teak-sdk 1.0.86 → 1.0.88

package/README.md

@@ -1,8 +1,8 @@
 # Teak SDK
 
-Typed API client and OAuth discovery for Teak. The distribution bundles the
-canonical implementation from `packages/convex/client/sdk.ts`; it has no runtime
-dependencies and works without the Teak monorepo.
+Typed API client and OAuth discovery for Teak. The source lives in `src/`, and
+`bun run build` writes the npm package to `dist/`: one bundle with no runtime
+dependencies, so it works without the Teak monorepo.
 
 ```ts
 import { createTeakClient, discoverAuthServer } from "teak-sdk";

package/{dist/sdk.js → index.js}

@@ -1,12 +1,18 @@
-// ../convex/devUrls.ts
-var TEAK_DEV_DEPLOYMENT_NAME = "reminiscent-kangaroo-59";
-var DEFAULT_TEAK_DEV_CONVEX_URL = `https://${TEAK_DEV_DEPLOYMENT_NAME}.convex.cloud`;
-var DEFAULT_TEAK_DEV_CONVEX_SITE_URL = `https://${TEAK_DEV_DEPLOYMENT_NAME}.convex.site`;
-var isLocalDevelopmentHostname = (hostname) => {
-  const normalizedHostname = hostname.trim().toLowerCase();
-  return normalizedHostname === "localhost" || normalizedHostname === "127.0.0.1" || normalizedHostname.endsWith(".localhost");
+// ../convex/shared/utils/formatBytes.ts
+var BYTE_UNITS = ["B", "KB", "MB", "GB"];
+var formatBytes = (bytes) => {
+  if (!(bytes && Number.isFinite(bytes) && bytes > 0)) {
+    return "0 B";
+  }
+  let value = bytes;
+  let unit = 0;
+  while (value >= 1024 && unit < BYTE_UNITS.length - 1) {
+    value /= 1024;
+    unit += 1;
+  }
+  const digits = unit > 0 && value < 10 ? 1 : 0;
+  return `${value.toFixed(digits)} ${BYTE_UNITS[unit]}`;
 };
-
 // ../convex/shared/boundedResponse.ts
 class ResponseSizeLimitError extends Error {
 }
@@ -40,28 +46,20 @@ var consumeResponseWithinLimit = async (response, maxBytes, consume) => {
 };
 var readResponseTextWithinLimit = (response, maxBytes) => consumeResponseWithinLimit(response, maxBytes, (boundedResponse) => boundedResponse.text());
 
-// ../convex/shared/workosResources.ts
-var WORKOS_RESOURCES = {
-  api: "https://teakvault.com/api",
-  mcp: "https://teakvault.com/mcp"
-};
+// ../convex/shared/oauthSurfaces.ts
+var OAUTH_SURFACES = ["cli", "raycast", "chrome", "firefox"];
 
-// ../convex/client/authDiscovery.ts
-var OAUTH_SURFACES = [
-  "cli",
-  "raycast",
-  "chrome",
-  "firefox",
-  "safari"
-];
-var caches = new WeakMap;
-var object = (value) => {
-  if (!value || typeof value !== "object" || Array.isArray(value)) {
-    throw new Error("Invalid OAuth discovery document");
-  }
-  return value;
+// ../convex/devUrls.ts
+var TEAK_DEV_DEPLOYMENT_NAME = "reminiscent-kangaroo-59";
+var DEFAULT_TEAK_DEV_CONVEX_URL = `https://${TEAK_DEV_DEPLOYMENT_NAME}.convex.cloud`;
+var DEFAULT_TEAK_DEV_CONVEX_SITE_URL = `https://${TEAK_DEV_DEPLOYMENT_NAME}.convex.site`;
+var isLocalDevelopmentHostname = (hostname) => {
+  const normalizedHostname = hostname.trim().toLowerCase();
+  return normalizedHostname === "localhost" || normalizedHostname === "127.0.0.1" || normalizedHostname.endsWith(".localhost");
 };
-var loopback = (hostname) => isLocalDevelopmentHostname(hostname) || hostname === "[::1]";
+
+// ../convex/shared/oauthUrl.ts
+var isLoopbackHostname = (hostname) => isLocalDevelopmentHostname(hostname) || hostname === "[::1]";
 var privateHost = (hostname) => {
   const octets = hostname.split(".").map(Number);
   return hostname.endsWith(".localhost") || hostname.endsWith(".local") || hostname.startsWith("[") || octets.length === 4 && octets.every((n) => Number.isInteger(n) && n >= 0 && n <= 255) && (octets[0] === 0 || octets[0] === 10 || octets[0] === 100 && octets[1] >= 64 && octets[1] <= 127 || octets[0] === 127 || octets[0] === 169 && octets[1] === 254 || octets[0] === 172 && octets[1] >= 16 && octets[1] <= 31 || octets[0] === 192 && octets[1] === 168);
@@ -71,22 +69,39 @@ var validateOAuthUrl = (raw, local = false) => {
     throw new Error("Missing OAuth discovery URL");
   }
   const url = new URL(raw);
-  if (url.username || url.password || url.hash || url.protocol !== "https:" && !(local && url.protocol === "http:" && loopback(url.hostname)) || !local && loopback(url.hostname) || privateHost(url.hostname) && !(local && loopback(url.hostname))) {
+  if (url.username || url.password || url.hash || url.protocol !== "https:" && !(local && url.protocol === "http:" && isLoopbackHostname(url.hostname)) || !local && isLoopbackHostname(url.hostname) || privateHost(url.hostname) && !(local && isLoopbackHostname(url.hostname))) {
     throw new Error("Unsafe OAuth discovery URL");
   }
   return url;
 };
+
+// ../convex/shared/workosResources.ts
+var PRODUCTION_WORKOS_RESOURCE_ORIGIN = "https://teakvault.com";
+var workosResourcesFor = (url) => {
+  const { origin } = new URL(url);
+  return Object.freeze({ api: `${origin}/api`, mcp: `${origin}/mcp` });
+};
+var PRODUCTION_WORKOS_RESOURCES = workosResourcesFor(PRODUCTION_WORKOS_RESOURCE_ORIGIN);
+
+// src/authDiscovery.ts
+var caches = new WeakMap;
+var object = (value) => {
+  if (!value || typeof value !== "object" || Array.isArray(value)) {
+    throw new Error("Invalid OAuth discovery document");
+  }
+  return value;
+};
 function discoverAuthServer(siteUrl, options = {}) {
   const site = validateOAuthUrl(siteUrl, true);
-  const siteIsLocal = loopback(site.hostname);
+  const siteIsLocal = isLoopbackHostname(site.hostname);
   const permittedLocalIssuer = options.localIssuer === undefined ? undefined : validateOAuthUrl(options.localIssuer, true);
-  if (permittedLocalIssuer && !loopback(permittedLocalIssuer.hostname)) {
+  if (permittedLocalIssuer && !isLoopbackHostname(permittedLocalIssuer.hostname)) {
     throw new Error("Development issuer must use loopback");
   }
   const local = siteIsLocal || permittedLocalIssuer !== undefined;
   const validateUrl = (raw) => {
     const url = validateOAuthUrl(raw, local);
-    if (loopback(url.hostname) && !siteIsLocal && url.origin !== permittedLocalIssuer?.origin) {
+    if (isLoopbackHostname(url.hostname) && !siteIsLocal && url.origin !== permittedLocalIssuer?.origin) {
       throw new Error("Unapproved loopback OAuth server");
     }
     return url;
@@ -113,7 +128,7 @@ function discoverAuthServer(siteUrl, options = {}) {
   const read = async (url) => {
     const response = await fetchImpl(url, {
       method: "GET",
-      credentials: "omit",
+      ...{ credentials: "omit" },
       redirect: "error",
       headers: { Accept: "application/json" },
       signal: controller.signal
@@ -158,7 +173,7 @@ function discoverAuthServer(siteUrl, options = {}) {
         throw new Error("Missing OAuth client registration");
       }
     }
-    if (resource.resource !== WORKOS_RESOURCES.mcp) {
+    if (resource.resource !== PRODUCTION_WORKOS_RESOURCES.mcp && resource.resource !== workosResourcesFor(site.origin).mcp) {
       throw new Error("OAuth resource mismatch");
     }
     return Object.freeze({
@@ -182,7 +197,18 @@ function discoverAuthServer(siteUrl, options = {}) {
   });
   return pending;
 }
-// ../convex/client/workosConnect.ts
+// src/oauthCredentials.ts
+var isWorkosCredential = (saved) => Boolean(saved?.origin && saved.issuer && saved.clientId?.startsWith("client_"));
+var matchesBinding = (saved, current) => saved?.origin === current.origin && saved.issuer === current.issuer && saved.clientId === current.clientId;
+var isRefreshTokenDead = (result) => !result.ok && result.reason === "refresh_token_rejected";
+var refreshAndSave = async (refresh, save) => {
+  const renewed = await refresh();
+  if (renewed !== null && renewed !== undefined) {
+    await save(renewed);
+  }
+  return renewed;
+};
+// src/workosConnect.ts
 var WORKOS_CONNECT_SCOPE = "openid profile email offline_access";
 var MAX_RESPONSE_BYTES = 64 * 1024;
 var MAX_TOKEN_LIFETIME_SECONDS = 365 * 24 * 3600;
@@ -196,7 +222,7 @@ var base64Url = (bytes) => {
 };
 var randomBase64Url = (byteLength) => base64Url(crypto.getRandomValues(new Uint8Array(byteLength)));
 var createPkceChallenge = async (verifier) => base64Url(new Uint8Array(await crypto.subtle.digest("SHA-256", new TextEncoder().encode(verifier))));
-var apiResource = (auth) => new URL("/api", auth.resource).href;
+var apiResource = (auth) => workosResourcesFor(auth.resource).api;
 var createConnectAuthorizeUrl = (auth, params) => {
   const url = new URL(auth.authorizationEndpoint);
   url.searchParams.set("response_type", "code");
@@ -211,7 +237,7 @@ var createConnectAuthorizeUrl = (auth, params) => {
 };
 var send = (url, init, local) => fetch(validateOAuthUrl(url, local).href, {
   ...init,
-  credentials: "omit",
+  ...{ credentials: "omit" },
   redirect: "error",
   signal: AbortSignal.timeout(REQUEST_TIMEOUT_MS)
 });
@@ -304,8 +330,55 @@ var fetchConnectOwnerId = async (apiUrl, accessToken, options = {}) => {
 // ../convex/shared/markdown.ts
 var MARKDOWN_CONTENT_MAX_BYTES = 512 * 1024;
 
+// ../files-protocol/src/decisions.ts
+var CLEF_MODEL_ID = "@cf/cloudflare/clef";
+var CLEF_FLASH_MODEL_ID = "@cf/cloudflare/clef-flash";
+var CLEF_INPUT_USD_PER_MILLION = {
+  [CLEF_MODEL_ID]: 0.24,
+  [CLEF_FLASH_MODEL_ID]: 0.038
+};
+var RELEVANCE_LEVELS = [
+  "Not related",
+  "Loosely related",
+  "Relevant",
+  "Exactly what they are looking for"
+];
+var RELEVANCE_MAX_SCORE = RELEVANCE_LEVELS.length - 1;
+// ../files-protocol/src/embeddings.ts
+var ASCII_TOKEN_COST = 1 / 3;
+// ../files-protocol/src/storage.ts
+var FILES_UPLOAD_MAX_BYTES = 100 * 1024 * 1024;
+var FILES_SIGNED_URL_MIN_VALIDITY_SECONDS = 7 * 24 * 60 * 60;
+var FILE_CACHE_MAX_AGE_SECONDS = FILES_SIGNED_URL_MIN_VALIDITY_SECONDS - 24 * 60 * 60;
+var FILES_PRIVATE_CACHE_CONTROL = `private, max-age=${FILE_CACHE_MAX_AGE_SECONDS}, immutable`;
+var FILES_EDGE_CACHE_CONTROL = `public, max-age=${FILE_CACHE_MAX_AGE_SECONDS}, immutable`;
+var FILES_DEV_KEY_PREFIX = "dev/";
+var filesUserKeyRoot = (envPrefix) => `${envPrefix}users/`;
+var filesExportKeyRoot = (envPrefix) => `${envPrefix}exports/`;
+var FILES_OBJECT_KEY_ROOTS = ["", FILES_DEV_KEY_PREFIX].flatMap((envPrefix) => [filesUserKeyRoot(envPrefix), filesExportKeyRoot(envPrefix)]);
+
+// ../files-protocol/src/inspect.ts
+var FILES_INSPECT_MAX_ARCHIVE_BYTES = 25 * 1024 * 1024;
+var FILES_INSPECT_MAX_SOURCE_BYTES = 2 * 1024 * 1024;
+// ../files-protocol/src/remoteAsset.ts
+var FILES_REMOTE_ASSET_MAX_BYTES = {
+  image: 20 * 1024 * 1024,
+  video: 50 * 1024 * 1024
+};
+// ../files-protocol/src/workflows.ts
+var WORKFLOW_RPC_MAX_TTL_SECONDS = 5 * 60;
+var WORKFLOW_RPC_MAX_BODY_BYTES = 4 * 1024 * 1024;
+var RPC_KINDS = new Set(["action", "mutation", "query"]);
+// ../files-protocol/src/index.ts
+var FILES_UPLOAD_MAX_TTL_SECONDS = 15 * 60;
+var FILES_OP_MAX_TTL_SECONDS = 15 * 60;
+var FILES_OP_TTL_SECONDS = 10 * 60;
+var FILES_TRANSCRIPT_MAX_BYTES = 512 * 1024;
+var FILES_EXTRACTED_TEXT_MAX_CHARACTERS = 512 * 1024;
+var FILES_EXTRACTED_TEXT_MAX_BYTES = 512 * 1024;
+var FILES_IMPORT_PAGE_BYTES = 4 * 1024 * 1024;
+
 // ../convex/shared/fileFormats.ts
-var MAX_FILE_SIZE = 100 * 1024 * 1024;
 var GENERIC_MIME_TYPES = new Set([
   "",
   "application/binary",
@@ -764,6 +837,19 @@ var FILE_FORMATS = [
     preview: "audio"
   })
 ];
+// ../convex/shared/tags.ts
+var MAX_TAG_NAME_LENGTH = 64;
+var TAG_OPERATION_STALL_MS = 2 * 60000;
+var TAG_ERROR_MESSAGES = {
+  EMPTY_NAME: "Name the tag",
+  NAME_TOO_LONG: `Tags can be at most ${MAX_TAG_NAME_LENGTH} characters`,
+  NOT_FOUND: "Tag not found",
+  SAME_TAG: "Choose a different tag to merge into",
+  OPERATION_RUNNING: "Another tag change is still running",
+  OPERATION_NOT_FOUND: "Tag operation not found"
+};
+var HIDDEN_TAG_KEYS = ["secret", "hidden"];
+var hiddenTagKeys = new Set(HIDDEN_TAG_KEYS);
 // ../convex/shared/constants.ts
 var cardTypes = [
   "text",
@@ -775,7 +861,9 @@ var cardTypes = [
   "palette",
   "quote"
 ];
+var TRASH_RETENTION_MS = 30 * 24 * 60 * 60 * 1000;
 var MULTIPART_UPLOAD_THRESHOLD = 8 * 1024 * 1024;
+var API_IDEMPOTENCY_KEY_TTL_MS = 24 * 60 * 60 * 1000;
 var CARD_TYPES = [...cardTypes];
 var CARD_TYPE_REGISTRY = {
   text: {
@@ -828,27 +916,42 @@ var RESERVED_KEYWORDS = [
   { value: "trash", label: "Trash" }
 ];
 
-// ../convex/client/sdk.ts
+// src/index.ts
 var CARD_TYPES2 = cardTypes;
-var CARD_SORTS = ["newest", "oldest"];
+var CARD_SORTS = ["newest", "oldest", "relevance", "shuffle"];
 var ERROR_CODES = [
   "AUTH_REQUIRED",
   "BAD_REQUEST",
+  "CARD_LIMIT_REACHED",
   "CONFIG_ERROR",
   "CONFLICT",
   "CONTENT_TOO_LARGE",
+  "FILE_TOO_LARGE",
+  "FOLDER_LIMIT",
+  "FORBIDDEN",
+  "IN_PROGRESS",
   "INTERNAL_ERROR",
   "INVALID_API_KEY",
   "INVALID_INPUT",
+  "INVALID_STORAGE_KEY",
   "INVALID_UTF8",
+  "LIMIT_REACHED",
   "METHOD_NOT_ALLOWED",
   "NETWORK_ERROR",
   "NOT_FOUND",
+  "NO_CONTENT",
+  "NOT_IN_TRASH",
   "PARSE_ERROR",
   "RATE_LIMITED",
   "REQUEST_FAILED",
+  "SERVICE_UNAVAILABLE",
+  "SMART_FOLDER",
+  "TAG_EXISTS",
+  "TAG_OPERATION_RUNNING",
   "TIMEOUT",
-  "UNAUTHORIZED"
+  "TYPE_MISMATCH",
+  "UNAUTHORIZED",
+  "UNSUPPORTED_TYPE"
 ];
 
 class TeakApiError extends Error {
@@ -931,6 +1034,9 @@ var buildCardsSearchParams = (input) => {
   if (input.tag?.trim()) {
     search.set("tag", input.tag.trim());
   }
+  if (input.folder?.trim()) {
+    search.set("folder", input.folder.trim());
+  }
   if (input.cursor?.trim()) {
     search.set("cursor", input.cursor.trim());
   }
@@ -943,8 +1049,20 @@ var buildCardsSearchParams = (input) => {
   if (input.trashed) {
     search.set("trashed", "true");
   }
-  if (input.sort === "oldest") {
-    search.set("sort", "oldest");
+  if (input.archived === "only" || input.archived === "include") {
+    search.set("archived", input.archived);
+  }
+  if (input.similarTo?.trim()) {
+    search.set("similarTo", input.similarTo.trim());
+  }
+  if (input.mode === "keyword" || input.mode === "semantic") {
+    search.set("mode", input.mode);
+  }
+  if (input.sort === "oldest" || input.sort === "shuffle") {
+    search.set("sort", input.sort);
+  }
+  if (input.sort === "shuffle" && typeof input.shuffleSeed === "number") {
+    search.set("shuffleSeed", String(input.shuffleSeed));
   }
   if (typeof input.createdAfter === "number") {
     search.set("createdAfter", String(input.createdAfter));
@@ -983,6 +1101,35 @@ var asPage = (value) => {
   }
   return value;
 };
+var asFolder = (value) => {
+  if (!isObject(value) || typeof value.id !== "string" || typeof value.name !== "string") {
+    throw new TeakApiError("PARSE_ERROR", "Teak returned an unexpected folder payload.");
+  }
+  return value;
+};
+var asFolders = (value) => {
+  if (!(isObject(value) && Array.isArray(value.items))) {
+    throw new TeakApiError("PARSE_ERROR");
+  }
+  return { items: value.items.map(asFolder) };
+};
+var asFolderCards = (value) => {
+  if (!(isObject(value) && isStringArray(value.updatedIds) && isStringArray(value.failedIds))) {
+    throw new TeakApiError("PARSE_ERROR");
+  }
+  return {
+    updatedIds: value.updatedIds,
+    failedIds: value.failedIds,
+    folderLimitIds: isStringArray(value.folderLimitIds) ? value.folderLimitIds : []
+  };
+};
+var asTagOperation = (value) => {
+  if (!isObject(value) || typeof value.id !== "string" || typeof value.status !== "string") {
+    throw new TeakApiError("PARSE_ERROR", "Teak returned an unexpected tag operation payload.");
+  }
+  const { operationId: _operationId, ...operation } = value;
+  return operation;
+};
 var asTags = (value) => {
   if (!(isObject(value) && Array.isArray(value.items))) {
     throw new TeakApiError("PARSE_ERROR");
@@ -1000,6 +1147,24 @@ var asCreate = (value) => {
   }
   return value;
 };
+var asRefresh = (value) => {
+  if (!isObject(value) || typeof value.cardId !== "string" || value.status !== "queued") {
+    throw new TeakApiError("PARSE_ERROR");
+  }
+  return value;
+};
+var asSavedPdf = (value) => {
+  if (!isObject(value) || typeof value.cardId !== "string" || typeof value.created !== "boolean") {
+    throw new TeakApiError("PARSE_ERROR");
+  }
+  return { cardId: value.cardId, created: value.created };
+};
+var asCardContent = (value) => {
+  if (!isObject(value) || typeof value.cardId !== "string" || typeof value.text !== "string" || typeof value.charCount !== "number" || typeof value.truncated !== "boolean" || !["document", "transcript", "content"].includes(String(value.kind))) {
+    throw new TeakApiError("PARSE_ERROR");
+  }
+  return value;
+};
 var asMe = (value) => {
   if (!(isObject(value) && isObject(value.data)) || typeof value.data.id !== "string") {
     throw new TeakApiError("PARSE_ERROR");
@@ -1074,6 +1239,25 @@ var createTeakClient = (options) => {
   const qs = (params) => buildCardsSearchParams(params);
   const idempotency = (requestOptions) => requestOptions?.idempotencyKey ? { "Idempotency-Key": requestOptions.idempotencyKey } : {};
   const cardPath = (id) => `/v1/cards/${encodeURIComponent(id)}`;
+  const folderPath = (id) => `/v1/folders/${encodeURIComponent(id)}`;
+  const putFile = async (uploadUrl, bytes, mimeType) => {
+    const headers = new Headers({ "Content-Type": mimeType });
+    const byteLength = byteLengthForBody(bytes);
+    if (byteLength !== null) {
+      headers.set("Content-Length", String(byteLength));
+    }
+    const response = await fetchImpl(uploadUrl, {
+      body: bytes,
+      headers,
+      method: "PUT"
+    });
+    if (!response.ok) {
+      throw new TeakApiError("REQUEST_FAILED", `Upload failed with status ${response.status}`, { status: response.status });
+    }
+    return { fileEtag: response.headers.get("etag") ?? undefined };
+  };
+  const createThumbnailUpload = (id, input) => request(`${cardPath(id)}/thumbnail/upload`, { body: JSON.stringify(input), method: "POST" }, asUpload);
+  const applyThumbnail = (id, fileKey) => request(`${cardPath(id)}/thumbnail`, { body: JSON.stringify({ fileKey }), method: "PUT" }, asCard);
   return {
     cards: {
       bulk: (operation, items, requestOptions) => request("/v1/cards/bulk", {
@@ -1091,13 +1275,43 @@ var createTeakClient = (options) => {
         headers: idempotency(requestOptions),
         method: "POST"
       }, asCreate),
+      content: (id) => request(`${cardPath(id)}/content`, { method: "GET" }, asCardContent),
       delete: (id, deleteOptions) => request(`${cardPath(id)}${deleteOptions?.permanent ? "?permanent=true" : ""}`, { method: "DELETE" }, () => null),
       duplicate: (url) => request(`/v1/cards/duplicate?${new URLSearchParams({ url }).toString()}`, { method: "GET" }, (v) => isObject(v) && typeof v.cardId === "string" ? v.cardId : null),
       favorites: (input = {}) => request(`/v1/cards?${qs({ include: "content,metadata", ...input, favorited: true })}`, { method: "GET" }, asPage),
       get: (id) => request(cardPath(id), { method: "GET" }, asCard),
+      links: (id) => request(cardPath(id), { method: "GET" }, (value) => {
+        const card = asCard(value);
+        return {
+          backlinks: card.backlinks ?? [],
+          backlinksTruncated: card.backlinksTruncated === true,
+          links: card.links ?? [],
+          linksTruncated: card.linksTruncated === true
+        };
+      }),
       list: (input = {}) => request(`/v1/cards?${qs(input)}`, { method: "GET" }, asPage),
+      createThumbnailUpload,
+      refresh: (id) => request(`${cardPath(id)}/refresh`, { method: "POST" }, asRefresh),
+      resetThumbnail: (id) => request(`${cardPath(id)}/thumbnail`, { method: "DELETE" }, asCard),
       restore: (id) => request(`${cardPath(id)}/restore`, { method: "POST" }, () => null),
+      similar: (id, input = {}) => request(`/v1/cards?${qs({ include: "content,metadata", ...input, similarTo: id })}`, { method: "GET" }, asPage),
       search: (input = {}) => request(`/v1/cards?${qs({ include: "content,metadata", ...input })}`, { method: "GET" }, asPage),
+      setArchived: (id, isArchived) => request(cardPath(id), { body: JSON.stringify({ isArchived }), method: "PATCH" }, asCard),
+      setThumbnail: async (id, image, mimeType) => {
+        if (isObject(image) && typeof image.fileKey === "string") {
+          return applyThumbnail(id, image.fileKey);
+        }
+        const bytes = image;
+        const fileSize = byteLengthForBody(bytes);
+        if (fileSize === null || !mimeType) {
+          throw new TeakApiError("INVALID_INPUT", "setThumbnail needs the image's bytes and its MIME type.");
+        }
+        const upload = await createThumbnailUpload(id, { fileSize, mimeType });
+        await putFile(upload.uploadUrl, bytes, mimeType);
+        return applyThumbnail(id, upload.fileKey);
+      },
+      savePdf: (id) => request(`${cardPath(id)}/save-pdf`, { method: "POST" }, asSavedPdf),
+      setDone: (id, done) => request(`${cardPath(id)}/done`, { method: done ? "POST" : "DELETE" }, asCard),
       setFavorite: (id, isFavorited) => request(`${cardPath(id)}/favorite`, { body: JSON.stringify({ isFavorited }), method: "PATCH" }, asCard),
       update: (id, input) => request(cardPath(id), { body: JSON.stringify(input), method: "PATCH" }, asCard)
     },
@@ -1105,28 +1319,26 @@ var createTeakClient = (options) => {
       latest: () => request("/v1/exports/latest", { method: "GET" }, asLatestExport),
       start: () => request("/v1/exports", { method: "POST" }, (v) => v.job)
     },
+    folders: {
+      addCards: (id, cardIds) => request(`${folderPath(id)}/cards`, { body: JSON.stringify({ cardIds }), method: "POST" }, asFolderCards),
+      create: (input) => request("/v1/folders", { body: JSON.stringify(input), method: "POST" }, asFolder),
+      delete: (id) => request(folderPath(id), { method: "DELETE" }, () => null),
+      get: (id) => request(folderPath(id), { method: "GET" }, asFolder),
+      list: () => request("/v1/folders", { method: "GET" }, asFolders),
+      removeCards: (id, cardIds) => request(`${folderPath(id)}/cards`, { body: JSON.stringify({ cardIds }), method: "DELETE" }, asFolderCards),
+      update: (id, input) => request(folderPath(id), { body: JSON.stringify(input), method: "PATCH" }, asFolder)
+    },
     me: () => request("/v1/me", { method: "GET" }, asMe),
     tags: {
-      list: () => request("/v1/tags", { method: "GET" }, asTags)
+      delete: (tag) => request("/v1/tags/delete", { body: JSON.stringify({ tag }), method: "POST" }, asTagOperation),
+      list: () => request("/v1/tags", { method: "GET" }, asTags),
+      merge: (from, into) => request("/v1/tags/merge", { body: JSON.stringify({ from, into }), method: "POST" }, asTagOperation),
+      operation: (id) => request(`/v1/tags/operations/${encodeURIComponent(id)}`, { method: "GET" }, asTagOperation),
+      rename: (from, to) => request("/v1/tags/rename", { body: JSON.stringify({ from, to }), method: "POST" }, asTagOperation)
     },
     uploads: {
       create: (input) => request("/v1/uploads", { body: JSON.stringify(input), method: "POST" }, asUpload),
-      putFile: async (uploadUrl, bytes, mimeType) => {
-        const headers = new Headers({ "Content-Type": mimeType });
-        const byteLength = byteLengthForBody(bytes);
-        if (byteLength !== null) {
-          headers.set("Content-Length", String(byteLength));
-        }
-        const response = await fetchImpl(uploadUrl, {
-          body: bytes,
-          headers,
-          method: "PUT"
-        });
-        if (!response.ok) {
-          throw new TeakApiError("REQUEST_FAILED", `Upload failed with status ${response.status}`, { status: response.status });
-        }
-        return { fileEtag: response.headers.get("etag") ?? undefined };
-      }
+      putFile
     }
   };
 };
@@ -1146,11 +1358,16 @@ export {
   disconnectConnectGrant,
   discoverAuthServer,
   fetchConnectOwnerId,
+  formatBytes,
   isCardType,
+  isRefreshTokenDead,
   isStringList,
+  isWorkosCredential,
+  matchesBinding,
   normalizeLimit,
   parseTags,
   randomBase64Url,
+  refreshAndSave,
   requestConnectTokens,
   staticTokenProvider,
   validateOAuthUrl

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "teak-sdk",
-  "version": "1.0.86",
+  "version": "1.0.88",
   "description": "Teak API client and OAuth discovery for browser and Node applications.",
   "repository": {
     "type": "git",
@@ -11,25 +11,10 @@
   "type": "module",
   "exports": {
     ".": {
-      "types": "./dist/types/client/sdk.d.ts",
-      "import": "./dist/sdk.js"
+      "types": "./types/index.d.ts",
+      "import": "./index.js"
     }
   },
-  "files": [
-    "dist",
-    "README.md"
-  ],
-  "scripts": {
-    "build": "bun --no-env-file run build.ts",
-    "prepack": "bun run build",
-    "typecheck": "tsc build.ts ../convex/client/sdk.ts --strict --noEmit --moduleResolution bundler --module esnext --target es2022 --skipLibCheck --types bun,node"
-  },
-  "devDependencies": {
-    "@teak/convex": "workspace:*",
-    "@types/bun": "^1.4.0",
-    "@types/node": "^26.2.0",
-    "typescript": "^6.0.3"
-  },
   "publishConfig": {
     "access": "public",
     "provenance": true

package/{dist/types/client → types}/authDiscovery.d.ts

@@ -1,5 +1,6 @@
-export declare const OAUTH_SURFACES: readonly ["cli", "raycast", "chrome", "firefox", "safari"];
-export type OAuthSurface = (typeof OAUTH_SURFACES)[number];
+import { type OAuthSurface } from "./convex/shared/oauthSurfaces.js";
+export { OAUTH_SURFACES, type OAuthSurface, } from "./convex/shared/oauthSurfaces.js";
+export { validateOAuthUrl } from "./convex/shared/oauthUrl.js";
 export interface AuthDiscovery {
     readonly authorizationEndpoint: string;
     readonly clients: Readonly<Record<OAuthSurface, string>>;
@@ -8,7 +9,6 @@ export interface AuthDiscovery {
     readonly resource: string;
     readonly tokenEndpoint: string;
 }
-export declare const validateOAuthUrl: (raw: unknown, local?: boolean) => URL;
 export declare function discoverAuthServer(siteUrl: string, options?: {
     fetch?: typeof fetch;
     forceRefresh?: boolean;

package/{dist/types → types/convex}/devUrls.d.ts

@@ -1,4 +1,3 @@
-/** The shared cloud dev deployment every checkout and cloud session uses. */
 export declare const TEAK_DEV_DEPLOYMENT_NAME = "reminiscent-kangaroo-59";
 export declare const DEFAULT_TEAK_DEV_APP_URL = "http://localhost:3000";
 export declare const DEFAULT_TEAK_DEV_CONVEX_URL = "https://reminiscent-kangaroo-59.convex.cloud";