@thewhateverapp/platform 0.0.1

package/README.md

@@ -0,0 +1,223 @@
+# @thewhateverapp/platform
+
+> ⚠️ **Beta Release (v0.0.1)**: This package is in early preview. Backend platform API is in development. Use `mock: true` mode for local development and testing. Production mode will be available when the platform API is deployed.
+
+Universal SDK for building apps on The Whatever App platform. Provides domain-specific services for storage, AI, database, analytics, identity, and more.
+
+## Features
+
+- **Auth Service**: OAuth-like permission system for app access to user data
+- **Storage Service**: Persistent KV storage scoped per app
+- **Database Service**: MongoDB-compatible document storage
+- **AI Service**: Multi-provider AI access (Claude, GPT, Gemini)
+- **Analytics Service**: Event tracking and metrics
+- **Identity Service**: User authentication across apps
+- **Assets Service**: File storage with CDN delivery
+- **Social Service**: Comments, likes, shares across apps
+
+### Coming Soon
+
+- **Payments Service**: Accept payments (Stripe + crypto) - _Feature gated_
+- **Notifications Service**: Email, push, and in-app notifications - _Feature gated_
+
+## Installation
+
+```bash
+npm install @thewhateverapp/platform
+```
+
+## Quick Start
+
+```typescript
+import { createPlatform } from '@thewhateverapp/platform';
+
+// In your app's worker
+export default {
+  async fetch(request, env, ctx) {
+    const platform = createPlatform({
+      env,
+      request,
+      waitUntil: ctx.waitUntil
+    });
+
+    const { storage, db, ai, analytics } = platform.getServices();
+
+    // Use services
+    await storage.set('user:123', { score: 100 });
+    const user = await db.collection('users').findOne({ _id: '123' });
+    const response = await ai.ask('Generate a greeting');
+    await analytics.track('page_view', { path: '/home' });
+
+    return new Response('Hello from Whatever!');
+  }
+};
+```
+
+## Architecture
+
+```
+App Code (using @thewhateverapp/platform)
+    ↓
+WhateverPlatform Container (DI)
+    ↓
+7 Services (abstracted)
+    ↓
+Platform API (platform.thewhatever.app)
+    ↓
+Backend Microservices (Kubernetes)
+    ↓
+MongoDB + Cloudflare
+```
+
+## Services
+
+### Auth Service
+
+OAuth-like permission system where apps start with minimal access (user ID only) and request additional permissions.
+
+```typescript
+import { AuthAPI } from '@thewhateverapp/platform';
+
+const auth = new AuthAPI({
+  apiUrl: 'https://platform.thewhatever.app',
+  apiKey: env.PLATFORM_API_KEY
+});
+
+// Verify user access token from tile SDK
+const payload = await auth.verifyUserToken(token);
+console.log(payload.userId, payload.scopes);
+
+// Get user context with granted scopes
+const user = await auth.getUserContext(userId, ['profile', 'email']);
+console.log(user.username, user.email);
+
+// Check what permissions user granted
+const perms = await auth.checkPermissions(userId, appId, ['email', 'wallet']);
+console.log(perms.granted, perms.pending, perms.denied);
+
+// Grant permissions (called by parent window)
+await auth.grantPermissions(userId, appId, ['profile', 'email']);
+
+// Revoke app permissions
+await auth.revokePermissions(userId, appId);
+```
+
+**Permission Scopes:**
+- `id` - User ID (always granted)
+- `profile` - Username, avatar, display name
+- `email` - Email address
+- `wallet` - Wallet addresses
+- `analytics:read` - View user analytics
+- `analytics:write` - Track analytics (auto-granted)
+- `storage:read` - Read storage (auto-granted)
+- `storage:write` - Write storage (auto-granted)
+
+### Storage Service
+```typescript
+await storage.set('key', value, { ttl: 3600 });
+const data = await storage.get('key');
+await storage.delete('key');
+const keys = await storage.list({ prefix: 'user:' });
+```
+
+### Database Service
+```typescript
+const users = db.collection('users');
+await users.insertOne({ name: 'Alice', score: 100 });
+const user = await users.findOne({ name: 'Alice' });
+await users.updateOne({ name: 'Alice' }, { $inc: { score: 50 } });
+```
+
+### AI Service
+```typescript
+const response = await ai.ask('What is the meaning of life?', {
+  provider: 'anthropic',
+  maxTokens: 500
+});
+
+const result = await ai.prompt({
+  prompt: 'Analyze this image',
+  capabilities: ['vision'],
+  images: [{ type: 'url', data: 'https://...' }]
+});
+```
+
+### Analytics Service
+```typescript
+await analytics.track('button_click', { button: 'submit' });
+await analytics.pageView('/home');
+const metrics = await analytics.getMetrics('7d');
+```
+
+### Identity Service
+```typescript
+const { userId, isNew } = await identity.resolve({
+  email: 'user@example.com'
+});
+
+await identity.link(userId, { walletAddress: '0x...' });
+const user = await identity.getUser(userId);
+```
+
+### Assets Service
+```typescript
+const result = await assets.upload('images/avatar.jpg', buffer, {
+  contentType: 'image/jpeg'
+});
+
+const url = assets.getUrl('images/avatar.jpg');
+await assets.delete('images/avatar.jpg');
+```
+
+### Payments Service
+```typescript
+const session = await payments.createCheckout({
+  amount: 999, // cents
+  currency: 'USD',
+  description: 'Premium feature'
+});
+
+const status = await payments.getStatus(session.id);
+```
+
+### Notifications Service
+```typescript
+await notifications.send({
+  userId: 'user_123',
+  channel: 'email',
+  template: 'welcome',
+  data: { name: 'Alice' }
+});
+
+await notifications.schedule({
+  userId: 'user_123',
+  channel: 'push',
+  message: 'Your report is ready',
+  scheduledFor: '2025-12-25T10:00:00Z'
+});
+```
+
+### Social Service
+```typescript
+await social.addComment({
+  entityId: 'post_123',
+  userId: 'user_456',
+  content: 'Great post!'
+});
+
+await social.like('post_123', 'user_456');
+const likes = await social.getLikes('post_123');
+const comments = await social.getComments('post_123');
+```
+
+## Security
+
+- All services are automatically scoped by app ID
+- Rate limiting enforced per app
+- API keys never exposed to client
+- All data isolated between apps
+- Type-safe APIs with full TypeScript support
+
+## License
+
+Proprietary - All rights reserved

package/dist/ai/mock.d.ts

@@ -0,0 +1,14 @@
+/**
+ * Mock AI service
+ */
+import type { AIService, AskOptions, PromptRequest, PromptResponse } from '../types';
+export declare class MockAI implements AIService {
+    private debug;
+    constructor(config?: {
+        debug?: boolean;
+    });
+    private log;
+    ask(prompt: string, options?: AskOptions): Promise<string>;
+    prompt(request: PromptRequest): Promise<PromptResponse>;
+}
+//# sourceMappingURL=mock.d.ts.map

package/dist/ai/mock.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mock.d.ts","sourceRoot":"","sources":["../../src/ai/mock.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,KAAK,EACV,SAAS,EACT,UAAU,EACV,aAAa,EACb,cAAc,EACf,MAAM,UAAU,CAAC;AAElB,qBAAa,MAAO,YAAW,SAAS;IACtC,OAAO,CAAC,KAAK,CAAU;gBAEX,MAAM,GAAE;QAAE,KAAK,CAAC,EAAE,OAAO,CAAA;KAAO;IAI5C,OAAO,CAAC,GAAG;IAML,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,UAAU,GAAG,OAAO,CAAC,MAAM,CAAC;IAO1D,MAAM,CAAC,OAAO,EAAE,aAAa,GAAG,OAAO,CAAC,cAAc,CAAC;CAoB9D"}

package/dist/ai/mock.js

@@ -0,0 +1,38 @@
+/**
+ * Mock AI service
+ */
+export class MockAI {
+    debug;
+    constructor(config = {}) {
+        this.debug = config.debug || false;
+    }
+    log(message, ...args) {
+        if (this.debug) {
+            console.log(`[MockAI] ${message}`, ...args);
+        }
+    }
+    async ask(prompt, options) {
+        this.log('Ask:', { prompt: prompt.substring(0, 100), options });
+        // Return a mock response
+        return `Mock AI response to: ${prompt.substring(0, 50)}...`;
+    }
+    async prompt(request) {
+        this.log('Prompt:', {
+            prompt: request.prompt.substring(0, 100),
+            provider: request.provider,
+        });
+        const text = `Mock AI response to: ${request.prompt.substring(0, 50)}...`;
+        return {
+            text,
+            provider: request.provider || 'mock',
+            model: request.model || 'mock-1.0',
+            tokensUsed: {
+                input: Math.floor(request.prompt.length / 4),
+                output: Math.floor(text.length / 4),
+                total: Math.floor((request.prompt.length + text.length) / 4),
+            },
+            cached: false,
+        };
+    }
+}
+//# sourceMappingURL=mock.js.map

package/dist/ai/mock.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mock.js","sourceRoot":"","sources":["../../src/ai/mock.ts"],"names":[],"mappings":"AAAA;;GAEG;AASH,MAAM,OAAO,MAAM;IACT,KAAK,CAAU;IAEvB,YAAY,SAA8B,EAAE;QAC1C,IAAI,CAAC,KAAK,GAAG,MAAM,CAAC,KAAK,IAAI,KAAK,CAAC;IACrC,CAAC;IAEO,GAAG,CAAC,OAAe,EAAE,GAAG,IAAW;QACzC,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,GAAG,CAAC,YAAY,OAAO,EAAE,EAAE,GAAG,IAAI,CAAC,CAAC;QAC9C,CAAC;IACH,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,MAAc,EAAE,OAAoB;QAC5C,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC;QAEhE,yBAAyB;QACzB,OAAO,wBAAwB,MAAM,CAAC,SAAS,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC;IAC9D,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,OAAsB;QACjC,IAAI,CAAC,GAAG,CAAC,SAAS,EAAE;YAClB,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,EAAE,GAAG,CAAC;YACxC,QAAQ,EAAE,OAAO,CAAC,QAAQ;SAC3B,CAAC,CAAC;QAEH,MAAM,IAAI,GAAG,wBAAwB,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC;QAE1E,OAAO;YACL,IAAI;YACJ,QAAQ,EAAE,OAAO,CAAC,QAAQ,IAAI,MAAM;YACpC,KAAK,EAAE,OAAO,CAAC,KAAK,IAAI,UAAU;YAClC,UAAU,EAAE;gBACV,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC;gBAC5C,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC;gBACnC,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;aAC7D;YACD,MAAM,EAAE,KAAK;SACd,CAAC;IACJ,CAAC;CACF"}

package/dist/ai/production.d.ts

@@ -0,0 +1,17 @@
+/**
+ * Production AI service
+ */
+import type { AIService, AskOptions, PromptRequest, PromptResponse } from '../types';
+interface ProductionAIConfig {
+    apiUrl: string;
+    apiKey?: string;
+}
+export declare class ProductionAI implements AIService {
+    private config;
+    constructor(config: ProductionAIConfig);
+    private request;
+    ask(prompt: string, options?: AskOptions): Promise<string>;
+    prompt(request: PromptRequest): Promise<PromptResponse>;
+}
+export {};
+//# sourceMappingURL=production.d.ts.map

package/dist/ai/production.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"production.d.ts","sourceRoot":"","sources":["../../src/ai/production.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,KAAK,EACV,SAAS,EACT,UAAU,EACV,aAAa,EACb,cAAc,EACf,MAAM,UAAU,CAAC;AAElB,UAAU,kBAAkB;IAC1B,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,qBAAa,YAAa,YAAW,SAAS;IAChC,OAAO,CAAC,MAAM;gBAAN,MAAM,EAAE,kBAAkB;YAEhC,OAAO;IAuBf,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,UAAU,GAAG,OAAO,CAAC,MAAM,CAAC;IAY1D,MAAM,CAAC,OAAO,EAAE,aAAa,GAAG,OAAO,CAAC,cAAc,CAAC;CAG9D"}

package/dist/ai/production.js

@@ -0,0 +1,41 @@
+/**
+ * Production AI service
+ */
+export class ProductionAI {
+    config;
+    constructor(config) {
+        this.config = config;
+    }
+    async request(endpoint, body) {
+        const headers = {
+            'Content-Type': 'application/json',
+        };
+        if (this.config.apiKey) {
+            headers['X-API-Key'] = this.config.apiKey;
+        }
+        const response = await fetch(`${this.config.apiUrl}/ai${endpoint}`, {
+            method: 'POST',
+            headers,
+            body: JSON.stringify(body),
+        });
+        if (!response.ok) {
+            const error = await response.json().catch(() => ({}));
+            throw new Error(error.error || `AI service error: ${response.statusText}`);
+        }
+        return response.json();
+    }
+    async ask(prompt, options) {
+        const result = await this.prompt({
+            prompt,
+            provider: options?.provider,
+            capabilities: options?.capabilities,
+            maxTokens: options?.maxTokens,
+            temperature: options?.temperature,
+        });
+        return result.text;
+    }
+    async prompt(request) {
+        return this.request('/prompt', request);
+    }
+}
+//# sourceMappingURL=production.js.map

package/dist/ai/production.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"production.js","sourceRoot":"","sources":["../../src/ai/production.ts"],"names":[],"mappings":"AAAA;;GAEG;AAcH,MAAM,OAAO,YAAY;IACH;IAApB,YAAoB,MAA0B;QAA1B,WAAM,GAAN,MAAM,CAAoB;IAAG,CAAC;IAE1C,KAAK,CAAC,OAAO,CAAI,QAAgB,EAAE,IAAS;QAClD,MAAM,OAAO,GAA2B;YACtC,cAAc,EAAE,kBAAkB;SACnC,CAAC;QAEF,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;YACvB,OAAO,CAAC,WAAW,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC;QAC5C,CAAC;QAED,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,MAAM,QAAQ,EAAE,EAAE;YAClE,MAAM,EAAE,MAAM;YACd,OAAO;YACP,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;SAC3B,CAAC,CAAC;QAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,KAAK,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAuB,CAAC;YAC5E,MAAM,IAAI,KAAK,CAAC,KAAK,CAAC,KAAK,IAAI,qBAAqB,QAAQ,CAAC,UAAU,EAAE,CAAC,CAAC;QAC7E,CAAC;QAED,OAAO,QAAQ,CAAC,IAAI,EAAE,CAAC;IACzB,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,MAAc,EAAE,OAAoB;QAC5C,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC;YAC/B,MAAM;YACN,QAAQ,EAAE,OAAO,EAAE,QAAQ;YAC3B,YAAY,EAAE,OAAO,EAAE,YAAY;YACnC,SAAS,EAAE,OAAO,EAAE,SAAS;YAC7B,WAAW,EAAE,OAAO,EAAE,WAAW;SAClC,CAAC,CAAC;QAEH,OAAO,MAAM,CAAC,IAAI,CAAC;IACrB,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,OAAsB;QACjC,OAAO,IAAI,CAAC,OAAO,CAAiB,SAAS,EAAE,OAAO,CAAC,CAAC;IAC1D,CAAC;CACF"}

package/dist/analytics/client.d.ts

@@ -0,0 +1,21 @@
+/**
+ * Analytics service client
+ */
+import type { AnalyticsService, AnalyticsEvent, MetricsData, EventQueryOptions } from '../types';
+interface AnalyticsConfig {
+    apiUrl: string;
+    apiKey: string;
+    appId: string;
+}
+export declare class AnalyticsAPI implements AnalyticsService {
+    private config;
+    constructor(config: AnalyticsConfig);
+    private request;
+    track(event: string, properties?: Record<string, any>): Promise<void>;
+    pageView(path: string, properties?: Record<string, any>): Promise<void>;
+    identify(userId: string, traits?: Record<string, any>): Promise<void>;
+    getMetrics(period: string): Promise<MetricsData>;
+    getEvents(options?: EventQueryOptions): Promise<AnalyticsEvent[]>;
+}
+export {};
+//# sourceMappingURL=client.d.ts.map

package/dist/analytics/client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../../src/analytics/client.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,KAAK,EACV,gBAAgB,EAChB,cAAc,EACd,WAAW,EACX,iBAAiB,EAClB,MAAM,UAAU,CAAC;AAElB,UAAU,eAAe;IACvB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;CACf;AAED,qBAAa,YAAa,YAAW,gBAAgB;IACvC,OAAO,CAAC,MAAM;gBAAN,MAAM,EAAE,eAAe;YAE7B,OAAO;IAuBf,KAAK,CAAC,KAAK,EAAE,MAAM,EAAE,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC;IAQrE,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC;IAIvE,QAAQ,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC;IAQrE,UAAU,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC;IAIhD,SAAS,CAAC,OAAO,CAAC,EAAE,iBAAiB,GAAG,OAAO,CAAC,cAAc,EAAE,CAAC;CAUxE"}

package/dist/analytics/client.js

@@ -0,0 +1,60 @@
+/**
+ * Analytics service client
+ */
+export class AnalyticsAPI {
+    config;
+    constructor(config) {
+        this.config = config;
+    }
+    async request(method, path, body) {
+        const response = await fetch(`${this.config.apiUrl}/analytics${path}`, {
+            method,
+            headers: {
+                'Content-Type': 'application/json',
+                'X-API-Key': this.config.apiKey,
+                'X-App-ID': this.config.appId,
+            },
+            body: body ? JSON.stringify(body) : undefined,
+        });
+        if (!response.ok) {
+            const error = await response.json().catch(() => ({}));
+            throw new Error(error.error || `Analytics error: ${response.statusText}`);
+        }
+        return response.json();
+    }
+    async track(event, properties) {
+        await this.request('POST', '/track', {
+            event,
+            properties,
+            timestamp: new Date().toISOString(),
+        });
+    }
+    async pageView(path, properties) {
+        await this.track('page_view', { path, ...properties });
+    }
+    async identify(userId, traits) {
+        await this.request('POST', '/identify', {
+            userId,
+            traits,
+            timestamp: new Date().toISOString(),
+        });
+    }
+    async getMetrics(period) {
+        return this.request('GET', `/metrics?period=${period}`);
+    }
+    async getEvents(options) {
+        const params = new URLSearchParams();
+        if (options?.event)
+            params.set('event', options.event);
+        if (options?.userId)
+            params.set('userId', options.userId);
+        if (options?.startDate)
+            params.set('startDate', options.startDate);
+        if (options?.endDate)
+            params.set('endDate', options.endDate);
+        if (options?.limit)
+            params.set('limit', options.limit.toString());
+        return this.request('GET', `/events?${params.toString()}`);
+    }
+}
+//# sourceMappingURL=client.js.map

package/dist/analytics/client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.js","sourceRoot":"","sources":["../../src/analytics/client.ts"],"names":[],"mappings":"AAAA;;GAEG;AAeH,MAAM,OAAO,YAAY;IACH;IAApB,YAAoB,MAAuB;QAAvB,WAAM,GAAN,MAAM,CAAiB;IAAG,CAAC;IAEvC,KAAK,CAAC,OAAO,CACnB,MAAc,EACd,IAAY,EACZ,IAAU;QAEV,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,aAAa,IAAI,EAAE,EAAE;YACrE,MAAM;YACN,OAAO,EAAE;gBACP,cAAc,EAAE,kBAAkB;gBAClC,WAAW,EAAE,IAAI,CAAC,MAAM,CAAC,MAAM;gBAC/B,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC,KAAK;aAC9B;YACD,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS;SAC9C,CAAC,CAAC;QAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,KAAK,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAuB,CAAC;YAC5E,MAAM,IAAI,KAAK,CAAC,KAAK,CAAC,KAAK,IAAI,oBAAoB,QAAQ,CAAC,UAAU,EAAE,CAAC,CAAC;QAC5E,CAAC;QAED,OAAO,QAAQ,CAAC,IAAI,EAAE,CAAC;IACzB,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,KAAa,EAAE,UAAgC;QACzD,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,QAAQ,EAAE;YACnC,KAAK;YACL,UAAU;YACV,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;SACpC,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,IAAY,EAAE,UAAgC;QAC3D,MAAM,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,EAAE,IAAI,EAAE,GAAG,UAAU,EAAE,CAAC,CAAC;IACzD,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,MAAc,EAAE,MAA4B;QACzD,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,WAAW,EAAE;YACtC,MAAM;YACN,MAAM;YACN,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;SACpC,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,MAAc;QAC7B,OAAO,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,mBAAmB,MAAM,EAAE,CAAC,CAAC;IAC1D,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,OAA2B;QACzC,MAAM,MAAM,GAAG,IAAI,eAAe,EAAE,CAAC;QACrC,IAAI,OAAO,EAAE,KAAK;YAAE,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC;QACvD,IAAI,OAAO,EAAE,MAAM;YAAE,MAAM,CAAC,GAAG,CAAC,QAAQ,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;QAC1D,IAAI,OAAO,EAAE,SAAS;YAAE,MAAM,CAAC,GAAG,CAAC,WAAW,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC;QACnE,IAAI,OAAO,EAAE,OAAO;YAAE,MAAM,CAAC,GAAG,CAAC,SAAS,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;QAC7D,IAAI,OAAO,EAAE,KAAK;YAAE,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC;QAElE,OAAO,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,WAAW,MAAM,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;IAC7D,CAAC;CACF"}

package/dist/assets/client.d.ts

@@ -0,0 +1,23 @@
+/**
+ * Assets service client for file storage
+ */
+import type { AssetsService, UploadOptions, UploadResult, AssetInfo, AssetListOptions, AssetListResult } from '../types';
+interface AssetsConfig {
+    apiUrl: string;
+    apiKey: string;
+    appId: string;
+}
+export declare class AssetsAPI implements AssetsService {
+    private config;
+    constructor(config: AssetsConfig);
+    private request;
+    upload(path: string, data: ArrayBuffer | Blob | ReadableStream | string, options?: UploadOptions): Promise<UploadResult>;
+    get(path: string): Promise<AssetInfo | null>;
+    getUrl(path: string): string;
+    delete(path: string): Promise<boolean>;
+    deleteMany(paths: string[]): Promise<number>;
+    list(options?: AssetListOptions): Promise<AssetListResult>;
+    exists(path: string): Promise<boolean>;
+}
+export {};
+//# sourceMappingURL=client.d.ts.map

package/dist/assets/client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../../src/assets/client.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,KAAK,EACV,aAAa,EACb,aAAa,EACb,YAAY,EACZ,SAAS,EACT,gBAAgB,EAChB,eAAe,EAChB,MAAM,UAAU,CAAC;AAElB,UAAU,YAAY;IACpB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;CACf;AAED,qBAAa,SAAU,YAAW,aAAa;IACjC,OAAO,CAAC,MAAM;gBAAN,MAAM,EAAE,YAAY;YAE1B,OAAO;IAkCf,MAAM,CACV,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,WAAW,GAAG,IAAI,GAAG,cAAc,GAAG,MAAM,EAClD,OAAO,CAAC,EAAE,aAAa,GACtB,OAAO,CAAC,YAAY,CAAC;IA6BlB,GAAG,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,GAAG,IAAI,CAAC;IAWlD,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM;IAItB,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAYtC,UAAU,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC;IAO5C,IAAI,CAAC,OAAO,CAAC,EAAE,gBAAgB,GAAG,OAAO,CAAC,eAAe,CAAC;IAS1D,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;CAI7C"}

package/dist/assets/client.js

@@ -0,0 +1,105 @@
+/**
+ * Assets service client for file storage
+ */
+export class AssetsAPI {
+    config;
+    constructor(config) {
+        this.config = config;
+    }
+    async request(method, path, body, headers) {
+        const defaultHeaders = {
+            'X-API-Key': this.config.apiKey,
+            'X-App-ID': this.config.appId,
+        };
+        if (body && typeof body === 'object' && !(body instanceof FormData)) {
+            defaultHeaders['Content-Type'] = 'application/json';
+        }
+        const response = await fetch(`${this.config.apiUrl}/assets${path}`, {
+            method,
+            headers: { ...defaultHeaders, ...headers },
+            body: body instanceof FormData || typeof body === 'string'
+                ? body
+                : body
+                    ? JSON.stringify(body)
+                    : undefined,
+        });
+        if (!response.ok) {
+            const error = await response.json().catch(() => ({}));
+            throw new Error(error.error || `Assets error: ${response.statusText}`);
+        }
+        return response.json();
+    }
+    async upload(path, data, options) {
+        const formData = new FormData();
+        formData.append('path', path);
+        if (data instanceof ArrayBuffer) {
+            formData.append('file', new Blob([data]));
+        }
+        else if (data instanceof Blob) {
+            formData.append('file', data);
+        }
+        else if (typeof data === 'string') {
+            formData.append('file', new Blob([data]));
+        }
+        else {
+            throw new Error('Unsupported data type for upload');
+        }
+        if (options?.contentType) {
+            formData.append('contentType', options.contentType);
+        }
+        if (options?.cacheControl) {
+            formData.append('cacheControl', options.cacheControl);
+        }
+        if (options?.metadata) {
+            formData.append('metadata', JSON.stringify(options.metadata));
+        }
+        return this.request('POST', '/upload', formData);
+    }
+    async get(path) {
+        try {
+            return await this.request('GET', `/${encodeURIComponent(path)}`);
+        }
+        catch (e) {
+            if (e.message.includes('404')) {
+                return null;
+            }
+            throw e;
+        }
+    }
+    getUrl(path) {
+        return `${this.config.apiUrl}/assets/${this.config.appId}/${path}`;
+    }
+    async delete(path) {
+        try {
+            await this.request('DELETE', `/${encodeURIComponent(path)}`);
+            return true;
+        }
+        catch (e) {
+            if (e.message.includes('404')) {
+                return false;
+            }
+            throw e;
+        }
+    }
+    async deleteMany(paths) {
+        const result = await this.request('POST', '/delete-many', {
+            paths,
+        });
+        return result.deleted;
+    }
+    async list(options) {
+        const params = new URLSearchParams();
+        if (options?.prefix)
+            params.set('prefix', options.prefix);
+        if (options?.limit)
+            params.set('limit', options.limit.toString());
+        if (options?.cursor)
+            params.set('cursor', options.cursor);
+        return this.request('GET', `/list?${params.toString()}`);
+    }
+    async exists(path) {
+        const asset = await this.get(path);
+        return asset !== null;
+    }
+}
+//# sourceMappingURL=client.js.map

package/dist/assets/client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.js","sourceRoot":"","sources":["../../src/assets/client.ts"],"names":[],"mappings":"AAAA;;GAEG;AAiBH,MAAM,OAAO,SAAS;IACA;IAApB,YAAoB,MAAoB;QAApB,WAAM,GAAN,MAAM,CAAc;IAAG,CAAC;IAEpC,KAAK,CAAC,OAAO,CACnB,MAAc,EACd,IAAY,EACZ,IAAU,EACV,OAAgC;QAEhC,MAAM,cAAc,GAA2B;YAC7C,WAAW,EAAE,IAAI,CAAC,MAAM,CAAC,MAAM;YAC/B,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC,KAAK;SAC9B,CAAC;QAEF,IAAI,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,CAAC,CAAC,IAAI,YAAY,QAAQ,CAAC,EAAE,CAAC;YACpE,cAAc,CAAC,cAAc,CAAC,GAAG,kBAAkB,CAAC;QACtD,CAAC;QAED,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,UAAU,IAAI,EAAE,EAAE;YAClE,MAAM;YACN,OAAO,EAAE,EAAE,GAAG,cAAc,EAAE,GAAG,OAAO,EAAE;YAC1C,IAAI,EACF,IAAI,YAAY,QAAQ,IAAI,OAAO,IAAI,KAAK,QAAQ;gBAClD,CAAC,CAAC,IAAI;gBACN,CAAC,CAAC,IAAI;oBACN,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;oBACtB,CAAC,CAAC,SAAS;SAChB,CAAC,CAAC;QAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,KAAK,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAuB,CAAC;YAC5E,MAAM,IAAI,KAAK,CAAC,KAAK,CAAC,KAAK,IAAI,iBAAiB,QAAQ,CAAC,UAAU,EAAE,CAAC,CAAC;QACzE,CAAC;QAED,OAAO,QAAQ,CAAC,IAAI,EAAE,CAAC;IACzB,CAAC;IAED,KAAK,CAAC,MAAM,CACV,IAAY,EACZ,IAAkD,EAClD,OAAuB;QAEvB,MAAM,QAAQ,GAAG,IAAI,QAAQ,EAAE,CAAC;QAChC,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QAE9B,IAAI,IAAI,YAAY,WAAW,EAAE,CAAC;YAChC,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAC5C,CAAC;aAAM,IAAI,IAAI,YAAY,IAAI,EAAE,CAAC;YAChC,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QAChC,CAAC;aAAM,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;YACpC,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAC5C,CAAC;aAAM,CAAC;YACN,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;QACtD,CAAC;QAED,IAAI,OAAO,EAAE,WAAW,EAAE,CAAC;YACzB,QAAQ,CAAC,MAAM,CAAC,aAAa,EAAE,OAAO,CAAC,WAAW,CAAC,CAAC;QACtD,CAAC;QAED,IAAI,OAAO,EAAE,YAAY,EAAE,CAAC;YAC1B,QAAQ,CAAC,MAAM,CAAC,cAAc,EAAE,OAAO,CAAC,YAAY,CAAC,CAAC;QACxD,CAAC;QAED,IAAI,OAAO,EAAE,QAAQ,EAAE,CAAC;YACtB,QAAQ,CAAC,MAAM,CAAC,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC;QAChE,CAAC;QAED,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC;IACnD,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,IAAY;QACpB,IAAI,CAAC;YACH,OAAO,MAAM,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,IAAI,kBAAkB,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACnE,CAAC;QAAC,OAAO,CAAM,EAAE,CAAC;YAChB,IAAI,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;gBAC9B,OAAO,IAAI,CAAC;YACd,CAAC;YACD,MAAM,CAAC,CAAC;QACV,CAAC;IACH,CAAC;IAED,MAAM,CAAC,IAAY;QACjB,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,WAAW,IAAI,CAAC,MAAM,CAAC,KAAK,IAAI,IAAI,EAAE,CAAC;IACrE,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,IAAY;QACvB,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,IAAI,kBAAkB,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YAC7D,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,OAAO,CAAM,EAAE,CAAC;YAChB,IAAI,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;gBAC9B,OAAO,KAAK,CAAC;YACf,CAAC;YACD,MAAM,CAAC,CAAC;QACV,CAAC;IACH,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,KAAe;QAC9B,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAsB,MAAM,EAAE,cAAc,EAAE;YAC7E,KAAK;SACN,CAAC,CAAC;QACH,OAAO,MAAM,CAAC,OAAO,CAAC;IACxB,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,OAA0B;QACnC,MAAM,MAAM,GAAG,IAAI,eAAe,EAAE,CAAC;QACrC,IAAI,OAAO,EAAE,MAAM;YAAE,MAAM,CAAC,GAAG,CAAC,QAAQ,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;QAC1D,IAAI,OAAO,EAAE,KAAK;YAAE,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC;QAClE,IAAI,OAAO,EAAE,MAAM;YAAE,MAAM,CAAC,GAAG,CAAC,QAAQ,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;QAE1D,OAAO,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,SAAS,MAAM,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;IAC3D,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,IAAY;QACvB,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACnC,OAAO,KAAK,KAAK,IAAI,CAAC;IACxB,CAAC;CACF"}

package/dist/auth/client.d.ts

@@ -0,0 +1,20 @@
+/**
+ * Authentication service client
+ */
+import type { AuthService, AccessTokenPayload, UserContext, PermissionScope, CheckPermissionsResult } from './types';
+interface AuthConfig {
+    apiUrl: string;
+    apiKey: string;
+}
+export declare class AuthAPI implements AuthService {
+    private config;
+    constructor(config: AuthConfig);
+    private request;
+    verifyUserToken(token: string): Promise<AccessTokenPayload | null>;
+    getUserContext(userId: string, scopes: PermissionScope[]): Promise<UserContext>;
+    checkPermissions(userId: string, appId: string, scopes: PermissionScope[]): Promise<CheckPermissionsResult>;
+    grantPermissions(userId: string, appId: string, scopes: PermissionScope[]): Promise<void>;
+    revokePermissions(userId: string, appId: string): Promise<void>;
+}
+export {};
+//# sourceMappingURL=client.d.ts.map

package/dist/auth/client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../../src/auth/client.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,KAAK,EACV,WAAW,EACX,kBAAkB,EAClB,WAAW,EACX,eAAe,EACf,sBAAsB,EACvB,MAAM,SAAS,CAAC;AAEjB,UAAU,UAAU;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,qBAAa,OAAQ,YAAW,WAAW;IAC7B,OAAO,CAAC,MAAM;gBAAN,MAAM,EAAE,UAAU;YAExB,OAAO;IAsBf,eAAe,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,kBAAkB,GAAG,IAAI,CAAC;IAQlE,cAAc,CAClB,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,eAAe,EAAE,GACxB,OAAO,CAAC,WAAW,CAAC;IAIjB,gBAAgB,CACpB,MAAM,EAAE,MAAM,EACd,KAAK,EAAE,MAAM,EACb,MAAM,EAAE,eAAe,EAAE,GACxB,OAAO,CAAC,sBAAsB,CAAC;IAQ5B,gBAAgB,CACpB,MAAM,EAAE,MAAM,EACd,KAAK,EAAE,MAAM,EACb,MAAM,EAAE,eAAe,EAAE,GACxB,OAAO,CAAC,IAAI,CAAC;IAQV,iBAAiB,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;CAGtE"}

package/dist/auth/client.js

@@ -0,0 +1,53 @@
+/**
+ * Authentication service client
+ */
+export class AuthAPI {
+    config;
+    constructor(config) {
+        this.config = config;
+    }
+    async request(method, path, body) {
+        const response = await fetch(`${this.config.apiUrl}/auth${path}`, {
+            method,
+            headers: {
+                'Content-Type': 'application/json',
+                'X-API-Key': this.config.apiKey,
+            },
+            body: body ? JSON.stringify(body) : undefined,
+        });
+        if (!response.ok) {
+            const error = await response.json().catch(() => ({}));
+            throw new Error(error.error || `Auth error: ${response.statusText}`);
+        }
+        return response.json();
+    }
+    async verifyUserToken(token) {
+        try {
+            return await this.request('POST', '/token/verify', { token });
+        }
+        catch (error) {
+            return null;
+        }
+    }
+    async getUserContext(userId, scopes) {
+        return this.request('POST', '/user', { userId, scopes });
+    }
+    async checkPermissions(userId, appId, scopes) {
+        return this.request('POST', '/permissions/check', {
+            userId,
+            appId,
+            scopes,
+        });
+    }
+    async grantPermissions(userId, appId, scopes) {
+        await this.request('POST', '/permissions/grant', {
+            userId,
+            appId,
+            scopes,
+        });
+    }
+    async revokePermissions(userId, appId) {
+        await this.request('DELETE', `/permissions/${appId}/${userId}`);
+    }
+}
+//# sourceMappingURL=client.js.map