cliodot 1.2.2 → 1.2.4

package/dist/Surface.js

@@ -1 +1,255 @@
-'use strict';const _0x352af3=_0x5e96;function _0x1b53(){const _0x435d26=['AM9PBG','mtHHywTMr0S','AND0','r0vu','C2rR','zgLNzxn0','x19LC01VzhvSzq','C2rRoG','ntf2r0f5rxe','zgf0yq','mZi3ndy3mfv2CunwCa','CgfYC2vbCgLfCNjVCKnVzgu','y3jLyxrLsg1HyW','DMvYC2LVBG','l3nKAY9ZDxjMywnL','rMfPBgvKihrVigXVywqGC3vYzMfJzq','u3vYzMfJzsbYB290igLZig5VDcbJywXSywjSzq','C3vYzMfJzvbYB21PC2u','DxbKyxrL','zMLUza','Dg9tDhjPBMC','yM9KEq','Aw52B2TLqMfZzvvYBa','xhTCEW','C2HHmJu2','Aw52B2TL','z2v0','mJmXndC1mfjLz0Dyvq','ndGZs1vJCxrd','y2XPB2rVDefWAuvYCM9YrNjVBuf4Aw9Z','CgfYC2vbCgLfCNjVCLn0yxr1CW','C2rRvMvYC2LVBG','yxbPs2v5','CMfUzg9TqNL0zxm','yxbWBgLJyxrPB24VANnVBG','DxrMoa','u0rlig9WzxjHDgLVBIbUB3qGzxHWB3nLzdOG','CgfYC2vbCgLfCNjVCK1LC3nHz2u','CM9VDejHC2vvCMW','zMfPBfjLC3bVBNnL','x19PBxbVCNrezwzHDwX0','yxnqCM94Eq','n3ffuLz5yq','zxjYB3i','qMvHCMvYia','C2XPy2u','u3vYzMfJzsbYzxf1zxn0igzHAwXLzcaO','yxr0zxn0yxrPB25izwfKzxjZ','mJq5ndy5nNLJEeTsra','u3vYzMfJzq','DhjPBq','CMvXDwvZDa','u1vsrKfdrv9mt0fex0zbsuXfra','lI9ODhrWl3bHCNnLlwfWAs1LCNjVCG','C3vYzMfJzq','Bg9Hzfn1CMzHy2u','mJGYndjWrhnLBNK','zgvMyxvSDa','zxzLCNK','yxbPs2v5sgvHzgvY','C3rYAw5NAwz5','ms4YlJe','BM9Uy2u','q29UDgvUDc1uExbL','CxvLCNLFC2nOzw1H','mtfVBKDJzhC','zMLUze9W','w1n1CMzHy2vD','C3rHCNrZv2L0Aa','BgvUz3rO','C3rHDhvZ','z2f0zxDHEq','yxHPB3m','zw5KCg9PBNrFCgf0Aa','odiXnKP0s2rjqW','u0rlx09qx05pvf9fwfbpu0ve','BM93','mJG2mtu3nevWrxv5rW','CMvWBgfJzq','Bwv0Ag9K','nduZodC0ohrvtenqqG','rMfPBgvKihrVigXVywqGC3vYzMfJzsaO','C2rRx3bHDgG','yMfZzvvYBa','C3LTyM9S','Agv4','C2X1zW','q2XPB2rVDefWAuvYCM9Y'];_0x1b53=function(){return _0x435d26;};return _0x1b53();}(function(_0x499543,_0x3a350c){const _0x53f61e=_0x5e96,_0x2722fc=_0x499543();while(!![]){try{const _0x2fb3b2=-parseInt(_0x53f61e(0xeb))/0x1*(parseInt(_0x53f61e(0x11b))/0x2)+parseInt(_0x53f61e(0xff))/0x3*(parseInt(_0x53f61e(0xd5))/0x4)+parseInt(_0x53f61e(0xed))/0x5+parseInt(_0x53f61e(0xd8))/0x6*(-parseInt(_0x53f61e(0x10d))/0x7)+parseInt(_0x53f61e(0x113))/0x8*(parseInt(_0x53f61e(0xe4))/0x9)+-parseInt(_0x53f61e(0xfe))/0xa+parseInt(_0x53f61e(0x124))/0xb*(parseInt(_0x53f61e(0xdb))/0xc);if(_0x2fb3b2===_0x3a350c)break;else _0x2722fc['push'](_0x2722fc['shift']());}catch(_0x29f3f8){_0x2722fc['push'](_0x2722fc['shift']());}}}(_0x1b53,0x8876c));function _0x5e96(_0x1b8896,_0x5a1eb8){_0x1b8896=_0x1b8896-0xcf;const _0x1b53d3=_0x1b53();let _0x5e967a=_0x1b53d3[_0x1b8896];if(_0x5e96['rXlcPI']===undefined){var _0x4bae1b=function(_0x347d61){const _0x38efe5='abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789+/=';let _0x42f408='',_0x181485='';for(let _0x331ddd=0x0,_0x561d23,_0x299fb6,_0x244b21=0x0;_0x299fb6=_0x347d61['charAt'](_0x244b21++);~_0x299fb6&&(_0x561d23=_0x331ddd%0x4?_0x561d23*0x40+_0x299fb6:_0x299fb6,_0x331ddd++%0x4)?_0x42f408+=String['fromCharCode'](0xff&_0x561d23>>(-0x2*_0x331ddd&0x6)):0x0){_0x299fb6=_0x38efe5['indexOf'](_0x299fb6);}for(let _0x24709b=0x0,_0x114464=_0x42f408['length'];_0x24709b<_0x114464;_0x24709b++){_0x181485+='%'+('00'+_0x42f408['charCodeAt'](_0x24709b)['toString'](0x10))['slice'](-0x2);}return decodeURIComponent(_0x181485);};_0x5e96['WANWPD']=_0x4bae1b,_0x5e96['fvbpRz']={},_0x5e96['rXlcPI']=!![];}const _0x479fee=_0x1b53d3[0x0],_0x26ae22=_0x1b8896+_0x479fee,_0x16a0a3=_0x5e96['fvbpRz'][_0x26ae22];return!_0x16a0a3?(_0x5e967a=_0x5e96['WANWPD'](_0x5e967a),_0x5e96['fvbpRz'][_0x26ae22]=_0x5e967a):_0x5e967a=_0x16a0a3,_0x5e967a;}var __importDefault=this&&this[_0x352af3(0x10b)]||function(_0x42f408){return _0x42f408&&_0x42f408['__esModule']?_0x42f408:{'default':_0x42f408};};Object['defineProperty'](exports,_0x352af3(0xe9),{'value':!![]}),exports[_0x352af3(0x114)]=void 0x0;const axios_1=__importDefault(require(_0x352af3(0xd3))),crypto_1=__importDefault(require('crypto')),errors_1=require('./errors'),parse_api_error_1=require(_0x352af3(0x118)),DEFAULT_SDK_VERSION=_0x352af3(0x120);function trimBaseUrl(_0x181485){const _0x25693b=_0x352af3;return _0x181485['trim']()[_0x25693b(0xd9)](/\/+$/,'');}function sha256Hex(value){const _0x4bda75=_0x352af3;return crypto_1['default']['createHash'](_0x4bda75(0xfb))[_0x4bda75(0xf5)](value,_0x4bda75(0x106))['digest'](_0x4bda75(0xe0));}function hmacSha256Hex(_0x331ddd,_0x561d23){const _0x49c3a8=_0x352af3;return crypto_1[_0x49c3a8(0x11c)][_0x49c3a8(0xef)](_0x49c3a8(0xfb),_0x331ddd)[_0x49c3a8(0xf5)](_0x561d23,'utf8')[_0x49c3a8(0xe8)]('hex');}function randomNonce(){const _0x447822=_0x352af3;return crypto_1[_0x447822(0x11c)][_0x447822(0x104)](0x10)[_0x447822(0xf7)](_0x447822(0xe0));}function buildCanonical(_0x299fb6){const _0x3227c6=_0x352af3,_0x244b21=_0x299fb6[_0x3227c6(0xf8)]===undefined||_0x299fb6[_0x3227c6(0xf8)]===null?'':typeof _0x299fb6[_0x3227c6(0xf8)]==='string'?_0x299fb6[_0x3227c6(0xf8)]:JSON[_0x3227c6(0x11f)](_0x299fb6['body']);return[_0x299fb6['timestamp'],_0x299fb6[_0x3227c6(0x121)],(_0x299fb6['method']||_0x3227c6(0xe6))['toUpperCase'](),_0x299fb6['path']||'/',sha256Hex(_0x244b21)]['join']('.');}function fillEndpointPath(_0x24709b,_0x114464){const _0x991a50=_0x352af3;let _0x380dfe=_0x24709b;for(const [_0x43388a,value]of Object['entries'](_0x114464)){_0x380dfe=_0x380dfe[_0x991a50(0xd9)](new RegExp(':'+_0x43388a+'\x5cb','g'),encodeURIComponent(value))[_0x991a50(0xd9)](new RegExp(_0x991a50(0xfa)+_0x43388a+'\x5c}\x5c}','g'),encodeURIComponent(value))[_0x991a50(0xd9)](new RegExp('\x5c{'+_0x43388a+'\x5c}','g'),encodeURIComponent(value));}if(!_0x380dfe[_0x991a50(0xcf)]('/'))_0x380dfe='/'+_0x380dfe;return _0x380dfe;}class SurfaceRuntime{constructor(_0x388262){const _0x465808=_0x352af3;this[_0x465808(0xf4)]=null,this[_0x465808(0x119)]=null;if(!_0x388262[_0x465808(0xde)]?.[_0x465808(0x115)]())throw new errors_1[(_0x465808(0xe2))]('Surface\x20requires\x20baseUrl');this[_0x465808(0x109)]=trimBaseUrl(_0x388262[_0x465808(0xde)]),this['slug']=_0x388262[_0x465808(0xe1)]?.[_0x465808(0x115)]()||undefined,this[_0x465808(0x103)]=_0x388262[_0x465808(0x103)]?.[_0x465808(0x115)]()||undefined,this[_0x465808(0xe5)]=_0x388262[_0x465808(0xe5)]?.[_0x465808(0x115)]()||undefined,this[_0x465808(0x11e)]=_0x388262[_0x465808(0x11e)]?.[_0x465808(0x115)]()||'X-API-Key',this[_0x465808(0x102)]=_0x388262[_0x465808(0xf0)]?.['trim']()||DEFAULT_SDK_VERSION,this['invokeBaseUrl']=this[_0x465808(0xe1)]?this[_0x465808(0x109)]+'/'+this['slug']:this['rootBaseUrl'],this[_0x465808(0xd3)]=axios_1[_0x465808(0x11c)]['create']({'timeout':0xea60,'validateStatus':()=>!![]});}[_0x352af3(0x10a)](_0x1f227b,_0x1a3289,_0x1d4d6a){const _0x379be8=_0x352af3,_0x4b158e=_0x1f227b?.['data'],_0x133e9a=(0x0,parse_api_error_1[_0x379be8(0x108)])(_0x4b158e)||(typeof _0x4b158e?.[_0x379be8(0x10e)]==='string'?_0x4b158e['error']:undefined)||_0x1a3289;throw new errors_1[(_0x379be8(0xe2))](_0x133e9a,{'status':(0x0,parse_api_error_1[_0x379be8(0x101)])(_0x4b158e,_0x1f227b?.[_0x379be8(0xd1)]),'data':_0x4b158e,'code':_0x1d4d6a||(0x0,parse_api_error_1[_0x379be8(0xee)])(_0x4b158e)});}['signingSecret'](){const _0x49bb77=_0x352af3;if(this[_0x49bb77(0x103)])return this[_0x49bb77(0x103)];if(this['jwt'])return this['jwt'];return _0x49bb77(0xea)+(this[_0x49bb77(0xe1)]||_0x49bb77(0xd2));}[_0x352af3(0x112)](_0x45d825,_0x36a1ab,_0x260b40){const _0x8d831b=_0x352af3,_0x2c6d45=String(Date[_0x8d831b(0xd7)]()),_0x4c28e2=randomNonce(),_0x1fcb34=buildCanonical({'timestamp':_0x2c6d45,'nonce':_0x4c28e2,'method':_0x45d825,'path':_0x36a1ab,'body':_0x260b40}),_0x228289=hmacSha256Hex(this['signingSecret'](),_0x1fcb34),_0x21d14f={'X-Cliodot-Client':_0x8d831b(0xe7),'X-Cliodot-SDK-Version':this[_0x8d831b(0x102)],'X-Cliodot-SDK-Timestamp':_0x2c6d45,'X-Cliodot-SDK-Nonce':_0x4c28e2,'X-Cliodot-SDK-Signature':_0x228289};return this[_0x8d831b(0x103)]&&(_0x21d14f[this[_0x8d831b(0x11e)]]=this['apiKey']),this[_0x8d831b(0xe5)]&&(_0x21d14f['Authorization']=_0x8d831b(0x10f)+this[_0x8d831b(0xe5)]),_0x21d14f;}async[_0x352af3(0x11a)](_0x7f43d=![]){const _0x3e10a2=_0x352af3;if(!_0x7f43d&&this[_0x3e10a2(0x119)])return this[_0x3e10a2(0x119)];if(!_0x7f43d&&this[_0x3e10a2(0xf4)])return this[_0x3e10a2(0xf4)];return this[_0x3e10a2(0xf4)]=((async()=>{const _0x27bc64=_0x3e10a2,_0x5a1a32=_0x27bc64(0xf1),_0x4da51a=''+this[_0x27bc64(0xf9)]+_0x5a1a32;try{const _0x26c682=await this[_0x27bc64(0xd3)][_0x27bc64(0xfd)](_0x4da51a,{'headers':this[_0x27bc64(0x112)](_0x27bc64(0xe6),_0x5a1a32)});return(_0x26c682[_0x27bc64(0xd1)]>=0x190||_0x26c682[_0x27bc64(0xec)]?.['ok']===![])&&this[_0x27bc64(0x10a)](_0x26c682,_0x27bc64(0xdc)+_0x26c682['status']+')',_0x27bc64(0x117)),this[_0x27bc64(0x119)]=_0x26c682[_0x27bc64(0xec)][_0x27bc64(0x119)],this[_0x27bc64(0x119)];}catch(_0x35746b){this['surfacePromise']=null;if(_0x35746b instanceof errors_1[_0x27bc64(0xe2)])throw _0x35746b;throw(0x0,errors_1['cliodotApiErrorFromAxios'])(_0x35746b,_0x27bc64(0xf2));}})()),this[_0x3e10a2(0xf4)];}[_0x352af3(0x125)](_0x1e638b,_0x440478,_0x3813d1){const _0x499f25=_0x352af3,_0xf411be=_0x3813d1['ops'][_0x499f25(0xf6)](_0x4026d2=>_0x4026d2['op']===_0x440478&&_0x4026d2[_0x499f25(0xdd)][_0x499f25(0xd0)]===_0x1e638b[_0x499f25(0xd0)]&&_0x4026d2['sdk_path'][_0x499f25(0x11d)]((_0x55f5b2,_0x30e016)=>_0x55f5b2===_0x1e638b[_0x30e016]));if(!_0xf411be){const _0x501043=[..._0x1e638b,_0x440478][_0x499f25(0xe3)]('.');throw new errors_1['CliodotApiError'](_0x499f25(0x107)+_0x501043,{'code':_0x499f25(0xd6)});}return _0xf411be;}async['invoke'](_0x2feab9,_0x533f46,_0x5957d7){const _0x4d20bf=_0x352af3,_0x24d1f8=await this[_0x4d20bf(0x11a)](),_0x51e392=this[_0x4d20bf(0x125)](_0x2feab9,_0x533f46,_0x24d1f8);let _0x14332f=0x0;const _0x3c8e15={};for(const _0x19302f of _0x51e392['path_params']||[]){const value=_0x5957d7[_0x14332f++];if(value===undefined||value===null)throw new errors_1[(_0x4d20bf(0xe2))]('Missing\x20path\x20argument:\x20'+_0x19302f);_0x3c8e15[_0x19302f]=String(value);}let _0x26fb71,_0x3aec59;_0x51e392[_0x4d20bf(0xf8)]&&(_0x26fb71=_0x5957d7[_0x14332f++]);_0x51e392[_0x4d20bf(0x123)]&&(_0x3aec59=_0x5957d7[_0x14332f++]||undefined);const _0x5a55dd=fillEndpointPath(_0x51e392[_0x4d20bf(0xd4)],_0x3c8e15),_0x3d318d=''+this[_0x4d20bf(0xf9)]+_0x5a55dd,_0x1e9eb2=!!_0x51e392['body']&&_0x26fb71!==undefined,_0x4830f3=this[_0x4d20bf(0x112)](_0x51e392[_0x4d20bf(0xda)],_0x5a55dd,_0x1e9eb2?_0x26fb71:undefined);_0x1e9eb2&&(_0x4830f3[_0x4d20bf(0x122)]=_0x4d20bf(0x105));try{const _0xc1f9b6=await this[_0x4d20bf(0xd3)][_0x4d20bf(0x116)]({'url':_0x3d318d,'method':_0x51e392['method'],'headers':_0x4830f3,'params':_0x3aec59,'data':_0x1e9eb2?_0x26fb71:undefined});return(_0xc1f9b6[_0x4d20bf(0xd1)]>=0x190||_0xc1f9b6[_0x4d20bf(0xec)]?.['ok']===![])&&this['failResponse'](_0xc1f9b6,_0x4d20bf(0x111)+_0xc1f9b6[_0x4d20bf(0xd1)]+')','SURFACE_REQUEST_FAILED'),_0xc1f9b6[_0x4d20bf(0xec)]?.['data']!==undefined?_0xc1f9b6['data'][_0x4d20bf(0xec)]:_0xc1f9b6[_0x4d20bf(0xec)];}catch(_0x544cc8){if(_0x544cc8 instanceof errors_1[_0x4d20bf(0xe2)])throw _0x544cc8;throw(0x0,errors_1[_0x4d20bf(0x100)])(_0x544cc8,'Surface\x20request\x20failed');}}[_0x352af3(0x10c)](_0x336fbd=[]){const _0x360d43=this,_0x39ecff=(..._0x442a27)=>{const _0x529f5c=_0x5e96;if(_0x336fbd[_0x529f5c(0xd0)]===0x0)throw new errors_1[(_0x529f5c(0xe2))](_0x529f5c(0xf3));const _0x3995c9=_0x336fbd[_0x336fbd[_0x529f5c(0xd0)]-0x1],_0x201e69=_0x336fbd[_0x529f5c(0x110)](0x0,-0x1);return _0x360d43[_0x529f5c(0xfc)](_0x201e69,_0x3995c9,_0x442a27);};return new Proxy(_0x39ecff,{'get'(_target,_0x5cde83){const _0x50ad2b=_0x5e96;if(typeof _0x5cde83===_0x50ad2b(0xdf))return undefined;if(_0x5cde83==='then')return undefined;if(_0x5cde83==='loadSurface')return _0x2ef27c=>_0x360d43[_0x50ad2b(0x11a)](_0x2ef27c);if(_0x5cde83===_0x50ad2b(0xf7))return()=>_0x50ad2b(0x126);return _0x360d43[_0x50ad2b(0x10c)]([..._0x336fbd,String(_0x5cde83)]);},'apply'(_target,_0x318d39,_0x2da0d2){return _0x39ecff(..._0x2da0d2||[]);}});}}exports[_0x352af3(0x114)]=function Surface(_0x297c4c){const _0x44bb2c=_0x352af3,_0x1e34bb=new SurfaceRuntime(_0x297c4c);return _0x1e34bb[_0x44bb2c(0x10c)]();};
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.Surface = void 0;
+const axios_1 = __importDefault(require("axios"));
+const crypto_1 = __importDefault(require("crypto"));
+const errors_1 = require("./errors");
+const parse_api_error_1 = require("./http/parse-api-error");
+const cliodot_request_1 = require("./http/cliodot-request");
+const DEFAULT_SDK_VERSION = "1.2.1";
+function trimBaseUrl(url) {
+    return url.trim().replace(/\/+$/, "");
+}
+function sha256Hex(value) {
+    return crypto_1.default.createHash("sha256").update(value, "utf8").digest("hex");
+}
+function hmacSha256Hex(secret, payload) {
+    return crypto_1.default.createHmac("sha256", secret).update(payload, "utf8").digest("hex");
+}
+function randomNonce() {
+    return crypto_1.default.randomBytes(16).toString("hex");
+}
+function buildCanonical(input) {
+    const bodyRaw = input.body === undefined ||
+        input.body === null ||
+        (typeof input.body === "object" &&
+            !Array.isArray(input.body) &&
+            Object.keys(input.body).length === 0)
+        ? ""
+        : typeof input.body === "string"
+            ? input.body
+            : JSON.stringify(input.body);
+    return [
+        input.timestamp,
+        input.nonce,
+        (input.method || "GET").toUpperCase(),
+        input.path || "/",
+        sha256Hex(bodyRaw),
+    ].join(".");
+}
+function sanitizePathParamKey(name) {
+    return String(name || "")
+        .replace(/[^a-zA-Z0-9_]+/g, "_")
+        .replace(/_+/g, "_")
+        .replace(/^_|_$/g, "");
+}
+function fillEndpointPath(template, pathParams) {
+    let path = template;
+    const entries = Object.entries(pathParams).sort((a, b) => b[0].length - a[0].length);
+    const replaceName = (current, name, encoded) => {
+        const escaped = name.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
+        return current
+            .replace(new RegExp(`:${escaped}(?=$|[/?#&]|[^a-zA-Z0-9_-])`, "g"), encoded)
+            .replace(new RegExp(`\\{\\{\\s*${escaped}\\s*\\}\\}`, "g"), encoded)
+            .replace(new RegExp(`\\{${escaped}\\}`, "g"), encoded);
+    };
+    for (const [name, value] of entries) {
+        path = replaceName(path, name, encodeURIComponent(value));
+    }
+    const remaining = [
+        ...path.matchAll(/\{\{\s*([a-zA-Z_][a-zA-Z0-9_-]*)\s*\}\}/g),
+        ...path.matchAll(/:([a-zA-Z_][a-zA-Z0-9_-]*)(?=$|[/?#&]|[^a-zA-Z0-9_-])/g),
+        ...path.matchAll(/\{([a-zA-Z_][a-zA-Z0-9_-]*)\}/g),
+    ].map((match) => match[1]);
+    for (const placeholder of remaining) {
+        const normalizedPlaceholder = sanitizePathParamKey(placeholder);
+        const match = entries.find(([key]) => sanitizePathParamKey(key) === normalizedPlaceholder);
+        if (!match)
+            continue;
+        path = replaceName(path, placeholder, encodeURIComponent(match[1]));
+    }
+    if (!path.startsWith("/"))
+        path = `/${path}`;
+    return path;
+}
+class SurfaceRuntime {
+    constructor(config) {
+        this.surfacePromise = null;
+        this.surface = null;
+        if (!config.baseUrl?.trim()) {
+            throw new errors_1.CliodotApiError("Surface requires baseUrl");
+        }
+        this.rootBaseUrl = trimBaseUrl(config.baseUrl);
+        this.slug = config.slug?.trim() || undefined;
+        this.apiKey = config.apiKey?.trim() || undefined;
+        this.jwt = config.jwt?.trim() || undefined;
+        this.apiKeyHeader = config.apiKeyHeader?.trim() || "X-API-Key";
+        this.sdkVersion = config.version?.trim() || DEFAULT_SDK_VERSION;
+        this.environment = config.environment;
+        this.invokeBaseUrl = this.slug
+            ? `${this.rootBaseUrl}/${this.slug}`
+            : this.rootBaseUrl;
+        this.axios = axios_1.default.create({
+            timeout: 60000,
+            validateStatus: () => true,
+        });
+    }
+    failResponse(response, fallback, code) {
+        const data = response?.data;
+        const message = (0, parse_api_error_1.parseApiErrorMessage)(data) ||
+            (typeof data?.error === "string" ? data.error : undefined) ||
+            fallback;
+        throw new errors_1.CliodotApiError(message, {
+            status: (0, parse_api_error_1.parseApiErrorStatus)(data, response?.status),
+            data,
+            code: code || (0, parse_api_error_1.parseApiErrorCode)(data),
+        });
+    }
+    signingSecret() {
+        if (this.apiKey)
+            return this.apiKey;
+        if (this.jwt)
+            return this.jwt;
+        return `sdk:${this.slug || "gateway"}`;
+    }
+    attestationHeaders(method, path, body) {
+        const timestamp = String(Date.now());
+        const nonce = randomNonce();
+        const canonical = buildCanonical({ timestamp, nonce, method, path, body });
+        const signature = hmacSha256Hex(this.signingSecret(), canonical);
+        const headers = {
+            "X-Cliodot-Client": "sdk",
+            "X-Cliodot-SDK-Version": this.sdkVersion,
+            "X-Cliodot-SDK-Timestamp": timestamp,
+            "X-Cliodot-SDK-Nonce": nonce,
+            "X-Cliodot-SDK-Signature": signature,
+        };
+        if (this.apiKey) {
+            headers[this.apiKeyHeader] = this.apiKey;
+        }
+        if (this.jwt) {
+            headers.Authorization = `Bearer ${this.jwt}`;
+        }
+        return (0, cliodot_request_1.applyEnvironmentHeader)(headers, this.environment);
+    }
+    async loadSurface(force = false) {
+        if (!force && this.surface)
+            return this.surface;
+        if (!force && this.surfacePromise)
+            return this.surfacePromise;
+        this.surfacePromise = (async () => {
+            const path = "/sdk/surface";
+            const url = `${this.invokeBaseUrl}${path}`;
+            try {
+                const response = await this.axios.get(url, {
+                    headers: this.attestationHeaders("GET", path),
+                });
+                if (response.status >= 400 || response.data?.ok === false) {
+                    this.failResponse(response, `Failed to load surface (${response.status})`, "SURFACE_LOAD_FAILED");
+                }
+                this.surface = response.data.surface;
+                return this.surface;
+            }
+            catch (error) {
+                this.surfacePromise = null;
+                if (error instanceof errors_1.CliodotApiError)
+                    throw error;
+                throw (0, errors_1.cliodotApiErrorFromAxios)(error, "Failed to load surface");
+            }
+        })();
+        return this.surfacePromise;
+    }
+    findOp(sdkPath, op, catalog) {
+        const match = catalog.ops.find((item) => item.op === op &&
+            item.sdk_path.length === sdkPath.length &&
+            item.sdk_path.every((segment, index) => segment === sdkPath[index]));
+        if (!match) {
+            const fluent = [...sdkPath, op].join(".");
+            throw new errors_1.CliodotApiError(`SDK operation not exposed: ${fluent}`, {
+                code: "SDK_OP_NOT_EXPOSED",
+            });
+        }
+        return match;
+    }
+    async invoke(sdkPath, opName, args) {
+        const catalog = await this.loadSurface();
+        const op = this.findOp(sdkPath, opName, catalog);
+        let argIndex = 0;
+        const pathParams = {};
+        for (const name of op.path_params || []) {
+            const value = args[argIndex++];
+            if (value === undefined || value === null) {
+                throw new errors_1.CliodotApiError(`Missing path argument: ${name}`);
+            }
+            pathParams[name] = String(value);
+        }
+        let body;
+        let query;
+        if (op.body) {
+            body = args[argIndex++];
+        }
+        if (op.query_schema) {
+            query = args[argIndex++] || undefined;
+        }
+        const endpointPath = fillEndpointPath(op.endpoint_path, pathParams);
+        const url = `${this.invokeBaseUrl}${endpointPath}`;
+        const hasBody = !!op.body && body !== undefined;
+        const headers = this.attestationHeaders(op.method, endpointPath, hasBody ? body : undefined);
+        if (hasBody) {
+            headers["Content-Type"] = "application/json";
+        }
+        try {
+            const response = await this.axios.request({
+                url,
+                method: op.method,
+                headers,
+                params: query,
+                data: hasBody ? body : undefined,
+            });
+            if (response.status >= 400 || response.data?.ok === false) {
+                this.failResponse(response, `Surface request failed (${response.status})`, "SURFACE_REQUEST_FAILED");
+            }
+            return response.data?.data !== undefined ? response.data.data : response.data;
+        }
+        catch (error) {
+            if (error instanceof errors_1.CliodotApiError)
+                throw error;
+            throw (0, errors_1.cliodotApiErrorFromAxios)(error, "Surface request failed");
+        }
+    }
+    asProxy(path = []) {
+        const runtime = this;
+        const callable = (...args) => {
+            if (path.length === 0) {
+                throw new errors_1.CliodotApiError("Surface root is not callable");
+            }
+            const op = path[path.length - 1];
+            const sdkPath = path.slice(0, -1);
+            return runtime.invoke(sdkPath, op, args);
+        };
+        return new Proxy(callable, {
+            get(_target, prop) {
+                if (typeof prop === "symbol")
+                    return undefined;
+                if (prop === "then")
+                    return undefined;
+                if (prop === "loadSurface") {
+                    return (force) => runtime.loadSurface(force);
+                }
+                if (prop === "toString")
+                    return () => "[Surface]";
+                return runtime.asProxy([...path, String(prop)]);
+            },
+            apply(_target, _thisArg, argArray) {
+                return callable(...(argArray || []));
+            },
+        });
+    }
+}
+exports.Surface = function Surface(config) {
+    const runtime = new SurfaceRuntime(config);
+    return runtime.asProxy();
+};

package/dist/ValidatorBuilder.js

@@ -1 +1,24 @@
-'use strict';var _0x5a1720=_0x2082;(function(_0x5c52fe,_0x3103c8){var _0x193dbd=_0x2082,_0x5cb84e=_0x5c52fe();while(!![]){try{var _0x40992b=parseInt(_0x193dbd(0xb7))/0x1*(-parseInt(_0x193dbd(0xb6))/0x2)+parseInt(_0x193dbd(0xbd))/0x3+-parseInt(_0x193dbd(0xb5))/0x4+parseInt(_0x193dbd(0xb8))/0x5*(parseInt(_0x193dbd(0xc4))/0x6)+-parseInt(_0x193dbd(0xb9))/0x7*(parseInt(_0x193dbd(0xc0))/0x8)+-parseInt(_0x193dbd(0xc1))/0x9+parseInt(_0x193dbd(0xb3))/0xa*(parseInt(_0x193dbd(0xbe))/0xb);if(_0x40992b===_0x3103c8)break;else _0x5cb84e['push'](_0x5cb84e['shift']());}catch(_0x4f4f68){_0x5cb84e['push'](_0x5cb84e['shift']());}}}(_0xf560,0xcfc84));function _0x2082(_0x5965f4,_0x21c026){_0x5965f4=_0x5965f4-0xb3;var _0xf5607f=_0xf560();var _0x2082eb=_0xf5607f[_0x5965f4];if(_0x2082['zIjEzB']===undefined){var _0x5174a0=function(_0x4cfdf1){var _0x411ff0='abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789+/=';var _0x374c57='',_0x2de863='';for(var _0x23e980=0x0,_0x4f96a1,_0x73709b,_0x425ed0=0x0;_0x73709b=_0x4cfdf1['charAt'](_0x425ed0++);~_0x73709b&&(_0x4f96a1=_0x23e980%0x4?_0x4f96a1*0x40+_0x73709b:_0x73709b,_0x23e980++%0x4)?_0x374c57+=String['fromCharCode'](0xff&_0x4f96a1>>(-0x2*_0x23e980&0x6)):0x0){_0x73709b=_0x411ff0['indexOf'](_0x73709b);}for(var _0x17d3dd=0x0,_0x39ac8d=_0x374c57['length'];_0x17d3dd<_0x39ac8d;_0x17d3dd++){_0x2de863+='%'+('00'+_0x374c57['charCodeAt'](_0x17d3dd)['toString'](0x10))['slice'](-0x2);}return decodeURIComponent(_0x2de863);};_0x2082['mPwvpe']=_0x5174a0,_0x2082['YyoLRo']={},_0x2082['zIjEzB']=!![];}var _0x4d658d=_0xf5607f[0x0],_0x49c07d=_0x5965f4+_0x4d658d,_0x35629c=_0x2082['YyoLRo'][_0x49c07d];return!_0x35629c?(_0x2082eb=_0x2082['mPwvpe'](_0x2082eb),_0x2082['YyoLRo'][_0x49c07d]=_0x2082eb):_0x2082eb=_0x35629c,_0x2082eb;}Object['defineProperty'](exports,_0x5a1720(0xc3),{'value':!![]}),exports[_0x5a1720(0xba)]=void 0x0,exports['validationGroups']=validationGroups;function _0xf560(){var _0x325c5c=['ntK0mtq1tNHUwerW','mJG2oda0qKXXEuHb','vMfSAwrHDg9YqNvPBgrLCG','x2DYB3vWCW','ywrKr3jVDxa','mJaWmdG0n2L0D05vBG','ndqXnZm2ntDqA0jVwxm','yNvPBgq','mtzqv1fHD3a','oteWnZy0me94D1vnBG','z3jVDxa','x19LC01VzhvSzq','mtHWChfHqKW','mtbLugDyywu','ChvZAa','nJu5nZmWofnHr1brBa','nJu2nZH4vefgr3C','ndrwC055vfq'];_0xf560=function(){return _0x325c5c;};return _0xf560();}class ValidatorBuilder{constructor(){var _0x1262a2=_0x5a1720;this[_0x1262a2(0xbb)]=[];}[_0x5a1720(0xc2)](_0x374c57,_0x2de863){var _0x11c464=_0x5a1720;return this[_0x11c464(0xbb)][_0x11c464(0xb4)]({'fields':_0x374c57,'validators':_0x2de863}),this;}[_0x5a1720(0xbc)](_0x23e980){var _0x3e7974=_0x5a1720;return this[_0x3e7974(0xbb)][_0x3e7974(0xb4)](_0x23e980),this;}[_0x5a1720(0xbf)](){var _0x2f524d=_0x5a1720;return this[_0x2f524d(0xbb)];}}exports['ValidatorBuilder']=ValidatorBuilder;function validationGroups(){return new ValidatorBuilder();}
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ValidatorBuilder = void 0;
+exports.validationGroups = validationGroups;
+class ValidatorBuilder {
+    constructor() {
+        this._groups = [];
+    }
+    group(fields, validators) {
+        this._groups.push({ fields, validators });
+        return this;
+    }
+    addGroup(group) {
+        this._groups.push(group);
+        return this;
+    }
+    build() {
+        return this._groups;
+    }
+}
+exports.ValidatorBuilder = ValidatorBuilder;
+function validationGroups() {
+    return new ValidatorBuilder();
+}

package/dist/Webhooks.d.ts

@@ -0,0 +1,20 @@
+export type WebhooksConfig = {
+    domain: string;
+    appSlug: string;
+    endpointSlug: string;
+    scheme?: "http" | "https";
+};
+export declare function buildWebhookReceiveUrl(config: WebhooksConfig): string;
+export declare function signCliodotWebhookPayload(secret: string, timestamp: number, body: string): string;
+export declare function verifyCliodotWebhookSignature(input: {
+    secret: string;
+    body: string;
+    signatureHeader: string | string[] | undefined;
+    toleranceSeconds?: number;
+}): boolean;
+export declare class Webhooks {
+    static buildReceiveUrl: typeof buildWebhookReceiveUrl;
+    static sign: typeof signCliodotWebhookPayload;
+    static verify: typeof verifyCliodotWebhookSignature;
+}
+//# sourceMappingURL=Webhooks.d.ts.map

package/dist/Webhooks.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"Webhooks.d.ts","sourceRoot":"","sources":["../src/Webhooks.ts"],"names":[],"mappings":"AAEA,MAAM,MAAM,cAAc,GAAG;IAC3B,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;IAChB,YAAY,EAAE,MAAM,CAAC;IACrB,MAAM,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC;CAC3B,CAAC;AAEF,wBAAgB,sBAAsB,CAAC,MAAM,EAAE,cAAc,GAAG,MAAM,CAMrE;AAED,wBAAgB,yBAAyB,CACvC,MAAM,EAAE,MAAM,EACd,SAAS,EAAE,MAAM,EACjB,IAAI,EAAE,MAAM,GACX,MAAM,CAMR;AAED,wBAAgB,6BAA6B,CAAC,KAAK,EAAE;IACnD,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,eAAe,EAAE,MAAM,GAAG,MAAM,EAAE,GAAG,SAAS,CAAC;IAC/C,gBAAgB,CAAC,EAAE,MAAM,CAAC;CAC3B,GAAG,OAAO,CAkCV;AAED,qBAAa,QAAQ;IACnB,MAAM,CAAC,eAAe,gCAA0B;IAChD,MAAM,CAAC,IAAI,mCAA6B;IACxC,MAAM,CAAC,MAAM,uCAAiC;CAC/C"}

package/dist/Webhooks.js

@@ -0,0 +1,61 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.Webhooks = void 0;
+exports.buildWebhookReceiveUrl = buildWebhookReceiveUrl;
+exports.signCliodotWebhookPayload = signCliodotWebhookPayload;
+exports.verifyCliodotWebhookSignature = verifyCliodotWebhookSignature;
+const crypto_1 = __importDefault(require("crypto"));
+function buildWebhookReceiveUrl(config) {
+    const domain = config.domain.trim().replace(/^https?:\/\//, "").split("/")[0];
+    const appSlug = config.appSlug.trim().toLowerCase();
+    const endpointSlug = config.endpointSlug.trim().toLowerCase();
+    const scheme = config.scheme || "https";
+    return `${scheme}://${domain}/webhook/${appSlug}/${endpointSlug}`;
+}
+function signCliodotWebhookPayload(secret, timestamp, body) {
+    const digest = crypto_1.default
+        .createHmac("sha256", secret)
+        .update(`${timestamp}.${body}`)
+        .digest("hex");
+    return `t=${timestamp},v1=${digest}`;
+}
+function verifyCliodotWebhookSignature(input) {
+    const header = Array.isArray(input.signatureHeader)
+        ? input.signatureHeader[0]
+        : input.signatureHeader;
+    if (!header)
+        return false;
+    const parts = header.split(",").map((p) => p.trim());
+    let timestamp;
+    let v1;
+    for (const part of parts) {
+        const [k, v] = part.split("=");
+        if (k === "t" && v)
+            timestamp = Number(v);
+        if (k === "v1" && v)
+            v1 = v;
+    }
+    if (!timestamp || !v1 || Number.isNaN(timestamp))
+        return false;
+    const tolerance = input.toleranceSeconds ?? 300;
+    const now = Math.floor(Date.now() / 1000);
+    if (Math.abs(now - timestamp) > tolerance)
+        return false;
+    const expected = signCliodotWebhookPayload(input.secret, timestamp, input.body);
+    const expectedDigest = expected.split("v1=")[1];
+    try {
+        return crypto_1.default.timingSafeEqual(Buffer.from(expectedDigest, "hex"), Buffer.from(v1, "hex"));
+    }
+    catch {
+        return false;
+    }
+}
+class Webhooks {
+}
+exports.Webhooks = Webhooks;
+Webhooks.buildReceiveUrl = buildWebhookReceiveUrl;
+Webhooks.sign = signCliodotWebhookPayload;
+Webhooks.verify = verifyCliodotWebhookSignature;