{"version":3,"sources":["../../../src/server/proxy/index.ts","../../../src/regions/endpoints.ts","../../../src/regions/resolver.ts","../../../src/server/proxy/proxy-base.ts","../../../src/server/proxy/rate-limiter.ts","../../../src/server/proxy/scope-guard.ts","../../../src/server/proxy/cma-proxy.ts","../../../src/server/proxy/launch-proxy.ts","../../../src/server/proxy/brandkit-proxy.ts","../../../src/server/proxy/developer-hub-proxy.ts"],"sourcesContent":["export type { CMAProxyConfig, CMAScope, ProxyAuthConfig, ProxyAuthHeaders } from \"./types.js\"\nexport { createCMAProxy } from \"./cma-proxy.js\"\nexport { resolveScope, checkScope } from \"./scope-guard.js\"\nexport type { LaunchProxyConfig } from \"./launch-proxy.js\"\nexport { createLaunchProxy } from \"./launch-proxy.js\"\nexport type { BrandKitProxyConfig } from \"./brandkit-proxy.js\"\nexport { createBrandKitProxy } from \"./brandkit-proxy.js\"\nexport type { DeveloperHubProxyConfig } from \"./developer-hub-proxy.js\"\nexport { createDeveloperHubProxy } from \"./developer-hub-proxy.js\"\n","import {\n type ContentstackEndpoints as UpstreamEndpoints,\n getContentstackEndpoints,\n getRegionForString,\n} from \"@timbenniks/contentstack-endpoints\"\nimport type { ContentstackEndpoints, ContentstackRegion } from \"./resolver.js\"\n\n/** Brand Kit endpoints not available in upstream package — maintained locally */\nconst BRAND_KIT_URLS: Record = {\n us: {\n brandKit: \"https://brand-kits-api.contentstack.com\",\n brandKitAI: \"https://ai.contentstack.com/brand-kits\",\n },\n eu: {\n brandKit: \"https://eu-brand-kits-api.contentstack.com\",\n brandKitAI: \"https://eu-ai.contentstack.com/brand-kits\",\n },\n au: {\n brandKit: \"https://au-brand-kits-api.contentstack.com\",\n brandKitAI: \"https://au-ai.contentstack.com/brand-kits\",\n },\n \"azure-na\": {\n brandKit: \"https://azure-na-brand-kits-api.contentstack.com\",\n brandKitAI: \"https://azure-na-ai.contentstack.com/brand-kits\",\n },\n \"azure-eu\": {\n brandKit: \"https://azure-eu-brand-kits-api.contentstack.com\",\n brandKitAI: \"https://azure-eu-ai.contentstack.com/brand-kits\",\n },\n \"gcp-na\": {\n brandKit: \"https://gcp-na-brand-kits-api.contentstack.com\",\n brandKitAI: \"https://gcp-na-ai.contentstack.com/brand-kits\",\n },\n \"gcp-eu\": {\n brandKit: \"https://gcp-eu-brand-kits-api.contentstack.com\",\n brandKitAI: \"https://gcp-eu-ai.contentstack.com/brand-kits\",\n },\n}\n\nfunction mapEndpoints(\n upstream: UpstreamEndpoints,\n region: ContentstackRegion,\n hostsOnly: boolean,\n): ContentstackEndpoints {\n const bk = BRAND_KIT_URLS[region]\n const stripProtocol = (url: string) => url.replace(/^https?:\\/\\//, \"\")\n\n return Object.freeze({\n cma: upstream.contentManagement ?? \"\",\n cda: upstream.contentDelivery ?? \"\",\n graphql: upstream.graphqlDelivery ?? \"\",\n images: upstream.images ?? \"\",\n app: upstream.application ?? \"\",\n preview: upstream.preview ?? \"\",\n graphqlPreview: upstream.graphqlPreview ?? \"\",\n launch: upstream.launch ?? \"\",\n personalizeEdge: upstream.personalizeEdge ?? \"\",\n brandKit: hostsOnly ? stripProtocol(bk.brandKit) : bk.brandKit,\n brandKitAI: hostsOnly ? stripProtocol(bk.brandKitAI) : bk.brandKitAI,\n developerHub: hostsOnly\n ? stripProtocol(upstream.developerHub ?? \"\")\n : (upstream.developerHub ?? \"\"),\n })\n}\n\nconst ALL_REGIONS: ContentstackRegion[] = [\n \"us\",\n \"eu\",\n \"au\",\n \"azure-na\",\n \"azure-eu\",\n \"gcp-na\",\n \"gcp-eu\",\n]\n\nfunction buildEndpointMap(): Record {\n const map = {} as Record\n for (const region of ALL_REGIONS) {\n map[region] = mapEndpoints(getContentstackEndpoints(region), region, false)\n }\n return Object.freeze(map)\n}\n\nfunction buildHostMap(): Record {\n const map = {} as Record\n for (const region of ALL_REGIONS) {\n map[region] = mapEndpoints(getContentstackEndpoints(region, true), region, true)\n }\n return Object.freeze(map)\n}\n\nexport const ENDPOINT_MAP = buildEndpointMap()\nexport const HOST_MAP = buildHostMap()\n\n/** Check if a string is a valid region via the upstream package */\nexport function isValidRegion(input: string): boolean {\n return getRegionForString(input) !== undefined\n}\n\n/** Map of extra aliases our SDK supports beyond what the upstream package handles */\nexport const EXTRA_ALIASES: Record = {\n \"north-america\": \"us\",\n europe: \"eu\",\n australia: \"au\",\n}\n","import { ContentstackConfigError } from \"../http/errors.js\"\nimport { ENDPOINT_MAP, EXTRA_ALIASES, HOST_MAP, isValidRegion } from \"./endpoints.js\"\n\n/** All 7 Contentstack regions */\nexport type ContentstackRegion = \"us\" | \"eu\" | \"au\" | \"azure-na\" | \"azure-eu\" | \"gcp-na\" | \"gcp-eu\"\n\n/** Resolved endpoint URLs for a region */\nexport interface ContentstackEndpoints {\n /** CMA base URL, e.g. \"https://api.contentstack.io\" */\n cma: string\n /** CDA REST base URL, e.g. \"https://cdn.contentstack.io\" */\n cda: string\n /** GraphQL CDA endpoint */\n graphql: string\n /** Asset/image delivery base URL */\n images: string\n /** Application URL (for OAuth), e.g. \"https://app.contentstack.com\" */\n app: string\n /** Preview API base URL */\n preview: string\n /** GraphQL preview endpoint */\n graphqlPreview: string\n /** Launch API base URL */\n launch: string\n /** Personalize edge endpoint */\n personalizeEdge: string\n /** Brand Kit Management API base URL */\n brandKit: string\n /** Brand Kit GenAI and Knowledge Vault base URL */\n brandKitAI: string\n /** Developer Hub (Marketplace) API base URL */\n developerHub: string\n}\n\nconst VALID_REGIONS = new Set(Object.keys(ENDPOINT_MAP))\n\n/**\n * Resolve all API endpoints for a Contentstack region.\n *\n * @example\n * ```ts\n * const endpoints = resolveEndpoints(\"eu\");\n * // endpoints.cma === \"https://eu-api.contentstack.com\"\n * // endpoints.app === \"https://eu-app.contentstack.com\"\n * ```\n */\nexport function resolveEndpoints(region: ContentstackRegion): ContentstackEndpoints {\n return ENDPOINT_MAP[region]\n}\n\n/**\n * Resolve endpoints with https:// stripped (for SDK host parameters).\n *\n * @example\n * ```ts\n * const hosts = resolveHosts(\"eu\");\n * // hosts.cda === \"eu-cdn.contentstack.com\"\n * ```\n */\nexport function resolveHosts(region: ContentstackRegion): ContentstackEndpoints {\n return HOST_MAP[region]\n}\n\n/**\n * Normalize region aliases: \"na\" → \"us\", \"NA\" → \"us\", etc.\n * Case-insensitive. Throws ContentstackConfigError for unknown regions.\n */\nexport function normalizeRegion(input: string): ContentstackRegion {\n const lower = input.toLowerCase().trim()\n\n if (VALID_REGIONS.has(lower)) {\n return lower as ContentstackRegion\n }\n\n // Check extra aliases our SDK supports (north-america, europe, australia)\n const extraAlias = EXTRA_ALIASES[lower]\n if (extraAlias) {\n return extraAlias\n }\n\n // Check aliases handled by the upstream package (na, us, aws-na, etc.)\n if (isValidRegion(lower)) {\n // The upstream package recognized it — map back to our canonical region\n // \"na\" and \"us\" both map to the NA region which we call \"us\"\n if (lower === \"na\" || lower === \"aws-na\" || lower === \"aws_na\") return \"us\"\n if (lower === \"aws-eu\" || lower === \"aws_eu\") return \"eu\"\n if (lower === \"aws-au\" || lower === \"aws_au\") return \"au\"\n if (lower === \"azure_na\") return \"azure-na\"\n if (lower === \"azure_eu\") return \"azure-eu\"\n if (lower === \"gcp_na\") return \"gcp-na\"\n if (lower === \"gcp_eu\") return \"gcp-eu\"\n }\n\n const validRegions = [...VALID_REGIONS].join(\", \")\n const validAliases = [...Object.keys(EXTRA_ALIASES), \"na\", \"aws-na\", \"aws-eu\", \"aws-au\"].join(\n \", \",\n )\n throw new ContentstackConfigError(\n `Unknown region \"${input}\". Valid regions: ${validRegions}. Aliases: ${validAliases}.`,\n )\n}\n\nexport { ContentstackConfigError }\n","import type { ProxyAuthConfig, ProxyAuthHeaders } from \"./types.js\"\n\n/**\n * Shared proxy infrastructure for Contentstack API proxies.\n *\n * Both the CMA proxy and Launch proxy build on these helpers to avoid\n * duplicating auth checks, URL parsing, body extraction, and fetch logic.\n */\n\nexport type BaseProxyConfig = ProxyAuthConfig & {\n basePath: string\n timeout: number\n}\n\nexport interface ProxyRequestContext {\n authHeaders: ProxyAuthHeaders\n authKey: string\n apiPath: string\n search: string\n method: string\n body: ArrayBuffer | undefined\n request: Request\n}\n\n/** Return a JSON error response with the given message and HTTP status. */\nexport function jsonErrorResponse(error: string, status: number): Response {\n return new Response(JSON.stringify({ error }), {\n status,\n headers: { \"Content-Type\": \"application/json\" },\n })\n}\n\nfunction normalizeAuthHeaders(headers: ProxyAuthHeaders): ProxyAuthHeaders {\n return Object.fromEntries(\n Object.entries(headers)\n .map(([key, value]) => [key.toLowerCase(), value.trim()] as const)\n .filter(([, value]) => value.length > 0),\n )\n}\n\nfunction resolveAuthKey(headers: ProxyAuthHeaders): string | null {\n const authorization = headers.authorization\n if (authorization) {\n return authorization\n }\n\n const authtoken = headers.authtoken\n if (authtoken) {\n return authtoken\n }\n\n const serialized = Object.entries(headers)\n .sort(([left], [right]) => left.localeCompare(right))\n .map(([key, value]) => `${key}:${value}`)\n .join(\"|\")\n\n return serialized.length > 0 ? serialized : null\n}\n\nasync function resolveRequestAuth(\n config: BaseProxyConfig,\n request: Request,\n): Promise<{ authHeaders: ProxyAuthHeaders; authKey: string } | null> {\n if (config.getAuthHeaders) {\n const authHeaders = normalizeAuthHeaders((await config.getAuthHeaders(request)) ?? {})\n const authKey = resolveAuthKey(authHeaders)\n\n if (!authKey) {\n return null\n }\n\n return { authHeaders, authKey }\n }\n\n if (config.getAccessToken) {\n const token = await config.getAccessToken(request)\n if (!token) {\n return null\n }\n\n return {\n authHeaders: { authorization: `Bearer ${token}` },\n authKey: token,\n }\n }\n\n return null\n}\n\n/**\n * Create the shared proxy pipeline: auth check → URL parse → body extract.\n *\n * The `handleRequest` callback receives a validated context and is responsible\n * for building headers, constructing the target URL, and forwarding the request.\n */\nexport function createBaseProxy(\n config: BaseProxyConfig,\n handleRequest: (ctx: ProxyRequestContext) => Promise,\n): (request: Request) => Promise {\n return async (request: Request): Promise => {\n const auth = await resolveRequestAuth(config, request)\n if (!auth) {\n return jsonErrorResponse(\"Unauthorized\", 401)\n }\n\n const url = new URL(request.url)\n const apiPath = url.pathname.replace(config.basePath, \"\")\n\n const body =\n [\"GET\", \"HEAD\"].includes(request.method) || request.body === null\n ? undefined\n : await request.arrayBuffer()\n\n return handleRequest({\n authHeaders: auth.authHeaders,\n authKey: auth.authKey,\n apiPath,\n search: url.search,\n method: request.method,\n body,\n request,\n })\n }\n}\n\n/**\n * Forward a request to an upstream API and stream the response back.\n *\n * Returns a 502 \"Bad Gateway\" response on any fetch failure (network error, timeout).\n */\nexport async function forwardRequest(\n url: string,\n method: string,\n headers: Record,\n body: ArrayBuffer | undefined,\n timeout: number,\n): Promise {\n try {\n const upstream = await fetch(url, {\n method,\n headers,\n body,\n signal: AbortSignal.timeout(timeout),\n })\n\n return new Response(upstream.body, {\n status: upstream.status,\n headers: {\n \"content-type\": upstream.headers.get(\"content-type\") ?? \"application/json\",\n },\n })\n } catch {\n return jsonErrorResponse(\"Bad Gateway\", 502)\n }\n}\n","interface RateWindow {\n count: number\n windowStart: number\n}\n\n/**\n * Create a simple in-memory sliding window rate limiter.\n *\n * Each unique key (typically an access token) gets its own counter\n * that resets after the window expires.\n *\n * @param maxRequests - Maximum requests allowed per window\n * @param windowMs - Window duration in milliseconds (default: 60000)\n */\nexport function createRateLimiter(maxRequests: number, windowMs = 60_000) {\n const windows = new Map()\n\n return {\n /**\n * Check if the request is within rate limits.\n * @returns `true` if the request is allowed, `false` if rate limited.\n */\n check(key: string): boolean {\n const now = Date.now()\n const window = windows.get(key)\n\n // Clean stale entries on each check\n for (const [k, w] of windows) {\n if (now - w.windowStart > windowMs) {\n windows.delete(k)\n }\n }\n\n if (!window || now - window.windowStart > windowMs) {\n windows.set(key, { count: 1, windowStart: now })\n return true\n }\n\n window.count++\n return window.count <= maxRequests\n },\n }\n}\n","import type { CMAScope } from \"./types.js\"\n\nconst READ_METHODS = new Set([\"GET\", \"HEAD\"])\n\n/**\n * Resolve the required CMA scope for a given HTTP method and path.\n *\n * Path matching checks for known segments. The order matters:\n * `/entries` is checked before `/content_types` because entry URLs\n * like `/content_types/blog/entries` contain both.\n *\n * @returns The required scope, or `null` if the path is unrecognized.\n */\nexport function resolveScope(method: string, path: string): CMAScope | null {\n const isRead = READ_METHODS.has(method.toUpperCase())\n const suffix = isRead ? \":read\" : \":write\"\n const segments = path.split(\"/\")\n\n if (segments.includes(\"entries\")) return `entries${suffix}` as CMAScope\n if (segments.includes(\"content_types\")) return `content-types${suffix}` as CMAScope\n if (segments.includes(\"assets\")) return `assets${suffix}` as CMAScope\n if (segments.includes(\"environments\")) return \"environments:read\"\n if (segments.includes(\"locales\")) return \"locales:read\"\n if (segments.includes(\"releases\")) return `releases${suffix}` as CMAScope\n if (segments.includes(\"taxonomies\")) return `taxonomies${suffix}` as CMAScope\n if (segments.includes(\"workflows\")) return `workflows${suffix}` as CMAScope\n if (segments.includes(\"webhooks\")) return `webhooks${suffix}` as CMAScope\n\n return null\n}\n\n/**\n * Check whether a required scope is present in the allowed scopes list.\n *\n * @returns An error message if the scope is not allowed, or `null` if permitted.\n */\nexport function checkScope(required: CMAScope, allowed: CMAScope[]): string | null {\n if (allowed.includes(required)) return null\n return `Scope \"${required}\" is not allowed. Allowed scopes: ${allowed.join(\", \")}`\n}\n","import { resolveEndpoints } from \"../../index.js\"\nimport { createBaseProxy, forwardRequest, jsonErrorResponse } from \"./proxy-base.js\"\nimport { createRateLimiter } from \"./rate-limiter.js\"\nimport { checkScope, resolveScope } from \"./scope-guard.js\"\nimport type { CMAProxyConfig } from \"./types.js\"\n\n/**\n * Create a CMA proxy handler that forwards requests to Contentstack.\n *\n * The returned function accepts a standard `Request` and returns a `Response`,\n * making it compatible with Next.js route handlers, Deno/Bun servers, and\n * any framework that uses the Web API Request/Response model.\n *\n * @example\n * ```ts\n * // app/api/cma/[...path]/route.ts\n * const proxy = createCMAProxy({\n * region: \"us\",\n * apiKey: \"your-api-key\",\n * getAccessToken: async (req) => {\n * const session = await auth()\n * return session?.accessToken ?? null\n * },\n * })\n *\n * export const GET = proxy\n * export const POST = proxy\n * export const PUT = proxy\n * export const DELETE = proxy\n * ```\n */\nexport function createCMAProxy(config: CMAProxyConfig): (request: Request) => Promise {\n const endpoints = resolveEndpoints(config.region)\n const cmaBase = `${endpoints.cma}/v3`\n const timeout = config.timeout ?? 30_000\n const rateLimiter = config.rateLimit ? createRateLimiter(config.rateLimit) : null\n\n return createBaseProxy(\n {\n ...(config.getAuthHeaders\n ? { getAuthHeaders: config.getAuthHeaders }\n : { getAccessToken: config.getAccessToken }),\n basePath: config.basePath ?? \"/api/cma\",\n timeout,\n },\n async (ctx) => {\n if (rateLimiter && !rateLimiter.check(ctx.authKey)) {\n return jsonErrorResponse(\"Too Many Requests\", 429)\n }\n\n if (config.allowedScopes) {\n const scope = resolveScope(ctx.method, ctx.apiPath)\n if (!scope) {\n if ((config.unmappedScopeBehavior ?? \"deny\") === \"deny\") {\n return jsonErrorResponse(\n `No scope mapping found for \"${ctx.method} ${ctx.apiPath}\". Add a mapping or set unmappedScopeBehavior: \"allow\".`,\n 403,\n )\n }\n } else {\n const rejection = checkScope(scope, config.allowedScopes)\n if (rejection) {\n return jsonErrorResponse(rejection, 403)\n }\n }\n }\n\n const headers: Record = {\n api_key: config.apiKey,\n ...ctx.authHeaders,\n }\n const contentType = ctx.request.headers.get(\"content-type\")\n if (contentType) {\n headers[\"content-type\"] = contentType\n }\n\n return forwardRequest(\n cmaBase + ctx.apiPath + ctx.search,\n ctx.method,\n headers,\n ctx.body,\n timeout,\n )\n },\n )\n}\n","import { resolveEndpoints } from \"../../index.js\"\nimport type { ContentstackRegion } from \"../../index.js\"\nimport { createBaseProxy, forwardRequest, jsonErrorResponse } from \"./proxy-base.js\"\nimport type { ProxyAuthConfig } from \"./types.js\"\n\nexport type LaunchProxyConfig = ProxyAuthConfig & {\n /** Contentstack region */\n region: ContentstackRegion\n /** Organization UID — required for all Launch API calls */\n organizationUid: string\n /** URL prefix to strip when extracting the Launch API path (default: \"/api/launch\") */\n basePath?: string\n /** Restrict operations: \"read\" allows GET only, \"manage\" allows all methods */\n allowedOperations?: (\"read\" | \"manage\")[]\n /** Request timeout in milliseconds (default: 30000) */\n timeout?: number\n}\n\n/**\n * Create a Launch API proxy handler that forwards requests to Contentstack Launch.\n *\n * The returned function accepts a standard `Request` and returns a `Response`,\n * making it compatible with Next.js route handlers, Deno/Bun servers, and\n * any framework that uses the Web API Request/Response model.\n *\n * @example\n * ```ts\n * // app/api/launch/[...path]/route.ts\n * const proxy = createLaunchProxy({\n * region: \"us\",\n * organizationUid: \"org-uid\",\n * getAccessToken: async () => {\n * const session = await auth()\n * return session?.accessToken ?? null\n * },\n * })\n *\n * export const GET = proxy\n * export const POST = proxy\n * export const PUT = proxy\n * export const DELETE = proxy\n * ```\n */\nexport function createLaunchProxy(\n config: LaunchProxyConfig,\n): (request: Request) => Promise {\n const endpoints = resolveEndpoints(config.region)\n const launchBase = endpoints.launch\n const timeout = config.timeout ?? 30_000\n\n return createBaseProxy(\n {\n ...(config.getAuthHeaders\n ? { getAuthHeaders: config.getAuthHeaders }\n : { getAccessToken: config.getAccessToken }),\n basePath: config.basePath ?? \"/api/launch\",\n timeout,\n },\n async (ctx) => {\n if (config.allowedOperations?.length) {\n const hasManage = config.allowedOperations.includes(\"manage\")\n if (!hasManage && ![\"GET\", \"HEAD\"].includes(ctx.method)) {\n return jsonErrorResponse(\"Forbidden: read-only mode\", 403)\n }\n }\n\n const headers: Record = {\n ...ctx.authHeaders,\n organization_uid: config.organizationUid,\n \"content-type\": \"application/json\",\n }\n\n return forwardRequest(\n launchBase + ctx.apiPath + ctx.search,\n ctx.method,\n headers,\n ctx.body,\n timeout,\n )\n },\n )\n}\n","import { resolveEndpoints } from \"../../index.js\"\nimport type { ContentstackRegion } from \"../../index.js\"\nimport { createBaseProxy, forwardRequest, jsonErrorResponse } from \"./proxy-base.js\"\nimport type { ProxyAuthConfig } from \"./types.js\"\n\nexport type BrandKitProxyConfig = ProxyAuthConfig & {\n /** Contentstack region */\n region: ContentstackRegion\n /** Organization UID — required for all Brand Kit API calls */\n organizationUid: string\n /** Brand Kit UID — required for all Brand Kit API calls */\n brandKitUid: string\n /** URL prefix to strip when extracting the API path (default: \"/api/brandkit\") */\n basePath?: string\n /** Restrict operations: \"read\" allows GET only, \"manage\" allows all methods */\n allowedOperations?: (\"read\" | \"manage\")[]\n /** Request timeout in milliseconds (default: 30000) */\n timeout?: number\n}\n\n/**\n * Create a Brand Kit proxy handler that forwards requests to Contentstack\n * Brand Kit Management, Knowledge Vault, and Generative AI APIs.\n *\n * Routes are determined by path:\n * - Paths containing `/knowledge-vault` or `/generative-ai` → brandKitAI base URL\n * - All other paths (brand kits, voice profiles) → brandKit base URL\n *\n * @example\n * ```ts\n * // app/api/brandkit/[...path]/route.ts\n * const proxy = createBrandKitProxy({\n * region: \"us\",\n * organizationUid: \"org-uid\",\n * brandKitUid: \"bk-uid\",\n * getAccessToken: async () => {\n * const session = await auth()\n * return session?.accessToken ?? null\n * },\n * })\n *\n * export const GET = proxy\n * export const POST = proxy\n * export const PUT = proxy\n * export const DELETE = proxy\n * ```\n */\nexport function createBrandKitProxy(\n config: BrandKitProxyConfig,\n): (request: Request) => Promise {\n const endpoints = resolveEndpoints(config.region)\n const brandKitBase = endpoints.brandKit\n const brandKitAIBase = endpoints.brandKitAI\n const timeout = config.timeout ?? 30_000\n\n return createBaseProxy(\n {\n ...(config.getAuthHeaders\n ? { getAuthHeaders: config.getAuthHeaders }\n : { getAccessToken: config.getAccessToken }),\n basePath: config.basePath ?? \"/api/brandkit\",\n timeout,\n },\n async (ctx) => {\n if (config.allowedOperations?.length) {\n const hasManage = config.allowedOperations.includes(\"manage\")\n if (!hasManage && ![\"GET\", \"HEAD\"].includes(ctx.method)) {\n return jsonErrorResponse(\"Forbidden: read-only mode\", 403)\n }\n }\n\n const headers: Record = {\n ...ctx.authHeaders,\n organization_uid: config.organizationUid,\n brand_kit_uid: config.brandKitUid,\n \"content-type\": \"application/json\",\n }\n\n const isAIPath =\n ctx.apiPath.includes(\"/knowledge-vault\") || ctx.apiPath.includes(\"/generative-ai\")\n const baseUrl = isAIPath ? brandKitAIBase : brandKitBase\n\n return forwardRequest(\n baseUrl + ctx.apiPath + ctx.search,\n ctx.method,\n headers,\n ctx.body,\n timeout,\n )\n },\n )\n}\n","import { resolveEndpoints } from \"../../index.js\"\nimport type { ContentstackRegion } from \"../../index.js\"\nimport { createBaseProxy, forwardRequest, jsonErrorResponse } from \"./proxy-base.js\"\nimport type { ProxyAuthConfig } from \"./types.js\"\n\nexport type DeveloperHubProxyConfig = ProxyAuthConfig & {\n /** Contentstack region */\n region: ContentstackRegion\n /** Organization UID — required for all Developer Hub API calls */\n organizationUid: string\n /** URL prefix to strip when extracting the Developer Hub API path (default: \"/api/developerhub\") */\n basePath?: string\n /** Restrict operations: \"read\" allows GET only, \"manage\" allows all methods */\n allowedOperations?: (\"read\" | \"manage\")[]\n /** Request timeout in milliseconds (default: 30000) */\n timeout?: number\n}\n\n/**\n * Create a Developer Hub API proxy handler that forwards requests to Contentstack Developer Hub.\n *\n * The returned function accepts a standard `Request` and returns a `Response`,\n * making it compatible with Next.js route handlers, Deno/Bun servers, and\n * any framework that uses the Web API Request/Response model.\n *\n * @example\n * ```ts\n * // app/api/developerhub/[...path]/route.ts\n * const proxy = createDeveloperHubProxy({\n * region: \"us\",\n * organizationUid: \"org-uid\",\n * getAccessToken: async () => {\n * const session = await auth()\n * return session?.accessToken ?? null\n * },\n * })\n *\n * export const GET = proxy\n * export const POST = proxy\n * export const PUT = proxy\n * export const DELETE = proxy\n * ```\n */\nexport function createDeveloperHubProxy(\n config: DeveloperHubProxyConfig,\n): (request: Request) => Promise {\n const endpoints = resolveEndpoints(config.region)\n const devHubBase = endpoints.developerHub\n const timeout = config.timeout ?? 30_000\n\n return createBaseProxy(\n {\n ...(config.getAuthHeaders\n ? { getAuthHeaders: config.getAuthHeaders }\n : { getAccessToken: config.getAccessToken }),\n basePath: config.basePath ?? \"/api/developerhub\",\n timeout,\n },\n async (ctx) => {\n if (config.allowedOperations?.length) {\n const hasManage = config.allowedOperations.includes(\"manage\")\n if (!hasManage && ![\"GET\", \"HEAD\"].includes(ctx.method)) {\n return jsonErrorResponse(\"Forbidden: read-only mode\", 403)\n }\n }\n\n const headers: Record = {\n ...ctx.authHeaders,\n organization_uid: config.organizationUid,\n \"content-type\": \"application/json\",\n }\n\n return forwardRequest(\n devHubBase + ctx.apiPath + ctx.search,\n ctx.method,\n headers,\n ctx.body,\n timeout,\n )\n },\n )\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;;;ACAA,oCAIO;AAIP,IAAM,iBAAuF;AAAA,EAC3F,IAAI;AAAA,IACF,UAAU;AAAA,IACV,YAAY;AAAA,EACd;AAAA,EACA,IAAI;AAAA,IACF,UAAU;AAAA,IACV,YAAY;AAAA,EACd;AAAA,EACA,IAAI;AAAA,IACF,UAAU;AAAA,IACV,YAAY;AAAA,EACd;AAAA,EACA,YAAY;AAAA,IACV,UAAU;AAAA,IACV,YAAY;AAAA,EACd;AAAA,EACA,YAAY;AAAA,IACV,UAAU;AAAA,IACV,YAAY;AAAA,EACd;AAAA,EACA,UAAU;AAAA,IACR,UAAU;AAAA,IACV,YAAY;AAAA,EACd;AAAA,EACA,UAAU;AAAA,IACR,UAAU;AAAA,IACV,YAAY;AAAA,EACd;AACF;AAEA,SAAS,aACP,UACA,QACA,WACuB;AACvB,QAAM,KAAK,eAAe,MAAM;AAChC,QAAM,gBAAgB,CAAC,QAAgB,IAAI,QAAQ,gBAAgB,EAAE;AAErE,SAAO,OAAO,OAAO;AAAA,IACnB,KAAK,SAAS,qBAAqB;AAAA,IACnC,KAAK,SAAS,mBAAmB;AAAA,IACjC,SAAS,SAAS,mBAAmB;AAAA,IACrC,QAAQ,SAAS,UAAU;AAAA,IAC3B,KAAK,SAAS,eAAe;AAAA,IAC7B,SAAS,SAAS,WAAW;AAAA,IAC7B,gBAAgB,SAAS,kBAAkB;AAAA,IAC3C,QAAQ,SAAS,UAAU;AAAA,IAC3B,iBAAiB,SAAS,mBAAmB;AAAA,IAC7C,UAAU,YAAY,cAAc,GAAG,QAAQ,IAAI,GAAG;AAAA,IACtD,YAAY,YAAY,cAAc,GAAG,UAAU,IAAI,GAAG;AAAA,IAC1D,cAAc,YACV,cAAc,SAAS,gBAAgB,EAAE,IACxC,SAAS,gBAAgB;AAAA,EAChC,CAAC;AACH;AAEA,IAAM,cAAoC;AAAA,EACxC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AAEA,SAAS,mBAAsE;AAC7E,QAAM,MAAM,CAAC;AACb,aAAW,UAAU,aAAa;AAChC,QAAI,MAAM,IAAI,iBAAa,wDAAyB,MAAM,GAAG,QAAQ,KAAK;AAAA,EAC5E;AACA,SAAO,OAAO,OAAO,GAAG;AAC1B;AAEA,SAAS,eAAkE;AACzE,QAAM,MAAM,CAAC;AACb,aAAW,UAAU,aAAa;AAChC,QAAI,MAAM,IAAI,iBAAa,wDAAyB,QAAQ,IAAI,GAAG,QAAQ,IAAI;AAAA,EACjF;AACA,SAAO,OAAO,OAAO,GAAG;AAC1B;AAEO,IAAM,eAAe,iBAAiB;AACtC,IAAM,WAAW,aAAa;;;AC1DrC,IAAM,gBAAgB,IAAI,IAAY,OAAO,KAAK,YAAY,CAAC;AAYxD,SAAS,iBAAiB,QAAmD;AAClF,SAAO,aAAa,MAAM;AAC5B;;;ACvBO,SAAS,kBAAkB,OAAe,QAA0B;AACzE,SAAO,IAAI,SAAS,KAAK,UAAU,EAAE,MAAM,CAAC,GAAG;AAAA,IAC7C;AAAA,IACA,SAAS,EAAE,gBAAgB,mBAAmB;AAAA,EAChD,CAAC;AACH;AAEA,SAAS,qBAAqB,SAA6C;AACzE,SAAO,OAAO;AAAA,IACZ,OAAO,QAAQ,OAAO,EACnB,IAAI,CAAC,CAAC,KAAK,KAAK,MAAM,CAAC,IAAI,YAAY,GAAG,MAAM,KAAK,CAAC,CAAU,EAChE,OAAO,CAAC,CAAC,EAAE,KAAK,MAAM,MAAM,SAAS,CAAC;AAAA,EAC3C;AACF;AAEA,SAAS,eAAe,SAA0C;AAChE,QAAM,gBAAgB,QAAQ;AAC9B,MAAI,eAAe;AACjB,WAAO;AAAA,EACT;AAEA,QAAM,YAAY,QAAQ;AAC1B,MAAI,WAAW;AACb,WAAO;AAAA,EACT;AAEA,QAAM,aAAa,OAAO,QAAQ,OAAO,EACtC,KAAK,CAAC,CAAC,IAAI,GAAG,CAAC,KAAK,MAAM,KAAK,cAAc,KAAK,CAAC,EACnD,IAAI,CAAC,CAAC,KAAK,KAAK,MAAM,GAAG,GAAG,IAAI,KAAK,EAAE,EACvC,KAAK,GAAG;AAEX,SAAO,WAAW,SAAS,IAAI,aAAa;AAC9C;AAEA,eAAe,mBACb,QACA,SACoE;AACpE,MAAI,OAAO,gBAAgB;AACzB,UAAM,cAAc,qBAAsB,MAAM,OAAO,eAAe,OAAO,KAAM,CAAC,CAAC;AACrF,UAAM,UAAU,eAAe,WAAW;AAE1C,QAAI,CAAC,SAAS;AACZ,aAAO;AAAA,IACT;AAEA,WAAO,EAAE,aAAa,QAAQ;AAAA,EAChC;AAEA,MAAI,OAAO,gBAAgB;AACzB,UAAM,QAAQ,MAAM,OAAO,eAAe,OAAO;AACjD,QAAI,CAAC,OAAO;AACV,aAAO;AAAA,IACT;AAEA,WAAO;AAAA,MACL,aAAa,EAAE,eAAe,UAAU,KAAK,GAAG;AAAA,MAChD,SAAS;AAAA,IACX;AAAA,EACF;AAEA,SAAO;AACT;AAQO,SAAS,gBACd,QACA,eACyC;AACzC,SAAO,OAAO,YAAwC;AACpD,UAAM,OAAO,MAAM,mBAAmB,QAAQ,OAAO;AACrD,QAAI,CAAC,MAAM;AACT,aAAO,kBAAkB,gBAAgB,GAAG;AAAA,IAC9C;AAEA,UAAM,MAAM,IAAI,IAAI,QAAQ,GAAG;AAC/B,UAAM,UAAU,IAAI,SAAS,QAAQ,OAAO,UAAU,EAAE;AAExD,UAAM,OACJ,CAAC,OAAO,MAAM,EAAE,SAAS,QAAQ,MAAM,KAAK,QAAQ,SAAS,OACzD,SACA,MAAM,QAAQ,YAAY;AAEhC,WAAO,cAAc;AAAA,MACnB,aAAa,KAAK;AAAA,MAClB,SAAS,KAAK;AAAA,MACd;AAAA,MACA,QAAQ,IAAI;AAAA,MACZ,QAAQ,QAAQ;AAAA,MAChB;AAAA,MACA;AAAA,IACF,CAAC;AAAA,EACH;AACF;AAOA,eAAsB,eACpB,KACA,QACA,SACA,MACA,SACmB;AACnB,MAAI;AACF,UAAM,WAAW,MAAM,MAAM,KAAK;AAAA,MAChC;AAAA,MACA;AAAA,MACA;AAAA,MACA,QAAQ,YAAY,QAAQ,OAAO;AAAA,IACrC,CAAC;AAED,WAAO,IAAI,SAAS,SAAS,MAAM;AAAA,MACjC,QAAQ,SAAS;AAAA,MACjB,SAAS;AAAA,QACP,gBAAgB,SAAS,QAAQ,IAAI,cAAc,KAAK;AAAA,MAC1D;AAAA,IACF,CAAC;AAAA,EACH,QAAQ;AACN,WAAO,kBAAkB,eAAe,GAAG;AAAA,EAC7C;AACF;;;AC5IO,SAAS,kBAAkB,aAAqB,WAAW,KAAQ;AACxE,QAAM,UAAU,oBAAI,IAAwB;AAE5C,SAAO;AAAA;AAAA;AAAA;AAAA;AAAA,IAKL,MAAM,KAAsB;AAC1B,YAAM,MAAM,KAAK,IAAI;AACrB,YAAM,SAAS,QAAQ,IAAI,GAAG;AAG9B,iBAAW,CAAC,GAAG,CAAC,KAAK,SAAS;AAC5B,YAAI,MAAM,EAAE,cAAc,UAAU;AAClC,kBAAQ,OAAO,CAAC;AAAA,QAClB;AAAA,MACF;AAEA,UAAI,CAAC,UAAU,MAAM,OAAO,cAAc,UAAU;AAClD,gBAAQ,IAAI,KAAK,EAAE,OAAO,GAAG,aAAa,IAAI,CAAC;AAC/C,eAAO;AAAA,MACT;AAEA,aAAO;AACP,aAAO,OAAO,SAAS;AAAA,IACzB;AAAA,EACF;AACF;;;ACxCA,IAAM,eAAe,oBAAI,IAAI,CAAC,OAAO,MAAM,CAAC;AAWrC,SAAS,aAAa,QAAgB,MAA+B;AAC1E,QAAM,SAAS,aAAa,IAAI,OAAO,YAAY,CAAC;AACpD,QAAM,SAAS,SAAS,UAAU;AAClC,QAAM,WAAW,KAAK,MAAM,GAAG;AAE/B,MAAI,SAAS,SAAS,SAAS,EAAG,QAAO,UAAU,MAAM;AACzD,MAAI,SAAS,SAAS,eAAe,EAAG,QAAO,gBAAgB,MAAM;AACrE,MAAI,SAAS,SAAS,QAAQ,EAAG,QAAO,SAAS,MAAM;AACvD,MAAI,SAAS,SAAS,cAAc,EAAG,QAAO;AAC9C,MAAI,SAAS,SAAS,SAAS,EAAG,QAAO;AACzC,MAAI,SAAS,SAAS,UAAU,EAAG,QAAO,WAAW,MAAM;AAC3D,MAAI,SAAS,SAAS,YAAY,EAAG,QAAO,aAAa,MAAM;AAC/D,MAAI,SAAS,SAAS,WAAW,EAAG,QAAO,YAAY,MAAM;AAC7D,MAAI,SAAS,SAAS,UAAU,EAAG,QAAO,WAAW,MAAM;AAE3D,SAAO;AACT;AAOO,SAAS,WAAW,UAAoB,SAAoC;AACjF,MAAI,QAAQ,SAAS,QAAQ,EAAG,QAAO;AACvC,SAAO,UAAU,QAAQ,qCAAqC,QAAQ,KAAK,IAAI,CAAC;AAClF;;;ACRO,SAAS,eAAe,QAAiE;AAC9F,QAAM,YAAY,iBAAiB,OAAO,MAAM;AAChD,QAAM,UAAU,GAAG,UAAU,GAAG;AAChC,QAAM,UAAU,OAAO,WAAW;AAClC,QAAM,cAAc,OAAO,YAAY,kBAAkB,OAAO,SAAS,IAAI;AAE7E,SAAO;AAAA,IACL;AAAA,MACE,GAAI,OAAO,iBACP,EAAE,gBAAgB,OAAO,eAAe,IACxC,EAAE,gBAAgB,OAAO,eAAe;AAAA,MAC5C,UAAU,OAAO,YAAY;AAAA,MAC7B;AAAA,IACF;AAAA,IACA,OAAO,QAAQ;AACb,UAAI,eAAe,CAAC,YAAY,MAAM,IAAI,OAAO,GAAG;AAClD,eAAO,kBAAkB,qBAAqB,GAAG;AAAA,MACnD;AAEA,UAAI,OAAO,eAAe;AACxB,cAAM,QAAQ,aAAa,IAAI,QAAQ,IAAI,OAAO;AAClD,YAAI,CAAC,OAAO;AACV,eAAK,OAAO,yBAAyB,YAAY,QAAQ;AACvD,mBAAO;AAAA,cACL,+BAA+B,IAAI,MAAM,IAAI,IAAI,OAAO;AAAA,cACxD;AAAA,YACF;AAAA,UACF;AAAA,QACF,OAAO;AACL,gBAAM,YAAY,WAAW,OAAO,OAAO,aAAa;AACxD,cAAI,WAAW;AACb,mBAAO,kBAAkB,WAAW,GAAG;AAAA,UACzC;AAAA,QACF;AAAA,MACF;AAEA,YAAM,UAAkC;AAAA,QACtC,SAAS,OAAO;AAAA,QAChB,GAAG,IAAI;AAAA,MACT;AACA,YAAM,cAAc,IAAI,QAAQ,QAAQ,IAAI,cAAc;AAC1D,UAAI,aAAa;AACf,gBAAQ,cAAc,IAAI;AAAA,MAC5B;AAEA,aAAO;AAAA,QACL,UAAU,IAAI,UAAU,IAAI;AAAA,QAC5B,IAAI;AAAA,QACJ;AAAA,QACA,IAAI;AAAA,QACJ;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACF;;;AC1CO,SAAS,kBACd,QACyC;AACzC,QAAM,YAAY,iBAAiB,OAAO,MAAM;AAChD,QAAM,aAAa,UAAU;AAC7B,QAAM,UAAU,OAAO,WAAW;AAElC,SAAO;AAAA,IACL;AAAA,MACE,GAAI,OAAO,iBACP,EAAE,gBAAgB,OAAO,eAAe,IACxC,EAAE,gBAAgB,OAAO,eAAe;AAAA,MAC5C,UAAU,OAAO,YAAY;AAAA,MAC7B;AAAA,IACF;AAAA,IACA,OAAO,QAAQ;AACb,UAAI,OAAO,mBAAmB,QAAQ;AACpC,cAAM,YAAY,OAAO,kBAAkB,SAAS,QAAQ;AAC5D,YAAI,CAAC,aAAa,CAAC,CAAC,OAAO,MAAM,EAAE,SAAS,IAAI,MAAM,GAAG;AACvD,iBAAO,kBAAkB,6BAA6B,GAAG;AAAA,QAC3D;AAAA,MACF;AAEA,YAAM,UAAkC;AAAA,QACtC,GAAG,IAAI;AAAA,QACP,kBAAkB,OAAO;AAAA,QACzB,gBAAgB;AAAA,MAClB;AAEA,aAAO;AAAA,QACL,aAAa,IAAI,UAAU,IAAI;AAAA,QAC/B,IAAI;AAAA,QACJ;AAAA,QACA,IAAI;AAAA,QACJ;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACF;;;AClCO,SAAS,oBACd,QACyC;AACzC,QAAM,YAAY,iBAAiB,OAAO,MAAM;AAChD,QAAM,eAAe,UAAU;AAC/B,QAAM,iBAAiB,UAAU;AACjC,QAAM,UAAU,OAAO,WAAW;AAElC,SAAO;AAAA,IACL;AAAA,MACE,GAAI,OAAO,iBACP,EAAE,gBAAgB,OAAO,eAAe,IACxC,EAAE,gBAAgB,OAAO,eAAe;AAAA,MAC5C,UAAU,OAAO,YAAY;AAAA,MAC7B;AAAA,IACF;AAAA,IACA,OAAO,QAAQ;AACb,UAAI,OAAO,mBAAmB,QAAQ;AACpC,cAAM,YAAY,OAAO,kBAAkB,SAAS,QAAQ;AAC5D,YAAI,CAAC,aAAa,CAAC,CAAC,OAAO,MAAM,EAAE,SAAS,IAAI,MAAM,GAAG;AACvD,iBAAO,kBAAkB,6BAA6B,GAAG;AAAA,QAC3D;AAAA,MACF;AAEA,YAAM,UAAkC;AAAA,QACtC,GAAG,IAAI;AAAA,QACP,kBAAkB,OAAO;AAAA,QACzB,eAAe,OAAO;AAAA,QACtB,gBAAgB;AAAA,MAClB;AAEA,YAAM,WACJ,IAAI,QAAQ,SAAS,kBAAkB,KAAK,IAAI,QAAQ,SAAS,gBAAgB;AACnF,YAAM,UAAU,WAAW,iBAAiB;AAE5C,aAAO;AAAA,QACL,UAAU,IAAI,UAAU,IAAI;AAAA,QAC5B,IAAI;AAAA,QACJ;AAAA,QACA,IAAI;AAAA,QACJ;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACF;;;AChDO,SAAS,wBACd,QACyC;AACzC,QAAM,YAAY,iBAAiB,OAAO,MAAM;AAChD,QAAM,aAAa,UAAU;AAC7B,QAAM,UAAU,OAAO,WAAW;AAElC,SAAO;AAAA,IACL;AAAA,MACE,GAAI,OAAO,iBACP,EAAE,gBAAgB,OAAO,eAAe,IACxC,EAAE,gBAAgB,OAAO,eAAe;AAAA,MAC5C,UAAU,OAAO,YAAY;AAAA,MAC7B;AAAA,IACF;AAAA,IACA,OAAO,QAAQ;AACb,UAAI,OAAO,mBAAmB,QAAQ;AACpC,cAAM,YAAY,OAAO,kBAAkB,SAAS,QAAQ;AAC5D,YAAI,CAAC,aAAa,CAAC,CAAC,OAAO,MAAM,EAAE,SAAS,IAAI,MAAM,GAAG;AACvD,iBAAO,kBAAkB,6BAA6B,GAAG;AAAA,QAC3D;AAAA,MACF;AAEA,YAAM,UAAkC;AAAA,QACtC,GAAG,IAAI;AAAA,QACP,kBAAkB,OAAO;AAAA,QACzB,gBAAgB;AAAA,MAClB;AAEA,aAAO;AAAA,QACL,aAAa,IAAI,UAAU,IAAI;AAAA,QAC/B,IAAI;AAAA,QACJ;AAAA,QACA,IAAI;AAAA,QACJ;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACF;","names":[]}