@andco/sdk 0.0.1 → 0.0.3

package/README.md

@@ -61,9 +61,8 @@ const andco = createAndcoInstanceForCLI({
 const { data: session } = await andco.auth.signIn();
 ```
 
-Every builder returns an `AndcoClient`. There is no `AndcoSessionClient` — that type was removed;
-`AndcoClient` (unauthenticated arm) and `AndcoClientAuthed` (authenticated arm) are the only two
-client shapes now.
+Every builder returns an `AndcoClient`. There are two client shapes: `AndcoClient`, the
+unauthenticated arm, and `AndcoClientAuthed`, the authenticated one.
 
 ## Public, no credentials involved
 
@@ -79,7 +78,7 @@ if (error) throw error;
 
 Two ways to get an `AndcoClientAuthed`:
 
-- `andco.with(credentials)` binds *explicit* credentials for one unit of work. It accepts
+- `andco.with(credentials)` binds _explicit_ credentials for one unit of work. It accepts
   `AndcoCredentials`, an `AndcoSession`, or a bare access-token string — the bare string exists
   for the common server case where a handler already pulled a token out of its own session:
 
@@ -109,8 +108,7 @@ own table, or a plain closure — without adopting the SDK's own persistence.
 
 ## Resource Server Definitions
 
-`AndcoBoundClient` was removed. In its place, a Resource Server Definition is any object that
-implements:
+A Resource Server Definition is any object that implements:
 
 ```ts
 interface AndcoResourceServer<Client> {
@@ -130,12 +128,17 @@ satisfy `AndcoCredentials` and can be passed straight to `use(...)`.
 `andco.intents` is domain-neutral: it only knows how to create, read, execute, and observe an
 Intent generically. It does not know about deposits, withdrawals, or any other domain concept —
 those belong to whatever Resource Server Definition owns that domain, composed over this same
-surface (see [Resource Server Definitions](#resource-server-definitions) above).
+surface (see [Resource Server Definitions](#resource-server-definitions) above), such as the AndCo
+Bank Resource Server Definition in [`@andco/bank-sdk`](../bank-sdk/README.md).
 
 ```ts
-const { data: intent, error } = await andco.intents.create("deposit", depositInput, {
-  idempotencyKey: "deposit:8472",
-});
+const { data: intent, error } = await andco.intents.create(
+  "deposit",
+  depositInput,
+  {
+    idempotencyKey: "deposit:8472",
+  },
+);
 if (error) throw error;
 ```
 
@@ -150,6 +153,26 @@ if (error) throw error;
 - `subscribe(subject, read, decode, handler, options)` — a durable, paged subscription loop, with
   its own checkpoint and poll-interval reconciliation. Returns an unsubscribe function.
 
+For the actual bank operations — `createDeposit`, `createWithdrawal`, `createAutomaticCharge`,
+`closeDeposit`, and account/intent event listeners — see
+[`@andco/bank-sdk`](../bank-sdk/README.md), whose `Bank` definition composes this same
+domain-neutral surface:
+
+```ts
+import { Bank } from "@andco/bank-sdk";
+
+const bankDefinition = new Bank({ clientId, resource: "https://api.andco.cl" });
+const bank = bankDefinition.use(andco.with(session));
+
+const { data: deposit, error } = await bank.intents.createDeposit(
+  depositInput,
+  {
+    idempotencyKey: "deposit:8472",
+  },
+);
+if (error) throw error;
+```
+
 Present the resulting intent with `@andco/sdk-react`, `@andco/sdk-vue`, `@andco/sdk-svelte`, or
 `@andco/sdk-script`. The browser must retrieve the authoritative intent state after presentation;
 callback parameters are correlation data, not financial state.

package/dist/auth.d.ts

@@ -1,4 +1,5 @@
 import { type AndCoRandomSource } from "@andco/protocol";
+import type { AndcoConfig } from "./config.js";
 import type { AndcoSession } from "./credentials.js";
 import { Result } from "./errors.js";
 import type { AndcoAuthorizationOptions, AndcoAuthorizationRequest, AndcoOAuth } from "./oauth.js";
@@ -8,6 +9,8 @@ export type AndcoSignInOptions = AndcoAuthorizationOptions & {
     presentation?: AndcoPresentation;
 };
 export type AndcoAuthOptions = {
+    /** Read for the registered callback, which has to be known before the request is prepared. */
+    config: AndcoConfig;
     oauth: AndcoOAuth;
     store: AndcoSessionStore;
     presenter: AndcoPresenter;

package/dist/auth.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../src/auth.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,iBAAiB,EAAe,MAAM,iBAAiB,CAAC;AACtE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AACrD,OAAO,EAAqB,MAAM,EAAE,MAAM,aAAa,CAAC;AACxD,OAAO,KAAK,EAAE,yBAAyB,EAAE,yBAAyB,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AACnG,OAAO,KAAK,EAAE,iBAAiB,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AACxE,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AAE5D,MAAM,MAAM,kBAAkB,GAAG,yBAAyB,GAAG;IAC3D,YAAY,CAAC,EAAE,iBAAiB,CAAC;CAClC,CAAC;AAEF,MAAM,MAAM,gBAAgB,GAAG;IAC7B,KAAK,EAAE,UAAU,CAAC;IAClB,KAAK,EAAE,iBAAiB,CAAC;IACzB,SAAS,EAAE,cAAc,CAAC;IAC1B,oFAAoF;IACpF,QAAQ,CAAC,EAAE,MAAM,MAAM,CAAC;IACxB,0FAA0F;IAC1F,MAAM,CAAC,EAAE,iBAAiB,CAAC;IAC3B;;;;;;OAMG;IACH,kBAAkB,CAAC,EAAE,CAAC,OAAO,EAAE,yBAAyB,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACnF,CAAC;AAEF;;;;;;;;;;;;;;;;GAgBG;AACH,qBAAa,SAAS;;gBAGD,OAAO,EAAE,gBAAgB;IAI5C;;;;;OAKG;IACU,MAAM,CAAC,OAAO,GAAE,kBAAuB,GAAG,OAAO,CAAC,MAAM,CAAC,YAAY,GAAG,IAAI,CAAC,CAAC;IA4B3F,iGAAiG;IACpF,OAAO,IAAI,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IAI7C;;;;;;;;OAQG;IACI,QAAQ,CAAC,QAAQ,EAAE,CAAC,OAAO,EAAE,YAAY,GAAG,IAAI,KAAK,IAAI,GAAG,MAAM,IAAI;IAK7E,gFAAgF;IACnE,UAAU,IAAI,OAAO,CAAC,MAAM,CAAC,YAAY,GAAG,IAAI,CAAC,CAAC;IAO/D,uFAAuF;IAC1E,OAAO,IAAI,OAAO,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;CAWtD"}
+{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../src/auth.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,iBAAiB,EAAwB,MAAM,iBAAiB,CAAC;AAC/E,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC/C,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AACrD,OAAO,EAAqB,MAAM,EAAE,MAAM,aAAa,CAAC;AACxD,OAAO,KAAK,EAAE,yBAAyB,EAAE,yBAAyB,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AACnG,OAAO,KAAK,EAAE,iBAAiB,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AACxE,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AAE5D,MAAM,MAAM,kBAAkB,GAAG,yBAAyB,GAAG;IAC3D,YAAY,CAAC,EAAE,iBAAiB,CAAC;CAClC,CAAC;AAEF,MAAM,MAAM,gBAAgB,GAAG;IAC7B,8FAA8F;IAC9F,MAAM,EAAE,WAAW,CAAC;IACpB,KAAK,EAAE,UAAU,CAAC;IAClB,KAAK,EAAE,iBAAiB,CAAC;IACzB,SAAS,EAAE,cAAc,CAAC;IAC1B,oFAAoF;IACpF,QAAQ,CAAC,EAAE,MAAM,MAAM,CAAC;IACxB,0FAA0F;IAC1F,MAAM,CAAC,EAAE,iBAAiB,CAAC;IAC3B;;;;;;OAMG;IACH,kBAAkB,CAAC,EAAE,CAAC,OAAO,EAAE,yBAAyB,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACnF,CAAC;AAEF;;;;;;;;;;;;;;;;GAgBG;AACH,qBAAa,SAAS;;gBAGD,OAAO,EAAE,gBAAgB;IAI5C;;;;;OAKG;IACU,MAAM,CAAC,OAAO,GAAE,kBAAuB,GAAG,OAAO,CAAC,MAAM,CAAC,YAAY,GAAG,IAAI,CAAC,CAAC;IA0C3F,iGAAiG;IACpF,OAAO,IAAI,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IAI7C;;;;;;;;OAQG;IACI,QAAQ,CAAC,QAAQ,EAAE,CAAC,OAAO,EAAE,YAAY,GAAG,IAAI,KAAK,IAAI,GAAG,MAAM,IAAI;IAK7E,gFAAgF;IACnE,UAAU,IAAI,OAAO,CAAC,MAAM,CAAC,YAAY,GAAG,IAAI,CAAC,CAAC;IAO/D,uFAAuF;IAC1E,OAAO,IAAI,OAAO,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;CAWtD"}

package/dist/auth.js

@@ -1,4 +1,4 @@
-import { RANDOM_UUID } from "@andco/protocol";
+import { RANDOM_UUID, SafeURL } from "@andco/protocol";
 import { ANDCO_ERROR_CODES, Result } from "./errors.js";
 /**
  * Sign-in for a runtime that owns exactly one session.
@@ -29,17 +29,31 @@ export class AndcoAuth {
      * result arrives on the next page load, through the store's own callback consumption.
      */
     async signIn(options = {}) {
-        const { oauth, presenter, store } = this.#options;
+        const { config, oauth, presenter, store } = this.#options;
         const presentationId = this.#options.randomId ? this.#options.randomId() : RANDOM_UUID(this.#options.crypto);
-        const prepared = await oauth.createAuthorizationRequest(options);
-        if (prepared.error)
-            return Result.fail(prepared.error);
-        await this.#options.persistTransaction?.(prepared.data);
-        const returnTo = new URL(prepared.data.redirectTo);
+        // The callback has to be known before the request is prepared, because the presenter needs it
+        // to open its window. It is registered configuration, so it is knowable without the round trip.
+        const configured = options.redirectTo ?? config.redirectTo;
+        if (!configured) {
+            return Result.fail(ANDCO_ERROR_CODES.INVALID_CONFIGURATION, {
+                message: "redirectTo is required, on the instance or on the request",
+            });
+        }
+        // Deferred: preparing the request may push it (PAR), and a presenter has to open its window
+        // during the user activation rather than after a network round trip.
+        let prepared;
         const presented = await presenter.present({
-            url: prepared.data.authorizationUrl,
+            kind: "oauth",
+            url: async () => {
+                const request = await oauth.createAuthorizationRequest(options);
+                if (request.error)
+                    return Result.fail(request.error);
+                await this.#options.persistTransaction?.(request.data);
+                prepared = request.data;
+                return Result.ok(request.data.authorizationUrl);
+            },
             presentation: options.presentation ?? "popup",
-            returnTo,
+            returnTo: new SafeURL(configured),
             presentationId,
         });
         if (presented.error)
@@ -47,7 +61,9 @@ export class AndcoAuth {
         // Either the document was replaced, or the user dismissed. Neither is an error.
         if (!presented.data)
             return Result.ok(null);
-        const exchanged = await oauth.exchangeCallback({ callbackUrl: presented.data, request: prepared.data });
+        if (!prepared)
+            return Result.fail(ANDCO_ERROR_CODES.INVALID_CALLBACK, { message: "no transaction was prepared" });
+        const exchanged = await oauth.exchangeCallback({ callbackUrl: presented.data, request: prepared });
         if (exchanged.error)
             return Result.fail(exchanged.error);
         const written = await store.set(exchanged.data);

package/dist/browser/controller.d.ts

@@ -1,6 +1,7 @@
 import type { AndCoClickEvent, AndCoErrorEvent, AndCoReadyEvent, AndCoThemeMode } from "@andco/protocol";
 import type { AndcoClient } from "../client.js";
 import { AndcoError } from "../errors.js";
+import type { AndcoIntentId, AndcoPresentationResult } from "../intents.js";
 import type { AndcoAuthorizationOptions } from "../oauth.js";
 import type { AndcoPresentation } from "../presenter.js";
 /** The hosted workflow an iframe presents. */
@@ -17,6 +18,12 @@ export type AndcoButtonControllerOptions = {
     /** The instance whose configuration, protocol, and session this surface acts on. */
     client: AndcoClient;
     flow?: AndcoButtonFlow;
+    /**
+     * Required when `flow` is `"intent"`. Resolved after the user activates, never before: the iframe
+     * holds the activation and opens the window first, so creating the Intent earlier would make one
+     * on every render and lose the activation that the window needs.
+     */
+    intentId?: AndcoIntentId;
     /** Widget release to load. Defaults to the release the SDK was built against. */
     release?: number;
     /** Changes while the application runs, unlike endpoints and versions. */
@@ -30,7 +37,8 @@ export type AndcoButtonControllerOptions = {
     authorization?: AndcoAuthorizationOptions;
     onReady?: (event: AndCoReadyEvent) => void;
     onActivate?: (event: AndCoClickEvent) => void;
-    onComplete?: () => void;
+    /** Carries the Presentation Result on an Intent flow, and nothing on an authorization. */
+    onComplete?: (outcome?: AndcoPresentationResult) => void;
     onDismiss?: () => void;
     onError?: (error: AndcoError, event?: AndCoErrorEvent) => void;
 };

package/dist/browser/controller.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"controller.d.ts","sourceRoot":"","sources":["../../src/browser/controller.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,eAAe,EACf,eAAe,EAIf,eAAe,EACf,cAAc,EACf,MAAM,iBAAiB,CAAC;AAEzB,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAChD,OAAO,EAAqB,UAAU,EAAE,MAAM,cAAc,CAAC;AAC7D,OAAO,KAAK,EAAE,yBAAyB,EAA6B,MAAM,aAAa,CAAC;AACxF,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AAGzD,8CAA8C;AAC9C,MAAM,MAAM,eAAe,GAAG,eAAe,GAAG,QAAQ,CAAC;AAEzD,wDAAwD;AACxD,MAAM,MAAM,iBAAiB,GAAG,MAAM,GAAG,YAAY,GAAG,OAAO,GAAG,aAAa,GAAG,UAAU,GAAG,WAAW,GAAG,OAAO,CAAC;AAErH,MAAM,MAAM,mBAAmB,GAAG;IAChC,MAAM,EAAE,iBAAiB,CAAC;IAC1B,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,OAAO,CAAC;IACf,KAAK,EAAE,UAAU,GAAG,IAAI,CAAC;CAC1B,CAAC;AAEF,MAAM,MAAM,4BAA4B,GAAG;IACzC,oFAAoF;IACpF,MAAM,EAAE,WAAW,CAAC;IACpB,IAAI,CAAC,EAAE,eAAe,CAAC;IACvB,iFAAiF;IACjF,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,yEAAyE;IACzE,SAAS,CAAC,EAAE,cAAc,CAAC;IAC3B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,oGAAoG;IACpG,YAAY,CAAC,EAAE,iBAAiB,CAAC;IACjC,wFAAwF;IACxF,aAAa,CAAC,EAAE,yBAAyB,CAAC;IAC1C,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,eAAe,KAAK,IAAI,CAAC;IAC3C,UAAU,CAAC,EAAE,CAAC,KAAK,EAAE,eAAe,KAAK,IAAI,CAAC;IAC9C,UAAU,CAAC,EAAE,MAAM,IAAI,CAAC;IACxB,SAAS,CAAC,EAAE,MAAM,IAAI,CAAC;IACvB,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,UAAU,EAAE,KAAK,CAAC,EAAE,eAAe,KAAK,IAAI,CAAC;CAChE,CAAC;AAEF,KAAK,QAAQ,GAAG,CAAC,QAAQ,EAAE,mBAAmB,KAAK,IAAI,CAAC;AAExD;;;;;;;;;;;;;;;;GAgBG;AACH,qBAAa,qBAAqB;;gBAcb,OAAO,EAAE,4BAA4B;IAKxD,IAAW,QAAQ,IAAI,mBAAmB,CAEzC;IAED,uEAAuE;IAChE,SAAS,CAAC,QAAQ,EAAE,QAAQ,GAAG,MAAM,IAAI;IAQhD,kEAAkE;IAC3D,OAAO,CAAC,MAAM,EAAE,iBAAiB,GAAG,MAAM,IAAI;IAiD9C,UAAU,IAAI,IAAI;IAKzB;;;;;;;OAOG;IACI,OAAO,IAAI,IAAI;IAgBf,OAAO,IAAI,IAAI;CA8FvB"}
+{"version":3,"file":"controller.d.ts","sourceRoot":"","sources":["../../src/browser/controller.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,eAAe,EACf,eAAe,EAIf,eAAe,EACf,cAAc,EACf,MAAM,iBAAiB,CAAC;AAEzB,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAChD,OAAO,EAAqB,UAAU,EAAE,MAAM,cAAc,CAAC;AAC7D,OAAO,KAAK,EAAE,aAAa,EAAE,uBAAuB,EAAE,MAAM,eAAe,CAAC;AAC5E,OAAO,KAAK,EAAE,yBAAyB,EAA6B,MAAM,aAAa,CAAC;AACxF,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AAGzD,8CAA8C;AAC9C,MAAM,MAAM,eAAe,GAAG,eAAe,GAAG,QAAQ,CAAC;AAEzD,wDAAwD;AACxD,MAAM,MAAM,iBAAiB,GAAG,MAAM,GAAG,YAAY,GAAG,OAAO,GAAG,aAAa,GAAG,UAAU,GAAG,WAAW,GAAG,OAAO,CAAC;AAErH,MAAM,MAAM,mBAAmB,GAAG;IAChC,MAAM,EAAE,iBAAiB,CAAC;IAC1B,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,OAAO,CAAC;IACf,KAAK,EAAE,UAAU,GAAG,IAAI,CAAC;CAC1B,CAAC;AAEF,MAAM,MAAM,4BAA4B,GAAG;IACzC,oFAAoF;IACpF,MAAM,EAAE,WAAW,CAAC;IACpB,IAAI,CAAC,EAAE,eAAe,CAAC;IACvB;;;;OAIG;IACH,QAAQ,CAAC,EAAE,aAAa,CAAC;IACzB,iFAAiF;IACjF,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,yEAAyE;IACzE,SAAS,CAAC,EAAE,cAAc,CAAC;IAC3B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,oGAAoG;IACpG,YAAY,CAAC,EAAE,iBAAiB,CAAC;IACjC,wFAAwF;IACxF,aAAa,CAAC,EAAE,yBAAyB,CAAC;IAC1C,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,eAAe,KAAK,IAAI,CAAC;IAC3C,UAAU,CAAC,EAAE,CAAC,KAAK,EAAE,eAAe,KAAK,IAAI,CAAC;IAC9C,0FAA0F;IAC1F,UAAU,CAAC,EAAE,CAAC,OAAO,CAAC,EAAE,uBAAuB,KAAK,IAAI,CAAC;IACzD,SAAS,CAAC,EAAE,MAAM,IAAI,CAAC;IACvB,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,UAAU,EAAE,KAAK,CAAC,EAAE,eAAe,KAAK,IAAI,CAAC;CAChE,CAAC;AAEF,KAAK,QAAQ,GAAG,CAAC,QAAQ,EAAE,mBAAmB,KAAK,IAAI,CAAC;AAExD;;;;;;;;;;;;;;;;GAgBG;AACH,qBAAa,qBAAqB;;gBAeb,OAAO,EAAE,4BAA4B;IAKxD,IAAW,QAAQ,IAAI,mBAAmB,CAEzC;IAED,uEAAuE;IAChE,SAAS,CAAC,QAAQ,EAAE,QAAQ,GAAG,MAAM,IAAI;IAQhD,kEAAkE;IAC3D,OAAO,CAAC,MAAM,EAAE,iBAAiB,GAAG,MAAM,IAAI;IAiD9C,UAAU,IAAI,IAAI;IAKzB;;;;;;;OAOG;IACI,OAAO,IAAI,IAAI;IAiBf,OAAO,IAAI,IAAI;CAsKvB"}

package/dist/browser/controller.js

@@ -26,6 +26,7 @@ export class AndcoButtonController {
     #snapshot;
     #pending;
     #presentationId;
+    #intentId;
     #generation = 0;
     /** One automatic reconnect per `connect()` call, so a single slow network blip self-heals without
      * bothering the app — but a persistently broken endpoint still surfaces as a visible `"error"`
@@ -108,6 +109,7 @@ export class AndcoButtonController {
     restart() {
         this.#generation += 1;
         this.#pending = undefined;
+        this.#intentId = undefined;
         if (this.#snapshot.status === "error" && this.#iframe) {
             // A deliberate retry (the app calling this after showing the error) earns its own one-shot
             // auto-reconnect on a future timeout, same as the very first connect did.
@@ -126,7 +128,7 @@ export class AndcoButtonController {
         this.#listeners.clear();
     }
     /**
-     * Prepares an authorization once the user has activated the hosted control.
+     * Prepares a presentation once the user has activated the hosted control.
      *
      * Deferred on purpose: the iframe holds the user activation and opens the popup synchronously,
      * then asks for the URL. Preparing it earlier would waste a transaction on every render and,
@@ -135,19 +137,73 @@ export class AndcoButtonController {
     async #authorize() {
         const generation = ++this.#generation;
         this.#publish({ status: "authorizing", error: null });
+        const presentationId = this.#presentationId;
         // The hosted surface opens the popup, so the callback has to know to deliver its result there.
         // Encoding that in the state is the protocol's own mechanism and the only one available: the
         // callback document cannot read a cross-origin opener's location.
+        const state = callbackStateCreate(this.#options.client.config.endpoints.widget.origin, presentationId);
+        if (this.#options.flow === "intent")
+            return this.#presentIntent(generation, presentationId, state);
         const prepared = await this.#options.client.oauth.createAuthorizationRequest({
             ...(this.#options.authorization ?? {}),
-            state: callbackStateCreate(this.#options.client.config.endpoints.widget.origin, this.#presentationId),
+            state,
         });
         if (generation !== this.#generation)
             return;
         if (prepared.error)
             return this.#fail(prepared.error);
         this.#pending = prepared.data;
-        this.#bridge?.resolveAuthorization(this.#presentationId, prepared.data.authorizationUrl.href);
+        this.#bridge?.resolvePresentation(presentationId, prepared.data.authorizationUrl.href);
+    }
+    /**
+     * Resolves the Intent this control presents, reusing the instance's own URL construction.
+     *
+     * It does not build the URL itself. Two constructions of one presentation URL is exactly how the
+     * direct and hosted paths drifted before, which is why `intents.presentationURL` is published.
+     */
+    async #presentIntent(generation, presentationId, state) {
+        const client = this.#options.client;
+        const intentId = this.#options.intentId;
+        if (!intentId) {
+            return this.#fail(new AndcoError(ANDCO_ERROR_CODES.INVALID_CONFIGURATION, {
+                message: 'a control with flow="intent" requires an intentId',
+            }));
+        }
+        // Out of scope for now, and refused rather than silently resolving to nothing: an Intent result
+        // that comes back by redirect has no consumer yet, so the presentation would never settle.
+        if (this.#options.presentation === "redirect") {
+            return this.#fail(new AndcoError(ANDCO_ERROR_CODES.PRESENTATION_UNSUPPORTED, {
+                message: 'an Intent cannot be presented with presentation="redirect" yet',
+            }));
+        }
+        const returnTo = client.config.redirectTo;
+        if (!returnTo) {
+            return this.#fail(new AndcoError(ANDCO_ERROR_CODES.INVALID_CONFIGURATION, {
+                message: "an Intent Presentation needs the instance's redirectTo",
+            }));
+        }
+        let resolvedId;
+        try {
+            resolvedId = typeof intentId === "string" ? intentId : await intentId();
+        }
+        catch (cause) {
+            return this.#fail(AndcoError.from(cause, ANDCO_ERROR_CODES.INVALID_CONFIGURATION));
+        }
+        if (generation !== this.#generation)
+            return;
+        const url = await client.intents.presentationURL({
+            intentId: resolvedId,
+            presentation: "popup",
+            returnTo,
+            errorReturnTo: returnTo,
+            state,
+        });
+        if (generation !== this.#generation)
+            return;
+        if (url.error)
+            return this.#fail(url.error);
+        this.#intentId = resolvedId;
+        this.#bridge?.resolvePresentation(presentationId, url.data.href);
     }
     async #settle(event) {
         const generation = this.#generation;
@@ -170,6 +226,17 @@ export class AndcoButtonController {
         }
         if (generation !== this.#generation)
             return;
+        // An Intent completion is a lifecycle fact. What it means financially is read, not relayed.
+        if (event.type === "intent.complete" && this.#intentId) {
+            const intent = await this.#options.client.intents.get(this.#intentId);
+            if (generation !== this.#generation)
+                return;
+            if (intent.error)
+                return this.#fail(intent.error);
+            this.#publish({ status: "complete", error: null });
+            this.#options.onComplete?.({ outcome: "complete", intent: intent.data });
+            return;
+        }
         this.#publish({ status: "complete", error: null });
         this.#options.onComplete?.();
     }

package/dist/browser/frame.d.ts

@@ -40,15 +40,16 @@ export declare class AndcoButtonBridge {
     /** Sends a validated protocol message to the hosted iframe. */
     private post;
     /**
-     * Resolves a deferred authorization request from the hosted button.
+     * Resolves a deferred presentation the hosted button asked this side to prepare — an
+     * authorization or an Intent, which is why it is not named after either.
      * Omit the URL to close the pending popup after resolution fails.
      *
      * @example
      * ```ts
-     * bridge.resolveAuthorization(presentationId, "https://app.example.com/oauth/start");
+     * bridge.resolvePresentation(presentationId, "https://app.example.com/oauth/start");
      * ```
      */
-    resolveAuthorization(presentationId: string, authorizationUrl?: string | URL): void;
+    resolvePresentation(presentationId: string, url?: string | URL): void;
     /**
      * Forwards a validated same-origin host callback to the iframe that owns the popup.
      *

package/dist/browser/frame.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"frame.d.ts","sourceRoot":"","sources":["../../src/browser/frame.ts"],"names":[],"mappings":"AAAA,OAAO,EAKL,KAAK,eAAe,EACpB,KAAK,eAAe,EAEpB,KAAK,wBAAwB,EAC7B,KAAK,uBAAuB,EAC5B,KAAK,gCAAgC,EACrC,KAAK,uBAAuB,EAC5B,KAAK,sBAAsB,EAC3B,KAAK,oBAAoB,EACzB,KAAK,gBAAgB,EACrB,KAAK,eAAe,EACpB,KAAK,0BAA0B,EAEhC,MAAM,iBAAiB,CAAC;AAGzB,iEAAiE;AACjE,MAAM,MAAM,iBAAiB,GAAG;IAC9B,cAAc,EAAE,MAAM,CAAC;IACvB,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,eAAe,KAAK,IAAI,CAAC;IAC3C,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,eAAe,KAAK,IAAI,CAAC;IAC3C,UAAU,CAAC,EAAE,CAAC,KAAK,EAAE,gCAAgC,GAAG,uBAAuB,GAAG,wBAAwB,KAAK,IAAI,CAAC;IACpH,SAAS,CAAC,EAAE,CAAC,KAAK,EAAE,sBAAsB,GAAG,uBAAuB,KAAK,IAAI,CAAC;IAC9E,oBAAoB,CAAC,EAAE,CAAC,KAAK,EAAE,oBAAoB,KAAK,IAAI,CAAC;IAC7D,UAAU,CAAC,EAAE,CAAC,KAAK,EAAE,eAAe,KAAK,IAAI,CAAC;CAC/C,CAAC;AAEF;;;;;;;;GAQG;AACH,qBAAa,iBAAiB;IAY1B,OAAO,CAAC,QAAQ,CAAC,MAAM;IACvB,OAAO,CAAC,QAAQ,CAAC,OAAO;IAZ1B,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAM;IAC1B,OAAO,CAAC,OAAO,CAAS;IACxB,OAAO,CAAC,SAAS,CAA4C;IAC7D,OAAO,CAAC,IAAI,CAA0B;IACtC,OAAO,CAAC,cAAc,CAAqB;IAC3C,OAAO,CAAC,gBAAgB,CAAqB;IAC7C,OAAO,CAAC,iBAAiB,CAAK;IAC9B,OAAO,CAAC,kBAAkB,CAAK;IAC/B,OAAO,CAAC,SAAS,CAAS;gBAGP,MAAM,EAAE,iBAAiB,EACzB,OAAO,EAAE,iBAAiB;IAkB7C,OAAO,CAAC,aAAa;IAWrB,OAAO,CAAC,SAAS;IAKjB,OAAO,CAAC,OAAO;IAkDf,OAAO,CAAC,QAAQ,CAAC,aAAa,CAM5B;IAEF,OAAO,CAAC,QAAQ,CAAC,UAAU,CA8BzB;IAEF,OAAO,CAAC,QAAQ,CAAC,cAAc,CA0B7B;IAEF,+DAA+D;IAC/D,OAAO,CAAC,IAAI;IASZ;;;;;;;;OAQG;IACI,oBAAoB,CAAC,cAAc,EAAE,MAAM,EAAE,gBAAgB,CAAC,EAAE,MAAM,GAAG,GAAG;IAWnF;;;;;;OAMG;IACI,0BAA0B,CAAC,OAAO,EAAE,gBAAgB;IAI3D,oEAAoE;IAC7D,cAAc,CAAC,WAAW,EAAE,IAAI,CAAC,0BAA0B,EAAE,QAAQ,GAAG,WAAW,CAAC;IAU3F,0EAA0E;IACnE,OAAO;CASf"}
+{"version":3,"file":"frame.d.ts","sourceRoot":"","sources":["../../src/browser/frame.ts"],"names":[],"mappings":"AAAA,OAAO,EAIL,KAAK,eAAe,EACpB,KAAK,eAAe,EAEpB,KAAK,wBAAwB,EAC7B,KAAK,uBAAuB,EAC5B,KAAK,gCAAgC,EACrC,KAAK,uBAAuB,EAC5B,KAAK,sBAAsB,EAC3B,KAAK,oBAAoB,EACzB,KAAK,gBAAgB,EAErB,KAAK,eAAe,EACpB,KAAK,0BAA0B,EAEhC,MAAM,iBAAiB,CAAC;AAGzB,iEAAiE;AACjE,MAAM,MAAM,iBAAiB,GAAG;IAC9B,cAAc,EAAE,MAAM,CAAC;IACvB,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,eAAe,KAAK,IAAI,CAAC;IAC3C,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,eAAe,KAAK,IAAI,CAAC;IAC3C,UAAU,CAAC,EAAE,CAAC,KAAK,EAAE,gCAAgC,GAAG,uBAAuB,GAAG,wBAAwB,KAAK,IAAI,CAAC;IACpH,SAAS,CAAC,EAAE,CAAC,KAAK,EAAE,sBAAsB,GAAG,uBAAuB,KAAK,IAAI,CAAC;IAC9E,oBAAoB,CAAC,EAAE,CAAC,KAAK,EAAE,oBAAoB,KAAK,IAAI,CAAC;IAC7D,UAAU,CAAC,EAAE,CAAC,KAAK,EAAE,eAAe,KAAK,IAAI,CAAC;CAC/C,CAAC;AAEF;;;;;;;;GAQG;AACH,qBAAa,iBAAiB;IAY1B,OAAO,CAAC,QAAQ,CAAC,MAAM;IACvB,OAAO,CAAC,QAAQ,CAAC,OAAO;IAZ1B,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAM;IAC1B,OAAO,CAAC,OAAO,CAAS;IACxB,OAAO,CAAC,SAAS,CAA4C;IAC7D,OAAO,CAAC,IAAI,CAA0B;IACtC,OAAO,CAAC,cAAc,CAAqB;IAC3C,OAAO,CAAC,gBAAgB,CAAqB;IAC7C,OAAO,CAAC,iBAAiB,CAAK;IAC9B,OAAO,CAAC,kBAAkB,CAAK;IAC/B,OAAO,CAAC,SAAS,CAAS;gBAGP,MAAM,EAAE,iBAAiB,EACzB,OAAO,EAAE,iBAAiB;IAkB7C,OAAO,CAAC,aAAa;IAWrB,OAAO,CAAC,SAAS;IAKjB,OAAO,CAAC,OAAO;IAkDf,OAAO,CAAC,QAAQ,CAAC,aAAa,CAM5B;IAEF,OAAO,CAAC,QAAQ,CAAC,UAAU,CA8BzB;IAEF,OAAO,CAAC,QAAQ,CAAC,cAAc,CA0B7B;IAEF,+DAA+D;IAC/D,OAAO,CAAC,IAAI;IASZ;;;;;;;;;OASG;IACI,mBAAmB,CAAC,cAAc,EAAE,MAAM,EAAE,GAAG,CAAC,EAAE,MAAM,GAAG,GAAG;IAWrE;;;;;;OAMG;IACI,0BAA0B,CAAC,OAAO,EAAE,gBAAgB;IAI3D,oEAAoE;IAC7D,cAAc,CAAC,WAAW,EAAE,IAAI,CAAC,0BAA0B,EAAE,QAAQ,GAAG,WAAW,CAAC;IAU3F,0EAA0E;IACnE,OAAO;CASf"}

package/dist/browser/frame.js

@@ -185,21 +185,22 @@ export class AndcoButtonBridge {
         this.iframe.contentWindow?.postMessage(message, this.url.origin);
     }
     /**
-     * Resolves a deferred authorization request from the hosted button.
+     * Resolves a deferred presentation the hosted button asked this side to prepare — an
+     * authorization or an Intent, which is why it is not named after either.
      * Omit the URL to close the pending popup after resolution fails.
      *
      * @example
      * ```ts
-     * bridge.resolveAuthorization(presentationId, "https://app.example.com/oauth/start");
+     * bridge.resolvePresentation(presentationId, "https://app.example.com/oauth/start");
      * ```
      */
-    resolveAuthorization(presentationId, authorizationUrl) {
+    resolvePresentation(presentationId, url) {
         const message = {
             protocol: ANDCO_SDK_PROTOCOL,
             version: ANDCO_PROTOCOL_VERSION,
-            type: "authorization-response",
+            type: "presentation-response",
             presentationId,
-            authorizationUrl: authorizationUrl?.toString(),
+            url: url?.toString(),
         };
         this.post(message);
     }

package/dist/browser/index.d.ts

@@ -1,15 +1,21 @@
 import { AndcoClient, type AndcoClientOptions } from "../client.js";
 import type { AndcoAuthorizationRequest } from "../oauth.js";
-import type { AndcoPresenter } from "../presenter.js";
+import { type AndcoPresenter } from "../presenter.js";
 export { AndcoButtonController, type AndcoButtonControllerOptions, type AndcoButtonFlow, type AndcoButtonSnapshot, type AndcoButtonStatus, } from "./controller.js";
 export { AndcoButtonBridge, type AndcoFrameOptions } from "./frame.js";
 export { type AndcoPopupMessage, type AndcoPopupWindow, type AndcoRelayOutcome, andcoPopupPresentationId, isAndcoNativeHost, openAndcoPopup, openAndcoPopupWindow, relayAndcoPopupCallback, } from "./popup.js";
 /**
- * Presents an authorization in a browser.
+ * Presents an authorization or an Intent in a browser.
  *
- * It detects the first-party Andco Host and routes over the native bridge instead of opening a
- * window, so a Miniapp runs the same build in a browser tab and inside the Host without branching
- * on the platform. That is why there is no mobile presenter and no mobile builder.
+ * A browser treats both alike — one window, one callback — so it reads `kind` only to refuse what
+ * it cannot do. It detects the first-party Andco Host and routes over the native bridge instead of
+ * opening a window, so a Miniapp runs the same build in a browser tab and inside the Host without
+ * branching on the platform. That is why there is no mobile presenter and no mobile builder.
+ *
+ * The window opens *before* the destination is resolved. A browser grants `window.open` only during
+ * a user activation, and both flows need a server round trip to learn where the window should go:
+ * an authorization may be pushed, and an Intent is created on demand. Resolving first is what got
+ * the window blocked.
  */
 export declare function browserPresenter(): AndcoPresenter;
 export type AndcoBrowserOptions = Omit<AndcoClientOptions, "presenter" | "source" | "clientSecret"> & {

package/dist/browser/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/browser/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,KAAK,kBAAkB,EAAE,MAAM,cAAc,CAAC;AAIpE,OAAO,KAAK,EAAE,yBAAyB,EAAc,MAAM,aAAa,CAAC;AACzE,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AAItD,OAAO,EACL,qBAAqB,EACrB,KAAK,4BAA4B,EACjC,KAAK,eAAe,EACpB,KAAK,mBAAmB,EACxB,KAAK,iBAAiB,GACvB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAAE,iBAAiB,EAAE,KAAK,iBAAiB,EAAE,MAAM,YAAY,CAAC;AACvE,OAAO,EACL,KAAK,iBAAiB,EACtB,KAAK,gBAAgB,EACrB,KAAK,iBAAiB,EACtB,wBAAwB,EACxB,iBAAiB,EACjB,cAAc,EACd,oBAAoB,EACpB,uBAAuB,GACxB,MAAM,YAAY,CAAC;AAEpB;;;;;;GAMG;AACH,wBAAgB,gBAAgB,IAAI,cAAc,CAyBjD;AAED,MAAM,MAAM,mBAAmB,GAAG,IAAI,CAAC,kBAAkB,EAAE,WAAW,GAAG,QAAQ,GAAG,cAAc,CAAC,GAAG;IACpG,8EAA8E;IAC9E,YAAY,CAAC,EAAE,KAAK,CAAC;IACrB,SAAS,CAAC,EAAE,cAAc,CAAC;IAC3B,iGAAiG;IACjG,kBAAkB,CAAC,EAAE,OAAO,CAAC;IAC7B,uGAAuG;IACvG,kBAAkB,CAAC,EAAE,OAAO,CAAC;IAC7B,uEAAuE;IACvE,UAAU,CAAC,EAAE,CAAC,GAAG,EAAE,GAAG,KAAK,IAAI,CAAC;IAChC,+FAA+F;IAC/F,kBAAkB,CAAC,EAAE,OAAO,CAAC;CAC9B,CAAC;AAIF;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,wBAAgB,6BAA6B,CAAC,OAAO,EAAE,mBAAmB,GAAG,WAAW,CAmBvF;AA0CD,6FAA6F;AAC7F,wBAAgB,qBAAqB,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,yBAAyB,EAAE,OAAO,CAAC,EAAE,OAAO,GAAG,IAAI,CAMnH"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/browser/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,KAAK,kBAAkB,EAAE,MAAM,cAAc,CAAC;AAIpE,OAAO,KAAK,EAAE,yBAAyB,EAAc,MAAM,aAAa,CAAC;AACzE,OAAO,EAAE,KAAK,cAAc,EAAkB,MAAM,iBAAiB,CAAC;AAItE,OAAO,EACL,qBAAqB,EACrB,KAAK,4BAA4B,EACjC,KAAK,eAAe,EACpB,KAAK,mBAAmB,EACxB,KAAK,iBAAiB,GACvB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAAE,iBAAiB,EAAE,KAAK,iBAAiB,EAAE,MAAM,YAAY,CAAC;AACvE,OAAO,EACL,KAAK,iBAAiB,EACtB,KAAK,gBAAgB,EACrB,KAAK,iBAAiB,EACtB,wBAAwB,EACxB,iBAAiB,EACjB,cAAc,EACd,oBAAoB,EACpB,uBAAuB,GACxB,MAAM,YAAY,CAAC;AAEpB;;;;;;;;;;;;GAYG;AACH,wBAAgB,gBAAgB,IAAI,cAAc,CAqCjD;AAED,MAAM,MAAM,mBAAmB,GAAG,IAAI,CAAC,kBAAkB,EAAE,WAAW,GAAG,QAAQ,GAAG,cAAc,CAAC,GAAG;IACpG,8EAA8E;IAC9E,YAAY,CAAC,EAAE,KAAK,CAAC;IACrB,SAAS,CAAC,EAAE,cAAc,CAAC;IAC3B,iGAAiG;IACjG,kBAAkB,CAAC,EAAE,OAAO,CAAC;IAC7B,uGAAuG;IACvG,kBAAkB,CAAC,EAAE,OAAO,CAAC;IAC7B,uEAAuE;IACvE,UAAU,CAAC,EAAE,CAAC,GAAG,EAAE,GAAG,KAAK,IAAI,CAAC;IAChC,+FAA+F;IAC/F,kBAAkB,CAAC,EAAE,OAAO,CAAC;CAC9B,CAAC;AAIF;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,wBAAgB,6BAA6B,CAAC,OAAO,EAAE,mBAAmB,GAAG,WAAW,CAmBvF;AA0CD,6FAA6F;AAC7F,wBAAgB,qBAAqB,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,yBAAyB,EAAE,OAAO,CAAC,EAAE,OAAO,GAAG,IAAI,CAMnH"}

package/dist/browser/index.js

@@ -1,24 +1,34 @@
 import { AndcoClient } from "../client.js";
 import { ANDCO_ERROR_CODES, Result } from "../errors.js";
+import { PRESENT_TARGET } from "../presenter.js";
 import { WebStorage } from "../storage.js";
-import { andcoPopupPresentationId, isAndcoNativeHost, openAndcoPopup, relayAndcoPopupCallback } from "./popup.js";
+import { andcoPopupPresentationId, isAndcoNativeHost, openAndcoPopupWindow, relayAndcoPopupCallback } from "./popup.js";
 export { AndcoButtonController, } from "./controller.js";
 export { AndcoButtonBridge } from "./frame.js";
 export { andcoPopupPresentationId, isAndcoNativeHost, openAndcoPopup, openAndcoPopupWindow, relayAndcoPopupCallback, } from "./popup.js";
 /**
- * Presents an authorization in a browser.
+ * Presents an authorization or an Intent in a browser.
  *
- * It detects the first-party Andco Host and routes over the native bridge instead of opening a
- * window, so a Miniapp runs the same build in a browser tab and inside the Host without branching
- * on the platform. That is why there is no mobile presenter and no mobile builder.
+ * A browser treats both alike — one window, one callback — so it reads `kind` only to refuse what
+ * it cannot do. It detects the first-party Andco Host and routes over the native bridge instead of
+ * opening a window, so a Miniapp runs the same build in a browser tab and inside the Host without
+ * branching on the platform. That is why there is no mobile presenter and no mobile builder.
+ *
+ * The window opens *before* the destination is resolved. A browser grants `window.open` only during
+ * a user activation, and both flows need a server round trip to learn where the window should go:
+ * an authorization may be pushed, and an Intent is created on demand. Resolving first is what got
+ * the window blocked.
  */
 export function browserPresenter() {
     return {
         async present(options) {
             if (typeof window === "undefined")
                 return Result.fail(ANDCO_ERROR_CODES.BROWSER_REQUIRED);
-            if (options.presentation === "redirect") {
-                window.location.assign(options.url.href);
+            if (options.kind === "oauth" && options.presentation === "redirect") {
+                const resolved = await PRESENT_TARGET(options.url);
+                if (resolved.error)
+                    return Result.fail(resolved.error);
+                window.location.assign(resolved.data.href);
                 // The document is being replaced. The result arrives on the next load, not here.
                 return Result.ok(null);
             }
@@ -27,12 +37,22 @@ export function browserPresenter() {
                     message: "the native Host cannot present a popup without navigating the Miniapp",
                 });
             }
-            return openAndcoPopup({
-                url: options.url,
+            const popup = openAndcoPopupWindow({
                 presentationId: options.presentationId,
                 expectedOrigin: options.returnTo.origin,
                 signal: options.signal,
             });
+            // Abandon before the server work: a blocked window that still started an authorization or
+            // created an Intent would leave a transaction nobody can complete.
+            if (popup.blocked)
+                return Result.fail(ANDCO_ERROR_CODES.POPUP_BLOCKED);
+            const resolved = await PRESENT_TARGET(options.url);
+            if (resolved.error) {
+                popup.close();
+                return Result.fail(resolved.error);
+            }
+            popup.navigate(resolved.data);
+            return popup.result;
         },
     };
 }

package/dist/browser/popup.d.ts

@@ -41,7 +41,8 @@ export declare function isAndcoNativeHost(): boolean;
  */
 export declare function andcoPopupPresentationId(): string | null;
 /**
- * Hands this document's callback to the window that opened it, then closes.
+ * Hands this document's callback — an authorization or an Intent outcome — to the window that
+ * opened it, then closes.
  *
  * The popup cannot complete the exchange itself: the PKCE verifier was generated by the opener and
  * never left it. So this is a courier, not a consumer — it carries the callback URL back and dies.

package/dist/browser/popup.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"popup.d.ts","sourceRoot":"","sources":["../../src/browser/popup.ts"],"names":[],"mappings":"AAOA,OAAO,EAAqB,UAAU,EAAE,MAAM,EAAE,MAAM,cAAc,CAAC;AAMrE,mGAAmG;AACnG,MAAM,MAAM,iBAAiB,GAAG;IAC9B,QAAQ,EAAE,OAAO,CAAC;IAClB,OAAO,EAAE,CAAC,CAAC;IACX,cAAc,EAAE,MAAM,CAAC;IACvB,WAAW,EAAE,MAAM,CAAC;CACrB,CAAC;AAEF,mEAAmE;AACnE,MAAM,MAAM,iBAAiB,GACzB;IAAE,MAAM,EAAE,cAAc,CAAA;CAAE,GAC1B;IAAE,MAAM,EAAE,WAAW,CAAA;CAAE,GACvB;IAAE,MAAM,EAAE,SAAS,CAAC;IAAC,cAAc,EAAE,MAAM,CAAA;CAAE,GAC7C;IAAE,MAAM,EAAE,UAAU,CAAC;IAAC,KAAK,EAAE,UAAU,CAAA;CAAE,CAAC;AAE9C,OAAO,CAAC,MAAM,CAAC;IACb,UAAU,MAAM;QACd,uEAAuE;QACvE,qBAAqB,CAAC,EAAE,OAAO,CAAC;QAChC,sFAAsF;QACtF,8BAA8B,CAAC,EAAE,OAAO,CAAC;QACzC,kBAAkB,CAAC,EAAE;YAAE,WAAW,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAA;SAAE,CAAC;KAC7D;CACF;AAED,yEAAyE;AACzE,wBAAgB,iBAAiB,IAAI,OAAO,CAM3C;AAED;;;;;;;GAOG;AACH,wBAAgB,wBAAwB,IAAI,MAAM,GAAG,IAAI,CAMxD;AAED;;;;;;;;;GASG;AACH,wBAAgB,uBAAuB,CACrC,cAAc,EAAE,WAAW,CAAC,MAAM,CAAC,EACnC,OAAO,GAAE;IACP;;;;;;OAMG;IACH,WAAW,CAAC,EAAE,MAAM,GAAG,GAAG,CAAC;CACvB,GACL,iBAAiB,CAkCnB;AAsBD,sFAAsF;AACtF,MAAM,MAAM,gBAAgB,GAAG;IAC7B;;;;;OAKG;IACH,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,6DAA6D;IAC7D,QAAQ,CAAC,GAAG,EAAE,GAAG,GAAG,IAAI,CAAC;IACzB,2EAA2E;IAC3E,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC;IAC7C,KAAK,IAAI,IAAI,CAAC;CACf,CAAC;AAEF;;;;;;;;;;;;;GAaG;AACH,wBAAgB,oBAAoB,CAAC,OAAO,EAAE;IAC5C,cAAc,EAAE,MAAM,CAAC;IACvB,cAAc,EAAE,MAAM,CAAC;IACvB,GAAG,CAAC,EAAE,GAAG,CAAC;IACV,MAAM,CAAC,EAAE,WAAW,CAAC;CACtB,GAAG,gBAAgB,CA+DnB;AAED,oFAAoF;AACpF,wBAAgB,cAAc,CAAC,OAAO,EAAE;IACtC,GAAG,EAAE,GAAG,CAAC;IACT,cAAc,EAAE,MAAM,CAAC;IACvB,cAAc,EAAE,MAAM,CAAC;IACvB,MAAM,CAAC,EAAE,WAAW,CAAC;CACtB,GAAG,OAAO,CAAC,MAAM,CAAC,GAAG,GAAG,IAAI,CAAC,CAAC,CAE9B"}
+{"version":3,"file":"popup.d.ts","sourceRoot":"","sources":["../../src/browser/popup.ts"],"names":[],"mappings":"AAOA,OAAO,EAAqB,UAAU,EAAE,MAAM,EAAE,MAAM,cAAc,CAAC;AAMrE,mGAAmG;AACnG,MAAM,MAAM,iBAAiB,GAAG;IAC9B,QAAQ,EAAE,OAAO,CAAC;IAClB,OAAO,EAAE,CAAC,CAAC;IACX,cAAc,EAAE,MAAM,CAAC;IACvB,WAAW,EAAE,MAAM,CAAC;CACrB,CAAC;AAEF,mEAAmE;AACnE,MAAM,MAAM,iBAAiB,GACzB;IAAE,MAAM,EAAE,cAAc,CAAA;CAAE,GAC1B;IAAE,MAAM,EAAE,WAAW,CAAA;CAAE,GACvB;IAAE,MAAM,EAAE,SAAS,CAAC;IAAC,cAAc,EAAE,MAAM,CAAA;CAAE,GAC7C;IAAE,MAAM,EAAE,UAAU,CAAC;IAAC,KAAK,EAAE,UAAU,CAAA;CAAE,CAAC;AAE9C,OAAO,CAAC,MAAM,CAAC;IACb,UAAU,MAAM;QACd,uEAAuE;QACvE,qBAAqB,CAAC,EAAE,OAAO,CAAC;QAChC,sFAAsF;QACtF,8BAA8B,CAAC,EAAE,OAAO,CAAC;QACzC,kBAAkB,CAAC,EAAE;YAAE,WAAW,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAA;SAAE,CAAC;KAC7D;CACF;AAED,yEAAyE;AACzE,wBAAgB,iBAAiB,IAAI,OAAO,CAM3C;AAED;;;;;;;GAOG;AACH,wBAAgB,wBAAwB,IAAI,MAAM,GAAG,IAAI,CAMxD;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,uBAAuB,CACrC,cAAc,EAAE,WAAW,CAAC,MAAM,CAAC,EACnC,OAAO,GAAE;IACP;;;;;;OAMG;IACH,WAAW,CAAC,EAAE,MAAM,GAAG,GAAG,CAAC;CACvB,GACL,iBAAiB,CAyCnB;AA6BD,sFAAsF;AACtF,MAAM,MAAM,gBAAgB,GAAG;IAC7B;;;;;OAKG;IACH,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,6DAA6D;IAC7D,QAAQ,CAAC,GAAG,EAAE,GAAG,GAAG,IAAI,CAAC;IACzB,2EAA2E;IAC3E,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC;IAC7C,KAAK,IAAI,IAAI,CAAC;CACf,CAAC;AAEF;;;;;;;;;;;;;GAaG;AACH,wBAAgB,oBAAoB,CAAC,OAAO,EAAE;IAC5C,cAAc,EAAE,MAAM,CAAC;IACvB,cAAc,EAAE,MAAM,CAAC;IACvB,GAAG,CAAC,EAAE,GAAG,CAAC;IACV,MAAM,CAAC,EAAE,WAAW,CAAC;CACtB,GAAG,gBAAgB,CA+DnB;AAED,oFAAoF;AACpF,wBAAgB,cAAc,CAAC,OAAO,EAAE;IACtC,GAAG,EAAE,GAAG,CAAC;IACT,cAAc,EAAE,MAAM,CAAC;IACvB,cAAc,EAAE,MAAM,CAAC;IACvB,MAAM,CAAC,EAAE,WAAW,CAAC;CACtB,GAAG,OAAO,CAAC,MAAM,CAAC,GAAG,GAAG,IAAI,CAAC,CAAC,CAE9B"}

package/dist/browser/popup.js

@@ -28,7 +28,8 @@ export function andcoPopupPresentationId() {
     return PRESENTATION_ID_PATTERN.test(presentationId) ? presentationId : null;
 }
 /**
- * Hands this document's callback to the window that opened it, then closes.
+ * Hands this document's callback — an authorization or an Intent outcome — to the window that
+ * opened it, then closes.
  *
  * The popup cannot complete the exchange itself: the PKCE verifier was generated by the opener and
  * never left it. So this is a courier, not a consumer — it carries the callback URL back and dies.
@@ -41,7 +42,11 @@ export function relayAndcoPopupCallback(allowedOrigins, options = {}) {
     if (typeof window === "undefined")
         return { status: "not_callback" };
     const url = options.callbackUrl ? new URL(options.callbackUrl, window.location.href) : new URL(window.location.href);
-    const isCallback = Boolean(options.callbackUrl) || url.searchParams.has("code") || url.searchParams.has("error");
+    const isCallback = Boolean(options.callbackUrl) ||
+        url.searchParams.has("code") ||
+        url.searchParams.has("error") ||
+        // An Intent callback carries no authorization code; its outcome is the whole payload.
+        url.searchParams.has("andco_intent_result");
     if (!isCallback)
         return { status: "not_callback" };
     const presentationId = andcoPopupPresentationId();
@@ -62,8 +67,9 @@ export function relayAndcoPopupCallback(allowedOrigins, options = {}) {
     const message = openerOrigin === window.location.origin ? sdkMessage(presentationId, url) : protocolResult(presentationId, url);
     // Strip before leaving. If closing is refused, the code must not remain visible in the address
     // bar or in the window name.
-    for (const parameter of ["code", "state", "error", "error_description"])
+    for (const parameter of ["code", "state", "error", "error_description", "andco_intent_result", "intent_id"]) {
         url.searchParams.delete(parameter);
+    }
     window.history.replaceState(window.history.state, "", url);
     window.name = "";
     window.opener?.postMessage(message, openerOrigin);
@@ -75,6 +81,13 @@ function sdkMessage(presentationId, url) {
 }
 function protocolResult(presentationId, url) {
     const envelope = { protocol: ANDCO_SDK_PROTOCOL, version: ANDCO_PROTOCOL_VERSION, presentationId };
+    // An Intent reports a lifecycle outcome and nothing else. Whether money moved is read from the
+    // Resource Server afterwards, never carried in a window message.
+    const intent = url.searchParams.get("andco_intent_result");
+    if (intent === "complete")
+        return { ...envelope, type: "intent.complete" };
+    if (intent)
+        return { ...envelope, type: "intent.dismiss" };
     const code = url.searchParams.get("code");
     if (code)
         return { ...envelope, type: "oauth.authorization_code", authorizationCode: code };

package/dist/cli/index.d.ts

@@ -1,6 +1,6 @@
 import { AndcoClient, type AndcoClientOptions } from "../client.js";
 import { Result } from "../errors.js";
-import type { AndcoPresenter, AndcoPresentOptions } from "../presenter.js";
+import { type AndcoPresenter, type AndcoPresentOptions } from "../presenter.js";
 export type AndcoCliPresenterOptions = {
     /** Opens the authorization URL. Defaults to printing it, so nothing is assumed about the host. */
     open?: (url: URL) => void | Promise<void>;
@@ -12,6 +12,10 @@ export type AndcoCliPresenterOptions = {
 /**
  * Presents an authorization from a terminal, using a one-shot loopback receiver.
  *
+ * Intents are refused rather than mishandled: a terminal has no surface on which a person can
+ * review and confirm a financial operation, and rewriting `redirect_uri` — which is what this
+ * presenter does — is meaningless for an Intent.
+ *
  * Every command-line integrator needs this exact thing, and until now every one wrote it: bind a
  * loopback port, refuse anything that is not the registered path, check the state, answer once, and
  * shut down. The Andco CLI's own version is ninety lines. Getting any of it wrong — accepting a

package/dist/cli/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/cli/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,KAAK,kBAAkB,EAAE,MAAM,cAAc,CAAC;AAEpE,OAAO,EAAqB,MAAM,EAAE,MAAM,cAAc,CAAC;AACzD,OAAO,KAAK,EAAE,cAAc,EAAE,mBAAmB,EAAE,MAAM,iBAAiB,CAAC;AAG3E,MAAM,MAAM,wBAAwB,GAAG;IACrC,kGAAkG;IAClG,IAAI,CAAC,EAAE,CAAC,GAAG,EAAE,GAAG,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC1C,wEAAwE;IACxE,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,gFAAgF;IAChF,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;CACnC,CAAC;AAEF;;;;;;;;;;;;;;;;;;GAkBG;AACH,qBAAa,iBAAkB,YAAW,cAAc;IAC1C,OAAO,CAAC,QAAQ,CAAC,OAAO;gBAAP,OAAO,GAAE,wBAA6B;IAE7D,OAAO,CAAC,YAAY,EAAE,mBAAmB,GAAG,OAAO,CAAC,MAAM,CAAC,GAAG,GAAG,IAAI,CAAC,CAAC;CAiC9E;AAED,MAAM,MAAM,eAAe,GAAG,IAAI,CAAC,kBAAkB,EAAE,WAAW,CAAC,GAAG;IACpE,SAAS,CAAC,EAAE,cAAc,CAAC;CAC5B,CAAC;AAEF;;;;;;GAMG;AACH,wBAAgB,yBAAyB,CAAC,OAAO,EAAE,eAAe,GAAG,WAAW,CAE/E"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/cli/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,KAAK,kBAAkB,EAAE,MAAM,cAAc,CAAC;AAEpE,OAAO,EAAqB,MAAM,EAAE,MAAM,cAAc,CAAC;AACzD,OAAO,EAAE,KAAK,cAAc,EAAE,KAAK,mBAAmB,EAAkB,MAAM,iBAAiB,CAAC;AAGhG,MAAM,MAAM,wBAAwB,GAAG;IACrC,kGAAkG;IAClG,IAAI,CAAC,EAAE,CAAC,GAAG,EAAE,GAAG,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC1C,wEAAwE;IACxE,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,gFAAgF;IAChF,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;CACnC,CAAC;AAEF;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,qBAAa,iBAAkB,YAAW,cAAc;IAC1C,OAAO,CAAC,QAAQ,CAAC,OAAO;gBAAP,OAAO,GAAE,wBAA6B;IAE7D,OAAO,CAAC,YAAY,EAAE,mBAAmB,GAAG,OAAO,CAAC,MAAM,CAAC,GAAG,GAAG,IAAI,CAAC,CAAC;CAwC9E;AAED,MAAM,MAAM,eAAe,GAAG,IAAI,CAAC,kBAAkB,EAAE,WAAW,CAAC,GAAG;IACpE,SAAS,CAAC,EAAE,cAAc,CAAC;CAC5B,CAAC;AAEF;;;;;;GAMG;AACH,wBAAgB,yBAAyB,CAAC,OAAO,EAAE,eAAe,GAAG,WAAW,CAE/E"}

package/dist/cli/index.js

@@ -1,10 +1,15 @@
 import { AndcoClient } from "../client.js";
 import { isLoopback } from "../config.js";
 import { ANDCO_ERROR_CODES, Result } from "../errors.js";
+import { PRESENT_TARGET } from "../presenter.js";
 import { LoopbackServer } from "./server.js";
 /**
  * Presents an authorization from a terminal, using a one-shot loopback receiver.
  *
+ * Intents are refused rather than mishandled: a terminal has no surface on which a person can
+ * review and confirm a financial operation, and rewriting `redirect_uri` — which is what this
+ * presenter does — is meaningless for an Intent.
+ *
  * Every command-line integrator needs this exact thing, and until now every one wrote it: bind a
  * loopback port, refuse anything that is not the registered path, check the state, answer once, and
  * shut down. The Andco CLI's own version is ninety lines. Getting any of it wrong — accepting a
@@ -27,6 +32,11 @@ export class AndcoCliPresenter {
         this.options = options;
     }
     async present(presentation) {
+        if (presentation.kind === "intent") {
+            return Result.fail(ANDCO_ERROR_CODES.PRESENTATION_UNSUPPORTED, {
+                message: "a terminal cannot present an Intent for review and confirmation",
+            });
+        }
         const configured = presentation.returnTo;
         if (configured.protocol !== "http:" || !isLoopback(configured)) {
             return Result.fail(ANDCO_ERROR_CODES.INVALID_CONFIGURATION, {
@@ -44,9 +54,12 @@ export class AndcoCliPresenter {
             });
         }
         try {
+            const resolved = await PRESENT_TARGET(presentation.url);
+            if (resolved.error)
+                return Result.fail(resolved.error);
             // The bound port may differ from the configured one when it asked for any free port, and the
             // authorization request must carry the exact URI the server will redirect to.
-            const url = new URL(presentation.url.href);
+            const url = new URL(resolved.data.href);
             url.searchParams.set("redirect_uri", receiver.redirectUri.href);
             if (this.options.open)
                 await this.options.open(url);

package/dist/client.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../src/client.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AACzD,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AACtC,OAAO,EAAE,KAAK,WAAW,EAAE,KAAK,gBAAgB,EAAyB,MAAM,aAAa,CAAC;AAC7F,OAAO,EAAE,KAAK,gBAAgB,EAAE,KAAK,YAAY,EAAyC,MAAM,kBAAkB,CAAC;AAEnH,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAC5C,OAAO,EAAE,KAAK,yBAAyB,EAAE,UAAU,EAAE,KAAK,kBAAkB,EAAE,MAAM,YAAY,CAAC;AACjG,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AACrD,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AACtC,OAAO,EAAE,KAAK,kBAAkB,EAAE,iBAAiB,EAAmB,MAAM,oBAAoB,CAAC;AACjG,OAAO,KAAK,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAE5D,oFAAoF;AACpF,MAAM,WAAW,mBAAmB,CAAC,MAAM;IACzC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B;;;;;;OAMG;IACH,GAAG,CAAC,WAAW,EAAE,gBAAgB,GAAG,MAAM,CAAC;CAC5C;AAED,kHAAkH;AAClH,MAAM,MAAM,YAAY,GAAG;IACzB,KAAK,EAAE,OAAO,UAAU,CAAC,KAAK,CAAC;IAC/B,+GAA+G;IAC/G,MAAM,EAAE,iBAAiB,CAAC;CAC3B,CAAC;AAEF,MAAM,MAAM,kBAAkB,GAAG,gBAAgB,GAAG;IAClD,4FAA4F;IAC5F,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,OAAO,CAAC,EAAE,OAAO,CAAC,YAAY,CAAC,CAAC;IAChC,0DAA0D;IAC1D,SAAS,CAAC,EAAE,kBAAkB,CAAC;IAC/B,wFAAwF;IACxF,SAAS,CAAC,EAAE,cAAc,CAAC;IAC3B,kEAAkE;IAClE,kBAAkB,CAAC,EAAE,CAAC,OAAO,EAAE,yBAAyB,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAClF,OAAO,CAAC,EAAE,YAAY,CAAC;IACvB,mGAAmG;IACnG,cAAc,CAAC,EAAE,YAAY,GAAG,IAAI,CAAC;IACrC,IAAI,CAAC,EAAE,SAAS,CAAC;IACjB,2FAA2F;IAC3F,MAAM,CAAC,EAAE,kBAAkB,CAAC;IAC5B,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB,CAAC;AAEF;;;;;;;;;;;;;;;;;;;GAmBG;AACH,qBAAa,WAAW;IACtB,SAAgB,MAAM,EAAE,WAAW,CAAC;IACpC,SAAgB,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5C,SAAgB,OAAO,EAAE,YAAY,CAAC;IACtC,SAAgB,KAAK,EAAE,UAAU,CAAC;IAClC,SAAgB,IAAI,EAAE,SAAS,CAAC;IAChC,SAAgB,OAAO,EAAE,YAAY,CAAC;IACtC,SAAgB,IAAI,EAAE,SAAS,CAAC;IAChC,SAAgB,OAAO,EAAE,iBAAiB,CAAC;IAC3C,mFAAmF;IACnF,SAAgB,QAAQ,EAAG,KAAK,CAAU;gBAEvB,OAAO,EAAE,kBAAkB;IAmC9C;;;;;;;;;;;;;;;;;;;;;OAqBG;IACI,IAAI,CAAC,WAAW,EAAE,gBAAgB,GAAG,YAAY,GAAG,MAAM,GAAG,iBAAiB;IAIrF;;;;;;;;;;;;;;;;;;OAkBG;IACI,UAAU,IAAI,iBAAiB;WAIxB,kBAAkB,CAAC,KAAK,EAAE,gBAAgB,GAAG,YAAY,GAAG,MAAM,GAAG,gBAAgB;CASpG;AAED;;;;;;GAMG;AACH,MAAM,MAAM,iBAAiB,GAAG,IAAI,CAAC,WAAW,EAAE,UAAU,GAAG,MAAM,GAAG,YAAY,CAAC,GACnF,gBAAgB,GAAG;IACjB,QAAQ,CAAC,QAAQ,EAAE,IAAI,CAAC;CACzB,CAAC"}
+{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../src/client.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AACzD,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AACtC,OAAO,EAAE,KAAK,WAAW,EAAE,KAAK,gBAAgB,EAAyB,MAAM,aAAa,CAAC;AAC7F,OAAO,EAAE,KAAK,gBAAgB,EAAE,KAAK,YAAY,EAAyC,MAAM,kBAAkB,CAAC;AAEnH,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAC5C,OAAO,EAAE,KAAK,yBAAyB,EAAE,UAAU,EAAE,KAAK,kBAAkB,EAAE,MAAM,YAAY,CAAC;AACjG,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AACrD,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AACtC,OAAO,EAAE,KAAK,kBAAkB,EAAE,iBAAiB,EAAmB,MAAM,oBAAoB,CAAC;AACjG,OAAO,KAAK,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAE5D,oFAAoF;AACpF,MAAM,WAAW,mBAAmB,CAAC,MAAM;IACzC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B;;;;;;OAMG;IACH,GAAG,CAAC,WAAW,EAAE,gBAAgB,GAAG,MAAM,CAAC;CAC5C;AAED,kHAAkH;AAClH,MAAM,MAAM,YAAY,GAAG;IACzB,KAAK,EAAE,OAAO,UAAU,CAAC,KAAK,CAAC;IAC/B,+GAA+G;IAC/G,MAAM,EAAE,iBAAiB,CAAC;CAC3B,CAAC;AAEF,MAAM,MAAM,kBAAkB,GAAG,gBAAgB,GAAG;IAClD,4FAA4F;IAC5F,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,OAAO,CAAC,EAAE,OAAO,CAAC,YAAY,CAAC,CAAC;IAChC,0DAA0D;IAC1D,SAAS,CAAC,EAAE,kBAAkB,CAAC;IAC/B,wFAAwF;IACxF,SAAS,CAAC,EAAE,cAAc,CAAC;IAC3B,kEAAkE;IAClE,kBAAkB,CAAC,EAAE,CAAC,OAAO,EAAE,yBAAyB,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAClF,OAAO,CAAC,EAAE,YAAY,CAAC;IACvB,mGAAmG;IACnG,cAAc,CAAC,EAAE,YAAY,GAAG,IAAI,CAAC;IACrC,IAAI,CAAC,EAAE,SAAS,CAAC;IACjB,2FAA2F;IAC3F,MAAM,CAAC,EAAE,kBAAkB,CAAC;IAC5B,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB,CAAC;AAEF;;;;;;;;;;;;;;;;;;;GAmBG;AACH,qBAAa,WAAW;IACtB,SAAgB,MAAM,EAAE,WAAW,CAAC;IACpC,SAAgB,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5C,SAAgB,OAAO,EAAE,YAAY,CAAC;IACtC,SAAgB,KAAK,EAAE,UAAU,CAAC;IAClC,SAAgB,IAAI,EAAE,SAAS,CAAC;IAChC,SAAgB,OAAO,EAAE,YAAY,CAAC;IACtC,SAAgB,IAAI,EAAE,SAAS,CAAC;IAChC,SAAgB,OAAO,EAAE,iBAAiB,CAAC;IAC3C,mFAAmF;IACnF,SAAgB,QAAQ,EAAG,KAAK,CAAU;gBAEvB,OAAO,EAAE,kBAAkB;IA6C9C;;;;;;;;;;;;;;;;;;;;;OAqBG;IACI,IAAI,CAAC,WAAW,EAAE,gBAAgB,GAAG,YAAY,GAAG,MAAM,GAAG,iBAAiB;IAIrF;;;;;;;;;;;;;;;;;;OAkBG;IACI,UAAU,IAAI,iBAAiB;WAIxB,kBAAkB,CAAC,KAAK,EAAE,gBAAgB,GAAG,YAAY,GAAG,MAAM,GAAG,gBAAgB;CASpG;AAED;;;;;;GAMG;AACH,MAAM,MAAM,iBAAiB,GAAG,IAAI,CAAC,WAAW,EAAE,UAAU,GAAG,MAAM,GAAG,YAAY,CAAC,GACnF,gBAAgB,GAAG;IACjB,QAAQ,CAAC,QAAQ,EAAE,IAAI,CAAC;CACzB,CAAC"}

package/dist/client.js

@@ -61,15 +61,25 @@ export class AndcoClient {
             source: options.source,
             persist: options.persist,
         });
+        // One presenter for the whole instance: authorization and Intent are the same seam, so a
+        // runtime that can present one can present the other. Not public — nothing outside the
+        // instance chooses how it presents, and every mirror of this type would have to carry it.
+        const presenter = options.presenter ?? statelessPresenter();
         this.auth = new AndcoAuth({
+            config: this.config,
             oauth: this.oauth,
             store: this.session,
-            presenter: options.presenter ?? statelessPresenter(),
+            presenter,
             persistTransaction: options.persistTransaction,
             crypto: this.globals.crypto,
         });
         this.rest = new AndcoRest({ config: this.config, fetch: this.globals.fetch, credentials: this.session });
-        this.intents = new AndcoIntents(this.rest, this.globals.crypto);
+        this.intents = new AndcoIntents({
+            rest: this.rest,
+            config: this.config,
+            presenter,
+            crypto: this.globals.crypto,
+        });
     }
     /**
      * Binds *explicit* credentials for one unit of work, owning its own REST surface.
@@ -160,11 +170,13 @@ class AndcoAuthedClientImpl {
         this.globals = owner.globals;
         this.oauth = owner.oauth;
         this.rest = new AndcoRest({ config: owner.config, fetch: owner.globals.fetch, credentials });
-        this.intents = new AndcoIntents(this.rest, owner.globals.crypto);
+        // No presenter: `with(...)` is the per-request server shape, and a request presents nothing.
+        this.intents = new AndcoIntents({ rest: this.rest, config: owner.config, crypto: owner.globals.crypto });
         // In-memory and unlinked from `credentials`: it exists only so `auth` has something to operate
         // on, since a bare token or a caller-supplied resolver carries no persistable session shape.
         this.session = new AndcoSessionStore({ config: owner.config, oauth: owner.oauth, persist: false });
         this.auth = new AndcoAuth({
+            config: owner.config,
             oauth: owner.oauth,
             store: this.session,
             presenter: statelessPresenter(),

package/dist/index.d.ts

@@ -4,9 +4,9 @@ export { AndcoClient, type AndcoClientAuthed, type AndcoClientOptions, type Andc
 export { AndcoConfig, type AndcoConfigInput, type AndcoScope, type AndcoTheme, isLoopback, } from "./config.js";
 export { ANDCO_REFRESH_SKEW_SECONDS, type AndcoCredentials, type AndcoSession, type AndcoUser, credentialsFromSession, isCredentials, isExpired, sessionIdentityKey, tokenFor, } from "./credentials.js";
 export { ANDCO_ERROR_CODES, AndcoAPIError, AndcoError, Result } from "./errors.js";
-export { type AndcoEventPage, type AndcoEventSubscriptionOptions, type AndcoFinancialEvent, type AndcoIntent, type AndcoIntentCreateOptions, type AndcoIntentId, AndcoIntents, } from "./intents.js";
+export { type AndcoEventPage, type AndcoEventSubscriptionOptions, type AndcoFinancialEvent, type AndcoIntent, type AndcoIntentCreateOptions, type AndcoIntentId, type AndcoIntentPresentOptions, AndcoIntents, type AndcoIntentsOptions, type AndcoPresentationResult, } from "./intents.js";
 export { type AndcoAuthorizationDetail, type AndcoAuthorizationOptions, type AndcoAuthorizationRequest, type AndcoDeviceAuthorization, AndcoOAuth, type AndcoOAuthOptions, type AndcoResourceAuthorization, type AndcoTransportMode, } from "./oauth.js";
-export type { AndcoPresentation, AndcoPresenter, AndcoPresentOptions } from "./presenter.js";
+export { type AndcoPresentation, type AndcoPresenter, type AndcoPresentIntent, type AndcoPresentOAuth, type AndcoPresentOptions, type AndcoPresentTarget, PRESENT_TARGET, } from "./presenter.js";
 export { type AndcoHttpClient, type AndcoPageOptions, type AndcoRequestOptions, AndcoRest, type AndcoRestOptions, } from "./rest.js";
 export { type AndcoSessionSource, AndcoSessionStore, type AndcoSessionStoreOptions } from "./session-store.js";
 export { type AndcoLock, type AndcoStorage, InProcessLock, MemoryStorage, WebStorage, } from "./storage.js";

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AAC9C,OAAO,EAAE,SAAS,EAAE,KAAK,gBAAgB,EAAE,KAAK,kBAAkB,EAAE,MAAM,WAAW,CAAC;AACtF,OAAO,EACL,WAAW,EACX,KAAK,iBAAiB,EACtB,KAAK,kBAAkB,EACvB,KAAK,YAAY,EACjB,KAAK,mBAAmB,GACzB,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,WAAW,EACX,KAAK,gBAAgB,EACrB,KAAK,UAAU,EACf,KAAK,UAAU,EACf,UAAU,GACX,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,0BAA0B,EAC1B,KAAK,gBAAgB,EACrB,KAAK,YAAY,EACjB,KAAK,SAAS,EACd,sBAAsB,EACtB,aAAa,EACb,SAAS,EACT,kBAAkB,EAClB,QAAQ,GACT,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,iBAAiB,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AACnF,OAAO,EACL,KAAK,cAAc,EACnB,KAAK,6BAA6B,EAClC,KAAK,mBAAmB,EACxB,KAAK,WAAW,EAChB,KAAK,wBAAwB,EAC7B,KAAK,aAAa,EAClB,YAAY,GACb,MAAM,cAAc,CAAC;AACtB,OAAO,EACL,KAAK,wBAAwB,EAC7B,KAAK,yBAAyB,EAC9B,KAAK,yBAAyB,EAC9B,KAAK,wBAAwB,EAC7B,UAAU,EACV,KAAK,iBAAiB,EACtB,KAAK,0BAA0B,EAC/B,KAAK,kBAAkB,GACxB,MAAM,YAAY,CAAC;AACpB,YAAY,EAAE,iBAAiB,EAAE,cAAc,EAAE,mBAAmB,EAAE,MAAM,gBAAgB,CAAC;AAC7F,OAAO,EACL,KAAK,eAAe,EACpB,KAAK,gBAAgB,EACrB,KAAK,mBAAmB,EACxB,SAAS,EACT,KAAK,gBAAgB,GACtB,MAAM,WAAW,CAAC;AACnB,OAAO,EAAE,KAAK,kBAAkB,EAAE,iBAAiB,EAAE,KAAK,wBAAwB,EAAE,MAAM,oBAAoB,CAAC;AAC/G,OAAO,EACL,KAAK,SAAS,EACd,KAAK,YAAY,EACjB,aAAa,EACb,aAAa,EACb,UAAU,GACX,MAAM,cAAc,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AAC9C,OAAO,EAAE,SAAS,EAAE,KAAK,gBAAgB,EAAE,KAAK,kBAAkB,EAAE,MAAM,WAAW,CAAC;AACtF,OAAO,EACL,WAAW,EACX,KAAK,iBAAiB,EACtB,KAAK,kBAAkB,EACvB,KAAK,YAAY,EACjB,KAAK,mBAAmB,GACzB,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,WAAW,EACX,KAAK,gBAAgB,EACrB,KAAK,UAAU,EACf,KAAK,UAAU,EACf,UAAU,GACX,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,0BAA0B,EAC1B,KAAK,gBAAgB,EACrB,KAAK,YAAY,EACjB,KAAK,SAAS,EACd,sBAAsB,EACtB,aAAa,EACb,SAAS,EACT,kBAAkB,EAClB,QAAQ,GACT,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,iBAAiB,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AACnF,OAAO,EACL,KAAK,cAAc,EACnB,KAAK,6BAA6B,EAClC,KAAK,mBAAmB,EACxB,KAAK,WAAW,EAChB,KAAK,wBAAwB,EAC7B,KAAK,aAAa,EAClB,KAAK,yBAAyB,EAC9B,YAAY,EACZ,KAAK,mBAAmB,EACxB,KAAK,uBAAuB,GAC7B,MAAM,cAAc,CAAC;AACtB,OAAO,EACL,KAAK,wBAAwB,EAC7B,KAAK,yBAAyB,EAC9B,KAAK,yBAAyB,EAC9B,KAAK,wBAAwB,EAC7B,UAAU,EACV,KAAK,iBAAiB,EACtB,KAAK,0BAA0B,EAC/B,KAAK,kBAAkB,GACxB,MAAM,YAAY,CAAC;AACpB,OAAO,EACL,KAAK,iBAAiB,EACtB,KAAK,cAAc,EACnB,KAAK,kBAAkB,EACvB,KAAK,iBAAiB,EACtB,KAAK,mBAAmB,EACxB,KAAK,kBAAkB,EACvB,cAAc,GACf,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,KAAK,eAAe,EACpB,KAAK,gBAAgB,EACrB,KAAK,mBAAmB,EACxB,SAAS,EACT,KAAK,gBAAgB,GACtB,MAAM,WAAW,CAAC;AACnB,OAAO,EAAE,KAAK,kBAAkB,EAAE,iBAAiB,EAAE,KAAK,wBAAwB,EAAE,MAAM,oBAAoB,CAAC;AAC/G,OAAO,EACL,KAAK,SAAS,EACd,KAAK,YAAY,EACjB,aAAa,EACb,aAAa,EACb,UAAU,GACX,MAAM,cAAc,CAAC"}

package/dist/index.js

@@ -6,6 +6,7 @@ export { ANDCO_REFRESH_SKEW_SECONDS, credentialsFromSession, isCredentials, isEx
 export { ANDCO_ERROR_CODES, AndcoAPIError, AndcoError, Result } from "./errors.js";
 export { AndcoIntents, } from "./intents.js";
 export { AndcoOAuth, } from "./oauth.js";
+export { PRESENT_TARGET, } from "./presenter.js";
 export { AndcoRest, } from "./rest.js";
 export { AndcoSessionStore } from "./session-store.js";
 export { InProcessLock, MemoryStorage, WebStorage, } from "./storage.js";

package/dist/intents.d.ts

@@ -1,6 +1,8 @@
 import { type AndCoRandomSource } from "@andco/protocol";
 import { type AndCoEventPage, type AndCoFinancialEvent, type AndCoIntent } from "@andco/protocol/transport";
+import type { AndcoConfig } from "./config.js";
 import { Result } from "./errors.js";
+import type { AndcoPresentation, AndcoPresenter } from "./presenter.js";
 import type { AndcoRest } from "./rest.js";
 export type { AndCoEventPage as AndcoEventPage, AndCoFinancialEvent as AndcoFinancialEvent, AndCoIntent as AndcoIntent, };
 /** An intent identifier, or a factory that produces one after the user activates a launcher. */
@@ -9,6 +11,37 @@ export type AndcoIntentCreateOptions = {
     /** A stable transport key. One is generated when omitted. */
     idempotencyKey?: string;
 };
+export type AndcoIntentsOptions = {
+    rest: AndcoRest;
+    /**
+     * Required to present. A Resource Server Definition that composes this lifecycle omits it and
+     * gets creation, reads, events and subscriptions — presentation belongs to the Andco Instance.
+     */
+    config?: AndcoConfig;
+    presenter?: AndcoPresenter;
+    crypto?: AndCoRandomSource;
+};
+/** Everything a caller may vary for one Intent Presentation. */
+export type AndcoIntentPresentOptions = {
+    /** An id, or a factory resolved *after* the presenter has its window. */
+    intentId: AndcoIntentId;
+    /** Exact callback Andco returns to. Defaults to the instance's registered `redirectTo`. */
+    returnTo?: string | URL;
+    /** Exact callback reached on dismissal. Defaults to `returnTo`; both must share one origin. */
+    errorReturnTo?: string | URL;
+    signal?: AbortSignal;
+};
+/**
+ * The authoritative outcome of one Intent Presentation.
+ *
+ * `outcome` is what the window reported; `intent` is what the Resource Server says. Only the second
+ * one is money. They are both here because an application needs to tell "the user walked away" from
+ * "the user finished and it is still processing", and the read alone cannot say which.
+ */
+export type AndcoPresentationResult<T = AndCoIntent> = {
+    outcome: "complete" | "dismiss";
+    intent: T;
+};
 export type AndcoEventSubscriptionOptions = {
     /** Resume after a checkpoint this subject's subscription previously acknowledged. */
     after?: string;
@@ -38,7 +71,7 @@ export type AndcoEventSubscriptionOptions = {
  */
 export declare class AndcoIntents {
     #private;
-    constructor(rest: AndcoRest, crypto?: AndCoRandomSource);
+    constructor(options: AndcoIntentsOptions);
     /**
      * Creates an Intent of the given type. The exact Grant determines what it may do and where.
      *
@@ -51,6 +84,43 @@ export declare class AndcoIntents {
      * Definition names its own response type here.
      */
     create<T = AndCoIntent>(type: string, input: object, options?: AndcoIntentCreateOptions): Promise<Result<T>>;
+    /**
+     * The Andco-owned URL that presents one Intent, with its callbacks bound.
+     *
+     * Published rather than folded into `present` because the Hosted Intent Button needs the same URL
+     * with a different `state`: its callback returns to the widget that opened the window, not to
+     * this document. Two constructions of one URL is precisely the drift ADR-0014 records, and a bare
+     * `authorization_url` is an input to presentation, not a destination — Platform renders a 404 for
+     * any of the four parameters below that is missing.
+     */
+    presentationURL(options: {
+        intentId: string;
+        presentation: AndcoPresentation;
+        returnTo: URL;
+        errorReturnTo: URL;
+        state: string;
+    }): Promise<Result<URL>>;
+    /**
+     * Presents one Intent and answers with its authoritative outcome.
+     *
+     * This is the Direct Popup Presentation: the programmatic path for UI that cannot mount a Hosted
+     * Intent Button. It owns the whole interaction — the window, the four callback parameters, the
+     * correlation, and the read afterwards — so that no Project has to reach for a window primitive
+     * to complete a financial operation.
+     *
+     * The Intent is read again once the window settles, because a callback reports that a window
+     * finished and that is not the same fact as a completed deposit. A dismissal is read too: the
+     * user may have closed the window on an operation the bank had already accepted.
+     *
+     * @example
+     * ```ts
+     * const { data, error } = await andco.intents.present<AndCoDepositIntent>({
+     *   intentId: async () => (await bank.intents.createDeposit(input)).data.id,
+     * });
+     * if (data?.outcome === "complete") refreshBalance();
+     * ```
+     */
+    present<T = AndCoIntent>(options: AndcoIntentPresentOptions): Promise<Result<AndcoPresentationResult<T>>>;
     /** Reads the authoritative state of one Intent. This, not a callback, is the source of truth. */
     get<T = AndCoIntent>(intentId: string): Promise<Result<T>>;
     /** Executes an intent whose Grant permits it. Completion must still be confirmed with `get`. */

package/dist/intents.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"intents.d.ts","sourceRoot":"","sources":["../src/intents.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,iBAAiB,EAAe,MAAM,iBAAiB,CAAC;AACtE,OAAO,EACL,KAAK,cAAc,EACnB,KAAK,mBAAmB,EACxB,KAAK,WAAW,EAEjB,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAAiC,MAAM,EAAE,MAAM,aAAa,CAAC;AACpE,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AAE3C,YAAY,EACV,cAAc,IAAI,cAAc,EAChC,mBAAmB,IAAI,mBAAmB,EAC1C,WAAW,IAAI,WAAW,GAC3B,CAAC;AAEF,gGAAgG;AAChG,MAAM,MAAM,aAAa,GAAG,MAAM,GAAG,CAAC,MAAM,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC;AAK7D,MAAM,MAAM,wBAAwB,GAAG;IACrC,6DAA6D;IAC7D,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB,CAAC;AAEF,MAAM,MAAM,6BAA6B,GAAG;IAC1C,qFAAqF;IACrF,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,uEAAuE;IACvE,OAAO,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,IAAI,CAAC;IAClC;;;;;OAKG;IACH,YAAY,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,IAAI,CAAC;IACxC,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB,CAAC;AAEF;;;;;;;;;;;;GAYG;AACH,qBAAa,YAAY;;gBAIJ,IAAI,EAAE,SAAS,EAAE,MAAM,CAAC,EAAE,iBAAiB;IAK9D;;;;;;;;;;OAUG;IACU,MAAM,CAAC,CAAC,GAAG,WAAW,EACjC,IAAI,EAAE,MAAM,EACZ,KAAK,EAAE,MAAM,EACb,OAAO,GAAE,wBAA6B,GACrC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;IAuBrB,iGAAiG;IACpF,GAAG,CAAC,CAAC,GAAG,WAAW,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;IAavE,gGAAgG;IACnF,OAAO,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IAa7D,oFAAoF;IACvE,MAAM,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC;IAgB5G;;;;;;;;;;;;;;;;;;;;;;;OAuBG;IACI,SAAS,CAAC,CAAC,SAAS,mBAAmB,EAC5C,OAAO,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,EAAE,EAAE,MAAM,CAAA;KAAE,EACrC,IAAI,EAAE,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,EAAE,MAAM,EAAE,WAAW,KAAK,OAAO,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC,EACzF,MAAM,EAAE,CAAC,KAAK,EAAE,mBAAmB,KAAK,CAAC,GAAG,IAAI,EAChD,OAAO,EAAE,CAAC,KAAK,EAAE,CAAC,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,EAC3C,OAAO,EAAE,6BAA6B,GACrC,MAAM,IAAI;CAuBd"}
+{"version":3,"file":"intents.d.ts","sourceRoot":"","sources":["../src/intents.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,KAAK,iBAAiB,EAKvB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAEL,KAAK,cAAc,EACnB,KAAK,mBAAmB,EACxB,KAAK,WAAW,EAEjB,MAAM,2BAA2B,CAAC;AACnC,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC/C,OAAO,EAAiC,MAAM,EAAE,MAAM,aAAa,CAAC;AACpE,OAAO,KAAK,EAAE,iBAAiB,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AACxE,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AAE3C,YAAY,EACV,cAAc,IAAI,cAAc,EAChC,mBAAmB,IAAI,mBAAmB,EAC1C,WAAW,IAAI,WAAW,GAC3B,CAAC;AAEF,gGAAgG;AAChG,MAAM,MAAM,aAAa,GAAG,MAAM,GAAG,CAAC,MAAM,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC;AAK7D,MAAM,MAAM,wBAAwB,GAAG;IACrC,6DAA6D;IAC7D,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB,CAAC;AAEF,MAAM,MAAM,mBAAmB,GAAG;IAChC,IAAI,EAAE,SAAS,CAAC;IAChB;;;OAGG;IACH,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB,SAAS,CAAC,EAAE,cAAc,CAAC;IAC3B,MAAM,CAAC,EAAE,iBAAiB,CAAC;CAC5B,CAAC;AAEF,gEAAgE;AAChE,MAAM,MAAM,yBAAyB,GAAG;IACtC,yEAAyE;IACzE,QAAQ,EAAE,aAAa,CAAC;IACxB,2FAA2F;IAC3F,QAAQ,CAAC,EAAE,MAAM,GAAG,GAAG,CAAC;IACxB,+FAA+F;IAC/F,aAAa,CAAC,EAAE,MAAM,GAAG,GAAG,CAAC;IAC7B,MAAM,CAAC,EAAE,WAAW,CAAC;CACtB,CAAC;AAEF;;;;;;GAMG;AACH,MAAM,MAAM,uBAAuB,CAAC,CAAC,GAAG,WAAW,IAAI;IACrD,OAAO,EAAE,UAAU,GAAG,SAAS,CAAC;IAChC,MAAM,EAAE,CAAC,CAAC;CACX,CAAC;AAEF,MAAM,MAAM,6BAA6B,GAAG;IAC1C,qFAAqF;IACrF,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,uEAAuE;IACvE,OAAO,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,IAAI,CAAC;IAClC;;;;;OAKG;IACH,YAAY,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,IAAI,CAAC;IACxC,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB,CAAC;AAEF;;;;;;;;;;;;GAYG;AACH,qBAAa,YAAY;;gBAMJ,OAAO,EAAE,mBAAmB;IAO/C;;;;;;;;;;OAUG;IACU,MAAM,CAAC,CAAC,GAAG,WAAW,EACjC,IAAI,EAAE,MAAM,EACZ,KAAK,EAAE,MAAM,EACb,OAAO,GAAE,wBAA6B,GACrC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;IAuBrB;;;;;;;;OAQG;IACU,eAAe,CAAC,OAAO,EAAE;QACpC,QAAQ,EAAE,MAAM,CAAC;QACjB,YAAY,EAAE,iBAAiB,CAAC;QAChC,QAAQ,EAAE,GAAG,CAAC;QACd,aAAa,EAAE,GAAG,CAAC;QACnB,KAAK,EAAE,MAAM,CAAC;KACf,GAAG,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IA2BxB;;;;;;;;;;;;;;;;;;;OAmBG;IACU,OAAO,CAAC,CAAC,GAAG,WAAW,EAClC,OAAO,EAAE,yBAAyB,GACjC,OAAO,CAAC,MAAM,CAAC,uBAAuB,CAAC,CAAC,CAAC,CAAC,CAAC;IAqD9C,iGAAiG;IACpF,GAAG,CAAC,CAAC,GAAG,WAAW,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;IAavE,gGAAgG;IACnF,OAAO,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IAa7D,oFAAoF;IACvE,MAAM,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC;IAgB5G;;;;;;;;;;;;;;;;;;;;;;;OAuBG;IACI,SAAS,CAAC,CAAC,SAAS,mBAAmB,EAC5C,OAAO,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,EAAE,EAAE,MAAM,CAAA;KAAE,EACrC,IAAI,EAAE,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,EAAE,MAAM,EAAE,WAAW,KAAK,OAAO,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC,EACzF,MAAM,EAAE,CAAC,KAAK,EAAE,mBAAmB,KAAK,CAAC,GAAG,IAAI,EAChD,OAAO,EAAE,CAAC,KAAK,EAAE,CAAC,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,EAC3C,OAAO,EAAE,6BAA6B,GACrC,MAAM,IAAI;CAuBd"}

package/dist/intents.js

@@ -1,5 +1,5 @@
-import { RANDOM_UUID } from "@andco/protocol";
-import { subscribeFinancialEvents, } from "@andco/protocol/transport";
+import { CALLBACK_STATE_FROM, callbackStateCreate, RANDOM_UUID, SafeURL, } from "@andco/protocol";
+import { ANDCO_INTENT_AUTHORIZATION_URL, subscribeFinancialEvents, } from "@andco/protocol/transport";
 import { ANDCO_ERROR_CODES, AndcoError, Result } from "./errors.js";
 const INTENT_ID_PATTERN = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
 const IDEMPOTENCY_KEY_PATTERN = /^[A-Za-z0-9._:-]{1,128}$/;
@@ -18,10 +18,14 @@ const IDEMPOTENCY_KEY_PATTERN = /^[A-Za-z0-9._:-]{1,128}$/;
  */
 export class AndcoIntents {
     #rest;
+    #config;
+    #presenter;
     #crypto;
-    constructor(rest, crypto) {
-        this.#rest = rest;
-        this.#crypto = crypto;
+    constructor(options) {
+        this.#rest = options.rest;
+        this.#config = options.config;
+        this.#presenter = options.presenter;
+        this.#crypto = options.crypto;
     }
     /**
      * Creates an Intent of the given type. The exact Grant determines what it may do and where.
@@ -57,6 +61,115 @@ export class AndcoIntents {
         }
         return Result.ok(data);
     }
+    /**
+     * The Andco-owned URL that presents one Intent, with its callbacks bound.
+     *
+     * Published rather than folded into `present` because the Hosted Intent Button needs the same URL
+     * with a different `state`: its callback returns to the widget that opened the window, not to
+     * this document. Two constructions of one URL is precisely the drift ADR-0014 records, and a bare
+     * `authorization_url` is an input to presentation, not a destination — Platform renders a 404 for
+     * any of the four parameters below that is missing.
+     */
+    async presentationURL(options) {
+        if (!this.#config)
+            return Result.fail(presentationUnsupported());
+        const invalid = assertIntentId(options.intentId);
+        if (invalid)
+            return Result.fail(invalid);
+        if (options.returnTo.origin !== options.errorReturnTo.origin) {
+            // Platform refuses a mismatch by rendering a 404. Failing here says why instead.
+            return Result.fail(ANDCO_ERROR_CODES.INVALID_CONFIGURATION, {
+                message: "returnTo and errorReturnTo must share one origin",
+            });
+        }
+        const read = await this.get(options.intentId);
+        if (read.error)
+            return Result.fail(read.error);
+        let url;
+        try {
+            url = ANDCO_INTENT_AUTHORIZATION_URL(read.data, this.#config.endpoints.api);
+        }
+        catch (cause) {
+            return Result.fail(AndcoError.from(cause, ANDCO_ERROR_CODES.INVALID_RESPONSE));
+        }
+        url.searchParams.set("return_uri", options.returnTo.href);
+        url.searchParams.set("error_return_uri", options.errorReturnTo.href);
+        url.searchParams.set("presentation", options.presentation);
+        url.searchParams.set("state", options.state);
+        return Result.ok(url);
+    }
+    /**
+     * Presents one Intent and answers with its authoritative outcome.
+     *
+     * This is the Direct Popup Presentation: the programmatic path for UI that cannot mount a Hosted
+     * Intent Button. It owns the whole interaction — the window, the four callback parameters, the
+     * correlation, and the read afterwards — so that no Project has to reach for a window primitive
+     * to complete a financial operation.
+     *
+     * The Intent is read again once the window settles, because a callback reports that a window
+     * finished and that is not the same fact as a completed deposit. A dismissal is read too: the
+     * user may have closed the window on an operation the bank had already accepted.
+     *
+     * @example
+     * ```ts
+     * const { data, error } = await andco.intents.present<AndCoDepositIntent>({
+     *   intentId: async () => (await bank.intents.createDeposit(input)).data.id,
+     * });
+     * if (data?.outcome === "complete") refreshBalance();
+     * ```
+     */
+    async present(options) {
+        if (!this.#config || !this.#presenter)
+            return Result.fail(presentationUnsupported());
+        const returnTo = options.returnTo ? new SafeURL(options.returnTo) : this.#config.redirectTo;
+        if (!returnTo) {
+            return Result.fail(ANDCO_ERROR_CODES.INVALID_CONFIGURATION, {
+                message: "an Intent Presentation needs a returnTo, and this instance has no redirectTo",
+            });
+        }
+        const errorReturnTo = options.errorReturnTo ? new SafeURL(options.errorReturnTo) : returnTo;
+        const presentationId = RANDOM_UUID(this.#crypto);
+        // The same encoding OAuth uses: it binds the opener origin the callback must post back to, and
+        // its alphabet is the one Platform accepts for `state`.
+        const state = callbackStateCreate(returnTo.origin, presentationId);
+        // Resolved inside the thunk, so the window is already open when the Intent is created.
+        let intentId;
+        const presented = await this.#presenter.present({
+            kind: "intent",
+            presentation: "popup",
+            url: async () => {
+                try {
+                    intentId = typeof options.intentId === "string" ? options.intentId : await options.intentId();
+                }
+                catch (cause) {
+                    return Result.fail(AndcoError.from(cause, ANDCO_ERROR_CODES.INVALID_CONFIGURATION));
+                }
+                return this.presentationURL({ intentId, presentation: "popup", returnTo, errorReturnTo, state });
+            },
+            get intentId() {
+                return intentId ?? "";
+            },
+            returnTo,
+            errorReturnTo,
+            presentationId,
+            ...(options.signal === undefined ? {} : { signal: options.signal }),
+        });
+        if (presented.error)
+            return Result.fail(presented.error);
+        if (!intentId) {
+            // The presenter settled without ever asking for a destination, so nothing was presented.
+            return Result.fail(presentationUnsupported());
+        }
+        const outcome = INTENT_RESULT_FROM(presented.data, { presentationId });
+        if (outcome.error)
+            return Result.fail(outcome.error);
+        console.debug("[AndcoIntents.present] settled: %s %o", outcome.data, { intentId, presentationId });
+        // Authoritative, and read on a dismissal too: a closed window says nothing about the money.
+        const intent = await this.get(intentId);
+        if (intent.error)
+            return Result.fail(intent.error);
+        return Result.ok({ outcome: outcome.data, intent: intent.data });
+    }
     /** Reads the authoritative state of one Intent. This, not a callback, is the source of truth. */
     async get(intentId) {
         const invalid = assertIntentId(intentId);
@@ -149,6 +262,35 @@ export class AndcoIntents {
         return () => subscription.unsubscribe();
     }
 }
+/**
+ * Reads the lifecycle outcome out of the callback a presentation came back with.
+ *
+ * A closed window with no callback is a dismissal, never a failure. A callback whose `state` does
+ * not carry this presentation is not ours and is refused rather than guessed at.
+ */
+function INTENT_RESULT_FROM(callbackUrl, presentation) {
+    if (!callbackUrl)
+        return Result.ok("dismiss");
+    const state = callbackUrl.searchParams.get("state");
+    const parsed = state ? CALLBACK_STATE_FROM(state) : null;
+    if (!parsed || parsed.presentationId !== presentation.presentationId) {
+        return Result.fail(ANDCO_ERROR_CODES.INVALID_CALLBACK, {
+            message: "the callback does not belong to this presentation",
+        });
+    }
+    const result = callbackUrl.searchParams.get("andco_intent_result");
+    if (result === "complete")
+        return Result.ok("complete");
+    if (result === "dismiss")
+        return Result.ok("dismiss");
+    return Result.fail(ANDCO_ERROR_CODES.INVALID_CALLBACK, { message: "the callback carries no Intent result" });
+}
+/** One message for every surface that has the lifecycle but cannot put a window in front of anyone. */
+function presentationUnsupported() {
+    return new AndcoError(ANDCO_ERROR_CODES.PRESENTATION_UNSUPPORTED, {
+        message: "this Intent surface was composed without a presenter; present through the Andco Instance instead",
+    });
+}
 /** Intent identifiers are UUIDs; anything else never reaches the network. */
 function assertIntentId(value) {
     return INTENT_ID_PATTERN.test(value)

package/dist/presenter.d.ts

@@ -1,9 +1,17 @@
-import type { Result } from "./errors.js";
+import { Result } from "./errors.js";
 /** How an authorization is put in front of the user. */
 export type AndcoPresentation = "popup" | "redirect";
-export type AndcoPresentOptions = {
-    url: URL;
-    presentation: AndcoPresentation;
+/**
+ * The destination, or a thunk that resolves it.
+ *
+ * A thunk is what lets a presenter open its window *during* the user activation and navigate it
+ * afterwards. Both flows need it: an authorization request may be pushed (PAR) before its URL
+ * exists, and an Intent is created only once someone asked for it. Awaiting either before opening
+ * is what gets the window blocked.
+ */
+export type AndcoPresentTarget = URL | (() => Promise<Result<URL>>);
+type AndcoPresentBase = {
+    url: AndcoPresentTarget;
     /** Exact callback the Authorization Server will reach on success. */
     returnTo: URL;
     /** Exact callback reached on failure. Defaults to `returnTo`. */
@@ -12,11 +20,34 @@ export type AndcoPresentOptions = {
     presentationId: string;
     signal?: AbortSignal;
 };
+/** An authorization. Its callback carries a single-use code the opener must exchange. */
+export type AndcoPresentOAuth = AndcoPresentBase & {
+    kind: "oauth";
+    presentation: AndcoPresentation;
+};
+/**
+ * An Intent. Its callback carries a lifecycle outcome only — the authenticated read decides the
+ * financial fact — and `intentId` is what lets a presenter with no window, such as a native Host,
+ * resolve current state from the Resource Server instead.
+ */
+export type AndcoPresentIntent = AndcoPresentBase & {
+    kind: "intent";
+    /** Popup only for now: nothing consumes an Intent result that comes back by redirect. */
+    presentation: "popup";
+    /** Empty until the thunk has resolved; a presenter reads it after resolution, never before. */
+    readonly intentId: string;
+};
+export type AndcoPresentOptions = AndcoPresentOAuth | AndcoPresentIntent;
 /**
  * The boundary between the protocol and whatever shows it to a person.
  *
- * A presenter receives an authorization URL and answers with the callback URL that came back, or
- * `null` when the user dismissed. It owns no protocol: no PKCE, no state, no token exchange.
+ * A presenter receives a destination and answers with the callback URL that came back, or `null`
+ * when the user dismissed. It owns no protocol: no PKCE, no state, no token exchange, and no
+ * opinion about what a completed Intent means.
+ *
+ * `kind` is the seam's only domain knowledge, and it exists because a presenter without a window
+ * cannot treat the two alike: a native Host runs its own consent screen for an authorization and
+ * its own review screen for an Intent. A browser presents both the same way and ignores it.
  *
  * Keeping it this narrow is what makes sign-in testable without a browser — a test supplies a
  * presenter that returns a prepared callback URL and the whole flow runs in plain Node. It is also
@@ -26,11 +57,14 @@ export type AndcoPresentOptions = {
  * @example
  * ```ts
  * const presenter: AndcoPresenter = {
- *   present: async ({ url }) => Result.ok(new URL(`${redirectTo}?code=test&state=${state}`)),
+ *   present: async ({ returnTo }) => Result.ok(new URL(`${returnTo}?code=test&state=${state}`)),
  * };
  * ```
  */
 export interface AndcoPresenter {
     present(options: AndcoPresentOptions): Promise<Result<URL | null>>;
 }
+/** Resolves a presentation target, whether it was already a URL or still a thunk. */
+export declare function PRESENT_TARGET(target: AndcoPresentTarget): Promise<Result<URL>>;
+export {};
 //# sourceMappingURL=presenter.d.ts.map

package/dist/presenter.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"presenter.d.ts","sourceRoot":"","sources":["../src/presenter.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAE1C,wDAAwD;AACxD,MAAM,MAAM,iBAAiB,GAAG,OAAO,GAAG,UAAU,CAAC;AAErD,MAAM,MAAM,mBAAmB,GAAG;IAChC,GAAG,EAAE,GAAG,CAAC;IACT,YAAY,EAAE,iBAAiB,CAAC;IAChC,qEAAqE;IACrE,QAAQ,EAAE,GAAG,CAAC;IACd,iEAAiE;IACjE,aAAa,CAAC,EAAE,GAAG,CAAC;IACpB,iEAAiE;IACjE,cAAc,EAAE,MAAM,CAAC;IACvB,MAAM,CAAC,EAAE,WAAW,CAAC;CACtB,CAAC;AAEF;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,WAAW,cAAc;IAC7B,OAAO,CAAC,OAAO,EAAE,mBAAmB,GAAG,OAAO,CAAC,MAAM,CAAC,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC;CACpE"}
+{"version":3,"file":"presenter.d.ts","sourceRoot":"","sources":["../src/presenter.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAErC,wDAAwD;AACxD,MAAM,MAAM,iBAAiB,GAAG,OAAO,GAAG,UAAU,CAAC;AAErD;;;;;;;GAOG;AACH,MAAM,MAAM,kBAAkB,GAAG,GAAG,GAAG,CAAC,MAAM,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;AAEpE,KAAK,gBAAgB,GAAG;IACtB,GAAG,EAAE,kBAAkB,CAAC;IACxB,qEAAqE;IACrE,QAAQ,EAAE,GAAG,CAAC;IACd,iEAAiE;IACjE,aAAa,CAAC,EAAE,GAAG,CAAC;IACpB,iEAAiE;IACjE,cAAc,EAAE,MAAM,CAAC;IACvB,MAAM,CAAC,EAAE,WAAW,CAAC;CACtB,CAAC;AAEF,yFAAyF;AACzF,MAAM,MAAM,iBAAiB,GAAG,gBAAgB,GAAG;IACjD,IAAI,EAAE,OAAO,CAAC;IACd,YAAY,EAAE,iBAAiB,CAAC;CACjC,CAAC;AAEF;;;;GAIG;AACH,MAAM,MAAM,kBAAkB,GAAG,gBAAgB,GAAG;IAClD,IAAI,EAAE,QAAQ,CAAC;IACf,yFAAyF;IACzF,YAAY,EAAE,OAAO,CAAC;IACtB,+FAA+F;IAC/F,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;CAC3B,CAAC;AAEF,MAAM,MAAM,mBAAmB,GAAG,iBAAiB,GAAG,kBAAkB,CAAC;AAEzE;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,MAAM,WAAW,cAAc;IAC7B,OAAO,CAAC,OAAO,EAAE,mBAAmB,GAAG,OAAO,CAAC,MAAM,CAAC,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC;CACpE;AAED,qFAAqF;AACrF,wBAAgB,cAAc,CAAC,MAAM,EAAE,kBAAkB,GAAG,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAG/E"}

package/dist/presenter.js

@@ -1 +1,7 @@
-export {};
+import { Result } from "./errors.js";
+/** Resolves a presentation target, whether it was already a URL or still a thunk. */
+export function PRESENT_TARGET(target) {
+    if (target instanceof URL)
+        return Promise.resolve(Result.ok(target));
+    return target();
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@andco/sdk",
-  "version": "0.0.1",
+  "version": "0.0.3",
   "private": false,
   "publishConfig": {
     "access": "public"
@@ -34,7 +34,7 @@
   ],
   "dependencies": {
     "@andco/openapi-fetch": "0.0.1",
-    "@andco/protocol": "0.0.1",
+    "@andco/protocol": "0.0.3",
     "openid-client": "^6.8.8"
   },
   "devDependencies": {