hydrousdb 3.5.0 → 3.5.2

package/dist/index.cjs

@@ -179,98 +179,74 @@ var HttpClient = class {
 
 // src/routes.ts
 var RECORDS = {
-  /** GET|POST|PATCH|DELETE|HEAD /api/:bucketKey */
+  /** Base path for a bucket: GET|POST /api/:bucketKey */
   bucket: (bucketKey) => `/api/${bucketKey}`,
-  /** POST /api/:bucketKey/batch/insert */
+  /** Batch insert: POST /api/:bucketKey/batch/insert */
   batchInsert: (bucketKey) => `/api/${bucketKey}/batch/insert`,
-  /** POST /api/:bucketKey/batch/update */
+  /** Batch update: POST /api/:bucketKey/batch/update */
   batchUpdate: (bucketKey) => `/api/${bucketKey}/batch/update`,
-  /** POST /api/:bucketKey/batch/delete */
+  /** Batch delete: POST /api/:bucketKey/batch/delete */
   batchDelete: (bucketKey) => `/api/${bucketKey}/batch/delete`
 };
 var ANALYTICS = {
-  /** POST /api/analytics/:bucketKey */
+  /** Analytics query: POST /api/analytics/:bucketKey */
   query: (bucketKey) => `/api/analytics/${bucketKey}`
 };
 var AUTH = {
-  /** POST /api/auth/signup   body: { email, password, fullName?, ...extra } */
+  // ── Core ────────────────────────────────────────────────────────────────
   signup: "/api/auth/signup",
-  /** POST /api/auth/signin   body: { email, password } */
   signin: "/api/auth/signin",
-  /** POST /api/auth/signout  body: { sessionId, allDevices? } */
   signout: "/api/auth/signout",
-  /** POST /api/auth/session/validate  body: { sessionId } */
+  // ── Google OAuth ─────────────────────────────────────────────────────────
+  // POST   /api/auth/google        — sign in or create account via Google ID token
+  // POST   /api/auth/google/link   — link Google to an existing email/password account
+  // DELETE /api/auth/google/unlink — remove Google (only if a password is set)
+  googleSignIn: "/api/auth/google",
+  googleLink: "/api/auth/google/link",
+  googleUnlink: "/api/auth/google/unlink",
+  // ── Session ──────────────────────────────────────────────────────────────
   sessionValidate: "/api/auth/session/validate",
-  /** POST /api/auth/session/refresh   body: { refreshToken } */
   sessionRefresh: "/api/auth/session/refresh",
-  /** GET  /api/auth/user?userId=... */
+  // ── User ─────────────────────────────────────────────────────────────────
   getUser: "/api/auth/user",
-  /** GET  /api/auth/users?limit=&cursor= */
-  listUsers: "/api/auth/users",
-  /** PATCH /api/auth/user  body: { sessionId, userId, updates: {...} } */
   updateUser: "/api/auth/user",
-  /** DELETE /api/auth/user?userId=...  body: { sessionId } */
   deleteUser: "/api/auth/user",
-  /** DELETE /api/auth/user/hard?userId=...  body: { sessionId } */
+  // ── Admin ─────────────────────────────────────────────────────────────────
+  listUsers: "/api/auth/users",
   hardDeleteUser: "/api/auth/user/hard",
-  /** DELETE /api/auth/users/bulk  body: { userIds, hard?, sessionId } */
   bulkDeleteUsers: "/api/auth/users/bulk",
-  /** POST /api/auth/password/change  body: { sessionId, userId, oldPassword, newPassword } */
+  // ── Account ───────────────────────────────────────────────────────────────
+  accountLock: "/api/auth/account/lock",
+  accountUnlock: "/api/auth/account/unlock",
+  // ── Password ──────────────────────────────────────────────────────────────
   passwordChange: "/api/auth/password/change",
-  /** POST /api/auth/password/reset/request  body: { email } */
   passwordResetRequest: "/api/auth/password/reset/request",
-  /** POST /api/auth/password/reset/confirm  body: { resetToken, newPassword } */
   passwordResetConfirm: "/api/auth/password/reset/confirm",
-  /** POST /api/auth/email/verify/request  body: { userId } */
+  // ── Email Verification ────────────────────────────────────────────────────
   emailVerifyRequest: "/api/auth/email/verify/request",
-  /** POST /api/auth/email/verify/confirm  body: { verifyToken } */
-  emailVerifyConfirm: "/api/auth/email/verify/confirm",
-  /** POST /api/auth/account/lock    body: { sessionId, userId, duration? } */
-  accountLock: "/api/auth/account/lock",
-  /** POST /api/auth/account/unlock  body: { sessionId, userId } */
-  accountUnlock: "/api/auth/account/unlock"
+  emailVerifyConfirm: "/api/auth/email/verify/confirm"
 };
 var STORAGE = {
-  /** GET /storage/info  — no auth required */
-  info: "/storage/info",
-  /** GET /storage/public/:fullScopedPath  — no auth required */
-  publicFile: (fullScopedPath) => `/storage/public/${fullScopedPath}`,
-  /** POST /storage/upload-url  body: { path, mimeType, size, isPublic?, overwrite?, expiresIn? } */
-  uploadUrl: "/storage/upload-url",
-  /** POST /storage/batch-upload-urls  body: { files: [...], expiresIn? } */
-  batchUploadUrls: "/storage/batch-upload-urls",
-  /** POST /storage/confirm  body: { path, mimeType, isPublic? } */
-  confirm: "/storage/confirm",
-  /** POST /storage/batch-confirm  body: { files: [...] } */
-  batchConfirm: "/storage/batch-confirm",
-  /** POST /storage/upload  multipart/form-data: file, path, mimeType, isPublic, overwrite */
+  base: "/storage",
   upload: "/storage/upload",
-  /** POST /storage/upload-raw  body: { path, content, mimeType?, isPublic?, overwrite? } */
-  uploadRaw: "/storage/upload-raw",
-  /** GET /storage/list?prefix=&limit=&cursor= */
+  uploadRaw: "/storage/upload/raw",
+  uploadUrl: "/storage/upload/url",
+  confirm: "/storage/upload/confirm",
+  batchUploadUrls: "/storage/upload/batch/urls",
+  batchConfirm: "/storage/upload/batch/confirm",
+  download: (encodedPath) => `/storage/download/${encodedPath}`,
+  batchDownload: "/storage/download/batch",
   list: "/storage/list",
-  /** GET /storage/download/:path  — requires X-Storage-Key */
-  download: (filePath) => `/storage/download/${filePath}`,
-  /** POST /storage/batch-download  body: { paths: [...], concurrency? } */
-  batchDownload: "/storage/batch-download",
-  /** GET /storage/metadata/:path */
-  metadata: (filePath) => `/storage/metadata/${filePath}`,
-  /** POST /storage/signed-url  body: { path, expiresIn? } */
+  metadata: (encodedPath) => `/storage/metadata/${encodedPath}`,
   signedUrl: "/storage/signed-url",
-  /** PATCH /storage/visibility  body: { path, isPublic } */
   visibility: "/storage/visibility",
-  /** POST /storage/folder  body: { path } */
   folder: "/storage/folder",
-  /** DELETE /storage/file  body: { path } */
   file: "/storage/file",
-  /** DELETE /storage/folder  body: { path } */
-  folderDelete: "/storage/folder",
-  /** POST /storage/move  body: { from, to } */
+  folderDelete: "/storage/folder/delete",
   move: "/storage/move",
-  /** POST /storage/copy  body: { from, to } */
   copy: "/storage/copy",
-  /** GET /storage/stats */
-  stats: "/storage/stats"
+  stats: "/storage/stats",
+  info: "/storage/info"
 };
 
 // src/auth/client.ts
@@ -298,8 +274,7 @@ var AuthClient = class {
    */
   async signup(options) {
     const result = await this.post(AUTH.signup, options);
-    const user = result.data;
-    return this._buildAuthResult(user, result.session);
+    return this._buildAuthResult(result.data, result.session, result.isNew);
   }
   /**
    * Sign in with email + password.
@@ -309,8 +284,7 @@ var AuthClient = class {
    */
   async login(options) {
     const result = await this.post(AUTH.signin, options);
-    const user = result.data;
-    return this._buildAuthResult(user, result.session);
+    return this._buildAuthResult(result.data, result.session, result.isNew);
   }
   /**
    * Sign out — revoke a session (or all sessions with `allDevices: true`).
@@ -321,6 +295,111 @@ var AuthClient = class {
   async logout(options) {
     await this.post(AUTH.signout, options);
   }
+  // ─── Google Sign-In ───────────────────────────────────────────────────────
+  /**
+   * Sign in or create an account using a Google ID token.
+   *
+   * Pass the `idToken` from the Google Sign-In SDK. Your server verifies the
+   * token against Google's public keys, then either creates a new account or
+   * signs in the returning user. No password is ever set or required.
+   *
+   * The returned `AuthResult` is identical in shape to `login()` and `signup()`.
+   * Sessions from Google sign-in work with `validateSession`, `refreshSession`,
+   * and `logout` — nothing changes after the initial sign-in.
+   *
+   * Use `isNew` to drive onboarding flows.
+   *
+   * @example
+   * ```ts
+   * // Web — Google Identity Services
+   * google.accounts.id.initialize({
+   *   client_id: 'YOUR_GOOGLE_CLIENT_ID',
+   *   callback: async ({ credential }) => {
+   *     const { user, session, isNew } = await db.auth().continueWithGoogle({
+   *       idToken: credential,
+   *     });
+   *     if (isNew) router.push('/onboarding');
+   *     else       router.push('/dashboard');
+   *   },
+   * });
+   *
+   * // React Native
+   * const { idToken } = await GoogleSignin.signIn();
+   * const { user, session, isNew } = await db.auth().continueWithGoogle({ idToken });
+   * ```
+   *
+   * Server: POST /api/auth/google
+   * Body: { idToken }
+   */
+  async continueWithGoogle(options) {
+    if (!options.idToken || typeof options.idToken !== "string") {
+      throw new Error("[HydrousDB] continueWithGoogle: idToken is required and must be a string.");
+    }
+    const result = await this.post(AUTH.googleSignIn, {
+      idToken: options.idToken
+    });
+    return this._buildAuthResult(result.data, result.session, result.isNew);
+  }
+  /**
+   * Link a Google account to the currently signed-in user.
+   *
+   * After linking, the user can sign in with either their email + password
+   * or with Google — both produce valid sessions.
+   *
+   * The server is idempotent — calling this when Google is already linked
+   * returns the updated user without creating duplicate entries.
+   *
+   * @example
+   * ```ts
+   * // User is signed in with email. They click "Connect Google" in settings.
+   * const { idToken } = await GoogleSignin.signIn();
+   * const updatedUser = await db.auth().linkGoogle({
+   *   sessionId: currentSession.sessionId,
+   *   idToken,
+   * });
+   * ```
+   *
+   * Server: POST /api/auth/google/link
+   * Body: { sessionId, idToken }
+   */
+  async linkGoogle(options) {
+    if (!options.sessionId) {
+      throw new Error("[HydrousDB] linkGoogle: sessionId is required.");
+    }
+    if (!options.idToken || typeof options.idToken !== "string") {
+      throw new Error("[HydrousDB] linkGoogle: idToken is required and must be a string.");
+    }
+    const result = await this.post(AUTH.googleLink, {
+      sessionId: options.sessionId,
+      idToken: options.idToken
+    });
+    return result.data;
+  }
+  /**
+   * Unlink Google from the currently signed-in user's account.
+   *
+   * Only succeeds if the user has a password set — you cannot remove the only
+   * sign-in method. If the account was created via Google and has no password,
+   * call `changePassword` first.
+   *
+   * @example
+   * ```ts
+   * await db.auth().unlinkGoogle({ sessionId: currentSession.sessionId });
+   * ```
+   *
+   * Server: DELETE /api/auth/google/unlink
+   * Body: { sessionId }
+   */
+  async unlinkGoogle(options) {
+    if (!options.sessionId) {
+      throw new Error("[HydrousDB] unlinkGoogle: sessionId is required.");
+    }
+    await this.http.request(AUTH.googleUnlink, {
+      method: "DELETE",
+      body: { sessionId: options.sessionId },
+      headers: { "X-Api-Key": this.authKey }
+    });
+  }
   // ─── Session Management ───────────────────────────────────────────────────
   /**
    * Validate an existing session and retrieve the current user.
@@ -535,7 +614,7 @@ var AuthClient = class {
     await this.post(AUTH.emailVerifyConfirm, { verifyToken });
   }
   // ─── Private helpers ──────────────────────────────────────────────────────
-  _buildAuthResult(user, session) {
+  _buildAuthResult(user, session, isNew) {
     return {
       user,
       session: {
@@ -546,7 +625,8 @@ var AuthClient = class {
         expiresAt: session.expiresAt,
         refreshToken: session.refreshToken,
         refreshExpiresAt: session.expiresAt
-      }
+      },
+      isNew: isNew ?? false
     };
   }
 };
@@ -556,15 +636,21 @@ function buildQueryParams(options = {}) {
   const params = new URLSearchParams();
   if (options.limit !== void 0) params.set("limit", String(options.limit));
   if (options.offset !== void 0) params.set("offset", String(options.offset));
-  if (options.orderBy !== void 0) params.set("sortBy", options.orderBy);
   if (options.order !== void 0) params.set("sortOrder", options.order);
   if (options.fields !== void 0) params.set("fields", options.fields);
+  if (options.orderBy !== void 0) params.set("sortBy", options.orderBy);
+  if (options.sortBy !== void 0) params.set("sortBy", options.sortBy);
   if (options.startAfter !== void 0) params.set("cursor", options.startAfter);
   if (options.startAt !== void 0) params.set("cursor", options.startAt);
-  if (options.dateRange?.start !== void 0)
+  if (options.endAt !== void 0) params.set("endAt", options.endAt);
+  if (options.timeScope !== void 0) params.set("timeScope", options.timeScope);
+  if (options.startDate !== void 0) params.set("startDate", options.startDate);
+  if (options.endDate !== void 0) params.set("endDate", options.endDate);
+  if (options.dateRange?.start !== void 0 && options.startDate === void 0)
     params.set("startDate", new Date(options.dateRange.start).toISOString().split("T")[0]);
-  if (options.dateRange?.end !== void 0)
+  if (options.dateRange?.end !== void 0 && options.endDate === void 0)
     params.set("endDate", new Date(options.dateRange.end).toISOString().split("T")[0]);
+  if (options.year !== void 0) params.set("year", options.year);
   if (options.filters && options.filters.length > 0) {
     for (const f of options.filters) {
       const key = f.op === "==" ? f.field : `${f.field}[${f.op}]`;