforce admin access
+     *  server-side with sw.auth.requireUser(req, { role: 'admin' }). */
+    role?: AppUserRole;
+    [key: string]: unknown;
+}
+/** One plan from the project's code-defined catalog (sw.billing). */
+export interface BillingPlan {
+    slug: string;
+    name: string;
+    description: string | null;
+    price_cents: number | null;
+    currency: string;
+    interval: string | null;
+    stripe_price_id: string | null;
+    sort_order: number;
+    is_default: boolean;
+    active: boolean;
+    features: Array<{
+        feature: string;
+        limit_value: number | null;
+    }>;
+}
+/** Explicit catalog and checkout operations. Paid access is checked server-side. */
+export interface BillingClient {
+    /** @deprecated Identity has no paid assertions. Use a server endpoint calling await sw.billing.has(feature). */
+    has(feature: string): never;
+    /** @deprecated Identity has no paid assertions. Use a server endpoint calling await sw.billing.entitlements(). */
+    entitlements(): never;
+    /** The project's plan catalog (network). */
+    plans(): Promise<BillingPlan[]>;
+    /** Start a subscription checkout for the CURRENT user and (by default) redirect
+     *  the browser to Stripe. success/cancel default to the current page. The
+     *  buyer is the signed-in user — resolved server-side, never passed from here. */
+    subscribe(plan: string, opts?: {
+        successUrl?: string;
+        cancelUrl?: string;
+        redirect?: boolean;
+    }): Promise<{
+        url: string;
+    }>;
+    /** Open the Stripe billing portal for the CURRENT user (manage / cancel) and
+     *  (by default) redirect there. return_url defaults to the current page. */
+    openBillingPortal(opts?: {
+        returnUrl?: string;
+        redirect?: boolean;
+    }): Promise<{
+        url: string;
+    }>;
+}
+/**
+ * What this client last learned from the backend about the session.
+ *   checking       no answer yet since the client was created, or sign-out is pending;
+ *                  `user` is cached, unverified
+ *   authenticated  the backend confirmed `user` (a sign-in response, or /me with a user)
+ *   signed-out     no identity in this client: the backend confirmed no session
+ *                  (/me 401 or { user: null }, a 401 on the current identity), or
+ *                  signOut() finished locally. `signOutUnconfirmed` means the
+ *                  server did not confirm that sign-out.
+ *   indeterminate  the last check failed (network error, non-401 error status,
+ *                  unreadable body); `user` is the last-known identity, unverified
+ */
+export type AuthStatus = 'checking' | 'authenticated' | 'signed-out' | 'indeterminate';
+export interface AuthState {
+    status: AuthStatus;
+    user: User | null;
+    session: Session | null;
+    /** 'SESSION_CHECK_FAILED' in 'indeterminate'; 'SIGN_OUT_UNCONFIRMED' while a
+     *  sign-out is still owed to the server. */
+    error: AuthError | null;
+    /** True after a signOut() whose server call failed: the server session may
+     *  still exist. Cleared when a later signOut() reaches the server, /me
+     *  answers definitively, or a sign-in replaces the session. */
+    signOutUnconfirmed: boolean;
+    /** True from a signOut() call until its /logout is answered (or fails or
+     *  times out). The last-known `user` remains while pending so user-null UI
+     *  cannot imply completion. Show a pending state and disable private actions. */
+    signingOut: boolean;
+}
+export interface StorageLike {
+    getItem(key: string): string | null;
+    setItem(key: string, value: string): void;
+    removeItem(key: string): void;
+}
+/**
+ * 'cookie' — httpOnly cookie session set by the backend; no tokens in JS.
+ * 'header' — compatibility/non-browser mode: Bearer + refresh ride-along
+ * with tokens in `storage`. Do not select this for a new browser app.
+ * Default: 'cookie' in a browser (document exists), 'header' elsewhere
+ * (Node / CLI / native — where httpOnly cookies don't exist).
+ */
+export type AuthMode = 'cookie' | 'header';
+export interface SomewhereAuthOptions {
+    /** Base URL of the app's backend auth routes. Default '' (same-origin). */
+    baseUrl?: string;
+    /** Path prefix the backend handler is mounted at. Default '/api/auth'. */
+    authPath?: string;
+    /** Header-mode token storage. Unused by a cookie-native browser session. */
+    storage?: StorageLike;
+    /** localStorage key. Default 'sw_auth'. */
+    storageKey?: string;
+    /** Session transport. Default: 'cookie' in browsers, 'header' elsewhere. */
+    mode?: AuthMode;
+    /** How long one queued sign-in/sign-out call may take, including reading the
+     *  response and any follow-up /me, before it is abandoned (AuthError
+     *  'AUTH_TIMEOUT') so later calls can run. 1 to 2147483647 ms; default 30000. */
+    mutationTimeoutMs?: number;
+}
+export interface SomewhereAuth {
+    /** fetch wrapper that rides the session + persists rotation. Use it for
+     *  every request to your backend that needs the user. */
+    fetch: typeof fetch;
+    signUp(input: {
+        email: string;
+        password: string;
+        displayName?: string;
+    }): Promise<User>;
+    signIn(input: {
+        email: string;
+        password: string;
+    }): Promise<User>;
+    /** Send a magic-link / OTP email. The link/code completes via verifyMagicLink. */
+    sendMagicLink(input: {
+        email: string;
+        redirectUri?: string;
+    }): Promise<void>;
+    verifyMagicLink(input: {
+        token: string;
+    }): Promise<User>;
+    /** Whether the signed-in account's email address is verified. */
+    emailVerified(): Promise<boolean>;
+    /** Email the signed-in account a 6-digit verification code. The session
+     *  decides the account; no token is handled in page code. */
+    requestEmailVerification(): Promise<void>;
+    /** Check that code; resolves once the address is verified. */
+    verifyEmail(input: {
+        code: string;
+    }): Promise<void>;
+    /** Get the platform-owned Google OAuth URL (no Google project needed). */
+    googleSignInUrl(input?: {
+        redirectUri?: string;
+    }): Promise<string>;
+    /** Exchange a Google `?code=` (from the callback) for a session. Pass the
+     *  callback's `?attempt=` too; on the callback page it is read from the URL. */
+    completeGoogleSignIn(input: {
+        code: string;
+        attempt?: string;
+    }): Promise<User>;
+    /** Get the platform-owned GitHub OAuth URL. */
+    githubSignInUrl(input?: {
+        redirectUri?: string;
+    }): Promise<string>;
+    /** Exchange a GitHub `?code=` (from the callback) for a session. Pass the
+     *  callback's `?attempt=` too; on the callback page it is read from the URL. */
+    completeGithubSignIn(input: {
+        code: string;
+        attempt?: string;
+    }): Promise<User>;
+    /** Get the platform-owned Discord OAuth URL. */
+    discordSignInUrl(input?: {
+        redirectUri?: string;
+    }): Promise<string>;
+    /** Exchange a Discord `?code=` (from the callback) for a session. Pass the
+     *  callback's `?attempt=` too; on the callback page it is read from the URL. */
+    completeDiscordSignIn(input: {
+        code: string;
+        attempt?: string;
+    }): Promise<User>;
+    /** Complete the pending sign-in with an authenticator or backup code. */
+    completeMfa(input: {
+        code: string;
+    }): Promise<User>;
+    signOut(): Promise<void>;
+    /** Re-fetch the current user from the backend (validates + refreshes). */
+    getUser(): Promise<User | null>;
+    /** Current session from memory (no network). Always null for a cookie
+     *  session — the tokens are httpOnly, deliberately unreadable from JS;
+     *  use getCachedUser()/getUser() for signed-in state. */
+    getSession(): Session | null;
+    getCachedUser(): User | null;
+    /** Status, user, session and error as of now (no network). */
+    getState(): AuthState;
+    /** Subscribe to session/user/status changes (login, logout, rotation, checks). */
+    onChange(listener: (state: AuthState) => void): () => void;
+    /** Entitlements (sw.billing) — `has(feature)` / `entitlements()` / `plans()`. */
+    billing: BillingClient;
+}
+export declare function createSomewhereAuth(options?: SomewhereAuthOptions): SomewhereAuth;
+export declare class AuthError extends Error {
+    status: number;
+    /** Set when the client itself refuses a response, e.g.
+     *  'COOKIE_SESSION_NOT_CONFIRMED'. Undefined for server-reported failures. */
+    code?: string;
+    constructor(message: string, status: number, code?: string);
+}
+//# sourceMappingURL=client.d.ts.map

package/dist/types/auth/client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../../../src/auth/client.ts"],"names":[],"mappings":"AAEA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmEG;AAEH,MAAM,WAAW,OAAO;IACtB,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,MAAM,WAAW,GAAG,MAAM,GAAG,OAAO,CAAC;AAE3C,MAAM,WAAW,IAAI;IACnB,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB;;wEAEoE;IACpE,IAAI,CAAC,EAAE,WAAW,CAAC;IACnB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAED,qEAAqE;AACrE,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,OAAO,CAAC;IACpB,MAAM,EAAE,OAAO,CAAC;IAChB,QAAQ,EAAE,KAAK,CAAC;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,CAAC,CAAC;CAClE;AAED,oFAAoF;AACpF,MAAM,WAAW,aAAa;IAC5B,gHAAgH;IAChH,GAAG,CAAC,OAAO,EAAE,MAAM,GAAG,KAAK,CAAC;IAC5B,kHAAkH;IAClH,YAAY,IAAI,KAAK,CAAC;IACtB,4CAA4C;IAC5C,KAAK,IAAI,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC;IAChC;;sFAEkF;IAClF,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE;QAAE,UAAU,CAAC,EAAE,MAAM,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,OAAO,CAAA;KAAE,GAAG,OAAO,CAAC;QAAE,GAAG,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC1H;gFAC4E;IAC5E,iBAAiB,CAAC,IAAI,CAAC,EAAE;QAAE,SAAS,CAAC,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,OAAO,CAAA;KAAE,GAAG,OAAO,CAAC;QAAE,GAAG,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CAChG;AAED;;;;;;;;;;;GAWG;AACH,MAAM,MAAM,UAAU,GAAG,UAAU,GAAG,eAAe,GAAG,YAAY,GAAG,eAAe,CAAC;AAEvF,MAAM,WAAW,SAAS;IACxB,MAAM,EAAE,UAAU,CAAC;IACnB,IAAI,EAAE,IAAI,GAAG,IAAI,CAAC;IAClB,OAAO,EAAE,OAAO,GAAG,IAAI,CAAC;IACxB;gDAC4C;IAC5C,KAAK,EAAE,SAAS,GAAG,IAAI,CAAC;IACxB;;mEAE+D;IAC/D,kBAAkB,EAAE,OAAO,CAAC;IAC5B;;qFAEiF;IACjF,UAAU,EAAE,OAAO,CAAC;CACrB;AAED,MAAM,WAAW,WAAW;IAC1B,OAAO,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAAC;IACpC,OAAO,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1C,UAAU,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;CAC/B;AAED;;;;;;GAMG;AACH,MAAM,MAAM,QAAQ,GAAG,QAAQ,GAAG,QAAQ,CAAC;AAE3C,MAAM,WAAW,oBAAoB;IACnC,2EAA2E;IAC3E,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,0EAA0E;IAC1E,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,4EAA4E;IAC5E,OAAO,CAAC,EAAE,WAAW,CAAC;IACtB,2CAA2C;IAC3C,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,4EAA4E;IAC5E,IAAI,CAAC,EAAE,QAAQ,CAAC;IAChB;;qFAEiF;IACjF,iBAAiB,CAAC,EAAE,MAAM,CAAC;CAC5B;AA8BD,MAAM,WAAW,aAAa;IAC5B;6DACyD;IACzD,KAAK,EAAE,OAAO,KAAK,CAAC;IACpB,MAAM,CAAC,KAAK,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAC;QAAC,WAAW,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACxF,MAAM,CAAC,KAAK,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAClE,kFAAkF;IAClF,aAAa,CAAC,KAAK,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,WAAW,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC7E,eAAe,CAAC,KAAK,EAAE;QAAE,KAAK,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACzD,iEAAiE;IACjE,aAAa,IAAI,OAAO,CAAC,OAAO,CAAC,CAAC;IAClC;iEAC6D;IAC7D,wBAAwB,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IAC1C,8DAA8D;IAC9D,WAAW,CAAC,KAAK,EAAE;QAAE,IAAI,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACpD,0EAA0E;IAC1E,eAAe,CAAC,KAAK,CAAC,EAAE;QAAE,WAAW,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IACnE;oFACgF;IAChF,oBAAoB,CAAC,KAAK,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC/E,+CAA+C;IAC/C,eAAe,CAAC,KAAK,CAAC,EAAE;QAAE,WAAW,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IACnE;oFACgF;IAChF,oBAAoB,CAAC,KAAK,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC/E,gDAAgD;IAChD,gBAAgB,CAAC,KAAK,CAAC,EAAE;QAAE,WAAW,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IACpE;oFACgF;IAChF,qBAAqB,CAAC,KAAK,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAChF,yEAAyE;IACzE,WAAW,CAAC,KAAK,EAAE;QAAE,IAAI,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACpD,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IACzB,0EAA0E;IAC1E,OAAO,IAAI,OAAO,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC;IAChC;;6DAEyD;IACzD,UAAU,IAAI,OAAO,GAAG,IAAI,CAAC;IAC7B,aAAa,IAAI,IAAI,GAAG,IAAI,CAAC;IAC7B,8DAA8D;IAC9D,QAAQ,IAAI,SAAS,CAAC;IACtB,kFAAkF;IAClF,QAAQ,CAAC,QAAQ,EAAE,CAAC,KAAK,EAAE,SAAS,KAAK,IAAI,GAAG,MAAM,IAAI,CAAC;IAC3D,iFAAiF;IACjF,OAAO,EAAE,aAAa,CAAC;CACxB;AA8BD,wBAAgB,mBAAmB,CAAC,OAAO,GAAE,oBAAyB,GAAG,aAAa,CAs2BrF;AAED,qBAAa,SAAU,SAAQ,KAAK;IAClC,MAAM,EAAE,MAAM,CAAC;IACf;kFAC8E;IAC9E,IAAI,CAAC,EAAE,MAAM,CAAC;gBACF,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM;CAM3D"}

package/dist/types/auth/continuation.d.ts

@@ -0,0 +1,10 @@
+/** Internal auth response parsing. Pending credentials never enter user state. */
+export declare function authData(value: unknown): Record<string, unknown> | null;
+export declare function mfaChallenge(value: unknown): {
+    mfa_required: true;
+    mfa_token: string;
+} | null;
+export declare function isAuthUser(value: unknown): value is {
+    id: string;
+} & Record<string, unknown>;
+//# sourceMappingURL=continuation.d.ts.map

package/dist/types/auth/continuation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"continuation.d.ts","sourceRoot":"","sources":["../../../src/auth/continuation.ts"],"names":[],"mappings":"AAAA,kFAAkF;AAClF,wBAAgB,QAAQ,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAKvE;AAED,wBAAgB,YAAY,CAAC,KAAK,EAAE,OAAO,GAAG;IAAE,YAAY,EAAE,IAAI,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,CAK7F;AAED,wBAAgB,UAAU,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI;IAAE,EAAE,EAAE,MAAM,CAAA;CAAE,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAK5F"}