@surf-ai/sdk 0.1.6-beta → 1.0.0-alpha.0

package/dist/server/index.js

@@ -1,26 +1,35 @@
 import {
   __require,
   get,
-  post
-} from "../chunk-J4OMYO3F.js";
+  post,
+  readAdminApiKey
+} from "../chunk-4NA3GKVD.js";
 
 // src/server/runtime.ts
 import express from "express";
 import cors from "cors";
 import fs from "fs";
 import path from "path";
-import { createProxyMiddleware, responseInterceptor } from "http-proxy-middleware";
 import { Cron } from "croner";
+function requireBearerAuth(req, res, next) {
+  const apiKey = readAdminApiKey();
+  if (!apiKey) {
+    return res.status(503).json({ error: "SURF_API_KEY is not configured" });
+  }
+  if (req.headers.authorization !== `Bearer ${apiKey}`) {
+    return res.status(401).json({ error: "Unauthorized" });
+  }
+  next();
+}
 function createServer(options = {}) {
-  const port = options.port || parseInt(process.env.PORT || "3001", 10);
+  const port = options.port ?? (process.env.PORT ? Number.parseInt(process.env.PORT, 10) : void 0);
+  if (!Number.isInteger(port)) {
+    throw new Error("createServer requires a port via options.port or process.env.PORT");
+  }
   const routesDir = options.routesDir || path.join(process.cwd(), "routes");
   const cronDir = options.cronDir || process.cwd();
-  const enableProxy = options.proxy !== false;
   const app = express();
   app.use(cors());
-  if (enableProxy) {
-    setupProxy(app, port);
-  }
   app.use(express.json());
   app.get("/api/health", (_req, res) => {
     res.json({ status: "ok" });
@@ -30,12 +39,13 @@ function createServer(options = {}) {
       if (!file.endsWith(".js") && !file.endsWith(".ts")) continue;
       const name = file.replace(/\.(js|ts)$/, "");
       try {
-        const route = __require(path.join(routesDir, file));
-        const handler = route.default || route;
+        const handler = __require(path.join(routesDir, file));
         if (typeof handler === "function") {
           app.use(`/api/${name}`, handler);
           console.log(`Route registered: /api/${name}`);
+          continue;
         }
+        throw new Error(`Route module must export a handler function via module.exports`);
       } catch (err) {
         console.error(`Failed to load route ${file}: ${err.message}`);
       }
@@ -59,51 +69,6 @@ function createServer(options = {}) {
     }
   };
 }
-function env(surfName, legacyName) {
-  return process.env[surfName] || process.env[legacyName];
-}
-function setupProxy(app, port) {
-  const gatewayUrl = env("SURF_DEPLOYED_GATEWAY_URL", "GATEWAY_URL");
-  const appToken = env("SURF_DEPLOYED_APP_TOKEN", "APP_TOKEN");
-  const proxyBase = env("SURF_SANDBOX_PROXY_BASE", "DATA_PROXY_BASE");
-  const isDeployed = Boolean(gatewayUrl && appToken);
-  const bufferResponse = responseInterceptor(async (buf) => buf);
-  if (isDeployed) {
-    app.use("/proxy", createProxyMiddleware({
-      target: gatewayUrl,
-      changeOrigin: true,
-      selfHandleResponse: true,
-      pathRewrite: (p) => "/gateway/v1" + p,
-      headers: {
-        Authorization: `Bearer ${appToken}`,
-        "Accept-Encoding": "identity"
-      },
-      on: { proxyRes: bufferResponse }
-    }));
-    const loopback = `http://127.0.0.1:${port}/proxy`;
-    process.env.SURF_SANDBOX_PROXY_BASE = loopback;
-    process.env.DATA_PROXY_BASE = loopback;
-  } else if (proxyBase) {
-    const target = proxyBase.replace(/\/proxy$/, "");
-    app.use(createProxyMiddleware({
-      target,
-      changeOrigin: true,
-      pathFilter: "/proxy",
-      on: {
-        proxyReq: (proxyReq, req) => {
-          console.log(`[proxy] >> ${req.method} ${req.originalUrl}`);
-        },
-        proxyRes: (proxyRes, req) => {
-          console.log(`[proxy] << ${proxyRes.statusCode} ${req.method} ${req.originalUrl}`);
-        },
-        error: (err, req, res) => {
-          console.error(`[proxy] !! ${req.method} ${req.originalUrl} error: ${err.message}`);
-          if (!res.headersSent) res.status(502).json({ error: err.message });
-        }
-      }
-    }));
-  }
-}
 var schemaSync = { run: async () => {
 }, watch: () => {
 } };
@@ -143,7 +108,7 @@ function setupSchemaSync(app, schemaDir) {
         (t) => t && typeof t === "object" && /* @__PURE__ */ Symbol.for("drizzle:Name") in t
       );
       if (tables.length === 0) return;
-      const { get: dbGet, post: dbPost } = await import("../client-3YMIRPDV.js");
+      const { get: dbGet, post: dbPost } = await import("../client-Z45B2GYT.js");
       await dbPost("db/provision");
       const existing = (await dbGet("db/tables")).map((t) => t.name);
       const missing = tables.filter((t) => !existing.includes(getTableConfig(t).name));
@@ -207,7 +172,7 @@ function setupSchemaSync(app, schemaDir) {
     }
     console.error("DB schema sync failed after all retries");
   }
-  app.post("/api/__sync-schema", async (_req, res) => {
+  app.post("/api/__sync-schema", requireBearerAuth, async (_req, res) => {
     try {
       await syncWithRetry(2, 1500);
       res.json({ ok: true });
@@ -311,16 +276,7 @@ function setupCron(app, cronDir) {
       console.log(`Cron registered: [${task.id}] ${task.name} (${task.schedule})`);
     }
   }
-  const envFn = (s, l) => process.env[s] || process.env[l];
-  app.use("/api/cron", (req, res, next) => {
-    const appToken = envFn("SURF_DEPLOYED_APP_TOKEN", "APP_TOKEN");
-    if (!appToken) return next();
-    const auth = req.headers.authorization;
-    if (!auth || auth !== `Bearer ${appToken}`) {
-      return res.status(401).json({ error: "Unauthorized" });
-    }
-    next();
-  });
+  app.use("/api/cron", requireBearerAuth);
   app.get("/api/cron", (_req, res) => {
     res.json(cronTasks.map((t) => {
       const state = cronState.get(t.id) || { lastRunAt: null, lastStatus: null, lastError: null };

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@surf-ai/sdk",
-  "version": "0.1.6-beta",
-  "description": "Surf platform SDK — data API client, server runtime, React hooks, and database helpers",
+  "version": "1.0.0-alpha.0",
+  "description": "Surf platform SDK — data API client, server runtime, and database helpers",
   "type": "module",
   "exports": {
     "./server": {
@@ -9,20 +9,14 @@
       "import": "./dist/server/index.js",
       "require": "./dist/server/index.cjs"
     },
-    "./react": {
-      "types": "./dist/react/index.d.ts",
-      "import": "./dist/react/index.js"
-    },
     "./db": {
       "types": "./dist/db/index.d.ts",
       "import": "./dist/db/index.js",
       "require": "./dist/db/index.cjs"
-    },
-    "./theme.css": "./src/theme/index.css"
+    }
   },
   "files": [
-    "dist",
-    "src/theme"
+    "dist"
   ],
   "scripts": {
     "build": "tsup",
@@ -33,30 +27,13 @@
   "dependencies": {
     "express": "^4.22.0",
     "cors": "^2.8.5",
-    "http-proxy-middleware": "^3.0.0",
     "croner": "^9.0.0",
-    "drizzle-orm": "^0.44.0",
-    "@tanstack/react-query": "^5.94.0",
-    "clsx": "^2.1.0",
-    "tailwind-merge": "^2.6.0"
-  },
-  "peerDependencies": {
-    "react": "^19.0.0",
-    "react-dom": "^19.0.0"
-  },
-  "peerDependenciesMeta": {
-    "react": {
-      "optional": true
-    },
-    "react-dom": {
-      "optional": true
-    }
+    "drizzle-orm": "^0.44.0"
   },
   "devDependencies": {
     "tsup": "^8.0.0",
     "typescript": "^5.9.0",
     "@types/express": "^5.0.0",
-    "@types/cors": "^2.8.0",
-    "@types/react": "^19.0.0"
+    "@types/cors": "^2.8.0"
   }
 }

package/dist/chunk-J4OMYO3F.js

@@ -1,70 +0,0 @@
-var __require = /* @__PURE__ */ ((x) => typeof require !== "undefined" ? require : typeof Proxy !== "undefined" ? new Proxy(x, {
-  get: (a, b) => (typeof require !== "undefined" ? require : a)[b]
-}) : x)(function(x) {
-  if (typeof require !== "undefined") return require.apply(this, arguments);
-  throw Error('Dynamic require of "' + x + '" is not supported');
-});
-
-// src/data/client.ts
-var DEFAULT_PUBLIC_URL = "https://api.ask.surf/gateway/v1";
-function env(surfName, legacyName) {
-  return process.env[surfName] || process.env[legacyName];
-}
-function resolveConfig() {
-  const proxyBase = env("SURF_SANDBOX_PROXY_BASE", "DATA_PROXY_BASE");
-  if (proxyBase) {
-    return { baseUrl: proxyBase, headers: {} };
-  }
-  const gatewayUrl = env("SURF_DEPLOYED_GATEWAY_URL", "GATEWAY_URL");
-  const appToken = env("SURF_DEPLOYED_APP_TOKEN", "APP_TOKEN");
-  if (gatewayUrl && appToken) {
-    return {
-      baseUrl: `${gatewayUrl.replace(/\/$/, "")}/gateway/v1`,
-      headers: { Authorization: `Bearer ${appToken}` }
-    };
-  }
-  return { baseUrl: DEFAULT_PUBLIC_URL, headers: {} };
-}
-function normalizePath(path) {
-  return String(path || "").replace(/^\/+/, "").replace(/^(?:proxy\/)+/, "");
-}
-async function fetchJson(url, init, retries = 1) {
-  for (let attempt = 0; attempt <= retries; attempt++) {
-    const res = await fetch(url, init);
-    if (!res.ok) {
-      const text2 = await res.text();
-      throw new Error(`API error ${res.status}: ${text2.slice(0, 200)}`);
-    }
-    const text = await res.text();
-    if (text) return JSON.parse(text);
-    if (attempt < retries) await new Promise((r) => setTimeout(r, 1e3));
-  }
-  throw new Error(`Empty response from ${url}`);
-}
-async function get(path, params) {
-  const config = resolveConfig();
-  const cleaned = {};
-  if (params) {
-    for (const [k, v] of Object.entries(params)) {
-      if (v != null) cleaned[k] = String(v);
-    }
-  }
-  const qs = Object.keys(cleaned).length ? "?" + new URLSearchParams(cleaned).toString() : "";
-  return fetchJson(`${config.baseUrl}/${normalizePath(path)}${qs}`, {
-    headers: config.headers
-  });
-}
-async function post(path, body) {
-  const config = resolveConfig();
-  return fetchJson(`${config.baseUrl}/${normalizePath(path)}`, {
-    method: "POST",
-    headers: { ...config.headers, "Content-Type": "application/json" },
-    body: body ? JSON.stringify(body) : void 0
-  });
-}
-
-export {
-  __require,
-  get,
-  post
-};