@sylphx/sdk 0.10.0 → 0.10.1

package/dist/react/index.mjs

@@ -1041,7 +1041,7 @@ var PlatformContext = createContext3(null);
 // src/connection-url.ts
 var SYLPHX_PROTOCOL = "sylphx:";
 var DEFAULT_VERSION = "v1";
-var CREDENTIAL_REGEX = /^(pk|sk)_(dev|stg|prod|prev)_[a-f0-9]{32,64}$/;
+var CREDENTIAL_REGEX = /^(pk|sk)_(dev|stg|prod|prev)(?:_[a-z0-9]{12})?_[a-f0-9]{32,64}$/;
 var VERSION_REGEX = /^v[0-9]+$/;
 var SLUG_REGEX = /^[a-z0-9]([a-z0-9-]*[a-z0-9])?$/;
 var InvalidConnectionUrlError = class _InvalidConnectionUrlError extends Error {
@@ -1058,7 +1058,7 @@ function fail(reason) {
 function parseCredential(raw) {
   const match = CREDENTIAL_REGEX.exec(raw);
   if (!match) {
-    fail(`credential must match (pk|sk)_(dev|stg|prod|prev)_[a-f0-9]{32,64}, got "${raw}"`);
+    fail(`credential must match (pk|sk)_(dev|stg|prod|prev)(_{ref})?_{hex}, got "${raw}"`);
   }
   return {
     credentialType: match[1],
@@ -1136,7 +1136,7 @@ function parseConnectionUrl(url) {
 init_constants();
 var LEGACY_EMBEDDED_REF_PATTERN = /^(pk|sk)_(dev|stg|prod|prev)_[a-z0-9]{12}_[a-f0-9]+$/;
 var LEGACY_APP_KEY_PATTERN = /^app_(dev|stg|prod|prev)_/;
-var MIGRATION_MESSAGE = "API key format has changed. Use a sylphx:// connection URL instead.\n\nNew format: sylphx://pk_prod_{hex}@your-slug.api.sylphx.com\n\nGenerate new credentials from the Sylphx Console \u2192 Your App \u2192 Environments.\nSee https://docs.sylphx.com/migration for details.";
+var MIGRATION_MESSAGE = "API key format has changed. Use a sylphx:// connection URL instead.\n\nNew format: sylphx://pk_prod_{ref?}_{hex}@your-slug.api.sylphx.com\n\nGenerate new credentials from the Sylphx Console \u2192 Your App \u2192 Environments.\nSee https://docs.sylphx.com/migration for details.";
 function rejectLegacyKeyFormat(input) {
   const trimmed = input.trim().toLowerCase();
   if (LEGACY_APP_KEY_PATTERN.test(trimmed)) {
@@ -1259,7 +1259,7 @@ function createConfigFromComponents(input) {
     });
   }
   throw new SylphxError(
-    `[Sylphx] Invalid credential format. Expected (pk|sk)_(dev|stg|prod|prev)_[a-f0-9]{32,64}. Got: "${trimmedCred.slice(0, 30)}..."`,
+    `[Sylphx] Invalid credential format. Expected (pk|sk)_(dev|stg|prod|prev)(_{ref})?_{hex}. Got: "${trimmedCred.slice(0, 30)}..."`,
     { code: "BAD_REQUEST" }
   );
 }
@@ -2748,6 +2748,7 @@ var ORG_STORAGE_KEY = "sylphx_active_org";
 var ORG_BROADCAST_CHANNEL = "sylphx_org_sync";
 function useOrganization() {
   const platform = useContext4(PlatformContext);
+  const auth = useAuthContextSafe();
   const [organizations, setOrganizations] = useState4([]);
   const [organization, setOrganization] = useState4(null);
   const [members, setMembers] = useState4([]);
@@ -2824,6 +2825,9 @@ function useOrganization() {
       }
       try {
         const result = await getOrganization(config2, orgIdOrSlug);
+        if (auth?.isSignedIn) {
+          await auth.switchOrganizationToken(result.organization.id);
+        }
         setOrganization(result.organization);
         setRole(result.membership?.role ?? null);
         storeOrgSlug(result.organization.slug);
@@ -2844,7 +2848,7 @@ function useOrganization() {
         setError(err instanceof Error ? err : new Error("Failed to load organization"));
       }
     },
-    [config2, storeOrgSlug, broadcastOrgChange]
+    [auth, config2, storeOrgSlug, broadcastOrgChange]
   );
   useEffect3(() => {
     if (!config2) {
@@ -3006,6 +3010,7 @@ function useOrganization() {
     role,
     hasPermission: hasPermission2,
     setOrganization: selectOrganization,
+    switchOrg: selectOrganization,
     createOrganization: createOrg,
     updateOrganization: updateOrg,
     deleteOrganization: deleteOrg,
@@ -11543,13 +11548,14 @@ async function linkAnonymousConsents(config2, input) {
 init_constants();
 
 // src/key-validation.ts
-var PUBLIC_KEY_PATTERN = /^pk_(dev|stg|prod)_[a-z0-9]{12}_[a-f0-9]{32}$/;
+var PUBLIC_KEY_PATTERN = /^pk_(dev|stg|prod|prev)(?:_[a-z0-9]{12})?_[a-f0-9]{32}$/;
 var APP_ID_PATTERN = /^(app|pk)_(dev|stg|prod|prev)_[a-z0-9_-]+$/;
-var SECRET_KEY_PATTERN = /^sk_(dev|stg|prod)_[a-z0-9_-]+$/;
+var SECRET_KEY_PATTERN = /^sk_(dev|stg|prod|prev)_[a-z0-9_-]+$/;
 var ENV_PREFIX_MAP = {
   dev: "development",
   stg: "staging",
-  prod: "production"
+  prod: "production",
+  prev: "preview"
 };
 function detectKeyIssues(key) {
   const issues = [];
@@ -11574,7 +11580,7 @@ The SDK will automatically sanitize the key, but fixing the source is recommende
 }
 function createInvalidKeyError(keyType, key, envVarName) {
   const maskedKey = key.length > 20 ? `${key.slice(0, 20)}...` : key;
-  const formatHint = keyType === "appId" ? "pk_(dev|stg|prod)_{ref}_{hex} or app_(dev|stg|prod)_[id]" : "sk_(dev|stg|prod)_{ref}_{hex}";
+  const formatHint = keyType === "appId" ? "pk_(dev|stg|prod|prev)_{ref}_{hex} or app_(dev|stg|prod|prev)_[id]" : "sk_(dev|stg|prod|prev)_{ref}_{hex}";
   const keyTypeName = keyType === "appId" ? "App ID" : "Secret Key";
   return `[Sylphx] Invalid ${keyTypeName} format.
 
@@ -11587,7 +11593,7 @@ You can find your keys in the Sylphx Console \u2192 API Keys.
 Common issues:
 \u2022 Key has uppercase characters (must be lowercase)
 \u2022 Key has wrong prefix (App ID: pk_ or app_, Secret Key: sk_)
-\u2022 Key has invalid environment (must be dev, stg, or prod)
+\u2022 Key has invalid environment (must be dev, stg, prod, or prev)
 \u2022 Key was copied with extra whitespace`;
 }
 function extractEnvironment(key) {
@@ -11634,7 +11640,7 @@ function validateKeyForType(key, keyType, pattern, envVarName) {
   };
 }
 function validatePublicKey(key) {
-  return validateKeyForType(key, "publicKey", PUBLIC_KEY_PATTERN, "NEXT_PUBLIC_SYLPHX_KEY");
+  return validateKeyForType(key, "publicKey", PUBLIC_KEY_PATTERN, "publishable credential");
 }
 function validateAppId(key) {
   return validateKeyForType(key, "appId", APP_ID_PATTERN, "NEXT_PUBLIC_SYLPHX_APP_ID");
@@ -11650,7 +11656,7 @@ function validateAndSanitizeAppId(key) {
   return result.sanitizedKey;
 }
 function validateSecretKey(key) {
-  return validateKeyForType(key, "secret", SECRET_KEY_PATTERN, "SYLPHX_SECRET_KEY");
+  return validateKeyForType(key, "secret", SECRET_KEY_PATTERN, "secret credential");
 }
 function validateAndSanitizeSecretKey(key) {
   const result = validateSecretKey(key);
@@ -11691,7 +11697,7 @@ function isProductionKey(key) {
 }
 function getCookieNamespace(secretKey) {
   const env = detectEnvironment(secretKey);
-  const shortEnv = env === "development" ? "dev" : env === "staging" ? "stg" : "prod";
+  const shortEnv = env === "development" ? "dev" : env === "staging" ? "stg" : env === "preview" ? "prev" : "prod";
   return `sylphx_${shortEnv}`;
 }
 function detectKeyType(key) {
@@ -11721,7 +11727,7 @@ function validateKey(key) {
   return {
     valid: false,
     sanitizedKey: "",
-    error: key ? `Invalid key format. Keys must start with 'pk_' (publishable), 'app_' (legacy), or 'sk_' (secret), followed by environment (dev/stg/prod). Got: ${key.slice(0, 20)}...` : "API key is required but was not provided.",
+    error: key ? `Invalid key format. Keys must start with 'pk_' (publishable), 'app_' (legacy), or 'sk_' (secret), followed by environment (dev/stg/prod/prev). Got: ${key.slice(0, 20)}...` : "API key is required but was not provided.",
     issues: key ? ["invalid_format"] : ["missing"]
   };
 }
@@ -13034,6 +13040,8 @@ function SylphxProviderInner({
           user: event.data.user,
           error: null
         }));
+      } else if (event.data?.type === "org-token-change") {
+        tokenManager.invalidate();
       }
     };
     channel.addEventListener("message", handleMessage);
@@ -13041,7 +13049,7 @@ function SylphxProviderInner({
       channel.removeEventListener("message", handleMessage);
       channel.close();
     };
-  }, [appId]);
+  }, [appId, tokenManager]);
   useEffect23(() => {
     const handleVisibilityChange = () => {
       if (document.visibilityState === "visible") {
@@ -13166,6 +13174,39 @@ function SylphxProviderInner({
       return null;
     }
   }, [authState.isSignedIn, authPrefix]);
+  const switchOrganizationToken = useCallback27(
+    async (orgId) => {
+      if (!authState.isSignedIn) {
+        throw new Error("Not authenticated");
+      }
+      const response = await fetch(`${authPrefix}/switch-org`, {
+        method: "POST",
+        headers: { "Content-Type": "application/json" },
+        credentials: "include",
+        body: JSON.stringify({ orgId })
+      });
+      if (!response.ok) {
+        const data = await response.json().catch(() => ({}));
+        throw new Error(data.error || data.message || "Failed to switch organization");
+      }
+      tokenManager.invalidate();
+      setAuthState((prev) => ({
+        ...prev,
+        isLoaded: true,
+        isSignedIn: true,
+        error: null
+      }));
+      if (typeof window !== "undefined" && typeof BroadcastChannel !== "undefined") {
+        try {
+          const channel = new BroadcastChannel(`sylphx-auth-${appId}`);
+          channel.postMessage({ type: "org-token-change" });
+          channel.close();
+        } catch {
+        }
+      }
+    },
+    [appId, authPrefix, authState.isSignedIn, tokenManager]
+  );
   const resetPassword = useCallback27(
     async (options) => {
       await api.post("/auth/reset-password", {
@@ -14326,6 +14367,7 @@ function SylphxProviderInner({
       signUp,
       signOut,
       getToken,
+      switchOrganizationToken,
       resetPassword,
       verifyEmail,
       resendVerificationEmail,
@@ -14349,6 +14391,7 @@ function SylphxProviderInner({
       signUp,
       signOut,
       getToken,
+      switchOrganizationToken,
       resetPassword,
       verifyEmail,
       resendVerificationEmail,
@@ -14368,6 +14411,7 @@ function SylphxProviderInner({
     () => ({
       appId,
       platformUrl,
+      authPrefix,
       slug: resolvedRef,
       ref: resolvedRef,
       anonymousId,
@@ -14443,6 +14487,7 @@ function SylphxProviderInner({
       api,
       appId,
       platformUrl,
+      authPrefix,
       anonymousId,
       queryClient,
       clickIds,
@@ -14774,7 +14819,6 @@ var PATHS = {
   versions: (id) => `/storage/files/${encodeURIComponent(String(id))}/versions`,
   versionRestore: (id, vid) => `/storage/files/${encodeURIComponent(String(id))}/versions/${encodeURIComponent(String(vid))}:restore`
 };
-var isBrowser = () => typeof globalThis !== "undefined" && typeof globalThis.window !== "undefined";
 var hasXhr = () => typeof globalThis.XMLHttpRequest !== "undefined";
 var hasLocalStorage = () => {
   try {
@@ -14786,16 +14830,14 @@ var hasLocalStorage = () => {
 };
 async function computeSha256Hex(blob) {
   const subtle = globalThis.crypto?.subtle;
-  if (subtle?.digest) {
-    const buf2 = await blob.arrayBuffer();
-    const digest = await subtle.digest("SHA-256", buf2);
-    return bytesToHex(new Uint8Array(digest));
+  if (!subtle?.digest) {
+    throw new SylphxError("Web Crypto SHA-256 support is required for storage uploads", {
+      code: "NOT_IMPLEMENTED"
+    });
   }
-  const nodeCrypto = await import("crypto");
-  const hash = nodeCrypto.createHash("sha256");
-  const buf = Buffer.from(await blob.arrayBuffer());
-  hash.update(buf);
-  return hash.digest("hex");
+  const buf = await blob.arrayBuffer();
+  const digest = await subtle.digest("SHA-256", buf);
+  return bytesToHex(new Uint8Array(digest));
 }
 function bytesToHex(b2) {
   let s2 = "";
@@ -14812,10 +14854,6 @@ function persistResume(rec) {
       localStorage.setItem(resumeKey(rec.uploadId), JSON.stringify(rec));
     } catch {
     }
-    return;
-  }
-  if (!isBrowser()) {
-    void persistResumeNode(rec);
   }
 }
 function clearResume(uploadId) {
@@ -14824,41 +14862,6 @@ function clearResume(uploadId) {
       localStorage.removeItem(resumeKey(uploadId));
     } catch {
     }
-    return;
-  }
-  if (!isBrowser()) void clearResumeNode(uploadId);
-}
-async function persistResumeNode(rec) {
-  try {
-    const fs = await import("fs/promises");
-    const path = await import("path");
-    const os = await import("os");
-    const dir = path.join(os.homedir(), ".sylphx");
-    await fs.mkdir(dir, { recursive: true });
-    const file = path.join(dir, "uploads.json");
-    let store = {};
-    try {
-      const text = await fs.readFile(file, "utf8");
-      store = JSON.parse(text);
-    } catch {
-      store = {};
-    }
-    store[rec.uploadId] = rec;
-    await fs.writeFile(file, JSON.stringify(store), "utf8");
-  } catch {
-  }
-}
-async function clearResumeNode(uploadId) {
-  try {
-    const fs = await import("fs/promises");
-    const path = await import("path");
-    const os = await import("os");
-    const file = path.join(os.homedir(), ".sylphx", "uploads.json");
-    const text = await fs.readFile(file, "utf8");
-    const store = JSON.parse(text);
-    delete store[uploadId];
-    await fs.writeFile(file, JSON.stringify(store), "utf8");
-  } catch {
   }
 }
 function putBlob(url, body, headers, signal, onProgress) {
@@ -15212,6 +15215,7 @@ var storageKeys = {
 function useStorage() {
   const config2 = useSdkConfig2();
   const queryClient = useQueryClient6();
+  const [progress, setProgress] = useState31(0);
   const listQuery = useQuery7({
     queryKey: storageKeys.list({}),
     queryFn: async () => {
@@ -15224,26 +15228,46 @@ function useStorage() {
   const uploadMutation = useMutation2({
     mutationFn: async (input) => {
       if (!config2) throw new Error("SDK not configured \u2014 wrap your app in SylphxProvider");
-      return storage.uploads.create(config2, input.blob, input.options ?? {});
+      setProgress(0);
+      return storage.uploads.create(config2, input.blob, {
+        ...input.options ?? {},
+        onProgress: (event) => {
+          const nextProgress = event.total > 0 ? Math.min(100, Math.round(event.loaded / event.total * 100)) : 0;
+          setProgress(nextProgress);
+          input.options?.onProgress?.(event);
+        }
+      });
     },
     onSuccess: () => {
+      setProgress(100);
       void queryClient.invalidateQueries({ queryKey: storageKeys.lists() });
+    },
+    onError: () => {
+      setProgress(0);
     }
   });
   const upload = useCallback29(
     (blob, options) => uploadMutation.mutateAsync({ blob, options }),
     [uploadMutation]
   );
+  const uploadAvatar = useCallback29(
+    (blob, options) => upload(blob, { visibility: "public", folder: "avatars", ...options }),
+    [upload]
+  );
   const refetch = useCallback29(async () => {
     await listQuery.refetch();
   }, [listQuery]);
   const error = uploadMutation.error ?? listQuery.error;
+  const uploadError = uploadMutation.error;
   return {
     upload,
+    uploadAvatar,
     files: listQuery.data?.files,
     isUploading: uploadMutation.isPending,
     isLoadingFiles: listQuery.isLoading,
+    progress,
     error,
+    uploadError,
     refetch
   };
 }
@@ -36155,23 +36179,24 @@ var mixpanelHandler = {
     const { token, debug } = config2;
     ((f2, b2) => {
       if (!b2) return;
-      const c2 = {};
-      c2._i = [];
-      c2.init = (e2, f3) => {
-        c2._i.push([e2, f3]);
-      };
-      c2.track = (...args) => {
-        c2._i[0]?.[2]?.track?.(...args);
-      };
-      c2.identify = (...args) => {
-        c2._i[0]?.[2]?.identify?.(...args);
-      };
-      c2.people = {
-        // biome-ignore lint/suspicious/noExplicitAny: Mixpanel SDK vendor snippet — matches Mixpanel's own typings
-        set: (...args) => {
-          c2._i[0]?.[2]?.people?.set?.(...args);
+      const c2 = {
+        _i: [],
+        init: (token2, options = {}) => {
+          c2._i.push([token2, options]);
+        },
+        track: (...args) => {
+          c2._i[0]?.[2]?.track?.(String(args[0] ?? ""), args[1]);
+        },
+        identify: (...args) => {
+          c2._i[0]?.[2]?.identify?.(String(args[0] ?? ""));
+        },
+        people: {
+          set: (...args) => {
+            c2._i[0]?.[2]?.people?.set?.(args[0]);
+          }
         }
       };
+      c2._i = [];
       const a2 = b2.createElement("script");
       a2.type = "text/javascript";
       a2.async = true;
@@ -36231,14 +36256,16 @@ var segmentHandler = {
         "setAnonymousId",
         "addDestinationMiddleware"
       ];
-      analytics.factory = // biome-ignore lint/suspicious/noExplicitAny: Segment SDK vendor snippet — returns a stub function that matches any Segment analytics method signature
-      (e2) => (...args) => {
-        args.unshift(e2);
-        analytics.push(args);
-        return analytics;
+      analytics.factory = (method) => {
+        return (...args) => {
+          args.unshift(method);
+          analytics.push(args);
+          return analytics;
+        };
       };
       for (let e2 = 0; e2 < analytics.methods.length; e2++) {
         const key = analytics.methods[e2];
+        if (!key) continue;
         analytics[key] = analytics.factory(key);
       }
       analytics.load = (key, e2) => {
@@ -36270,7 +36297,24 @@ var posthogHandler = {
     const { apiKey, apiHost = "https://us.i.posthog.com" } = config2;
     ((t2, e2) => {
       if (!e2) return;
-      const o2 = {};
+      const o2 = {
+        __load_queue: [],
+        _i: [],
+        people: {
+          set: (...args) => {
+            o2.__load_queue.push(["people.set", args]);
+          }
+        },
+        init: (apiKey2, config3) => {
+          o2._i.push([apiKey2, config3]);
+          const r2 = e2.createElement("script");
+          r2.type = "text/javascript";
+          r2.async = true;
+          r2.src = "https://us-assets.i.posthog.com/static/array.js";
+          const s2 = e2.getElementsByTagName("script")[0];
+          s2.parentNode?.insertBefore(r2, s2);
+        }
+      };
       let n2;
       const p2 = [
         "snapshot",
@@ -36296,27 +36340,10 @@ var posthogHandler = {
       for (n2 of p2) {
         o2[n2] = /* @__PURE__ */ ((n3) => (...args) => {
           if (!o2.__loaded) {
-            o2.__load_queue = o2.__load_queue || [];
             o2.__load_queue.push([n3, args]);
           }
         })(n2);
       }
-      o2.people = {
-        // biome-ignore lint/suspicious/noExplicitAny: PostHog SDK vendor snippet — matches PostHog's own typings
-        set: (...args) => {
-          o2.__load_queue.push(["people.set", args]);
-        }
-      };
-      o2._i = [];
-      o2.init = (apiKey2, config3) => {
-        o2._i.push([apiKey2, config3]);
-        const r2 = e2.createElement("script");
-        r2.type = "text/javascript";
-        r2.async = true;
-        r2.src = "https://us-assets.i.posthog.com/static/array.js";
-        const s2 = e2.getElementsByTagName("script")[0];
-        s2.parentNode?.insertBefore(r2, s2);
-      };
       t2.posthog = o2;
     })(window, document);
     window.posthog?.init(apiKey, { api_host: apiHost });
@@ -36336,25 +36363,26 @@ var amplitudeHandler = {
     const { apiKey, serverUrl } = config2;
     ((e2, t2) => {
       if (!t2) return;
-      const r2 = {};
-      r2._q = [];
-      r2.track = (...args) => {
-        r2._q.push(["track", args]);
-      };
-      r2.identify = (...args) => {
-        r2._q.push(["identify", args]);
-      };
-      r2.setUserId = (...args) => {
-        r2._q.push(["setUserId", args]);
-      };
-      r2.init = (apiKey2, options) => {
-        r2._q.push(["init", [apiKey2, options]]);
-        const n2 = t2.createElement("script");
-        n2.type = "text/javascript";
-        n2.async = true;
-        n2.src = "https://cdn.amplitude.com/libs/analytics-browser-2.0.0-min.js.gz";
-        const o2 = t2.getElementsByTagName("script")[0];
-        o2.parentNode?.insertBefore(n2, o2);
+      const r2 = {
+        _q: [],
+        track: (...args) => {
+          r2._q.push(["track", [...args]]);
+        },
+        identify: (...args) => {
+          r2._q.push(["identify", [...args]]);
+        },
+        setUserId: (...args) => {
+          r2._q.push(["setUserId", [...args]]);
+        },
+        init: (apiKey2, options) => {
+          r2._q.push(["init", [apiKey2, options]]);
+          const n2 = t2.createElement("script");
+          n2.type = "text/javascript";
+          n2.async = true;
+          n2.src = "https://cdn.amplitude.com/libs/analytics-browser-2.0.0-min.js.gz";
+          const o2 = t2.getElementsByTagName("script")[0];
+          o2.parentNode?.insertBefore(n2, o2);
+        }
       };
       e2.amplitude = r2;
     })(window, document);
@@ -38018,7 +38046,7 @@ function createTasksHandler(taskDefs, options = {}) {
         { status: 400 }
       );
     }
-    const signingSecret = options.signingSecret ?? process.env.SYLPHX_SIGNING_SECRET ?? process.env.SYLPHX_SECRET_KEY ?? "";
+    const signingSecret = options.signingSecret ?? process.env.SYLPHX_SIGNING_SECRET ?? "";
     if (signingSecret) {
       const signature = req.headers.get("x-sylphx-signature") ?? "";
       if (!signature) {
@@ -38249,7 +38277,9 @@ var TasksClient = class {
     const params = new URLSearchParams();
     if (options?.limit) params.set("limit", String(options.limit));
     if (options?.offset) params.set("offset", String(options.offset));
-    const response = await this.fetch(`/jobs/dlq?${params.toString()}`);
+    const response = await this.fetch(
+      `/jobs/dlq?${params.toString()}`
+    );
     return { entries: response.entries, total: response.total };
   }
   /**
@@ -38294,7 +38324,9 @@ var TasksClient = class {
    * Get a workflow by ID
    */
   async getWorkflow(workflowId) {
-    const response = await this.fetch(`/workflows/${workflowId}`);
+    const response = await this.fetch(
+      `/workflows/${workflowId}`
+    );
     return response.workflow;
   }
   /**
@@ -38315,7 +38347,9 @@ var TasksClient = class {
     if (options?.status) params.set("status", options.status);
     if (options?.limit) params.set("limit", String(options.limit));
     if (options?.offset) params.set("offset", String(options.offset));
-    const response = await this.fetch(`/workflows?${params.toString()}`);
+    const response = await this.fetch(
+      `/workflows?${params.toString()}`
+    );
     return { workflows: response.workflows, total: response.total };
   }
   // =========================================================================
@@ -38329,25 +38363,33 @@ var TasksClient = class {
     if (options?.status) params.set("status", options.status);
     if (options?.limit) params.set("limit", String(options.limit));
     if (options?.offset) params.set("offset", String(options.offset));
-    const response = await this.fetch(`/jobs/scheduled?${params.toString()}`);
+    const response = await this.fetch(
+      `/jobs/scheduled?${params.toString()}`
+    );
     return { scheduled: response.scheduled, total: response.total };
   }
   /**
    * Pause a scheduled job
    */
   async pauseScheduledJob(scheduleId) {
-    const response = await this.fetch(`/jobs/scheduled/${scheduleId}/pause`, {
-      method: "POST"
-    });
+    const response = await this.fetch(
+      `/jobs/scheduled/${scheduleId}/pause`,
+      {
+        method: "POST"
+      }
+    );
     return response.scheduled;
   }
   /**
    * Resume a scheduled job
    */
   async resumeScheduledJob(scheduleId) {
-    const response = await this.fetch(`/jobs/scheduled/${scheduleId}/resume`, {
-      method: "POST"
-    });
+    const response = await this.fetch(
+      `/jobs/scheduled/${scheduleId}/resume`,
+      {
+        method: "POST"
+      }
+    );
     return response.scheduled;
   }
   /**
@@ -38389,7 +38431,6 @@ var TasksClient = class {
   // =========================================================================
   // Internal
   // =========================================================================
-  // biome-ignore lint/suspicious/noExplicitAny: Internal method, type safety enforced at public API level -- Internal method, type safety enforced at public API level
   async fetch(path, options) {
     const url = `${this.config.apiEndpoint}${path}`;
     const response = await fetch(url, {
@@ -38403,10 +38444,12 @@ var TasksClient = class {
       }
     });
     if (!response.ok) {
-      const error = await response.json().catch(() => ({ message: response.statusText }));
-      throw new Error(error.message || `HTTP ${response.status}`);
+      const errorPayload = await response.json().catch(() => ({ message: response.statusText }));
+      const message = typeof errorPayload === "object" && errorPayload !== null && "message" in errorPayload && typeof errorPayload.message === "string" ? errorPayload.message : response.statusText;
+      throw new Error(message || `HTTP ${response.status}`);
     }
-    return response.json();
+    const payload = await response.json();
+    return payload;
   }
   // =========================================================================
   // Native Task Engine — Handler API
@@ -38449,31 +38492,35 @@ var TasksClient = class {
    * Returns the taskRunId which can be used to poll status.
    */
   async trigger(taskName, payload, options) {
-    const response = await this.fetch("/tasks/trigger", {
-      method: "POST",
-      body: JSON.stringify({
-        taskName,
-        payload,
-        delay: options?.delay,
-        scheduledFor: options?.scheduledFor?.toISOString(),
-        idempotencyKey: options?.idempotencyKey,
-        maxAttempts: options?.maxAttempts
-      })
-    });
+    const response = await this.fetch(
+      "/tasks/trigger",
+      {
+        method: "POST",
+        body: JSON.stringify({
+          taskName,
+          payload,
+          delay: options?.delay,
+          scheduledFor: options?.scheduledFor?.toISOString(),
+          idempotencyKey: options?.idempotencyKey,
+          maxAttempts: options?.maxAttempts
+        })
+      }
+    );
     return response;
   }
   /**
    * Fetch the current status of a task run.
    */
   async getTaskRun(taskRunId) {
-    const response = await this.fetch(`/tasks/${taskRunId}`);
-    return response;
+    return this.fetch(`/tasks/${taskRunId}`);
   }
   /**
    * Cancel a pending or waiting task run.
    */
   async cancelTaskRun(taskRunId) {
-    const response = await this.fetch(`/tasks/${taskRunId}/cancel`, { method: "POST" });
+    const response = await this.fetch(`/tasks/${taskRunId}/cancel`, {
+      method: "POST"
+    });
     return response.success;
   }
   /**
@@ -38485,8 +38532,7 @@ var TasksClient = class {
     if (options?.status) params.set("status", options.status);
     if (options?.limit) params.set("limit", String(options.limit));
     if (options?.offset) params.set("offset", String(options.offset));
-    const response = await this.fetch(`/tasks?${params.toString()}`);
-    return response;
+    return this.fetch(`/tasks?${params.toString()}`);
   }
 };
 function createTasksClient(config2) {