@apteva/web-sdk 0.6.0 → 0.8.0

package/CHANGELOG.md

@@ -1,5 +1,23 @@
+## 0.8.0
+
+- Add unified Auth app login/signup, user lookup, session metadata, automatic
+  platform-token renewal and logout through `AptevaClient({ auth })`.
+- Coordinate Auth refresh rotation and platform renewal, preserve rotated Auth
+  credentials during mint outages, and ignore late results after session changes.
+- Keep app-user credentials isolated from API keys/cookies; reconnect managed
+  streams at expiry and close them on logout. Existing SDK auth mode is unchanged.
+- Requires Auth v0.12.0 with explicit role bindings and platform policy lifetimes
+  of at most 60 seconds. Sessions are memory-only; reloads require login.
+
 # Changelog
 
+## 0.7.0 — 2026-09-07
+
+- Load app-owned frontend bundles from installed apps with `client.apps.load`; no per-app npm package is required.
+- Share authenticated scoped requests, verify asset hashes, check versions/React compatibility, and create fresh app clients and UI contexts.
+- Reference-count scoped styles and expose cancellation and disposal.
+- Preserve local extension/registry APIs and existing chat transports.
+
 ## 0.6.0 — 2026-09-07
 
 - Add typed app-owned extensions through `defineAppExtension` and `client.use`.

package/README.md

@@ -1,6 +1,6 @@
 # @apteva/web-sdk
 
-Browser SDK for calling [apteva-server](https://github.com/apteva/server). Framework-agnostic. ~3 KB minified + gzipped.
+Browser SDK for calling [apteva-server](https://github.com/apteva/server). Framework-agnostic.
 
 - **Auth transport** — session cookies, private API keys, and opaque application-user access tokens. The SDK does not depend on a particular token issuer.
 - **App data** — `client.app("crm").get("/contacts")` reverse-proxies through `/api/apps/<name>/*`.
@@ -39,6 +39,58 @@ const { leads } = await apteva.app("flexylead").tool<{ leads: Lead[] }>(
 );
 ```
 
+## Load an installed app without its npm package
+
+```tsx
+import * as React from "react";
+import { AptevaClient } from "@apteva/web-sdk";
+
+const client = new AptevaClient({ baseURL, accessToken });
+const loaded = await client.apps.load("conversations", {
+  projectId, installId, react: React,
+});
+const Chat = loaded.components["conversation-chat"];
+// In JavaScript/JSX; TypeScript hosts can supply their component/client types
+// through apps.load<ClientContract, React.ComponentType<HostProps>>(...).
+<Chat conversations={loaded.client} agentId={agentId} />
+// After unmounting all consumers:
+loaded.dispose();
+```
+
+Only the shared SDK and the host's React are installed. The selected app serves
+`/ui/frontend.json`, a headless client module, a UI factory and scoped styles as
+part of its regular app release. Omit `react` for headless loading. Every load
+creates a new client; retain it across renders and replace it when identity or
+scope changes. `clientOptions` passes app-specific options to the client factory.
+
+The loader requires explicit project/install selection. Asset fetches use the
+SDK's current authentication, with no tokens in URLs, reject redirects and verify
+SHA-256 hashes before execution. Metadata is fetched fresh; client/UI/styles download in parallel and immutable
+asset URLs reuse the browser cache on later visits. Code caches contain
+no credentials or app client instances. `expectedVersion` can reject unexpected
+app upgrades. UI factories receive the host's React (major version checked), so
+no import map or separate React copy is needed. Styles are reference counted and
+removed by `dispose()`. Pass `signal` to cancel a pending load.
+
+Explicit loading executes trusted installed-app code in the host page. HTTPS or
+localhost is required for integrity checks, and CSP must permit `script-src blob:`
+and the loader's inline styles. It does not sandbox app code or grant API access.
+No component URLs from user messages are accepted as loader entry points.
+
+### App frontend contract
+
+Ship `/ui/frontend.json` with schema `apteva-app-frontend/v1`, `app`, `version`,
+and `client: { path, sha256 }`. The optional `ui` asset also declares `reactMajor`
+and a `components` name array; `styles` is an optional CSS asset. Paths stay under
+`/ui/`, contain no queries or traversal, and use lowercase SHA-256 hex hashes.
+Content-addressed filenames keep an update from mixing incompatible assets.
+
+The client module exports `createClient({ app }, options)` and the UI module
+exports `createFrontend({ react })`, returning `{ components }`. Each module must
+be self-contained, without external imports, relative chunks or runtime require.
+The UI module should instantiate its contexts inside the factory. CSS should be
+scoped to the app. See Conversations' `frontend/build-app.ts` for the implementation.
+
 ## Authentication carriers
 
 With no bearer credential, the SDK sends `credentials: "include"` so an
@@ -95,12 +147,11 @@ For lower-level usage, `client.callTool(appName, toolName, args)` and the standa
 
 ## App-owned extensions and web components
 
-Apps can publish a headless client and frontend components from their own
-versioned package. The core SDK supplies transport, component references, and
-metadata checks; it has no React dependency and does not import executable UI
-from a server. A dashboard wrapper and an external package can share the same
-component source, receiving an app handle instead of implementing authentication
-and requests again.
+Apps can serve their client and components with the normal app release through
+`apps.load`, or supply local modules to `client.use` and the component registry.
+The core SDK has no React dependency; a host that loads React UI supplies its own
+React instance. Dashboard wrappers and external hosts share component source and
+an authenticated app handle. A per-app npm package is optional.
 
 ### Typed extensions
 
@@ -433,7 +484,7 @@ and `conversationKey` atomically resumes the same conversation.
 `client.delegatedUsers.create(...)` remains available for older trusted-backend
 integrations, but is deprecated and is no longer the recommended website flow.
 
-**Rendering note:** `ChatMessage.components[]` carries the agent's `respond(components=…)` attachments. Use `AppComponentRegistry` to resolve these references against app-owned frontend exports, then render them in your host framework. The SDK does not dynamically load server-provided UI.
+**Rendering note:** `ChatMessage.components[]` carries the agent's `respond(components=…)` attachments. Use `AppComponentRegistry` to resolve these references against app-owned frontend exports, then render them in your host framework. Use `apps.load` to explicitly load a trusted installed app’s frontend before registering its components.
 
 A complete reference chat UI (message list, composer, streaming bubbles, optimistic send) lives in [`examples/dashboard/src/components/ChatCard.tsx`](./examples/dashboard/src/components/ChatCard.tsx).
 
@@ -505,3 +556,72 @@ bun run serve
 ## License
 
 MIT
+
+## One client for Auth app sessions (v0.8.0)
+
+With Auth app v0.12.0 or newer, configure `auth` and use the same client for
+login, app requests, agents and logout:
+
+```ts
+const apteva = new AptevaClient({
+  baseURL: "https://agents.example.com",
+  projectId: "YOUR_PROJECT",
+  auth: {
+    clientId: "YOUR_PUBLIC_AUTH_CLIENT",
+    // installId: 209,              // when explicit install routing is needed
+    // organizationSlug: "default",// for a multi-organization Auth client
+    // profile: "commercial",      // requested role policy; checked by Auth
+    onSessionChange: session => renderUser(session?.user),
+  },
+});
+
+const user = await apteva.auth.login({ email, password });
+await apteva.app("conversations").get("/chats");
+await apteva.auth.logout();
+```
+
+`auth.register({ email, password, displayName? })` also supports signup. When
+email verification is required, it returns `verification_required: true` and
+does not establish a session. `auth.me()` reads the current Auth user;
+`auth.getSession()` returns a local copy of user, authorization and expiry
+metadata without credentials. `auth.status()` reports local session presence.
+`auth.refresh()` explicitly requests a fresh platform credential when needed.
+
+Auth owns identity and authorization. Configure its trusted role bindings and
+matching platform policies with `token_ttl_seconds: 60` before enabling protected
+app access. Login can succeed without app permissions; app calls then fail closed
+until an authorized policy can mint a token. A requested profile never grants a
+role. The SDK does not infer permissions or mint credentials itself.
+
+The SDK privately maintains the normal Auth session plus its short-lived
+platform token. Before an app request it renews a platform token that is within
+ten seconds of expiry. Expired/stale Auth credentials use the normal refresh
+flow. Concurrent operations share renewal and refresh-token rotation; no custom
+refresh callback or application token endpoint is required. Both the returned
+absolute expiry and remaining lifetime limit credential use. Fetch streams
+reconnect at token expiry and close on local logout. SDK stream reconnection is
+not server-side revocation: already-admitted work or a modified client may outlive
+token expiry unless the receiving app enforces its own lifetime.
+
+Sessions are kept **in memory**, not written to localStorage, sessionStorage or
+cookies. Reuse one client per application session. Reloads/new tabs require
+login and do not implicitly share a rotating refresh credential. Do not copy
+refresh tokens between clients/tabs. This release deliberately does not provide
+persistent/shared browser sessions.
+
+`auth` mode cannot be combined with `apiKey`, `accessToken` or
+`refreshAccessToken`; `setApiKey` and `setAccessToken` are unavailable in this
+mode. User requests omit cookies and never fall back to a kiosk or administrator
+credential. Platform administrator operations such as `auth.listKeys()` are
+rejected in app Auth mode. Without `auth` configuration, existing platform
+login and opaque-token APIs retain their original behavior.
+
+A temporary mint failure preserves the normal Auth session and blocks protected
+app requests. A rejected Auth refresh clears the session. Local logout clears
+credentials and streams immediately; a failed network logout still throws so the
+host can report that server-side revocation could not be confirmed. A late
+renewal cannot restore a logged-out session. HTTP writes are never automatically
+replayed after a 401; successful renewal prepares subsequent calls. Unlike legacy
+transport mode, a successfully recovered platform 401 does not trigger the
+`onUnauthorized` callback in managed Auth mode, although the original call still
+rejects. Reconcile a write's outcome before retrying it.

package/dist/auth-session.d.ts

@@ -0,0 +1,73 @@
+import type { User } from "./types.js";
+export interface AuthLoginInput {
+    email: string;
+    password: string;
+}
+export interface AuthSignupInput extends AuthLoginInput {
+    displayName?: string;
+}
+export interface AuthUser extends User {
+    id: number;
+    display_name?: string;
+    status?: string;
+    organization_id?: number;
+}
+export interface AuthAuthorization {
+    roles: string[];
+    permissions: string[];
+    authorization_version: number;
+    [key: string]: unknown;
+}
+export interface AuthSessionInfo {
+    user: AuthUser;
+    authorization?: AuthAuthorization;
+    expiresAt: string;
+    platformExpiresAt?: string;
+}
+export interface AppAuthOptions {
+    /** Public Auth app OAuth client identifier; never a private client secret. */
+    clientId: string;
+    installId?: number;
+    organizationSlug?: string;
+    /** Requested Auth policy profile. Auth independently checks current roles. */
+    profile?: string;
+    /** Receives user/session metadata, never credentials. Sessions are memory-only. */
+    onSessionChange?: (session: AuthSessionInfo | undefined) => void;
+}
+/** Internal issuer-specific session lifecycle. AptevaClient is the public API. */
+export declare class AuthSession {
+    private readonly baseURL;
+    private readonly projectId;
+    private readonly options;
+    private readonly fetchImpl;
+    private readonly changed;
+    private state?;
+    private epoch;
+    private pending?;
+    private pendingAuth?;
+    private controllers;
+    private listeners;
+    constructor(baseURL: string, projectId: string, options: AppAuthOptions, fetchImpl: typeof fetch, changed: (token: string | undefined) => void);
+    info(): AuthSessionInfo | undefined;
+    onClear(listener: () => void): () => void;
+    private notify;
+    clear(): void;
+    private assertEpoch;
+    private call;
+    private input;
+    private platform;
+    private accept;
+    login(input: AuthLoginInput): Promise<AuthUser>;
+    register(input: AuthSignupInput): Promise<{
+        user: AuthUser;
+        verification_required?: boolean;
+    }>;
+    logout(): Promise<void>;
+    private refreshAuth;
+    private performAuthRefresh;
+    private renew;
+    token(force?: boolean): Promise<string>;
+    me(): Promise<AuthUser>;
+    platformDeadline(): number;
+}
+//# sourceMappingURL=auth-session.d.ts.map

package/dist/auth-session.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth-session.d.ts","sourceRoot":"","sources":["../src/auth-session.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,YAAY,CAAC;AAEvC,MAAM,WAAW,cAAc;IAAG,KAAK,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE;AACnE,MAAM,WAAW,eAAgB,SAAQ,cAAc;IAAG,WAAW,CAAC,EAAE,MAAM,CAAA;CAAE;AAChF,MAAM,WAAW,QAAS,SAAQ,IAAI;IACpC,EAAE,EAAE,MAAM,CAAC;IACX,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B;AACD,MAAM,WAAW,iBAAiB;IAChC,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,qBAAqB,EAAE,MAAM,CAAC;IAC9B,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AACD,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,QAAQ,CAAC;IACf,aAAa,CAAC,EAAE,iBAAiB,CAAC;IAClC,SAAS,EAAE,MAAM,CAAC;IAClB,iBAAiB,CAAC,EAAE,MAAM,CAAC;CAC5B;AACD,MAAM,WAAW,cAAc;IAC7B,8EAA8E;IAC9E,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,8EAA8E;IAC9E,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,mFAAmF;IACnF,eAAe,CAAC,EAAE,CAAC,OAAO,EAAE,eAAe,GAAG,SAAS,KAAK,IAAI,CAAC;CAClE;AAeD,kFAAkF;AAClF,qBAAa,WAAW;IAQpB,OAAO,CAAC,QAAQ,CAAC,OAAO;IACxB,OAAO,CAAC,QAAQ,CAAC,SAAS;IAC1B,OAAO,CAAC,QAAQ,CAAC,OAAO;IACxB,OAAO,CAAC,QAAQ,CAAC,SAAS;IAC1B,OAAO,CAAC,QAAQ,CAAC,OAAO;IAX1B,OAAO,CAAC,KAAK,CAAC,CAAQ;IACtB,OAAO,CAAC,KAAK,CAAK;IAClB,OAAO,CAAC,OAAO,CAAC,CAAkB;IAClC,OAAO,CAAC,WAAW,CAAC,CAAgB;IACpC,OAAO,CAAC,WAAW,CAA8B;IACjD,OAAO,CAAC,SAAS,CAAyB;gBAEvB,OAAO,EAAE,MAAM,EACf,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,cAAc,EACvB,SAAS,EAAE,OAAO,KAAK,EACvB,OAAO,EAAE,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,KAAK,IAAI;IAK/D,IAAI,IAAI,eAAe,GAAG,SAAS;IAMnC,OAAO,CAAC,QAAQ,EAAE,MAAM,IAAI,GAAG,MAAM,IAAI;IACzC,OAAO,CAAC,MAAM;IAGd,KAAK,IAAI,IAAI;IAWb,OAAO,CAAC,WAAW;YAGL,IAAI;IAelB,OAAO,CAAC,KAAK;IAGb,OAAO,CAAC,QAAQ;IAShB,OAAO,CAAC,MAAM;IAcR,KAAK,CAAC,KAAK,EAAE,cAAc,GAAG,OAAO,CAAC,QAAQ,CAAC;IAK/C,QAAQ,CAAC,KAAK,EAAE,eAAe,GAAG,OAAO,CAAC;QAAE,IAAI,EAAE,QAAQ,CAAC;QAAC,qBAAqB,CAAC,EAAE,OAAO,CAAA;KAAE,CAAC;IAO9F,MAAM,IAAI,OAAO,CAAC,IAAI,CAAC;YAKf,WAAW;YAMX,kBAAkB;YAWlB,KAAK;IAyBb,KAAK,CAAC,KAAK,UAAQ,GAAG,OAAO,CAAC,MAAM,CAAC;IAcrC,EAAE,IAAI,OAAO,CAAC,QAAQ,CAAC;IAmB7B,gBAAgB,IAAI,MAAM;CAC3B"}

package/dist/auth-session.js

@@ -0,0 +1,249 @@
+import { AptevaError } from "./errors.js";
+const margin = 10_000;
+/** Internal issuer-specific session lifecycle. AptevaClient is the public API. */
+export class AuthSession {
+    baseURL;
+    projectId;
+    options;
+    fetchImpl;
+    changed;
+    state;
+    epoch = 0;
+    pending;
+    pendingAuth;
+    controllers = new Set();
+    listeners = new Set();
+    constructor(baseURL, projectId, options, fetchImpl, changed) {
+        this.baseURL = baseURL;
+        this.projectId = projectId;
+        this.options = options;
+        this.fetchImpl = fetchImpl;
+        this.changed = changed;
+        if (!projectId || !options.clientId?.trim())
+            throw new Error("Auth requires projectId and auth.clientId");
+        if (options.installId !== undefined && (!Number.isSafeInteger(options.installId) || options.installId < 1))
+            throw new Error("Invalid Auth installId");
+    }
+    info() {
+        const s = this.state;
+        return s ? structuredClone({ user: s.response.user, authorization: s.response.authorization,
+            expiresAt: new Date(s.expiresAt).toISOString(),
+            platformExpiresAt: s.platformExpiresAt ? new Date(s.platformExpiresAt).toISOString() : undefined }) : undefined;
+    }
+    onClear(listener) { this.listeners.add(listener); return () => this.listeners.delete(listener); }
+    notify() {
+        try {
+            this.options.onSessionChange?.(this.info());
+        }
+        catch { /* Observers cannot roll back credential rotation. */ }
+    }
+    clear() {
+        this.epoch++;
+        this.state = undefined;
+        this.pending = undefined;
+        this.pendingAuth = undefined;
+        for (const controller of this.controllers)
+            controller.abort();
+        this.controllers.clear();
+        this.changed(undefined);
+        for (const listener of this.listeners)
+            listener();
+        this.notify();
+    }
+    assertEpoch(epoch) {
+        if (this.epoch !== epoch)
+            throw new AptevaError(401, "Auth session changed");
+    }
+    async call(path, body, token, method = "POST") {
+        const url = new URL(this.baseURL + "/api/apps/auth" + path, globalThis.location?.origin || "http://localhost");
+        url.searchParams.set("project_id", this.projectId);
+        if (this.options.installId)
+            url.searchParams.set("install_id", String(this.options.installId));
+        if (this.options.profile)
+            url.searchParams.set("delegated_profile", this.options.profile);
+        const controller = new AbortController();
+        if (path !== "/logout")
+            this.controllers.add(controller);
+        const timer = setTimeout(() => controller.abort(), 15_000);
+        try {
+            const response = await this.fetchImpl(url.toString(), { method, credentials: "omit", cache: "no-store", redirect: "error",
+                headers: { "Content-Type": "application/json", ...(token ? { Authorization: `Bearer ${token}` } : {}) },
+                body: body === undefined ? undefined : JSON.stringify(body), signal: controller.signal });
+            if (!response.ok)
+                throw new AptevaError(response.status, path + " failed");
+            return response.status === 204 ? undefined : await response.json();
+        }
+        finally {
+            clearTimeout(timer);
+            this.controllers.delete(controller);
+        }
+    }
+    input(body) {
+        return { ...body, client_id: this.options.clientId, organization_slug: this.options.organizationSlug };
+    }
+    platform(response) {
+        if (!response.apteva_access_token && response.apteva_expires_at === undefined && response.apteva_expires_in === undefined)
+            return { expiresAt: 0 };
+        const expiresAt = Date.parse(response.apteva_expires_at || "");
+        const seconds = response.apteva_expires_in;
+        // expires_in is measured conservatively from receipt; it also tolerates a
+        // client clock offset without ever extending a token beyond 60 seconds.
+        if (typeof response.apteva_access_token !== "string" || !response.apteva_access_token || !Number.isFinite(expiresAt) || expiresAt > Date.now() + 61_000 || typeof seconds !== "number" || !Number.isFinite(seconds) || seconds <= 0 || seconds > 60)
+            throw new AptevaError(502, "Invalid Auth platform credential expiry");
+        return { token: response.apteva_access_token, expiresAt: Math.min(expiresAt, Date.now() + seconds * 1000) };
+    }
+    accept(response, epoch, receivedAt) {
+        this.assertEpoch(epoch);
+        if (!response.user || !Number.isSafeInteger(response.user.id) || typeof response.access_token !== "string" || !response.access_token || typeof response.refresh_token !== "string" || !response.refresh_token || !Number.isFinite(response.expires_in) || response.expires_in <= 0 || response.expires_in > 86400)
+            throw new AptevaError(502, "Invalid Auth session response");
+        // Save a rotated refresh token before processing the optional platform
+        // credential, so a platform outage can never strand the Auth session.
+        this.state = { response: { ...response, apteva_access_token: undefined, apteva_expires_at: undefined, apteva_expires_in: undefined }, expiresAt: receivedAt + response.expires_in * 1000, platformExpiresAt: 0 };
+        this.changed(undefined);
+        try {
+            const platform = this.platform(response);
+            this.state.response.apteva_access_token = platform.token;
+            this.state.platformExpiresAt = platform.expiresAt;
+            this.changed(platform.token);
+        }
+        finally {
+            this.notify();
+        }
+    }
+    async login(input) {
+        this.clear();
+        const epoch = this.epoch;
+        const response = await this.call("/login", this.input(input));
+        this.accept(response, epoch, Date.now());
+        return response.user;
+    }
+    async register(input) {
+        this.clear();
+        const epoch = this.epoch;
+        const response = await this.call("/signup", this.input({ email: input.email, password: input.password, display_name: input.displayName }));
+        this.assertEpoch(epoch);
+        if (!response.verification_required)
+            this.accept(response, epoch, Date.now());
+        return { user: response.user, verification_required: response.verification_required };
+    }
+    async logout() {
+        const refresh = this.state?.response.refresh_token;
+        this.clear();
+        if (refresh)
+            await this.call("/logout", this.input({ refresh_token: refresh }));
+    }
+    async refreshAuth(epoch) {
+        if (this.pendingAuth)
+            return this.pendingAuth;
+        const pending = this.performAuthRefresh(epoch);
+        this.pendingAuth = pending;
+        try {
+            await pending;
+        }
+        finally {
+            if (this.pendingAuth === pending)
+                this.pendingAuth = undefined;
+        }
+    }
+    async performAuthRefresh(epoch) {
+        const refresh = this.state?.response.refresh_token;
+        if (!refresh)
+            throw new AptevaError(401, "Login required");
+        try {
+            const response = await this.call("/refresh", this.input({ refresh_token: refresh }));
+            this.accept(response, epoch, Date.now());
+        }
+        catch (error) {
+            if (this.epoch === epoch && error instanceof AptevaError && error.status === 401)
+                this.clear();
+            throw error;
+        }
+    }
+    async renew(epoch, force) {
+        this.assertEpoch(epoch);
+        if (!this.state)
+            throw new AptevaError(401, "Login required");
+        if (this.state.expiresAt <= Date.now() + margin)
+            await this.refreshAuth(epoch);
+        this.assertEpoch(epoch);
+        if (!force && this.state.response.apteva_access_token && this.state.platformExpiresAt > Date.now() + margin)
+            return this.state.response.apteva_access_token;
+        let result;
+        try {
+            result = await this.call("/delegated-token", {}, this.state.response.access_token);
+        }
+        catch (error) {
+            this.assertEpoch(epoch);
+            if (!(error instanceof AptevaError) || error.status !== 401)
+                throw error;
+            // Stale Auth roles or an expired Auth access token require normal refresh.
+            await this.refreshAuth(epoch);
+            this.assertEpoch(epoch);
+            if (this.state.response.apteva_access_token && this.state.platformExpiresAt > Date.now() + margin)
+                return this.state.response.apteva_access_token;
+            result = await this.call("/delegated-token", {}, this.state.response.access_token);
+        }
+        this.assertEpoch(epoch);
+        const platform = this.platform(result);
+        if (!platform.token || platform.expiresAt <= Date.now())
+            throw new AptevaError(502, "Missing or expired platform credential");
+        this.state.response.apteva_access_token = platform.token;
+        this.state.platformExpiresAt = platform.expiresAt;
+        this.changed(platform.token);
+        this.notify();
+        return platform.token;
+    }
+    async token(force = false) {
+        if (this.pending)
+            return this.pending;
+        if (!force && this.state?.response.apteva_access_token && this.state.platformExpiresAt > Date.now() + margin)
+            return this.state.response.apteva_access_token;
+        if (this.pending)
+            return this.pending;
+        const epoch = this.epoch;
+        const pending = this.renew(epoch, force).catch(error => {
+            if (this.epoch === epoch && this.state) {
+                this.state.response.apteva_access_token = undefined;
+                this.state.platformExpiresAt = 0;
+                this.changed(undefined);
+                this.notify();
+            }
+            throw error;
+        });
+        this.pending = pending;
+        try {
+            return await pending;
+        }
+        finally {
+            if (this.pending === pending)
+                this.pending = undefined;
+        }
+    }
+    async me() {
+        if (!this.state)
+            throw new AptevaError(401, "Login required");
+        const epoch = this.epoch;
+        if (this.state.expiresAt <= Date.now() + margin)
+            await this.refreshAuth(epoch);
+        this.assertEpoch(epoch);
+        let response;
+        try {
+            response = await this.call("/me", undefined, this.state.response.access_token, "GET");
+        }
+        catch (error) {
+            this.assertEpoch(epoch);
+            if (!(error instanceof AptevaError) || error.status !== 401)
+                throw error;
+            await this.refreshAuth(epoch);
+            this.assertEpoch(epoch);
+            response = await this.call("/me", undefined, this.state.response.access_token, "GET");
+        }
+        this.assertEpoch(epoch);
+        this.state.response.user = response.user;
+        this.state.response.authorization = response.authorization;
+        this.notify();
+        return response.user;
+    }
+    platformDeadline() { return this.state?.platformExpiresAt || 0; }
+}
+//# sourceMappingURL=auth-session.js.map

package/dist/auth-session.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth-session.js","sourceRoot":"","sources":["../src/auth-session.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AA6C1C,MAAM,MAAM,GAAG,MAAM,CAAC;AAEtB,kFAAkF;AAClF,MAAM,OAAO,WAAW;IAQH;IACA;IACA;IACA;IACA;IAXX,KAAK,CAAS;IACd,KAAK,GAAG,CAAC,CAAC;IACV,OAAO,CAAmB;IAC1B,WAAW,CAAiB;IAC5B,WAAW,GAAG,IAAI,GAAG,EAAmB,CAAC;IACzC,SAAS,GAAG,IAAI,GAAG,EAAc,CAAC;IAC1C,YACmB,OAAe,EACf,SAAiB,EACjB,OAAuB,EACvB,SAAuB,EACvB,OAA4C;QAJ5C,YAAO,GAAP,OAAO,CAAQ;QACf,cAAS,GAAT,SAAS,CAAQ;QACjB,YAAO,GAAP,OAAO,CAAgB;QACvB,cAAS,GAAT,SAAS,CAAc;QACvB,YAAO,GAAP,OAAO,CAAqC;QAE7D,IAAI,CAAC,SAAS,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,IAAI,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;QAC1G,IAAI,OAAO,CAAC,SAAS,KAAK,SAAS,IAAI,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,SAAS,CAAC,IAAI,OAAO,CAAC,SAAS,GAAG,CAAC,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC;IACxJ,CAAC;IACD,IAAI;QACF,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC;QACrB,OAAO,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,QAAQ,CAAC,IAAI,EAAE,aAAa,EAAE,CAAC,CAAC,QAAQ,CAAC,aAAa;YACzF,SAAS,EAAE,IAAI,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,WAAW,EAAE;YAC9C,iBAAiB,EAAE,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACpH,CAAC;IACD,OAAO,CAAC,QAAoB,IAAgB,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,GAAG,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;IACjH,MAAM;QACZ,IAAI,CAAC;YAAC,IAAI,CAAC,OAAO,CAAC,eAAe,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,qDAAqD,CAAC,CAAC;IACtH,CAAC;IACD,KAAK;QACH,IAAI,CAAC,KAAK,EAAE,CAAC;QACb,IAAI,CAAC,KAAK,GAAG,SAAS,CAAC;QACvB,IAAI,CAAC,OAAO,GAAG,SAAS,CAAC;QACzB,IAAI,CAAC,WAAW,GAAG,SAAS,CAAC;QAC7B,KAAK,MAAM,UAAU,IAAI,IAAI,CAAC,WAAW;YAAE,UAAU,CAAC,KAAK,EAAE,CAAC;QAC9D,IAAI,CAAC,WAAW,CAAC,KAAK,EAAE,CAAC;QACzB,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QACxB,KAAK,MAAM,QAAQ,IAAI,IAAI,CAAC,SAAS;YAAE,QAAQ,EAAE,CAAC;QAClD,IAAI,CAAC,MAAM,EAAE,CAAC;IAChB,CAAC;IACO,WAAW,CAAC,KAAa;QAC/B,IAAI,IAAI,CAAC,KAAK,KAAK,KAAK;YAAE,MAAM,IAAI,WAAW,CAAC,GAAG,EAAE,sBAAsB,CAAC,CAAC;IAC/E,CAAC;IACO,KAAK,CAAC,IAAI,CAAI,IAAY,EAAE,IAAc,EAAE,KAAc,EAAE,MAAM,GAAG,MAAM;QACjF,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,OAAO,GAAG,gBAAgB,GAAG,IAAI,EAAE,UAAU,CAAC,QAAQ,EAAE,MAAM,IAAI,kBAAkB,CAAC,CAAC;QAC/G,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,YAAY,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;QACnD,IAAI,IAAI,CAAC,OAAO,CAAC,SAAS;YAAE,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,YAAY,EAAE,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC;QAC/F,IAAI,IAAI,CAAC,OAAO,CAAC,OAAO;YAAE,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,mBAAmB,EAAE,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QAC1F,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;QAAC,IAAI,IAAI,KAAK,SAAS;YAAE,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QACnG,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,MAAM,CAAC,CAAC;QAC3D,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,KAAK,EAAE,UAAU,EAAE,QAAQ,EAAE,OAAO;gBACvH,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,UAAU,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE;gBACvG,IAAI,EAAE,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,UAAU,CAAC,MAAM,EAAE,CAAC,CAAC;YAC5F,IAAI,CAAC,QAAQ,CAAC,EAAE;gBAAE,MAAM,IAAI,WAAW,CAAC,QAAQ,CAAC,MAAM,EAAE,IAAI,GAAG,SAAS,CAAC,CAAC;YAC3E,OAAO,QAAQ,CAAC,MAAM,KAAK,GAAG,CAAC,CAAC,CAAC,SAAc,CAAC,CAAC,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAO,CAAC;QAC/E,CAAC;gBAAS,CAAC;YAAC,YAAY,CAAC,KAAK,CAAC,CAAC;YAAC,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;QAAC,CAAC;IACzE,CAAC;IACO,KAAK,CAAC,IAAY;QACxB,OAAO,EAAE,GAAG,IAAI,EAAE,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,iBAAiB,EAAE,IAAI,CAAC,OAAO,CAAC,gBAAgB,EAAE,CAAC;IACzG,CAAC;IACO,QAAQ,CAAC,QAA+B;QAC9C,IAAI,CAAC,QAAQ,CAAC,mBAAmB,IAAI,QAAQ,CAAC,iBAAiB,KAAK,SAAS,IAAI,QAAQ,CAAC,iBAAiB,KAAK,SAAS;YAAE,OAAO,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC;QACnJ,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,iBAAiB,IAAI,EAAE,CAAC,CAAC;QAC/D,MAAM,OAAO,GAAG,QAAQ,CAAC,iBAAiB,CAAC;QAC3C,0EAA0E;QAC1E,wEAAwE;QACxE,IAAI,OAAO,QAAQ,CAAC,mBAAmB,KAAK,QAAQ,IAAI,CAAC,QAAQ,CAAC,mBAAmB,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,OAAO,IAAI,CAAC,IAAI,OAAO,GAAG,EAAE;YAAE,MAAM,IAAI,WAAW,CAAC,GAAG,EAAE,yCAAyC,CAAC,CAAC;QAC3T,OAAO,EAAE,KAAK,EAAE,QAAQ,CAAC,mBAAmB,EAAE,SAAS,EAAE,IAAI,CAAC,GAAG,CAAC,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,GAAG,IAAI,CAAC,EAAE,CAAC;IAC9G,CAAC;IACO,MAAM,CAAC,QAAsB,EAAE,KAAa,EAAE,UAAkB;QACtE,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;QACxB,IAAI,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,OAAO,QAAQ,CAAC,YAAY,KAAK,QAAQ,IAAI,CAAC,QAAQ,CAAC,YAAY,IAAI,OAAO,QAAQ,CAAC,aAAa,KAAK,QAAQ,IAAI,CAAC,QAAQ,CAAC,aAAa,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,QAAQ,CAAC,UAAU,IAAI,CAAC,IAAI,QAAQ,CAAC,UAAU,GAAG,KAAK;YAAE,MAAM,IAAI,WAAW,CAAC,GAAG,EAAE,+BAA+B,CAAC,CAAC;QAC/W,uEAAuE;QACvE,sEAAsE;QACtE,IAAI,CAAC,KAAK,GAAG,EAAE,QAAQ,EAAE,EAAE,GAAG,QAAQ,EAAE,mBAAmB,EAAE,SAAS,EAAE,iBAAiB,EAAE,SAAS,EAAE,iBAAiB,EAAE,SAAS,EAAE,EAAE,SAAS,EAAE,UAAU,GAAG,QAAQ,CAAC,UAAU,GAAG,IAAI,EAAE,iBAAiB,EAAE,CAAC,EAAE,CAAC;QACjN,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QACxB,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;YACzC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,mBAAmB,GAAG,QAAQ,CAAC,KAAK,CAAC;YACzD,IAAI,CAAC,KAAK,CAAC,iBAAiB,GAAG,QAAQ,CAAC,SAAS,CAAC;YAClD,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QAC/B,CAAC;gBAAS,CAAC;YAAC,IAAI,CAAC,MAAM,EAAE,CAAC;QAAC,CAAC;IAC9B,CAAC;IACD,KAAK,CAAC,KAAK,CAAC,KAAqB;QAC/B,IAAI,CAAC,KAAK,EAAE,CAAC;QAAC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC;QACvC,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,IAAI,CAAe,QAAQ,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC;QAC5E,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,KAAK,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;QAAC,OAAO,QAAQ,CAAC,IAAI,CAAC;IACjE,CAAC;IACD,KAAK,CAAC,QAAQ,CAAC,KAAsB;QACnC,IAAI,CAAC,KAAK,EAAE,CAAC;QAAC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC;QACvC,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,IAAI,CAAe,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,YAAY,EAAE,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC;QACzJ,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;QACxB,IAAI,CAAC,QAAQ,CAAC,qBAAqB;YAAE,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,KAAK,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;QAC9E,OAAO,EAAE,IAAI,EAAE,QAAQ,CAAC,IAAI,EAAE,qBAAqB,EAAE,QAAQ,CAAC,qBAAqB,EAAE,CAAC;IACxF,CAAC;IACD,KAAK,CAAC,MAAM;QACV,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,EAAE,QAAQ,CAAC,aAAa,CAAC;QACnD,IAAI,CAAC,KAAK,EAAE,CAAC;QACb,IAAI,OAAO;YAAE,MAAM,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,EAAE,aAAa,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC;IAClF,CAAC;IACO,KAAK,CAAC,WAAW,CAAC,KAAa;QACrC,IAAI,IAAI,CAAC,WAAW;YAAE,OAAO,IAAI,CAAC,WAAW,CAAC;QAC9C,MAAM,OAAO,GAAG,IAAI,CAAC,kBAAkB,CAAC,KAAK,CAAC,CAAC;QAC/C,IAAI,CAAC,WAAW,GAAG,OAAO,CAAC;QAC3B,IAAI,CAAC;YAAC,MAAM,OAAO,CAAC;QAAC,CAAC;gBAAS,CAAC;YAAC,IAAI,IAAI,CAAC,WAAW,KAAK,OAAO;gBAAE,IAAI,CAAC,WAAW,GAAG,SAAS,CAAC;QAAC,CAAC;IACpG,CAAC;IACO,KAAK,CAAC,kBAAkB,CAAC,KAAa;QAC5C,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,EAAE,QAAQ,CAAC,aAAa,CAAC;QACnD,IAAI,CAAC,OAAO;YAAE,MAAM,IAAI,WAAW,CAAC,GAAG,EAAE,gBAAgB,CAAC,CAAC;QAC3D,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,IAAI,CAAe,UAAU,EAAE,IAAI,CAAC,KAAK,CAAC,EAAE,aAAa,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC;YACnG,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,KAAK,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;QAC3C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,IAAI,CAAC,KAAK,KAAK,KAAK,IAAI,KAAK,YAAY,WAAW,IAAI,KAAK,CAAC,MAAM,KAAK,GAAG;gBAAE,IAAI,CAAC,KAAK,EAAE,CAAC;YAC/F,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IACO,KAAK,CAAC,KAAK,CAAC,KAAa,EAAE,KAAc;QAC/C,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;QACxB,IAAI,CAAC,IAAI,CAAC,KAAK;YAAE,MAAM,IAAI,WAAW,CAAC,GAAG,EAAE,gBAAgB,CAAC,CAAC;QAC9D,IAAI,IAAI,CAAC,KAAK,CAAC,SAAS,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM;YAAE,MAAM,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;QAC/E,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;QACxB,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAM,CAAC,QAAQ,CAAC,mBAAmB,IAAI,IAAI,CAAC,KAAM,CAAC,iBAAiB,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM;YAAE,OAAO,IAAI,CAAC,KAAM,CAAC,QAAQ,CAAC,mBAAoB,CAAC;QAChK,IAAI,MAA6B,CAAC;QAClC,IAAI,CAAC;YACH,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,CAAwB,kBAAkB,EAAE,EAAE,EAAE,IAAI,CAAC,KAAM,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC;QAC7G,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;YACxB,IAAI,CAAC,CAAC,KAAK,YAAY,WAAW,CAAC,IAAI,KAAK,CAAC,MAAM,KAAK,GAAG;gBAAE,MAAM,KAAK,CAAC;YACzE,2EAA2E;YAC3E,MAAM,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;YAC9B,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;YACxB,IAAI,IAAI,CAAC,KAAM,CAAC,QAAQ,CAAC,mBAAmB,IAAI,IAAI,CAAC,KAAM,CAAC,iBAAiB,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM;gBAAE,OAAO,IAAI,CAAC,KAAM,CAAC,QAAQ,CAAC,mBAAoB,CAAC;YACtJ,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,CAAwB,kBAAkB,EAAE,EAAE,EAAE,IAAI,CAAC,KAAM,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC;QAC7G,CAAC;QACD,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;QACxB,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QACvC,IAAI,CAAC,QAAQ,CAAC,KAAK,IAAI,QAAQ,CAAC,SAAS,IAAI,IAAI,CAAC,GAAG,EAAE;YAAE,MAAM,IAAI,WAAW,CAAC,GAAG,EAAE,wCAAwC,CAAC,CAAC;QAC9H,IAAI,CAAC,KAAM,CAAC,QAAQ,CAAC,mBAAmB,GAAG,QAAQ,CAAC,KAAK,CAAC;QAC1D,IAAI,CAAC,KAAM,CAAC,iBAAiB,GAAG,QAAQ,CAAC,SAAS,CAAC;QACnD,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QAAC,IAAI,CAAC,MAAM,EAAE,CAAC;QAAC,OAAO,QAAQ,CAAC,KAAK,CAAC;IACrE,CAAC;IACD,KAAK,CAAC,KAAK,CAAC,KAAK,GAAG,KAAK;QACvB,IAAI,IAAI,CAAC,OAAO;YAAE,OAAO,IAAI,CAAC,OAAO,CAAC;QACtC,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,EAAE,QAAQ,CAAC,mBAAmB,IAAI,IAAI,CAAC,KAAK,CAAC,iBAAiB,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM;YAAE,OAAO,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,mBAAmB,CAAC;QAC7J,IAAI,IAAI,CAAC,OAAO;YAAE,OAAO,IAAI,CAAC,OAAO,CAAC;QACtC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC;QACzB,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE;YACrD,IAAI,IAAI,CAAC,KAAK,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;gBACvC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,mBAAmB,GAAG,SAAS,CAAC;gBAAC,IAAI,CAAC,KAAK,CAAC,iBAAiB,GAAG,CAAC,CAAC;gBAAC,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;gBAAC,IAAI,CAAC,MAAM,EAAE,CAAC;YAChI,CAAC;YACD,MAAM,KAAK,CAAC;QACd,CAAC,CAAC,CAAC;QACH,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QACvB,IAAI,CAAC;YAAC,OAAO,MAAM,OAAO,CAAC;QAAC,CAAC;gBAAS,CAAC;YAAC,IAAI,IAAI,CAAC,OAAO,KAAK,OAAO;gBAAE,IAAI,CAAC,OAAO,GAAG,SAAS,CAAC;QAAC,CAAC;IACnG,CAAC;IACD,KAAK,CAAC,EAAE;QACN,IAAI,CAAC,IAAI,CAAC,KAAK;YAAE,MAAM,IAAI,WAAW,CAAC,GAAG,EAAE,gBAAgB,CAAC,CAAC;QAC9D,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC;QACzB,IAAI,IAAI,CAAC,KAAK,CAAC,SAAS,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM;YAAE,MAAM,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;QAC/E,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;QACxB,IAAI,QAA+D,CAAC;QACpE,IAAI,CAAC;YACH,QAAQ,GAAG,MAAM,IAAI,CAAC,IAAI,CAAkB,KAAK,EAAE,SAAS,EAAE,IAAI,CAAC,KAAM,CAAC,QAAQ,CAAC,YAAY,EAAE,KAAK,CAAC,CAAC;QAC1G,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;YACxB,IAAI,CAAC,CAAC,KAAK,YAAY,WAAW,CAAC,IAAI,KAAK,CAAC,MAAM,KAAK,GAAG;gBAAE,MAAM,KAAK,CAAC;YACzE,MAAM,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;YAC9B,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;YACxB,QAAQ,GAAG,MAAM,IAAI,CAAC,IAAI,CAAkB,KAAK,EAAE,SAAS,EAAE,IAAI,CAAC,KAAM,CAAC,QAAQ,CAAC,YAAY,EAAE,KAAK,CAAC,CAAC;QAC1G,CAAC;QACD,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;QACxB,IAAI,CAAC,KAAM,CAAC,QAAQ,CAAC,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC;QAAC,IAAI,CAAC,KAAM,CAAC,QAAQ,CAAC,aAAa,GAAG,QAAQ,CAAC,aAAa,CAAC;QACvG,IAAI,CAAC,MAAM,EAAE,CAAC;QAAC,OAAO,QAAQ,CAAC,IAAI,CAAC;IACtC,CAAC;IACD,gBAAgB,KAAa,OAAO,IAAI,CAAC,KAAK,EAAE,iBAAiB,IAAI,CAAC,CAAC,CAAC,CAAC;CAC1E"}

package/dist/client.d.ts

@@ -1,9 +1,12 @@
+import type { AuthLoginInput, AuthSignupInput } from "./auth-session.js";
+import { type LoadAppOptions, type LoadedAppFrontend } from "./frontend.js";
 import type { AppExtension, AppScope } from "./extensions.js";
 import type { InstalledApp } from "./apps.js";
 import type { Agent, AgentConfig, AgentCoreEvent, AgentCreateInput, AgentCreateResult, AgentDeleteResult, AgentPauseResult, AgentRestartResult, AgentStatus, AgentSystemMCPResult, AgentUpdateInput, AptevaClientOptions, AuthStatus, ChannelInfo, Chat, CreateChatOptions, CreateOrResumeChatOptions, ChatCreateResult, CreateDelegatedUserInput, DelegatedUserToken, ChatHistoryMessage, ChatMessage, ChatMessagesQuery, ChatSendInput, ChatSendOptions, ChatStreamOptions, MCPCallResponse, Project, StreamHandle, SubscribeOptions, SSEEventMetadata, TelemetryEvent, TelemetryPeriod, TelemetryQuery, TelemetryStats, Thread, TimelineBucket, UpdateChatOptions, User } from "./types.js";
 export declare class AptevaClient {
     private readonly baseURL;
     private apiKey?;
+    private readonly appAuth?;
     private accessToken?;
     private readonly projectId?;
     private readonly fetchImpl;
@@ -22,12 +25,15 @@ export declare class AptevaClient {
     refreshAccessToken(): Promise<boolean>;
     private renewAfterUnauthorized;
     readonly auth: {
-        register: (email: string, password: string, name?: string) => Promise<{
+        register: (email: string | AuthSignupInput, password?: string, name?: string) => Promise<{
             user: User;
+            verification_required?: boolean;
         }>;
-        login: (email: string, password: string) => Promise<User>;
+        login: (email: string | AuthLoginInput, password?: string) => Promise<User>;
         logout: () => Promise<void>;
         me: () => Promise<User>;
+        getSession: () => import("./auth-session.js").AuthSessionInfo | undefined;
+        refresh: () => Promise<import("./auth-session.js").AuthSessionInfo | undefined>;
         status: () => Promise<AuthStatus>;
         changePassword: (current: string, next: string) => Promise<void>;
         listKeys: () => Promise<{
@@ -98,6 +104,8 @@ export declare class AptevaClient {
     /** Create an extension instance. Retain it in the host; use() does not cache. */
     use<T>(extension: AppExtension<T>, scope?: AppScope): T;
     readonly apps: {
+        /** Load an installed app’s bundled client and optional React UI. */
+        load: <TClient = unknown, TComponent = unknown>(name: string, options: LoadAppOptions) => Promise<LoadedAppFrontend<TClient, TComponent>>;
         /** Requires the platform's existing app-list permission. No auth bypass. */
         list: (scope?: Pick<AppScope, "projectId">, init?: RequestInit) => Promise<InstalledApp[]>;
     };

package/dist/client.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../src/client.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,YAAY,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAC;AAC9D,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,WAAW,CAAC;AAC9C,OAAO,KAAK,EACV,KAAK,EACL,WAAW,EACX,cAAc,EACd,gBAAgB,EAChB,iBAAiB,EACjB,iBAAiB,EACjB,gBAAgB,EAChB,kBAAkB,EAClB,WAAW,EACX,oBAAoB,EACpB,gBAAgB,EAChB,mBAAmB,EACnB,UAAU,EACV,WAAW,EACX,IAAI,EACJ,iBAAiB,EACjB,yBAAyB,EACzB,gBAAgB,EAChB,wBAAwB,EACxB,kBAAkB,EAClB,kBAAkB,EAClB,WAAW,EACX,iBAAiB,EACjB,aAAa,EACb,eAAe,EACf,iBAAiB,EAEjB,eAAe,EACf,OAAO,EAEP,YAAY,EACZ,gBAAgB,EAChB,gBAAgB,EAChB,cAAc,EACd,eAAe,EACf,cAAc,EACd,cAAc,EACd,MAAM,EACN,cAAc,EACd,iBAAiB,EACjB,IAAI,EACL,MAAM,YAAY,CAAC;AAIpB,qBAAa,YAAY;IACvB,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAS;IACjC,OAAO,CAAC,MAAM,CAAC,CAAS;IACxB,OAAO,CAAC,WAAW,CAAC,CAAS;IAC7B,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAS;IACpC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAe;IACzC,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAa;IAC7C,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAS;IACnC,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAC,CAAoC;IACtE,OAAO,CAAC,kBAAkB,CAAK;IAC/B,OAAO,CAAC,mBAAmB,CAAC,CAAmB;IAC/C,OAAO,CAAC,QAAQ,CAAC,sBAAsB,CAAoC;gBAE/D,IAAI,EAAE,mBAAmB;IAarC,SAAS,CAAC,GAAG,EAAE,MAAM,GAAG,SAAS,GAAG,IAAI;IAKxC,SAAS,IAAI,MAAM,GAAG,SAAS;IAO/B,cAAc,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,GAAG,IAAI;IAK/C,cAAc,IAAI,MAAM,GAAG,SAAS;IAIpC,mFAAmF;IAC7E,kBAAkB,IAAI,OAAO,CAAC,OAAO,CAAC;YAmB9B,sBAAsB;IAcpC,QAAQ,CAAC,IAAI;0BACO,MAAM,YAAY,MAAM,SAAS,MAAM;kBACrC,IAAI;;uBAET,MAAM,YAAY,MAAM;;;;kCASb,MAAM,QAAQ,MAAM;;gBAIvB,MAAM;kBAAQ,MAAM;wBAAc,MAAM;;0BAI7C,MAAM;gBACN,MAAM;iBAAO,MAAM;;wBAErB,MAAM;MACtB;IAEF,QAAQ,CAAC,QAAQ;;kBAEL,MAAM;MAChB;IAKF,wDAAwD;IACxD,QAAQ,CAAC,cAAc;wBACL,wBAAwB;MAYxC;IAKF,QAAQ,CAAC,MAAM;;wBAGG,gBAAgB;kBAGtB,MAAM;qBAEH,MAAM,SAAS,gBAAgB;qBAG/B,MAAM,QAAQ,MAAM;qBAGpB,MAAM;qBAGN,MAAM;sBAEL,MAAM;uBAEL,MAAM;0BAEH,MAAM;iBAKf,CAAC,oBAAoB,MAAM;uBAGrB,CAAC,oBAAoB,MAAM,UAAU,WAAW;wBAG/C,MAAM,QAAQ,UAAU,GAAG,iBAAiB,UAAU,OAAO;oBAUjE,MAAM;mBAGP,MAAM;sBAGH,MAAM;0BAOF,MAAM;gBAKhB,CAAC,gBAAgB,MAAM,QAAQ,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;kBAGpD,CAAC,gBAAgB,MAAM,QAAQ,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;iBAGvD,CAAC,uBACJ,MAAM,WACD,CAAC,KAAK,EAAE,CAAC,EAAE,QAAQ,EAAE,gBAAgB,KAAK,IAAI,SAChD,gBAAgB,KACtB,YAAY;MAEf;IAIF,QAAQ,CAAC,SAAS;mBAEL,cAAc;4BAWL,MAAM,WAAU,eAAe;yBAMlC,MAAM,WAAU,eAAe;0BAUrC,MAAM,WACN,CAAC,KAAK,EAAE,cAAc,KAAK,IAAI,SACjC,gBAAgB,KACtB,YAAY;MAgBf;IAMF,QAAQ,CAAC,IAAI;wBAEK,MAAM;sBAKR,MAAM;0BAOF,MAAM,YAAY,MAAM,GAAG,iBAAiB;kCAapC,MAAM,WAAW,yBAAyB;yBASnD,MAAM,WAAW,iBAAiB;+BAa5B,MAAM,YAAY,MAAM,GAAG,iBAAiB;4BAiBlC,MAAM,UAAS,iBAAiB;2BAQhD,MAAM,UAAS,iBAAiB;2BAQhC,MAAM,SAAS,aAAa;;uBAkBnC,MAAM,kBACE,MAAM,GAAG,aAAa,YAC7B,eAAe;yBA2BT,MAAM,QAAQ,iBAAiB,KAAG,YAAY;2BAmB5C,MAAM,aAAa,MAAM;0BAChB,MAAM;;MAIlC;IAOF,GAAG,CAAC,CAAC,GAAG,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,GAAE,QAAa,GAAG,SAAS,CAAC,CAAC,CAAC;IAoDlE,iFAAiF;IACjF,GAAG,CAAC,CAAC,EAAE,SAAS,EAAE,YAAY,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE,QAAQ,GAAG,CAAC;IAIvD,QAAQ,CAAC,IAAI;QACX,4EAA4E;uBAC9D,IAAI,CAAC,QAAQ,EAAE,WAAW,CAAC,SAAc,WAAW;MAKlE;IAII,QAAQ,CAAC,CAAC,EACd,OAAO,EAAE,MAAM,EACf,QAAQ,EAAE,MAAM,EAChB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC7B,IAAI,CAAC,EAAE,WAAW,GACjB,OAAO,CAAC,CAAC,CAAC;IAeb,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,CAAC,CAAC;IAGpD,IAAI,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,CAAC,CAAC;IAGrE,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,CAAC,CAAC;IAGpE,KAAK,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,CAAC,CAAC;IAGtE,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,CAAC,CAAC;IAQpD,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAAC,GAAG,MAAM;IAwBlF,SAAS,CAAC,CAAC,EACT,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAAC,GAAG,SAAS,EAC/D,OAAO,EAAE,CAAC,KAAK,EAAE,CAAC,EAAE,QAAQ,EAAE,gBAAgB,KAAK,IAAI,EACvD,IAAI,CAAC,EAAE,gBAAgB,GACtB,YAAY;IA2Ef,OAAO,CAAC,kBAAkB;IAmJ1B,OAAO,CAAC,eAAe;IAmBvB,OAAO,CAAC,OAAO;IASf,OAAO,CAAC,WAAW;IAInB,OAAO,CAAC,uBAAuB;YAIjB,OAAO;CA4DtB;AAgBD,wBAAgB,SAAS,CAAC,CAAC,EAAE,GAAG,EAAE,eAAe,CAAC,OAAO,CAAC,GAAG,CAAC,CAgB7D;AAED,MAAM,WAAW,SAAS,CAAC,QAAQ,GAAG,OAAO;IAC3C,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,GAAG,CAAC,CAAC,GAAG,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;IAChE,IAAI,CAAC,CAAC,GAAG,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;IACjF,GAAG,CAAC,CAAC,GAAG,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;IAChF,KAAK,CAAC,CAAC,GAAG,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;IAClF,GAAG,CAAC,CAAC,GAAG,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;IAChE,IAAI,CAAC,CAAC,GAAG,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,IAAI,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;IACjG,SAAS,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,KAAK,EAAE,CAAC,EAAE,QAAQ,EAAE,gBAAgB,KAAK,IAAI,EAAE,IAAI,CAAC,EAAE,gBAAgB,GAAG,YAAY,CAAC;IAC3H,MAAM,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,MAAM,CAAC;CACtD"}
+{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../src/client.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,cAAc,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AACzE,OAAO,EAAmB,KAAK,cAAc,EAAE,KAAK,iBAAiB,EAAE,MAAM,eAAe,CAAC;AAE7F,OAAO,KAAK,EAAE,YAAY,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAC;AAC9D,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,WAAW,CAAC;AAC9C,OAAO,KAAK,EACV,KAAK,EACL,WAAW,EACX,cAAc,EACd,gBAAgB,EAChB,iBAAiB,EACjB,iBAAiB,EACjB,gBAAgB,EAChB,kBAAkB,EAClB,WAAW,EACX,oBAAoB,EACpB,gBAAgB,EAChB,mBAAmB,EACnB,UAAU,EACV,WAAW,EACX,IAAI,EACJ,iBAAiB,EACjB,yBAAyB,EACzB,gBAAgB,EAChB,wBAAwB,EACxB,kBAAkB,EAClB,kBAAkB,EAClB,WAAW,EACX,iBAAiB,EACjB,aAAa,EACb,eAAe,EACf,iBAAiB,EAEjB,eAAe,EACf,OAAO,EAEP,YAAY,EACZ,gBAAgB,EAChB,gBAAgB,EAChB,cAAc,EACd,eAAe,EACf,cAAc,EACd,cAAc,EACd,MAAM,EACN,cAAc,EACd,iBAAiB,EACjB,IAAI,EACL,MAAM,YAAY,CAAC;AAIpB,qBAAa,YAAY;IACvB,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAS;IACjC,OAAO,CAAC,MAAM,CAAC,CAAS;IACxB,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAc;IACvC,OAAO,CAAC,WAAW,CAAC,CAAS;IAC7B,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAS;IACpC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAe;IACzC,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAa;IAC7C,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAS;IACnC,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAC,CAAoC;IACtE,OAAO,CAAC,kBAAkB,CAAK;IAC/B,OAAO,CAAC,mBAAmB,CAAC,CAAmB;IAC/C,OAAO,CAAC,QAAQ,CAAC,sBAAsB,CAAoC;gBAE/D,IAAI,EAAE,mBAAmB;IAmBrC,SAAS,CAAC,GAAG,EAAE,MAAM,GAAG,SAAS,GAAG,IAAI;IAMxC,SAAS,IAAI,MAAM,GAAG,SAAS;IAO/B,cAAc,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,GAAG,IAAI;IAM/C,cAAc,IAAI,MAAM,GAAG,SAAS;IAIpC,mFAAmF;IAC7E,kBAAkB,IAAI,OAAO,CAAC,OAAO,CAAC;YAoB9B,sBAAsB;IAcpC,QAAQ,CAAC,IAAI;0BACO,MAAM,GAAG,eAAe,aAAa,MAAM,SAAS,MAAM;kBAGjD,IAAI;oCAA0B,OAAO;;uBAGjD,MAAM,GAAG,cAAc,aAAa,MAAM;;;;;sBAiB7C,OAAO,CAAC,UAAU,CAAC;kCAIL,MAAM,QAAQ,MAAM;;gBAIvB,MAAM;kBAAQ,MAAM;wBAAc,MAAM;;0BAI7C,MAAM;gBACN,MAAM;iBAAO,MAAM;;wBAErB,MAAM;MACtB;IAEF,QAAQ,CAAC,QAAQ;;kBAEL,MAAM;MAChB;IAKF,wDAAwD;IACxD,QAAQ,CAAC,cAAc;wBACL,wBAAwB;MAYxC;IAKF,QAAQ,CAAC,MAAM;;wBAGG,gBAAgB;kBAGtB,MAAM;qBAEH,MAAM,SAAS,gBAAgB;qBAG/B,MAAM,QAAQ,MAAM;qBAGpB,MAAM;qBAGN,MAAM;sBAEL,MAAM;uBAEL,MAAM;0BAEH,MAAM;iBAKf,CAAC,oBAAoB,MAAM;uBAGrB,CAAC,oBAAoB,MAAM,UAAU,WAAW;wBAG/C,MAAM,QAAQ,UAAU,GAAG,iBAAiB,UAAU,OAAO;oBAUjE,MAAM;mBAGP,MAAM;sBAGH,MAAM;0BAOF,MAAM;gBAKhB,CAAC,gBAAgB,MAAM,QAAQ,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;kBAGpD,CAAC,gBAAgB,MAAM,QAAQ,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;iBAGvD,CAAC,uBACJ,MAAM,WACD,CAAC,KAAK,EAAE,CAAC,EAAE,QAAQ,EAAE,gBAAgB,KAAK,IAAI,SAChD,gBAAgB,KACtB,YAAY;MAEf;IAIF,QAAQ,CAAC,SAAS;mBAEL,cAAc;4BAWL,MAAM,WAAU,eAAe;yBAMlC,MAAM,WAAU,eAAe;0BAUrC,MAAM,WACN,CAAC,KAAK,EAAE,cAAc,KAAK,IAAI,SACjC,gBAAgB,KACtB,YAAY;MAgBf;IAMF,QAAQ,CAAC,IAAI;wBAEK,MAAM;sBAKR,MAAM;0BAOF,MAAM,YAAY,MAAM,GAAG,iBAAiB;kCAapC,MAAM,WAAW,yBAAyB;yBASnD,MAAM,WAAW,iBAAiB;+BAa5B,MAAM,YAAY,MAAM,GAAG,iBAAiB;4BAiBlC,MAAM,UAAS,iBAAiB;2BAQhD,MAAM,UAAS,iBAAiB;2BAQhC,MAAM,SAAS,aAAa;;uBAkBnC,MAAM,kBACE,MAAM,GAAG,aAAa,YAC7B,eAAe;yBA2BT,MAAM,QAAQ,iBAAiB,KAAG,YAAY;2BAmB5C,MAAM,aAAa,MAAM;0BAChB,MAAM;;MAIlC;IAOF,GAAG,CAAC,CAAC,GAAG,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,GAAE,QAAa,GAAG,SAAS,CAAC,CAAC,CAAC;IAoDlE,iFAAiF;IACjF,GAAG,CAAC,CAAC,EAAE,SAAS,EAAE,YAAY,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE,QAAQ,GAAG,CAAC;IAIvD,QAAQ,CAAC,IAAI;QACX,oEAAoE;eAC7D,OAAO,YAAY,UAAU,kBAAkB,MAAM,WAAW,cAAc,KAAG,OAAO,CAAC,iBAAiB,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;QAEvI,4EAA4E;uBAC9D,IAAI,CAAC,QAAQ,EAAE,WAAW,CAAC,SAAc,WAAW;MAKlE;IAII,QAAQ,CAAC,CAAC,EACd,OAAO,EAAE,MAAM,EACf,QAAQ,EAAE,MAAM,EAChB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC7B,IAAI,CAAC,EAAE,WAAW,GACjB,OAAO,CAAC,CAAC,CAAC;IAeb,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,CAAC,CAAC;IAGpD,IAAI,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,CAAC,CAAC;IAGrE,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,CAAC,CAAC;IAGpE,KAAK,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,CAAC,CAAC;IAGtE,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,CAAC,CAAC;IAQpD,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAAC,GAAG,MAAM;IAwBlF,SAAS,CAAC,CAAC,EACT,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAAC,GAAG,SAAS,EAC/D,OAAO,EAAE,CAAC,KAAK,EAAE,CAAC,EAAE,QAAQ,EAAE,gBAAgB,KAAK,IAAI,EACvD,IAAI,CAAC,EAAE,gBAAgB,GACtB,YAAY;IA2Ef,OAAO,CAAC,kBAAkB;IAgK1B,OAAO,CAAC,eAAe;IAmBvB,OAAO,CAAC,OAAO;IASf,OAAO,CAAC,WAAW;IAInB,OAAO,CAAC,uBAAuB;YAIjB,OAAO;CAmEtB;AAgBD,wBAAgB,SAAS,CAAC,CAAC,EAAE,GAAG,EAAE,eAAe,CAAC,OAAO,CAAC,GAAG,CAAC,CAgB7D;AAED,MAAM,WAAW,SAAS,CAAC,QAAQ,GAAG,OAAO;IAC3C,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,GAAG,CAAC,CAAC,GAAG,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;IAChE,IAAI,CAAC,CAAC,GAAG,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;IACjF,GAAG,CAAC,CAAC,GAAG,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;IAChF,KAAK,CAAC,CAAC,GAAG,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;IAClF,GAAG,CAAC,CAAC,GAAG,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;IAChE,IAAI,CAAC,CAAC,GAAG,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,IAAI,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;IACjG,SAAS,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,KAAK,EAAE,CAAC,EAAE,QAAQ,EAAE,gBAAgB,KAAK,IAAI,EAAE,IAAI,CAAC,EAAE,gBAAgB,GAAG,YAAY,CAAC;IAC3H,MAAM,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,MAAM,CAAC;CACtD"}