get-db9 0.1.0 → 0.3.0

package/README.md

@@ -29,14 +29,15 @@ const db = await instantDatabase({
 });
 ```
 
-## Customer API
+## Db9 Client
 
-Full typed client for the Customer API (register, databases, SQL, migrations).
+Full typed client for the API (register, databases, SQL, migrations).
 
 ```typescript
-import { createCustomerClient } from 'get-db9/customer';
+import { createDb9Client } from 'get-db9/client';
 
-const client = createCustomerClient({ token: 'your-token' });
+// No token needed. Automatically anonymous-registers and saves credentials.
+const client = createDb9Client();
 
 // Create a database
 const db = await client.databases.create({ name: 'myapp' });
@@ -56,26 +57,6 @@ await client.databases.applyMigration(db.id, {
 });
 ```
 
-## Admin API
-
-Full typed client for the Admin API (tenant management, batch operations, audit).
-
-```typescript
-import { createAdminClient } from 'get-db9/admin';
-
-const admin = createAdminClient({ apiKey: 'your-api-key' });
-
-// List tenants
-const { items } = await admin.tenants.list({ state: 'ACTIVE' });
-
-// Create tenant
-const tenant = await admin.tenants.create();
-console.log(tenant.connection_string);
-
-// Batch operations
-const batch = await admin.tenants.batchCreate({ count: 5 });
-```
-
 ## Configuration
 
 ### instantDatabase options
@@ -89,22 +70,24 @@ const batch = await admin.tenants.batchCreate({ count: 5 });
 | `seed` | `string` | — | SQL to run after creation |
 | `seedFile` | `string` | — | SQL file content to run |
 
-### Customer client options
+### Db9 client options
 
 | Option | Type | Default | Description |
 |--------|------|---------|-------------|
 | `baseUrl` | `string` | Production URL | API endpoint |
-| `token` | `string` | — | Bearer token |
+| `token` | `string` | — | Bearer token (optional) |
 | `fetch` | `FetchFn` | `globalThis.fetch` | Custom fetch |
-| `credentialStore` | `CredentialStore` | — | Auto-load token |
+| `credentialStore` | `CredentialStore` | `FileCredentialStore` | Load/save token |
 
-### Admin client options
+## Zero-config client
 
-| Option | Type | Default | Description |
-|--------|------|---------|-------------|
-| `baseUrl` | `string` | Production URL | API endpoint |
-| `apiKey` | `string` | — | X-API-Key header |
-| `fetch` | `FetchFn` | `globalThis.fetch` | Custom fetch |
+```typescript
+import { createDb9Client } from 'get-db9';
+
+// No token needed! Auto-registers anonymously
+const client = createDb9Client();
+const db = await client.databases.create({ name: 'myapp' });
+```
 
 ## Error Handling
 

package/dist/{types-ktbIiH5T.d.cts → client-CSOh3r_q.d.cts}

@@ -11,6 +11,41 @@ interface HttpClient {
     del<T>(path: string): Promise<T>;
 }
 
+/** Credential fields stored in `~/.db9/credentials` (TOML). */
+interface Credentials {
+    token: string;
+    is_anonymous?: boolean;
+    anonymous_id?: string;
+    anonymous_secret?: string;
+}
+/** Async credential persistence abstraction. */
+interface CredentialStore {
+    load(): Promise<Credentials | null>;
+    save(credentials: Credentials): Promise<void>;
+    clear(): Promise<void>;
+}
+declare class FileCredentialStore implements CredentialStore {
+    private readonly customPath;
+    /**
+     * @param path — Override the credential file location.
+     *               Defaults to `~/.db9/credentials` (resolved lazily).
+     */
+    constructor(path?: string);
+    /** Resolve the credential file path (lazy to avoid top-level `os` import). */
+    private resolvePath;
+    load(): Promise<Credentials | null>;
+    save(credentials: Credentials): Promise<void>;
+    clear(): Promise<void>;
+}
+declare class MemoryCredentialStore implements CredentialStore {
+    private credentials;
+    load(): Promise<Credentials | null>;
+    save(credentials: Credentials): Promise<void>;
+    clear(): Promise<void>;
+}
+/** Returns a FileCredentialStore with the default path (`~/.db9/credentials`). */
+declare function defaultCredentialStore(): CredentialStore;
+
 interface Endpoint {
     host: string;
     port: number;
@@ -318,4 +353,47 @@ interface MigrationMetadata {
 }
 type TenantState = 'CREATING' | 'ACTIVE' | 'DISABLING' | 'DISABLED' | 'CREATE_FAILED';
 
-export type { TenantObservabilityResponse as $, AdminCreateUserRequest as A, BatchCreateRequest as B, ClaimRequest as C, DatabaseResponse as D, Endpoint as E, FetchFn as F, LoginRequest as G, HealthResponse as H, LoginResponse as I, MigrationApplyRequest as J, MigrationApplyResponse as K, ListTenantsParams as L, MessageResponse as M, MigrationMetadata as N, ObservabilitySummary as O, PasswordResetResponse as P, QuerySample as Q, RegisterRequest as R, SchemaResponse as S, SqlExecuteRequest as T, SqlQueryRequest as U, SqlQueryResponse as V, SqlResult as W, TableMetadata as X, TenantConnectRequest as Y, TenantConnectResponse as Z, TenantListResponse as _, AnonymousRefreshRequest as a, TenantResponse as a0, TenantState as a1, TenantUpdateRequest as a2, TokenResponse as a3, UserCreateResponse as a4, UserResponse as a5, ViewMetadata as a6, AnonymousRefreshResponse as b, AnonymousRegisterResponse as c, AnonymousSecretResponse as d, AuditLogParams as e, AuditLogResponse as f, BatchCreateResponse as g, BatchDeleteRequest as h, BatchDeleteResponse as i, BatchItemError as j, BatchUpdateRequest as k, BatchUpdateResponse as l, BranchRequest as m, ClaimResponse as n, ColumnInfo as o, ColumnMetadata as p, CreateDatabaseRequest as q, CreateTenantRequest as r, CreateTenantResponse as s, CreateUserRequest as t, CustomerPasswordResetResponse as u, CustomerResponse as v, DumpRequest as w, DumpResponse as x, HttpClient as y, HttpClientOptions as z };
+interface Db9ClientOptions {
+    baseUrl?: string;
+    token?: string;
+    fetch?: FetchFn;
+    credentialStore?: CredentialStore;
+}
+declare function createDb9Client(options?: Db9ClientOptions): {
+    auth: {
+        register: (req: RegisterRequest) => Promise<CustomerResponse>;
+        login: (req: LoginRequest) => Promise<LoginResponse>;
+        anonymousRegister: () => Promise<AnonymousRegisterResponse>;
+        anonymousRefresh: (req: AnonymousRefreshRequest) => Promise<AnonymousRefreshResponse>;
+        me: () => Promise<CustomerResponse>;
+        getAnonymousSecret: () => Promise<AnonymousSecretResponse>;
+        claim: (req: ClaimRequest) => Promise<ClaimResponse>;
+    };
+    tokens: {
+        list: () => Promise<TokenResponse[]>;
+        revoke: (tokenId: string) => Promise<MessageResponse>;
+    };
+    databases: {
+        create: (req: CreateDatabaseRequest) => Promise<DatabaseResponse>;
+        list: () => Promise<DatabaseResponse[]>;
+        get: (databaseId: string) => Promise<DatabaseResponse>;
+        delete: (databaseId: string) => Promise<MessageResponse>;
+        resetPassword: (databaseId: string) => Promise<CustomerPasswordResetResponse>;
+        observability: (databaseId: string) => Promise<TenantObservabilityResponse>;
+        sql: (databaseId: string, query: string) => Promise<SqlResult>;
+        sqlFile: (databaseId: string, fileContent: string) => Promise<SqlResult>;
+        schema: (databaseId: string) => Promise<SchemaResponse>;
+        dump: (databaseId: string, req?: DumpRequest) => Promise<DumpResponse>;
+        applyMigration: (databaseId: string, req: MigrationApplyRequest) => Promise<MigrationApplyResponse>;
+        listMigrations: (databaseId: string) => Promise<MigrationMetadata[]>;
+        branch: (databaseId: string, req: BranchRequest) => Promise<DatabaseResponse>;
+        users: {
+            list: (databaseId: string) => Promise<UserResponse[]>;
+            create: (databaseId: string, req: CreateUserRequest) => Promise<MessageResponse>;
+            delete: (databaseId: string, username: string) => Promise<MessageResponse>;
+        };
+    };
+};
+type Db9Client = ReturnType<typeof createDb9Client>;
+
+export { type SqlQueryResponse as $, type AdminCreateUserRequest as A, type BatchCreateRequest as B, type CredentialStore as C, type DatabaseResponse as D, type DumpRequest as E, type FetchFn as F, type DumpResponse as G, type Endpoint as H, FileCredentialStore as I, type HealthResponse as J, type HttpClient as K, type HttpClientOptions as L, type ListTenantsParams as M, type LoginRequest as N, type LoginResponse as O, MemoryCredentialStore as P, type MessageResponse as Q, type MigrationApplyRequest as R, type MigrationApplyResponse as S, type MigrationMetadata as T, type ObservabilitySummary as U, type PasswordResetResponse as V, type QuerySample as W, type RegisterRequest as X, type SchemaResponse as Y, type SqlExecuteRequest as Z, type SqlQueryRequest as _, type AnonymousRefreshRequest as a, type SqlResult as a0, type TableMetadata as a1, type TenantConnectRequest as a2, type TenantConnectResponse as a3, type TenantListResponse as a4, type TenantObservabilityResponse as a5, type TenantResponse as a6, type TenantState as a7, type TenantUpdateRequest as a8, type TokenResponse as a9, type UserCreateResponse as aa, type UserResponse as ab, type ViewMetadata as ac, createDb9Client as ad, defaultCredentialStore as ae, type AnonymousRefreshResponse as b, type AnonymousRegisterResponse as c, type AnonymousSecretResponse as d, type AuditLogParams as e, type AuditLogResponse as f, type BatchCreateResponse as g, type BatchDeleteRequest as h, type BatchDeleteResponse as i, type BatchItemError as j, type BatchUpdateRequest as k, type BatchUpdateResponse as l, type BranchRequest as m, type ClaimRequest as n, type ClaimResponse as o, type ColumnInfo as p, type ColumnMetadata as q, type CreateDatabaseRequest as r, type CreateTenantRequest as s, type CreateTenantResponse as t, type CreateUserRequest as u, type Credentials as v, type CustomerPasswordResetResponse as w, type CustomerResponse as x, type Db9Client as y, type Db9ClientOptions as z };

package/dist/{types-ktbIiH5T.d.ts → client-CSOh3r_q.d.ts}

@@ -11,6 +11,41 @@ interface HttpClient {
     del<T>(path: string): Promise<T>;
 }
 
+/** Credential fields stored in `~/.db9/credentials` (TOML). */
+interface Credentials {
+    token: string;
+    is_anonymous?: boolean;
+    anonymous_id?: string;
+    anonymous_secret?: string;
+}
+/** Async credential persistence abstraction. */
+interface CredentialStore {
+    load(): Promise<Credentials | null>;
+    save(credentials: Credentials): Promise<void>;
+    clear(): Promise<void>;
+}
+declare class FileCredentialStore implements CredentialStore {
+    private readonly customPath;
+    /**
+     * @param path — Override the credential file location.
+     *               Defaults to `~/.db9/credentials` (resolved lazily).
+     */
+    constructor(path?: string);
+    /** Resolve the credential file path (lazy to avoid top-level `os` import). */
+    private resolvePath;
+    load(): Promise<Credentials | null>;
+    save(credentials: Credentials): Promise<void>;
+    clear(): Promise<void>;
+}
+declare class MemoryCredentialStore implements CredentialStore {
+    private credentials;
+    load(): Promise<Credentials | null>;
+    save(credentials: Credentials): Promise<void>;
+    clear(): Promise<void>;
+}
+/** Returns a FileCredentialStore with the default path (`~/.db9/credentials`). */
+declare function defaultCredentialStore(): CredentialStore;
+
 interface Endpoint {
     host: string;
     port: number;
@@ -318,4 +353,47 @@ interface MigrationMetadata {
 }
 type TenantState = 'CREATING' | 'ACTIVE' | 'DISABLING' | 'DISABLED' | 'CREATE_FAILED';
 
-export type { TenantObservabilityResponse as $, AdminCreateUserRequest as A, BatchCreateRequest as B, ClaimRequest as C, DatabaseResponse as D, Endpoint as E, FetchFn as F, LoginRequest as G, HealthResponse as H, LoginResponse as I, MigrationApplyRequest as J, MigrationApplyResponse as K, ListTenantsParams as L, MessageResponse as M, MigrationMetadata as N, ObservabilitySummary as O, PasswordResetResponse as P, QuerySample as Q, RegisterRequest as R, SchemaResponse as S, SqlExecuteRequest as T, SqlQueryRequest as U, SqlQueryResponse as V, SqlResult as W, TableMetadata as X, TenantConnectRequest as Y, TenantConnectResponse as Z, TenantListResponse as _, AnonymousRefreshRequest as a, TenantResponse as a0, TenantState as a1, TenantUpdateRequest as a2, TokenResponse as a3, UserCreateResponse as a4, UserResponse as a5, ViewMetadata as a6, AnonymousRefreshResponse as b, AnonymousRegisterResponse as c, AnonymousSecretResponse as d, AuditLogParams as e, AuditLogResponse as f, BatchCreateResponse as g, BatchDeleteRequest as h, BatchDeleteResponse as i, BatchItemError as j, BatchUpdateRequest as k, BatchUpdateResponse as l, BranchRequest as m, ClaimResponse as n, ColumnInfo as o, ColumnMetadata as p, CreateDatabaseRequest as q, CreateTenantRequest as r, CreateTenantResponse as s, CreateUserRequest as t, CustomerPasswordResetResponse as u, CustomerResponse as v, DumpRequest as w, DumpResponse as x, HttpClient as y, HttpClientOptions as z };
+interface Db9ClientOptions {
+    baseUrl?: string;
+    token?: string;
+    fetch?: FetchFn;
+    credentialStore?: CredentialStore;
+}
+declare function createDb9Client(options?: Db9ClientOptions): {
+    auth: {
+        register: (req: RegisterRequest) => Promise<CustomerResponse>;
+        login: (req: LoginRequest) => Promise<LoginResponse>;
+        anonymousRegister: () => Promise<AnonymousRegisterResponse>;
+        anonymousRefresh: (req: AnonymousRefreshRequest) => Promise<AnonymousRefreshResponse>;
+        me: () => Promise<CustomerResponse>;
+        getAnonymousSecret: () => Promise<AnonymousSecretResponse>;
+        claim: (req: ClaimRequest) => Promise<ClaimResponse>;
+    };
+    tokens: {
+        list: () => Promise<TokenResponse[]>;
+        revoke: (tokenId: string) => Promise<MessageResponse>;
+    };
+    databases: {
+        create: (req: CreateDatabaseRequest) => Promise<DatabaseResponse>;
+        list: () => Promise<DatabaseResponse[]>;
+        get: (databaseId: string) => Promise<DatabaseResponse>;
+        delete: (databaseId: string) => Promise<MessageResponse>;
+        resetPassword: (databaseId: string) => Promise<CustomerPasswordResetResponse>;
+        observability: (databaseId: string) => Promise<TenantObservabilityResponse>;
+        sql: (databaseId: string, query: string) => Promise<SqlResult>;
+        sqlFile: (databaseId: string, fileContent: string) => Promise<SqlResult>;
+        schema: (databaseId: string) => Promise<SchemaResponse>;
+        dump: (databaseId: string, req?: DumpRequest) => Promise<DumpResponse>;
+        applyMigration: (databaseId: string, req: MigrationApplyRequest) => Promise<MigrationApplyResponse>;
+        listMigrations: (databaseId: string) => Promise<MigrationMetadata[]>;
+        branch: (databaseId: string, req: BranchRequest) => Promise<DatabaseResponse>;
+        users: {
+            list: (databaseId: string) => Promise<UserResponse[]>;
+            create: (databaseId: string, req: CreateUserRequest) => Promise<MessageResponse>;
+            delete: (databaseId: string, username: string) => Promise<MessageResponse>;
+        };
+    };
+};
+type Db9Client = ReturnType<typeof createDb9Client>;
+
+export { type SqlQueryResponse as $, type AdminCreateUserRequest as A, type BatchCreateRequest as B, type CredentialStore as C, type DatabaseResponse as D, type DumpRequest as E, type FetchFn as F, type DumpResponse as G, type Endpoint as H, FileCredentialStore as I, type HealthResponse as J, type HttpClient as K, type HttpClientOptions as L, type ListTenantsParams as M, type LoginRequest as N, type LoginResponse as O, MemoryCredentialStore as P, type MessageResponse as Q, type MigrationApplyRequest as R, type MigrationApplyResponse as S, type MigrationMetadata as T, type ObservabilitySummary as U, type PasswordResetResponse as V, type QuerySample as W, type RegisterRequest as X, type SchemaResponse as Y, type SqlExecuteRequest as Z, type SqlQueryRequest as _, type AnonymousRefreshRequest as a, type SqlResult as a0, type TableMetadata as a1, type TenantConnectRequest as a2, type TenantConnectResponse as a3, type TenantListResponse as a4, type TenantObservabilityResponse as a5, type TenantResponse as a6, type TenantState as a7, type TenantUpdateRequest as a8, type TokenResponse as a9, type UserCreateResponse as aa, type UserResponse as ab, type ViewMetadata as ac, createDb9Client as ad, defaultCredentialStore as ae, type AnonymousRefreshResponse as b, type AnonymousRegisterResponse as c, type AnonymousSecretResponse as d, type AuditLogParams as e, type AuditLogResponse as f, type BatchCreateResponse as g, type BatchDeleteRequest as h, type BatchDeleteResponse as i, type BatchItemError as j, type BatchUpdateRequest as k, type BatchUpdateResponse as l, type BranchRequest as m, type ClaimRequest as n, type ClaimResponse as o, type ColumnInfo as p, type ColumnMetadata as q, type CreateDatabaseRequest as r, type CreateTenantRequest as s, type CreateTenantResponse as t, type CreateUserRequest as u, type Credentials as v, type CustomerPasswordResetResponse as w, type CustomerResponse as x, type Db9Client as y, type Db9ClientOptions as z };

package/dist/{customer.cjs → client.cjs}

@@ -1,7 +1,9 @@
 "use strict";
+var __create = Object.create;
 var __defProp = Object.defineProperty;
 var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
 var __getOwnPropNames = Object.getOwnPropertyNames;
+var __getProtoOf = Object.getPrototypeOf;
 var __hasOwnProp = Object.prototype.hasOwnProperty;
 var __export = (target, all) => {
   for (var name in all)
@@ -15,14 +17,22 @@ var __copyProps = (to, from, except, desc) => {
   }
   return to;
 };
+var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__getProtoOf(mod)) : {}, __copyProps(
+  // If the importer is in node compatibility mode or this is not an ESM
+  // file that has been converted to a CommonJS file using a Babel-
+  // compatible transform (i.e. "__esModule" has not been set), then set
+  // "default" to the CommonJS "module.exports" for node compatibility.
+  isNodeMode || !mod || !mod.__esModule ? __defProp(target, "default", { value: mod, enumerable: true }) : target,
+  mod
+));
 var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
 
-// src/customer.ts
-var customer_exports = {};
-__export(customer_exports, {
-  createCustomerClient: () => createCustomerClient
+// src/client.ts
+var client_exports = {};
+__export(client_exports, {
+  createDb9Client: () => createDb9Client
 });
-module.exports = __toCommonJS(customer_exports);
+module.exports = __toCommonJS(client_exports);
 
 // src/errors.ts
 var Db9Error = class _Db9Error extends Error {
@@ -114,22 +124,124 @@ function createHttpClient(options) {
   };
 }
 
-// src/customer.ts
-function createCustomerClient(options = {}) {
+// src/credentials.ts
+var import_toml = require("@iarna/toml");
+var FileCredentialStore = class {
+  customPath;
+  /**
+   * @param path — Override the credential file location.
+   *               Defaults to `~/.db9/credentials` (resolved lazily).
+   */
+  constructor(path) {
+    this.customPath = path;
+  }
+  /** Resolve the credential file path (lazy to avoid top-level `os` import). */
+  async resolvePath() {
+    if (this.customPath) return this.customPath;
+    const os = await import("os");
+    const nodePath = await import("path");
+    return nodePath.join(os.homedir(), ".db9", "credentials");
+  }
+  async load() {
+    const fs = await import("fs/promises");
+    const filePath = await this.resolvePath();
+    let content;
+    try {
+      content = await fs.readFile(filePath, "utf-8");
+    } catch (err) {
+      if (err.code === "ENOENT") return null;
+      throw err;
+    }
+    const parsed = (0, import_toml.parse)(content);
+    const token = parsed["token"];
+    if (typeof token !== "string") return null;
+    const creds = { token };
+    if (typeof parsed["is_anonymous"] === "boolean") {
+      creds.is_anonymous = parsed["is_anonymous"];
+    }
+    if (typeof parsed["anonymous_id"] === "string") {
+      creds.anonymous_id = parsed["anonymous_id"];
+    }
+    if (typeof parsed["anonymous_secret"] === "string") {
+      creds.anonymous_secret = parsed["anonymous_secret"];
+    }
+    return creds;
+  }
+  async save(credentials) {
+    const fs = await import("fs/promises");
+    const nodePath = await import("path");
+    const filePath = await this.resolvePath();
+    const dir = nodePath.dirname(filePath);
+    await fs.mkdir(dir, { recursive: true, mode: 448 });
+    const data = {};
+    try {
+      const raw = await fs.readFile(filePath, "utf-8");
+      const parsed = (0, import_toml.parse)(raw);
+      for (const [k, v] of Object.entries(parsed)) {
+        if (typeof v === "string" || typeof v === "boolean" || typeof v === "number") {
+          data[k] = v;
+        }
+      }
+    } catch (err) {
+      if (err.code !== "ENOENT") throw err;
+    }
+    data["token"] = credentials.token;
+    if (credentials.is_anonymous !== void 0) {
+      data["is_anonymous"] = credentials.is_anonymous;
+    }
+    if (credentials.anonymous_id !== void 0) {
+      data["anonymous_id"] = credentials.anonymous_id;
+    }
+    if (credentials.anonymous_secret !== void 0) {
+      data["anonymous_secret"] = credentials.anonymous_secret;
+    }
+    const toml = (0, import_toml.stringify)(
+      data
+    );
+    await fs.writeFile(filePath, toml, { mode: 384 });
+  }
+  async clear() {
+    const fs = await import("fs/promises");
+    const filePath = await this.resolvePath();
+    try {
+      await fs.unlink(filePath);
+    } catch (err) {
+      if (err.code !== "ENOENT") throw err;
+    }
+  }
+};
+function defaultCredentialStore() {
+  return new FileCredentialStore();
+}
+
+// src/client.ts
+function createDb9Client(options = {}) {
   const baseUrl = options.baseUrl ?? "https://db9.shared.aws.tidbcloud.com/api";
   let token = options.token;
   let tokenLoaded = !!token;
+  const store = options.credentialStore ?? defaultCredentialStore();
   const publicClient = createHttpClient({
     baseUrl,
     fetch: options.fetch
   });
   async function getAuthClient() {
-    if (!token && !tokenLoaded && options.credentialStore) {
-      const creds = await options.credentialStore.load();
-      if (creds) token = creds.token;
+    if (!token && !tokenLoaded) {
+      const creds = await store.load();
+      if (creds?.token) token = creds.token;
       tokenLoaded = true;
     }
-    if (!token) throw new Error("No authentication token available");
+    if (!token) {
+      const reg = await publicClient.post(
+        "/customer/anonymous-register"
+      );
+      token = reg.token;
+      await store.save({
+        token: reg.token,
+        is_anonymous: reg.is_anonymous,
+        anonymous_id: reg.anonymous_id,
+        anonymous_secret: reg.anonymous_secret
+      });
+    }
     return createHttpClient({
       baseUrl,
       fetch: options.fetch,
@@ -286,6 +398,6 @@ function createCustomerClient(options = {}) {
 }
 // Annotate the CommonJS export names for ESM import in node:
 0 && (module.exports = {
-  createCustomerClient
+  createDb9Client
 });
-//# sourceMappingURL=customer.cjs.map
+//# sourceMappingURL=client.cjs.map

package/dist/client.cjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/client.ts","../src/errors.ts","../src/http.ts","../src/credentials.ts"],"sourcesContent":["import { createHttpClient, type FetchFn, type HttpClient } from './http';\nimport {\n  defaultCredentialStore,\n  type CredentialStore,\n} from './credentials';\nimport type {\n  RegisterRequest,\n  CustomerResponse,\n  LoginRequest,\n  LoginResponse,\n  AnonymousRegisterResponse,\n  AnonymousRefreshRequest,\n  AnonymousRefreshResponse,\n  AnonymousSecretResponse,\n  ClaimRequest,\n  ClaimResponse,\n  TokenResponse,\n  MessageResponse,\n  CreateDatabaseRequest,\n  DatabaseResponse,\n  CustomerPasswordResetResponse,\n  TenantObservabilityResponse,\n  SqlResult,\n  SchemaResponse,\n  DumpRequest,\n  DumpResponse,\n  MigrationApplyRequest,\n  MigrationApplyResponse,\n  MigrationMetadata,\n  BranchRequest,\n  UserResponse,\n  CreateUserRequest,\n} from './types';\n\nexport interface Db9ClientOptions {\n  baseUrl?: string;\n  token?: string;\n  fetch?: FetchFn;\n  credentialStore?: CredentialStore;\n}\n\nexport function createDb9Client(options: Db9ClientOptions = {}) {\n  const baseUrl =\n    options.baseUrl ?? 'https://db9.shared.aws.tidbcloud.com/api';\n  let token = options.token;\n  let tokenLoaded = !!token;\n  const store = options.credentialStore ?? defaultCredentialStore();\n\n  // Public HTTP client — no Authorization header\n  const publicClient = createHttpClient({\n    baseUrl,\n    fetch: options.fetch,\n  });\n\n  // Lazy-loading authenticated HTTP client\n  async function getAuthClient(): Promise<HttpClient> {\n    if (!token && !tokenLoaded) {\n      const creds = await store.load();\n      if (creds?.token) token = creds.token;\n      tokenLoaded = true;\n    }\n    if (!token) {\n      const reg = await publicClient.post<AnonymousRegisterResponse>(\n        '/customer/anonymous-register'\n      );\n      token = reg.token;\n      await store.save({\n        token: reg.token,\n        is_anonymous: reg.is_anonymous,\n        anonymous_id: reg.anonymous_id,\n        anonymous_secret: reg.anonymous_secret,\n      });\n    }\n    return createHttpClient({\n      baseUrl,\n      fetch: options.fetch,\n      headers: { Authorization: `Bearer ${token}` },\n    });\n  }\n\n  return {\n    auth: {\n      // Public endpoints (no token required)\n      register: (req: RegisterRequest) =>\n        publicClient.post<CustomerResponse>('/customer/register', req),\n\n      login: (req: LoginRequest) =>\n        publicClient.post<LoginResponse>('/customer/login', req),\n\n      anonymousRegister: () =>\n        publicClient.post<AnonymousRegisterResponse>(\n          '/customer/anonymous-register'\n        ),\n\n      anonymousRefresh: (req: AnonymousRefreshRequest) =>\n        publicClient.post<AnonymousRefreshResponse>(\n          '/customer/anonymous-refresh',\n          req\n        ),\n\n      // Authenticated endpoints\n      me: async () => {\n        const client = await getAuthClient();\n        return client.get<CustomerResponse>('/customer/me');\n      },\n\n      getAnonymousSecret: async () => {\n        const client = await getAuthClient();\n        return client.get<AnonymousSecretResponse>(\n          '/customer/anonymous-secret'\n        );\n      },\n\n      claim: async (req: ClaimRequest) => {\n        const client = await getAuthClient();\n        return client.post<ClaimResponse>('/customer/claim', req);\n      },\n    },\n\n    tokens: {\n      list: async () => {\n        const client = await getAuthClient();\n        return client.get<TokenResponse[]>('/customer/tokens');\n      },\n\n      revoke: async (tokenId: string) => {\n        const client = await getAuthClient();\n        return client.del<MessageResponse>(`/customer/tokens/${tokenId}`);\n      },\n    },\n\n    databases: {\n      // ── CRUD ──────────────────────────────────────────────────\n      create: async (req: CreateDatabaseRequest) => {\n        const client = await getAuthClient();\n        return client.post<DatabaseResponse>('/customer/databases', req);\n      },\n\n      list: async () => {\n        const client = await getAuthClient();\n        return client.get<DatabaseResponse[]>('/customer/databases');\n      },\n\n      get: async (databaseId: string) => {\n        const client = await getAuthClient();\n        return client.get<DatabaseResponse>(\n          `/customer/databases/${databaseId}`\n        );\n      },\n\n      delete: async (databaseId: string) => {\n        const client = await getAuthClient();\n        return client.del<MessageResponse>(\n          `/customer/databases/${databaseId}`\n        );\n      },\n\n      resetPassword: async (databaseId: string) => {\n        const client = await getAuthClient();\n        return client.post<CustomerPasswordResetResponse>(\n          `/customer/databases/${databaseId}/reset-password`\n        );\n      },\n\n      observability: async (databaseId: string) => {\n        const client = await getAuthClient();\n        return client.get<TenantObservabilityResponse>(\n          `/customer/databases/${databaseId}/observability`\n        );\n      },\n\n      // ── SQL Execution ─────────────────────────────────────────\n      sql: async (databaseId: string, query: string) => {\n        const client = await getAuthClient();\n        return client.post<SqlResult>(\n          `/customer/databases/${databaseId}/sql`,\n          { query }\n        );\n      },\n\n      sqlFile: async (databaseId: string, fileContent: string) => {\n        const client = await getAuthClient();\n        return client.post<SqlResult>(\n          `/customer/databases/${databaseId}/sql`,\n          { file_content: fileContent }\n        );\n      },\n\n      // ── Schema & Dump ─────────────────────────────────────────\n      schema: async (databaseId: string) => {\n        const client = await getAuthClient();\n        return client.get<SchemaResponse>(\n          `/customer/databases/${databaseId}/schema`\n        );\n      },\n\n      dump: async (databaseId: string, req?: DumpRequest) => {\n        const client = await getAuthClient();\n        return client.post<DumpResponse>(\n          `/customer/databases/${databaseId}/dump`,\n          req\n        );\n      },\n\n      // ── Migrations ────────────────────────────────────────────\n      applyMigration: async (\n        databaseId: string,\n        req: MigrationApplyRequest\n      ) => {\n        const client = await getAuthClient();\n        return client.post<MigrationApplyResponse>(\n          `/customer/databases/${databaseId}/migrations`,\n          req\n        );\n      },\n\n      listMigrations: async (databaseId: string) => {\n        const client = await getAuthClient();\n        return client.get<MigrationMetadata[]>(\n          `/customer/databases/${databaseId}/migrations`\n        );\n      },\n\n      // ── Branching ─────────────────────────────────────────────\n      branch: async (databaseId: string, req: BranchRequest) => {\n        const client = await getAuthClient();\n        return client.post<DatabaseResponse>(\n          `/customer/databases/${databaseId}/branch`,\n          req\n        );\n      },\n\n      // ── User Management ───────────────────────────────────────\n      users: {\n        list: async (databaseId: string) => {\n          const client = await getAuthClient();\n          return client.get<UserResponse[]>(\n            `/customer/databases/${databaseId}/users`\n          );\n        },\n\n        create: async (databaseId: string, req: CreateUserRequest) => {\n          const client = await getAuthClient();\n          return client.post<MessageResponse>(\n            `/customer/databases/${databaseId}/users`,\n            req\n          );\n        },\n\n        delete: async (databaseId: string, username: string) => {\n          const client = await getAuthClient();\n          return client.del<MessageResponse>(\n            `/customer/databases/${databaseId}/users/${username}`\n          );\n        },\n      },\n    },\n  };\n}\n\nexport type Db9Client = ReturnType<typeof createDb9Client>;\n","export class Db9Error extends Error {\n  readonly statusCode: number;\n  readonly response?: Response;\n\n  constructor(message: string, statusCode: number, response?: Response) {\n    super(message);\n    this.name = 'Db9Error';\n    this.statusCode = statusCode;\n    this.response = response;\n  }\n\n  static async fromResponse(response: Response): Promise<Db9Error> {\n    // Parse { \"message\": string } body — the ONLY error format from the API\n    let message: string;\n    try {\n      const body = (await response.json()) as { message?: string };\n      message = body.message || response.statusText;\n    } catch {\n      message = response.statusText;\n    }\n\n    // Return specific subclass based on status code\n    switch (response.status) {\n      case 401:\n        return new Db9AuthError(message, response);\n      case 404:\n        return new Db9NotFoundError(message, response);\n      case 409:\n        return new Db9ConflictError(message, response);\n      default:\n        return new Db9Error(message, response.status, response);\n    }\n  }\n}\n\nexport class Db9AuthError extends Db9Error {\n  constructor(message: string, response?: Response) {\n    super(message, 401, response);\n    this.name = 'Db9AuthError';\n  }\n}\n\nexport class Db9NotFoundError extends Db9Error {\n  constructor(message: string, response?: Response) {\n    super(message, 404, response);\n    this.name = 'Db9NotFoundError';\n  }\n}\n\nexport class Db9ConflictError extends Db9Error {\n  constructor(message: string, response?: Response) {\n    super(message, 409, response);\n    this.name = 'Db9ConflictError';\n  }\n}\n","import { Db9Error } from './errors';\n\nexport type FetchFn = typeof globalThis.fetch;\n\nexport interface HttpClientOptions {\n  baseUrl: string;\n  fetch?: FetchFn;\n  headers?: Record<string, string>;\n}\n\nexport interface HttpClient {\n  get<T>(path: string, params?: Record<string, string | undefined>): Promise<T>;\n  post<T>(path: string, body?: unknown): Promise<T>;\n  put<T>(path: string, body?: unknown): Promise<T>;\n  del<T>(path: string): Promise<T>;\n}\n\nexport function createHttpClient(options: HttpClientOptions): HttpClient {\n  const fetchFn = options.fetch ?? globalThis.fetch;\n  const baseUrl = options.baseUrl.replace(/\\/$/, ''); // strip trailing slash\n\n  async function request<T>(\n    method: string,\n    path: string,\n    body?: unknown,\n    params?: Record<string, string | undefined>\n  ): Promise<T> {\n    let url = `${baseUrl}${path}`;\n\n    // Append query params for GET requests\n    if (params) {\n      const searchParams = new URLSearchParams();\n      for (const [key, value] of Object.entries(params)) {\n        if (value !== undefined) {\n          searchParams.set(key, value);\n        }\n      }\n      const qs = searchParams.toString();\n      if (qs) url += `?${qs}`;\n    }\n\n    const headers: Record<string, string> = {\n      'Content-Type': 'application/json',\n      ...options.headers,\n    };\n\n    const init: RequestInit = { method, headers };\n    if (body !== undefined) {\n      init.body = JSON.stringify(body);\n    }\n\n    const response = await fetchFn(url, init);\n\n    if (!response.ok) {\n      throw await Db9Error.fromResponse(response);\n    }\n\n    // Handle 204 No Content\n    if (response.status === 204) {\n      return undefined as T;\n    }\n\n    return response.json() as Promise<T>;\n  }\n\n  return {\n    get: <T>(path: string, params?: Record<string, string | undefined>) =>\n      request<T>('GET', path, undefined, params),\n    post: <T>(path: string, body?: unknown) => request<T>('POST', path, body),\n    put: <T>(path: string, body?: unknown) => request<T>('PUT', path, body),\n    del: <T>(path: string) => request<T>('DELETE', path),\n  };\n}\n","import { parse as parseToml, stringify as stringifyToml } from '@iarna/toml';\n\n// ---------------------------------------------------------------------------\n// Interfaces\n// ---------------------------------------------------------------------------\n\n/** Credential fields stored in `~/.db9/credentials` (TOML). */\nexport interface Credentials {\n  token: string;\n  is_anonymous?: boolean;\n  anonymous_id?: string;\n  anonymous_secret?: string;\n}\n\n/** Async credential persistence abstraction. */\nexport interface CredentialStore {\n  load(): Promise<Credentials | null>;\n  save(credentials: Credentials): Promise<void>;\n  clear(): Promise<void>;\n}\n\n// ---------------------------------------------------------------------------\n// FileCredentialStore — TOML file at ~/.db9/credentials (matches db9 CLI)\n// ---------------------------------------------------------------------------\n\nexport class FileCredentialStore implements CredentialStore {\n  private readonly customPath: string | undefined;\n\n  /**\n   * @param path — Override the credential file location.\n   *               Defaults to `~/.db9/credentials` (resolved lazily).\n   */\n  constructor(path?: string) {\n    this.customPath = path;\n  }\n\n  /** Resolve the credential file path (lazy to avoid top-level `os` import). */\n  private async resolvePath(): Promise<string> {\n    if (this.customPath) return this.customPath;\n    const os = await import('node:os');\n    const nodePath = await import('node:path');\n    return nodePath.join(os.homedir(), '.db9', 'credentials');\n  }\n\n  async load(): Promise<Credentials | null> {\n    const fs = await import('node:fs/promises');\n    const filePath = await this.resolvePath();\n\n    let content: string;\n    try {\n      content = await fs.readFile(filePath, 'utf-8');\n    } catch (err: unknown) {\n      if ((err as NodeJS.ErrnoException).code === 'ENOENT') return null;\n      throw err;\n    }\n\n    const parsed = parseToml(content);\n    const token = parsed['token'];\n    if (typeof token !== 'string') return null;\n\n    const creds: Credentials = { token };\n    if (typeof parsed['is_anonymous'] === 'boolean') {\n      creds.is_anonymous = parsed['is_anonymous'];\n    }\n    if (typeof parsed['anonymous_id'] === 'string') {\n      creds.anonymous_id = parsed['anonymous_id'];\n    }\n    if (typeof parsed['anonymous_secret'] === 'string') {\n      creds.anonymous_secret = parsed['anonymous_secret'];\n    }\n\n    return creds;\n  }\n\n  async save(credentials: Credentials): Promise<void> {\n    const fs = await import('node:fs/promises');\n    const nodePath = await import('node:path');\n    const filePath = await this.resolvePath();\n    const dir = nodePath.dirname(filePath);\n\n    // Ensure directory exists with 0o700 (matches CLI: ensure_config_dir)\n    await fs.mkdir(dir, { recursive: true, mode: 0o700 });\n\n    // Read → merge → write  (preserves unknown fields as scalars)\n    const data: Record<string, string | boolean | number> = {};\n    try {\n      const raw = await fs.readFile(filePath, 'utf-8');\n      const parsed = parseToml(raw);\n      for (const [k, v] of Object.entries(parsed)) {\n        if (typeof v === 'string' || typeof v === 'boolean' || typeof v === 'number') {\n          data[k] = v;\n        }\n      }\n    } catch (err: unknown) {\n      if ((err as NodeJS.ErrnoException).code !== 'ENOENT') throw err;\n    }\n\n    // Merge: always update token, only override optional fields when provided\n    data['token'] = credentials.token;\n    if (credentials.is_anonymous !== undefined) {\n      data['is_anonymous'] = credentials.is_anonymous;\n    }\n    if (credentials.anonymous_id !== undefined) {\n      data['anonymous_id'] = credentials.anonymous_id;\n    }\n    if (credentials.anonymous_secret !== undefined) {\n      data['anonymous_secret'] = credentials.anonymous_secret;\n    }\n\n    // Serialize and write with 0o600 permissions (matches CLI: save_token)\n    const toml = stringifyToml(\n      data as Parameters<typeof stringifyToml>[0],\n    );\n    await fs.writeFile(filePath, toml, { mode: 0o600 });\n  }\n\n  async clear(): Promise<void> {\n    const fs = await import('node:fs/promises');\n    const filePath = await this.resolvePath();\n\n    try {\n      await fs.unlink(filePath);\n    } catch (err: unknown) {\n      if ((err as NodeJS.ErrnoException).code !== 'ENOENT') throw err;\n    }\n  }\n}\n\n// ---------------------------------------------------------------------------\n// MemoryCredentialStore — in-memory, no persistence\n// ---------------------------------------------------------------------------\n\nexport class MemoryCredentialStore implements CredentialStore {\n  private credentials: Credentials | null = null;\n\n  async load(): Promise<Credentials | null> {\n    return this.credentials ? { ...this.credentials } : null;\n  }\n\n  async save(credentials: Credentials): Promise<void> {\n    this.credentials = {\n      token: credentials.token,\n      is_anonymous: credentials.is_anonymous ?? this.credentials?.is_anonymous,\n      anonymous_id: credentials.anonymous_id ?? this.credentials?.anonymous_id,\n      anonymous_secret: credentials.anonymous_secret ?? this.credentials?.anonymous_secret,\n    };\n  }\n\n  async clear(): Promise<void> {\n    this.credentials = null;\n  }\n}\n\n// ---------------------------------------------------------------------------\n// Factory\n// ---------------------------------------------------------------------------\n\n/** Returns a FileCredentialStore with the default path (`~/.db9/credentials`). */\nexport function defaultCredentialStore(): CredentialStore {\n  return new FileCredentialStore();\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;;;ACAO,IAAM,WAAN,MAAM,kBAAiB,MAAM;AAAA,EACzB;AAAA,EACA;AAAA,EAET,YAAY,SAAiB,YAAoB,UAAqB;AACpE,UAAM,OAAO;AACb,SAAK,OAAO;AACZ,SAAK,aAAa;AAClB,SAAK,WAAW;AAAA,EAClB;AAAA,EAEA,aAAa,aAAa,UAAuC;AAE/D,QAAI;AACJ,QAAI;AACF,YAAM,OAAQ,MAAM,SAAS,KAAK;AAClC,gBAAU,KAAK,WAAW,SAAS;AAAA,IACrC,QAAQ;AACN,gBAAU,SAAS;AAAA,IACrB;AAGA,YAAQ,SAAS,QAAQ;AAAA,MACvB,KAAK;AACH,eAAO,IAAI,aAAa,SAAS,QAAQ;AAAA,MAC3C,KAAK;AACH,eAAO,IAAI,iBAAiB,SAAS,QAAQ;AAAA,MAC/C,KAAK;AACH,eAAO,IAAI,iBAAiB,SAAS,QAAQ;AAAA,MAC/C;AACE,eAAO,IAAI,UAAS,SAAS,SAAS,QAAQ,QAAQ;AAAA,IAC1D;AAAA,EACF;AACF;AAEO,IAAM,eAAN,cAA2B,SAAS;AAAA,EACzC,YAAY,SAAiB,UAAqB;AAChD,UAAM,SAAS,KAAK,QAAQ;AAC5B,SAAK,OAAO;AAAA,EACd;AACF;AAEO,IAAM,mBAAN,cAA+B,SAAS;AAAA,EAC7C,YAAY,SAAiB,UAAqB;AAChD,UAAM,SAAS,KAAK,QAAQ;AAC5B,SAAK,OAAO;AAAA,EACd;AACF;AAEO,IAAM,mBAAN,cAA+B,SAAS;AAAA,EAC7C,YAAY,SAAiB,UAAqB;AAChD,UAAM,SAAS,KAAK,QAAQ;AAC5B,SAAK,OAAO;AAAA,EACd;AACF;;;ACrCO,SAAS,iBAAiB,SAAwC;AACvE,QAAM,UAAU,QAAQ,SAAS,WAAW;AAC5C,QAAM,UAAU,QAAQ,QAAQ,QAAQ,OAAO,EAAE;AAEjD,iBAAe,QACb,QACA,MACA,MACA,QACY;AACZ,QAAI,MAAM,GAAG,OAAO,GAAG,IAAI;AAG3B,QAAI,QAAQ;AACV,YAAM,eAAe,IAAI,gBAAgB;AACzC,iBAAW,CAAC,KAAK,KAAK,KAAK,OAAO,QAAQ,MAAM,GAAG;AACjD,YAAI,UAAU,QAAW;AACvB,uBAAa,IAAI,KAAK,KAAK;AAAA,QAC7B;AAAA,MACF;AACA,YAAM,KAAK,aAAa,SAAS;AACjC,UAAI,GAAI,QAAO,IAAI,EAAE;AAAA,IACvB;AAEA,UAAM,UAAkC;AAAA,MACtC,gBAAgB;AAAA,MAChB,GAAG,QAAQ;AAAA,IACb;AAEA,UAAM,OAAoB,EAAE,QAAQ,QAAQ;AAC5C,QAAI,SAAS,QAAW;AACtB,WAAK,OAAO,KAAK,UAAU,IAAI;AAAA,IACjC;AAEA,UAAM,WAAW,MAAM,QAAQ,KAAK,IAAI;AAExC,QAAI,CAAC,SAAS,IAAI;AAChB,YAAM,MAAM,SAAS,aAAa,QAAQ;AAAA,IAC5C;AAGA,QAAI,SAAS,WAAW,KAAK;AAC3B,aAAO;AAAA,IACT;AAEA,WAAO,SAAS,KAAK;AAAA,EACvB;AAEA,SAAO;AAAA,IACL,KAAK,CAAI,MAAc,WACrB,QAAW,OAAO,MAAM,QAAW,MAAM;AAAA,IAC3C,MAAM,CAAI,MAAc,SAAmB,QAAW,QAAQ,MAAM,IAAI;AAAA,IACxE,KAAK,CAAI,MAAc,SAAmB,QAAW,OAAO,MAAM,IAAI;AAAA,IACtE,KAAK,CAAI,SAAiB,QAAW,UAAU,IAAI;AAAA,EACrD;AACF;;;ACxEA,kBAA+D;AAyBxD,IAAM,sBAAN,MAAqD;AAAA,EACzC;AAAA;AAAA;AAAA;AAAA;AAAA,EAMjB,YAAY,MAAe;AACzB,SAAK,aAAa;AAAA,EACpB;AAAA;AAAA,EAGA,MAAc,cAA+B;AAC3C,QAAI,KAAK,WAAY,QAAO,KAAK;AACjC,UAAM,KAAK,MAAM,OAAO,IAAS;AACjC,UAAM,WAAW,MAAM,OAAO,MAAW;AACzC,WAAO,SAAS,KAAK,GAAG,QAAQ,GAAG,QAAQ,aAAa;AAAA,EAC1D;AAAA,EAEA,MAAM,OAAoC;AACxC,UAAM,KAAK,MAAM,OAAO,aAAkB;AAC1C,UAAM,WAAW,MAAM,KAAK,YAAY;AAExC,QAAI;AACJ,QAAI;AACF,gBAAU,MAAM,GAAG,SAAS,UAAU,OAAO;AAAA,IAC/C,SAAS,KAAc;AACrB,UAAK,IAA8B,SAAS,SAAU,QAAO;AAC7D,YAAM;AAAA,IACR;AAEA,UAAM,aAAS,YAAAA,OAAU,OAAO;AAChC,UAAM,QAAQ,OAAO,OAAO;AAC5B,QAAI,OAAO,UAAU,SAAU,QAAO;AAEtC,UAAM,QAAqB,EAAE,MAAM;AACnC,QAAI,OAAO,OAAO,cAAc,MAAM,WAAW;AAC/C,YAAM,eAAe,OAAO,cAAc;AAAA,IAC5C;AACA,QAAI,OAAO,OAAO,cAAc,MAAM,UAAU;AAC9C,YAAM,eAAe,OAAO,cAAc;AAAA,IAC5C;AACA,QAAI,OAAO,OAAO,kBAAkB,MAAM,UAAU;AAClD,YAAM,mBAAmB,OAAO,kBAAkB;AAAA,IACpD;AAEA,WAAO;AAAA,EACT;AAAA,EAEA,MAAM,KAAK,aAAyC;AAClD,UAAM,KAAK,MAAM,OAAO,aAAkB;AAC1C,UAAM,WAAW,MAAM,OAAO,MAAW;AACzC,UAAM,WAAW,MAAM,KAAK,YAAY;AACxC,UAAM,MAAM,SAAS,QAAQ,QAAQ;AAGrC,UAAM,GAAG,MAAM,KAAK,EAAE,WAAW,MAAM,MAAM,IAAM,CAAC;AAGpD,UAAM,OAAkD,CAAC;AACzD,QAAI;AACF,YAAM,MAAM,MAAM,GAAG,SAAS,UAAU,OAAO;AAC/C,YAAM,aAAS,YAAAA,OAAU,GAAG;AAC5B,iBAAW,CAAC,GAAG,CAAC,KAAK,OAAO,QAAQ,MAAM,GAAG;AAC3C,YAAI,OAAO,MAAM,YAAY,OAAO,MAAM,aAAa,OAAO,MAAM,UAAU;AAC5E,eAAK,CAAC,IAAI;AAAA,QACZ;AAAA,MACF;AAAA,IACF,SAAS,KAAc;AACrB,UAAK,IAA8B,SAAS,SAAU,OAAM;AAAA,IAC9D;AAGA,SAAK,OAAO,IAAI,YAAY;AAC5B,QAAI,YAAY,iBAAiB,QAAW;AAC1C,WAAK,cAAc,IAAI,YAAY;AAAA,IACrC;AACA,QAAI,YAAY,iBAAiB,QAAW;AAC1C,WAAK,cAAc,IAAI,YAAY;AAAA,IACrC;AACA,QAAI,YAAY,qBAAqB,QAAW;AAC9C,WAAK,kBAAkB,IAAI,YAAY;AAAA,IACzC;AAGA,UAAM,WAAO,YAAAC;AAAA,MACX;AAAA,IACF;AACA,UAAM,GAAG,UAAU,UAAU,MAAM,EAAE,MAAM,IAAM,CAAC;AAAA,EACpD;AAAA,EAEA,MAAM,QAAuB;AAC3B,UAAM,KAAK,MAAM,OAAO,aAAkB;AAC1C,UAAM,WAAW,MAAM,KAAK,YAAY;AAExC,QAAI;AACF,YAAM,GAAG,OAAO,QAAQ;AAAA,IAC1B,SAAS,KAAc;AACrB,UAAK,IAA8B,SAAS,SAAU,OAAM;AAAA,IAC9D;AAAA,EACF;AACF;AAgCO,SAAS,yBAA0C;AACxD,SAAO,IAAI,oBAAoB;AACjC;;;AHvHO,SAAS,gBAAgB,UAA4B,CAAC,GAAG;AAC9D,QAAM,UACJ,QAAQ,WAAW;AACrB,MAAI,QAAQ,QAAQ;AACpB,MAAI,cAAc,CAAC,CAAC;AACpB,QAAM,QAAQ,QAAQ,mBAAmB,uBAAuB;AAGhE,QAAM,eAAe,iBAAiB;AAAA,IACpC;AAAA,IACA,OAAO,QAAQ;AAAA,EACjB,CAAC;AAGD,iBAAe,gBAAqC;AAClD,QAAI,CAAC,SAAS,CAAC,aAAa;AAC1B,YAAM,QAAQ,MAAM,MAAM,KAAK;AAC/B,UAAI,OAAO,MAAO,SAAQ,MAAM;AAChC,oBAAc;AAAA,IAChB;AACA,QAAI,CAAC,OAAO;AACV,YAAM,MAAM,MAAM,aAAa;AAAA,QAC7B;AAAA,MACF;AACA,cAAQ,IAAI;AACZ,YAAM,MAAM,KAAK;AAAA,QACf,OAAO,IAAI;AAAA,QACX,cAAc,IAAI;AAAA,QAClB,cAAc,IAAI;AAAA,QAClB,kBAAkB,IAAI;AAAA,MACxB,CAAC;AAAA,IACH;AACA,WAAO,iBAAiB;AAAA,MACtB;AAAA,MACA,OAAO,QAAQ;AAAA,MACf,SAAS,EAAE,eAAe,UAAU,KAAK,GAAG;AAAA,IAC9C,CAAC;AAAA,EACH;AAEA,SAAO;AAAA,IACL,MAAM;AAAA;AAAA,MAEJ,UAAU,CAAC,QACT,aAAa,KAAuB,sBAAsB,GAAG;AAAA,MAE/D,OAAO,CAAC,QACN,aAAa,KAAoB,mBAAmB,GAAG;AAAA,MAEzD,mBAAmB,MACjB,aAAa;AAAA,QACX;AAAA,MACF;AAAA,MAEF,kBAAkB,CAAC,QACjB,aAAa;AAAA,QACX;AAAA,QACA;AAAA,MACF;AAAA;AAAA,MAGF,IAAI,YAAY;AACd,cAAM,SAAS,MAAM,cAAc;AACnC,eAAO,OAAO,IAAsB,cAAc;AAAA,MACpD;AAAA,MAEA,oBAAoB,YAAY;AAC9B,cAAM,SAAS,MAAM,cAAc;AACnC,eAAO,OAAO;AAAA,UACZ;AAAA,QACF;AAAA,MACF;AAAA,MAEA,OAAO,OAAO,QAAsB;AAClC,cAAM,SAAS,MAAM,cAAc;AACnC,eAAO,OAAO,KAAoB,mBAAmB,GAAG;AAAA,MAC1D;AAAA,IACF;AAAA,IAEA,QAAQ;AAAA,MACN,MAAM,YAAY;AAChB,cAAM,SAAS,MAAM,cAAc;AACnC,eAAO,OAAO,IAAqB,kBAAkB;AAAA,MACvD;AAAA,MAEA,QAAQ,OAAO,YAAoB;AACjC,cAAM,SAAS,MAAM,cAAc;AACnC,eAAO,OAAO,IAAqB,oBAAoB,OAAO,EAAE;AAAA,MAClE;AAAA,IACF;AAAA,IAEA,WAAW;AAAA;AAAA,MAET,QAAQ,OAAO,QAA+B;AAC5C,cAAM,SAAS,MAAM,cAAc;AACnC,eAAO,OAAO,KAAuB,uBAAuB,GAAG;AAAA,MACjE;AAAA,MAEA,MAAM,YAAY;AAChB,cAAM,SAAS,MAAM,cAAc;AACnC,eAAO,OAAO,IAAwB,qBAAqB;AAAA,MAC7D;AAAA,MAEA,KAAK,OAAO,eAAuB;AACjC,cAAM,SAAS,MAAM,cAAc;AACnC,eAAO,OAAO;AAAA,UACZ,uBAAuB,UAAU;AAAA,QACnC;AAAA,MACF;AAAA,MAEA,QAAQ,OAAO,eAAuB;AACpC,cAAM,SAAS,MAAM,cAAc;AACnC,eAAO,OAAO;AAAA,UACZ,uBAAuB,UAAU;AAAA,QACnC;AAAA,MACF;AAAA,MAEA,eAAe,OAAO,eAAuB;AAC3C,cAAM,SAAS,MAAM,cAAc;AACnC,eAAO,OAAO;AAAA,UACZ,uBAAuB,UAAU;AAAA,QACnC;AAAA,MACF;AAAA,MAEA,eAAe,OAAO,eAAuB;AAC3C,cAAM,SAAS,MAAM,cAAc;AACnC,eAAO,OAAO;AAAA,UACZ,uBAAuB,UAAU;AAAA,QACnC;AAAA,MACF;AAAA;AAAA,MAGA,KAAK,OAAO,YAAoB,UAAkB;AAChD,cAAM,SAAS,MAAM,cAAc;AACnC,eAAO,OAAO;AAAA,UACZ,uBAAuB,UAAU;AAAA,UACjC,EAAE,MAAM;AAAA,QACV;AAAA,MACF;AAAA,MAEA,SAAS,OAAO,YAAoB,gBAAwB;AAC1D,cAAM,SAAS,MAAM,cAAc;AACnC,eAAO,OAAO;AAAA,UACZ,uBAAuB,UAAU;AAAA,UACjC,EAAE,cAAc,YAAY;AAAA,QAC9B;AAAA,MACF;AAAA;AAAA,MAGA,QAAQ,OAAO,eAAuB;AACpC,cAAM,SAAS,MAAM,cAAc;AACnC,eAAO,OAAO;AAAA,UACZ,uBAAuB,UAAU;AAAA,QACnC;AAAA,MACF;AAAA,MAEA,MAAM,OAAO,YAAoB,QAAsB;AACrD,cAAM,SAAS,MAAM,cAAc;AACnC,eAAO,OAAO;AAAA,UACZ,uBAAuB,UAAU;AAAA,UACjC;AAAA,QACF;AAAA,MACF;AAAA;AAAA,MAGA,gBAAgB,OACd,YACA,QACG;AACH,cAAM,SAAS,MAAM,cAAc;AACnC,eAAO,OAAO;AAAA,UACZ,uBAAuB,UAAU;AAAA,UACjC;AAAA,QACF;AAAA,MACF;AAAA,MAEA,gBAAgB,OAAO,eAAuB;AAC5C,cAAM,SAAS,MAAM,cAAc;AACnC,eAAO,OAAO;AAAA,UACZ,uBAAuB,UAAU;AAAA,QACnC;AAAA,MACF;AAAA;AAAA,MAGA,QAAQ,OAAO,YAAoB,QAAuB;AACxD,cAAM,SAAS,MAAM,cAAc;AACnC,eAAO,OAAO;AAAA,UACZ,uBAAuB,UAAU;AAAA,UACjC;AAAA,QACF;AAAA,MACF;AAAA;AAAA,MAGA,OAAO;AAAA,QACL,MAAM,OAAO,eAAuB;AAClC,gBAAM,SAAS,MAAM,cAAc;AACnC,iBAAO,OAAO;AAAA,YACZ,uBAAuB,UAAU;AAAA,UACnC;AAAA,QACF;AAAA,QAEA,QAAQ,OAAO,YAAoB,QAA2B;AAC5D,gBAAM,SAAS,MAAM,cAAc;AACnC,iBAAO,OAAO;AAAA,YACZ,uBAAuB,UAAU;AAAA,YACjC;AAAA,UACF;AAAA,QACF;AAAA,QAEA,QAAQ,OAAO,YAAoB,aAAqB;AACtD,gBAAM,SAAS,MAAM,cAAc;AACnC,iBAAO,OAAO;AAAA,YACZ,uBAAuB,UAAU,UAAU,QAAQ;AAAA,UACrD;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACF;","names":["parseToml","stringifyToml"]}

package/dist/client.d.cts

@@ -0,0 +1 @@
+export { y as Db9Client, z as Db9ClientOptions, ad as createDb9Client } from './client-CSOh3r_q.cjs';

package/dist/client.d.ts

@@ -0,0 +1 @@
+export { y as Db9Client, z as Db9ClientOptions, ad as createDb9Client } from './client-CSOh3r_q.js';

package/dist/{customer.js → client.js}

@@ -88,22 +88,124 @@ function createHttpClient(options) {
   };
 }
 
-// src/customer.ts
-function createCustomerClient(options = {}) {
+// src/credentials.ts
+import { parse as parseToml, stringify as stringifyToml } from "@iarna/toml";
+var FileCredentialStore = class {
+  customPath;
+  /**
+   * @param path — Override the credential file location.
+   *               Defaults to `~/.db9/credentials` (resolved lazily).
+   */
+  constructor(path) {
+    this.customPath = path;
+  }
+  /** Resolve the credential file path (lazy to avoid top-level `os` import). */
+  async resolvePath() {
+    if (this.customPath) return this.customPath;
+    const os = await import("os");
+    const nodePath = await import("path");
+    return nodePath.join(os.homedir(), ".db9", "credentials");
+  }
+  async load() {
+    const fs = await import("fs/promises");
+    const filePath = await this.resolvePath();
+    let content;
+    try {
+      content = await fs.readFile(filePath, "utf-8");
+    } catch (err) {
+      if (err.code === "ENOENT") return null;
+      throw err;
+    }
+    const parsed = parseToml(content);
+    const token = parsed["token"];
+    if (typeof token !== "string") return null;
+    const creds = { token };
+    if (typeof parsed["is_anonymous"] === "boolean") {
+      creds.is_anonymous = parsed["is_anonymous"];
+    }
+    if (typeof parsed["anonymous_id"] === "string") {
+      creds.anonymous_id = parsed["anonymous_id"];
+    }
+    if (typeof parsed["anonymous_secret"] === "string") {
+      creds.anonymous_secret = parsed["anonymous_secret"];
+    }
+    return creds;
+  }
+  async save(credentials) {
+    const fs = await import("fs/promises");
+    const nodePath = await import("path");
+    const filePath = await this.resolvePath();
+    const dir = nodePath.dirname(filePath);
+    await fs.mkdir(dir, { recursive: true, mode: 448 });
+    const data = {};
+    try {
+      const raw = await fs.readFile(filePath, "utf-8");
+      const parsed = parseToml(raw);
+      for (const [k, v] of Object.entries(parsed)) {
+        if (typeof v === "string" || typeof v === "boolean" || typeof v === "number") {
+          data[k] = v;
+        }
+      }
+    } catch (err) {
+      if (err.code !== "ENOENT") throw err;
+    }
+    data["token"] = credentials.token;
+    if (credentials.is_anonymous !== void 0) {
+      data["is_anonymous"] = credentials.is_anonymous;
+    }
+    if (credentials.anonymous_id !== void 0) {
+      data["anonymous_id"] = credentials.anonymous_id;
+    }
+    if (credentials.anonymous_secret !== void 0) {
+      data["anonymous_secret"] = credentials.anonymous_secret;
+    }
+    const toml = stringifyToml(
+      data
+    );
+    await fs.writeFile(filePath, toml, { mode: 384 });
+  }
+  async clear() {
+    const fs = await import("fs/promises");
+    const filePath = await this.resolvePath();
+    try {
+      await fs.unlink(filePath);
+    } catch (err) {
+      if (err.code !== "ENOENT") throw err;
+    }
+  }
+};
+function defaultCredentialStore() {
+  return new FileCredentialStore();
+}
+
+// src/client.ts
+function createDb9Client(options = {}) {
   const baseUrl = options.baseUrl ?? "https://db9.shared.aws.tidbcloud.com/api";
   let token = options.token;
   let tokenLoaded = !!token;
+  const store = options.credentialStore ?? defaultCredentialStore();
   const publicClient = createHttpClient({
     baseUrl,
     fetch: options.fetch
   });
   async function getAuthClient() {
-    if (!token && !tokenLoaded && options.credentialStore) {
-      const creds = await options.credentialStore.load();
-      if (creds) token = creds.token;
+    if (!token && !tokenLoaded) {
+      const creds = await store.load();
+      if (creds?.token) token = creds.token;
       tokenLoaded = true;
     }
-    if (!token) throw new Error("No authentication token available");
+    if (!token) {
+      const reg = await publicClient.post(
+        "/customer/anonymous-register"
+      );
+      token = reg.token;
+      await store.save({
+        token: reg.token,
+        is_anonymous: reg.is_anonymous,
+        anonymous_id: reg.anonymous_id,
+        anonymous_secret: reg.anonymous_secret
+      });
+    }
     return createHttpClient({
       baseUrl,
       fetch: options.fetch,
@@ -259,6 +361,6 @@ function createCustomerClient(options = {}) {
   };
 }
 export {
-  createCustomerClient
+  createDb9Client
 };
-//# sourceMappingURL=customer.js.map
+//# sourceMappingURL=client.js.map