@aifabrix/miso-client 4.15.4 → 4.17.0

package/CHANGELOG.md

@@ -5,6 +5,41 @@ All notable changes to this project will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [Unreleased]
+
+## [4.17.0] - 2026-06-10
+
+### Changed
+
+- **Browser-session refresh request shape** - `createBrowserSessionClient().refresh()` now sends cookie-auth `POST /api/v1/auth/refresh` requests without a JSON body, matching cookie-first hard-cut semantics.
+- **Browser-session token surface** - `SessionRestoreSuccess` no longer exposes `refreshToken` for browser flow helpers; browser callbacks continue to return access-token metadata only.
+- **Browser auth documentation alignment** - Authentication/DataClient docs now explicitly describe callback result shape and cookie-first refresh semantics without browser refresh-token exposure.
+
+### Technical
+
+- **Tests/docs alignment** - Added regression coverage for no-body browser refresh requests and updated browser-auth documentation examples to reflect the current callback and refresh signatures.
+
+## [4.16.0] - 2026-06-03
+
+### Added
+
+- **UI auth consolidation helpers** - `AUTH_CONTROLLER_PATHS`, `resolveBrowserApiBaseUrl`, `alignLoopbackHostnameWithPage`, `recoverBrowserSessionWithStaleCleanup` / `recoverBrowserSessionToUserToken` / `recoverBrowserSessionOrThrow`, `isUnauthorizedApiError`, `isInactiveTokenMessage`, `isStaleBrowserSessionFailure`, and client-token URL helpers (`extractClientTokenFromUrl`, `removeClientTokenFromUrl`) for shared miso-ui and dataplane app-ui browser auth.
+
+### Changed
+
+- **`sdk-exports` surface** - Removed `DataClient` and `dataClient` re-exports from the SDK exports entry; import them from the main package entry (`@aifabrix/miso-client`) instead.
+
+### Technical
+
+- Unit tests for browser session, recovery, URL resolution, loopback alignment, auth error helpers, and client-token URL utilities.
+- Documentation: browser UI auth helpers in `docs/authentication.md`, enterprise cookie session flow in `docs/dataclient.md`, split-port troubleshooting in `docs/troubleshooting.md`.
+
+## [4.15.5] - 2026-06-03
+
+### Added
+
+- **Browser session utilities** - `createBrowserSessionClient`, `createCookieSessionCallbacks`, and `ensureBrowserAccessToken` for cookie-first controller auth (`GET /api/v1/auth/session`, `POST /api/v1/auth/refresh`) with retries, deduplication, and `SessionRestoreResult` typing shared across dataplane and miso-ui.
+
 ## [4.15.4] - 2026-06-03
 
 ### Changed

package/dist/sdk-exports.d.ts

@@ -55,4 +55,18 @@ export { autoInitializeDataClient, getCachedDataClientConfig, } from "./utils/da
 export type { AutoInitOptions } from "./utils/data-client-auto-init";
 export type { TokenType, TokenValidationOptions, TokenValidationResult, TokenPayload, KeycloakConfig, DelegatedProviderConfig, DelegatedProviderLookup, } from "./types/token-validation.types";
 export { TokenValidationService } from "./services/token-validation.service";
+export { AUTH_BROWSER_SESSION_PATHS, AUTH_CONTROLLER_PATHS, } from "./types/auth-browser.types";
+export type { AuthControllerPath } from "./types/auth-browser.types";
+export { isUnauthorizedApiError, isInactiveTokenMessage, isStaleBrowserSessionFailure, } from "./utils/auth-browser-errors";
+export { resolveBrowserApiBaseUrl } from "./utils/browser-api-base-url";
+export type { ResolveBrowserApiBaseUrlOptions } from "./utils/browser-api-base-url";
+export { alignLoopbackHostnameWithPage } from "./utils/loopback-host-alignment";
+export type { AlignLoopbackHostnameOptions } from "./utils/loopback-host-alignment";
+export { recoverBrowserSessionWithStaleCleanup, recoverBrowserSessionToUserToken, recoverBrowserSessionOrThrow, resolveSessionExpiresInSeconds, } from "./utils/browser-session-recovery";
+export type { RecoverBrowserSessionOptions } from "./utils/browser-session-recovery";
+export { extractClientTokenFromUrl, removeClientTokenFromUrl, } from "./utils/client-token-url";
+export type { ClientTokenUrlSource, ExtractClientTokenFromUrlOptions, RemoveClientTokenFromUrlOptions, } from "./utils/client-token-url";
+export { createBrowserSessionClient, createCookieSessionCallbacks, ensureBrowserAccessToken, sessionRestoreToUserToken, } from "./utils/browser-session";
+export type { BrowserSessionClient, BrowserSessionClientOptions, BrowserSessionPath, SessionRestoreFailure, SessionRestoreFailureReason, SessionRestoreResult, SessionRestoreSuccess, } from "./types/browser-session.types";
+export type { CookieSessionCallbacksOptions, EnsureBrowserAccessTokenOptions, } from "./utils/browser-session";
 //# sourceMappingURL=sdk-exports.d.ts.map

package/dist/sdk-exports.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sdk-exports.d.ts","sourceRoot":"","sources":["../src/sdk-exports.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,cAAc,sBAAsB,CAAC;AACrC,mBAAmB,0BAA0B,CAAC;AAC9C,cAAc,sBAAsB,CAAC;AACrC,cAAc,6BAA6B,CAAC;AAC5C,mBAAmB,oBAAoB,CAAC;AACxC,YAAY,EACV,aAAa,IAAI,uBAAuB,EACxC,aAAa,EACb,eAAe,GAChB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,2BAA2B,EAAE,MAAM,4BAA4B,CAAC;AACzE,OAAO,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAC;AACtD,OAAO,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAC;AACtD,OAAO,EAAE,iBAAiB,EAAE,MAAM,+BAA+B,CAAC;AAClE,OAAO,EAAE,wBAAwB,EAAE,MAAM,uCAAuC,CAAC;AACjF,OAAO,EAAE,kBAAkB,EAAE,MAAM,iCAAiC,CAAC;AACrE,OAAO,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAClD,OAAO,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAC;AACxD,OAAO,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAC;AACxD,OAAO,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AACjD,OAAO,EAAE,SAAS,EAAE,MAAM,0CAA0C,CAAC;AACrE,OAAO,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAC;AACzD,YAAY,EAAE,aAAa,EAAE,MAAM,0CAA0C,CAAC;AAC9E,OAAO,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AACnD,OAAO,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAC;AAC1D,OAAO,EAAE,mBAAmB,EAAE,MAAM,2BAA2B,CAAC;AAChE,OAAO,EAAE,sBAAsB,EAAE,MAAM,qBAAqB,CAAC;AAC7D,YAAY,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAC3D,YAAY,EAAE,sBAAsB,EAAE,MAAM,0BAA0B,CAAC;AACvE,OAAO,EACL,oBAAoB,EACpB,kBAAkB,EAClB,SAAS,EACT,WAAW,EACX,6BAA6B,GAC9B,MAAM,iCAAiC,CAAC;AACzC,OAAO,EACL,WAAW,EACX,wBAAwB,EACxB,gBAAgB,GACjB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,qBAAqB,EAAE,MAAM,yBAAyB,CAAC;AAChE,YAAY,EACV,qBAAqB,EACrB,MAAM,EACN,iBAAiB,GAClB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,qBAAqB,EAAE,MAAM,yBAAyB,CAAC;AAChE,YAAY,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAC;AAC9D,cAAc,0BAA0B,CAAC;AACzC,cAAc,sBAAsB,CAAC;AACrC,cAAc,6BAA6B,CAAC;AAC5C,cAAc,oBAAoB,CAAC;AACnC,OAAO,EACL,eAAe,EACf,iBAAiB,EACjB,cAAc,EACd,cAAc,GACf,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,iBAAiB,EAAE,MAAM,+BAA+B,CAAC;AAClE,YAAY,EAAE,aAAa,EAAE,MAAM,+BAA+B,CAAC;AACnE,OAAO,EAAE,eAAe,EAAE,MAAM,0BAA0B,CAAC;AAC3D,YAAY,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AACpE,YAAY,EACV,cAAc,EACd,eAAe,EACf,cAAc,EACd,eAAe,EACf,iBAAiB,GAClB,MAAM,8BAA8B,CAAC;AACtC,YAAY,EACV,oBAAoB,EACpB,qBAAqB,GACtB,MAAM,wBAAwB,CAAC;AAChC,YAAY,EACV,iBAAiB,EACjB,uBAAuB,EACvB,wBAAwB,EACxB,yBAAyB,GAC1B,MAAM,gCAAgC,CAAC;AACxC,OAAO,EAAE,yBAAyB,EAAE,MAAM,gCAAgC,CAAC;AAC3E,OAAO,EACL,cAAc,EACd,qBAAqB,EACrB,YAAY,EACZ,iBAAiB,EACjB,gBAAgB,EAChB,QAAQ,EACR,qBAAqB,EACrB,mBAAmB,EACnB,cAAc,EACd,gBAAgB,EAChB,eAAe,EACf,aAAa,EACb,iBAAiB,EACjB,yBAAyB,EACzB,SAAS,EACT,uBAAuB,GACxB,MAAM,WAAW,CAAC;AACnB,YAAY,EACV,cAAc,EACd,QAAQ,EACR,eAAe,EACf,WAAW,EACX,WAAW,EACX,mBAAmB,GACpB,MAAM,WAAW,CAAC;AACnB,YAAY,EACV,0BAA0B,EAC1B,mBAAmB,EACnB,wBAAwB,GACzB,MAAM,WAAW,CAAC;AACnB,YAAY,EAAE,aAAa,IAAI,oBAAoB,EAAE,MAAM,0BAA0B,CAAC;AACtF,YAAY,EACV,gBAAgB,EAChB,sBAAsB,EACtB,iBAAiB,EACjB,iBAAiB,EACjB,cAAc,EACd,WAAW,IAAI,qBAAqB,EACpC,UAAU,EACV,YAAY,EACZ,YAAY,EACZ,mBAAmB,EACnB,QAAQ,IAAI,kBAAkB,GAC/B,MAAM,2BAA2B,CAAC;AACnC,OAAO,EACL,kBAAkB,EAClB,eAAe,EACf,kCAAkC,EAClC,wBAAwB,EACxB,qBAAqB,EACrB,kBAAkB,EAClB,uBAAuB,GACxB,MAAM,4BAA4B,CAAC;AACpC,OAAO,EACL,wBAAwB,EACxB,yBAAyB,GAC1B,MAAM,+BAA+B,CAAC;AACvC,YAAY,EAAE,eAAe,EAAE,MAAM,+BAA+B,CAAC;AACrE,YAAY,EACV,SAAS,EACT,sBAAsB,EACtB,qBAAqB,EACrB,YAAY,EACZ,cAAc,EACd,uBAAuB,EACvB,uBAAuB,GACxB,MAAM,gCAAgC,CAAC;AACxC,OAAO,EAAE,sBAAsB,EAAE,MAAM,qCAAqC,CAAC"}
+{"version":3,"file":"sdk-exports.d.ts","sourceRoot":"","sources":["../src/sdk-exports.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,cAAc,sBAAsB,CAAC;AACrC,mBAAmB,0BAA0B,CAAC;AAC9C,cAAc,sBAAsB,CAAC;AACrC,cAAc,6BAA6B,CAAC;AAC5C,mBAAmB,oBAAoB,CAAC;AACxC,YAAY,EACV,aAAa,IAAI,uBAAuB,EACxC,aAAa,EACb,eAAe,GAChB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,2BAA2B,EAAE,MAAM,4BAA4B,CAAC;AACzE,OAAO,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAC;AACtD,OAAO,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAC;AACtD,OAAO,EAAE,iBAAiB,EAAE,MAAM,+BAA+B,CAAC;AAClE,OAAO,EAAE,wBAAwB,EAAE,MAAM,uCAAuC,CAAC;AACjF,OAAO,EAAE,kBAAkB,EAAE,MAAM,iCAAiC,CAAC;AACrE,OAAO,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAClD,OAAO,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAC;AACxD,OAAO,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAC;AACxD,OAAO,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AACjD,OAAO,EAAE,SAAS,EAAE,MAAM,0CAA0C,CAAC;AACrE,OAAO,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAC;AACzD,YAAY,EAAE,aAAa,EAAE,MAAM,0CAA0C,CAAC;AAC9E,OAAO,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AACnD,OAAO,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAC;AAC1D,OAAO,EAAE,mBAAmB,EAAE,MAAM,2BAA2B,CAAC;AAChE,OAAO,EAAE,sBAAsB,EAAE,MAAM,qBAAqB,CAAC;AAC7D,YAAY,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAC3D,YAAY,EAAE,sBAAsB,EAAE,MAAM,0BAA0B,CAAC;AACvE,OAAO,EACL,oBAAoB,EACpB,kBAAkB,EAClB,SAAS,EACT,WAAW,EACX,6BAA6B,GAC9B,MAAM,iCAAiC,CAAC;AACzC,OAAO,EACL,WAAW,EACX,wBAAwB,EACxB,gBAAgB,GACjB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,qBAAqB,EAAE,MAAM,yBAAyB,CAAC;AAChE,YAAY,EACV,qBAAqB,EACrB,MAAM,EACN,iBAAiB,GAClB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,qBAAqB,EAAE,MAAM,yBAAyB,CAAC;AAChE,YAAY,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAC;AAC9D,cAAc,0BAA0B,CAAC;AACzC,cAAc,sBAAsB,CAAC;AACrC,cAAc,6BAA6B,CAAC;AAC5C,cAAc,oBAAoB,CAAC;AACnC,OAAO,EACL,eAAe,EACf,iBAAiB,EACjB,cAAc,EACd,cAAc,GACf,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,iBAAiB,EAAE,MAAM,+BAA+B,CAAC;AAClE,YAAY,EAAE,aAAa,EAAE,MAAM,+BAA+B,CAAC;AACnE,OAAO,EAAE,eAAe,EAAE,MAAM,0BAA0B,CAAC;AAC3D,YAAY,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AACpE,YAAY,EACV,cAAc,EACd,eAAe,EACf,cAAc,EACd,eAAe,EACf,iBAAiB,GAClB,MAAM,8BAA8B,CAAC;AACtC,YAAY,EACV,oBAAoB,EACpB,qBAAqB,GACtB,MAAM,wBAAwB,CAAC;AAChC,YAAY,EACV,iBAAiB,EACjB,uBAAuB,EACvB,wBAAwB,EACxB,yBAAyB,GAC1B,MAAM,gCAAgC,CAAC;AACxC,OAAO,EAAE,yBAAyB,EAAE,MAAM,gCAAgC,CAAC;AAC3E,OAAO,EACL,cAAc,EACd,qBAAqB,EACrB,YAAY,EACZ,iBAAiB,EACjB,gBAAgB,EAChB,QAAQ,EACR,qBAAqB,EACrB,mBAAmB,EACnB,cAAc,EACd,gBAAgB,EAChB,eAAe,EACf,aAAa,EACb,iBAAiB,EACjB,yBAAyB,EACzB,SAAS,EACT,uBAAuB,GACxB,MAAM,WAAW,CAAC;AACnB,YAAY,EACV,cAAc,EACd,QAAQ,EACR,eAAe,EACf,WAAW,EACX,WAAW,EACX,mBAAmB,GACpB,MAAM,WAAW,CAAC;AACnB,YAAY,EACV,0BAA0B,EAC1B,mBAAmB,EACnB,wBAAwB,GACzB,MAAM,WAAW,CAAC;AACnB,YAAY,EAAE,aAAa,IAAI,oBAAoB,EAAE,MAAM,0BAA0B,CAAC;AACtF,YAAY,EACV,gBAAgB,EAChB,sBAAsB,EACtB,iBAAiB,EACjB,iBAAiB,EACjB,cAAc,EACd,WAAW,IAAI,qBAAqB,EACpC,UAAU,EACV,YAAY,EACZ,YAAY,EACZ,mBAAmB,EACnB,QAAQ,IAAI,kBAAkB,GAC/B,MAAM,2BAA2B,CAAC;AACnC,OAAO,EACL,kBAAkB,EAClB,eAAe,EACf,kCAAkC,EAClC,wBAAwB,EACxB,qBAAqB,EACrB,kBAAkB,EAClB,uBAAuB,GACxB,MAAM,4BAA4B,CAAC;AACpC,OAAO,EACL,wBAAwB,EACxB,yBAAyB,GAC1B,MAAM,+BAA+B,CAAC;AACvC,YAAY,EAAE,eAAe,EAAE,MAAM,+BAA+B,CAAC;AACrE,YAAY,EACV,SAAS,EACT,sBAAsB,EACtB,qBAAqB,EACrB,YAAY,EACZ,cAAc,EACd,uBAAuB,EACvB,uBAAuB,GACxB,MAAM,gCAAgC,CAAC;AACxC,OAAO,EAAE,sBAAsB,EAAE,MAAM,qCAAqC,CAAC;AAC7E,OAAO,EACL,0BAA0B,EAC1B,qBAAqB,GACtB,MAAM,4BAA4B,CAAC;AACpC,YAAY,EAAE,kBAAkB,EAAE,MAAM,4BAA4B,CAAC;AACrE,OAAO,EACL,sBAAsB,EACtB,sBAAsB,EACtB,4BAA4B,GAC7B,MAAM,6BAA6B,CAAC;AACrC,OAAO,EAAE,wBAAwB,EAAE,MAAM,8BAA8B,CAAC;AACxE,YAAY,EAAE,+BAA+B,EAAE,MAAM,8BAA8B,CAAC;AACpF,OAAO,EAAE,6BAA6B,EAAE,MAAM,iCAAiC,CAAC;AAChF,YAAY,EAAE,4BAA4B,EAAE,MAAM,iCAAiC,CAAC;AACpF,OAAO,EACL,qCAAqC,EACrC,gCAAgC,EAChC,4BAA4B,EAC5B,8BAA8B,GAC/B,MAAM,kCAAkC,CAAC;AAC1C,YAAY,EAAE,4BAA4B,EAAE,MAAM,kCAAkC,CAAC;AACrF,OAAO,EACL,yBAAyB,EACzB,wBAAwB,GACzB,MAAM,0BAA0B,CAAC;AAClC,YAAY,EACV,oBAAoB,EACpB,gCAAgC,EAChC,+BAA+B,GAChC,MAAM,0BAA0B,CAAC;AAClC,OAAO,EACL,0BAA0B,EAC1B,4BAA4B,EAC5B,wBAAwB,EACxB,yBAAyB,GAC1B,MAAM,yBAAyB,CAAC;AACjC,YAAY,EACV,oBAAoB,EACpB,2BAA2B,EAC3B,kBAAkB,EAClB,qBAAqB,EACrB,2BAA2B,EAC3B,oBAAoB,EACpB,qBAAqB,GACtB,MAAM,+BAA+B,CAAC;AACvC,YAAY,EACV,6BAA6B,EAC7B,+BAA+B,GAChC,MAAM,yBAAyB,CAAC"}

package/dist/sdk-exports.js

@@ -18,7 +18,7 @@ var __exportStar = (this && this.__exportStar) || function(m, exports) {
 };
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.normalizeExpiresAt = exports.loggerContextMiddleware = exports.hasConfig = exports.createClientTokenEndpoint = exports.sendErrorResponse = exports.getErrorTitle = exports.getErrorTypeUri = exports.handleRouteError = exports.setErrorLogger = exports.createErrorResponse = exports.createSuccessResponse = exports.AppError = exports.ValidationHelper = exports.asyncHandlerNamed = exports.asyncHandler = exports.injectResponseHelpers = exports.ResponseHelper = exports.APPLICATION_STATUS_VALUES = exports.EncryptionError = exports.EncryptionService = exports.handleApiError = exports.transformError = exports.ApiErrorException = exports.MisoClientError = exports.extractRequestContext = exports.extractLoggingContext = exports.normalizeRootUrl = exports.mergeRootUrlWithBasePath = exports.joinApiRoot = exports.coerceControllerUrlToAbsolute = exports.validateUrl = exports.isBrowser = exports.resolveKeycloakUrl = exports.resolveControllerUrl = exports.extractClientTokenInfo = exports.getEnvironmentToken = exports.validateOrigin = exports.loadConfig = exports.LoggerContextStorage = exports.getLogger = exports.HttpClient = exports.CacheService = exports.RedisService = exports.LoggerService = exports.BrowserRoleService = exports.BrowserPermissionService = exports.PermissionService = exports.RoleService = exports.AuthService = exports.detectAuthMethodFromHeaders = void 0;
-exports.TokenValidationService = exports.getCachedDataClientConfig = exports.autoInitializeDataClient = exports.UserTokenRefreshManager = exports.isUserTokenExpired = exports.isUserTokenRefreshDue = exports.getUserTokenRefreshDueAt = exports.getEffectiveUserTokenRefreshBuffer = exports.getJwtExpiresAt = void 0;
+exports.sessionRestoreToUserToken = exports.ensureBrowserAccessToken = exports.createCookieSessionCallbacks = exports.createBrowserSessionClient = exports.removeClientTokenFromUrl = exports.extractClientTokenFromUrl = exports.resolveSessionExpiresInSeconds = exports.recoverBrowserSessionOrThrow = exports.recoverBrowserSessionToUserToken = exports.recoverBrowserSessionWithStaleCleanup = exports.alignLoopbackHostnameWithPage = exports.resolveBrowserApiBaseUrl = exports.isStaleBrowserSessionFailure = exports.isInactiveTokenMessage = exports.isUnauthorizedApiError = exports.AUTH_CONTROLLER_PATHS = exports.AUTH_BROWSER_SESSION_PATHS = exports.TokenValidationService = exports.getCachedDataClientConfig = exports.autoInitializeDataClient = exports.UserTokenRefreshManager = exports.isUserTokenExpired = exports.isUserTokenRefreshDue = exports.getUserTokenRefreshDueAt = exports.getEffectiveUserTokenRefreshBuffer = exports.getJwtExpiresAt = void 0;
 __exportStar(require("./types/config.types"), exports);
 __exportStar(require("./types/filter.types"), exports);
 __exportStar(require("./types/filter-schema.types"), exports);
@@ -113,4 +113,28 @@ Object.defineProperty(exports, "autoInitializeDataClient", { enumerable: true, g
 Object.defineProperty(exports, "getCachedDataClientConfig", { enumerable: true, get: function () { return data_client_auto_init_1.getCachedDataClientConfig; } });
 var token_validation_service_1 = require("./services/token-validation.service");
 Object.defineProperty(exports, "TokenValidationService", { enumerable: true, get: function () { return token_validation_service_1.TokenValidationService; } });
+var auth_browser_types_1 = require("./types/auth-browser.types");
+Object.defineProperty(exports, "AUTH_BROWSER_SESSION_PATHS", { enumerable: true, get: function () { return auth_browser_types_1.AUTH_BROWSER_SESSION_PATHS; } });
+Object.defineProperty(exports, "AUTH_CONTROLLER_PATHS", { enumerable: true, get: function () { return auth_browser_types_1.AUTH_CONTROLLER_PATHS; } });
+var auth_browser_errors_1 = require("./utils/auth-browser-errors");
+Object.defineProperty(exports, "isUnauthorizedApiError", { enumerable: true, get: function () { return auth_browser_errors_1.isUnauthorizedApiError; } });
+Object.defineProperty(exports, "isInactiveTokenMessage", { enumerable: true, get: function () { return auth_browser_errors_1.isInactiveTokenMessage; } });
+Object.defineProperty(exports, "isStaleBrowserSessionFailure", { enumerable: true, get: function () { return auth_browser_errors_1.isStaleBrowserSessionFailure; } });
+var browser_api_base_url_1 = require("./utils/browser-api-base-url");
+Object.defineProperty(exports, "resolveBrowserApiBaseUrl", { enumerable: true, get: function () { return browser_api_base_url_1.resolveBrowserApiBaseUrl; } });
+var loopback_host_alignment_1 = require("./utils/loopback-host-alignment");
+Object.defineProperty(exports, "alignLoopbackHostnameWithPage", { enumerable: true, get: function () { return loopback_host_alignment_1.alignLoopbackHostnameWithPage; } });
+var browser_session_recovery_1 = require("./utils/browser-session-recovery");
+Object.defineProperty(exports, "recoverBrowserSessionWithStaleCleanup", { enumerable: true, get: function () { return browser_session_recovery_1.recoverBrowserSessionWithStaleCleanup; } });
+Object.defineProperty(exports, "recoverBrowserSessionToUserToken", { enumerable: true, get: function () { return browser_session_recovery_1.recoverBrowserSessionToUserToken; } });
+Object.defineProperty(exports, "recoverBrowserSessionOrThrow", { enumerable: true, get: function () { return browser_session_recovery_1.recoverBrowserSessionOrThrow; } });
+Object.defineProperty(exports, "resolveSessionExpiresInSeconds", { enumerable: true, get: function () { return browser_session_recovery_1.resolveSessionExpiresInSeconds; } });
+var client_token_url_1 = require("./utils/client-token-url");
+Object.defineProperty(exports, "extractClientTokenFromUrl", { enumerable: true, get: function () { return client_token_url_1.extractClientTokenFromUrl; } });
+Object.defineProperty(exports, "removeClientTokenFromUrl", { enumerable: true, get: function () { return client_token_url_1.removeClientTokenFromUrl; } });
+var browser_session_1 = require("./utils/browser-session");
+Object.defineProperty(exports, "createBrowserSessionClient", { enumerable: true, get: function () { return browser_session_1.createBrowserSessionClient; } });
+Object.defineProperty(exports, "createCookieSessionCallbacks", { enumerable: true, get: function () { return browser_session_1.createCookieSessionCallbacks; } });
+Object.defineProperty(exports, "ensureBrowserAccessToken", { enumerable: true, get: function () { return browser_session_1.ensureBrowserAccessToken; } });
+Object.defineProperty(exports, "sessionRestoreToUserToken", { enumerable: true, get: function () { return browser_session_1.sessionRestoreToUserToken; } });
 //# sourceMappingURL=sdk-exports.js.map

package/dist/sdk-exports.js.map

@@ -1 +1 @@
-{"version":3,"file":"sdk-exports.js","sourceRoot":"","sources":["../src/sdk-exports.ts"],"names":[],"mappings":";AAAA;;GAEG;;;;;;;;;;;;;;;;;;AAEH,uDAAqC;AAErC,uDAAqC;AACrC,8DAA4C;AAO5C,iEAAyE;AAAhE,iIAAA,2BAA2B,OAAA;AACpC,wDAAsD;AAA7C,2GAAA,WAAW,OAAA;AACpB,wDAAsD;AAA7C,2GAAA,WAAW,OAAA;AACpB,oEAAkE;AAAzD,uHAAA,iBAAiB,OAAA;AAC1B,oFAAiF;AAAxE,sIAAA,wBAAwB,OAAA;AACjC,wEAAqE;AAA5D,0HAAA,kBAAkB,OAAA;AAC3B,4CAAkD;AAAzC,uGAAA,aAAa,OAAA;AACtB,0DAAwD;AAA/C,6GAAA,YAAY,OAAA;AACrB,0DAAwD;AAA/C,6GAAA,YAAY,OAAA;AACrB,mDAAiD;AAAxC,yGAAA,UAAU,OAAA;AACnB,mFAAqE;AAA5D,mHAAA,SAAS,OAAA;AAClB,4CAAyD;AAAhD,8GAAA,oBAAoB,OAAA;AAE7B,uDAAmD;AAA1C,2GAAA,UAAU,OAAA;AACnB,6DAA0D;AAAjD,kHAAA,cAAc,OAAA;AACvB,+DAAgE;AAAvD,wHAAA,mBAAmB,OAAA;AAC5B,mDAA6D;AAApD,qHAAA,sBAAsB,OAAA;AAG/B,2EAMyC;AALvC,+HAAA,oBAAoB,OAAA;AACpB,6HAAA,kBAAkB,OAAA;AAClB,oHAAA,SAAS,OAAA;AACT,sHAAA,WAAW,OAAA;AACX,wIAAA,6BAA6B,OAAA;AAE/B,6CAI0B;AAHxB,uGAAA,WAAW,OAAA;AACX,oHAAA,wBAAwB,OAAA;AACxB,4GAAA,gBAAgB,OAAA;AAElB,2DAAgE;AAAvD,wHAAA,qBAAqB,OAAA;AAM9B,2DAAgE;AAAvD,wHAAA,qBAAqB,OAAA;AAE9B,2DAAyC;AACzC,uDAAqC;AACrC,8DAA4C;AAC5C,qDAAmC;AACnC,yCAKwB;AAJtB,yGAAA,eAAe,OAAA;AACf,2GAAA,iBAAiB,OAAA;AACjB,wGAAA,cAAc,OAAA;AACd,wGAAA,cAAc,OAAA;AAEhB,oEAAkE;AAAzD,uHAAA,iBAAiB,OAAA;AAE1B,6DAA2D;AAAlD,mHAAA,eAAe,OAAA;AAmBxB,qEAA2E;AAAlE,+HAAA,yBAAyB,OAAA;AAClC,qCAiBmB;AAhBjB,yGAAA,cAAc,OAAA;AACd,gHAAA,qBAAqB,OAAA;AACrB,uGAAA,YAAY,OAAA;AACZ,4GAAA,iBAAiB,OAAA;AACjB,2GAAA,gBAAgB,OAAA;AAChB,mGAAA,QAAQ,OAAA;AACR,gHAAA,qBAAqB,OAAA;AACrB,8GAAA,mBAAmB,OAAA;AACnB,yGAAA,cAAc,OAAA;AACd,2GAAA,gBAAgB,OAAA;AAChB,0GAAA,eAAe,OAAA;AACf,wGAAA,aAAa,OAAA;AACb,4GAAA,iBAAiB,OAAA;AACjB,oHAAA,yBAAyB,OAAA;AACzB,oGAAA,SAAS,OAAA;AACT,kHAAA,uBAAuB,OAAA;AA6BzB,iEAQoC;AAPlC,wHAAA,kBAAkB,OAAA;AAClB,qHAAA,eAAe,OAAA;AACf,wIAAA,kCAAkC,OAAA;AAClC,8HAAA,wBAAwB,OAAA;AACxB,2HAAA,qBAAqB,OAAA;AACrB,wHAAA,kBAAkB,OAAA;AAClB,6HAAA,uBAAuB,OAAA;AAEzB,uEAGuC;AAFrC,iIAAA,wBAAwB,OAAA;AACxB,kIAAA,yBAAyB,OAAA;AAY3B,gFAA6E;AAApE,kIAAA,sBAAsB,OAAA"}
+{"version":3,"file":"sdk-exports.js","sourceRoot":"","sources":["../src/sdk-exports.ts"],"names":[],"mappings":";AAAA;;GAEG;;;;;;;;;;;;;;;;;;AAEH,uDAAqC;AAErC,uDAAqC;AACrC,8DAA4C;AAO5C,iEAAyE;AAAhE,iIAAA,2BAA2B,OAAA;AACpC,wDAAsD;AAA7C,2GAAA,WAAW,OAAA;AACpB,wDAAsD;AAA7C,2GAAA,WAAW,OAAA;AACpB,oEAAkE;AAAzD,uHAAA,iBAAiB,OAAA;AAC1B,oFAAiF;AAAxE,sIAAA,wBAAwB,OAAA;AACjC,wEAAqE;AAA5D,0HAAA,kBAAkB,OAAA;AAC3B,4CAAkD;AAAzC,uGAAA,aAAa,OAAA;AACtB,0DAAwD;AAA/C,6GAAA,YAAY,OAAA;AACrB,0DAAwD;AAA/C,6GAAA,YAAY,OAAA;AACrB,mDAAiD;AAAxC,yGAAA,UAAU,OAAA;AACnB,mFAAqE;AAA5D,mHAAA,SAAS,OAAA;AAClB,4CAAyD;AAAhD,8GAAA,oBAAoB,OAAA;AAE7B,uDAAmD;AAA1C,2GAAA,UAAU,OAAA;AACnB,6DAA0D;AAAjD,kHAAA,cAAc,OAAA;AACvB,+DAAgE;AAAvD,wHAAA,mBAAmB,OAAA;AAC5B,mDAA6D;AAApD,qHAAA,sBAAsB,OAAA;AAG/B,2EAMyC;AALvC,+HAAA,oBAAoB,OAAA;AACpB,6HAAA,kBAAkB,OAAA;AAClB,oHAAA,SAAS,OAAA;AACT,sHAAA,WAAW,OAAA;AACX,wIAAA,6BAA6B,OAAA;AAE/B,6CAI0B;AAHxB,uGAAA,WAAW,OAAA;AACX,oHAAA,wBAAwB,OAAA;AACxB,4GAAA,gBAAgB,OAAA;AAElB,2DAAgE;AAAvD,wHAAA,qBAAqB,OAAA;AAM9B,2DAAgE;AAAvD,wHAAA,qBAAqB,OAAA;AAE9B,2DAAyC;AACzC,uDAAqC;AACrC,8DAA4C;AAC5C,qDAAmC;AACnC,yCAKwB;AAJtB,yGAAA,eAAe,OAAA;AACf,2GAAA,iBAAiB,OAAA;AACjB,wGAAA,cAAc,OAAA;AACd,wGAAA,cAAc,OAAA;AAEhB,oEAAkE;AAAzD,uHAAA,iBAAiB,OAAA;AAE1B,6DAA2D;AAAlD,mHAAA,eAAe,OAAA;AAmBxB,qEAA2E;AAAlE,+HAAA,yBAAyB,OAAA;AAClC,qCAiBmB;AAhBjB,yGAAA,cAAc,OAAA;AACd,gHAAA,qBAAqB,OAAA;AACrB,uGAAA,YAAY,OAAA;AACZ,4GAAA,iBAAiB,OAAA;AACjB,2GAAA,gBAAgB,OAAA;AAChB,mGAAA,QAAQ,OAAA;AACR,gHAAA,qBAAqB,OAAA;AACrB,8GAAA,mBAAmB,OAAA;AACnB,yGAAA,cAAc,OAAA;AACd,2GAAA,gBAAgB,OAAA;AAChB,0GAAA,eAAe,OAAA;AACf,wGAAA,aAAa,OAAA;AACb,4GAAA,iBAAiB,OAAA;AACjB,oHAAA,yBAAyB,OAAA;AACzB,oGAAA,SAAS,OAAA;AACT,kHAAA,uBAAuB,OAAA;AA6BzB,iEAQoC;AAPlC,wHAAA,kBAAkB,OAAA;AAClB,qHAAA,eAAe,OAAA;AACf,wIAAA,kCAAkC,OAAA;AAClC,8HAAA,wBAAwB,OAAA;AACxB,2HAAA,qBAAqB,OAAA;AACrB,wHAAA,kBAAkB,OAAA;AAClB,6HAAA,uBAAuB,OAAA;AAEzB,uEAGuC;AAFrC,iIAAA,wBAAwB,OAAA;AACxB,kIAAA,yBAAyB,OAAA;AAY3B,gFAA6E;AAApE,kIAAA,sBAAsB,OAAA;AAC/B,iEAGoC;AAFlC,gIAAA,0BAA0B,OAAA;AAC1B,2HAAA,qBAAqB,OAAA;AAGvB,mEAIqC;AAHnC,6HAAA,sBAAsB,OAAA;AACtB,6HAAA,sBAAsB,OAAA;AACtB,mIAAA,4BAA4B,OAAA;AAE9B,qEAAwE;AAA/D,gIAAA,wBAAwB,OAAA;AAEjC,2EAAgF;AAAvE,wIAAA,6BAA6B,OAAA;AAEtC,6EAK0C;AAJxC,iJAAA,qCAAqC,OAAA;AACrC,4IAAA,gCAAgC,OAAA;AAChC,wIAAA,4BAA4B,OAAA;AAC5B,0IAAA,8BAA8B,OAAA;AAGhC,6DAGkC;AAFhC,6HAAA,yBAAyB,OAAA;AACzB,4HAAA,wBAAwB,OAAA;AAO1B,2DAKiC;AAJ/B,6HAAA,0BAA0B,OAAA;AAC1B,+HAAA,4BAA4B,OAAA;AAC5B,2HAAA,wBAAwB,OAAA;AACxB,4HAAA,yBAAyB,OAAA"}

package/dist/types/auth-browser.types.d.ts

@@ -0,0 +1,18 @@
+/**
+ * Shared controller auth path constants for browser applications.
+ */
+export declare const AUTH_CONTROLLER_PATHS: {
+    readonly SESSION: "/api/v1/auth/session";
+    readonly REFRESH: "/api/v1/auth/refresh";
+    readonly LOGIN: "/api/v1/auth/login";
+    readonly CALLBACK: "/api/v1/auth/callback";
+    readonly LOGOUT: "/api/v1/auth/logout";
+    readonly CLIENT_TOKEN: "/api/v1/auth/client-token";
+};
+export type AuthControllerPath = (typeof AUTH_CONTROLLER_PATHS)[keyof typeof AUTH_CONTROLLER_PATHS];
+/** @deprecated Use AUTH_CONTROLLER_PATHS.SESSION */
+export declare const AUTH_BROWSER_SESSION_PATHS: {
+    readonly SESSION: "/api/v1/auth/session";
+    readonly REFRESH: "/api/v1/auth/refresh";
+};
+//# sourceMappingURL=auth-browser.types.d.ts.map

package/dist/types/auth-browser.types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth-browser.types.d.ts","sourceRoot":"","sources":["../../src/types/auth-browser.types.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,eAAO,MAAM,qBAAqB;;;;;;;CAOxB,CAAC;AAEX,MAAM,MAAM,kBAAkB,GAC5B,CAAC,OAAO,qBAAqB,CAAC,CAAC,MAAM,OAAO,qBAAqB,CAAC,CAAC;AAErE,oDAAoD;AACpD,eAAO,MAAM,0BAA0B;;;CAG7B,CAAC"}

package/dist/types/auth-browser.types.js

@@ -0,0 +1,20 @@
+"use strict";
+/**
+ * Shared controller auth path constants for browser applications.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AUTH_BROWSER_SESSION_PATHS = exports.AUTH_CONTROLLER_PATHS = void 0;
+exports.AUTH_CONTROLLER_PATHS = {
+    SESSION: "/api/v1/auth/session",
+    REFRESH: "/api/v1/auth/refresh",
+    LOGIN: "/api/v1/auth/login",
+    CALLBACK: "/api/v1/auth/callback",
+    LOGOUT: "/api/v1/auth/logout",
+    CLIENT_TOKEN: "/api/v1/auth/client-token",
+};
+/** @deprecated Use AUTH_CONTROLLER_PATHS.SESSION */
+exports.AUTH_BROWSER_SESSION_PATHS = {
+    SESSION: exports.AUTH_CONTROLLER_PATHS.SESSION,
+    REFRESH: exports.AUTH_CONTROLLER_PATHS.REFRESH,
+};
+//# sourceMappingURL=auth-browser.types.js.map

package/dist/types/auth-browser.types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth-browser.types.js","sourceRoot":"","sources":["../../src/types/auth-browser.types.ts"],"names":[],"mappings":";AAAA;;GAEG;;;AAEU,QAAA,qBAAqB,GAAG;IACnC,OAAO,EAAE,sBAAsB;IAC/B,OAAO,EAAE,sBAAsB;IAC/B,KAAK,EAAE,oBAAoB;IAC3B,QAAQ,EAAE,uBAAuB;IACjC,MAAM,EAAE,qBAAqB;IAC7B,YAAY,EAAE,2BAA2B;CACjC,CAAC;AAKX,oDAAoD;AACvC,QAAA,0BAA0B,GAAG;IACxC,OAAO,EAAE,6BAAqB,CAAC,OAAO;IACtC,OAAO,EAAE,6BAAqB,CAAC,OAAO;CAC9B,CAAC"}

package/dist/types/browser-session.types.d.ts

@@ -0,0 +1,35 @@
+/**
+ * Cookie-first browser session types (controller HttpOnly refresh cookie).
+ */
+export { AUTH_BROWSER_SESSION_PATHS, AUTH_CONTROLLER_PATHS, } from "./auth-browser.types";
+export type { AuthControllerPath } from "./auth-browser.types";
+import type { AuthControllerPath } from "./auth-browser.types";
+export type BrowserSessionPath = AuthControllerPath;
+export type SessionRestoreFailureReason = "unauthorized" | "network" | "server" | "invalid";
+export type SessionRestoreSuccess = {
+    ok: true;
+    accessToken: string;
+    expiresAt?: string;
+    expiresIn?: number;
+    user?: Record<string, unknown>;
+};
+export type SessionRestoreFailure = {
+    ok: false;
+    status?: number;
+    reason: SessionRestoreFailureReason;
+    message?: string;
+};
+export type SessionRestoreResult = SessionRestoreSuccess | SessionRestoreFailure;
+export type BrowserSessionClientOptions = {
+    /** Resolves controller public base URL (no trailing slash). */
+    getBaseUrl: () => string;
+    sessionPath?: string;
+    refreshPath?: string;
+    timeoutMs?: number;
+    retryDelaysMs?: number[];
+};
+export type BrowserSessionClient = {
+    restore: () => Promise<SessionRestoreResult>;
+    refresh: () => Promise<SessionRestoreResult>;
+};
+//# sourceMappingURL=browser-session.types.d.ts.map

package/dist/types/browser-session.types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"browser-session.types.d.ts","sourceRoot":"","sources":["../../src/types/browser-session.types.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EACL,0BAA0B,EAC1B,qBAAqB,GACtB,MAAM,sBAAsB,CAAC;AAC9B,YAAY,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAC/D,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAE/D,MAAM,MAAM,kBAAkB,GAAG,kBAAkB,CAAC;AAEpD,MAAM,MAAM,2BAA2B,GACnC,cAAc,GACd,SAAS,GACT,QAAQ,GACR,SAAS,CAAC;AAEd,MAAM,MAAM,qBAAqB,GAAG;IAClC,EAAE,EAAE,IAAI,CAAC;IACT,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAChC,CAAC;AAEF,MAAM,MAAM,qBAAqB,GAAG;IAClC,EAAE,EAAE,KAAK,CAAC;IACV,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,2BAA2B,CAAC;IACpC,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB,CAAC;AAEF,MAAM,MAAM,oBAAoB,GAC5B,qBAAqB,GACrB,qBAAqB,CAAC;AAE1B,MAAM,MAAM,2BAA2B,GAAG;IACxC,+DAA+D;IAC/D,UAAU,EAAE,MAAM,MAAM,CAAC;IACzB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,aAAa,CAAC,EAAE,MAAM,EAAE,CAAC;CAC1B,CAAC;AAEF,MAAM,MAAM,oBAAoB,GAAG;IACjC,OAAO,EAAE,MAAM,OAAO,CAAC,oBAAoB,CAAC,CAAC;IAC7C,OAAO,EAAE,MAAM,OAAO,CAAC,oBAAoB,CAAC,CAAC;CAC9C,CAAC"}

package/dist/types/browser-session.types.js

@@ -0,0 +1,10 @@
+"use strict";
+/**
+ * Cookie-first browser session types (controller HttpOnly refresh cookie).
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AUTH_CONTROLLER_PATHS = exports.AUTH_BROWSER_SESSION_PATHS = void 0;
+var auth_browser_types_1 = require("./auth-browser.types");
+Object.defineProperty(exports, "AUTH_BROWSER_SESSION_PATHS", { enumerable: true, get: function () { return auth_browser_types_1.AUTH_BROWSER_SESSION_PATHS; } });
+Object.defineProperty(exports, "AUTH_CONTROLLER_PATHS", { enumerable: true, get: function () { return auth_browser_types_1.AUTH_CONTROLLER_PATHS; } });
+//# sourceMappingURL=browser-session.types.js.map

package/dist/types/browser-session.types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"browser-session.types.js","sourceRoot":"","sources":["../../src/types/browser-session.types.ts"],"names":[],"mappings":";AAAA;;GAEG;;;AAEH,2DAG8B;AAF5B,gIAAA,0BAA0B,OAAA;AAC1B,2HAAA,qBAAqB,OAAA"}

package/dist/utils/auth-browser-errors.d.ts

@@ -0,0 +1,19 @@
+/**
+ * Browser auth error classification helpers (401, inactive token messages).
+ */
+/**
+ * Returns true when an API/SDK error represents HTTP 401 Unauthorized.
+ */
+export declare function isUnauthorizedApiError(error: unknown): boolean;
+/**
+ * Keycloak-style inactive access token message (often surfaced as 400).
+ */
+export declare function isInactiveTokenMessage(message: string | null | undefined): boolean;
+/**
+ * Session restore failure that should trigger stale-state cleanup before retry.
+ */
+export declare function isStaleBrowserSessionFailure(result: {
+    ok: boolean;
+    reason?: string;
+}): boolean;
+//# sourceMappingURL=auth-browser-errors.d.ts.map

package/dist/utils/auth-browser-errors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth-browser-errors.d.ts","sourceRoot":"","sources":["../../src/utils/auth-browser-errors.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH;;GAEG;AACH,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAuC9D;AAED;;GAEG;AACH,wBAAgB,sBAAsB,CACpC,OAAO,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GACjC,OAAO,CAET;AAED;;GAEG;AACH,wBAAgB,4BAA4B,CAAC,MAAM,EAAE;IACnD,EAAE,EAAE,OAAO,CAAC;IACZ,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB,GAAG,OAAO,CAKV"}

package/dist/utils/auth-browser-errors.js

@@ -0,0 +1,51 @@
+"use strict";
+/**
+ * Browser auth error classification helpers (401, inactive token messages).
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.isUnauthorizedApiError = isUnauthorizedApiError;
+exports.isInactiveTokenMessage = isInactiveTokenMessage;
+exports.isStaleBrowserSessionFailure = isStaleBrowserSessionFailure;
+/**
+ * Returns true when an API/SDK error represents HTTP 401 Unauthorized.
+ */
+function isUnauthorizedApiError(error) {
+    if (error === null || error === undefined) {
+        return false;
+    }
+    const candidate = error;
+    if (candidate.status === 401) {
+        return true;
+    }
+    if (candidate.statusCode === 401) {
+        return true;
+    }
+    if (candidate.response?.status === 401) {
+        return true;
+    }
+    if (candidate.response?.statusCode === 401) {
+        return true;
+    }
+    if (candidate.response?.data?.status === 401) {
+        return true;
+    }
+    if (candidate.response?.data?.statusCode === 401) {
+        return true;
+    }
+    const message = candidate.message ?? "";
+    return /401|Unauthorized/i.test(message);
+}
+/**
+ * Keycloak-style inactive access token message (often surfaced as 400).
+ */
+function isInactiveTokenMessage(message) {
+    return typeof message === "string" && /token is not active/i.test(message);
+}
+/**
+ * Session restore failure that should trigger stale-state cleanup before retry.
+ */
+function isStaleBrowserSessionFailure(result) {
+    return (!result.ok &&
+        (result.reason === "invalid" || result.reason === "unauthorized"));
+}
+//# sourceMappingURL=auth-browser-errors.js.map

package/dist/utils/auth-browser-errors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth-browser-errors.js","sourceRoot":"","sources":["../../src/utils/auth-browser-errors.ts"],"names":[],"mappings":";AAAA;;GAEG;;AAKH,wDAuCC;AAKD,wDAIC;AAKD,oEAQC;AAhED;;GAEG;AACH,SAAgB,sBAAsB,CAAC,KAAc;IACnD,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QAC1C,OAAO,KAAK,CAAC;IACf,CAAC;IAED,MAAM,SAAS,GAAG,KAWjB,CAAC;IAEF,IAAI,SAAS,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;QAC7B,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,SAAS,CAAC,UAAU,KAAK,GAAG,EAAE,CAAC;QACjC,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,SAAS,CAAC,QAAQ,EAAE,MAAM,KAAK,GAAG,EAAE,CAAC;QACvC,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,SAAS,CAAC,QAAQ,EAAE,UAAU,KAAK,GAAG,EAAE,CAAC;QAC3C,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,MAAM,KAAK,GAAG,EAAE,CAAC;QAC7C,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,UAAU,KAAK,GAAG,EAAE,CAAC;QACjD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,OAAO,GAAG,SAAS,CAAC,OAAO,IAAI,EAAE,CAAC;IACxC,OAAO,mBAAmB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;AAC3C,CAAC;AAED;;GAEG;AACH,SAAgB,sBAAsB,CACpC,OAAkC;IAElC,OAAO,OAAO,OAAO,KAAK,QAAQ,IAAI,sBAAsB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;AAC7E,CAAC;AAED;;GAEG;AACH,SAAgB,4BAA4B,CAAC,MAG5C;IACC,OAAO,CACL,CAAC,MAAM,CAAC,EAAE;QACV,CAAC,MAAM,CAAC,MAAM,KAAK,SAAS,IAAI,MAAM,CAAC,MAAM,KAAK,cAAc,CAAC,CAClE,CAAC;AACJ,CAAC"}

package/dist/utils/browser-api-base-url.d.ts

@@ -0,0 +1,19 @@
+/**
+ * Resolve browser API base URL (split-port dev / Vite proxy vs direct controller).
+ */
+export type ResolveBrowserApiBaseUrlOptions = {
+    /** Highest priority override (e.g. VITE_MISO_API_BASE_URL). */
+    explicitMisoApiBaseUrl?: string;
+    /** Configured API root (e.g. VITE_API_BASE_URL). */
+    configuredApiBaseUrl?: string;
+    /** Browser page origin; when omitted, uses window.location.origin when available. */
+    pageOrigin?: string;
+    /** Optional path prefix merged onto page origin (e.g. Vite BASE_URL). */
+    basePath?: string;
+};
+/**
+ * When configured API host differs from the page host, use the page origin so
+ * requests go through the app proxy (split-port local dev).
+ */
+export declare function resolveBrowserApiBaseUrl(options?: ResolveBrowserApiBaseUrlOptions): string;
+//# sourceMappingURL=browser-api-base-url.d.ts.map

package/dist/utils/browser-api-base-url.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"browser-api-base-url.d.ts","sourceRoot":"","sources":["../../src/utils/browser-api-base-url.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,MAAM,MAAM,+BAA+B,GAAG;IAC5C,+DAA+D;IAC/D,sBAAsB,CAAC,EAAE,MAAM,CAAC;IAChC,oDAAoD;IACpD,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,qFAAqF;IACrF,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,yEAAyE;IACzE,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB,CAAC;AAsCF;;;GAGG;AACH,wBAAgB,wBAAwB,CACtC,OAAO,GAAE,+BAAoC,GAC5C,MAAM,CAmCR"}

package/dist/utils/browser-api-base-url.js

@@ -0,0 +1,68 @@
+"use strict";
+/**
+ * Resolve browser API base URL (split-port dev / Vite proxy vs direct controller).
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.resolveBrowserApiBaseUrl = resolveBrowserApiBaseUrl;
+function trimTrailingSlashes(value) {
+    return value.replace(/\/+$/, "");
+}
+function normalizeBasePath(basePath) {
+    const raw = (basePath ?? "").trim();
+    if (!raw || raw === "/") {
+        return "";
+    }
+    const withLeading = raw.startsWith("/") ? raw : `/${raw}`;
+    return trimTrailingSlashes(withLeading);
+}
+function mergeOriginWithBasePath(origin, basePath) {
+    const normalizedOrigin = trimTrailingSlashes(origin);
+    const path = normalizeBasePath(basePath);
+    if (!path) {
+        return normalizedOrigin;
+    }
+    return `${normalizedOrigin}${path}`;
+}
+function readDefaultPageOrigin(basePath) {
+    if (typeof globalThis === "undefined") {
+        return "";
+    }
+    const win = globalThis;
+    const origin = win.location?.origin;
+    if (typeof origin !== "string" || !origin.trim()) {
+        return "";
+    }
+    return mergeOriginWithBasePath(origin, basePath);
+}
+/**
+ * When configured API host differs from the page host, use the page origin so
+ * requests go through the app proxy (split-port local dev).
+ */
+function resolveBrowserApiBaseUrl(options = {}) {
+    const explicit = trimTrailingSlashes((options.explicitMisoApiBaseUrl ?? "").trim());
+    if (explicit) {
+        return explicit;
+    }
+    const configured = trimTrailingSlashes((options.configuredApiBaseUrl ?? "").trim());
+    const pageOrigin = options.pageOrigin !== undefined
+        ? trimTrailingSlashes(options.pageOrigin)
+        : readDefaultPageOrigin(options.basePath);
+    if (!configured) {
+        return pageOrigin;
+    }
+    if (!pageOrigin) {
+        return configured;
+    }
+    try {
+        const configuredHost = new URL(configured).host;
+        const pageHost = new URL(pageOrigin).host;
+        if (configuredHost !== pageHost) {
+            return pageOrigin;
+        }
+    }
+    catch {
+        return configured;
+    }
+    return configured;
+}
+//# sourceMappingURL=browser-api-base-url.js.map

package/dist/utils/browser-api-base-url.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"browser-api-base-url.js","sourceRoot":"","sources":["../../src/utils/browser-api-base-url.ts"],"names":[],"mappings":";AAAA;;GAEG;;AAqDH,4DAqCC;AA7ED,SAAS,mBAAmB,CAAC,KAAa;IACxC,OAAO,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;AACnC,CAAC;AAED,SAAS,iBAAiB,CAAC,QAA4B;IACrD,MAAM,GAAG,GAAG,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IACpC,IAAI,CAAC,GAAG,IAAI,GAAG,KAAK,GAAG,EAAE,CAAC;QACxB,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,MAAM,WAAW,GAAG,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,GAAG,EAAE,CAAC;IAC1D,OAAO,mBAAmB,CAAC,WAAW,CAAC,CAAC;AAC1C,CAAC;AAED,SAAS,uBAAuB,CAAC,MAAc,EAAE,QAAiB;IAChE,MAAM,gBAAgB,GAAG,mBAAmB,CAAC,MAAM,CAAC,CAAC;IACrD,MAAM,IAAI,GAAG,iBAAiB,CAAC,QAAQ,CAAC,CAAC;IACzC,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,OAAO,gBAAgB,CAAC;IAC1B,CAAC;IACD,OAAO,GAAG,gBAAgB,GAAG,IAAI,EAAE,CAAC;AACtC,CAAC;AAED,SAAS,qBAAqB,CAAC,QAAiB;IAC9C,IAAI,OAAO,UAAU,KAAK,WAAW,EAAE,CAAC;QACtC,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,MAAM,GAAG,GAAG,UAEX,CAAC;IACF,MAAM,MAAM,GAAG,GAAG,CAAC,QAAQ,EAAE,MAAM,CAAC;IACpC,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC;QACjD,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,OAAO,uBAAuB,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;AACnD,CAAC;AAED;;;GAGG;AACH,SAAgB,wBAAwB,CACtC,UAA2C,EAAE;IAE7C,MAAM,QAAQ,GAAG,mBAAmB,CAClC,CAAC,OAAO,CAAC,sBAAsB,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAC9C,CAAC;IACF,IAAI,QAAQ,EAAE,CAAC;QACb,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,MAAM,UAAU,GAAG,mBAAmB,CACpC,CAAC,OAAO,CAAC,oBAAoB,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAC5C,CAAC;IACF,MAAM,UAAU,GACd,OAAO,CAAC,UAAU,KAAK,SAAS;QAC9B,CAAC,CAAC,mBAAmB,CAAC,OAAO,CAAC,UAAU,CAAC;QACzC,CAAC,CAAC,qBAAqB,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IAE9C,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,OAAO,UAAU,CAAC;IACpB,CAAC;IAED,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,OAAO,UAAU,CAAC;IACpB,CAAC;IAED,IAAI,CAAC;QACH,MAAM,cAAc,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC;QAChD,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC;QAC1C,IAAI,cAAc,KAAK,QAAQ,EAAE,CAAC;YAChC,OAAO,UAAU,CAAC;QACpB,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,UAAU,CAAC;IACpB,CAAC;IAED,OAAO,UAAU,CAAC;AACpB,CAAC"}

package/dist/utils/browser-session-recovery.d.ts

@@ -0,0 +1,26 @@
+/**
+ * Orchestrated browser session recovery (refresh → restore → stale cleanup → retry).
+ */
+import type { UserSessionTokenResult } from "../types/data-client.types";
+import type { BrowserSessionClient, SessionRestoreResult, SessionRestoreSuccess } from "../types/browser-session.types";
+export type RecoverBrowserSessionOptions = {
+    client: BrowserSessionClient;
+    clearStaleState?: () => void | Promise<void>;
+};
+export declare function resolveSessionExpiresInSeconds(result: SessionRestoreSuccess): number;
+/**
+ * Cookie-first silent recovery policy shared by dataplane and DataClient hooks.
+ */
+export declare function recoverBrowserSessionWithStaleCleanup(options: RecoverBrowserSessionOptions): Promise<SessionRestoreResult>;
+/**
+ * Same as {@link recoverBrowserSessionWithStaleCleanup} mapped to DataClient token shape.
+ */
+export declare function recoverBrowserSessionToUserToken(options: RecoverBrowserSessionOptions): Promise<UserSessionTokenResult | null>;
+/**
+ * Silent recovery for request retry (throws when recovery fails).
+ */
+export declare function recoverBrowserSessionOrThrow(options: RecoverBrowserSessionOptions): Promise<{
+    token: string;
+    expiresIn: number;
+}>;
+//# sourceMappingURL=browser-session-recovery.d.ts.map

package/dist/utils/browser-session-recovery.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"browser-session-recovery.d.ts","sourceRoot":"","sources":["../../src/utils/browser-session-recovery.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,4BAA4B,CAAC;AACzE,OAAO,KAAK,EACV,oBAAoB,EACpB,oBAAoB,EACpB,qBAAqB,EACtB,MAAM,gCAAgC,CAAC;AAIxC,MAAM,MAAM,4BAA4B,GAAG;IACzC,MAAM,EAAE,oBAAoB,CAAC;IAC7B,eAAe,CAAC,EAAE,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAC9C,CAAC;AAEF,wBAAgB,8BAA8B,CAC5C,MAAM,EAAE,qBAAqB,GAC5B,MAAM,CAcR;AAED;;GAEG;AACH,wBAAsB,qCAAqC,CACzD,OAAO,EAAE,4BAA4B,GACpC,OAAO,CAAC,oBAAoB,CAAC,CAe/B;AAED;;GAEG;AACH,wBAAsB,gCAAgC,CACpD,OAAO,EAAE,4BAA4B,GACpC,OAAO,CAAC,sBAAsB,GAAG,IAAI,CAAC,CAMxC;AAED;;GAEG;AACH,wBAAsB,4BAA4B,CAChD,OAAO,EAAE,4BAA4B,GACpC,OAAO,CAAC;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,CAAC,CAS/C"}

package/dist/utils/browser-session-recovery.js

@@ -0,0 +1,59 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.resolveSessionExpiresInSeconds = resolveSessionExpiresInSeconds;
+exports.recoverBrowserSessionWithStaleCleanup = recoverBrowserSessionWithStaleCleanup;
+exports.recoverBrowserSessionToUserToken = recoverBrowserSessionToUserToken;
+exports.recoverBrowserSessionOrThrow = recoverBrowserSessionOrThrow;
+const auth_browser_errors_1 = require("./auth-browser-errors");
+const browser_session_1 = require("./browser-session");
+function resolveSessionExpiresInSeconds(result) {
+    if (typeof result.expiresIn === "number" &&
+        Number.isFinite(result.expiresIn)) {
+        return result.expiresIn;
+    }
+    if (result.expiresAt) {
+        return Math.max(Math.floor((new Date(result.expiresAt).getTime() - Date.now()) / 1000), 0);
+    }
+    return 0;
+}
+/**
+ * Cookie-first silent recovery policy shared by dataplane and DataClient hooks.
+ */
+async function recoverBrowserSessionWithStaleCleanup(options) {
+    let result = await options.client.refresh();
+    if (!result.ok) {
+        result = await options.client.restore();
+    }
+    if ((0, auth_browser_errors_1.isStaleBrowserSessionFailure)(result) && options.clearStaleState) {
+        await options.clearStaleState();
+        result = await options.client.refresh();
+        if (!result.ok) {
+            result = await options.client.restore();
+        }
+    }
+    return result;
+}
+/**
+ * Same as {@link recoverBrowserSessionWithStaleCleanup} mapped to DataClient token shape.
+ */
+async function recoverBrowserSessionToUserToken(options) {
+    const result = await recoverBrowserSessionWithStaleCleanup(options);
+    if (!result.ok) {
+        return null;
+    }
+    return (0, browser_session_1.sessionRestoreToUserToken)(result);
+}
+/**
+ * Silent recovery for request retry (throws when recovery fails).
+ */
+async function recoverBrowserSessionOrThrow(options) {
+    const result = await recoverBrowserSessionWithStaleCleanup(options);
+    if (!result.ok) {
+        throw new Error("Silent browser re-auth failed");
+    }
+    return {
+        token: result.accessToken,
+        expiresIn: resolveSessionExpiresInSeconds(result),
+    };
+}
+//# sourceMappingURL=browser-session-recovery.js.map

package/dist/utils/browser-session-recovery.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"browser-session-recovery.js","sourceRoot":"","sources":["../../src/utils/browser-session-recovery.ts"],"names":[],"mappings":";;AAiBA,wEAgBC;AAKD,sFAiBC;AAKD,4EAQC;AAKD,oEAWC;AA3ED,+DAAqE;AACrE,uDAA8D;AAO9D,SAAgB,8BAA8B,CAC5C,MAA6B;IAE7B,IACE,OAAO,MAAM,CAAC,SAAS,KAAK,QAAQ;QACpC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC,EACjC,CAAC;QACD,OAAO,MAAM,CAAC,SAAS,CAAC;IAC1B,CAAC;IACD,IAAI,MAAM,CAAC,SAAS,EAAE,CAAC;QACrB,OAAO,IAAI,CAAC,GAAG,CACb,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,GAAG,IAAI,CAAC,EACtE,CAAC,CACF,CAAC;IACJ,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC;AAED;;GAEG;AACI,KAAK,UAAU,qCAAqC,CACzD,OAAqC;IAErC,IAAI,MAAM,GAAG,MAAM,OAAO,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;IAC5C,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;QACf,MAAM,GAAG,MAAM,OAAO,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;IAC1C,CAAC;IAED,IAAI,IAAA,kDAA4B,EAAC,MAAM,CAAC,IAAI,OAAO,CAAC,eAAe,EAAE,CAAC;QACpE,MAAM,OAAO,CAAC,eAAe,EAAE,CAAC;QAChC,MAAM,GAAG,MAAM,OAAO,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACxC,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;YACf,MAAM,GAAG,MAAM,OAAO,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QAC1C,CAAC;IACH,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;GAEG;AACI,KAAK,UAAU,gCAAgC,CACpD,OAAqC;IAErC,MAAM,MAAM,GAAG,MAAM,qCAAqC,CAAC,OAAO,CAAC,CAAC;IACpE,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;QACf,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,IAAA,2CAAyB,EAAC,MAAM,CAAC,CAAC;AAC3C,CAAC;AAED;;GAEG;AACI,KAAK,UAAU,4BAA4B,CAChD,OAAqC;IAErC,MAAM,MAAM,GAAG,MAAM,qCAAqC,CAAC,OAAO,CAAC,CAAC;IACpE,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;QACf,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;IACnD,CAAC;IACD,OAAO;QACL,KAAK,EAAE,MAAM,CAAC,WAAW;QACzB,SAAS,EAAE,8BAA8B,CAAC,MAAM,CAAC;KAClD,CAAC;AACJ,CAAC"}

package/dist/utils/browser-session.d.ts

@@ -0,0 +1,29 @@
+/**
+ * Cookie-first browser session restore/refresh against miso-controller.
+ */
+import type { UserSessionTokenResult } from "../types/data-client.types";
+import { type BrowserSessionClient, type BrowserSessionClientOptions, type SessionRestoreSuccess } from "../types/browser-session.types";
+/**
+ * Create a browser session client (GET session / POST refresh with credentials).
+ */
+export declare function createBrowserSessionClient(options: BrowserSessionClientOptions): BrowserSessionClient;
+export declare function sessionRestoreToUserToken(result: SessionRestoreSuccess): UserSessionTokenResult;
+export type CookieSessionCallbacksOptions = BrowserSessionClientOptions & {
+    /** Optional hook after a successful restore/refresh (e.g. app in-memory token store). */
+    onAccessToken?: (result: SessionRestoreSuccess) => void | Promise<void>;
+};
+/**
+ * DataClient hooks for cookie-first controller auth.
+ */
+export declare function createCookieSessionCallbacks(options: CookieSessionCallbacksOptions): {
+    onSessionRestore: () => Promise<UserSessionTokenResult | null>;
+    onTokenRefresh: () => Promise<UserSessionTokenResult | null>;
+};
+export type EnsureBrowserAccessTokenOptions = CookieSessionCallbacksOptions & {
+    getAccessToken: () => string | null;
+};
+/**
+ * Hydrate access token from cookie when memory is empty (e.g. after full page load).
+ */
+export declare function ensureBrowserAccessToken(options: EnsureBrowserAccessTokenOptions): Promise<string | null>;
+//# sourceMappingURL=browser-session.d.ts.map

package/dist/utils/browser-session.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"browser-session.d.ts","sourceRoot":"","sources":["../../src/utils/browser-session.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,4BAA4B,CAAC;AACzE,OAAO,EAEL,KAAK,oBAAoB,EACzB,KAAK,2BAA2B,EAEhC,KAAK,qBAAqB,EAC3B,MAAM,gCAAgC,CAAC;AA+QxC;;GAEG;AACH,wBAAgB,0BAA0B,CACxC,OAAO,EAAE,2BAA2B,GACnC,oBAAoB,CAsBtB;AAED,wBAAgB,yBAAyB,CACvC,MAAM,EAAE,qBAAqB,GAC5B,sBAAsB,CAMxB;AAED,MAAM,MAAM,6BAA6B,GAAG,2BAA2B,GAAG;IACxE,yFAAyF;IACzF,aAAa,CAAC,EAAE,CAAC,MAAM,EAAE,qBAAqB,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACzE,CAAC;AAEF;;GAEG;AACH,wBAAgB,4BAA4B,CAC1C,OAAO,EAAE,6BAA6B,GACrC;IACD,gBAAgB,EAAE,MAAM,OAAO,CAAC,sBAAsB,GAAG,IAAI,CAAC,CAAC;IAC/D,cAAc,EAAE,MAAM,OAAO,CAAC,sBAAsB,GAAG,IAAI,CAAC,CAAC;CAC9D,CAqBA;AAED,MAAM,MAAM,+BAA+B,GAAG,6BAA6B,GAAG;IAC5E,cAAc,EAAE,MAAM,MAAM,GAAG,IAAI,CAAC;CACrC,CAAC;AAEF;;GAEG;AACH,wBAAsB,wBAAwB,CAC5C,OAAO,EAAE,+BAA+B,GACvC,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAkBxB"}

package/dist/utils/browser-session.js

@@ -0,0 +1,262 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.createBrowserSessionClient = createBrowserSessionClient;
+exports.sessionRestoreToUserToken = sessionRestoreToUserToken;
+exports.createCookieSessionCallbacks = createCookieSessionCallbacks;
+exports.ensureBrowserAccessToken = ensureBrowserAccessToken;
+const browser_session_types_1 = require("../types/browser-session.types");
+const DEFAULT_RETRY_DELAYS_MS = [250, 500, 1000];
+const DEFAULT_TIMEOUT_MS = 10000;
+let restoreSessionInFlight = null;
+let refreshSessionInFlight = null;
+function normalizeExpiresAt(raw) {
+    if (typeof raw === "number" && Number.isFinite(raw)) {
+        return raw > 10000000000 ? raw : raw * 1000;
+    }
+    if (typeof raw === "string") {
+        const trimmed = raw.trim();
+        if (!trimmed)
+            return null;
+        if (/^\d+$/.test(trimmed)) {
+            return normalizeExpiresAt(Number(trimmed));
+        }
+        const parsed = Date.parse(trimmed);
+        return Number.isNaN(parsed) ? null : parsed;
+    }
+    return null;
+}
+function getNestedRecord(value) {
+    return value && typeof value === "object" && !Array.isArray(value)
+        ? value
+        : null;
+}
+function getSessionPayload(raw) {
+    const record = getNestedRecord(raw) ?? {};
+    return getNestedRecord(record.data) ?? record;
+}
+function getSessionToken(payload) {
+    const token = payload.token ?? payload.accessToken ?? payload.authToken;
+    return typeof token === "string" && token ? token : null;
+}
+function resolveTokenExpiresAt(payload, preferredExpiresAt) {
+    return (normalizeExpiresAt(preferredExpiresAt) ??
+        normalizeExpiresAt(payload.expiresAt) ??
+        (typeof payload.expiresIn === "number" && Number.isFinite(payload.expiresIn)
+            ? Date.now() + payload.expiresIn * 1000
+            : typeof payload.expiresIn === "string" && payload.expiresIn.trim()
+                ? Date.now() + Number(payload.expiresIn) * 1000
+                : null));
+}
+function buildStatusError(message, status) {
+    const error = new Error(message);
+    error.status = status;
+    return error;
+}
+function getSessionErrorMessage(payload, status) {
+    for (const key of ["detail", "message", "title", "error"]) {
+        const value = payload[key];
+        if (typeof value === "string" && value.trim()) {
+            return value.trim();
+        }
+    }
+    return `Browser auth request failed: ${status}`;
+}
+async function readJsonResponse(response) {
+    try {
+        const text = await response.text();
+        if (!text)
+            return {};
+        const parsed = JSON.parse(text);
+        return getNestedRecord(parsed) ?? {};
+    }
+    catch {
+        return {};
+    }
+}
+function normalizeSessionFailure(error, fallbackMessage) {
+    if (error?.name === "AbortError") {
+        return {
+            ok: false,
+            reason: "network",
+            message: "Browser auth request timed out",
+        };
+    }
+    const status = error?.status;
+    const message = error instanceof Error ? error.message : fallbackMessage;
+    if (status === 401 ||
+        (status === 400 && /token is not active/i.test(message))) {
+        return { ok: false, status, reason: "unauthorized", message };
+    }
+    if (status === undefined) {
+        return { ok: false, reason: "network", message };
+    }
+    if (status === 429 || status >= 500) {
+        return { ok: false, status, reason: "server", message };
+    }
+    return { ok: false, status, reason: "invalid", message };
+}
+function isTransientSessionFailure(result) {
+    return (!result.ok &&
+        (result.reason === "network" ||
+            (result.reason === "server" && result.status !== 429)));
+}
+function formatExpiresAtIso(expiresAt) {
+    return expiresAt !== null ? new Date(expiresAt).toISOString() : undefined;
+}
+function sleep(ms) {
+    return new Promise((resolve) => setTimeout(resolve, ms));
+}
+function resolveSessionEndpoint(options, path) {
+    const baseUrl = options.getBaseUrl().replace(/\/+$/, "");
+    return baseUrl ? `${baseUrl}${path}` : path;
+}
+function buildSessionFetchInit(method) {
+    return {
+        method,
+        credentials: "include",
+    };
+}
+async function fetchWithTimeout(endpoint, init, timeoutMs) {
+    const controller = new AbortController();
+    const timeoutId = globalThis.setTimeout(() => controller.abort(), timeoutMs);
+    try {
+        return await fetch(endpoint, { ...init, signal: controller.signal });
+    }
+    finally {
+        globalThis.clearTimeout(timeoutId);
+    }
+}
+function parseExpiresIn(payload) {
+    if (typeof payload.expiresIn === "number" &&
+        Number.isFinite(payload.expiresIn)) {
+        return payload.expiresIn;
+    }
+    if (typeof payload.expiresIn === "string" && payload.expiresIn.trim()) {
+        return Number(payload.expiresIn);
+    }
+    return undefined;
+}
+function parseSessionSuccessPayload(payload) {
+    const accessToken = getSessionToken(payload);
+    if (!accessToken) {
+        return {
+            ok: false,
+            reason: "invalid",
+            message: "Browser auth response did not include an access token",
+        };
+    }
+    const expiresAt = resolveTokenExpiresAt(payload, payload.expiresAt);
+    return {
+        ok: true,
+        accessToken,
+        expiresAt: formatExpiresAtIso(expiresAt),
+        expiresIn: parseExpiresIn(payload),
+        user: getNestedRecord(payload.user) ?? undefined,
+    };
+}
+async function executeBrowserSessionAttempt(endpoint, method, timeoutMs) {
+    const response = await fetchWithTimeout(endpoint, buildSessionFetchInit(method), timeoutMs);
+    if (!response.ok) {
+        const errorPayload = await readJsonResponse(response);
+        throw buildStatusError(getSessionErrorMessage(errorPayload, response.status), response.status);
+    }
+    const payload = getSessionPayload(await readJsonResponse(response));
+    return parseSessionSuccessPayload(payload);
+}
+async function performBrowserSessionRequest(options, path, method) {
+    const endpoint = resolveSessionEndpoint(options, path);
+    const retryDelays = options.retryDelaysMs ?? DEFAULT_RETRY_DELAYS_MS;
+    const timeoutMs = options.timeoutMs ?? DEFAULT_TIMEOUT_MS;
+    for (let attempt = 0; attempt <= retryDelays.length; attempt += 1) {
+        try {
+            return await executeBrowserSessionAttempt(endpoint, method, timeoutMs);
+        }
+        catch (error) {
+            const failure = normalizeSessionFailure(error, "Browser auth request failed");
+            if (attempt === retryDelays.length ||
+                !isTransientSessionFailure(failure)) {
+                return failure;
+            }
+            await sleep(retryDelays[attempt]);
+        }
+    }
+    return {
+        ok: false,
+        reason: "server",
+        message: "Browser auth request failed",
+    };
+}
+function dedupeSessionRequest(currentPromise, setPromise, requestFactory) {
+    if (currentPromise) {
+        return currentPromise;
+    }
+    const nextPromise = requestFactory().finally(() => {
+        setPromise(null);
+    });
+    setPromise(nextPromise);
+    return nextPromise;
+}
+/**
+ * Create a browser session client (GET session / POST refresh with credentials).
+ */
+function createBrowserSessionClient(options) {
+    const sessionPath = options.sessionPath ?? browser_session_types_1.AUTH_BROWSER_SESSION_PATHS.SESSION;
+    const refreshPath = options.refreshPath ?? browser_session_types_1.AUTH_BROWSER_SESSION_PATHS.REFRESH;
+    return {
+        restore: () => dedupeSessionRequest(restoreSessionInFlight, (value) => {
+            restoreSessionInFlight = value;
+        }, () => performBrowserSessionRequest(options, sessionPath, "GET")),
+        refresh: () => dedupeSessionRequest(refreshSessionInFlight, (value) => {
+            refreshSessionInFlight = value;
+        }, () => performBrowserSessionRequest(options, refreshPath, "POST")),
+    };
+}
+function sessionRestoreToUserToken(result) {
+    return {
+        token: result.accessToken,
+        expiresIn: result.expiresIn,
+        expiresAt: result.expiresAt,
+    };
+}
+/**
+ * DataClient hooks for cookie-first controller auth.
+ */
+function createCookieSessionCallbacks(options) {
+    const client = createBrowserSessionClient(options);
+    const mapResult = async (operation) => {
+        const result = operation === "restore" ? await client.restore() : await client.refresh();
+        if (!result.ok) {
+            return null;
+        }
+        if (options.onAccessToken) {
+            await options.onAccessToken(result);
+        }
+        return sessionRestoreToUserToken(result);
+    };
+    return {
+        onSessionRestore: () => mapResult("restore"),
+        onTokenRefresh: () => mapResult("refresh"),
+    };
+}
+/**
+ * Hydrate access token from cookie when memory is empty (e.g. after full page load).
+ */
+async function ensureBrowserAccessToken(options) {
+    const existing = options.getAccessToken();
+    if (existing) {
+        return existing;
+    }
+    const client = createBrowserSessionClient(options);
+    let result = await client.restore();
+    if (!result.ok) {
+        result = await client.refresh();
+    }
+    if (!result.ok) {
+        return null;
+    }
+    if (options.onAccessToken) {
+        await options.onAccessToken(result);
+    }
+    return result.accessToken;
+}
+//# sourceMappingURL=browser-session.js.map

package/dist/utils/browser-session.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"browser-session.js","sourceRoot":"","sources":["../../src/utils/browser-session.ts"],"names":[],"mappings":";;AA4RA,gEAwBC;AAED,8DAQC;AAUD,oEA0BC;AASD,4DAoBC;AA3XD,0EAMwC;AAIxC,MAAM,uBAAuB,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;AACjD,MAAM,kBAAkB,GAAG,KAAM,CAAC;AAElC,IAAI,sBAAsB,GAAyC,IAAI,CAAC;AACxE,IAAI,sBAAsB,GAAyC,IAAI,CAAC;AAExE,SAAS,kBAAkB,CAAC,GAAY;IACtC,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QACpD,OAAO,GAAG,GAAG,WAAc,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,GAAG,IAAI,CAAC;IACjD,CAAC;IACD,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;QAC5B,MAAM,OAAO,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;QAC3B,IAAI,CAAC,OAAO;YAAE,OAAO,IAAI,CAAC;QAC1B,IAAI,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YAC1B,OAAO,kBAAkB,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC;QAC7C,CAAC;QACD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACnC,OAAO,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC;IAC9C,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,eAAe,CAAC,KAAc;IACrC,OAAO,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAChE,CAAC,CAAE,KAAoB;QACvB,CAAC,CAAC,IAAI,CAAC;AACX,CAAC;AAED,SAAS,iBAAiB,CAAC,GAAY;IACrC,MAAM,MAAM,GAAG,eAAe,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;IAC1C,OAAO,eAAe,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,MAAM,CAAC;AAChD,CAAC;AAED,SAAS,eAAe,CAAC,OAAmB;IAC1C,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,OAAO,CAAC,WAAW,IAAI,OAAO,CAAC,SAAS,CAAC;IACxE,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;AAC3D,CAAC;AAED,SAAS,qBAAqB,CAC5B,OAAmB,EACnB,kBAA4B;IAE5B,OAAO,CACL,kBAAkB,CAAC,kBAAkB,CAAC;QACtC,kBAAkB,CAAC,OAAO,CAAC,SAAS,CAAC;QACrC,CAAC,OAAO,OAAO,CAAC,SAAS,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,SAAS,CAAC;YAC1E,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC,SAAS,GAAG,IAAI;YACvC,CAAC,CAAC,OAAO,OAAO,CAAC,SAAS,KAAK,QAAQ,IAAI,OAAO,CAAC,SAAS,CAAC,IAAI,EAAE;gBACjE,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,GAAG,IAAI;gBAC/C,CAAC,CAAC,IAAI,CAAC,CACZ,CAAC;AACJ,CAAC;AAED,SAAS,gBAAgB,CACvB,OAAe,EACf,MAAc;IAEd,MAAM,KAAK,GAAG,IAAI,KAAK,CAAC,OAAO,CAA+B,CAAC;IAC/D,KAAK,CAAC,MAAM,GAAG,MAAM,CAAC;IACtB,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,sBAAsB,CAAC,OAAmB,EAAE,MAAc;IACjE,KAAK,MAAM,GAAG,IAAI,CAAC,QAAQ,EAAE,SAAS,EAAE,OAAO,EAAE,OAAO,CAAU,EAAE,CAAC;QACnE,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;QAC3B,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,EAAE,CAAC;YAC9C,OAAO,KAAK,CAAC,IAAI,EAAE,CAAC;QACtB,CAAC;IACH,CAAC;IACD,OAAO,gCAAgC,MAAM,EAAE,CAAC;AAClD,CAAC;AAED,KAAK,UAAU,gBAAgB,CAAC,QAAkB;IAChD,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;QACnC,IAAI,CAAC,IAAI;YAAE,OAAO,EAAE,CAAC;QACrB,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAY,CAAC;QAC3C,OAAO,eAAe,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;IACvC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,SAAS,uBAAuB,CAC9B,KAAc,EACd,eAAuB;IAEvB,IAAK,KAAkC,EAAE,IAAI,KAAK,YAAY,EAAE,CAAC;QAC/D,OAAO;YACL,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,SAAS;YACjB,OAAO,EAAE,gCAAgC;SAC1C,CAAC;IACJ,CAAC;IAED,MAAM,MAAM,GAAI,KAAoC,EAAE,MAAM,CAAC;IAC7D,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,CAAC;IAEzE,IACE,MAAM,KAAK,GAAG;QACd,CAAC,MAAM,KAAK,GAAG,IAAI,sBAAsB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,EACxD,CAAC;QACD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,cAAc,EAAE,OAAO,EAAE,CAAC;IAChE,CAAC;IAED,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QACzB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC;IACnD,CAAC;IAED,IAAI,MAAM,KAAK,GAAG,IAAI,MAAM,IAAI,GAAG,EAAE,CAAC;QACpC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC;IAC1D,CAAC;IAED,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC;AAC3D,CAAC;AAED,SAAS,yBAAyB,CAAC,MAA4B;IAC7D,OAAO,CACL,CAAC,MAAM,CAAC,EAAE;QACV,CAAC,MAAM,CAAC,MAAM,KAAK,SAAS;YAC1B,CAAC,MAAM,CAAC,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,MAAM,KAAK,GAAG,CAAC,CAAC,CACzD,CAAC;AACJ,CAAC;AAED,SAAS,kBAAkB,CAAC,SAAwB;IAClD,OAAO,SAAS,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,SAAS,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;AAC5E,CAAC;AAED,SAAS,KAAK,CAAC,EAAU;IACvB,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC;AAC3D,CAAC;AAED,SAAS,sBAAsB,CAC7B,OAAoC,EACpC,IAAY;IAEZ,MAAM,OAAO,GAAG,OAAO,CAAC,UAAU,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IACzD,OAAO,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,GAAG,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;AAC9C,CAAC;AAED,SAAS,qBAAqB,CAAC,MAAsB;IACnD,OAAO;QACL,MAAM;QACN,WAAW,EAAE,SAAS;KACvB,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,gBAAgB,CAC7B,QAAgB,EAChB,IAAiB,EACjB,SAAiB;IAEjB,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;IACzC,MAAM,SAAS,GAAG,UAAU,CAAC,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,SAAS,CAAC,CAAC;IAC7E,IAAI,CAAC;QACH,OAAO,MAAM,KAAK,CAAC,QAAQ,EAAE,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,UAAU,CAAC,MAAM,EAAE,CAAC,CAAC;IACvE,CAAC;YAAS,CAAC;QACT,UAAU,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC;IACrC,CAAC;AACH,CAAC;AAED,SAAS,cAAc,CAAC,OAAmB;IACzC,IACE,OAAO,OAAO,CAAC,SAAS,KAAK,QAAQ;QACrC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,SAAS,CAAC,EAClC,CAAC;QACD,OAAO,OAAO,CAAC,SAAS,CAAC;IAC3B,CAAC;IACD,IAAI,OAAO,OAAO,CAAC,SAAS,KAAK,QAAQ,IAAI,OAAO,CAAC,SAAS,CAAC,IAAI,EAAE,EAAE,CAAC;QACtE,OAAO,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IACnC,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,0BAA0B,CAAC,OAAmB;IACrD,MAAM,WAAW,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC;IAC7C,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,OAAO;YACL,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,SAAS;YACjB,OAAO,EAAE,uDAAuD;SACjE,CAAC;IACJ,CAAC;IAED,MAAM,SAAS,GAAG,qBAAqB,CAAC,OAAO,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC;IACpE,OAAO;QACL,EAAE,EAAE,IAAI;QACR,WAAW;QACX,SAAS,EAAE,kBAAkB,CAAC,SAAS,CAAC;QACxC,SAAS,EAAE,cAAc,CAAC,OAAO,CAAC;QAClC,IAAI,EAAE,eAAe,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,SAAS;KACjD,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,4BAA4B,CACzC,QAAgB,EAChB,MAAsB,EACtB,SAAiB;IAEjB,MAAM,QAAQ,GAAG,MAAM,gBAAgB,CACrC,QAAQ,EACR,qBAAqB,CAAC,MAAM,CAAC,EAC7B,SAAS,CACV,CAAC;IAEF,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,MAAM,YAAY,GAAG,MAAM,gBAAgB,CAAC,QAAQ,CAAC,CAAC;QACtD,MAAM,gBAAgB,CACpB,sBAAsB,CAAC,YAAY,EAAE,QAAQ,CAAC,MAAM,CAAC,EACrD,QAAQ,CAAC,MAAM,CAChB,CAAC;IACJ,CAAC;IAED,MAAM,OAAO,GAAG,iBAAiB,CAAC,MAAM,gBAAgB,CAAC,QAAQ,CAAC,CAAC,CAAC;IACpE,OAAO,0BAA0B,CAAC,OAAO,CAAC,CAAC;AAC7C,CAAC;AAED,KAAK,UAAU,4BAA4B,CACzC,OAAoC,EACpC,IAAY,EACZ,MAAsB;IAEtB,MAAM,QAAQ,GAAG,sBAAsB,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IACvD,MAAM,WAAW,GAAG,OAAO,CAAC,aAAa,IAAI,uBAAuB,CAAC;IACrE,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,kBAAkB,CAAC;IAE1D,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,IAAI,WAAW,CAAC,MAAM,EAAE,OAAO,IAAI,CAAC,EAAE,CAAC;QAClE,IAAI,CAAC;YACH,OAAO,MAAM,4BAA4B,CAAC,QAAQ,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC;QACzE,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,OAAO,GAAG,uBAAuB,CACrC,KAAK,EACL,6BAA6B,CAC9B,CAAC;YACF,IACE,OAAO,KAAK,WAAW,CAAC,MAAM;gBAC9B,CAAC,yBAAyB,CAAC,OAAO,CAAC,EACnC,CAAC;gBACD,OAAO,OAAO,CAAC;YACjB,CAAC;YACD,MAAM,KAAK,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC;QACpC,CAAC;IACH,CAAC;IAED,OAAO;QACL,EAAE,EAAE,KAAK;QACT,MAAM,EAAE,QAAQ;QAChB,OAAO,EAAE,6BAA6B;KACvC,CAAC;AACJ,CAAC;AAED,SAAS,oBAAoB,CAC3B,cAAoD,EACpD,UAAiE,EACjE,cAAmD;IAEnD,IAAI,cAAc,EAAE,CAAC;QACnB,OAAO,cAAc,CAAC;IACxB,CAAC;IAED,MAAM,WAAW,GAAG,cAAc,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE;QAChD,UAAU,CAAC,IAAI,CAAC,CAAC;IACnB,CAAC,CAAC,CAAC;IACH,UAAU,CAAC,WAAW,CAAC,CAAC;IACxB,OAAO,WAAW,CAAC;AACrB,CAAC;AAED;;GAEG;AACH,SAAgB,0BAA0B,CACxC,OAAoC;IAEpC,MAAM,WAAW,GAAG,OAAO,CAAC,WAAW,IAAI,kDAA0B,CAAC,OAAO,CAAC;IAC9E,MAAM,WAAW,GAAG,OAAO,CAAC,WAAW,IAAI,kDAA0B,CAAC,OAAO,CAAC;IAE9E,OAAO;QACL,OAAO,EAAE,GAAG,EAAE,CACZ,oBAAoB,CAClB,sBAAsB,EACtB,CAAC,KAAK,EAAE,EAAE;YACR,sBAAsB,GAAG,KAAK,CAAC;QACjC,CAAC,EACD,GAAG,EAAE,CAAC,4BAA4B,CAAC,OAAO,EAAE,WAAW,EAAE,KAAK,CAAC,CAChE;QACH,OAAO,EAAE,GAAG,EAAE,CACZ,oBAAoB,CAClB,sBAAsB,EACtB,CAAC,KAAK,EAAE,EAAE;YACR,sBAAsB,GAAG,KAAK,CAAC;QACjC,CAAC,EACD,GAAG,EAAE,CAAC,4BAA4B,CAAC,OAAO,EAAE,WAAW,EAAE,MAAM,CAAC,CACjE;KACJ,CAAC;AACJ,CAAC;AAED,SAAgB,yBAAyB,CACvC,MAA6B;IAE7B,OAAO;QACL,KAAK,EAAE,MAAM,CAAC,WAAW;QACzB,SAAS,EAAE,MAAM,CAAC,SAAS;QAC3B,SAAS,EAAE,MAAM,CAAC,SAAS;KAC5B,CAAC;AACJ,CAAC;AAOD;;GAEG;AACH,SAAgB,4BAA4B,CAC1C,OAAsC;IAKtC,MAAM,MAAM,GAAG,0BAA0B,CAAC,OAAO,CAAC,CAAC;IAEnD,MAAM,SAAS,GAAG,KAAK,EACrB,SAAgC,EACQ,EAAE;QAC1C,MAAM,MAAM,GACV,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,MAAM,MAAM,CAAC,OAAO,EAAE,CAAC;QAC5E,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;YACf,OAAO,IAAI,CAAC;QACd,CAAC;QACD,IAAI,OAAO,CAAC,aAAa,EAAE,CAAC;YAC1B,MAAM,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC;QACtC,CAAC;QACD,OAAO,yBAAyB,CAAC,MAAM,CAAC,CAAC;IAC3C,CAAC,CAAC;IAEF,OAAO;QACL,gBAAgB,EAAE,GAAG,EAAE,CAAC,SAAS,CAAC,SAAS,CAAC;QAC5C,cAAc,EAAE,GAAG,EAAE,CAAC,SAAS,CAAC,SAAS,CAAC;KAC3C,CAAC;AACJ,CAAC;AAMD;;GAEG;AACI,KAAK,UAAU,wBAAwB,CAC5C,OAAwC;IAExC,MAAM,QAAQ,GAAG,OAAO,CAAC,cAAc,EAAE,CAAC;IAC1C,IAAI,QAAQ,EAAE,CAAC;QACb,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,MAAM,MAAM,GAAG,0BAA0B,CAAC,OAAO,CAAC,CAAC;IACnD,IAAI,MAAM,GAAG,MAAM,MAAM,CAAC,OAAO,EAAE,CAAC;IACpC,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;QACf,MAAM,GAAG,MAAM,MAAM,CAAC,OAAO,EAAE,CAAC;IAClC,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;QACf,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,OAAO,CAAC,aAAa,EAAE,CAAC;QAC1B,MAAM,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC;IACtC,CAAC;IACD,OAAO,MAAM,CAAC,WAAW,CAAC;AAC5B,CAAC"}

package/dist/utils/client-token-url.d.ts

@@ -0,0 +1,25 @@
+/**
+ * Extract/remove x-client-token from browser URL query or hash.
+ */
+export type ClientTokenUrlSource = {
+    href: string;
+    search: string;
+    hash: string;
+};
+export type ExtractClientTokenFromUrlOptions = {
+    /** When omitted, uses window.location in browser environments. */
+    location?: ClientTokenUrlSource;
+    paramName?: string;
+};
+export type RemoveClientTokenFromUrlOptions = ExtractClientTokenFromUrlOptions & {
+    replaceUrl?: (nextHref: string) => void;
+};
+/**
+ * Read client token from query string, then hash fragment.
+ */
+export declare function extractClientTokenFromUrl(options?: ExtractClientTokenFromUrlOptions): string | null;
+/**
+ * Remove client token param from URL without navigation.
+ */
+export declare function removeClientTokenFromUrl(options?: RemoveClientTokenFromUrlOptions): void;
+//# sourceMappingURL=client-token-url.d.ts.map

package/dist/utils/client-token-url.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"client-token-url.d.ts","sourceRoot":"","sources":["../../src/utils/client-token-url.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,MAAM,MAAM,oBAAoB,GAAG;IACjC,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;CACd,CAAC;AAEF,MAAM,MAAM,gCAAgC,GAAG;IAC7C,kEAAkE;IAClE,QAAQ,CAAC,EAAE,oBAAoB,CAAC;IAChC,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB,CAAC;AAEF,MAAM,MAAM,+BAA+B,GACzC,gCAAgC,GAAG;IACjC,UAAU,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,IAAI,CAAC;CACzC,CAAC;AAqBJ;;GAEG;AACH,wBAAgB,yBAAyB,CACvC,OAAO,GAAE,gCAAqC,GAC7C,MAAM,GAAG,IAAI,CAmBf;AAED;;GAEG;AACH,wBAAgB,wBAAwB,CACtC,OAAO,GAAE,+BAAoC,GAC5C,IAAI,CAiCN"}

package/dist/utils/client-token-url.js

@@ -0,0 +1,67 @@
+"use strict";
+/**
+ * Extract/remove x-client-token from browser URL query or hash.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.extractClientTokenFromUrl = extractClientTokenFromUrl;
+exports.removeClientTokenFromUrl = removeClientTokenFromUrl;
+function readDefaultLocation() {
+    if (typeof globalThis === "undefined") {
+        return null;
+    }
+    const win = globalThis;
+    if (!win.location?.href) {
+        return null;
+    }
+    return win.location;
+}
+function extractFromParams(params, paramName) {
+    const value = params.get(paramName);
+    return value && value.length > 0 ? value : null;
+}
+/**
+ * Read client token from query string, then hash fragment.
+ */
+function extractClientTokenFromUrl(options = {}) {
+    const paramName = options.paramName ?? "x-client-token";
+    const location = options.location ?? readDefaultLocation();
+    if (!location) {
+        return null;
+    }
+    const fromQuery = extractFromParams(new URLSearchParams(location.search), paramName);
+    if (fromQuery) {
+        return fromQuery;
+    }
+    const hashBody = location.hash.startsWith("#")
+        ? location.hash.substring(1)
+        : location.hash;
+    return extractFromParams(new URLSearchParams(hashBody), paramName);
+}
+/**
+ * Remove client token param from URL without navigation.
+ */
+function removeClientTokenFromUrl(options = {}) {
+    const paramName = options.paramName ?? "x-client-token";
+    const location = options.location ?? readDefaultLocation();
+    if (!location) {
+        return;
+    }
+    const url = new URL(location.href);
+    url.searchParams.delete(paramName);
+    if (url.hash) {
+        const hashBody = url.hash.startsWith("#")
+            ? url.hash.substring(1)
+            : url.hash;
+        const hashParams = new URLSearchParams(hashBody);
+        hashParams.delete(paramName);
+        url.hash = hashParams.toString() ? `#${hashParams.toString()}` : "";
+    }
+    const nextHref = url.toString();
+    if (options.replaceUrl) {
+        options.replaceUrl(nextHref);
+        return;
+    }
+    const history = globalThis.history;
+    history?.replaceState?.({}, "", nextHref);
+}
+//# sourceMappingURL=client-token-url.js.map

package/dist/utils/client-token-url.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"client-token-url.js","sourceRoot":"","sources":["../../src/utils/client-token-url.ts"],"names":[],"mappings":";AAAA;;GAEG;;AAyCH,8DAqBC;AAKD,4DAmCC;AAnFD,SAAS,mBAAmB;IAC1B,IAAI,OAAO,UAAU,KAAK,WAAW,EAAE,CAAC;QACtC,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,GAAG,GAAG,UAAiD,CAAC;IAC9D,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC;QACxB,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,GAAG,CAAC,QAAQ,CAAC;AACtB,CAAC;AAED,SAAS,iBAAiB,CACxB,MAAuB,EACvB,SAAiB;IAEjB,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IACpC,OAAO,KAAK,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;AAClD,CAAC;AAED;;GAEG;AACH,SAAgB,yBAAyB,CACvC,UAA4C,EAAE;IAE9C,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,gBAAgB,CAAC;IACxD,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,mBAAmB,EAAE,CAAC;IAC3D,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,SAAS,GAAG,iBAAiB,CACjC,IAAI,eAAe,CAAC,QAAQ,CAAC,MAAM,CAAC,EACpC,SAAS,CACV,CAAC;IACF,IAAI,SAAS,EAAE,CAAC;QACd,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,MAAM,QAAQ,GAAG,QAAQ,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;QAC5C,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC;QAC5B,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC;IAClB,OAAO,iBAAiB,CAAC,IAAI,eAAe,CAAC,QAAQ,CAAC,EAAE,SAAS,CAAC,CAAC;AACrE,CAAC;AAED;;GAEG;AACH,SAAgB,wBAAwB,CACtC,UAA2C,EAAE;IAE7C,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,gBAAgB,CAAC;IACxD,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,mBAAmB,EAAE,CAAC;IAC3D,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,OAAO;IACT,CAAC;IAED,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IACnC,GAAG,CAAC,YAAY,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IAEnC,IAAI,GAAG,CAAC,IAAI,EAAE,CAAC;QACb,MAAM,QAAQ,GAAG,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;YACvC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC;YACvB,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC;QACb,MAAM,UAAU,GAAG,IAAI,eAAe,CAAC,QAAQ,CAAC,CAAC;QACjD,UAAU,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QAC7B,GAAG,CAAC,IAAI,GAAG,UAAU,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,IAAI,UAAU,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IACtE,CAAC;IAED,MAAM,QAAQ,GAAG,GAAG,CAAC,QAAQ,EAAE,CAAC;IAChC,IAAI,OAAO,CAAC,UAAU,EAAE,CAAC;QACvB,OAAO,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;QAC7B,OAAO;IACT,CAAC;IAED,MAAM,OAAO,GACX,UAKD,CAAC,OAAO,CAAC;IACV,OAAO,EAAE,YAAY,EAAE,CAAC,EAAE,EAAE,EAAE,EAAE,QAAQ,CAAC,CAAC;AAC5C,CAAC"}

package/dist/utils/loopback-host-alignment.d.ts

@@ -0,0 +1,13 @@
+/**
+ * Align loopback hostnames with the browser page (localhost vs 127.0.0.1).
+ */
+export type AlignLoopbackHostnameOptions = {
+    /** Test hook: override detected page hostname. */
+    pageHostname?: string;
+};
+/**
+ * When the app is on localhost, rewrite 127.0.0.1 → localhost (same port/path).
+ * When the app is on 127.0.0.1, rewrite localhost → 127.0.0.1.
+ */
+export declare function alignLoopbackHostnameWithPage(url: string, options?: AlignLoopbackHostnameOptions): string;
+//# sourceMappingURL=loopback-host-alignment.d.ts.map

package/dist/utils/loopback-host-alignment.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"loopback-host-alignment.d.ts","sourceRoot":"","sources":["../../src/utils/loopback-host-alignment.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,MAAM,MAAM,4BAA4B,GAAG;IACzC,kDAAkD;IAClD,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB,CAAC;AAcF;;;GAGG;AACH,wBAAgB,6BAA6B,CAC3C,GAAG,EAAE,MAAM,EACX,OAAO,GAAE,4BAAiC,GACzC,MAAM,CAyBR"}

package/dist/utils/loopback-host-alignment.js

@@ -0,0 +1,46 @@
+"use strict";
+/**
+ * Align loopback hostnames with the browser page (localhost vs 127.0.0.1).
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.alignLoopbackHostnameWithPage = alignLoopbackHostnameWithPage;
+function readBrowserHostname() {
+    if (typeof globalThis === "undefined") {
+        return null;
+    }
+    const win = globalThis;
+    const hostname = win.location?.hostname;
+    if (typeof hostname !== "string" || !hostname.trim()) {
+        return null;
+    }
+    return hostname.toLowerCase();
+}
+/**
+ * When the app is on localhost, rewrite 127.0.0.1 → localhost (same port/path).
+ * When the app is on 127.0.0.1, rewrite localhost → 127.0.0.1.
+ */
+function alignLoopbackHostnameWithPage(url, options = {}) {
+    const raw = (url || "").trim();
+    if (!raw || !/^https?:\/\//i.test(raw)) {
+        return raw;
+    }
+    const pageHost = (options.pageHostname ?? readBrowserHostname())?.toLowerCase();
+    if (!pageHost) {
+        return raw;
+    }
+    try {
+        const parsed = new URL(raw);
+        const targetHost = parsed.hostname.toLowerCase();
+        if (pageHost === "localhost" && targetHost === "127.0.0.1") {
+            parsed.hostname = "localhost";
+        }
+        else if (pageHost === "127.0.0.1" && targetHost === "localhost") {
+            parsed.hostname = "127.0.0.1";
+        }
+        return parsed.href.replace(/\/$/, "") || parsed.href;
+    }
+    catch {
+        return raw;
+    }
+}
+//# sourceMappingURL=loopback-host-alignment.js.map

package/dist/utils/loopback-host-alignment.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"loopback-host-alignment.js","sourceRoot":"","sources":["../../src/utils/loopback-host-alignment.ts"],"names":[],"mappings":";AAAA;;GAEG;;AAuBH,sEA4BC;AA5CD,SAAS,mBAAmB;IAC1B,IAAI,OAAO,UAAU,KAAK,WAAW,EAAE,CAAC;QACtC,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,GAAG,GAAG,UAAkD,CAAC;IAC/D,MAAM,QAAQ,GAAG,GAAG,CAAC,QAAQ,EAAE,QAAQ,CAAC;IACxC,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,EAAE,CAAC;QACrD,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,QAAQ,CAAC,WAAW,EAAE,CAAC;AAChC,CAAC;AAED;;;GAGG;AACH,SAAgB,6BAA6B,CAC3C,GAAW,EACX,UAAwC,EAAE;IAE1C,MAAM,GAAG,GAAG,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IAC/B,IAAI,CAAC,GAAG,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QACvC,OAAO,GAAG,CAAC;IACb,CAAC;IAED,MAAM,QAAQ,GAAG,CACf,OAAO,CAAC,YAAY,IAAI,mBAAmB,EAAE,CAC9C,EAAE,WAAW,EAAE,CAAC;IACjB,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,OAAO,GAAG,CAAC;IACb,CAAC;IAED,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;QAC5B,MAAM,UAAU,GAAG,MAAM,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC;QACjD,IAAI,QAAQ,KAAK,WAAW,IAAI,UAAU,KAAK,WAAW,EAAE,CAAC;YAC3D,MAAM,CAAC,QAAQ,GAAG,WAAW,CAAC;QAChC,CAAC;aAAM,IAAI,QAAQ,KAAK,WAAW,IAAI,UAAU,KAAK,WAAW,EAAE,CAAC;YAClE,MAAM,CAAC,QAAQ,GAAG,WAAW,CAAC;QAChC,CAAC;QACD,OAAO,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC;IACvD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,GAAG,CAAC;IACb,CAAC;AACH,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@aifabrix/miso-client",
-  "version": "4.15.4",
+  "version": "4.17.0",
   "description": "AI Fabrix Client SDK - Authentication, authorization, logging, and Express.js utilities",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",