@urun-sh/next 0.2.32 → 0.2.34

package/dist/index.d.cts

@@ -1,5 +1,45 @@
 import { CreateClientTokenOptions } from '@urun-sh/core';
 
+/**
+ * LOCAL-DEV credential resolution for the token route (owner ruling
+ * 2026-07-15: raw `pnpm dev` works without the CLI).
+ *
+ * Precedence:
+ *   1. `URUN_API_KEY` in the server env — the production contract, always.
+ *   2. DEV ONLY (`NODE_ENV === 'development'`, i.e. `next dev`): the urun
+ *      CLI's own stored login credential, `~/.config/urun/credentials.json` —
+ *      the SAME file `urun login` writes (same path rules: `URUN_CONFIG_HOME`,
+ *      then `XDG_CONFIG_HOME/urun`, then `~/.config/urun`; same JSON shape:
+ *      `{ api_key, api_url, ... }`). Never a second format, never active in
+ *      production builds or deployed frontends.
+ *
+ * The login file also carries the control-plane `api_url`, from which the
+ * org's session gateway derives exactly like the CLI's `resolve_gateway_url`
+ * (strip a trailing `/v<N>` version segment) — so a dev-cluster login dials
+ * the dev gateway instead of silently defaulting to the prod front door.
+ */
+/** Thrown when no credential exists anywhere — carries the actionable fix. */
+declare class MissingCredentialError extends Error {
+    constructor();
+}
+interface ResolvedCredential {
+    apiKey: string;
+    /** Where the key came from — logged once, honestly. */
+    source: 'env' | 'urun-login';
+    /**
+     * Gateway derived FROM THE CREDENTIAL ITSELF (login-file `api_url` with the
+     * `/v<N>` control-plane path stripped). Undefined for env keys — the
+     * deployed contract stays `URUN_GATEWAY_URL`-or-platform-default.
+     */
+    gatewayUrl?: string;
+}
+/**
+ * Resolve the token route's org API key: env first, then (dev server only)
+ * the urun CLI login file. Exactly one honest log line states the source.
+ * Throws {@link MissingCredentialError} when neither exists.
+ */
+declare function resolveCredential(env?: Record<string, string | undefined>): Promise<ResolvedCredential>;
+
 /**
  * @urun-sh/next — the Next.js on-ramp for uRun scoped client tokens.
  *
@@ -33,6 +73,8 @@ declare const URUN_API_KEY_ENV = "URUN_API_KEY";
  * provider as props.
  */
 declare const URUN_GATEWAY_URL_ENV = "URUN_GATEWAY_URL";
+/** Server env var naming the API front door the token route MINTS against. */
+declare const URUN_API_URL_ENV = "URUN_API_URL";
 declare const URUN_APP_ENV = "URUN_APP";
 declare const URUN_FUNCTION_ENV = "URUN_FUNCTION";
 /** The frontend's resolved session-plane config (see {@link urunSessionConfig}). */
@@ -158,4 +200,4 @@ declare function createTokenRoute(options?: CreateTokenRouteOptions): (request:
  */
 declare function urunTokenPagesHandler(options: UrunTokenRouteOptions): (req: UrunTokenPagesRequest, res: UrunTokenPagesResponse) => Promise<void>;
 
-export { type CreateTokenRouteOptions, type CreateTokenRouteResponseBody, URUN_API_KEY_ENV, URUN_APP_ENV, URUN_FUNCTION_ENV, URUN_GATEWAY_URL_ENV, type UrunSessionConfig, type UrunTokenPagesRequest, type UrunTokenPagesResponse, type UrunTokenResponseBody, type UrunTokenRouteOptions, createTokenRoute, urunSessionConfig, urunTokenPagesHandler, urunTokenRoute };
+export { type CreateTokenRouteOptions, type CreateTokenRouteResponseBody, MissingCredentialError, URUN_API_KEY_ENV, URUN_API_URL_ENV, URUN_APP_ENV, URUN_FUNCTION_ENV, URUN_GATEWAY_URL_ENV, type UrunSessionConfig, type UrunTokenPagesRequest, type UrunTokenPagesResponse, type UrunTokenResponseBody, type UrunTokenRouteOptions, createTokenRoute, resolveCredential, urunSessionConfig, urunTokenPagesHandler, urunTokenRoute };

package/dist/index.d.ts

@@ -1,8 +1,23 @@
 import { CreateClientTokenOptions } from '@urun-sh/core';
 
+declare class MissingCredentialError extends Error {
+    constructor();
+}
+interface ResolvedCredential {
+    apiKey: string;
+    
+    source: 'env' | 'urun-login';
+    
+    gatewayUrl?: string;
+}
+
+declare function resolveCredential(env?: Record<string, string | undefined>): Promise<ResolvedCredential>;
+
 declare const URUN_API_KEY_ENV = "URUN_API_KEY";
 
 declare const URUN_GATEWAY_URL_ENV = "URUN_GATEWAY_URL";
+
+declare const URUN_API_URL_ENV = "URUN_API_URL";
 declare const URUN_APP_ENV = "URUN_APP";
 declare const URUN_FUNCTION_ENV = "URUN_FUNCTION";
 
@@ -58,4 +73,4 @@ declare function createTokenRoute(options?: CreateTokenRouteOptions): (request:
 
 declare function urunTokenPagesHandler(options: UrunTokenRouteOptions): (req: UrunTokenPagesRequest, res: UrunTokenPagesResponse) => Promise<void>;
 
-export { type CreateTokenRouteOptions, type CreateTokenRouteResponseBody, URUN_API_KEY_ENV, URUN_APP_ENV, URUN_FUNCTION_ENV, URUN_GATEWAY_URL_ENV, type UrunSessionConfig, type UrunTokenPagesRequest, type UrunTokenPagesResponse, type UrunTokenResponseBody, type UrunTokenRouteOptions, createTokenRoute, urunSessionConfig, urunTokenPagesHandler, urunTokenRoute };
+export { type CreateTokenRouteOptions, type CreateTokenRouteResponseBody, MissingCredentialError, URUN_API_KEY_ENV, URUN_API_URL_ENV, URUN_APP_ENV, URUN_FUNCTION_ENV, URUN_GATEWAY_URL_ENV, type UrunSessionConfig, type UrunTokenPagesRequest, type UrunTokenPagesResponse, type UrunTokenResponseBody, type UrunTokenRouteOptions, createTokenRoute, resolveCredential, urunSessionConfig, urunTokenPagesHandler, urunTokenRoute };