get-db9 0.3.0 → 0.4.0

package/dist/{client-CSOh3r_q.d.cts → client-fUeI7kwU.d.cts}

@@ -1,4 +1,5 @@
 type FetchFn = typeof globalThis.fetch;
+type BodyInit = string | Blob | ArrayBuffer | FormData | URLSearchParams | ReadableStream<Uint8Array>;
 interface HttpClientOptions {
     baseUrl: string;
     fetch?: FetchFn;
@@ -9,6 +10,8 @@ interface HttpClient {
     post<T>(path: string, body?: unknown): Promise<T>;
     put<T>(path: string, body?: unknown): Promise<T>;
     del<T>(path: string): Promise<T>;
+    getRaw(path: string, params?: Record<string, string | undefined>): Promise<Response>;
+    putRaw(path: string, body: BodyInit, headers?: Record<string, string>): Promise<Response>;
 }
 
 /** Credential fields stored in `~/.db9/credentials` (TOML). */
@@ -46,6 +49,28 @@ declare class MemoryCredentialStore implements CredentialStore {
 /** Returns a FileCredentialStore with the default path (`~/.db9/credentials`). */
 declare function defaultCredentialStore(): CredentialStore;
 
+/** A file or directory entry from fs9 readdir API */
+interface Fs9FileInfo {
+    path: string;
+    type: 'file' | 'dir';
+    size: number;
+    mode: number;
+    mtime: string;
+}
+/** Response from fs9 stat API */
+interface Fs9StatResponse {
+    path: string;
+    is_dir: boolean;
+    is_file: boolean;
+    size: number;
+    mode: number;
+    mtime: number;
+}
+/** Options for fs9 list operation */
+interface Fs9ListOptions {
+    recursive?: boolean;
+}
+
 interface Endpoint {
     host: string;
     port: number;
@@ -393,6 +418,12 @@ declare function createDb9Client(options?: Db9ClientOptions): {
             delete: (databaseId: string, username: string) => Promise<MessageResponse>;
         };
     };
+    fs: {
+        list: (dbId: string, path: string, options?: Fs9ListOptions) => Promise<Fs9FileInfo[]>;
+        read: (dbId: string, path: string) => Promise<string>;
+        write: (dbId: string, path: string, content: string) => Promise<void>;
+        stat: (dbId: string, path: string) => Promise<Fs9StatResponse>;
+    };
 };
 type Db9Client = ReturnType<typeof createDb9Client>;
 

package/dist/{client-CSOh3r_q.d.ts → client-fUeI7kwU.d.ts}

@@ -1,4 +1,5 @@
 type FetchFn = typeof globalThis.fetch;
+type BodyInit = string | Blob | ArrayBuffer | FormData | URLSearchParams | ReadableStream<Uint8Array>;
 interface HttpClientOptions {
     baseUrl: string;
     fetch?: FetchFn;
@@ -9,6 +10,8 @@ interface HttpClient {
     post<T>(path: string, body?: unknown): Promise<T>;
     put<T>(path: string, body?: unknown): Promise<T>;
     del<T>(path: string): Promise<T>;
+    getRaw(path: string, params?: Record<string, string | undefined>): Promise<Response>;
+    putRaw(path: string, body: BodyInit, headers?: Record<string, string>): Promise<Response>;
 }
 
 /** Credential fields stored in `~/.db9/credentials` (TOML). */
@@ -46,6 +49,28 @@ declare class MemoryCredentialStore implements CredentialStore {
 /** Returns a FileCredentialStore with the default path (`~/.db9/credentials`). */
 declare function defaultCredentialStore(): CredentialStore;
 
+/** A file or directory entry from fs9 readdir API */
+interface Fs9FileInfo {
+    path: string;
+    type: 'file' | 'dir';
+    size: number;
+    mode: number;
+    mtime: string;
+}
+/** Response from fs9 stat API */
+interface Fs9StatResponse {
+    path: string;
+    is_dir: boolean;
+    is_file: boolean;
+    size: number;
+    mode: number;
+    mtime: number;
+}
+/** Options for fs9 list operation */
+interface Fs9ListOptions {
+    recursive?: boolean;
+}
+
 interface Endpoint {
     host: string;
     port: number;
@@ -393,6 +418,12 @@ declare function createDb9Client(options?: Db9ClientOptions): {
             delete: (databaseId: string, username: string) => Promise<MessageResponse>;
         };
     };
+    fs: {
+        list: (dbId: string, path: string, options?: Fs9ListOptions) => Promise<Fs9FileInfo[]>;
+        read: (dbId: string, path: string) => Promise<string>;
+        write: (dbId: string, path: string, content: string) => Promise<void>;
+        stat: (dbId: string, path: string) => Promise<Fs9StatResponse>;
+    };
 };
 type Db9Client = ReturnType<typeof createDb9Client>;
 

package/dist/client.cjs

@@ -116,11 +116,39 @@ function createHttpClient(options) {
     }
     return response.json();
   }
+  async function requestRaw(method, path, body, params, customHeaders) {
+    let url = `${baseUrl}${path}`;
+    if (params) {
+      const searchParams = new URLSearchParams();
+      for (const [key, value] of Object.entries(params)) {
+        if (value !== void 0) {
+          searchParams.set(key, value);
+        }
+      }
+      const qs = searchParams.toString();
+      if (qs) url += `?${qs}`;
+    }
+    const headers = {
+      ...options.headers,
+      ...customHeaders
+    };
+    const init = { method, headers };
+    if (body !== void 0) {
+      init.body = body;
+    }
+    const response = await fetchFn(url, init);
+    if (!response.ok) {
+      throw await Db9Error.fromResponse(response);
+    }
+    return response;
+  }
   return {
     get: (path, params) => request("GET", path, void 0, params),
     post: (path, body) => request("POST", path, body),
     put: (path, body) => request("PUT", path, body),
-    del: (path) => request("DELETE", path)
+    del: (path) => request("DELETE", path),
+    getRaw: (path, params) => requestRaw("GET", path, void 0, params),
+    putRaw: (path, body, headers) => requestRaw("PUT", path, body, void 0, headers)
   };
 }
 
@@ -220,6 +248,7 @@ function createDb9Client(options = {}) {
   let token = options.token;
   let tokenLoaded = !!token;
   const store = options.credentialStore ?? defaultCredentialStore();
+  const fetchFn = options.fetch ?? globalThis.fetch;
   const publicClient = createHttpClient({
     baseUrl,
     fetch: options.fetch
@@ -248,6 +277,33 @@ function createDb9Client(options = {}) {
       headers: { Authorization: `Bearer ${token}` }
     });
   }
+  function deriveFs9Url(dbId) {
+    const origin = baseUrl.replace(/\/api\/?$/, "");
+    return `${origin}/fs9/${dbId}`;
+  }
+  async function fsRequest(method, dbId, fsPath, body) {
+    if (!token && !tokenLoaded) {
+      await getAuthClient();
+    }
+    const fs9Url = deriveFs9Url(dbId);
+    const url = `${fs9Url}/api/v1${fsPath}`;
+    const headers = {};
+    if (token) {
+      headers["Authorization"] = `Bearer ${token}`;
+    }
+    if (body !== void 0) {
+      headers["Content-Type"] = "text/plain";
+    }
+    const init = { method, headers };
+    if (body !== void 0) {
+      init.body = body;
+    }
+    const response = await fetchFn(url, init);
+    if (!response.ok) {
+      throw await Db9Error.fromResponse(response);
+    }
+    return response;
+  }
   return {
     auth: {
       // Public endpoints (no token required)
@@ -393,6 +449,40 @@ function createDb9Client(options = {}) {
           );
         }
       }
+    },
+    fs: {
+      list: async (dbId, path, options2) => {
+        const params = new URLSearchParams({ path });
+        if (options2?.recursive) params.set("recursive", "true");
+        const response = await fsRequest(
+          "GET",
+          dbId,
+          `/readdir?${params.toString()}`
+        );
+        return response.json();
+      },
+      read: async (dbId, path) => {
+        const params = new URLSearchParams({ path });
+        const response = await fsRequest(
+          "GET",
+          dbId,
+          `/download?${params.toString()}`
+        );
+        return response.text();
+      },
+      write: async (dbId, path, content) => {
+        const params = new URLSearchParams({ path });
+        await fsRequest("PUT", dbId, `/upload?${params.toString()}`, content);
+      },
+      stat: async (dbId, path) => {
+        const params = new URLSearchParams({ path });
+        const response = await fsRequest(
+          "GET",
+          dbId,
+          `/stat?${params.toString()}`
+        );
+        return response.json();
+      }
     }
   };
 }

package/dist/client.cjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/client.ts","../src/errors.ts","../src/http.ts","../src/credentials.ts"],"sourcesContent":["import { createHttpClient, type FetchFn, type HttpClient } from './http';\nimport {\n  defaultCredentialStore,\n  type CredentialStore,\n} from './credentials';\nimport type {\n  RegisterRequest,\n  CustomerResponse,\n  LoginRequest,\n  LoginResponse,\n  AnonymousRegisterResponse,\n  AnonymousRefreshRequest,\n  AnonymousRefreshResponse,\n  AnonymousSecretResponse,\n  ClaimRequest,\n  ClaimResponse,\n  TokenResponse,\n  MessageResponse,\n  CreateDatabaseRequest,\n  DatabaseResponse,\n  CustomerPasswordResetResponse,\n  TenantObservabilityResponse,\n  SqlResult,\n  SchemaResponse,\n  DumpRequest,\n  DumpResponse,\n  MigrationApplyRequest,\n  MigrationApplyResponse,\n  MigrationMetadata,\n  BranchRequest,\n  UserResponse,\n  CreateUserRequest,\n} from './types';\n\nexport interface Db9ClientOptions {\n  baseUrl?: string;\n  token?: string;\n  fetch?: FetchFn;\n  credentialStore?: CredentialStore;\n}\n\nexport function createDb9Client(options: Db9ClientOptions = {}) {\n  const baseUrl =\n    options.baseUrl ?? 'https://db9.shared.aws.tidbcloud.com/api';\n  let token = options.token;\n  let tokenLoaded = !!token;\n  const store = options.credentialStore ?? defaultCredentialStore();\n\n  // Public HTTP client — no Authorization header\n  const publicClient = createHttpClient({\n    baseUrl,\n    fetch: options.fetch,\n  });\n\n  // Lazy-loading authenticated HTTP client\n  async function getAuthClient(): Promise<HttpClient> {\n    if (!token && !tokenLoaded) {\n      const creds = await store.load();\n      if (creds?.token) token = creds.token;\n      tokenLoaded = true;\n    }\n    if (!token) {\n      const reg = await publicClient.post<AnonymousRegisterResponse>(\n        '/customer/anonymous-register'\n      );\n      token = reg.token;\n      await store.save({\n        token: reg.token,\n        is_anonymous: reg.is_anonymous,\n        anonymous_id: reg.anonymous_id,\n        anonymous_secret: reg.anonymous_secret,\n      });\n    }\n    return createHttpClient({\n      baseUrl,\n      fetch: options.fetch,\n      headers: { Authorization: `Bearer ${token}` },\n    });\n  }\n\n  return {\n    auth: {\n      // Public endpoints (no token required)\n      register: (req: RegisterRequest) =>\n        publicClient.post<CustomerResponse>('/customer/register', req),\n\n      login: (req: LoginRequest) =>\n        publicClient.post<LoginResponse>('/customer/login', req),\n\n      anonymousRegister: () =>\n        publicClient.post<AnonymousRegisterResponse>(\n          '/customer/anonymous-register'\n        ),\n\n      anonymousRefresh: (req: AnonymousRefreshRequest) =>\n        publicClient.post<AnonymousRefreshResponse>(\n          '/customer/anonymous-refresh',\n          req\n        ),\n\n      // Authenticated endpoints\n      me: async () => {\n        const client = await getAuthClient();\n        return client.get<CustomerResponse>('/customer/me');\n      },\n\n      getAnonymousSecret: async () => {\n        const client = await getAuthClient();\n        return client.get<AnonymousSecretResponse>(\n          '/customer/anonymous-secret'\n        );\n      },\n\n      claim: async (req: ClaimRequest) => {\n        const client = await getAuthClient();\n        return client.post<ClaimResponse>('/customer/claim', req);\n      },\n    },\n\n    tokens: {\n      list: async () => {\n        const client = await getAuthClient();\n        return client.get<TokenResponse[]>('/customer/tokens');\n      },\n\n      revoke: async (tokenId: string) => {\n        const client = await getAuthClient();\n        return client.del<MessageResponse>(`/customer/tokens/${tokenId}`);\n      },\n    },\n\n    databases: {\n      // ── CRUD ──────────────────────────────────────────────────\n      create: async (req: CreateDatabaseRequest) => {\n        const client = await getAuthClient();\n        return client.post<DatabaseResponse>('/customer/databases', req);\n      },\n\n      list: async () => {\n        const client = await getAuthClient();\n        return client.get<DatabaseResponse[]>('/customer/databases');\n      },\n\n      get: async (databaseId: string) => {\n        const client = await getAuthClient();\n        return client.get<DatabaseResponse>(\n          `/customer/databases/${databaseId}`\n        );\n      },\n\n      delete: async (databaseId: string) => {\n        const client = await getAuthClient();\n        return client.del<MessageResponse>(\n          `/customer/databases/${databaseId}`\n        );\n      },\n\n      resetPassword: async (databaseId: string) => {\n        const client = await getAuthClient();\n        return client.post<CustomerPasswordResetResponse>(\n          `/customer/databases/${databaseId}/reset-password`\n        );\n      },\n\n      observability: async (databaseId: string) => {\n        const client = await getAuthClient();\n        return client.get<TenantObservabilityResponse>(\n          `/customer/databases/${databaseId}/observability`\n        );\n      },\n\n      // ── SQL Execution ─────────────────────────────────────────\n      sql: async (databaseId: string, query: string) => {\n        const client = await getAuthClient();\n        return client.post<SqlResult>(\n          `/customer/databases/${databaseId}/sql`,\n          { query }\n        );\n      },\n\n      sqlFile: async (databaseId: string, fileContent: string) => {\n        const client = await getAuthClient();\n        return client.post<SqlResult>(\n          `/customer/databases/${databaseId}/sql`,\n          { file_content: fileContent }\n        );\n      },\n\n      // ── Schema & Dump ─────────────────────────────────────────\n      schema: async (databaseId: string) => {\n        const client = await getAuthClient();\n        return client.get<SchemaResponse>(\n          `/customer/databases/${databaseId}/schema`\n        );\n      },\n\n      dump: async (databaseId: string, req?: DumpRequest) => {\n        const client = await getAuthClient();\n        return client.post<DumpResponse>(\n          `/customer/databases/${databaseId}/dump`,\n          req\n        );\n      },\n\n      // ── Migrations ────────────────────────────────────────────\n      applyMigration: async (\n        databaseId: string,\n        req: MigrationApplyRequest\n      ) => {\n        const client = await getAuthClient();\n        return client.post<MigrationApplyResponse>(\n          `/customer/databases/${databaseId}/migrations`,\n          req\n        );\n      },\n\n      listMigrations: async (databaseId: string) => {\n        const client = await getAuthClient();\n        return client.get<MigrationMetadata[]>(\n          `/customer/databases/${databaseId}/migrations`\n        );\n      },\n\n      // ── Branching ─────────────────────────────────────────────\n      branch: async (databaseId: string, req: BranchRequest) => {\n        const client = await getAuthClient();\n        return client.post<DatabaseResponse>(\n          `/customer/databases/${databaseId}/branch`,\n          req\n        );\n      },\n\n      // ── User Management ───────────────────────────────────────\n      users: {\n        list: async (databaseId: string) => {\n          const client = await getAuthClient();\n          return client.get<UserResponse[]>(\n            `/customer/databases/${databaseId}/users`\n          );\n        },\n\n        create: async (databaseId: string, req: CreateUserRequest) => {\n          const client = await getAuthClient();\n          return client.post<MessageResponse>(\n            `/customer/databases/${databaseId}/users`,\n            req\n          );\n        },\n\n        delete: async (databaseId: string, username: string) => {\n          const client = await getAuthClient();\n          return client.del<MessageResponse>(\n            `/customer/databases/${databaseId}/users/${username}`\n          );\n        },\n      },\n    },\n  };\n}\n\nexport type Db9Client = ReturnType<typeof createDb9Client>;\n","export class Db9Error extends Error {\n  readonly statusCode: number;\n  readonly response?: Response;\n\n  constructor(message: string, statusCode: number, response?: Response) {\n    super(message);\n    this.name = 'Db9Error';\n    this.statusCode = statusCode;\n    this.response = response;\n  }\n\n  static async fromResponse(response: Response): Promise<Db9Error> {\n    // Parse { \"message\": string } body — the ONLY error format from the API\n    let message: string;\n    try {\n      const body = (await response.json()) as { message?: string };\n      message = body.message || response.statusText;\n    } catch {\n      message = response.statusText;\n    }\n\n    // Return specific subclass based on status code\n    switch (response.status) {\n      case 401:\n        return new Db9AuthError(message, response);\n      case 404:\n        return new Db9NotFoundError(message, response);\n      case 409:\n        return new Db9ConflictError(message, response);\n      default:\n        return new Db9Error(message, response.status, response);\n    }\n  }\n}\n\nexport class Db9AuthError extends Db9Error {\n  constructor(message: string, response?: Response) {\n    super(message, 401, response);\n    this.name = 'Db9AuthError';\n  }\n}\n\nexport class Db9NotFoundError extends Db9Error {\n  constructor(message: string, response?: Response) {\n    super(message, 404, response);\n    this.name = 'Db9NotFoundError';\n  }\n}\n\nexport class Db9ConflictError extends Db9Error {\n  constructor(message: string, response?: Response) {\n    super(message, 409, response);\n    this.name = 'Db9ConflictError';\n  }\n}\n","import { Db9Error } from './errors';\n\nexport type FetchFn = typeof globalThis.fetch;\n\nexport interface HttpClientOptions {\n  baseUrl: string;\n  fetch?: FetchFn;\n  headers?: Record<string, string>;\n}\n\nexport interface HttpClient {\n  get<T>(path: string, params?: Record<string, string | undefined>): Promise<T>;\n  post<T>(path: string, body?: unknown): Promise<T>;\n  put<T>(path: string, body?: unknown): Promise<T>;\n  del<T>(path: string): Promise<T>;\n}\n\nexport function createHttpClient(options: HttpClientOptions): HttpClient {\n  const fetchFn = options.fetch ?? globalThis.fetch;\n  const baseUrl = options.baseUrl.replace(/\\/$/, ''); // strip trailing slash\n\n  async function request<T>(\n    method: string,\n    path: string,\n    body?: unknown,\n    params?: Record<string, string | undefined>\n  ): Promise<T> {\n    let url = `${baseUrl}${path}`;\n\n    // Append query params for GET requests\n    if (params) {\n      const searchParams = new URLSearchParams();\n      for (const [key, value] of Object.entries(params)) {\n        if (value !== undefined) {\n          searchParams.set(key, value);\n        }\n      }\n      const qs = searchParams.toString();\n      if (qs) url += `?${qs}`;\n    }\n\n    const headers: Record<string, string> = {\n      'Content-Type': 'application/json',\n      ...options.headers,\n    };\n\n    const init: RequestInit = { method, headers };\n    if (body !== undefined) {\n      init.body = JSON.stringify(body);\n    }\n\n    const response = await fetchFn(url, init);\n\n    if (!response.ok) {\n      throw await Db9Error.fromResponse(response);\n    }\n\n    // Handle 204 No Content\n    if (response.status === 204) {\n      return undefined as T;\n    }\n\n    return response.json() as Promise<T>;\n  }\n\n  return {\n    get: <T>(path: string, params?: Record<string, string | undefined>) =>\n      request<T>('GET', path, undefined, params),\n    post: <T>(path: string, body?: unknown) => request<T>('POST', path, body),\n    put: <T>(path: string, body?: unknown) => request<T>('PUT', path, body),\n    del: <T>(path: string) => request<T>('DELETE', path),\n  };\n}\n","import { parse as parseToml, stringify as stringifyToml } from '@iarna/toml';\n\n// ---------------------------------------------------------------------------\n// Interfaces\n// ---------------------------------------------------------------------------\n\n/** Credential fields stored in `~/.db9/credentials` (TOML). */\nexport interface Credentials {\n  token: string;\n  is_anonymous?: boolean;\n  anonymous_id?: string;\n  anonymous_secret?: string;\n}\n\n/** Async credential persistence abstraction. */\nexport interface CredentialStore {\n  load(): Promise<Credentials | null>;\n  save(credentials: Credentials): Promise<void>;\n  clear(): Promise<void>;\n}\n\n// ---------------------------------------------------------------------------\n// FileCredentialStore — TOML file at ~/.db9/credentials (matches db9 CLI)\n// ---------------------------------------------------------------------------\n\nexport class FileCredentialStore implements CredentialStore {\n  private readonly customPath: string | undefined;\n\n  /**\n   * @param path — Override the credential file location.\n   *               Defaults to `~/.db9/credentials` (resolved lazily).\n   */\n  constructor(path?: string) {\n    this.customPath = path;\n  }\n\n  /** Resolve the credential file path (lazy to avoid top-level `os` import). */\n  private async resolvePath(): Promise<string> {\n    if (this.customPath) return this.customPath;\n    const os = await import('node:os');\n    const nodePath = await import('node:path');\n    return nodePath.join(os.homedir(), '.db9', 'credentials');\n  }\n\n  async load(): Promise<Credentials | null> {\n    const fs = await import('node:fs/promises');\n    const filePath = await this.resolvePath();\n\n    let content: string;\n    try {\n      content = await fs.readFile(filePath, 'utf-8');\n    } catch (err: unknown) {\n      if ((err as NodeJS.ErrnoException).code === 'ENOENT') return null;\n      throw err;\n    }\n\n    const parsed = parseToml(content);\n    const token = parsed['token'];\n    if (typeof token !== 'string') return null;\n\n    const creds: Credentials = { token };\n    if (typeof parsed['is_anonymous'] === 'boolean') {\n      creds.is_anonymous = parsed['is_anonymous'];\n    }\n    if (typeof parsed['anonymous_id'] === 'string') {\n      creds.anonymous_id = parsed['anonymous_id'];\n    }\n    if (typeof parsed['anonymous_secret'] === 'string') {\n      creds.anonymous_secret = parsed['anonymous_secret'];\n    }\n\n    return creds;\n  }\n\n  async save(credentials: Credentials): Promise<void> {\n    const fs = await import('node:fs/promises');\n    const nodePath = await import('node:path');\n    const filePath = await this.resolvePath();\n    const dir = nodePath.dirname(filePath);\n\n    // Ensure directory exists with 0o700 (matches CLI: ensure_config_dir)\n    await fs.mkdir(dir, { recursive: true, mode: 0o700 });\n\n    // Read → merge → write  (preserves unknown fields as scalars)\n    const data: Record<string, string | boolean | number> = {};\n    try {\n      const raw = await fs.readFile(filePath, 'utf-8');\n      const parsed = parseToml(raw);\n      for (const [k, v] of Object.entries(parsed)) {\n        if (typeof v === 'string' || typeof v === 'boolean' || typeof v === 'number') {\n          data[k] = v;\n        }\n      }\n    } catch (err: unknown) {\n      if ((err as NodeJS.ErrnoException).code !== 'ENOENT') throw err;\n    }\n\n    // Merge: always update token, only override optional fields when provided\n    data['token'] = credentials.token;\n    if (credentials.is_anonymous !== undefined) {\n      data['is_anonymous'] = credentials.is_anonymous;\n    }\n    if (credentials.anonymous_id !== undefined) {\n      data['anonymous_id'] = credentials.anonymous_id;\n    }\n    if (credentials.anonymous_secret !== undefined) {\n      data['anonymous_secret'] = credentials.anonymous_secret;\n    }\n\n    // Serialize and write with 0o600 permissions (matches CLI: save_token)\n    const toml = stringifyToml(\n      data as Parameters<typeof stringifyToml>[0],\n    );\n    await fs.writeFile(filePath, toml, { mode: 0o600 });\n  }\n\n  async clear(): Promise<void> {\n    const fs = await import('node:fs/promises');\n    const filePath = await this.resolvePath();\n\n    try {\n      await fs.unlink(filePath);\n    } catch (err: unknown) {\n      if ((err as NodeJS.ErrnoException).code !== 'ENOENT') throw err;\n    }\n  }\n}\n\n// ---------------------------------------------------------------------------\n// MemoryCredentialStore — in-memory, no persistence\n// ---------------------------------------------------------------------------\n\nexport class MemoryCredentialStore implements CredentialStore {\n  private credentials: Credentials | null = null;\n\n  async load(): Promise<Credentials | null> {\n    return this.credentials ? { ...this.credentials } : null;\n  }\n\n  async save(credentials: Credentials): Promise<void> {\n    this.credentials = {\n      token: credentials.token,\n      is_anonymous: credentials.is_anonymous ?? this.credentials?.is_anonymous,\n      anonymous_id: credentials.anonymous_id ?? this.credentials?.anonymous_id,\n      anonymous_secret: credentials.anonymous_secret ?? this.credentials?.anonymous_secret,\n    };\n  }\n\n  async clear(): Promise<void> {\n    this.credentials = null;\n  }\n}\n\n// ---------------------------------------------------------------------------\n// Factory\n// ---------------------------------------------------------------------------\n\n/** Returns a FileCredentialStore with the default path (`~/.db9/credentials`). */\nexport function defaultCredentialStore(): CredentialStore {\n  return new FileCredentialStore();\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;;;ACAO,IAAM,WAAN,MAAM,kBAAiB,MAAM;AAAA,EACzB;AAAA,EACA;AAAA,EAET,YAAY,SAAiB,YAAoB,UAAqB;AACpE,UAAM,OAAO;AACb,SAAK,OAAO;AACZ,SAAK,aAAa;AAClB,SAAK,WAAW;AAAA,EAClB;AAAA,EAEA,aAAa,aAAa,UAAuC;AAE/D,QAAI;AACJ,QAAI;AACF,YAAM,OAAQ,MAAM,SAAS,KAAK;AAClC,gBAAU,KAAK,WAAW,SAAS;AAAA,IACrC,QAAQ;AACN,gBAAU,SAAS;AAAA,IACrB;AAGA,YAAQ,SAAS,QAAQ;AAAA,MACvB,KAAK;AACH,eAAO,IAAI,aAAa,SAAS,QAAQ;AAAA,MAC3C,KAAK;AACH,eAAO,IAAI,iBAAiB,SAAS,QAAQ;AAAA,MAC/C,KAAK;AACH,eAAO,IAAI,iBAAiB,SAAS,QAAQ;AAAA,MAC/C;AACE,eAAO,IAAI,UAAS,SAAS,SAAS,QAAQ,QAAQ;AAAA,IAC1D;AAAA,EACF;AACF;AAEO,IAAM,eAAN,cAA2B,SAAS;AAAA,EACzC,YAAY,SAAiB,UAAqB;AAChD,UAAM,SAAS,KAAK,QAAQ;AAC5B,SAAK,OAAO;AAAA,EACd;AACF;AAEO,IAAM,mBAAN,cAA+B,SAAS;AAAA,EAC7C,YAAY,SAAiB,UAAqB;AAChD,UAAM,SAAS,KAAK,QAAQ;AAC5B,SAAK,OAAO;AAAA,EACd;AACF;AAEO,IAAM,mBAAN,cAA+B,SAAS;AAAA,EAC7C,YAAY,SAAiB,UAAqB;AAChD,UAAM,SAAS,KAAK,QAAQ;AAC5B,SAAK,OAAO;AAAA,EACd;AACF;;;ACrCO,SAAS,iBAAiB,SAAwC;AACvE,QAAM,UAAU,QAAQ,SAAS,WAAW;AAC5C,QAAM,UAAU,QAAQ,QAAQ,QAAQ,OAAO,EAAE;AAEjD,iBAAe,QACb,QACA,MACA,MACA,QACY;AACZ,QAAI,MAAM,GAAG,OAAO,GAAG,IAAI;AAG3B,QAAI,QAAQ;AACV,YAAM,eAAe,IAAI,gBAAgB;AACzC,iBAAW,CAAC,KAAK,KAAK,KAAK,OAAO,QAAQ,MAAM,GAAG;AACjD,YAAI,UAAU,QAAW;AACvB,uBAAa,IAAI,KAAK,KAAK;AAAA,QAC7B;AAAA,MACF;AACA,YAAM,KAAK,aAAa,SAAS;AACjC,UAAI,GAAI,QAAO,IAAI,EAAE;AAAA,IACvB;AAEA,UAAM,UAAkC;AAAA,MACtC,gBAAgB;AAAA,MAChB,GAAG,QAAQ;AAAA,IACb;AAEA,UAAM,OAAoB,EAAE,QAAQ,QAAQ;AAC5C,QAAI,SAAS,QAAW;AACtB,WAAK,OAAO,KAAK,UAAU,IAAI;AAAA,IACjC;AAEA,UAAM,WAAW,MAAM,QAAQ,KAAK,IAAI;AAExC,QAAI,CAAC,SAAS,IAAI;AAChB,YAAM,MAAM,SAAS,aAAa,QAAQ;AAAA,IAC5C;AAGA,QAAI,SAAS,WAAW,KAAK;AAC3B,aAAO;AAAA,IACT;AAEA,WAAO,SAAS,KAAK;AAAA,EACvB;AAEA,SAAO;AAAA,IACL,KAAK,CAAI,MAAc,WACrB,QAAW,OAAO,MAAM,QAAW,MAAM;AAAA,IAC3C,MAAM,CAAI,MAAc,SAAmB,QAAW,QAAQ,MAAM,IAAI;AAAA,IACxE,KAAK,CAAI,MAAc,SAAmB,QAAW,OAAO,MAAM,IAAI;AAAA,IACtE,KAAK,CAAI,SAAiB,QAAW,UAAU,IAAI;AAAA,EACrD;AACF;;;ACxEA,kBAA+D;AAyBxD,IAAM,sBAAN,MAAqD;AAAA,EACzC;AAAA;AAAA;AAAA;AAAA;AAAA,EAMjB,YAAY,MAAe;AACzB,SAAK,aAAa;AAAA,EACpB;AAAA;AAAA,EAGA,MAAc,cAA+B;AAC3C,QAAI,KAAK,WAAY,QAAO,KAAK;AACjC,UAAM,KAAK,MAAM,OAAO,IAAS;AACjC,UAAM,WAAW,MAAM,OAAO,MAAW;AACzC,WAAO,SAAS,KAAK,GAAG,QAAQ,GAAG,QAAQ,aAAa;AAAA,EAC1D;AAAA,EAEA,MAAM,OAAoC;AACxC,UAAM,KAAK,MAAM,OAAO,aAAkB;AAC1C,UAAM,WAAW,MAAM,KAAK,YAAY;AAExC,QAAI;AACJ,QAAI;AACF,gBAAU,MAAM,GAAG,SAAS,UAAU,OAAO;AAAA,IAC/C,SAAS,KAAc;AACrB,UAAK,IAA8B,SAAS,SAAU,QAAO;AAC7D,YAAM;AAAA,IACR;AAEA,UAAM,aAAS,YAAAA,OAAU,OAAO;AAChC,UAAM,QAAQ,OAAO,OAAO;AAC5B,QAAI,OAAO,UAAU,SAAU,QAAO;AAEtC,UAAM,QAAqB,EAAE,MAAM;AACnC,QAAI,OAAO,OAAO,cAAc,MAAM,WAAW;AAC/C,YAAM,eAAe,OAAO,cAAc;AAAA,IAC5C;AACA,QAAI,OAAO,OAAO,cAAc,MAAM,UAAU;AAC9C,YAAM,eAAe,OAAO,cAAc;AAAA,IAC5C;AACA,QAAI,OAAO,OAAO,kBAAkB,MAAM,UAAU;AAClD,YAAM,mBAAmB,OAAO,kBAAkB;AAAA,IACpD;AAEA,WAAO;AAAA,EACT;AAAA,EAEA,MAAM,KAAK,aAAyC;AAClD,UAAM,KAAK,MAAM,OAAO,aAAkB;AAC1C,UAAM,WAAW,MAAM,OAAO,MAAW;AACzC,UAAM,WAAW,MAAM,KAAK,YAAY;AACxC,UAAM,MAAM,SAAS,QAAQ,QAAQ;AAGrC,UAAM,GAAG,MAAM,KAAK,EAAE,WAAW,MAAM,MAAM,IAAM,CAAC;AAGpD,UAAM,OAAkD,CAAC;AACzD,QAAI;AACF,YAAM,MAAM,MAAM,GAAG,SAAS,UAAU,OAAO;AAC/C,YAAM,aAAS,YAAAA,OAAU,GAAG;AAC5B,iBAAW,CAAC,GAAG,CAAC,KAAK,OAAO,QAAQ,MAAM,GAAG;AAC3C,YAAI,OAAO,MAAM,YAAY,OAAO,MAAM,aAAa,OAAO,MAAM,UAAU;AAC5E,eAAK,CAAC,IAAI;AAAA,QACZ;AAAA,MACF;AAAA,IACF,SAAS,KAAc;AACrB,UAAK,IAA8B,SAAS,SAAU,OAAM;AAAA,IAC9D;AAGA,SAAK,OAAO,IAAI,YAAY;AAC5B,QAAI,YAAY,iBAAiB,QAAW;AAC1C,WAAK,cAAc,IAAI,YAAY;AAAA,IACrC;AACA,QAAI,YAAY,iBAAiB,QAAW;AAC1C,WAAK,cAAc,IAAI,YAAY;AAAA,IACrC;AACA,QAAI,YAAY,qBAAqB,QAAW;AAC9C,WAAK,kBAAkB,IAAI,YAAY;AAAA,IACzC;AAGA,UAAM,WAAO,YAAAC;AAAA,MACX;AAAA,IACF;AACA,UAAM,GAAG,UAAU,UAAU,MAAM,EAAE,MAAM,IAAM,CAAC;AAAA,EACpD;AAAA,EAEA,MAAM,QAAuB;AAC3B,UAAM,KAAK,MAAM,OAAO,aAAkB;AAC1C,UAAM,WAAW,MAAM,KAAK,YAAY;AAExC,QAAI;AACF,YAAM,GAAG,OAAO,QAAQ;AAAA,IAC1B,SAAS,KAAc;AACrB,UAAK,IAA8B,SAAS,SAAU,OAAM;AAAA,IAC9D;AAAA,EACF;AACF;AAgCO,SAAS,yBAA0C;AACxD,SAAO,IAAI,oBAAoB;AACjC;;;AHvHO,SAAS,gBAAgB,UAA4B,CAAC,GAAG;AAC9D,QAAM,UACJ,QAAQ,WAAW;AACrB,MAAI,QAAQ,QAAQ;AACpB,MAAI,cAAc,CAAC,CAAC;AACpB,QAAM,QAAQ,QAAQ,mBAAmB,uBAAuB;AAGhE,QAAM,eAAe,iBAAiB;AAAA,IACpC;AAAA,IACA,OAAO,QAAQ;AAAA,EACjB,CAAC;AAGD,iBAAe,gBAAqC;AAClD,QAAI,CAAC,SAAS,CAAC,aAAa;AAC1B,YAAM,QAAQ,MAAM,MAAM,KAAK;AAC/B,UAAI,OAAO,MAAO,SAAQ,MAAM;AAChC,oBAAc;AAAA,IAChB;AACA,QAAI,CAAC,OAAO;AACV,YAAM,MAAM,MAAM,aAAa;AAAA,QAC7B;AAAA,MACF;AACA,cAAQ,IAAI;AACZ,YAAM,MAAM,KAAK;AAAA,QACf,OAAO,IAAI;AAAA,QACX,cAAc,IAAI;AAAA,QAClB,cAAc,IAAI;AAAA,QAClB,kBAAkB,IAAI;AAAA,MACxB,CAAC;AAAA,IACH;AACA,WAAO,iBAAiB;AAAA,MACtB;AAAA,MACA,OAAO,QAAQ;AAAA,MACf,SAAS,EAAE,eAAe,UAAU,KAAK,GAAG;AAAA,IAC9C,CAAC;AAAA,EACH;AAEA,SAAO;AAAA,IACL,MAAM;AAAA;AAAA,MAEJ,UAAU,CAAC,QACT,aAAa,KAAuB,sBAAsB,GAAG;AAAA,MAE/D,OAAO,CAAC,QACN,aAAa,KAAoB,mBAAmB,GAAG;AAAA,MAEzD,mBAAmB,MACjB,aAAa;AAAA,QACX;AAAA,MACF;AAAA,MAEF,kBAAkB,CAAC,QACjB,aAAa;AAAA,QACX;AAAA,QACA;AAAA,MACF;AAAA;AAAA,MAGF,IAAI,YAAY;AACd,cAAM,SAAS,MAAM,cAAc;AACnC,eAAO,OAAO,IAAsB,cAAc;AAAA,MACpD;AAAA,MAEA,oBAAoB,YAAY;AAC9B,cAAM,SAAS,MAAM,cAAc;AACnC,eAAO,OAAO;AAAA,UACZ;AAAA,QACF;AAAA,MACF;AAAA,MAEA,OAAO,OAAO,QAAsB;AAClC,cAAM,SAAS,MAAM,cAAc;AACnC,eAAO,OAAO,KAAoB,mBAAmB,GAAG;AAAA,MAC1D;AAAA,IACF;AAAA,IAEA,QAAQ;AAAA,MACN,MAAM,YAAY;AAChB,cAAM,SAAS,MAAM,cAAc;AACnC,eAAO,OAAO,IAAqB,kBAAkB;AAAA,MACvD;AAAA,MAEA,QAAQ,OAAO,YAAoB;AACjC,cAAM,SAAS,MAAM,cAAc;AACnC,eAAO,OAAO,IAAqB,oBAAoB,OAAO,EAAE;AAAA,MAClE;AAAA,IACF;AAAA,IAEA,WAAW;AAAA;AAAA,MAET,QAAQ,OAAO,QAA+B;AAC5C,cAAM,SAAS,MAAM,cAAc;AACnC,eAAO,OAAO,KAAuB,uBAAuB,GAAG;AAAA,MACjE;AAAA,MAEA,MAAM,YAAY;AAChB,cAAM,SAAS,MAAM,cAAc;AACnC,eAAO,OAAO,IAAwB,qBAAqB;AAAA,MAC7D;AAAA,MAEA,KAAK,OAAO,eAAuB;AACjC,cAAM,SAAS,MAAM,cAAc;AACnC,eAAO,OAAO;AAAA,UACZ,uBAAuB,UAAU;AAAA,QACnC;AAAA,MACF;AAAA,MAEA,QAAQ,OAAO,eAAuB;AACpC,cAAM,SAAS,MAAM,cAAc;AACnC,eAAO,OAAO;AAAA,UACZ,uBAAuB,UAAU;AAAA,QACnC;AAAA,MACF;AAAA,MAEA,eAAe,OAAO,eAAuB;AAC3C,cAAM,SAAS,MAAM,cAAc;AACnC,eAAO,OAAO;AAAA,UACZ,uBAAuB,UAAU;AAAA,QACnC;AAAA,MACF;AAAA,MAEA,eAAe,OAAO,eAAuB;AAC3C,cAAM,SAAS,MAAM,cAAc;AACnC,eAAO,OAAO;AAAA,UACZ,uBAAuB,UAAU;AAAA,QACnC;AAAA,MACF;AAAA;AAAA,MAGA,KAAK,OAAO,YAAoB,UAAkB;AAChD,cAAM,SAAS,MAAM,cAAc;AACnC,eAAO,OAAO;AAAA,UACZ,uBAAuB,UAAU;AAAA,UACjC,EAAE,MAAM;AAAA,QACV;AAAA,MACF;AAAA,MAEA,SAAS,OAAO,YAAoB,gBAAwB;AAC1D,cAAM,SAAS,MAAM,cAAc;AACnC,eAAO,OAAO;AAAA,UACZ,uBAAuB,UAAU;AAAA,UACjC,EAAE,cAAc,YAAY;AAAA,QAC9B;AAAA,MACF;AAAA;AAAA,MAGA,QAAQ,OAAO,eAAuB;AACpC,cAAM,SAAS,MAAM,cAAc;AACnC,eAAO,OAAO;AAAA,UACZ,uBAAuB,UAAU;AAAA,QACnC;AAAA,MACF;AAAA,MAEA,MAAM,OAAO,YAAoB,QAAsB;AACrD,cAAM,SAAS,MAAM,cAAc;AACnC,eAAO,OAAO;AAAA,UACZ,uBAAuB,UAAU;AAAA,UACjC;AAAA,QACF;AAAA,MACF;AAAA;AAAA,MAGA,gBAAgB,OACd,YACA,QACG;AACH,cAAM,SAAS,MAAM,cAAc;AACnC,eAAO,OAAO;AAAA,UACZ,uBAAuB,UAAU;AAAA,UACjC;AAAA,QACF;AAAA,MACF;AAAA,MAEA,gBAAgB,OAAO,eAAuB;AAC5C,cAAM,SAAS,MAAM,cAAc;AACnC,eAAO,OAAO;AAAA,UACZ,uBAAuB,UAAU;AAAA,QACnC;AAAA,MACF;AAAA;AAAA,MAGA,QAAQ,OAAO,YAAoB,QAAuB;AACxD,cAAM,SAAS,MAAM,cAAc;AACnC,eAAO,OAAO;AAAA,UACZ,uBAAuB,UAAU;AAAA,UACjC;AAAA,QACF;AAAA,MACF;AAAA;AAAA,MAGA,OAAO;AAAA,QACL,MAAM,OAAO,eAAuB;AAClC,gBAAM,SAAS,MAAM,cAAc;AACnC,iBAAO,OAAO;AAAA,YACZ,uBAAuB,UAAU;AAAA,UACnC;AAAA,QACF;AAAA,QAEA,QAAQ,OAAO,YAAoB,QAA2B;AAC5D,gBAAM,SAAS,MAAM,cAAc;AACnC,iBAAO,OAAO;AAAA,YACZ,uBAAuB,UAAU;AAAA,YACjC;AAAA,UACF;AAAA,QACF;AAAA,QAEA,QAAQ,OAAO,YAAoB,aAAqB;AACtD,gBAAM,SAAS,MAAM,cAAc;AACnC,iBAAO,OAAO;AAAA,YACZ,uBAAuB,UAAU,UAAU,QAAQ;AAAA,UACrD;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACF;","names":["parseToml","stringifyToml"]}
+{"version":3,"sources":["../src/client.ts","../src/errors.ts","../src/http.ts","../src/credentials.ts"],"sourcesContent":["import { createHttpClient, type FetchFn, type HttpClient } from './http';\nimport {\n  defaultCredentialStore,\n  type CredentialStore,\n} from './credentials';\nimport { Db9Error } from './errors';\nimport type { Fs9FileInfo, Fs9StatResponse, Fs9ListOptions } from './fs-types';\nimport type {\n  RegisterRequest,\n  CustomerResponse,\n  LoginRequest,\n  LoginResponse,\n  AnonymousRegisterResponse,\n  AnonymousRefreshRequest,\n  AnonymousRefreshResponse,\n  AnonymousSecretResponse,\n  ClaimRequest,\n  ClaimResponse,\n  TokenResponse,\n  MessageResponse,\n  CreateDatabaseRequest,\n  DatabaseResponse,\n  CustomerPasswordResetResponse,\n  TenantObservabilityResponse,\n  SqlResult,\n  SchemaResponse,\n  DumpRequest,\n  DumpResponse,\n  MigrationApplyRequest,\n  MigrationApplyResponse,\n  MigrationMetadata,\n  BranchRequest,\n  UserResponse,\n  CreateUserRequest,\n} from './types';\n\nexport interface Db9ClientOptions {\n  baseUrl?: string;\n  token?: string;\n  fetch?: FetchFn;\n  credentialStore?: CredentialStore;\n}\n\nexport function createDb9Client(options: Db9ClientOptions = {}) {\n  const baseUrl =\n    options.baseUrl ?? 'https://db9.shared.aws.tidbcloud.com/api';\n  let token = options.token;\n  let tokenLoaded = !!token;\n  const store = options.credentialStore ?? defaultCredentialStore();\n  const fetchFn = options.fetch ?? globalThis.fetch;\n\n  // Public HTTP client — no Authorization header\n  const publicClient = createHttpClient({\n    baseUrl,\n    fetch: options.fetch,\n  });\n\n  // Lazy-loading authenticated HTTP client\n  async function getAuthClient(): Promise<HttpClient> {\n    if (!token && !tokenLoaded) {\n      const creds = await store.load();\n      if (creds?.token) token = creds.token;\n      tokenLoaded = true;\n    }\n    if (!token) {\n      const reg = await publicClient.post<AnonymousRegisterResponse>(\n        '/customer/anonymous-register'\n      );\n      token = reg.token;\n      await store.save({\n        token: reg.token,\n        is_anonymous: reg.is_anonymous,\n        anonymous_id: reg.anonymous_id,\n        anonymous_secret: reg.anonymous_secret,\n      });\n    }\n    return createHttpClient({\n      baseUrl,\n      fetch: options.fetch,\n      headers: { Authorization: `Bearer ${token}` },\n    });\n  }\n\n  // ── fs9 helpers ──────────────────────────────────────────────\n  function deriveFs9Url(dbId: string): string {\n    const origin = baseUrl.replace(/\\/api\\/?$/, '');\n    return `${origin}/fs9/${dbId}`;\n  }\n\n  async function fsRequest(\n    method: string,\n    dbId: string,\n    fsPath: string,\n    body?: string\n  ): Promise<Response> {\n    // Ensure token is loaded (lazy auth pattern)\n    if (!token && !tokenLoaded) {\n      await getAuthClient();\n    }\n\n    const fs9Url = deriveFs9Url(dbId);\n    const url = `${fs9Url}/api/v1${fsPath}`;\n\n    const headers: Record<string, string> = {};\n    if (token) {\n      headers['Authorization'] = `Bearer ${token}`;\n    }\n    if (body !== undefined) {\n      headers['Content-Type'] = 'text/plain';\n    }\n\n    const init: RequestInit = { method, headers };\n    if (body !== undefined) {\n      init.body = body;\n    }\n\n    const response = await fetchFn(url, init);\n    if (!response.ok) {\n      throw await Db9Error.fromResponse(response);\n    }\n    return response;\n  }\n\n  return {\n    auth: {\n      // Public endpoints (no token required)\n      register: (req: RegisterRequest) =>\n        publicClient.post<CustomerResponse>('/customer/register', req),\n\n      login: (req: LoginRequest) =>\n        publicClient.post<LoginResponse>('/customer/login', req),\n\n      anonymousRegister: () =>\n        publicClient.post<AnonymousRegisterResponse>(\n          '/customer/anonymous-register'\n        ),\n\n      anonymousRefresh: (req: AnonymousRefreshRequest) =>\n        publicClient.post<AnonymousRefreshResponse>(\n          '/customer/anonymous-refresh',\n          req\n        ),\n\n      // Authenticated endpoints\n      me: async () => {\n        const client = await getAuthClient();\n        return client.get<CustomerResponse>('/customer/me');\n      },\n\n      getAnonymousSecret: async () => {\n        const client = await getAuthClient();\n        return client.get<AnonymousSecretResponse>(\n          '/customer/anonymous-secret'\n        );\n      },\n\n      claim: async (req: ClaimRequest) => {\n        const client = await getAuthClient();\n        return client.post<ClaimResponse>('/customer/claim', req);\n      },\n    },\n\n    tokens: {\n      list: async () => {\n        const client = await getAuthClient();\n        return client.get<TokenResponse[]>('/customer/tokens');\n      },\n\n      revoke: async (tokenId: string) => {\n        const client = await getAuthClient();\n        return client.del<MessageResponse>(`/customer/tokens/${tokenId}`);\n      },\n    },\n\n    databases: {\n      // ── CRUD ──────────────────────────────────────────────────\n      create: async (req: CreateDatabaseRequest) => {\n        const client = await getAuthClient();\n        return client.post<DatabaseResponse>('/customer/databases', req);\n      },\n\n      list: async () => {\n        const client = await getAuthClient();\n        return client.get<DatabaseResponse[]>('/customer/databases');\n      },\n\n      get: async (databaseId: string) => {\n        const client = await getAuthClient();\n        return client.get<DatabaseResponse>(\n          `/customer/databases/${databaseId}`\n        );\n      },\n\n      delete: async (databaseId: string) => {\n        const client = await getAuthClient();\n        return client.del<MessageResponse>(\n          `/customer/databases/${databaseId}`\n        );\n      },\n\n      resetPassword: async (databaseId: string) => {\n        const client = await getAuthClient();\n        return client.post<CustomerPasswordResetResponse>(\n          `/customer/databases/${databaseId}/reset-password`\n        );\n      },\n\n      observability: async (databaseId: string) => {\n        const client = await getAuthClient();\n        return client.get<TenantObservabilityResponse>(\n          `/customer/databases/${databaseId}/observability`\n        );\n      },\n\n      // ── SQL Execution ─────────────────────────────────────────\n      sql: async (databaseId: string, query: string) => {\n        const client = await getAuthClient();\n        return client.post<SqlResult>(\n          `/customer/databases/${databaseId}/sql`,\n          { query }\n        );\n      },\n\n      sqlFile: async (databaseId: string, fileContent: string) => {\n        const client = await getAuthClient();\n        return client.post<SqlResult>(\n          `/customer/databases/${databaseId}/sql`,\n          { file_content: fileContent }\n        );\n      },\n\n      // ── Schema & Dump ─────────────────────────────────────────\n      schema: async (databaseId: string) => {\n        const client = await getAuthClient();\n        return client.get<SchemaResponse>(\n          `/customer/databases/${databaseId}/schema`\n        );\n      },\n\n      dump: async (databaseId: string, req?: DumpRequest) => {\n        const client = await getAuthClient();\n        return client.post<DumpResponse>(\n          `/customer/databases/${databaseId}/dump`,\n          req\n        );\n      },\n\n      // ── Migrations ────────────────────────────────────────────\n      applyMigration: async (\n        databaseId: string,\n        req: MigrationApplyRequest\n      ) => {\n        const client = await getAuthClient();\n        return client.post<MigrationApplyResponse>(\n          `/customer/databases/${databaseId}/migrations`,\n          req\n        );\n      },\n\n      listMigrations: async (databaseId: string) => {\n        const client = await getAuthClient();\n        return client.get<MigrationMetadata[]>(\n          `/customer/databases/${databaseId}/migrations`\n        );\n      },\n\n      // ── Branching ─────────────────────────────────────────────\n      branch: async (databaseId: string, req: BranchRequest) => {\n        const client = await getAuthClient();\n        return client.post<DatabaseResponse>(\n          `/customer/databases/${databaseId}/branch`,\n          req\n        );\n      },\n\n      // ── User Management ───────────────────────────────────────\n      users: {\n        list: async (databaseId: string) => {\n          const client = await getAuthClient();\n          return client.get<UserResponse[]>(\n            `/customer/databases/${databaseId}/users`\n          );\n        },\n\n        create: async (databaseId: string, req: CreateUserRequest) => {\n          const client = await getAuthClient();\n          return client.post<MessageResponse>(\n            `/customer/databases/${databaseId}/users`,\n            req\n          );\n        },\n\n        delete: async (databaseId: string, username: string) => {\n          const client = await getAuthClient();\n          return client.del<MessageResponse>(\n            `/customer/databases/${databaseId}/users/${username}`\n          );\n        },\n      },\n    },\n\n    fs: {\n      list: async (\n        dbId: string,\n        path: string,\n        options?: Fs9ListOptions\n      ): Promise<Fs9FileInfo[]> => {\n        const params = new URLSearchParams({ path });\n        if (options?.recursive) params.set('recursive', 'true');\n        const response = await fsRequest(\n          'GET',\n          dbId,\n          `/readdir?${params.toString()}`\n        );\n        return response.json() as Promise<Fs9FileInfo[]>;\n      },\n\n      read: async (dbId: string, path: string): Promise<string> => {\n        const params = new URLSearchParams({ path });\n        const response = await fsRequest(\n          'GET',\n          dbId,\n          `/download?${params.toString()}`\n        );\n        return response.text();\n      },\n\n      write: async (\n        dbId: string,\n        path: string,\n        content: string\n      ): Promise<void> => {\n        const params = new URLSearchParams({ path });\n        await fsRequest('PUT', dbId, `/upload?${params.toString()}`, content);\n      },\n\n      stat: async (dbId: string, path: string): Promise<Fs9StatResponse> => {\n        const params = new URLSearchParams({ path });\n        const response = await fsRequest(\n          'GET',\n          dbId,\n          `/stat?${params.toString()}`\n        );\n        return response.json() as Promise<Fs9StatResponse>;\n      },\n    },\n  };\n}\n\nexport type Db9Client = ReturnType<typeof createDb9Client>;\n","export class Db9Error extends Error {\n  readonly statusCode: number;\n  readonly response?: Response;\n\n  constructor(message: string, statusCode: number, response?: Response) {\n    super(message);\n    this.name = 'Db9Error';\n    this.statusCode = statusCode;\n    this.response = response;\n  }\n\n  static async fromResponse(response: Response): Promise<Db9Error> {\n    // Parse { \"message\": string } body — the ONLY error format from the API\n    let message: string;\n    try {\n      const body = (await response.json()) as { message?: string };\n      message = body.message || response.statusText;\n    } catch {\n      message = response.statusText;\n    }\n\n    // Return specific subclass based on status code\n    switch (response.status) {\n      case 401:\n        return new Db9AuthError(message, response);\n      case 404:\n        return new Db9NotFoundError(message, response);\n      case 409:\n        return new Db9ConflictError(message, response);\n      default:\n        return new Db9Error(message, response.status, response);\n    }\n  }\n}\n\nexport class Db9AuthError extends Db9Error {\n  constructor(message: string, response?: Response) {\n    super(message, 401, response);\n    this.name = 'Db9AuthError';\n  }\n}\n\nexport class Db9NotFoundError extends Db9Error {\n  constructor(message: string, response?: Response) {\n    super(message, 404, response);\n    this.name = 'Db9NotFoundError';\n  }\n}\n\nexport class Db9ConflictError extends Db9Error {\n  constructor(message: string, response?: Response) {\n    super(message, 409, response);\n    this.name = 'Db9ConflictError';\n  }\n}\n","import { Db9Error } from './errors';\n\nexport type FetchFn = typeof globalThis.fetch;\n\n// BodyInit type for raw request bodies (string, Blob, ArrayBuffer, etc.)\nexport type BodyInit = string | Blob | ArrayBuffer | FormData | URLSearchParams | ReadableStream<Uint8Array>;\n\nexport interface HttpClientOptions {\n  baseUrl: string;\n  fetch?: FetchFn;\n  headers?: Record<string, string>;\n}\n\nexport interface HttpClient {\n  get<T>(path: string, params?: Record<string, string | undefined>): Promise<T>;\n  post<T>(path: string, body?: unknown): Promise<T>;\n  put<T>(path: string, body?: unknown): Promise<T>;\n  del<T>(path: string): Promise<T>;\n  getRaw(path: string, params?: Record<string, string | undefined>): Promise<Response>;\n  putRaw(path: string, body: BodyInit, headers?: Record<string, string>): Promise<Response>;\n}\n\nexport function createHttpClient(options: HttpClientOptions): HttpClient {\n  const fetchFn = options.fetch ?? globalThis.fetch;\n  const baseUrl = options.baseUrl.replace(/\\/$/, ''); // strip trailing slash\n\n  async function request<T>(\n    method: string,\n    path: string,\n    body?: unknown,\n    params?: Record<string, string | undefined>\n  ): Promise<T> {\n    let url = `${baseUrl}${path}`;\n\n    // Append query params for GET requests\n    if (params) {\n      const searchParams = new URLSearchParams();\n      for (const [key, value] of Object.entries(params)) {\n        if (value !== undefined) {\n          searchParams.set(key, value);\n        }\n      }\n      const qs = searchParams.toString();\n      if (qs) url += `?${qs}`;\n    }\n\n    const headers: Record<string, string> = {\n      'Content-Type': 'application/json',\n      ...options.headers,\n    };\n\n    const init: RequestInit = { method, headers };\n    if (body !== undefined) {\n      init.body = JSON.stringify(body);\n    }\n\n    const response = await fetchFn(url, init);\n\n    if (!response.ok) {\n      throw await Db9Error.fromResponse(response);\n    }\n\n    // Handle 204 No Content\n    if (response.status === 204) {\n      return undefined as T;\n    }\n\n    return response.json() as Promise<T>;\n  }\n\n  async function requestRaw(\n    method: string,\n    path: string,\n    body?: BodyInit,\n    params?: Record<string, string | undefined>,\n    customHeaders?: Record<string, string>\n  ): Promise<Response> {\n    let url = `${baseUrl}${path}`;\n\n    // Append query params for GET requests\n    if (params) {\n      const searchParams = new URLSearchParams();\n      for (const [key, value] of Object.entries(params)) {\n        if (value !== undefined) {\n          searchParams.set(key, value);\n        }\n      }\n      const qs = searchParams.toString();\n      if (qs) url += `?${qs}`;\n    }\n\n    const headers: Record<string, string> = {\n      ...options.headers,\n      ...customHeaders,\n    };\n\n    const init: RequestInit = { method, headers };\n    if (body !== undefined) {\n      init.body = body;\n    }\n\n    const response = await fetchFn(url, init);\n\n    if (!response.ok) {\n      throw await Db9Error.fromResponse(response);\n    }\n\n    return response;\n  }\n\n  return {\n    get: <T>(path: string, params?: Record<string, string | undefined>) =>\n      request<T>('GET', path, undefined, params),\n    post: <T>(path: string, body?: unknown) => request<T>('POST', path, body),\n    put: <T>(path: string, body?: unknown) => request<T>('PUT', path, body),\n    del: <T>(path: string) => request<T>('DELETE', path),\n    getRaw: (path: string, params?: Record<string, string | undefined>) =>\n      requestRaw('GET', path, undefined, params),\n    putRaw: (path: string, body: BodyInit, headers?: Record<string, string>) =>\n      requestRaw('PUT', path, body, undefined, headers),\n  };\n}\n","import { parse as parseToml, stringify as stringifyToml } from '@iarna/toml';\n\n// ---------------------------------------------------------------------------\n// Interfaces\n// ---------------------------------------------------------------------------\n\n/** Credential fields stored in `~/.db9/credentials` (TOML). */\nexport interface Credentials {\n  token: string;\n  is_anonymous?: boolean;\n  anonymous_id?: string;\n  anonymous_secret?: string;\n}\n\n/** Async credential persistence abstraction. */\nexport interface CredentialStore {\n  load(): Promise<Credentials | null>;\n  save(credentials: Credentials): Promise<void>;\n  clear(): Promise<void>;\n}\n\n// ---------------------------------------------------------------------------\n// FileCredentialStore — TOML file at ~/.db9/credentials (matches db9 CLI)\n// ---------------------------------------------------------------------------\n\nexport class FileCredentialStore implements CredentialStore {\n  private readonly customPath: string | undefined;\n\n  /**\n   * @param path — Override the credential file location.\n   *               Defaults to `~/.db9/credentials` (resolved lazily).\n   */\n  constructor(path?: string) {\n    this.customPath = path;\n  }\n\n  /** Resolve the credential file path (lazy to avoid top-level `os` import). */\n  private async resolvePath(): Promise<string> {\n    if (this.customPath) return this.customPath;\n    const os = await import('node:os');\n    const nodePath = await import('node:path');\n    return nodePath.join(os.homedir(), '.db9', 'credentials');\n  }\n\n  async load(): Promise<Credentials | null> {\n    const fs = await import('node:fs/promises');\n    const filePath = await this.resolvePath();\n\n    let content: string;\n    try {\n      content = await fs.readFile(filePath, 'utf-8');\n    } catch (err: unknown) {\n      if ((err as NodeJS.ErrnoException).code === 'ENOENT') return null;\n      throw err;\n    }\n\n    const parsed = parseToml(content);\n    const token = parsed['token'];\n    if (typeof token !== 'string') return null;\n\n    const creds: Credentials = { token };\n    if (typeof parsed['is_anonymous'] === 'boolean') {\n      creds.is_anonymous = parsed['is_anonymous'];\n    }\n    if (typeof parsed['anonymous_id'] === 'string') {\n      creds.anonymous_id = parsed['anonymous_id'];\n    }\n    if (typeof parsed['anonymous_secret'] === 'string') {\n      creds.anonymous_secret = parsed['anonymous_secret'];\n    }\n\n    return creds;\n  }\n\n  async save(credentials: Credentials): Promise<void> {\n    const fs = await import('node:fs/promises');\n    const nodePath = await import('node:path');\n    const filePath = await this.resolvePath();\n    const dir = nodePath.dirname(filePath);\n\n    // Ensure directory exists with 0o700 (matches CLI: ensure_config_dir)\n    await fs.mkdir(dir, { recursive: true, mode: 0o700 });\n\n    // Read → merge → write  (preserves unknown fields as scalars)\n    const data: Record<string, string | boolean | number> = {};\n    try {\n      const raw = await fs.readFile(filePath, 'utf-8');\n      const parsed = parseToml(raw);\n      for (const [k, v] of Object.entries(parsed)) {\n        if (typeof v === 'string' || typeof v === 'boolean' || typeof v === 'number') {\n          data[k] = v;\n        }\n      }\n    } catch (err: unknown) {\n      if ((err as NodeJS.ErrnoException).code !== 'ENOENT') throw err;\n    }\n\n    // Merge: always update token, only override optional fields when provided\n    data['token'] = credentials.token;\n    if (credentials.is_anonymous !== undefined) {\n      data['is_anonymous'] = credentials.is_anonymous;\n    }\n    if (credentials.anonymous_id !== undefined) {\n      data['anonymous_id'] = credentials.anonymous_id;\n    }\n    if (credentials.anonymous_secret !== undefined) {\n      data['anonymous_secret'] = credentials.anonymous_secret;\n    }\n\n    // Serialize and write with 0o600 permissions (matches CLI: save_token)\n    const toml = stringifyToml(\n      data as Parameters<typeof stringifyToml>[0],\n    );\n    await fs.writeFile(filePath, toml, { mode: 0o600 });\n  }\n\n  async clear(): Promise<void> {\n    const fs = await import('node:fs/promises');\n    const filePath = await this.resolvePath();\n\n    try {\n      await fs.unlink(filePath);\n    } catch (err: unknown) {\n      if ((err as NodeJS.ErrnoException).code !== 'ENOENT') throw err;\n    }\n  }\n}\n\n// ---------------------------------------------------------------------------\n// MemoryCredentialStore — in-memory, no persistence\n// ---------------------------------------------------------------------------\n\nexport class MemoryCredentialStore implements CredentialStore {\n  private credentials: Credentials | null = null;\n\n  async load(): Promise<Credentials | null> {\n    return this.credentials ? { ...this.credentials } : null;\n  }\n\n  async save(credentials: Credentials): Promise<void> {\n    this.credentials = {\n      token: credentials.token,\n      is_anonymous: credentials.is_anonymous ?? this.credentials?.is_anonymous,\n      anonymous_id: credentials.anonymous_id ?? this.credentials?.anonymous_id,\n      anonymous_secret: credentials.anonymous_secret ?? this.credentials?.anonymous_secret,\n    };\n  }\n\n  async clear(): Promise<void> {\n    this.credentials = null;\n  }\n}\n\n// ---------------------------------------------------------------------------\n// Factory\n// ---------------------------------------------------------------------------\n\n/** Returns a FileCredentialStore with the default path (`~/.db9/credentials`). */\nexport function defaultCredentialStore(): CredentialStore {\n  return new FileCredentialStore();\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;;;ACAO,IAAM,WAAN,MAAM,kBAAiB,MAAM;AAAA,EACzB;AAAA,EACA;AAAA,EAET,YAAY,SAAiB,YAAoB,UAAqB;AACpE,UAAM,OAAO;AACb,SAAK,OAAO;AACZ,SAAK,aAAa;AAClB,SAAK,WAAW;AAAA,EAClB;AAAA,EAEA,aAAa,aAAa,UAAuC;AAE/D,QAAI;AACJ,QAAI;AACF,YAAM,OAAQ,MAAM,SAAS,KAAK;AAClC,gBAAU,KAAK,WAAW,SAAS;AAAA,IACrC,QAAQ;AACN,gBAAU,SAAS;AAAA,IACrB;AAGA,YAAQ,SAAS,QAAQ;AAAA,MACvB,KAAK;AACH,eAAO,IAAI,aAAa,SAAS,QAAQ;AAAA,MAC3C,KAAK;AACH,eAAO,IAAI,iBAAiB,SAAS,QAAQ;AAAA,MAC/C,KAAK;AACH,eAAO,IAAI,iBAAiB,SAAS,QAAQ;AAAA,MAC/C;AACE,eAAO,IAAI,UAAS,SAAS,SAAS,QAAQ,QAAQ;AAAA,IAC1D;AAAA,EACF;AACF;AAEO,IAAM,eAAN,cAA2B,SAAS;AAAA,EACzC,YAAY,SAAiB,UAAqB;AAChD,UAAM,SAAS,KAAK,QAAQ;AAC5B,SAAK,OAAO;AAAA,EACd;AACF;AAEO,IAAM,mBAAN,cAA+B,SAAS;AAAA,EAC7C,YAAY,SAAiB,UAAqB;AAChD,UAAM,SAAS,KAAK,QAAQ;AAC5B,SAAK,OAAO;AAAA,EACd;AACF;AAEO,IAAM,mBAAN,cAA+B,SAAS;AAAA,EAC7C,YAAY,SAAiB,UAAqB;AAChD,UAAM,SAAS,KAAK,QAAQ;AAC5B,SAAK,OAAO;AAAA,EACd;AACF;;;AChCO,SAAS,iBAAiB,SAAwC;AACvE,QAAM,UAAU,QAAQ,SAAS,WAAW;AAC5C,QAAM,UAAU,QAAQ,QAAQ,QAAQ,OAAO,EAAE;AAEjD,iBAAe,QACb,QACA,MACA,MACA,QACY;AACZ,QAAI,MAAM,GAAG,OAAO,GAAG,IAAI;AAG3B,QAAI,QAAQ;AACV,YAAM,eAAe,IAAI,gBAAgB;AACzC,iBAAW,CAAC,KAAK,KAAK,KAAK,OAAO,QAAQ,MAAM,GAAG;AACjD,YAAI,UAAU,QAAW;AACvB,uBAAa,IAAI,KAAK,KAAK;AAAA,QAC7B;AAAA,MACF;AACA,YAAM,KAAK,aAAa,SAAS;AACjC,UAAI,GAAI,QAAO,IAAI,EAAE;AAAA,IACvB;AAEA,UAAM,UAAkC;AAAA,MACtC,gBAAgB;AAAA,MAChB,GAAG,QAAQ;AAAA,IACb;AAEA,UAAM,OAAoB,EAAE,QAAQ,QAAQ;AAC5C,QAAI,SAAS,QAAW;AACtB,WAAK,OAAO,KAAK,UAAU,IAAI;AAAA,IACjC;AAEA,UAAM,WAAW,MAAM,QAAQ,KAAK,IAAI;AAExC,QAAI,CAAC,SAAS,IAAI;AAChB,YAAM,MAAM,SAAS,aAAa,QAAQ;AAAA,IAC5C;AAGA,QAAI,SAAS,WAAW,KAAK;AAC3B,aAAO;AAAA,IACT;AAEA,WAAO,SAAS,KAAK;AAAA,EACvB;AAEA,iBAAe,WACb,QACA,MACA,MACA,QACA,eACmB;AACnB,QAAI,MAAM,GAAG,OAAO,GAAG,IAAI;AAG3B,QAAI,QAAQ;AACV,YAAM,eAAe,IAAI,gBAAgB;AACzC,iBAAW,CAAC,KAAK,KAAK,KAAK,OAAO,QAAQ,MAAM,GAAG;AACjD,YAAI,UAAU,QAAW;AACvB,uBAAa,IAAI,KAAK,KAAK;AAAA,QAC7B;AAAA,MACF;AACA,YAAM,KAAK,aAAa,SAAS;AACjC,UAAI,GAAI,QAAO,IAAI,EAAE;AAAA,IACvB;AAEA,UAAM,UAAkC;AAAA,MACtC,GAAG,QAAQ;AAAA,MACX,GAAG;AAAA,IACL;AAEA,UAAM,OAAoB,EAAE,QAAQ,QAAQ;AAC5C,QAAI,SAAS,QAAW;AACtB,WAAK,OAAO;AAAA,IACd;AAEA,UAAM,WAAW,MAAM,QAAQ,KAAK,IAAI;AAExC,QAAI,CAAC,SAAS,IAAI;AAChB,YAAM,MAAM,SAAS,aAAa,QAAQ;AAAA,IAC5C;AAEA,WAAO;AAAA,EACT;AAEA,SAAO;AAAA,IACL,KAAK,CAAI,MAAc,WACrB,QAAW,OAAO,MAAM,QAAW,MAAM;AAAA,IAC3C,MAAM,CAAI,MAAc,SAAmB,QAAW,QAAQ,MAAM,IAAI;AAAA,IACxE,KAAK,CAAI,MAAc,SAAmB,QAAW,OAAO,MAAM,IAAI;AAAA,IACtE,KAAK,CAAI,SAAiB,QAAW,UAAU,IAAI;AAAA,IACnD,QAAQ,CAAC,MAAc,WACrB,WAAW,OAAO,MAAM,QAAW,MAAM;AAAA,IAC3C,QAAQ,CAAC,MAAc,MAAgB,YACrC,WAAW,OAAO,MAAM,MAAM,QAAW,OAAO;AAAA,EACpD;AACF;;;ACzHA,kBAA+D;AAyBxD,IAAM,sBAAN,MAAqD;AAAA,EACzC;AAAA;AAAA;AAAA;AAAA;AAAA,EAMjB,YAAY,MAAe;AACzB,SAAK,aAAa;AAAA,EACpB;AAAA;AAAA,EAGA,MAAc,cAA+B;AAC3C,QAAI,KAAK,WAAY,QAAO,KAAK;AACjC,UAAM,KAAK,MAAM,OAAO,IAAS;AACjC,UAAM,WAAW,MAAM,OAAO,MAAW;AACzC,WAAO,SAAS,KAAK,GAAG,QAAQ,GAAG,QAAQ,aAAa;AAAA,EAC1D;AAAA,EAEA,MAAM,OAAoC;AACxC,UAAM,KAAK,MAAM,OAAO,aAAkB;AAC1C,UAAM,WAAW,MAAM,KAAK,YAAY;AAExC,QAAI;AACJ,QAAI;AACF,gBAAU,MAAM,GAAG,SAAS,UAAU,OAAO;AAAA,IAC/C,SAAS,KAAc;AACrB,UAAK,IAA8B,SAAS,SAAU,QAAO;AAC7D,YAAM;AAAA,IACR;AAEA,UAAM,aAAS,YAAAA,OAAU,OAAO;AAChC,UAAM,QAAQ,OAAO,OAAO;AAC5B,QAAI,OAAO,UAAU,SAAU,QAAO;AAEtC,UAAM,QAAqB,EAAE,MAAM;AACnC,QAAI,OAAO,OAAO,cAAc,MAAM,WAAW;AAC/C,YAAM,eAAe,OAAO,cAAc;AAAA,IAC5C;AACA,QAAI,OAAO,OAAO,cAAc,MAAM,UAAU;AAC9C,YAAM,eAAe,OAAO,cAAc;AAAA,IAC5C;AACA,QAAI,OAAO,OAAO,kBAAkB,MAAM,UAAU;AAClD,YAAM,mBAAmB,OAAO,kBAAkB;AAAA,IACpD;AAEA,WAAO;AAAA,EACT;AAAA,EAEA,MAAM,KAAK,aAAyC;AAClD,UAAM,KAAK,MAAM,OAAO,aAAkB;AAC1C,UAAM,WAAW,MAAM,OAAO,MAAW;AACzC,UAAM,WAAW,MAAM,KAAK,YAAY;AACxC,UAAM,MAAM,SAAS,QAAQ,QAAQ;AAGrC,UAAM,GAAG,MAAM,KAAK,EAAE,WAAW,MAAM,MAAM,IAAM,CAAC;AAGpD,UAAM,OAAkD,CAAC;AACzD,QAAI;AACF,YAAM,MAAM,MAAM,GAAG,SAAS,UAAU,OAAO;AAC/C,YAAM,aAAS,YAAAA,OAAU,GAAG;AAC5B,iBAAW,CAAC,GAAG,CAAC,KAAK,OAAO,QAAQ,MAAM,GAAG;AAC3C,YAAI,OAAO,MAAM,YAAY,OAAO,MAAM,aAAa,OAAO,MAAM,UAAU;AAC5E,eAAK,CAAC,IAAI;AAAA,QACZ;AAAA,MACF;AAAA,IACF,SAAS,KAAc;AACrB,UAAK,IAA8B,SAAS,SAAU,OAAM;AAAA,IAC9D;AAGA,SAAK,OAAO,IAAI,YAAY;AAC5B,QAAI,YAAY,iBAAiB,QAAW;AAC1C,WAAK,cAAc,IAAI,YAAY;AAAA,IACrC;AACA,QAAI,YAAY,iBAAiB,QAAW;AAC1C,WAAK,cAAc,IAAI,YAAY;AAAA,IACrC;AACA,QAAI,YAAY,qBAAqB,QAAW;AAC9C,WAAK,kBAAkB,IAAI,YAAY;AAAA,IACzC;AAGA,UAAM,WAAO,YAAAC;AAAA,MACX;AAAA,IACF;AACA,UAAM,GAAG,UAAU,UAAU,MAAM,EAAE,MAAM,IAAM,CAAC;AAAA,EACpD;AAAA,EAEA,MAAM,QAAuB;AAC3B,UAAM,KAAK,MAAM,OAAO,aAAkB;AAC1C,UAAM,WAAW,MAAM,KAAK,YAAY;AAExC,QAAI;AACF,YAAM,GAAG,OAAO,QAAQ;AAAA,IAC1B,SAAS,KAAc;AACrB,UAAK,IAA8B,SAAS,SAAU,OAAM;AAAA,IAC9D;AAAA,EACF;AACF;AAgCO,SAAS,yBAA0C;AACxD,SAAO,IAAI,oBAAoB;AACjC;;;AHrHO,SAAS,gBAAgB,UAA4B,CAAC,GAAG;AAC9D,QAAM,UACJ,QAAQ,WAAW;AACrB,MAAI,QAAQ,QAAQ;AACpB,MAAI,cAAc,CAAC,CAAC;AACpB,QAAM,QAAQ,QAAQ,mBAAmB,uBAAuB;AAChE,QAAM,UAAU,QAAQ,SAAS,WAAW;AAG5C,QAAM,eAAe,iBAAiB;AAAA,IACpC;AAAA,IACA,OAAO,QAAQ;AAAA,EACjB,CAAC;AAGD,iBAAe,gBAAqC;AAClD,QAAI,CAAC,SAAS,CAAC,aAAa;AAC1B,YAAM,QAAQ,MAAM,MAAM,KAAK;AAC/B,UAAI,OAAO,MAAO,SAAQ,MAAM;AAChC,oBAAc;AAAA,IAChB;AACA,QAAI,CAAC,OAAO;AACV,YAAM,MAAM,MAAM,aAAa;AAAA,QAC7B;AAAA,MACF;AACA,cAAQ,IAAI;AACZ,YAAM,MAAM,KAAK;AAAA,QACf,OAAO,IAAI;AAAA,QACX,cAAc,IAAI;AAAA,QAClB,cAAc,IAAI;AAAA,QAClB,kBAAkB,IAAI;AAAA,MACxB,CAAC;AAAA,IACH;AACA,WAAO,iBAAiB;AAAA,MACtB;AAAA,MACA,OAAO,QAAQ;AAAA,MACf,SAAS,EAAE,eAAe,UAAU,KAAK,GAAG;AAAA,IAC9C,CAAC;AAAA,EACH;AAGA,WAAS,aAAa,MAAsB;AAC1C,UAAM,SAAS,QAAQ,QAAQ,aAAa,EAAE;AAC9C,WAAO,GAAG,MAAM,QAAQ,IAAI;AAAA,EAC9B;AAEA,iBAAe,UACb,QACA,MACA,QACA,MACmB;AAEnB,QAAI,CAAC,SAAS,CAAC,aAAa;AAC1B,YAAM,cAAc;AAAA,IACtB;AAEA,UAAM,SAAS,aAAa,IAAI;AAChC,UAAM,MAAM,GAAG,MAAM,UAAU,MAAM;AAErC,UAAM,UAAkC,CAAC;AACzC,QAAI,OAAO;AACT,cAAQ,eAAe,IAAI,UAAU,KAAK;AAAA,IAC5C;AACA,QAAI,SAAS,QAAW;AACtB,cAAQ,cAAc,IAAI;AAAA,IAC5B;AAEA,UAAM,OAAoB,EAAE,QAAQ,QAAQ;AAC5C,QAAI,SAAS,QAAW;AACtB,WAAK,OAAO;AAAA,IACd;AAEA,UAAM,WAAW,MAAM,QAAQ,KAAK,IAAI;AACxC,QAAI,CAAC,SAAS,IAAI;AAChB,YAAM,MAAM,SAAS,aAAa,QAAQ;AAAA,IAC5C;AACA,WAAO;AAAA,EACT;AAEA,SAAO;AAAA,IACL,MAAM;AAAA;AAAA,MAEJ,UAAU,CAAC,QACT,aAAa,KAAuB,sBAAsB,GAAG;AAAA,MAE/D,OAAO,CAAC,QACN,aAAa,KAAoB,mBAAmB,GAAG;AAAA,MAEzD,mBAAmB,MACjB,aAAa;AAAA,QACX;AAAA,MACF;AAAA,MAEF,kBAAkB,CAAC,QACjB,aAAa;AAAA,QACX;AAAA,QACA;AAAA,MACF;AAAA;AAAA,MAGF,IAAI,YAAY;AACd,cAAM,SAAS,MAAM,cAAc;AACnC,eAAO,OAAO,IAAsB,cAAc;AAAA,MACpD;AAAA,MAEA,oBAAoB,YAAY;AAC9B,cAAM,SAAS,MAAM,cAAc;AACnC,eAAO,OAAO;AAAA,UACZ;AAAA,QACF;AAAA,MACF;AAAA,MAEA,OAAO,OAAO,QAAsB;AAClC,cAAM,SAAS,MAAM,cAAc;AACnC,eAAO,OAAO,KAAoB,mBAAmB,GAAG;AAAA,MAC1D;AAAA,IACF;AAAA,IAEA,QAAQ;AAAA,MACN,MAAM,YAAY;AAChB,cAAM,SAAS,MAAM,cAAc;AACnC,eAAO,OAAO,IAAqB,kBAAkB;AAAA,MACvD;AAAA,MAEA,QAAQ,OAAO,YAAoB;AACjC,cAAM,SAAS,MAAM,cAAc;AACnC,eAAO,OAAO,IAAqB,oBAAoB,OAAO,EAAE;AAAA,MAClE;AAAA,IACF;AAAA,IAEA,WAAW;AAAA;AAAA,MAET,QAAQ,OAAO,QAA+B;AAC5C,cAAM,SAAS,MAAM,cAAc;AACnC,eAAO,OAAO,KAAuB,uBAAuB,GAAG;AAAA,MACjE;AAAA,MAEA,MAAM,YAAY;AAChB,cAAM,SAAS,MAAM,cAAc;AACnC,eAAO,OAAO,IAAwB,qBAAqB;AAAA,MAC7D;AAAA,MAEA,KAAK,OAAO,eAAuB;AACjC,cAAM,SAAS,MAAM,cAAc;AACnC,eAAO,OAAO;AAAA,UACZ,uBAAuB,UAAU;AAAA,QACnC;AAAA,MACF;AAAA,MAEA,QAAQ,OAAO,eAAuB;AACpC,cAAM,SAAS,MAAM,cAAc;AACnC,eAAO,OAAO;AAAA,UACZ,uBAAuB,UAAU;AAAA,QACnC;AAAA,MACF;AAAA,MAEA,eAAe,OAAO,eAAuB;AAC3C,cAAM,SAAS,MAAM,cAAc;AACnC,eAAO,OAAO;AAAA,UACZ,uBAAuB,UAAU;AAAA,QACnC;AAAA,MACF;AAAA,MAEA,eAAe,OAAO,eAAuB;AAC3C,cAAM,SAAS,MAAM,cAAc;AACnC,eAAO,OAAO;AAAA,UACZ,uBAAuB,UAAU;AAAA,QACnC;AAAA,MACF;AAAA;AAAA,MAGA,KAAK,OAAO,YAAoB,UAAkB;AAChD,cAAM,SAAS,MAAM,cAAc;AACnC,eAAO,OAAO;AAAA,UACZ,uBAAuB,UAAU;AAAA,UACjC,EAAE,MAAM;AAAA,QACV;AAAA,MACF;AAAA,MAEA,SAAS,OAAO,YAAoB,gBAAwB;AAC1D,cAAM,SAAS,MAAM,cAAc;AACnC,eAAO,OAAO;AAAA,UACZ,uBAAuB,UAAU;AAAA,UACjC,EAAE,cAAc,YAAY;AAAA,QAC9B;AAAA,MACF;AAAA;AAAA,MAGA,QAAQ,OAAO,eAAuB;AACpC,cAAM,SAAS,MAAM,cAAc;AACnC,eAAO,OAAO;AAAA,UACZ,uBAAuB,UAAU;AAAA,QACnC;AAAA,MACF;AAAA,MAEA,MAAM,OAAO,YAAoB,QAAsB;AACrD,cAAM,SAAS,MAAM,cAAc;AACnC,eAAO,OAAO;AAAA,UACZ,uBAAuB,UAAU;AAAA,UACjC;AAAA,QACF;AAAA,MACF;AAAA;AAAA,MAGA,gBAAgB,OACd,YACA,QACG;AACH,cAAM,SAAS,MAAM,cAAc;AACnC,eAAO,OAAO;AAAA,UACZ,uBAAuB,UAAU;AAAA,UACjC;AAAA,QACF;AAAA,MACF;AAAA,MAEA,gBAAgB,OAAO,eAAuB;AAC5C,cAAM,SAAS,MAAM,cAAc;AACnC,eAAO,OAAO;AAAA,UACZ,uBAAuB,UAAU;AAAA,QACnC;AAAA,MACF;AAAA;AAAA,MAGA,QAAQ,OAAO,YAAoB,QAAuB;AACxD,cAAM,SAAS,MAAM,cAAc;AACnC,eAAO,OAAO;AAAA,UACZ,uBAAuB,UAAU;AAAA,UACjC;AAAA,QACF;AAAA,MACF;AAAA;AAAA,MAGA,OAAO;AAAA,QACL,MAAM,OAAO,eAAuB;AAClC,gBAAM,SAAS,MAAM,cAAc;AACnC,iBAAO,OAAO;AAAA,YACZ,uBAAuB,UAAU;AAAA,UACnC;AAAA,QACF;AAAA,QAEA,QAAQ,OAAO,YAAoB,QAA2B;AAC5D,gBAAM,SAAS,MAAM,cAAc;AACnC,iBAAO,OAAO;AAAA,YACZ,uBAAuB,UAAU;AAAA,YACjC;AAAA,UACF;AAAA,QACF;AAAA,QAEA,QAAQ,OAAO,YAAoB,aAAqB;AACtD,gBAAM,SAAS,MAAM,cAAc;AACnC,iBAAO,OAAO;AAAA,YACZ,uBAAuB,UAAU,UAAU,QAAQ;AAAA,UACrD;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAAA,IAEA,IAAI;AAAA,MACF,MAAM,OACJ,MACA,MACAC,aAC2B;AAC3B,cAAM,SAAS,IAAI,gBAAgB,EAAE,KAAK,CAAC;AAC3C,YAAIA,UAAS,UAAW,QAAO,IAAI,aAAa,MAAM;AACtD,cAAM,WAAW,MAAM;AAAA,UACrB;AAAA,UACA;AAAA,UACA,YAAY,OAAO,SAAS,CAAC;AAAA,QAC/B;AACA,eAAO,SAAS,KAAK;AAAA,MACvB;AAAA,MAEA,MAAM,OAAO,MAAc,SAAkC;AAC3D,cAAM,SAAS,IAAI,gBAAgB,EAAE,KAAK,CAAC;AAC3C,cAAM,WAAW,MAAM;AAAA,UACrB;AAAA,UACA;AAAA,UACA,aAAa,OAAO,SAAS,CAAC;AAAA,QAChC;AACA,eAAO,SAAS,KAAK;AAAA,MACvB;AAAA,MAEA,OAAO,OACL,MACA,MACA,YACkB;AAClB,cAAM,SAAS,IAAI,gBAAgB,EAAE,KAAK,CAAC;AAC3C,cAAM,UAAU,OAAO,MAAM,WAAW,OAAO,SAAS,CAAC,IAAI,OAAO;AAAA,MACtE;AAAA,MAEA,MAAM,OAAO,MAAc,SAA2C;AACpE,cAAM,SAAS,IAAI,gBAAgB,EAAE,KAAK,CAAC;AAC3C,cAAM,WAAW,MAAM;AAAA,UACrB;AAAA,UACA;AAAA,UACA,SAAS,OAAO,SAAS,CAAC;AAAA,QAC5B;AACA,eAAO,SAAS,KAAK;AAAA,MACvB;AAAA,IACF;AAAA,EACF;AACF;","names":["parseToml","stringifyToml","options"]}

package/dist/client.d.cts

@@ -1 +1 @@
-export { y as Db9Client, z as Db9ClientOptions, ad as createDb9Client } from './client-CSOh3r_q.cjs';
+export { y as Db9Client, z as Db9ClientOptions, ad as createDb9Client } from './client-fUeI7kwU.cjs';

package/dist/client.d.ts

@@ -1 +1 @@
-export { y as Db9Client, z as Db9ClientOptions, ad as createDb9Client } from './client-CSOh3r_q.js';
+export { y as Db9Client, z as Db9ClientOptions, ad as createDb9Client } from './client-fUeI7kwU.js';

package/dist/client.js

@@ -80,11 +80,39 @@ function createHttpClient(options) {
     }
     return response.json();
   }
+  async function requestRaw(method, path, body, params, customHeaders) {
+    let url = `${baseUrl}${path}`;
+    if (params) {
+      const searchParams = new URLSearchParams();
+      for (const [key, value] of Object.entries(params)) {
+        if (value !== void 0) {
+          searchParams.set(key, value);
+        }
+      }
+      const qs = searchParams.toString();
+      if (qs) url += `?${qs}`;
+    }
+    const headers = {
+      ...options.headers,
+      ...customHeaders
+    };
+    const init = { method, headers };
+    if (body !== void 0) {
+      init.body = body;
+    }
+    const response = await fetchFn(url, init);
+    if (!response.ok) {
+      throw await Db9Error.fromResponse(response);
+    }
+    return response;
+  }
   return {
     get: (path, params) => request("GET", path, void 0, params),
     post: (path, body) => request("POST", path, body),
     put: (path, body) => request("PUT", path, body),
-    del: (path) => request("DELETE", path)
+    del: (path) => request("DELETE", path),
+    getRaw: (path, params) => requestRaw("GET", path, void 0, params),
+    putRaw: (path, body, headers) => requestRaw("PUT", path, body, void 0, headers)
   };
 }
 
@@ -184,6 +212,7 @@ function createDb9Client(options = {}) {
   let token = options.token;
   let tokenLoaded = !!token;
   const store = options.credentialStore ?? defaultCredentialStore();
+  const fetchFn = options.fetch ?? globalThis.fetch;
   const publicClient = createHttpClient({
     baseUrl,
     fetch: options.fetch
@@ -212,6 +241,33 @@ function createDb9Client(options = {}) {
       headers: { Authorization: `Bearer ${token}` }
     });
   }
+  function deriveFs9Url(dbId) {
+    const origin = baseUrl.replace(/\/api\/?$/, "");
+    return `${origin}/fs9/${dbId}`;
+  }
+  async function fsRequest(method, dbId, fsPath, body) {
+    if (!token && !tokenLoaded) {
+      await getAuthClient();
+    }
+    const fs9Url = deriveFs9Url(dbId);
+    const url = `${fs9Url}/api/v1${fsPath}`;
+    const headers = {};
+    if (token) {
+      headers["Authorization"] = `Bearer ${token}`;
+    }
+    if (body !== void 0) {
+      headers["Content-Type"] = "text/plain";
+    }
+    const init = { method, headers };
+    if (body !== void 0) {
+      init.body = body;
+    }
+    const response = await fetchFn(url, init);
+    if (!response.ok) {
+      throw await Db9Error.fromResponse(response);
+    }
+    return response;
+  }
   return {
     auth: {
       // Public endpoints (no token required)
@@ -357,6 +413,40 @@ function createDb9Client(options = {}) {
           );
         }
       }
+    },
+    fs: {
+      list: async (dbId, path, options2) => {
+        const params = new URLSearchParams({ path });
+        if (options2?.recursive) params.set("recursive", "true");
+        const response = await fsRequest(
+          "GET",
+          dbId,
+          `/readdir?${params.toString()}`
+        );
+        return response.json();
+      },
+      read: async (dbId, path) => {
+        const params = new URLSearchParams({ path });
+        const response = await fsRequest(
+          "GET",
+          dbId,
+          `/download?${params.toString()}`
+        );
+        return response.text();
+      },
+      write: async (dbId, path, content) => {
+        const params = new URLSearchParams({ path });
+        await fsRequest("PUT", dbId, `/upload?${params.toString()}`, content);
+      },
+      stat: async (dbId, path) => {
+        const params = new URLSearchParams({ path });
+        const response = await fsRequest(
+          "GET",
+          dbId,
+          `/stat?${params.toString()}`
+        );
+        return response.json();
+      }
     }
   };
 }