@thirdweb-dev/service-utils 0.5.0-nightly-f5aed34d-20230829001006 → 0.5.0

package/dist/esm/mocks.js

@@ -0,0 +1,57 @@
+export const validProjectResponse = {
+    id: "1",
+    publishableKey: "your-api-key",
+    walletAddresses: ["creator-address"],
+    domains: ["example.com", "*.example.com"],
+    bundleIds: [],
+    services: [
+        {
+            name: "storage",
+            actions: ["read", "write"],
+        },
+        {
+            name: "rpc",
+            actions: [],
+        },
+        {
+            name: "bundler",
+            actions: [],
+            allowedChainIds: [1, 2, 3],
+        },
+    ],
+    teamId: "1",
+    createdAt: new Date("2024-06-01"),
+    updatedAt: new Date("2024-06-01"),
+    name: "test-project",
+    slug: "test-project",
+    image: "https://example.com/image.png",
+};
+export const validTeamResponse = {
+    id: "1",
+    name: "test-team",
+    slug: "test-team",
+    image: "https://example.com/image.png",
+    createdAt: new Date("2024-06-01"),
+    updatedAt: new Date("2024-06-01"),
+    billingPlan: "free",
+    billingEmail: "test@example.com",
+    billingStatus: "noCustomer",
+    growthTrialEligible: false,
+    enabledScopes: ["storage", "rpc", "bundler"],
+};
+export const validTeamAndProjectResponse = {
+    team: validTeamResponse,
+    project: validProjectResponse,
+};
+export const validServiceConfig = {
+    apiUrl: "https://api.example.com",
+    serviceScope: "storage",
+    serviceApiKey: "service-api-key",
+    serviceAction: "read",
+};
+export const validBundlerServiceConfig = {
+    apiUrl: "https://api.example.com",
+    serviceScope: "bundler",
+    serviceApiKey: "service-api-key",
+};
+//# sourceMappingURL=mocks.js.map

package/dist/esm/mocks.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mocks.js","sourceRoot":"","sources":["../../src/mocks.ts"],"names":[],"mappings":"AAOA,MAAM,CAAC,MAAM,oBAAoB,GAAoB;IACnD,EAAE,EAAE,GAAG;IACP,cAAc,EAAE,cAAc;IAC9B,eAAe,EAAE,CAAC,iBAAiB,CAAC;IACpC,OAAO,EAAE,CAAC,aAAa,EAAE,eAAe,CAAC;IACzC,SAAS,EAAE,EAAE;IACb,QAAQ,EAAE;QACR;YACE,IAAI,EAAE,SAAS;YACf,OAAO,EAAE,CAAC,MAAM,EAAE,OAAO,CAAC;SAC3B;QACD;YACE,IAAI,EAAE,KAAK;YACX,OAAO,EAAE,EAAE;SACZ;QACD;YACE,IAAI,EAAE,SAAS;YACf,OAAO,EAAE,EAAE;YACX,eAAe,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;SAC3B;KACF;IACD,MAAM,EAAE,GAAG;IACX,SAAS,EAAE,IAAI,IAAI,CAAC,YAAY,CAAC;IACjC,SAAS,EAAE,IAAI,IAAI,CAAC,YAAY,CAAC;IACjC,IAAI,EAAE,cAAc;IACpB,IAAI,EAAE,cAAc;IACpB,KAAK,EAAE,+BAA+B;CACvC,CAAC;AAEF,MAAM,CAAC,MAAM,iBAAiB,GAAiB;IAC7C,EAAE,EAAE,GAAG;IACP,IAAI,EAAE,WAAW;IACjB,IAAI,EAAE,WAAW;IACjB,KAAK,EAAE,+BAA+B;IACtC,SAAS,EAAE,IAAI,IAAI,CAAC,YAAY,CAAC;IACjC,SAAS,EAAE,IAAI,IAAI,CAAC,YAAY,CAAC;IACjC,WAAW,EAAE,MAAM;IACnB,YAAY,EAAE,kBAAkB;IAChC,aAAa,EAAE,YAAY;IAC3B,mBAAmB,EAAE,KAAK;IAC1B,aAAa,EAAE,CAAC,SAAS,EAAE,KAAK,EAAE,SAAS,CAAC;CAC7C,CAAC;AAEF,MAAM,CAAC,MAAM,2BAA2B,GAA2B;IACjE,IAAI,EAAE,iBAAiB;IACvB,OAAO,EAAE,oBAAoB;CAC9B,CAAC;AAEF,MAAM,CAAC,MAAM,kBAAkB,GAAsB;IACnD,MAAM,EAAE,yBAAyB;IACjC,YAAY,EAAE,SAAS;IACvB,aAAa,EAAE,iBAAiB;IAChC,aAAa,EAAE,MAAM;CACtB,CAAC;AAEF,MAAM,CAAC,MAAM,yBAAyB,GAAsB;IAC1D,MAAM,EAAE,yBAAyB;IACjC,YAAY,EAAE,SAAS;IACvB,aAAa,EAAE,iBAAiB;CACjC,CAAC"}

package/dist/esm/node/index.js

@@ -0,0 +1,174 @@
+import { createHash } from "node:crypto";
+import { authorize } from "../core/authorize/index.js";
+export * from "../core/usage.js";
+export * from "../core/rateLimit/index.js";
+export * from "../core/services.js";
+/**
+ *
+ * @param {AuthInput['req']} authInput.req - The incoming request from which information will be pulled from. These information includes (checks are in order and terminates on first match):
+ * - clientId: Checks header `x-client-id`, search param `clientId`
+ * - bundleId: Checks header `x-bundle-id`, search param `bundleId`
+ * - secretKey: Checks header `x-secret-key`
+ * - origin (the requesting domain): Checks header `origin`, `referer`
+ * @param {AuthInput['clientId']} authInput.clientId - Overrides any clientId found on the `req` object
+ * @param {AuthInput['targetAddress']} authInput.targetAddress - Only used in smart wallets to determine if the request is authorized to interact with the target address.
+ * @param {NodeServiceConfig['enforceAuth']} serviceConfig - Always `true` unless you need to turn auth off. Tells the service whether or not to enforce auth.
+ * @param {NodeServiceConfig['apiUrl']} serviceConfig.apiUrl - The url of the api server to fetch information for verification. `https://api.thirdweb.com` for production and `https://api.staging.thirdweb.com` for staging
+ * @param {NodeServiceConfig['serviceApiKey']} serviceConfig.serviceApiKey - secret key to be used authenticate the caller of the api-server. Check the api-server's env variable for the keys.
+ * @param {NodeServiceConfig['serviceScope']} serviceConfig.serviceScope - The service that we are requesting authorization for. E.g. `relayer`, `rpc`, 'bundler', 'storage' etc.
+ * @param {NodeServiceConfig['serviceAction']} serviceConfig.serviceAction - Needed when the `serviceScope` is `storage`. Can be either `read` or `write`.
+ * @param {NodeServiceConfig['useWalletAuth']} serviceConfig.useWalletAuth - If true it pings the `wallet/me` or else, `account/me`. You most likely can leave this as false.
+ * @returns {AuthorizationResult} authorizationResult - contains if the request is authorized, and information about the account if it is authorized. Otherwise, it contains the error message and status code.
+ */
+export async function authorizeNode(authInput, serviceConfig, cacheOptions) {
+    let authData;
+    try {
+        authData = extractAuthorizationData(authInput);
+    }
+    catch (e) {
+        if (e instanceof Error && e.message === "KEY_CONFLICT") {
+            return {
+                authorized: false,
+                status: 400,
+                errorMessage: "Please pass either a client id or a secret key.",
+                errorCode: "KEY_CONFLICT",
+            };
+        }
+        return {
+            authorized: false,
+            status: 500,
+            errorMessage: "Internal Server Error",
+            errorCode: "INTERNAL_SERVER_ERROR",
+        };
+    }
+    return await authorize(authData, serviceConfig, cacheOptions);
+}
+function getHeader(headers, headerName) {
+    const header = headers[headerName];
+    if (Array.isArray(header)) {
+        return header?.[0] ?? null;
+    }
+    return header ?? null;
+}
+export function extractAuthorizationData(authInput) {
+    let requestUrl;
+    try {
+        requestUrl = new URL(authInput.req.url || "", `http://${authInput.req.headers.host}`);
+    }
+    catch (error) {
+        console.log("** Node URL Error **", error);
+        throw error;
+    }
+    const headers = authInput.req.headers;
+    const secretKey = getHeader(headers, "x-secret-key");
+    // prefer clientId that is explicitly passed in
+    let clientId = authInput.clientId ?? null;
+    if (!clientId) {
+        // next preference is clientId from header
+        clientId = getHeader(headers, "x-client-id");
+    }
+    // next preference is search param
+    if (!clientId) {
+        clientId = requestUrl.searchParams.get("clientId");
+    }
+    // bundle id from header is first preference
+    let bundleId = getHeader(headers, "x-bundle-id");
+    // next preference is search param
+    if (!bundleId) {
+        bundleId = requestUrl.searchParams.get("bundleId");
+    }
+    let ecosystemId = getHeader(headers, "x-ecosystem-id");
+    if (!ecosystemId) {
+        ecosystemId = requestUrl.searchParams.get("ecosystemId");
+    }
+    let ecosystemPartnerId = getHeader(headers, "x-ecosystem-partner-id");
+    if (!ecosystemPartnerId) {
+        ecosystemPartnerId = requestUrl.searchParams.get("ecosystemPartnerId");
+    }
+    let origin = getHeader(headers, "origin");
+    // if origin header is not available we'll fall back to referrer;
+    if (!origin) {
+        origin = getHeader(headers, "referer");
+    }
+    // if we have an origin at this point, normalize it
+    if (origin) {
+        try {
+            origin = new URL(origin).host;
+        }
+        catch (e) {
+            console.warn("failed to parse origin", origin, e);
+        }
+    }
+    // handle if we a secret key is passed in the headers
+    let secretKeyHash = null;
+    if (secretKey) {
+        // hash the secret key
+        secretKeyHash = hashSecretKey(secretKey);
+        // derive the client id from the secret key hash
+        const derivedClientId = deriveClientIdFromSecretKeyHash(secretKeyHash);
+        // if we already have a client id passed in we need to make sure they match
+        if (clientId && clientId !== derivedClientId) {
+            throw new Error("KEY_CONFLICT");
+        }
+        // otherwise set the client id to the derived client id (client id based off of secret key)
+        clientId = derivedClientId;
+    }
+    let jwt = null;
+    let useWalletAuth = null;
+    // check for authorization header on the request
+    const authorizationHeader = getHeader(headers, "authorization");
+    if (authorizationHeader) {
+        const [type, token] = authorizationHeader.split(" ");
+        if (type?.toLowerCase() === "bearer" && !!token) {
+            jwt = token;
+            const walletAuthHeader = getHeader(headers, "x-authorize-wallet");
+            // IK a stringified boolean is not ideal, but it's required to pass it in the headers.
+            if (walletAuthHeader?.toLowerCase() === "true") {
+                useWalletAuth = walletAuthHeader;
+            }
+        }
+    }
+    return {
+        jwt,
+        hashedJWT: jwt ? hashSecretKey(jwt) : null,
+        secretKeyHash,
+        secretKey,
+        clientId,
+        ecosystemId,
+        ecosystemPartnerId,
+        origin,
+        bundleId,
+        targetAddress: authInput.targetAddress,
+        useWalletAuth,
+    };
+}
+export function hashSecretKey(secretKey) {
+    return createHash("sha256").update(secretKey).digest("hex");
+}
+export function deriveClientIdFromSecretKeyHash(secretKeyHash) {
+    return secretKeyHash.slice(0, 32);
+}
+export function logHttpRequest({ clientId, req, res, isAuthed, statusMessage, latencyMs, }) {
+    try {
+        const authorizationData = extractAuthorizationData({ req, clientId });
+        const headers = req.headers;
+        console.log(JSON.stringify({
+            method: req.method,
+            pathname: req.url,
+            hasSecretKey: !!authorizationData.secretKey,
+            hasClientId: !!authorizationData.clientId,
+            hasJwt: !!authorizationData.jwt,
+            clientId: authorizationData.clientId,
+            isAuthed,
+            status: res.statusCode,
+            statusMessage,
+            sdkName: headers["x-sdk-name"] ?? undefined,
+            sdkVersion: headers["x-sdk-version"] ?? undefined,
+            platform: headers["x-sdk-platform"] ?? undefined,
+            os: headers["x-sdk-os"] ?? undefined,
+            latencyMs,
+        }));
+    }
+    catch { }
+}
+//# sourceMappingURL=index.js.map

package/dist/esm/node/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/node/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAOzC,OAAO,EAAE,SAAS,EAAE,MAAM,4BAA4B,CAAC;AAOvD,cAAc,kBAAkB,CAAC;AACjC,cAAc,4BAA4B,CAAC;AAC3C,cAAc,qBAAqB,CAAC;AAOpC;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,SAAoB,EACpB,aAAgC,EAChC,YAA2B;IAE3B,IAAI,QAA4B,CAAC;IACjC,IAAI,CAAC;QACH,QAAQ,GAAG,wBAAwB,CAAC,SAAS,CAAC,CAAC;IACjD,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,IAAI,CAAC,YAAY,KAAK,IAAI,CAAC,CAAC,OAAO,KAAK,cAAc,EAAE,CAAC;YACvD,OAAO;gBACL,UAAU,EAAE,KAAK;gBACjB,MAAM,EAAE,GAAG;gBACX,YAAY,EAAE,iDAAiD;gBAC/D,SAAS,EAAE,cAAc;aAC1B,CAAC;QACJ,CAAC;QACD,OAAO;YACL,UAAU,EAAE,KAAK;YACjB,MAAM,EAAE,GAAG;YACX,YAAY,EAAE,uBAAuB;YACrC,SAAS,EAAE,uBAAuB;SACnC,CAAC;IACJ,CAAC;IAED,OAAO,MAAM,SAAS,CAAC,QAAQ,EAAE,aAAa,EAAE,YAAY,CAAC,CAAC;AAChE,CAAC;AAED,SAAS,SAAS,CAChB,OAA4B,EAC5B,UAAkB;IAElB,MAAM,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;IACnC,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QAC1B,OAAO,MAAM,EAAE,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC;IAC7B,CAAC;IACD,OAAO,MAAM,IAAI,IAAI,CAAC;AACxB,CAAC;AAED,MAAM,UAAU,wBAAwB,CACtC,SAAoB;IAEpB,IAAI,UAAe,CAAC;IAEpB,IAAI,CAAC;QACH,UAAU,GAAG,IAAI,GAAG,CAClB,SAAS,CAAC,GAAG,CAAC,GAAG,IAAI,EAAE,EACvB,UAAU,SAAS,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,CACvC,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,GAAG,CAAC,sBAAsB,EAAE,KAAK,CAAC,CAAC;QAC3C,MAAM,KAAK,CAAC;IACd,CAAC;IAED,MAAM,OAAO,GAAG,SAAS,CAAC,GAAG,CAAC,OAAO,CAAC;IACtC,MAAM,SAAS,GAAG,SAAS,CAAC,OAAO,EAAE,cAAc,CAAC,CAAC;IACrD,+CAA+C;IAC/C,IAAI,QAAQ,GAAG,SAAS,CAAC,QAAQ,IAAI,IAAI,CAAC;IAE1C,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,0CAA0C;QAC1C,QAAQ,GAAG,SAAS,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC;IAC/C,CAAC;IAED,kCAAkC;IAClC,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,QAAQ,GAAG,UAAU,CAAC,YAAY,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IACrD,CAAC;IAED,4CAA4C;IAC5C,IAAI,QAAQ,GAAG,SAAS,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC;IAEjD,kCAAkC;IAClC,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,QAAQ,GAAG,UAAU,CAAC,YAAY,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IACrD,CAAC;IAED,IAAI,WAAW,GAAG,SAAS,CAAC,OAAO,EAAE,gBAAgB,CAAC,CAAC;IACvD,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,WAAW,GAAG,UAAU,CAAC,YAAY,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;IAC3D,CAAC;IAED,IAAI,kBAAkB,GAAG,SAAS,CAAC,OAAO,EAAE,wBAAwB,CAAC,CAAC;IACtE,IAAI,CAAC,kBAAkB,EAAE,CAAC;QACxB,kBAAkB,GAAG,UAAU,CAAC,YAAY,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAC;IACzE,CAAC;IAED,IAAI,MAAM,GAAG,SAAS,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;IAC1C,iEAAiE;IACjE,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,GAAG,SAAS,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;IACzC,CAAC;IACD,mDAAmD;IACnD,IAAI,MAAM,EAAE,CAAC;QACX,IAAI,CAAC;YACH,MAAM,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC;QAChC,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,OAAO,CAAC,IAAI,CAAC,wBAAwB,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC;QACpD,CAAC;IACH,CAAC;IAED,qDAAqD;IACrD,IAAI,aAAa,GAAkB,IAAI,CAAC;IACxC,IAAI,SAAS,EAAE,CAAC;QACd,sBAAsB;QACtB,aAAa,GAAG,aAAa,CAAC,SAAS,CAAC,CAAC;QACzC,gDAAgD;QAChD,MAAM,eAAe,GAAG,+BAA+B,CAAC,aAAa,CAAC,CAAC;QACvE,2EAA2E;QAC3E,IAAI,QAAQ,IAAI,QAAQ,KAAK,eAAe,EAAE,CAAC;YAC7C,MAAM,IAAI,KAAK,CAAC,cAAc,CAAC,CAAC;QAClC,CAAC;QACD,2FAA2F;QAC3F,QAAQ,GAAG,eAAe,CAAC;IAC7B,CAAC;IAED,IAAI,GAAG,GAAkB,IAAI,CAAC;IAC9B,IAAI,aAAa,GAAkB,IAAI,CAAC;IACxC,gDAAgD;IAChD,MAAM,mBAAmB,GAAG,SAAS,CAAC,OAAO,EAAE,eAAe,CAAC,CAAC;IAChE,IAAI,mBAAmB,EAAE,CAAC;QACxB,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,GAAG,mBAAmB,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACrD,IAAI,IAAI,EAAE,WAAW,EAAE,KAAK,QAAQ,IAAI,CAAC,CAAC,KAAK,EAAE,CAAC;YAChD,GAAG,GAAG,KAAK,CAAC;YACZ,MAAM,gBAAgB,GAAG,SAAS,CAAC,OAAO,EAAE,oBAAoB,CAAC,CAAC;YAClE,sFAAsF;YACtF,IAAI,gBAAgB,EAAE,WAAW,EAAE,KAAK,MAAM,EAAE,CAAC;gBAC/C,aAAa,GAAG,gBAAgB,CAAC;YACnC,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO;QACL,GAAG;QACH,SAAS,EAAE,GAAG,CAAC,CAAC,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI;QAC1C,aAAa;QACb,SAAS;QACT,QAAQ;QACR,WAAW;QACX,kBAAkB;QAClB,MAAM;QACN,QAAQ;QACR,aAAa,EAAE,SAAS,CAAC,aAAa;QACtC,aAAa;KACd,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,SAAiB;IAC7C,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC9D,CAAC;AAED,MAAM,UAAU,+BAA+B,CAAC,aAAqB;IACnE,OAAO,aAAa,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;AACpC,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,EAC7B,QAAQ,EACR,GAAG,EACH,GAAG,EACH,QAAQ,EACR,aAAa,EACb,SAAS,GAQV;IACC,IAAI,CAAC;QACH,MAAM,iBAAiB,GAAG,wBAAwB,CAAC,EAAE,GAAG,EAAE,QAAQ,EAAE,CAAC,CAAC;QACtE,MAAM,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC;QAE5B,OAAO,CAAC,GAAG,CACT,IAAI,CAAC,SAAS,CAAC;YACb,MAAM,EAAE,GAAG,CAAC,MAAM;YAClB,QAAQ,EAAE,GAAG,CAAC,GAAG;YACjB,YAAY,EAAE,CAAC,CAAC,iBAAiB,CAAC,SAAS;YAC3C,WAAW,EAAE,CAAC,CAAC,iBAAiB,CAAC,QAAQ;YACzC,MAAM,EAAE,CAAC,CAAC,iBAAiB,CAAC,GAAG;YAC/B,QAAQ,EAAE,iBAAiB,CAAC,QAAQ;YACpC,QAAQ;YACR,MAAM,EAAE,GAAG,CAAC,UAAU;YACtB,aAAa;YACb,OAAO,EAAE,OAAO,CAAC,YAAY,CAAC,IAAI,SAAS;YAC3C,UAAU,EAAE,OAAO,CAAC,eAAe,CAAC,IAAI,SAAS;YACjD,QAAQ,EAAE,OAAO,CAAC,gBAAgB,CAAC,IAAI,SAAS;YAChD,EAAE,EAAE,OAAO,CAAC,UAAU,CAAC,IAAI,SAAS;YACpC,SAAS;SACV,CAAC,CACH,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC,CAAA,CAAC;AACZ,CAAC"}

package/dist/esm/package.json

@@ -0,0 +1 @@
+{"type": "module","sideEffects":false}

package/dist/{declarations/src → types}/cf-worker/index.d.ts

@@ -1,12 +1,13 @@
 import type { ExecutionContext, KVNamespace, Response } from "@cloudflare/workers-types";
-import type { CoreServiceConfig } from "../core/api";
 import type { Request } from "@cloudflare/workers-types";
-import type { AuthorizationInput } from "../core/authorize";
-import type { AuthorizationResult } from "../core/authorize/types";
-import type { CoreAuthInput } from "../core/types";
-export * from "../core/services";
-export * from "./usage";
-type WorkerServiceConfig = CoreServiceConfig & {
+import type { CoreServiceConfig } from "../core/api.js";
+import type { AuthorizationInput } from "../core/authorize/index.js";
+import type { AuthorizationResult } from "../core/authorize/types.js";
+import type { CoreAuthInput } from "../core/types.js";
+export * from "./usage.js";
+export * from "../core/services.js";
+export * from "../core/rateLimit/index.js";
+export type WorkerServiceConfig = CoreServiceConfig & {
     kvStore: KVNamespace;
     ctx: ExecutionContext;
     cacheTtlSeconds?: number;
@@ -18,10 +19,11 @@ export declare function authorizeWorker(authInput: AuthInput, serviceConfig: Wor
 export declare function extractAuthorizationData(authInput: AuthInput): Promise<AuthorizationInput>;
 export declare function hashSecretKey(secretKey: string): Promise<string>;
 export declare function deriveClientIdFromSecretKeyHash(secretKeyHash: string): string;
-export declare function logHttpRequest({ source, clientId, req, res, isAuthed, statusMessage, }: AuthInput & {
+export declare function logHttpRequest({ clientId, req, res, isAuthed, statusMessage, latencyMs, }: AuthInput & {
     source: string;
     res: Response;
     isAuthed?: boolean;
     statusMessage?: Error | string;
+    latencyMs?: number;
 }): Promise<void>;
 //# sourceMappingURL=index.d.ts.map

package/dist/types/cf-worker/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/cf-worker/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,gBAAgB,EAChB,WAAW,EACX,QAAQ,EACT,MAAM,2BAA2B,CAAC;AACnC,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,2BAA2B,CAAC;AACzD,OAAO,KAAK,EAAE,iBAAiB,EAA0B,MAAM,gBAAgB,CAAC;AAEhF,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,4BAA4B,CAAC;AACrE,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,4BAA4B,CAAC;AACtE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAEtD,cAAc,YAAY,CAAC;AAC3B,cAAc,qBAAqB,CAAC;AACpC,cAAc,4BAA4B,CAAC;AAE3C,MAAM,MAAM,mBAAmB,GAAG,iBAAiB,GAAG;IACpD,OAAO,EAAE,WAAW,CAAC;IACrB,GAAG,EAAE,gBAAgB,CAAC;IACtB,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B,CAAC;AAIF,KAAK,SAAS,GAAG,aAAa,GAAG;IAC/B,GAAG,EAAE,OAAO,CAAC;CACd,CAAC;AAEF,wBAAsB,eAAe,CACnC,SAAS,EAAE,SAAS,EACpB,aAAa,EAAE,mBAAmB,GACjC,OAAO,CAAC,mBAAmB,CAAC,CA0C9B;AAED,wBAAsB,wBAAwB,CAC5C,SAAS,EAAE,SAAS,GACnB,OAAO,CAAC,kBAAkB,CAAC,CAuF7B;AAED,wBAAsB,aAAa,CAAC,SAAS,EAAE,MAAM,mBAIpD;AAED,wBAAgB,+BAA+B,CAAC,aAAa,EAAE,MAAM,UAEpE;AAQD,wBAAsB,cAAc,CAAC,EACnC,QAAQ,EACR,GAAG,EACH,GAAG,EACH,QAAQ,EACR,aAAa,EACb,SAAS,GACV,EAAE,SAAS,GAAG;IAEb,MAAM,EAAE,MAAM,CAAC;IACf,GAAG,EAAE,QAAQ,CAAC;IACd,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,aAAa,CAAC,EAAE,KAAK,GAAG,MAAM,CAAC;IAC/B,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB,iBA0BA"}

package/dist/types/cf-worker/usage.d.ts

@@ -0,0 +1,24 @@
+import { type UsageEvent } from "../core/usage.js";
+export type { UsageEvent } from "../core/usage.js";
+/**
+ * Publish usage events. Provide the relevant fields for your application.
+ *
+ * Usage in Cloudflare Workers:
+ *    ctx.waitUntil(
+ *      publishUsageEvents(
+ *        [event1, event2],
+ *        { queueUrl, accessKeyId, secretAccessKey },
+ *      )
+ *    )
+ *
+ * @param usageEvents
+ * @param config
+ */
+declare function publishUsageEvents(usageEvents: UsageEvent[], config: {
+    queueUrl: string;
+    accessKeyId: string;
+    secretAccessKey: string;
+    region?: string;
+}): Promise<void>;
+export { publishUsageEvents };
+//# sourceMappingURL=usage.d.ts.map

package/dist/types/cf-worker/usage.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"usage.d.ts","sourceRoot":"","sources":["../../../src/cf-worker/usage.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,KAAK,UAAU,EAAoB,MAAM,kBAAkB,CAAC;AACrE,YAAY,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAWnD;;;;;;;;;;;;;GAaG;AACH,iBAAe,kBAAkB,CAC/B,WAAW,EAAE,UAAU,EAAE,EACzB,MAAM,EAAE;IACN,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;IACpB,eAAe,EAAE,MAAM,CAAC;IACxB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB,GACA,OAAO,CAAC,IAAI,CAAC,CAiCf;AAED,OAAO,EAAE,kBAAkB,EAAE,CAAC"}

package/dist/types/core/api.d.ts

@@ -0,0 +1,121 @@
+import type { AuthorizationInput } from "./authorize/index.js";
+import type { ServiceName } from "./services.js";
+export type UserOpData = {
+    sender: string;
+    targets: string[];
+    gasLimit: string;
+    gasPrice: string;
+};
+export type PolicyResult = {
+    policyId: string | null;
+    isAllowed: boolean;
+    reason: string;
+};
+export type CoreServiceConfig = {
+    apiUrl: string;
+    serviceScope: ServiceName;
+    serviceApiKey: string;
+    serviceAction?: string;
+    useWalletAuth?: boolean;
+    includeUsage?: boolean;
+};
+export type TeamAndProjectResponse = {
+    team: TeamResponse;
+    project?: ProjectResponse | null;
+};
+export type ApiResponse = {
+    data: TeamAndProjectResponse | null;
+    error: {
+        code: string;
+        statusCode: number;
+        message: string;
+    };
+};
+export type TeamResponse = {
+    id: string;
+    name: string;
+    slug: string;
+    image: string | null;
+    billingPlan: string;
+    createdAt: Date;
+    updatedAt: Date | null;
+    billingEmail: string | null;
+    billingStatus: string | null;
+    growthTrialEligible: boolean | null;
+    enabledScopes: ServiceName[];
+};
+export type ProjectResponse = {
+    id: string;
+    teamId: string;
+    createdAt: Date;
+    updatedAt: Date | null;
+    publishableKey: string;
+    name: string;
+    slug: string;
+    image: string | null;
+    domains: string[];
+    bundleIds: string[];
+    services: ({
+        name: "pay";
+        actions: never[];
+        payoutAddress: string | null;
+    } | {
+        name: "storage";
+        actions: ("read" | "write")[];
+    } | {
+        name: "rpc";
+        actions: never[];
+    } | {
+        name: "insight";
+        actions: never[];
+    } | {
+        name: "nebula";
+        actions: never[];
+    } | {
+        name: "bundler";
+        actions: never[];
+        allowedChainIds?: number[] | null;
+        allowedContractAddresses?: string[] | null;
+        allowedWallets?: string[] | null;
+        blockedWallets?: string[] | null;
+        bypassWallets?: string[] | null;
+        limits?: {
+            global?: {
+                maxSpend: string;
+                maxSpendUnit: "usd" | "native";
+            } | null;
+        } | null;
+        serverVerifier?: {
+            url: string;
+            headers?: {
+                key: string;
+                value: string;
+            }[];
+        } | null;
+    } | {
+        name: "embeddedWallets";
+        actions: never[];
+        redirectUrls?: string[] | null;
+        applicationName?: string | null;
+        applicationImageUrl?: string | null;
+        recoveryShareManagement?: string | null;
+        customAuthentication?: CustomAuthenticationServiceSchema | null;
+        customAuthEndpoint?: CustomAuthEndpointServiceSchema | null;
+    })[];
+    walletAddresses: string[];
+};
+type CustomAuthenticationServiceSchema = {
+    jwksUri: string;
+    aud: string;
+};
+type CustomAuthEndpointServiceSchema = {
+    authEndpoint: string;
+    customHeaders: {
+        key: string;
+        value: string;
+    }[];
+};
+export declare function fetchTeamAndProject(authData: AuthorizationInput, config: CoreServiceConfig): Promise<ApiResponse>;
+export declare function updateRateLimitedAt(projectId: string, config: CoreServiceConfig): Promise<void>;
+export {};
+//# sourceMappingURL=api.d.ts.map

package/dist/types/core/api.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"api.d.ts","sourceRoot":"","sources":["../../../src/core/api.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAC/D,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAEjD,MAAM,MAAM,UAAU,GAAG;IACvB,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;CAClB,CAAC;AAEF,MAAM,MAAM,YAAY,GAAG;IACzB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,SAAS,EAAE,OAAO,CAAC;IACnB,MAAM,EAAE,MAAM,CAAC;CAChB,CAAC;AAEF,MAAM,MAAM,iBAAiB,GAAG;IAC9B,MAAM,EAAE,MAAM,CAAC;IACf,YAAY,EAAE,WAAW,CAAC;IAC1B,aAAa,EAAE,MAAM,CAAC;IACtB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,YAAY,CAAC,EAAE,OAAO,CAAC;CACxB,CAAC;AAEF,MAAM,MAAM,sBAAsB,GAAG;IACnC,IAAI,EAAE,YAAY,CAAC;IACnB,OAAO,CAAC,EAAE,eAAe,GAAG,IAAI,CAAC;CAClC,CAAC;AAEF,MAAM,MAAM,WAAW,GAAG;IACxB,IAAI,EAAE,sBAAsB,GAAG,IAAI,CAAC;IACpC,KAAK,EAAE;QACL,IAAI,EAAE,MAAM,CAAC;QACb,UAAU,EAAE,MAAM,CAAC;QACnB,OAAO,EAAE,MAAM,CAAC;KACjB,CAAC;CACH,CAAC;AAEF,MAAM,MAAM,YAAY,GAAG;IACzB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,IAAI,CAAC;IAChB,SAAS,EAAE,IAAI,GAAG,IAAI,CAAC;IACvB,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,mBAAmB,EAAE,OAAO,GAAG,IAAI,CAAC;IACpC,aAAa,EAAE,WAAW,EAAE,CAAC;CAC9B,CAAC;AAEF,MAAM,MAAM,eAAe,GAAG;IAC5B,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,IAAI,CAAC;IAChB,SAAS,EAAE,IAAI,GAAG,IAAI,CAAC;IACvB,cAAc,EAAE,MAAM,CAAC;IACvB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,SAAS,EAAE,MAAM,EAAE,CAAC;IACpB,QAAQ,EAAE,CACN;QACE,IAAI,EAAE,KAAK,CAAC;QACZ,OAAO,EAAE,KAAK,EAAE,CAAC;QACjB,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;KAC9B,GACD;QACE,IAAI,EAAE,SAAS,CAAC;QAChB,OAAO,EAAE,CAAC,MAAM,GAAG,OAAO,CAAC,EAAE,CAAC;KAC/B,GACD;QACE,IAAI,EAAE,KAAK,CAAC;QACZ,OAAO,EAAE,KAAK,EAAE,CAAC;KAClB,GACD;QACE,IAAI,EAAE,SAAS,CAAC;QAChB,OAAO,EAAE,KAAK,EAAE,CAAC;KAClB,GACD;QACE,IAAI,EAAE,QAAQ,CAAC;QACf,OAAO,EAAE,KAAK,EAAE,CAAC;KAClB,GACD;QACE,IAAI,EAAE,SAAS,CAAC;QAChB,OAAO,EAAE,KAAK,EAAE,CAAC;QACjB,eAAe,CAAC,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC;QAClC,wBAAwB,CAAC,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC;QAC3C,cAAc,CAAC,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC;QACjC,cAAc,CAAC,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC;QACjC,aAAa,CAAC,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC;QAChC,MAAM,CAAC,EAAE;YACP,MAAM,CAAC,EAAE;gBACP,QAAQ,EAAE,MAAM,CAAC;gBACjB,YAAY,EAAE,KAAK,GAAG,QAAQ,CAAC;aAChC,GAAG,IAAI,CAAC;SACV,GAAG,IAAI,CAAC;QACT,cAAc,CAAC,EAAE;YACf,GAAG,EAAE,MAAM,CAAC;YACZ,OAAO,CAAC,EAAE;gBACR,GAAG,EAAE,MAAM,CAAC;gBACZ,KAAK,EAAE,MAAM,CAAC;aACf,EAAE,CAAC;SACL,GAAG,IAAI,CAAC;KACV,GACD;QACE,IAAI,EAAE,iBAAiB,CAAC;QACxB,OAAO,EAAE,KAAK,EAAE,CAAC;QACjB,YAAY,CAAC,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC;QAC/B,eAAe,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QAChC,mBAAmB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QACpC,uBAAuB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QACxC,oBAAoB,CAAC,EAAE,iCAAiC,GAAG,IAAI,CAAC;QAChE,kBAAkB,CAAC,EAAE,+BAA+B,GAAG,IAAI,CAAC;KAC7D,CACJ,EAAE,CAAC;IACJ,eAAe,EAAE,MAAM,EAAE,CAAC;CAC3B,CAAC;AAEF,KAAK,iCAAiC,GAAG;IACvC,OAAO,EAAE,MAAM,CAAC;IAChB,GAAG,EAAE,MAAM,CAAC;CACb,CAAC;AAEF,KAAK,+BAA+B,GAAG;IACrC,YAAY,EAAE,MAAM,CAAC;IACrB,aAAa,EAAE;QACb,GAAG,EAAE,MAAM,CAAC;QACZ,KAAK,EAAE,MAAM,CAAC;KACf,EAAE,CAAC;CACL,CAAC;AAEF,wBAAsB,mBAAmB,CACvC,QAAQ,EAAE,kBAAkB,EAC5B,MAAM,EAAE,iBAAiB,GACxB,OAAO,CAAC,WAAW,CAAC,CAwBtB;AAED,wBAAsB,mBAAmB,CACvC,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,iBAAiB,GACxB,OAAO,CAAC,IAAI,CAAC,CAgBf"}

package/dist/types/core/authorize/client.d.ts

@@ -0,0 +1,17 @@
+import type { TeamAndProjectResponse } from "../api.js";
+import type { AuthorizationResult } from "./types.js";
+export type ClientAuthorizationPayload = {
+    secretKeyHash: string | null;
+    bundleId: string | null;
+    origin: string | null;
+};
+export declare function authorizeClient(authOptions: ClientAuthorizationPayload, teamAndProjectResponse: TeamAndProjectResponse): AuthorizationResult;
+export declare function authorizeDomain({ domains, origin, }: {
+    domains: string[];
+    origin: string;
+}): boolean;
+export declare function authorizeBundleId({ bundleIds, bundleId, }: {
+    bundleIds: string[];
+    bundleId: string;
+}): boolean;
+//# sourceMappingURL=client.d.ts.map

package/dist/types/core/authorize/client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../../../../src/core/authorize/client.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,WAAW,CAAC;AACxD,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAC;AAEtD,MAAM,MAAM,0BAA0B,GAAG;IACvC,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;CACvB,CAAC;AAEF,wBAAgB,eAAe,CAC7B,WAAW,EAAE,0BAA0B,EACvC,sBAAsB,EAAE,sBAAsB,GAC7C,mBAAmB,CAgErB;AAGD,wBAAgB,eAAe,CAAC,EAC9B,OAAO,EACP,MAAM,GACP,EAAE;IAAE,OAAO,EAAE,MAAM,EAAE,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CAgCjD;AAED,wBAAgB,iBAAiB,CAAC,EAChC,SAAS,EACT,QAAQ,GACT,EAAE;IAAE,SAAS,EAAE,MAAM,EAAE,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CASrD"}

package/dist/{declarations/src → types}/core/authorize/index.d.ts

@@ -1,8 +1,10 @@
-import { AccountMetadata, ApiKeyMetadata, CoreServiceConfig } from "../api";
-import { AuthorizationResult } from "./types";
+import { type CoreServiceConfig, type TeamAndProjectResponse } from "../api.js";
+import type { AuthorizationResult } from "./types.js";
 export type AuthorizationInput = {
     secretKey: string | null;
     clientId: string | null;
+    ecosystemId: string | null;
+    ecosystemPartnerId: string | null;
     origin: string | null;
     bundleId: string | null;
     secretKeyHash: string | null;
@@ -11,11 +13,10 @@ export type AuthorizationInput = {
     targetAddress?: string | string[];
     useWalletAuth?: string | null;
 };
-type CacheOptions = {
+export type CacheOptions = {
     get: (clientId: string) => Promise<string | null>;
-    put: (clientId: string, data: ApiKeyMetadata | AccountMetadata) => Promise<void> | void;
+    put: (clientId: string, data: TeamAndProjectResponse) => Promise<void> | void;
     cacheTtlSeconds: number;
 };
 export declare function authorize(authData: AuthorizationInput, serviceConfig: CoreServiceConfig, cacheOptions?: CacheOptions): Promise<AuthorizationResult>;
-export {};
 //# sourceMappingURL=index.d.ts.map

package/dist/types/core/authorize/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/core/authorize/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,KAAK,iBAAiB,EACtB,KAAK,sBAAsB,EAE5B,MAAM,WAAW,CAAC;AAGnB,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAC;AAEtD,MAAM,MAAM,kBAAkB,GAAG;IAC/B,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,kBAAkB,EAAE,MAAM,GAAG,IAAI,CAAC;IAClC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;IACnB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,aAAa,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;IAElC,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC/B,CAAC;AAEF,MAAM,MAAM,YAAY,GAAG;IACzB,GAAG,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IAClD,GAAG,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,sBAAsB,KAAK,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;IAC9E,eAAe,EAAE,MAAM,CAAC;CACzB,CAAC;AASF,wBAAsB,SAAS,CAC7B,QAAQ,EAAE,kBAAkB,EAC5B,aAAa,EAAE,iBAAiB,EAChC,YAAY,CAAC,EAAE,YAAY,GAC1B,OAAO,CAAC,mBAAmB,CAAC,CA8G9B"}

package/dist/types/core/authorize/service.d.ts

@@ -0,0 +1,4 @@
+import type { CoreServiceConfig, TeamAndProjectResponse } from "../api.js";
+import type { AuthorizationResult } from "./types.js";
+export declare function authorizeService(teamAndProjectResponse: TeamAndProjectResponse, serviceConfig: CoreServiceConfig): AuthorizationResult;
+//# sourceMappingURL=service.d.ts.map

package/dist/types/core/authorize/service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"service.d.ts","sourceRoot":"","sources":["../../../../src/core/authorize/service.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,iBAAiB,EAAE,sBAAsB,EAAE,MAAM,WAAW,CAAC;AAC3E,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAC;AAEtD,wBAAgB,gBAAgB,CAC9B,sBAAsB,EAAE,sBAAsB,EAC9C,aAAa,EAAE,iBAAiB,GAC/B,mBAAmB,CAsDrB"}

package/dist/types/core/authorize/types.d.ts

@@ -0,0 +1,10 @@
+import type { TeamAndProjectResponse } from "../api.js";
+export type AuthorizationResult = ({
+    authorized: true;
+} & TeamAndProjectResponse) | {
+    authorized: false;
+    status: number;
+    errorMessage: string;
+    errorCode: string;
+};
+//# sourceMappingURL=types.d.ts.map

package/dist/types/core/authorize/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../../src/core/authorize/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,WAAW,CAAC;AAExD,MAAM,MAAM,mBAAmB,GAC3B,CAAC;IACC,UAAU,EAAE,IAAI,CAAC;CAClB,GAAG,sBAAsB,CAAC,GAC3B;IACE,UAAU,EAAE,KAAK,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;CACnB,CAAC"}

package/dist/types/core/rateLimit/index.d.ts

@@ -0,0 +1,20 @@
+import { type CoreServiceConfig, type ProjectResponse } from "../api.js";
+import type { RateLimitResult } from "./types.js";
+type IRedis = {
+    incr: (key: string) => Promise<number>;
+    expire: (key: string, ttlSeconds: number) => Promise<0 | 1>;
+};
+export declare function rateLimit(args: {
+    project?: ProjectResponse;
+    limitPerSecond: number;
+    serviceConfig: CoreServiceConfig;
+    redis: IRedis;
+    /**
+     * Sample requests to reduce load on Redis.
+     * This scales down the request count and the rate limit threshold.
+     * @default 1.0
+     */
+    sampleRate?: number;
+}): Promise<RateLimitResult>;
+export {};
+//# sourceMappingURL=index.d.ts.map

package/dist/types/core/rateLimit/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/core/rateLimit/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,KAAK,iBAAiB,EACtB,KAAK,eAAe,EAErB,MAAM,WAAW,CAAC;AACnB,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAKlD,KAAK,MAAM,GAAG;IACZ,IAAI,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;IACvC,MAAM,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,KAAK,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;CAC7D,CAAC;AAEF,wBAAsB,SAAS,CAAC,IAAI,EAAE;IACpC,OAAO,CAAC,EAAE,eAAe,CAAC;IAC1B,cAAc,EAAE,MAAM,CAAC;IACvB,aAAa,EAAE,iBAAiB,CAAC;IACjC,KAAK,EAAE,MAAM,CAAC;IACd;;;;OAIG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB,GAAG,OAAO,CAAC,eAAe,CAAC,CAsE3B"}

package/dist/types/core/rateLimit/types.d.ts

@@ -0,0 +1,13 @@
+export type RateLimitResult = {
+    rateLimited: false;
+    requestCount: number;
+    rateLimit: number;
+} | {
+    rateLimited: true;
+    requestCount: number;
+    rateLimit: number;
+    status: number;
+    errorMessage: string;
+    errorCode: string;
+};
+//# sourceMappingURL=types.d.ts.map

package/dist/types/core/rateLimit/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../../src/core/rateLimit/types.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,eAAe,GACvB;IACE,WAAW,EAAE,KAAK,CAAC;IACnB,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;CACnB,GACD;IACE,WAAW,EAAE,IAAI,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;CACnB,CAAC"}