cliodot 1.2.3 → 1.2.4

package/dist/Surface.js

@@ -1 +1,255 @@
-'use strict';const _0x460eb5=_0x378a;(function(_0x129c22,_0x4c56e0){const _0x4181ad=_0x378a,_0x15ff08=_0x129c22();while(!![]){try{const _0x1f1d24=parseInt(_0x4181ad(0xb6))/0x1+parseInt(_0x4181ad(0xbf))/0x2*(-parseInt(_0x4181ad(0x100))/0x3)+-parseInt(_0x4181ad(0xb5))/0x4*(parseInt(_0x4181ad(0xd8))/0x5)+parseInt(_0x4181ad(0x10f))/0x6*(parseInt(_0x4181ad(0xe0))/0x7)+parseInt(_0x4181ad(0xf7))/0x8+parseInt(_0x4181ad(0xb4))/0x9+parseInt(_0x4181ad(0xc9))/0xa;if(_0x1f1d24===_0x4c56e0)break;else _0x15ff08['push'](_0x15ff08['shift']());}catch(_0xc8c016){_0x15ff08['push'](_0x15ff08['shift']());}}}(_0x1854,0xf29df));function _0x378a(_0x3f6061,_0x398261){_0x3f6061=_0x3f6061-0xb3;const _0x1854ee=_0x1854();let _0x378a43=_0x1854ee[_0x3f6061];if(_0x378a['QAVlOS']===undefined){var _0x1221dc=function(_0x5b31d9){const _0x1ccef6='abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789+/=';let _0x4c51a6='',_0x6591a5='';for(let _0x338504=0x0,_0x9e9237,_0x1da7f8,_0x5580a7=0x0;_0x1da7f8=_0x5b31d9['charAt'](_0x5580a7++);~_0x1da7f8&&(_0x9e9237=_0x338504%0x4?_0x9e9237*0x40+_0x1da7f8:_0x1da7f8,_0x338504++%0x4)?_0x4c51a6+=String['fromCharCode'](0xff&_0x9e9237>>(-0x2*_0x338504&0x6)):0x0){_0x1da7f8=_0x1ccef6['indexOf'](_0x1da7f8);}for(let _0x500c2f=0x0,_0x297b7f=_0x4c51a6['length'];_0x500c2f<_0x297b7f;_0x500c2f++){_0x6591a5+='%'+('00'+_0x4c51a6['charCodeAt'](_0x500c2f)['toString'](0x10))['slice'](-0x2);}return decodeURIComponent(_0x6591a5);};_0x378a['jebmBc']=_0x1221dc,_0x378a['ZFcqrA']={},_0x378a['QAVlOS']=!![];}const _0x6f10e1=_0x1854ee[0x0],_0x5cece5=_0x3f6061+_0x6f10e1,_0x8e6900=_0x378a['ZFcqrA'][_0x5cece5];return!_0x8e6900?(_0x378a43=_0x378a['jebmBc'](_0x378a43),_0x378a['ZFcqrA'][_0x5cece5]=_0x378a43):_0x378a43=_0x8e6900,_0x378a43;}function _0x1854(){const _0x2d9602=['Aw52B2TLqMfZzvvYBa','yxbPs2v5sgvHzgvY','xhmQxh1CFq','u1vsrKfdrv9srvfvrvnux0zbsuXfra','y3j5ChrV','BM93','zgvMyxvSDa','u3vYzMfJzsbYB290igLZig5VDcbJywXSywjSzq','zw50CMLLCW','rMfPBgvKihrVigXVywqGC3vYzMfJzsaO','BM9Uy2u','w1n1CMzHy2vD','x19LC01VzhvSzq','mti2qM5itfjm','r0vu','mtiWndq4odbevgDlzhu','mZG5mtC2nhnqAwnYEq','ndu4nJuXyK1lC2nf','C2HHmJu2','zgLNzxn0','C3vYzMfJzvbYB21PC2u','DxrMoa','qxv0Ag9YAxPHDgLVBG','DxbKyxrL','C3rYAw5NAwz5','CM9VDejHC2vvCMW','nezAwe1gua','x19PBxbVCNrezwzHDwX0','BgvUz3rO','u3vYzMfJzsbYzxf1zxn0igzHAwXLzcaO','zxjYB3i','Agv4','u0rlx09qx05pvf9fwfbpu0ve','Dg9vChbLCKnHC2u','C2X1zW','xcqM','mJGYody5mfzZzgXPBG','Cgf0Aa','zw5KCg9PBNrFCgf0Aa','DhjPBq','u3vYzMfJzq','zMLUza','z2f0zxDHEq','C3rYAw5N','u0rlig9WzxjHDgLVBIbUB3qGzxHWB3nLzdOG','yM9KEq','DMvYC2LVBG','q29UDgvUDc1uExbL','C2rRvMvYC2LVBG','AND0','Bg9Hzfn1CMzHy2u','mtbxt25KzfK','yxnqCM94Eq','Bwv0Ag9K','yMfZzvvYBa','Dg9tDhjPBMC','Bwf0y2HbBgW','u1vsrKfdrv9mt0fex0zbsuXfra','yxbPs2v5','ndK2mtK1wLbwuKvi','C3LTyM9S','BwfW','kd89jhXBlZ8JjL18w15HlxPblvOWltLFlv0P','yxHPB3m','C2LNBMLUz1nLy3jLDa','DgHLBG','A2v5CW','lI9LCNjVCNm','zgf0yq','CMvXDwvZDa','CgfYC2vbCgLfCNjVCK1LC3nHz2u','rMfPBgvKihrVigXVywqGC3vYzMfJzq','xhTCE1XZkG','y3jLyxrLsg1HyW','B3bZ','CMvWBgfJzq','C2rRx3bHDgG','C2XPy2u','q2XPB2rVDefWAuvYCM9Y','zMLUze9W','yxr0zxn0yxrPB25izwfKzxjZ','C3rHCNrZv2L0Aa','mJiXndG2ng11sMDTEG','C2rRoG','C3rHDhvZ','zMfPBfjLC3bVBNnL','C3vYzMfJzq','AM9PBG','CgfYC2vbCgLfCNjVCLn0yxr1CW','yxbWBgLJyxrPB24VANnVBG','u3vYzMfJzsbYzxf1zxn0igzHAwXLza','mtm1odq2m1HnsurOrG','z2v0'];_0x1854=function(){return _0x2d9602;};return _0x1854();}var __importDefault=this&&this[_0x460eb5(0xc0)]||function(_0x4c51a6){return _0x4c51a6&&_0x4c51a6['__esModule']?_0x4c51a6:{'default':_0x4c51a6};};Object['defineProperty'](exports,_0x460eb5(0x10e),{'value':!![]}),exports[_0x460eb5(0xcd)]=void 0x0;const axios_1=__importDefault(require(_0x460eb5(0xe4))),crypto_1=__importDefault(require(_0x460eb5(0x106))),errors_1=require(_0x460eb5(0xe8)),parse_api_error_1=require('./http/parse-api-error'),DEFAULT_SDK_VERSION='1.2.1';function trimBaseUrl(_0x6591a5){const _0x555057=_0x460eb5;return _0x6591a5[_0x555057(0xcc)]()[_0x555057(0xf0)](/\/+$/,'');}function sha256Hex(value){const _0x3cb8ad=_0x460eb5;return crypto_1[_0x3cb8ad(0x108)]['createHash'](_0x3cb8ad(0xb7))[_0x3cb8ad(0xbc)](value,_0x3cb8ad(0xba))[_0x3cb8ad(0xb8)]('hex');}function hmacSha256Hex(_0x338504,_0x9e9237){const _0x102282=_0x460eb5;return crypto_1[_0x102282(0x108)][_0x102282(0xee)](_0x102282(0xb7),_0x338504)[_0x102282(0xbc)](_0x9e9237,_0x102282(0xba))[_0x102282(0xb8)](_0x102282(0xc4));}function randomNonce(){const _0x5b87ff=_0x460eb5;return crypto_1['default']['randomBytes'](0x10)['toString'](_0x5b87ff(0xc4));}function buildCanonical(_0x1da7f8){const _0x1331fe=_0x460eb5,_0x5580a7=_0x1da7f8[_0x1331fe(0xd2)]===undefined||_0x1da7f8[_0x1331fe(0xd2)]===null||typeof _0x1da7f8['body']==='object'&&!Array['isArray'](_0x1da7f8[_0x1331fe(0xd2)])&&Object[_0x1331fe(0xe7)](_0x1da7f8[_0x1331fe(0xd2)])[_0x1331fe(0xc1)]===0x0?'':typeof _0x1da7f8[_0x1331fe(0xd2)]===_0x1331fe(0xd0)?_0x1da7f8[_0x1331fe(0xd2)]:JSON[_0x1331fe(0xbd)](_0x1da7f8[_0x1331fe(0xd2)]);return[_0x1da7f8['timestamp'],_0x1da7f8[_0x1331fe(0x10c)],(_0x1da7f8[_0x1331fe(0xda)]||_0x1331fe(0xb3))[_0x1331fe(0xc6)](),_0x1da7f8[_0x1331fe(0xca)]||'/',sha256Hex(_0x5580a7)][_0x1331fe(0xfc)]('.');}function sanitizePathParamKey(_0x500c2f){const _0x2b71ff=_0x460eb5;return String(_0x500c2f||'')['replace'](/[^a-zA-Z0-9_]+/g,'_')[_0x2b71ff(0xf0)](/_+/g,'_')[_0x2b71ff(0xf0)](/^_|_$/g,'');}function fillEndpointPath(_0x297b7f,_0x8bdd96){const _0x3034d0=_0x460eb5;let _0x10a936=_0x297b7f;const _0x4f5b68=Object[_0x3034d0(0x10a)](_0x8bdd96)['sort']((_0x23d0e7,_0xb158d0)=>_0xb158d0[0x0][_0x3034d0(0xc1)]-_0x23d0e7[0x0][_0x3034d0(0xc1)]),_0x3b0bb4=(_0x299851,_0x4f8db3,_0x414fe5)=>{const _0x40c0ae=_0x3034d0,_0x17f66d=_0x4f8db3['replace'](/[.*+?^${}()|[\]\\]/g,_0x40c0ae(0xc8));return _0x299851['replace'](new RegExp(':'+_0x17f66d+_0x40c0ae(0xe3),'g'),_0x414fe5)[_0x40c0ae(0xf0)](new RegExp(_0x40c0ae(0xed)+_0x17f66d+_0x40c0ae(0x104),'g'),_0x414fe5)[_0x40c0ae(0xf0)](new RegExp('\x5c{'+_0x17f66d+'\x5c}','g'),_0x414fe5);};for(const [_0x246cf0,value]of _0x4f5b68){_0x10a936=_0x3b0bb4(_0x10a936,_0x246cf0,encodeURIComponent(value));}const _0xab5ba=[..._0x10a936[_0x3034d0(0xdd)](/\{\{\s*([a-zA-Z_][a-zA-Z0-9_-]*)\s*\}\}/g),..._0x10a936[_0x3034d0(0xdd)](/:([a-zA-Z_][a-zA-Z0-9_-]*)(?=$|[/?#&]|[^a-zA-Z0-9_-])/g),..._0x10a936[_0x3034d0(0xdd)](/\{([a-zA-Z_][a-zA-Z0-9_-]*)\}/g)][_0x3034d0(0xe2)](_0x43df9e=>_0x43df9e[0x1]);for(const _0x212fce of _0xab5ba){const _0x4bc7bb=sanitizePathParamKey(_0x212fce),_0x41a51b=_0x4f5b68[_0x3034d0(0xce)](([_0x34f88e])=>sanitizePathParamKey(_0x34f88e)===_0x4bc7bb);if(!_0x41a51b)continue;_0x10a936=_0x3b0bb4(_0x10a936,_0x212fce,encodeURIComponent(_0x41a51b[0x1]));}if(!_0x10a936[_0x3034d0(0xf6)]('/'))_0x10a936='/'+_0x10a936;return _0x10a936;}class SurfaceRuntime{constructor(_0x5b5d2e){const _0x498b33=_0x460eb5;this[_0x498b33(0xb9)]=null,this[_0x498b33(0xfb)]=null;if(!_0x5b5d2e[_0x498b33(0xdb)]?.[_0x498b33(0xcc)]())throw new errors_1['CliodotApiError']('Surface\x20requires\x20baseUrl');this[_0x498b33(0xbe)]=trimBaseUrl(_0x5b5d2e['baseUrl']),this['slug']=_0x5b5d2e[_0x498b33(0xc7)]?.[_0x498b33(0xcc)]()||undefined,this[_0x498b33(0xdf)]=_0x5b5d2e['apiKey']?.[_0x498b33(0xcc)]()||undefined,this[_0x498b33(0xd6)]=_0x5b5d2e[_0x498b33(0xd6)]?.[_0x498b33(0xcc)]()||undefined,this[_0x498b33(0x103)]=_0x5b5d2e[_0x498b33(0x103)]?.[_0x498b33(0xcc)]()||'X-API-Key',this['sdkVersion']=_0x5b5d2e[_0x498b33(0xd3)]?.[_0x498b33(0xcc)]()||DEFAULT_SDK_VERSION,this['invokeBaseUrl']=this[_0x498b33(0xc7)]?this[_0x498b33(0xbe)]+'/'+this[_0x498b33(0xc7)]:this[_0x498b33(0xbe)],this[_0x498b33(0xe4)]=axios_1[_0x498b33(0x108)]['create']({'timeout':0xea60,'validateStatus':()=>!![]});}[_0x460eb5(0xfa)](_0x465c1b,_0x279be1,_0x1bfb76){const _0x15990c=_0x460eb5,_0x3e6d13=_0x465c1b?.['data'],_0x25d76f=(0x0,parse_api_error_1[_0x15990c(0xeb)])(_0x3e6d13)||(typeof _0x3e6d13?.['error']===_0x15990c(0xd0)?_0x3e6d13[_0x15990c(0xc3)]:undefined)||_0x279be1;throw new errors_1[(_0x15990c(0xf3))](_0x25d76f,{'status':(0x0,parse_api_error_1[_0x15990c(0xfd)])(_0x3e6d13,_0x465c1b?.[_0x15990c(0xf9)]),'data':_0x3e6d13,'code':_0x1bfb76||(0x0,parse_api_error_1['parseApiErrorCode'])(_0x3e6d13)});}[_0x460eb5(0xe5)](){const _0x3f4c5a=_0x460eb5;if(this['apiKey'])return this[_0x3f4c5a(0xdf)];if(this['jwt'])return this['jwt'];return _0x3f4c5a(0xf8)+(this[_0x3f4c5a(0xc7)]||_0x3f4c5a(0xcf));}[_0x460eb5(0xf5)](_0x8c52f4,_0x11e8cc,_0x4796ee){const _0x210a74=_0x460eb5,_0x5d4c1e=String(Date[_0x210a74(0x107)]()),_0x436c5d=randomNonce(),_0x382bb7=buildCanonical({'timestamp':_0x5d4c1e,'nonce':_0x436c5d,'method':_0x8c52f4,'path':_0x11e8cc,'body':_0x4796ee}),_0xaf080a=hmacSha256Hex(this[_0x210a74(0xe5)](),_0x382bb7),_0x24396f={'X-Cliodot-Client':'sdk','X-Cliodot-SDK-Version':this[_0x210a74(0xd5)],'X-Cliodot-SDK-Timestamp':_0x5d4c1e,'X-Cliodot-SDK-Nonce':_0x436c5d,'X-Cliodot-SDK-Signature':_0xaf080a};return this[_0x210a74(0xdf)]&&(_0x24396f[this[_0x210a74(0x103)]]=this[_0x210a74(0xdf)]),this[_0x210a74(0xd6)]&&(_0x24396f[_0x210a74(0xbb)]='Bearer\x20'+this[_0x210a74(0xd6)]),_0x24396f;}async[_0x460eb5(0xd7)](_0x593f2e=![]){const _0x25b05d=_0x460eb5;if(!_0x593f2e&&this[_0x25b05d(0xfb)])return this[_0x25b05d(0xfb)];if(!_0x593f2e&&this['surfacePromise'])return this[_0x25b05d(0xb9)];return this[_0x25b05d(0xb9)]=((async()=>{const _0x4d757e=_0x25b05d,_0x4e30f9='/sdk/surface',_0x2dd8c0=''+this[_0x4d757e(0x102)]+_0x4e30f9;try{const _0x4c94fd=await this[_0x4d757e(0xe4)][_0x4d757e(0x101)](_0x2dd8c0,{'headers':this[_0x4d757e(0xf5)](_0x4d757e(0xb3),_0x4e30f9)});return(_0x4c94fd[_0x4d757e(0xf9)]>=0x190||_0x4c94fd['data']?.['ok']===![])&&this[_0x4d757e(0xfa)](_0x4c94fd,_0x4d757e(0x10b)+_0x4c94fd['status']+')',_0x4d757e(0xde)),this[_0x4d757e(0xfb)]=_0x4c94fd[_0x4d757e(0xe9)][_0x4d757e(0xfb)],this[_0x4d757e(0xfb)];}catch(_0x56be2c){this[_0x4d757e(0xb9)]=null;if(_0x56be2c instanceof errors_1[_0x4d757e(0xf3)])throw _0x56be2c;throw(0x0,errors_1['cliodotApiErrorFromAxios'])(_0x56be2c,_0x4d757e(0xec));}})()),this[_0x25b05d(0xb9)];}[_0x460eb5(0xf4)](_0x525562,_0x9ed6d8,_0x2753e4){const _0x5e765c=_0x460eb5,_0x3f0707=_0x2753e4[_0x5e765c(0xef)][_0x5e765c(0xce)](_0x2483df=>_0x2483df['op']===_0x9ed6d8&&_0x2483df['sdk_path'][_0x5e765c(0xc1)]===_0x525562['length']&&_0x2483df[_0x5e765c(0xf1)]['every']((_0x15cb62,_0x78ce8b)=>_0x15cb62===_0x525562[_0x78ce8b]));if(!_0x3f0707){const _0x582df4=[..._0x525562,_0x9ed6d8][_0x5e765c(0xfc)]('.');throw new errors_1['CliodotApiError'](_0x5e765c(0xd1)+_0x582df4,{'code':_0x5e765c(0xc5)});}return _0x3f0707;}async['invoke'](_0x28dc65,_0x9bceca,_0x4b3c85){const _0x14dc48=_0x460eb5,_0x3eab0d=await this['loadSurface'](),_0x45df4b=this['findOp'](_0x28dc65,_0x9bceca,_0x3eab0d);let _0x5d0428=0x0;const _0x17673d={};for(const _0x343ef2 of _0x45df4b['path_params']||[]){const value=_0x4b3c85[_0x5d0428++];if(value===undefined||value===null)throw new errors_1[(_0x14dc48(0xf3))]('Missing\x20path\x20argument:\x20'+_0x343ef2);_0x17673d[_0x343ef2]=String(value);}let _0x17ada9,_0x51e310;_0x45df4b['body']&&(_0x17ada9=_0x4b3c85[_0x5d0428++]);_0x45df4b['query_schema']&&(_0x51e310=_0x4b3c85[_0x5d0428++]||undefined);const _0x16837a=fillEndpointPath(_0x45df4b[_0x14dc48(0xcb)],_0x17673d),_0x23257a=''+this['invokeBaseUrl']+_0x16837a,_0x569f07=!!_0x45df4b[_0x14dc48(0xd2)]&&_0x17ada9!==undefined,_0x368e0d=this['attestationHeaders'](_0x45df4b[_0x14dc48(0xda)],_0x16837a,_0x569f07?_0x17ada9:undefined);_0x569f07&&(_0x368e0d[_0x14dc48(0xd4)]=_0x14dc48(0xfe));try{const _0x2941e5=await this['axios'][_0x14dc48(0xea)]({'url':_0x23257a,'method':_0x45df4b[_0x14dc48(0xda)],'headers':_0x368e0d,'params':_0x51e310,'data':_0x569f07?_0x17ada9:undefined});return(_0x2941e5[_0x14dc48(0xf9)]>=0x190||_0x2941e5['data']?.['ok']===![])&&this[_0x14dc48(0xfa)](_0x2941e5,_0x14dc48(0xc2)+_0x2941e5[_0x14dc48(0xf9)]+')',_0x14dc48(0x105)),_0x2941e5['data']?.[_0x14dc48(0xe9)]!==undefined?_0x2941e5[_0x14dc48(0xe9)][_0x14dc48(0xe9)]:_0x2941e5[_0x14dc48(0xe9)];}catch(_0x3685bd){if(_0x3685bd instanceof errors_1[_0x14dc48(0xf3)])throw _0x3685bd;throw(0x0,errors_1['cliodotApiErrorFromAxios'])(_0x3685bd,_0x14dc48(0xff));}}[_0x460eb5(0xd9)](_0x3b3428=[]){const _0x45932e=this,_0x5ce0c2=(..._0x2b1ea3)=>{const _0x298530=_0x378a;if(_0x3b3428[_0x298530(0xc1)]===0x0)throw new errors_1[(_0x298530(0xf3))](_0x298530(0x109));const _0x3d4ad1=_0x3b3428[_0x3b3428[_0x298530(0xc1)]-0x1],_0x142926=_0x3b3428[_0x298530(0xf2)](0x0,-0x1);return _0x45932e['invoke'](_0x142926,_0x3d4ad1,_0x2b1ea3);};return new Proxy(_0x5ce0c2,{'get'(_target,_0x26583d){const _0x546b71=_0x378a;if(typeof _0x26583d===_0x546b71(0xe1))return undefined;if(_0x26583d===_0x546b71(0xe6))return undefined;if(_0x26583d==='loadSurface')return _0x49d1b9=>_0x45932e['loadSurface'](_0x49d1b9);if(_0x26583d===_0x546b71(0xdc))return()=>_0x546b71(0x10d);return _0x45932e[_0x546b71(0xd9)]([..._0x3b3428,String(_0x26583d)]);},'apply'(_target,_0x5afa85,_0x1c0c81){return _0x5ce0c2(..._0x1c0c81||[]);}});}}exports[_0x460eb5(0xcd)]=function Surface(_0x3a6ed9){const _0x108660=new SurfaceRuntime(_0x3a6ed9);return _0x108660['asProxy']();};
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.Surface = void 0;
+const axios_1 = __importDefault(require("axios"));
+const crypto_1 = __importDefault(require("crypto"));
+const errors_1 = require("./errors");
+const parse_api_error_1 = require("./http/parse-api-error");
+const cliodot_request_1 = require("./http/cliodot-request");
+const DEFAULT_SDK_VERSION = "1.2.1";
+function trimBaseUrl(url) {
+    return url.trim().replace(/\/+$/, "");
+}
+function sha256Hex(value) {
+    return crypto_1.default.createHash("sha256").update(value, "utf8").digest("hex");
+}
+function hmacSha256Hex(secret, payload) {
+    return crypto_1.default.createHmac("sha256", secret).update(payload, "utf8").digest("hex");
+}
+function randomNonce() {
+    return crypto_1.default.randomBytes(16).toString("hex");
+}
+function buildCanonical(input) {
+    const bodyRaw = input.body === undefined ||
+        input.body === null ||
+        (typeof input.body === "object" &&
+            !Array.isArray(input.body) &&
+            Object.keys(input.body).length === 0)
+        ? ""
+        : typeof input.body === "string"
+            ? input.body
+            : JSON.stringify(input.body);
+    return [
+        input.timestamp,
+        input.nonce,
+        (input.method || "GET").toUpperCase(),
+        input.path || "/",
+        sha256Hex(bodyRaw),
+    ].join(".");
+}
+function sanitizePathParamKey(name) {
+    return String(name || "")
+        .replace(/[^a-zA-Z0-9_]+/g, "_")
+        .replace(/_+/g, "_")
+        .replace(/^_|_$/g, "");
+}
+function fillEndpointPath(template, pathParams) {
+    let path = template;
+    const entries = Object.entries(pathParams).sort((a, b) => b[0].length - a[0].length);
+    const replaceName = (current, name, encoded) => {
+        const escaped = name.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
+        return current
+            .replace(new RegExp(`:${escaped}(?=$|[/?#&]|[^a-zA-Z0-9_-])`, "g"), encoded)
+            .replace(new RegExp(`\\{\\{\\s*${escaped}\\s*\\}\\}`, "g"), encoded)
+            .replace(new RegExp(`\\{${escaped}\\}`, "g"), encoded);
+    };
+    for (const [name, value] of entries) {
+        path = replaceName(path, name, encodeURIComponent(value));
+    }
+    const remaining = [
+        ...path.matchAll(/\{\{\s*([a-zA-Z_][a-zA-Z0-9_-]*)\s*\}\}/g),
+        ...path.matchAll(/:([a-zA-Z_][a-zA-Z0-9_-]*)(?=$|[/?#&]|[^a-zA-Z0-9_-])/g),
+        ...path.matchAll(/\{([a-zA-Z_][a-zA-Z0-9_-]*)\}/g),
+    ].map((match) => match[1]);
+    for (const placeholder of remaining) {
+        const normalizedPlaceholder = sanitizePathParamKey(placeholder);
+        const match = entries.find(([key]) => sanitizePathParamKey(key) === normalizedPlaceholder);
+        if (!match)
+            continue;
+        path = replaceName(path, placeholder, encodeURIComponent(match[1]));
+    }
+    if (!path.startsWith("/"))
+        path = `/${path}`;
+    return path;
+}
+class SurfaceRuntime {
+    constructor(config) {
+        this.surfacePromise = null;
+        this.surface = null;
+        if (!config.baseUrl?.trim()) {
+            throw new errors_1.CliodotApiError("Surface requires baseUrl");
+        }
+        this.rootBaseUrl = trimBaseUrl(config.baseUrl);
+        this.slug = config.slug?.trim() || undefined;
+        this.apiKey = config.apiKey?.trim() || undefined;
+        this.jwt = config.jwt?.trim() || undefined;
+        this.apiKeyHeader = config.apiKeyHeader?.trim() || "X-API-Key";
+        this.sdkVersion = config.version?.trim() || DEFAULT_SDK_VERSION;
+        this.environment = config.environment;
+        this.invokeBaseUrl = this.slug
+            ? `${this.rootBaseUrl}/${this.slug}`
+            : this.rootBaseUrl;
+        this.axios = axios_1.default.create({
+            timeout: 60000,
+            validateStatus: () => true,
+        });
+    }
+    failResponse(response, fallback, code) {
+        const data = response?.data;
+        const message = (0, parse_api_error_1.parseApiErrorMessage)(data) ||
+            (typeof data?.error === "string" ? data.error : undefined) ||
+            fallback;
+        throw new errors_1.CliodotApiError(message, {
+            status: (0, parse_api_error_1.parseApiErrorStatus)(data, response?.status),
+            data,
+            code: code || (0, parse_api_error_1.parseApiErrorCode)(data),
+        });
+    }
+    signingSecret() {
+        if (this.apiKey)
+            return this.apiKey;
+        if (this.jwt)
+            return this.jwt;
+        return `sdk:${this.slug || "gateway"}`;
+    }
+    attestationHeaders(method, path, body) {
+        const timestamp = String(Date.now());
+        const nonce = randomNonce();
+        const canonical = buildCanonical({ timestamp, nonce, method, path, body });
+        const signature = hmacSha256Hex(this.signingSecret(), canonical);
+        const headers = {
+            "X-Cliodot-Client": "sdk",
+            "X-Cliodot-SDK-Version": this.sdkVersion,
+            "X-Cliodot-SDK-Timestamp": timestamp,
+            "X-Cliodot-SDK-Nonce": nonce,
+            "X-Cliodot-SDK-Signature": signature,
+        };
+        if (this.apiKey) {
+            headers[this.apiKeyHeader] = this.apiKey;
+        }
+        if (this.jwt) {
+            headers.Authorization = `Bearer ${this.jwt}`;
+        }
+        return (0, cliodot_request_1.applyEnvironmentHeader)(headers, this.environment);
+    }
+    async loadSurface(force = false) {
+        if (!force && this.surface)
+            return this.surface;
+        if (!force && this.surfacePromise)
+            return this.surfacePromise;
+        this.surfacePromise = (async () => {
+            const path = "/sdk/surface";
+            const url = `${this.invokeBaseUrl}${path}`;
+            try {
+                const response = await this.axios.get(url, {
+                    headers: this.attestationHeaders("GET", path),
+                });
+                if (response.status >= 400 || response.data?.ok === false) {
+                    this.failResponse(response, `Failed to load surface (${response.status})`, "SURFACE_LOAD_FAILED");
+                }
+                this.surface = response.data.surface;
+                return this.surface;
+            }
+            catch (error) {
+                this.surfacePromise = null;
+                if (error instanceof errors_1.CliodotApiError)
+                    throw error;
+                throw (0, errors_1.cliodotApiErrorFromAxios)(error, "Failed to load surface");
+            }
+        })();
+        return this.surfacePromise;
+    }
+    findOp(sdkPath, op, catalog) {
+        const match = catalog.ops.find((item) => item.op === op &&
+            item.sdk_path.length === sdkPath.length &&
+            item.sdk_path.every((segment, index) => segment === sdkPath[index]));
+        if (!match) {
+            const fluent = [...sdkPath, op].join(".");
+            throw new errors_1.CliodotApiError(`SDK operation not exposed: ${fluent}`, {
+                code: "SDK_OP_NOT_EXPOSED",
+            });
+        }
+        return match;
+    }
+    async invoke(sdkPath, opName, args) {
+        const catalog = await this.loadSurface();
+        const op = this.findOp(sdkPath, opName, catalog);
+        let argIndex = 0;
+        const pathParams = {};
+        for (const name of op.path_params || []) {
+            const value = args[argIndex++];
+            if (value === undefined || value === null) {
+                throw new errors_1.CliodotApiError(`Missing path argument: ${name}`);
+            }
+            pathParams[name] = String(value);
+        }
+        let body;
+        let query;
+        if (op.body) {
+            body = args[argIndex++];
+        }
+        if (op.query_schema) {
+            query = args[argIndex++] || undefined;
+        }
+        const endpointPath = fillEndpointPath(op.endpoint_path, pathParams);
+        const url = `${this.invokeBaseUrl}${endpointPath}`;
+        const hasBody = !!op.body && body !== undefined;
+        const headers = this.attestationHeaders(op.method, endpointPath, hasBody ? body : undefined);
+        if (hasBody) {
+            headers["Content-Type"] = "application/json";
+        }
+        try {
+            const response = await this.axios.request({
+                url,
+                method: op.method,
+                headers,
+                params: query,
+                data: hasBody ? body : undefined,
+            });
+            if (response.status >= 400 || response.data?.ok === false) {
+                this.failResponse(response, `Surface request failed (${response.status})`, "SURFACE_REQUEST_FAILED");
+            }
+            return response.data?.data !== undefined ? response.data.data : response.data;
+        }
+        catch (error) {
+            if (error instanceof errors_1.CliodotApiError)
+                throw error;
+            throw (0, errors_1.cliodotApiErrorFromAxios)(error, "Surface request failed");
+        }
+    }
+    asProxy(path = []) {
+        const runtime = this;
+        const callable = (...args) => {
+            if (path.length === 0) {
+                throw new errors_1.CliodotApiError("Surface root is not callable");
+            }
+            const op = path[path.length - 1];
+            const sdkPath = path.slice(0, -1);
+            return runtime.invoke(sdkPath, op, args);
+        };
+        return new Proxy(callable, {
+            get(_target, prop) {
+                if (typeof prop === "symbol")
+                    return undefined;
+                if (prop === "then")
+                    return undefined;
+                if (prop === "loadSurface") {
+                    return (force) => runtime.loadSurface(force);
+                }
+                if (prop === "toString")
+                    return () => "[Surface]";
+                return runtime.asProxy([...path, String(prop)]);
+            },
+            apply(_target, _thisArg, argArray) {
+                return callable(...(argArray || []));
+            },
+        });
+    }
+}
+exports.Surface = function Surface(config) {
+    const runtime = new SurfaceRuntime(config);
+    return runtime.asProxy();
+};

package/dist/ValidatorBuilder.js

@@ -1 +1,24 @@
-'use strict';var _0xd5f946=_0x4e48;(function(_0xf62573,_0x139831){var _0x47cc05=_0x4e48,_0x35255f=_0xf62573();while(!![]){try{var _0x1d22bf=-parseInt(_0x47cc05(0x1fc))/0x1+-parseInt(_0x47cc05(0x1ff))/0x2+-parseInt(_0x47cc05(0x1fd))/0x3*(parseInt(_0x47cc05(0x1f9))/0x4)+-parseInt(_0x47cc05(0x1fe))/0x5+parseInt(_0x47cc05(0x1f5))/0x6*(parseInt(_0x47cc05(0x1fa))/0x7)+parseInt(_0x47cc05(0x1f7))/0x8+parseInt(_0x47cc05(0x201))/0x9*(parseInt(_0x47cc05(0x200))/0xa);if(_0x1d22bf===_0x139831)break;else _0x35255f['push'](_0x35255f['shift']());}catch(_0x2e08db){_0x35255f['push'](_0x35255f['shift']());}}}(_0x4f60,0x9c965));Object[_0xd5f946(0x1fb)](exports,_0xd5f946(0x1f6),{'value':!![]}),exports[_0xd5f946(0x1f8)]=void 0x0,exports['validationGroups']=validationGroups;function _0x4e48(_0x2e5558,_0x1b7f73){_0x2e5558=_0x2e5558-0x1f2;var _0x4f60f1=_0x4f60();var _0x4e48e5=_0x4f60f1[_0x2e5558];if(_0x4e48['SEatos']===undefined){var _0x25f140=function(_0x29ecc9){var _0x2d11f0='abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789+/=';var _0x5c8937='',_0x50ee61='';for(var _0x4cd42b=0x0,_0x395edc,_0xa569c1,_0x28d010=0x0;_0xa569c1=_0x29ecc9['charAt'](_0x28d010++);~_0xa569c1&&(_0x395edc=_0x4cd42b%0x4?_0x395edc*0x40+_0xa569c1:_0xa569c1,_0x4cd42b++%0x4)?_0x5c8937+=String['fromCharCode'](0xff&_0x395edc>>(-0x2*_0x4cd42b&0x6)):0x0){_0xa569c1=_0x2d11f0['indexOf'](_0xa569c1);}for(var _0x168423=0x0,_0x2d3e69=_0x5c8937['length'];_0x168423<_0x2d3e69;_0x168423++){_0x50ee61+='%'+('00'+_0x5c8937['charCodeAt'](_0x168423)['toString'](0x10))['slice'](-0x2);}return decodeURIComponent(_0x50ee61);};_0x4e48['ITRkUt']=_0x25f140,_0x4e48['ONRuEd']={},_0x4e48['SEatos']=!![];}var _0x20d34b=_0x4f60f1[0x0],_0xa93361=_0x2e5558+_0x20d34b,_0x11d3d3=_0x4e48['ONRuEd'][_0xa93361];return!_0x11d3d3?(_0x4e48e5=_0x4e48['ITRkUt'](_0x4e48e5),_0x4e48['ONRuEd'][_0xa93361]=_0x4e48e5):_0x4e48e5=_0x11d3d3,_0x4e48e5;}class ValidatorBuilder{constructor(){var _0x30ed9e=_0xd5f946;this[_0x30ed9e(0x1f2)]=[];}[_0xd5f946(0x1f3)](_0x5c8937,_0x50ee61){var _0x44cde7=_0xd5f946;return this[_0x44cde7(0x1f2)][_0x44cde7(0x1f4)]({'fields':_0x5c8937,'validators':_0x50ee61}),this;}['addGroup'](_0x4cd42b){var _0x4cffd8=_0xd5f946;return this[_0x4cffd8(0x1f2)][_0x4cffd8(0x1f4)](_0x4cd42b),this;}['build'](){var _0x4f9b81=_0xd5f946;return this[_0x4f9b81(0x1f2)];}}function _0x4f60(){var _0x49d61a=['nJy2Au9ztfvc','x19LC01VzhvSzq','mZqXmdKYofrLB1rbrq','vMfSAwrHDg9YqNvPBgrLCG','mJCWodK2Bur5CLf0','mtG0mZfQuLjpyxm','zgvMAw5LuhjVCgvYDhK','mtaWndG3nuTPAhrYEG','mZbsCeTvDMm','mZi4odyWCwP4DKfk','mZy5otCYsgvJAhL5','ntb6zePNqM8','mZm0mdeYnvzvDK5WDq','x2DYB3vWCW','z3jVDxa','ChvZAa'];_0x4f60=function(){return _0x49d61a;};return _0x4f60();}exports[_0xd5f946(0x1f8)]=ValidatorBuilder;function validationGroups(){return new ValidatorBuilder();}
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ValidatorBuilder = void 0;
+exports.validationGroups = validationGroups;
+class ValidatorBuilder {
+    constructor() {
+        this._groups = [];
+    }
+    group(fields, validators) {
+        this._groups.push({ fields, validators });
+        return this;
+    }
+    addGroup(group) {
+        this._groups.push(group);
+        return this;
+    }
+    build() {
+        return this._groups;
+    }
+}
+exports.ValidatorBuilder = ValidatorBuilder;
+function validationGroups() {
+    return new ValidatorBuilder();
+}

package/dist/Webhooks.js

@@ -1 +1,61 @@
-'use strict';const _0x39b753=_0x5ce9;(function(_0x44e266,_0x46c478){const _0x3826a8=_0x5ce9,_0x4487b5=_0x44e266();while(!![]){try{const _0xf511ec=parseInt(_0x3826a8(0x1e3))/0x1+-parseInt(_0x3826a8(0x1e5))/0x2+-parseInt(_0x3826a8(0x207))/0x3*(parseInt(_0x3826a8(0x1ff))/0x4)+-parseInt(_0x3826a8(0x1ec))/0x5+parseInt(_0x3826a8(0x1ef))/0x6+-parseInt(_0x3826a8(0x201))/0x7*(parseInt(_0x3826a8(0x1fb))/0x8)+-parseInt(_0x3826a8(0x1eb))/0x9*(-parseInt(_0x3826a8(0x1ee))/0xa);if(_0xf511ec===_0x46c478)break;else _0x4487b5['push'](_0x4487b5['shift']());}catch(_0x26e72e){_0x4487b5['push'](_0x4487b5['shift']());}}}(_0x4a51,0xb5de2));function _0x4a51(){const _0x529aa6=['Dg9SzxjHBMnLu2vJB25KCW','y3j5ChrV','mta2nJe3n0HwwwTADq','C2HHmJu2','odq5nJu2ugn0tgTQ','yxbWu2X1zW','C2vJCMv0','zgvMAw5LuhjVCgvYDhK','Agv4','AxnbCNjHEq','owLIzMLwBW','mtiXnZyWnxbnAhP0wq','BwfW','mtqXmZeZndbLze9QyxG','mJaWota0mhH2BuLAzq','BM93','lhyXpq','DMvYAwz5q2XPB2rVDfDLyMHVB2TtAwDUyxr1CMu','C2LNBMf0DxjLsgvHzgvY','DhjPBq','Dg9mB3DLCKnHC2u','l3DLyMHVB2SV','zMXVB3i','y3jLyxrLsg1HyW','x19LC01VzhvSzq','C3bSAxq','mti2mZjYB1bzzgS','zNjVBq','yM9KEq','zg9TywLU','neHyqNfwCq','v2vIAg9VA3m','mtmWmLzqA3Pnuq','zw5KCg9PBNrtBhvN','Ahr0Chm','Axnoyu4','yNvPBgrszwnLAxzLvxjS','zgvMyxvSDa','mZmYmtuZnhnls1vcEG','CMvWBgfJzq','DMvYAwz5','DgLTAw5Nu2fMzuvXDwfS'];_0x4a51=function(){return _0x529aa6;};return _0x4a51();}var __importDefault=this&&this['__importDefault']||function(_0x261edd){const _0x4fb262=_0x5ce9;return _0x261edd&&_0x261edd[_0x4fb262(0x1f9)]?_0x261edd:{'default':_0x261edd};};Object[_0x39b753(0x1e8)](exports,_0x39b753(0x1f9),{'value':!![]}),exports[_0x39b753(0x200)]=void 0x0,exports['buildWebhookReceiveUrl']=buildWebhookReceiveUrl,exports['signCliodotWebhookPayload']=signCliodotWebhookPayload,exports[_0x39b753(0x1f2)]=verifyCliodotWebhookSignature;const crypto_1=__importDefault(require(_0x39b753(0x1e2)));function buildWebhookReceiveUrl(_0x44c977){const _0x37f761=_0x39b753,_0x538d94=_0x44c977[_0x37f761(0x1fe)][_0x37f761(0x1f4)]()[_0x37f761(0x208)](/^https?:\/\//,'')[_0x37f761(0x1fa)]('/')[0x0],_0x58cf3c=_0x44c977[_0x37f761(0x1e6)][_0x37f761(0x1f4)]()[_0x37f761(0x1f5)](),_0x3a6b50=_0x44c977[_0x37f761(0x202)][_0x37f761(0x1f4)]()[_0x37f761(0x1f5)](),_0x17f723=_0x44c977['scheme']||_0x37f761(0x203);return _0x17f723+'://'+_0x538d94+_0x37f761(0x1f6)+_0x58cf3c+'/'+_0x3a6b50;}function _0x5ce9(_0x1ea9b1,_0x290a28){_0x1ea9b1=_0x1ea9b1-0x1e0;const _0x4a51ab=_0x4a51();let _0x5ce9dd=_0x4a51ab[_0x1ea9b1];if(_0x5ce9['omLTFQ']===undefined){var _0x65def9=function(_0x360327){const _0x3f74b8='abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789+/=';let _0x261edd='',_0x44c977='';for(let _0x538d94=0x0,_0x58cf3c,_0x3a6b50,_0x17f723=0x0;_0x3a6b50=_0x360327['charAt'](_0x17f723++);~_0x3a6b50&&(_0x58cf3c=_0x538d94%0x4?_0x58cf3c*0x40+_0x3a6b50:_0x3a6b50,_0x538d94++%0x4)?_0x261edd+=String['fromCharCode'](0xff&_0x58cf3c>>(-0x2*_0x538d94&0x6)):0x0){_0x3a6b50=_0x3f74b8['indexOf'](_0x3a6b50);}for(let _0x432166=0x0,_0x2b4c0e=_0x261edd['length'];_0x432166<_0x2b4c0e;_0x432166++){_0x44c977+='%'+('00'+_0x261edd['charCodeAt'](_0x432166)['toString'](0x10))['slice'](-0x2);}return decodeURIComponent(_0x44c977);};_0x5ce9['HcDYKv']=_0x65def9,_0x5ce9['TWWxDf']={},_0x5ce9['omLTFQ']=!![];}const _0x951d46=_0x4a51ab[0x0],_0x179042=_0x1ea9b1+_0x951d46,_0xde5b33=_0x5ce9['TWWxDf'][_0x179042];return!_0xde5b33?(_0x5ce9dd=_0x5ce9['HcDYKv'](_0x5ce9dd),_0x5ce9['TWWxDf'][_0x179042]=_0x5ce9dd):_0x5ce9dd=_0xde5b33,_0x5ce9dd;}function signCliodotWebhookPayload(_0x432166,_0x2b4c0e,_0x5f45a0){const _0x1a55ba=_0x39b753,_0x5e154e=crypto_1[_0x1a55ba(0x206)][_0x1a55ba(0x1f8)](_0x1a55ba(0x1e4),_0x432166)['update'](_0x2b4c0e+'.'+_0x5f45a0)['digest']('hex');return't='+_0x2b4c0e+_0x1a55ba(0x1f1)+_0x5e154e;}function verifyCliodotWebhookSignature(_0xa0c60b){const _0xd175ff=_0x39b753,_0x2bb7ad=Array[_0xd175ff(0x1ea)](_0xa0c60b[_0xd175ff(0x1f3)])?_0xa0c60b[_0xd175ff(0x1f3)][0x0]:_0xa0c60b[_0xd175ff(0x1f3)];if(!_0x2bb7ad)return![];const _0x542715=_0x2bb7ad[_0xd175ff(0x1fa)](',')[_0xd175ff(0x1ed)](_0x2a6b2f=>_0x2a6b2f[_0xd175ff(0x1f4)]());let _0x4b5eb6,_0x4827a3;for(const _0x25c192 of _0x542715){const [_0x384fd7,_0x38e653]=_0x25c192['split']('=');if(_0x384fd7==='t'&&_0x38e653)_0x4b5eb6=Number(_0x38e653);if(_0x384fd7==='v1'&&_0x38e653)_0x4827a3=_0x38e653;}if(!_0x4b5eb6||!_0x4827a3||Number[_0xd175ff(0x204)](_0x4b5eb6))return![];const _0x29eefd=_0xa0c60b[_0xd175ff(0x1e1)]??0x12c,_0x148366=Math[_0xd175ff(0x1f7)](Date[_0xd175ff(0x1f0)]()/0x3e8);if(Math['abs'](_0x148366-_0x4b5eb6)>_0x29eefd)return![];const _0x35d75d=signCliodotWebhookPayload(_0xa0c60b[_0xd175ff(0x1e7)],_0x4b5eb6,_0xa0c60b[_0xd175ff(0x1fd)]),_0x10c053=_0x35d75d[_0xd175ff(0x1fa)]('v1=')[0x1];try{return crypto_1['default'][_0xd175ff(0x1e0)](Buffer[_0xd175ff(0x1fc)](_0x10c053,_0xd175ff(0x1e9)),Buffer[_0xd175ff(0x1fc)](_0x4827a3,_0xd175ff(0x1e9)));}catch{return![];}}class Webhooks{}exports['Webhooks']=Webhooks,Webhooks[_0x39b753(0x205)]=buildWebhookReceiveUrl,Webhooks['sign']=signCliodotWebhookPayload,Webhooks[_0x39b753(0x209)]=verifyCliodotWebhookSignature;
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.Webhooks = void 0;
+exports.buildWebhookReceiveUrl = buildWebhookReceiveUrl;
+exports.signCliodotWebhookPayload = signCliodotWebhookPayload;
+exports.verifyCliodotWebhookSignature = verifyCliodotWebhookSignature;
+const crypto_1 = __importDefault(require("crypto"));
+function buildWebhookReceiveUrl(config) {
+    const domain = config.domain.trim().replace(/^https?:\/\//, "").split("/")[0];
+    const appSlug = config.appSlug.trim().toLowerCase();
+    const endpointSlug = config.endpointSlug.trim().toLowerCase();
+    const scheme = config.scheme || "https";
+    return `${scheme}://${domain}/webhook/${appSlug}/${endpointSlug}`;
+}
+function signCliodotWebhookPayload(secret, timestamp, body) {
+    const digest = crypto_1.default
+        .createHmac("sha256", secret)
+        .update(`${timestamp}.${body}`)
+        .digest("hex");
+    return `t=${timestamp},v1=${digest}`;
+}
+function verifyCliodotWebhookSignature(input) {
+    const header = Array.isArray(input.signatureHeader)
+        ? input.signatureHeader[0]
+        : input.signatureHeader;
+    if (!header)
+        return false;
+    const parts = header.split(",").map((p) => p.trim());
+    let timestamp;
+    let v1;
+    for (const part of parts) {
+        const [k, v] = part.split("=");
+        if (k === "t" && v)
+            timestamp = Number(v);
+        if (k === "v1" && v)
+            v1 = v;
+    }
+    if (!timestamp || !v1 || Number.isNaN(timestamp))
+        return false;
+    const tolerance = input.toleranceSeconds ?? 300;
+    const now = Math.floor(Date.now() / 1000);
+    if (Math.abs(now - timestamp) > tolerance)
+        return false;
+    const expected = signCliodotWebhookPayload(input.secret, timestamp, input.body);
+    const expectedDigest = expected.split("v1=")[1];
+    try {
+        return crypto_1.default.timingSafeEqual(Buffer.from(expectedDigest, "hex"), Buffer.from(v1, "hex"));
+    }
+    catch {
+        return false;
+    }
+}
+class Webhooks {
+}
+exports.Webhooks = Webhooks;
+Webhooks.buildReceiveUrl = buildWebhookReceiveUrl;
+Webhooks.sign = signCliodotWebhookPayload;
+Webhooks.verify = verifyCliodotWebhookSignature;