@apteva/web-sdk 0.7.0 → 0.9.0

package/CHANGELOG.md

@@ -1,3 +1,31 @@
+## 0.9.0
+
+- Add `credential: "auth" | "platform"` to app handles, extensions and frontend
+  loaders. HTTP, MCP and SSE use the selected credential within one managed session.
+- Refresh Auth and platform credentials independently with shared renewal across
+  handles. Auth routes remain usable when platform minting is unavailable.
+- Prevent stale mints and old-session 401s from overwriting a newer session.
+  Both stream types reconnect at their credential expiry and close on logout or
+  detected session revocation. No credential fallback or HTTP replay after a 401.
+- Restrict managed forwarding to the configured server, project and scoped app
+  routes; reject escaped paths, URL credentials, header overrides and redirects.
+- Managed `getAccessToken()` now returns `undefined`; use app handles instead.
+  Host-owned opaque-token transport retains its existing behavior.
+- Add mixed-session regression tests and an opt-in integration harness using real
+  Auth, API and Telephony handlers. Platform mint/Conversations gateway are fixtures.
+- Requires Auth v0.12.0 or newer. No additional Auth or server release required.
+
+## 0.8.0
+
+- Add unified Auth app login/signup, user lookup, session metadata, automatic
+  platform-token renewal and logout through `AptevaClient({ auth })`.
+- Coordinate Auth refresh rotation and platform renewal, preserve rotated Auth
+  credentials during mint outages, and ignore late results after session changes.
+- Keep app-user credentials isolated from API keys/cookies; reconnect managed
+  streams at expiry and close them on logout. Existing SDK auth mode is unchanged.
+- Requires Auth v0.12.0 with explicit role bindings and platform policy lifetimes
+  of at most 60 seconds. Sessions are memory-only; reloads require login.
+
 # Changelog
 
 ## 0.7.0 — 2026-09-07

package/README.md

@@ -556,3 +556,106 @@ bun run serve
 ## License
 
 MIT
+
+## One client for Auth app sessions (v0.9.0)
+
+With Auth app v0.12.0 or newer, configure `auth` and use the same client for
+login, app requests, agents and logout:
+
+```ts
+const apteva = new AptevaClient({
+  baseURL: "https://agents.example.com",
+  projectId: "YOUR_PROJECT",
+  auth: {
+    clientId: "YOUR_PUBLIC_AUTH_CLIENT",
+    // installId: 209,              // when explicit install routing is needed
+    // organizationSlug: "default",// for a multi-organization Auth client
+    // profile: "commercial",      // requested role policy; checked by Auth
+    onSessionChange: session => renderUser(session?.user),
+  },
+});
+
+const user = await apteva.auth.login({ email, password });
+const crm = apteva.app("api", { credential: "auth" });
+const conversations = apteva.app("conversations", { credential: "platform" });
+await crm.get("/YOUR_CRM_ROUTE");
+await conversations.get("/chats");
+
+const telephony = await apteva.apps.load("telephony", {
+  credential: "auth",
+  installId: YOUR_TELEPHONY_INSTALL_ID,
+  clientOptions: { authProvider: "YOUR_CONFIGURED_PROVIDER" },
+});
+// The loaded client keeps this Auth handle for /user/ calls and subscriptions.
+await apteva.auth.logout();
+```
+
+`auth.register({ email, password, displayName? })` also supports signup. When
+email verification is required, it returns `verification_required: true` and
+does not establish a session. `auth.me()` reads the current Auth user;
+`auth.getSession()` returns a local copy of user, authorization and expiry
+metadata without credentials. `auth.status()` reports local session presence.
+`auth.refresh()` explicitly requests a fresh platform credential when needed.
+
+Auth owns identity and authorization. Configure its trusted role bindings and
+matching platform policies with `token_ttl_seconds: 60` before enabling platform
+app access. Login can succeed without platform permissions; platform calls fail
+closed until an authorized policy can mint a token. Auth-credential routes remain
+available according to their own current user permissions. A requested profile never grants a
+role. The SDK does not infer permissions or mint credentials itself.
+
+The SDK privately maintains the normal Auth session plus its short-lived
+platform token. Choose `credential: "auth"` for API Auth-policy routes and
+Telephony `/user/` routes; choose `"platform"` for Conversations. Omitted choices
+default to `"platform"`. The choice applies to every HTTP method, MCP tool and
+subscription on that handle, and to `client.use` and `client.apps.load`. Loaded
+frontend assets and the resulting app client share the selected handle.
+
+Before a request, the SDK renews the selected credential when it is within ten
+seconds of expiry. Auth tokens use the normal Auth refresh flow; platform tokens
+use `/delegated-token`. Auth requests do not require a working mint policy. Concurrent operations share renewal and refresh-token rotation; no custom
+refresh callback or application token endpoint is required. Both the returned
+absolute expiry and remaining lifetime limit credential use. Fetch streams
+reconnect at token expiry and close on local logout. SDK stream reconnection is
+not server-side revocation: already-admitted work or a modified client may outlive
+token expiry unless the receiving app enforces its own lifetime.
+
+Sessions are kept **in memory**, not written to localStorage, sessionStorage or
+cookies. Reuse one client per application session. Reloads/new tabs require
+login and do not implicitly share a rotating refresh credential. Do not copy
+refresh tokens between clients/tabs. This release deliberately does not provide
+persistent/shared browser sessions.
+
+`auth` mode cannot be combined with `apiKey`, `accessToken` or
+`refreshAccessToken`; `setApiKey` and `setAccessToken` are unavailable in this
+mode. `getAccessToken()` now returns `undefined` in managed mode: use scoped
+handles instead of extracting either credential. Host-owned opaque tokens retain
+the existing getter behavior. Auth handles cannot change the configured project
+or escape their app routes; credentials are never forwarded through redirects
+or accepted from URL parameters or header overrides.
+
+User requests omit cookies and never fall back to a kiosk or administrator
+credential. Platform administrator operations such as `auth.listKeys()` are
+rejected in app Auth mode. Without `auth` configuration, existing platform
+login and opaque-token APIs retain their original behavior.
+
+A temporary mint failure preserves the normal Auth session and blocks only
+platform-credential requests. Credential types never switch after an error. A rejected Auth refresh clears the session. Local logout clears
+credentials and streams immediately; a failed network logout still throws so the
+host can report that server-side revocation could not be confirmed. A late
+renewal cannot restore a logged-out session. HTTP writes are never automatically
+replayed after a 401; successful renewal prepares subsequent calls. Unlike legacy
+transport mode, a successfully recovered 401 does not trigger the
+`onUnauthorized` callback in managed Auth mode, although the original call still
+rejects. Reconcile a write's outcome before retrying it.
+
+
+### Mixed-app integration check
+
+Run `APTEVA_APPS_DIR=/path/to/apps bun run test:mixed-apps` with a compatible Go
+compiler (`GO_BINARY` can select it). This uses real Auth handlers, API's
+`auth_jwt` validator and Telephony's `/user/` handler, temporary databases and
+local fixture servers. The platform mint API and protected Conversations gateway
+are simulated. It verifies routing, role downgrade, and server-side session
+revocation without accessing live accounts or carriers. Set `SDK_TEST_MODULE` to
+an unpacked package's `dist/index.js` to check the release artifact.

package/dist/auth-session.d.ts

@@ -0,0 +1,83 @@
+import type { AppCredential } from "./extensions.js";
+import type { User } from "./types.js";
+export interface AuthLoginInput {
+    email: string;
+    password: string;
+}
+export interface AuthSignupInput extends AuthLoginInput {
+    displayName?: string;
+}
+export interface AuthUser extends User {
+    id: number;
+    display_name?: string;
+    status?: string;
+    organization_id?: number;
+}
+export interface AuthAuthorization {
+    roles: string[];
+    permissions: string[];
+    authorization_version: number;
+    [key: string]: unknown;
+}
+export interface AuthSessionInfo {
+    user: AuthUser;
+    authorization?: AuthAuthorization;
+    expiresAt: string;
+    platformExpiresAt?: string;
+}
+export interface AppAuthOptions {
+    /** Public Auth app OAuth client identifier; never a private client secret. */
+    clientId: string;
+    installId?: number;
+    organizationSlug?: string;
+    /** Requested Auth policy profile. Auth independently checks current roles. */
+    profile?: string;
+    /** Receives user/session metadata, never credentials. Sessions are memory-only. */
+    onSessionChange?: (session: AuthSessionInfo | undefined) => void;
+}
+export interface SessionCredential {
+    token: string;
+    epoch: number;
+    revision: number;
+    deadline: number;
+}
+/** Internal issuer-specific session lifecycle. AptevaClient is the public API. */
+export declare class AuthSession {
+    private readonly baseURL;
+    private readonly projectId;
+    private readonly options;
+    private readonly fetchImpl;
+    private readonly changed;
+    private state?;
+    private epoch;
+    private authRevision;
+    private platformRevision;
+    private pending?;
+    private pendingAuth?;
+    private controllers;
+    private listeners;
+    constructor(baseURL: string, projectId: string, options: AppAuthOptions, fetchImpl: typeof fetch, changed: (token: string | undefined) => void);
+    info(): AuthSessionInfo | undefined;
+    onClear(listener: () => void): () => void;
+    private notify;
+    clear(): void;
+    private assertEpoch;
+    private call;
+    private input;
+    private platform;
+    private accept;
+    login(input: AuthLoginInput): Promise<AuthUser>;
+    register(input: AuthSignupInput): Promise<{
+        user: AuthUser;
+        verification_required?: boolean;
+    }>;
+    logout(): Promise<void>;
+    private refreshAuth;
+    private performAuthRefresh;
+    private renew;
+    token(force?: boolean): Promise<string>;
+    me(): Promise<AuthUser>;
+    credential(kind: AppCredential): Promise<SessionCredential>;
+    recover(kind: AppCredential, used: SessionCredential): Promise<boolean>;
+}
+//# sourceMappingURL=auth-session.d.ts.map

package/dist/auth-session.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth-session.d.ts","sourceRoot":"","sources":["../src/auth-session.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAErD,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,YAAY,CAAC;AAEvC,MAAM,WAAW,cAAc;IAAG,KAAK,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE;AACnE,MAAM,WAAW,eAAgB,SAAQ,cAAc;IAAG,WAAW,CAAC,EAAE,MAAM,CAAA;CAAE;AAChF,MAAM,WAAW,QAAS,SAAQ,IAAI;IACpC,EAAE,EAAE,MAAM,CAAC;IACX,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B;AACD,MAAM,WAAW,iBAAiB;IAChC,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,qBAAqB,EAAE,MAAM,CAAC;IAC9B,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AACD,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,QAAQ,CAAC;IACf,aAAa,CAAC,EAAE,iBAAiB,CAAC;IAClC,SAAS,EAAE,MAAM,CAAC;IAClB,iBAAiB,CAAC,EAAE,MAAM,CAAC;CAC5B;AACD,MAAM,WAAW,cAAc;IAC7B,8EAA8E;IAC9E,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,8EAA8E;IAC9E,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,mFAAmF;IACnF,eAAe,CAAC,EAAE,CAAC,OAAO,EAAE,eAAe,GAAG,SAAS,KAAK,IAAI,CAAC;CAClE;AAYD,MAAM,WAAW,iBAAiB;IAAG,KAAK,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE;AAIvG,kFAAkF;AAClF,qBAAa,WAAW;IAUpB,OAAO,CAAC,QAAQ,CAAC,OAAO;IACxB,OAAO,CAAC,QAAQ,CAAC,SAAS;IAC1B,OAAO,CAAC,QAAQ,CAAC,OAAO;IACxB,OAAO,CAAC,QAAQ,CAAC,SAAS;IAC1B,OAAO,CAAC,QAAQ,CAAC,OAAO;IAb1B,OAAO,CAAC,KAAK,CAAC,CAAQ;IACtB,OAAO,CAAC,KAAK,CAAK;IAClB,OAAO,CAAC,YAAY,CAAK;IACzB,OAAO,CAAC,gBAAgB,CAAK;IAC7B,OAAO,CAAC,OAAO,CAAC,CAAkB;IAClC,OAAO,CAAC,WAAW,CAAC,CAAgB;IACpC,OAAO,CAAC,WAAW,CAA8B;IACjD,OAAO,CAAC,SAAS,CAAyB;gBAEvB,OAAO,EAAE,MAAM,EACf,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,cAAc,EACvB,SAAS,EAAE,OAAO,KAAK,EACvB,OAAO,EAAE,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,KAAK,IAAI;IAK/D,IAAI,IAAI,eAAe,GAAG,SAAS;IAMnC,OAAO,CAAC,QAAQ,EAAE,MAAM,IAAI,GAAG,MAAM,IAAI;IACzC,OAAO,CAAC,MAAM;IAGd,KAAK,IAAI,IAAI;IAWb,OAAO,CAAC,WAAW;YAGL,IAAI;IAelB,OAAO,CAAC,KAAK;IAGb,OAAO,CAAC,QAAQ;IAShB,OAAO,CAAC,MAAM;IAeR,KAAK,CAAC,KAAK,EAAE,cAAc,GAAG,OAAO,CAAC,QAAQ,CAAC;IAK/C,QAAQ,CAAC,KAAK,EAAE,eAAe,GAAG,OAAO,CAAC;QAAE,IAAI,EAAE,QAAQ,CAAC;QAAC,qBAAqB,CAAC,EAAE,OAAO,CAAA;KAAE,CAAC;IAO9F,MAAM,IAAI,OAAO,CAAC,IAAI,CAAC;YAKf,WAAW;YAMX,kBAAkB;YAWlB,KAAK;IA+Bb,KAAK,CAAC,KAAK,UAAQ,GAAG,OAAO,CAAC,MAAM,CAAC;IAgBrC,EAAE,IAAI,OAAO,CAAC,QAAQ,CAAC;IAmBvB,UAAU,CAAC,IAAI,EAAE,aAAa,GAAG,OAAO,CAAC,iBAAiB,CAAC;IAkB3D,OAAO,CAAC,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,iBAAiB,GAAG,OAAO,CAAC,OAAO,CAAC;CAS9E"}

package/dist/auth-session.js

@@ -0,0 +1,300 @@
+import { AptevaError } from "./errors.js";
+const margin = 10_000;
+/** Internal issuer-specific session lifecycle. AptevaClient is the public API. */
+export class AuthSession {
+    baseURL;
+    projectId;
+    options;
+    fetchImpl;
+    changed;
+    state;
+    epoch = 0;
+    authRevision = 0;
+    platformRevision = 0;
+    pending;
+    pendingAuth;
+    controllers = new Set();
+    listeners = new Set();
+    constructor(baseURL, projectId, options, fetchImpl, changed) {
+        this.baseURL = baseURL;
+        this.projectId = projectId;
+        this.options = options;
+        this.fetchImpl = fetchImpl;
+        this.changed = changed;
+        if (!projectId || !options.clientId?.trim())
+            throw new Error("Auth requires projectId and auth.clientId");
+        if (options.installId !== undefined && (!Number.isSafeInteger(options.installId) || options.installId < 1))
+            throw new Error("Invalid Auth installId");
+    }
+    info() {
+        const s = this.state;
+        return s ? structuredClone({ user: s.response.user, authorization: s.response.authorization,
+            expiresAt: new Date(s.expiresAt).toISOString(),
+            platformExpiresAt: s.platformExpiresAt ? new Date(s.platformExpiresAt).toISOString() : undefined }) : undefined;
+    }
+    onClear(listener) { this.listeners.add(listener); return () => this.listeners.delete(listener); }
+    notify() {
+        try {
+            this.options.onSessionChange?.(this.info());
+        }
+        catch { /* Observers cannot roll back credential rotation. */ }
+    }
+    clear() {
+        this.epoch++;
+        this.state = undefined;
+        this.pending = undefined;
+        this.pendingAuth = undefined;
+        for (const controller of this.controllers)
+            controller.abort();
+        this.controllers.clear();
+        this.changed(undefined);
+        for (const listener of this.listeners)
+            listener();
+        this.notify();
+    }
+    assertEpoch(epoch) {
+        if (this.epoch !== epoch)
+            throw new AptevaError(401, "Auth session changed");
+    }
+    async call(path, body, token, method = "POST") {
+        const url = new URL(this.baseURL + "/api/apps/auth" + path, globalThis.location?.origin || "http://localhost");
+        url.searchParams.set("project_id", this.projectId);
+        if (this.options.installId)
+            url.searchParams.set("install_id", String(this.options.installId));
+        if (this.options.profile)
+            url.searchParams.set("delegated_profile", this.options.profile);
+        const controller = new AbortController();
+        if (path !== "/logout")
+            this.controllers.add(controller);
+        const timer = setTimeout(() => controller.abort(), 15_000);
+        try {
+            const response = await this.fetchImpl(url.toString(), { method, credentials: "omit", cache: "no-store", redirect: "error",
+                headers: { "Content-Type": "application/json", ...(token ? { Authorization: `Bearer ${token}` } : {}) },
+                body: body === undefined ? undefined : JSON.stringify(body), signal: controller.signal });
+            if (!response.ok)
+                throw new AptevaError(response.status, path + " failed");
+            return response.status === 204 ? undefined : await response.json();
+        }
+        finally {
+            clearTimeout(timer);
+            this.controllers.delete(controller);
+        }
+    }
+    input(body) {
+        return { ...body, client_id: this.options.clientId, organization_slug: this.options.organizationSlug };
+    }
+    platform(response) {
+        if (!response.apteva_access_token && response.apteva_expires_at === undefined && response.apteva_expires_in === undefined)
+            return { expiresAt: 0 };
+        const expiresAt = Date.parse(response.apteva_expires_at || "");
+        const seconds = response.apteva_expires_in;
+        // expires_in is measured conservatively from receipt; it also tolerates a
+        // client clock offset without ever extending a token beyond 60 seconds.
+        if (typeof response.apteva_access_token !== "string" || !response.apteva_access_token || !Number.isFinite(expiresAt) || expiresAt > Date.now() + 61_000 || typeof seconds !== "number" || !Number.isFinite(seconds) || seconds <= 0 || seconds > 60)
+            throw new AptevaError(502, "Invalid Auth platform credential expiry");
+        return { token: response.apteva_access_token, expiresAt: Math.min(expiresAt, Date.now() + seconds * 1000) };
+    }
+    accept(response, epoch, receivedAt) {
+        this.assertEpoch(epoch);
+        if (!response.user || !Number.isSafeInteger(response.user.id) || typeof response.access_token !== "string" || !response.access_token || typeof response.refresh_token !== "string" || !response.refresh_token || !Number.isFinite(response.expires_in) || response.expires_in <= 0 || response.expires_in > 86400)
+            throw new AptevaError(502, "Invalid Auth session response");
+        // Save a rotated refresh token before processing the optional platform
+        // credential, so a platform outage can never strand the Auth session.
+        this.authRevision++;
+        this.platformRevision++;
+        this.state = { response: { ...response, apteva_access_token: undefined, apteva_expires_at: undefined, apteva_expires_in: undefined }, expiresAt: receivedAt + response.expires_in * 1000, platformExpiresAt: 0 };
+        this.changed(undefined);
+        try {
+            const platform = this.platform(response);
+            this.state.response.apteva_access_token = platform.token;
+            this.state.platformExpiresAt = platform.expiresAt;
+            this.changed(platform.token);
+        }
+        finally {
+            this.notify();
+        }
+    }
+    async login(input) {
+        this.clear();
+        const epoch = this.epoch;
+        const response = await this.call("/login", this.input(input));
+        this.accept(response, epoch, Date.now());
+        return response.user;
+    }
+    async register(input) {
+        this.clear();
+        const epoch = this.epoch;
+        const response = await this.call("/signup", this.input({ email: input.email, password: input.password, display_name: input.displayName }));
+        this.assertEpoch(epoch);
+        if (!response.verification_required)
+            this.accept(response, epoch, Date.now());
+        return { user: response.user, verification_required: response.verification_required };
+    }
+    async logout() {
+        const refresh = this.state?.response.refresh_token;
+        this.clear();
+        if (refresh)
+            await this.call("/logout", this.input({ refresh_token: refresh }));
+    }
+    async refreshAuth(epoch) {
+        if (this.pendingAuth)
+            return this.pendingAuth;
+        const pending = this.performAuthRefresh(epoch);
+        this.pendingAuth = pending;
+        try {
+            await pending;
+        }
+        finally {
+            if (this.pendingAuth === pending)
+                this.pendingAuth = undefined;
+        }
+    }
+    async performAuthRefresh(epoch) {
+        const refresh = this.state?.response.refresh_token;
+        if (!refresh)
+            throw new AptevaError(401, "Login required");
+        try {
+            const response = await this.call("/refresh", this.input({ refresh_token: refresh }));
+            this.accept(response, epoch, Date.now());
+        }
+        catch (error) {
+            if (this.epoch === epoch && error instanceof AptevaError && error.status === 401)
+                this.clear();
+            throw error;
+        }
+    }
+    async renew(epoch, force) {
+        this.assertEpoch(epoch);
+        if (!this.state)
+            throw new AptevaError(401, "Login required");
+        if (this.state.expiresAt <= Date.now() + margin)
+            await this.refreshAuth(epoch);
+        this.assertEpoch(epoch);
+        if (!force && this.state.response.apteva_access_token && this.state.platformExpiresAt > Date.now() + margin)
+            return this.state.response.apteva_access_token;
+        let revision = this.authRevision;
+        let result;
+        try {
+            result = await this.call("/delegated-token", {}, this.state.response.access_token);
+        }
+        catch (error) {
+            this.assertEpoch(epoch);
+            if (!(error instanceof AptevaError) || error.status !== 401)
+                throw error;
+            // Stale Auth roles or an expired Auth access token require normal refresh.
+            if (revision === this.authRevision)
+                await this.refreshAuth(epoch);
+            this.assertEpoch(epoch);
+            revision = this.authRevision;
+            if (this.state.response.apteva_access_token && this.state.platformExpiresAt > Date.now() + margin)
+                return this.state.response.apteva_access_token;
+            result = await this.call("/delegated-token", {}, this.state.response.access_token);
+        }
+        if (this.pendingAuth)
+            await this.pendingAuth;
+        this.assertEpoch(epoch);
+        // A mint started under older Auth permissions must never win over refresh.
+        if (revision !== this.authRevision)
+            return this.renew(epoch, false);
+        const platform = this.platform(result);
+        if (!platform.token || platform.expiresAt <= Date.now())
+            throw new AptevaError(502, "Missing or expired platform credential");
+        this.platformRevision++;
+        this.state.response.apteva_access_token = platform.token;
+        this.state.platformExpiresAt = platform.expiresAt;
+        this.changed(platform.token);
+        this.notify();
+        return platform.token;
+    }
+    async token(force = false) {
+        const epoch = this.epoch;
+        if (this.pendingAuth)
+            await this.pendingAuth;
+        this.assertEpoch(epoch);
+        if (this.pending)
+            return this.pending;
+        if (!force && this.state?.response.apteva_access_token && this.state.platformExpiresAt > Date.now() + margin)
+            return this.state.response.apteva_access_token;
+        const revision = this.authRevision;
+        const pending = this.renew(epoch, force).catch(error => {
+            if (this.epoch === epoch && this.authRevision === revision && this.state) {
+                this.state.response.apteva_access_token = undefined;
+                this.state.platformExpiresAt = 0;
+                this.changed(undefined);
+                this.notify();
+            }
+            throw error;
+        });
+        this.pending = pending;
+        try {
+            return await pending;
+        }
+        finally {
+            if (this.pending === pending)
+                this.pending = undefined;
+        }
+    }
+    async me() {
+        if (!this.state)
+            throw new AptevaError(401, "Login required");
+        const epoch = this.epoch;
+        if (this.state.expiresAt <= Date.now() + margin)
+            await this.refreshAuth(epoch);
+        this.assertEpoch(epoch);
+        let response;
+        try {
+            response = await this.call("/me", undefined, this.state.response.access_token, "GET");
+        }
+        catch (error) {
+            this.assertEpoch(epoch);
+            if (!(error instanceof AptevaError) || error.status !== 401)
+                throw error;
+            await this.refreshAuth(epoch);
+            this.assertEpoch(epoch);
+            response = await this.call("/me", undefined, this.state.response.access_token, "GET");
+        }
+        this.assertEpoch(epoch);
+        this.state.response.user = response.user;
+        this.state.response.authorization = response.authorization;
+        this.notify();
+        return response.user;
+    }
+    async credential(kind) {
+        const epoch = this.epoch;
+        for (;;) {
+            if (!this.state)
+                throw new AptevaError(401, "Login required");
+            if (this.pendingAuth)
+                await this.pendingAuth;
+            this.assertEpoch(epoch);
+            if (kind === "platform")
+                await this.token();
+            else if (this.state.expiresAt <= Date.now() + margin)
+                await this.refreshAuth(epoch);
+            this.assertEpoch(epoch);
+            // A refresh can start while token() yields. Take one consistent snapshot
+            // only after rotation, including when the refreshed session has no mint.
+            if (this.pendingAuth)
+                continue;
+            const token = kind === "auth" ? this.state.response.access_token : this.state.response.apteva_access_token;
+            if (!token)
+                continue;
+            return { token, epoch, revision: kind === "auth" ? this.authRevision : this.platformRevision,
+                deadline: kind === "auth" ? this.state.expiresAt : this.state.platformExpiresAt };
+        }
+    }
+    async recover(kind, used) {
+        this.assertEpoch(used.epoch);
+        if (!this.state)
+            return false;
+        if (kind === "auth") {
+            if (used.revision === this.authRevision)
+                await this.refreshAuth(used.epoch);
+        }
+        else if (used.revision === this.platformRevision)
+            await this.token(true);
+        this.assertEpoch(used.epoch);
+        return true;
+    }
+}
+//# sourceMappingURL=auth-session.js.map

package/dist/auth-session.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth-session.js","sourceRoot":"","sources":["../src/auth-session.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AA8C1C,MAAM,MAAM,GAAG,MAAM,CAAC;AAEtB,kFAAkF;AAClF,MAAM,OAAO,WAAW;IAUH;IACA;IACA;IACA;IACA;IAbX,KAAK,CAAS;IACd,KAAK,GAAG,CAAC,CAAC;IACV,YAAY,GAAG,CAAC,CAAC;IACjB,gBAAgB,GAAG,CAAC,CAAC;IACrB,OAAO,CAAmB;IAC1B,WAAW,CAAiB;IAC5B,WAAW,GAAG,IAAI,GAAG,EAAmB,CAAC;IACzC,SAAS,GAAG,IAAI,GAAG,EAAc,CAAC;IAC1C,YACmB,OAAe,EACf,SAAiB,EACjB,OAAuB,EACvB,SAAuB,EACvB,OAA4C;QAJ5C,YAAO,GAAP,OAAO,CAAQ;QACf,cAAS,GAAT,SAAS,CAAQ;QACjB,YAAO,GAAP,OAAO,CAAgB;QACvB,cAAS,GAAT,SAAS,CAAc;QACvB,YAAO,GAAP,OAAO,CAAqC;QAE7D,IAAI,CAAC,SAAS,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,IAAI,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;QAC1G,IAAI,OAAO,CAAC,SAAS,KAAK,SAAS,IAAI,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,SAAS,CAAC,IAAI,OAAO,CAAC,SAAS,GAAG,CAAC,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC;IACxJ,CAAC;IACD,IAAI;QACF,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC;QACrB,OAAO,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,QAAQ,CAAC,IAAI,EAAE,aAAa,EAAE,CAAC,CAAC,QAAQ,CAAC,aAAa;YACzF,SAAS,EAAE,IAAI,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,WAAW,EAAE;YAC9C,iBAAiB,EAAE,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACpH,CAAC;IACD,OAAO,CAAC,QAAoB,IAAgB,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,GAAG,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;IACjH,MAAM;QACZ,IAAI,CAAC;YAAC,IAAI,CAAC,OAAO,CAAC,eAAe,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,qDAAqD,CAAC,CAAC;IACtH,CAAC;IACD,KAAK;QACH,IAAI,CAAC,KAAK,EAAE,CAAC;QACb,IAAI,CAAC,KAAK,GAAG,SAAS,CAAC;QACvB,IAAI,CAAC,OAAO,GAAG,SAAS,CAAC;QACzB,IAAI,CAAC,WAAW,GAAG,SAAS,CAAC;QAC7B,KAAK,MAAM,UAAU,IAAI,IAAI,CAAC,WAAW;YAAE,UAAU,CAAC,KAAK,EAAE,CAAC;QAC9D,IAAI,CAAC,WAAW,CAAC,KAAK,EAAE,CAAC;QACzB,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QACxB,KAAK,MAAM,QAAQ,IAAI,IAAI,CAAC,SAAS;YAAE,QAAQ,EAAE,CAAC;QAClD,IAAI,CAAC,MAAM,EAAE,CAAC;IAChB,CAAC;IACO,WAAW,CAAC,KAAa;QAC/B,IAAI,IAAI,CAAC,KAAK,KAAK,KAAK;YAAE,MAAM,IAAI,WAAW,CAAC,GAAG,EAAE,sBAAsB,CAAC,CAAC;IAC/E,CAAC;IACO,KAAK,CAAC,IAAI,CAAI,IAAY,EAAE,IAAc,EAAE,KAAc,EAAE,MAAM,GAAG,MAAM;QACjF,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,OAAO,GAAG,gBAAgB,GAAG,IAAI,EAAE,UAAU,CAAC,QAAQ,EAAE,MAAM,IAAI,kBAAkB,CAAC,CAAC;QAC/G,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,YAAY,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;QACnD,IAAI,IAAI,CAAC,OAAO,CAAC,SAAS;YAAE,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,YAAY,EAAE,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC;QAC/F,IAAI,IAAI,CAAC,OAAO,CAAC,OAAO;YAAE,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,mBAAmB,EAAE,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QAC1F,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;QAAC,IAAI,IAAI,KAAK,SAAS;YAAE,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QACnG,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,MAAM,CAAC,CAAC;QAC3D,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,KAAK,EAAE,UAAU,EAAE,QAAQ,EAAE,OAAO;gBACvH,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,UAAU,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE;gBACvG,IAAI,EAAE,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,UAAU,CAAC,MAAM,EAAE,CAAC,CAAC;YAC5F,IAAI,CAAC,QAAQ,CAAC,EAAE;gBAAE,MAAM,IAAI,WAAW,CAAC,QAAQ,CAAC,MAAM,EAAE,IAAI,GAAG,SAAS,CAAC,CAAC;YAC3E,OAAO,QAAQ,CAAC,MAAM,KAAK,GAAG,CAAC,CAAC,CAAC,SAAc,CAAC,CAAC,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAO,CAAC;QAC/E,CAAC;gBAAS,CAAC;YAAC,YAAY,CAAC,KAAK,CAAC,CAAC;YAAC,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;QAAC,CAAC;IACzE,CAAC;IACO,KAAK,CAAC,IAAY;QACxB,OAAO,EAAE,GAAG,IAAI,EAAE,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,iBAAiB,EAAE,IAAI,CAAC,OAAO,CAAC,gBAAgB,EAAE,CAAC;IACzG,CAAC;IACO,QAAQ,CAAC,QAA+B;QAC9C,IAAI,CAAC,QAAQ,CAAC,mBAAmB,IAAI,QAAQ,CAAC,iBAAiB,KAAK,SAAS,IAAI,QAAQ,CAAC,iBAAiB,KAAK,SAAS;YAAE,OAAO,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC;QACnJ,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,iBAAiB,IAAI,EAAE,CAAC,CAAC;QAC/D,MAAM,OAAO,GAAG,QAAQ,CAAC,iBAAiB,CAAC;QAC3C,0EAA0E;QAC1E,wEAAwE;QACxE,IAAI,OAAO,QAAQ,CAAC,mBAAmB,KAAK,QAAQ,IAAI,CAAC,QAAQ,CAAC,mBAAmB,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,OAAO,IAAI,CAAC,IAAI,OAAO,GAAG,EAAE;YAAE,MAAM,IAAI,WAAW,CAAC,GAAG,EAAE,yCAAyC,CAAC,CAAC;QAC3T,OAAO,EAAE,KAAK,EAAE,QAAQ,CAAC,mBAAmB,EAAE,SAAS,EAAE,IAAI,CAAC,GAAG,CAAC,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,GAAG,IAAI,CAAC,EAAE,CAAC;IAC9G,CAAC;IACO,MAAM,CAAC,QAAsB,EAAE,KAAa,EAAE,UAAkB;QACtE,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;QACxB,IAAI,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,OAAO,QAAQ,CAAC,YAAY,KAAK,QAAQ,IAAI,CAAC,QAAQ,CAAC,YAAY,IAAI,OAAO,QAAQ,CAAC,aAAa,KAAK,QAAQ,IAAI,CAAC,QAAQ,CAAC,aAAa,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,QAAQ,CAAC,UAAU,IAAI,CAAC,IAAI,QAAQ,CAAC,UAAU,GAAG,KAAK;YAAE,MAAM,IAAI,WAAW,CAAC,GAAG,EAAE,+BAA+B,CAAC,CAAC;QAC/W,uEAAuE;QACvE,sEAAsE;QACtE,IAAI,CAAC,YAAY,EAAE,CAAC;QAAC,IAAI,CAAC,gBAAgB,EAAE,CAAC;QAC7C,IAAI,CAAC,KAAK,GAAG,EAAE,QAAQ,EAAE,EAAE,GAAG,QAAQ,EAAE,mBAAmB,EAAE,SAAS,EAAE,iBAAiB,EAAE,SAAS,EAAE,iBAAiB,EAAE,SAAS,EAAE,EAAE,SAAS,EAAE,UAAU,GAAG,QAAQ,CAAC,UAAU,GAAG,IAAI,EAAE,iBAAiB,EAAE,CAAC,EAAE,CAAC;QACjN,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QACxB,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;YACzC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,mBAAmB,GAAG,QAAQ,CAAC,KAAK,CAAC;YACzD,IAAI,CAAC,KAAK,CAAC,iBAAiB,GAAG,QAAQ,CAAC,SAAS,CAAC;YAClD,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QAC/B,CAAC;gBAAS,CAAC;YAAC,IAAI,CAAC,MAAM,EAAE,CAAC;QAAC,CAAC;IAC9B,CAAC;IACD,KAAK,CAAC,KAAK,CAAC,KAAqB;QAC/B,IAAI,CAAC,KAAK,EAAE,CAAC;QAAC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC;QACvC,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,IAAI,CAAe,QAAQ,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC;QAC5E,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,KAAK,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;QAAC,OAAO,QAAQ,CAAC,IAAI,CAAC;IACjE,CAAC;IACD,KAAK,CAAC,QAAQ,CAAC,KAAsB;QACnC,IAAI,CAAC,KAAK,EAAE,CAAC;QAAC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC;QACvC,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,IAAI,CAAe,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,YAAY,EAAE,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC;QACzJ,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;QACxB,IAAI,CAAC,QAAQ,CAAC,qBAAqB;YAAE,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,KAAK,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;QAC9E,OAAO,EAAE,IAAI,EAAE,QAAQ,CAAC,IAAI,EAAE,qBAAqB,EAAE,QAAQ,CAAC,qBAAqB,EAAE,CAAC;IACxF,CAAC;IACD,KAAK,CAAC,MAAM;QACV,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,EAAE,QAAQ,CAAC,aAAa,CAAC;QACnD,IAAI,CAAC,KAAK,EAAE,CAAC;QACb,IAAI,OAAO;YAAE,MAAM,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,EAAE,aAAa,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC;IAClF,CAAC;IACO,KAAK,CAAC,WAAW,CAAC,KAAa;QACrC,IAAI,IAAI,CAAC,WAAW;YAAE,OAAO,IAAI,CAAC,WAAW,CAAC;QAC9C,MAAM,OAAO,GAAG,IAAI,CAAC,kBAAkB,CAAC,KAAK,CAAC,CAAC;QAC/C,IAAI,CAAC,WAAW,GAAG,OAAO,CAAC;QAC3B,IAAI,CAAC;YAAC,MAAM,OAAO,CAAC;QAAC,CAAC;gBAAS,CAAC;YAAC,IAAI,IAAI,CAAC,WAAW,KAAK,OAAO;gBAAE,IAAI,CAAC,WAAW,GAAG,SAAS,CAAC;QAAC,CAAC;IACpG,CAAC;IACO,KAAK,CAAC,kBAAkB,CAAC,KAAa;QAC5C,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,EAAE,QAAQ,CAAC,aAAa,CAAC;QACnD,IAAI,CAAC,OAAO;YAAE,MAAM,IAAI,WAAW,CAAC,GAAG,EAAE,gBAAgB,CAAC,CAAC;QAC3D,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,IAAI,CAAe,UAAU,EAAE,IAAI,CAAC,KAAK,CAAC,EAAE,aAAa,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC;YACnG,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,KAAK,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;QAC3C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,IAAI,CAAC,KAAK,KAAK,KAAK,IAAI,KAAK,YAAY,WAAW,IAAI,KAAK,CAAC,MAAM,KAAK,GAAG;gBAAE,IAAI,CAAC,KAAK,EAAE,CAAC;YAC/F,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IACO,KAAK,CAAC,KAAK,CAAC,KAAa,EAAE,KAAc;QAC/C,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;QACxB,IAAI,CAAC,IAAI,CAAC,KAAK;YAAE,MAAM,IAAI,WAAW,CAAC,GAAG,EAAE,gBAAgB,CAAC,CAAC;QAC9D,IAAI,IAAI,CAAC,KAAK,CAAC,SAAS,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM;YAAE,MAAM,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;QAC/E,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;QACxB,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAM,CAAC,QAAQ,CAAC,mBAAmB,IAAI,IAAI,CAAC,KAAM,CAAC,iBAAiB,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM;YAAE,OAAO,IAAI,CAAC,KAAM,CAAC,QAAQ,CAAC,mBAAoB,CAAC;QAChK,IAAI,QAAQ,GAAG,IAAI,CAAC,YAAY,CAAC;QACjC,IAAI,MAA6B,CAAC;QAClC,IAAI,CAAC;YACH,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,CAAwB,kBAAkB,EAAE,EAAE,EAAE,IAAI,CAAC,KAAM,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC;QAC7G,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;YACxB,IAAI,CAAC,CAAC,KAAK,YAAY,WAAW,CAAC,IAAI,KAAK,CAAC,MAAM,KAAK,GAAG;gBAAE,MAAM,KAAK,CAAC;YACzE,2EAA2E;YAC3E,IAAI,QAAQ,KAAK,IAAI,CAAC,YAAY;gBAAE,MAAM,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;YAClE,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;YACxB,QAAQ,GAAG,IAAI,CAAC,YAAY,CAAC;YAC7B,IAAI,IAAI,CAAC,KAAM,CAAC,QAAQ,CAAC,mBAAmB,IAAI,IAAI,CAAC,KAAM,CAAC,iBAAiB,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM;gBAAE,OAAO,IAAI,CAAC,KAAM,CAAC,QAAQ,CAAC,mBAAoB,CAAC;YACtJ,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,CAAwB,kBAAkB,EAAE,EAAE,EAAE,IAAI,CAAC,KAAM,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC;QAC7G,CAAC;QACD,IAAI,IAAI,CAAC,WAAW;YAAE,MAAM,IAAI,CAAC,WAAW,CAAC;QAC7C,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;QACxB,2EAA2E;QAC3E,IAAI,QAAQ,KAAK,IAAI,CAAC,YAAY;YAAE,OAAO,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;QACpE,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QACvC,IAAI,CAAC,QAAQ,CAAC,KAAK,IAAI,QAAQ,CAAC,SAAS,IAAI,IAAI,CAAC,GAAG,EAAE;YAAE,MAAM,IAAI,WAAW,CAAC,GAAG,EAAE,wCAAwC,CAAC,CAAC;QAC9H,IAAI,CAAC,gBAAgB,EAAE,CAAC;QACxB,IAAI,CAAC,KAAM,CAAC,QAAQ,CAAC,mBAAmB,GAAG,QAAQ,CAAC,KAAK,CAAC;QAC1D,IAAI,CAAC,KAAM,CAAC,iBAAiB,GAAG,QAAQ,CAAC,SAAS,CAAC;QACnD,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QAAC,IAAI,CAAC,MAAM,EAAE,CAAC;QAAC,OAAO,QAAQ,CAAC,KAAK,CAAC;IACrE,CAAC;IACD,KAAK,CAAC,KAAK,CAAC,KAAK,GAAG,KAAK;QACvB,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC;QACzB,IAAI,IAAI,CAAC,WAAW;YAAE,MAAM,IAAI,CAAC,WAAW,CAAC;QAC7C,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;QACxB,IAAI,IAAI,CAAC,OAAO;YAAE,OAAO,IAAI,CAAC,OAAO,CAAC;QACtC,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,EAAE,QAAQ,CAAC,mBAAmB,IAAI,IAAI,CAAC,KAAK,CAAC,iBAAiB,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM;YAAE,OAAO,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,mBAAmB,CAAC;QAC7J,MAAM,QAAQ,GAAG,IAAI,CAAC,YAAY,CAAC;QACnC,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE;YACrD,IAAI,IAAI,CAAC,KAAK,KAAK,KAAK,IAAI,IAAI,CAAC,YAAY,KAAK,QAAQ,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;gBACzE,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,mBAAmB,GAAG,SAAS,CAAC;gBAAC,IAAI,CAAC,KAAK,CAAC,iBAAiB,GAAG,CAAC,CAAC;gBAAC,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;gBAAC,IAAI,CAAC,MAAM,EAAE,CAAC;YAChI,CAAC;YACD,MAAM,KAAK,CAAC;QACd,CAAC,CAAC,CAAC;QACH,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QACvB,IAAI,CAAC;YAAC,OAAO,MAAM,OAAO,CAAC;QAAC,CAAC;gBAAS,CAAC;YAAC,IAAI,IAAI,CAAC,OAAO,KAAK,OAAO;gBAAE,IAAI,CAAC,OAAO,GAAG,SAAS,CAAC;QAAC,CAAC;IACnG,CAAC;IACD,KAAK,CAAC,EAAE;QACN,IAAI,CAAC,IAAI,CAAC,KAAK;YAAE,MAAM,IAAI,WAAW,CAAC,GAAG,EAAE,gBAAgB,CAAC,CAAC;QAC9D,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC;QACzB,IAAI,IAAI,CAAC,KAAK,CAAC,SAAS,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM;YAAE,MAAM,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;QAC/E,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;QACxB,IAAI,QAA+D,CAAC;QACpE,IAAI,CAAC;YACH,QAAQ,GAAG,MAAM,IAAI,CAAC,IAAI,CAAkB,KAAK,EAAE,SAAS,EAAE,IAAI,CAAC,KAAM,CAAC,QAAQ,CAAC,YAAY,EAAE,KAAK,CAAC,CAAC;QAC1G,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;YACxB,IAAI,CAAC,CAAC,KAAK,YAAY,WAAW,CAAC,IAAI,KAAK,CAAC,MAAM,KAAK,GAAG;gBAAE,MAAM,KAAK,CAAC;YACzE,MAAM,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;YAC9B,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;YACxB,QAAQ,GAAG,MAAM,IAAI,CAAC,IAAI,CAAkB,KAAK,EAAE,SAAS,EAAE,IAAI,CAAC,KAAM,CAAC,QAAQ,CAAC,YAAY,EAAE,KAAK,CAAC,CAAC;QAC1G,CAAC;QACD,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;QACxB,IAAI,CAAC,KAAM,CAAC,QAAQ,CAAC,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC;QAAC,IAAI,CAAC,KAAM,CAAC,QAAQ,CAAC,aAAa,GAAG,QAAQ,CAAC,aAAa,CAAC;QACvG,IAAI,CAAC,MAAM,EAAE,CAAC;QAAC,OAAO,QAAQ,CAAC,IAAI,CAAC;IACtC,CAAC;IACD,KAAK,CAAC,UAAU,CAAC,IAAmB;QAClC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC;QACzB,SAAS,CAAC;YACR,IAAI,CAAC,IAAI,CAAC,KAAK;gBAAE,MAAM,IAAI,WAAW,CAAC,GAAG,EAAE,gBAAgB,CAAC,CAAC;YAC9D,IAAI,IAAI,CAAC,WAAW;gBAAE,MAAM,IAAI,CAAC,WAAW,CAAC;YAC7C,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;YACxB,IAAI,IAAI,KAAK,UAAU;gBAAE,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC;iBACvC,IAAI,IAAI,CAAC,KAAM,CAAC,SAAS,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM;gBAAE,MAAM,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;YACrF,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;YACxB,yEAAyE;YACzE,yEAAyE;YACzE,IAAI,IAAI,CAAC,WAAW;gBAAE,SAAS;YAC/B,MAAM,KAAK,GAAG,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,KAAM,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,KAAM,CAAC,QAAQ,CAAC,mBAAmB,CAAC;YAC7G,IAAI,CAAC,KAAK;gBAAE,SAAS;YACrB,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,gBAAgB;gBAC1F,QAAQ,EAAE,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,KAAM,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,KAAM,CAAC,iBAAiB,EAAE,CAAC;QACxF,CAAC;IACH,CAAC;IACD,KAAK,CAAC,OAAO,CAAC,IAAmB,EAAE,IAAuB;QACxD,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC7B,IAAI,CAAC,IAAI,CAAC,KAAK;YAAE,OAAO,KAAK,CAAC;QAC9B,IAAI,IAAI,KAAK,MAAM,EAAE,CAAC;YACpB,IAAI,IAAI,CAAC,QAAQ,KAAK,IAAI,CAAC,YAAY;gBAAE,MAAM,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC9E,CAAC;aAAM,IAAI,IAAI,CAAC,QAAQ,KAAK,IAAI,CAAC,gBAAgB;YAAE,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC3E,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC7B,OAAO,IAAI,CAAC;IACd,CAAC;CACF"}

package/dist/client.d.ts

@@ -1,10 +1,12 @@
+import type { AuthLoginInput, AuthSignupInput } from "./auth-session.js";
 import { type LoadAppOptions, type LoadedAppFrontend } from "./frontend.js";
-import type { AppExtension, AppScope } from "./extensions.js";
+import type { AppExtension, AppScope, AppCredential } from "./extensions.js";
 import type { InstalledApp } from "./apps.js";
 import type { Agent, AgentConfig, AgentCoreEvent, AgentCreateInput, AgentCreateResult, AgentDeleteResult, AgentPauseResult, AgentRestartResult, AgentStatus, AgentSystemMCPResult, AgentUpdateInput, AptevaClientOptions, AuthStatus, ChannelInfo, Chat, CreateChatOptions, CreateOrResumeChatOptions, ChatCreateResult, CreateDelegatedUserInput, DelegatedUserToken, ChatHistoryMessage, ChatMessage, ChatMessagesQuery, ChatSendInput, ChatSendOptions, ChatStreamOptions, MCPCallResponse, Project, StreamHandle, SubscribeOptions, SSEEventMetadata, TelemetryEvent, TelemetryPeriod, TelemetryQuery, TelemetryStats, Thread, TimelineBucket, UpdateChatOptions, User } from "./types.js";
 export declare class AptevaClient {
     private readonly baseURL;
     private apiKey?;
+    private readonly appAuth?;
     private accessToken?;
     private readonly projectId?;
     private readonly fetchImpl;
@@ -18,17 +20,21 @@ export declare class AptevaClient {
     setApiKey(key: string | undefined): void;
     getApiKey(): string | undefined;
     setAccessToken(token: string | undefined): void;
+    /** Host-owned opaque token only; managed Auth credentials remain internal. */
     getAccessToken(): string | undefined;
     /** Refresh once for concurrent callers. Undefined leaves credentials unchanged. */
     refreshAccessToken(): Promise<boolean>;
     private renewAfterUnauthorized;
     readonly auth: {
-        register: (email: string, password: string, name?: string) => Promise<{
+        register: (email: string | AuthSignupInput, password?: string, name?: string) => Promise<{
             user: User;
+            verification_required?: boolean;
         }>;
-        login: (email: string, password: string) => Promise<User>;
+        login: (email: string | AuthLoginInput, password?: string) => Promise<User>;
         logout: () => Promise<void>;
         me: () => Promise<User>;
+        getSession: () => import("./auth-session.js").AuthSessionInfo | undefined;
+        refresh: () => Promise<import("./auth-session.js").AuthSessionInfo | undefined>;
         status: () => Promise<AuthStatus>;
         changePassword: (current: string, next: string) => Promise<void>;
         listKeys: () => Promise<{
@@ -112,9 +118,11 @@ export declare class AptevaClient {
     del<R>(path: string, init?: RequestInit): Promise<R>;
     sseURL(path: string, params?: Record<string, string | number | undefined>): string;
     subscribe<E>(path: string, params: Record<string, string | number | undefined> | undefined, onEvent: (event: E, metadata: SSEEventMetadata) => void, opts?: SubscribeOptions): StreamHandle;
+    private subscribeScoped;
     private subscribeWithFetch;
     private bindAbortSignal;
     private appPath;
+    private validateManagedPath;
     private bearerToken;
     private isAccessTokenCredential;
     private request;
@@ -124,6 +132,7 @@ export interface AppHandle<TDefault = unknown> {
     readonly name: string;
     readonly projectId?: string;
     readonly installId?: number;
+    readonly credential?: AppCredential;
     get<R = TDefault>(path: string, init?: RequestInit): Promise<R>;
     post<R = TDefault>(path: string, body?: unknown, init?: RequestInit): Promise<R>;
     put<R = TDefault>(path: string, body?: unknown, init?: RequestInit): Promise<R>;

package/dist/client.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../src/client.ts"],"names":[],"mappings":"AAAA,OAAO,EAAmB,KAAK,cAAc,EAAE,KAAK,iBAAiB,EAAE,MAAM,eAAe,CAAC;AAE7F,OAAO,KAAK,EAAE,YAAY,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAC;AAC9D,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,WAAW,CAAC;AAC9C,OAAO,KAAK,EACV,KAAK,EACL,WAAW,EACX,cAAc,EACd,gBAAgB,EAChB,iBAAiB,EACjB,iBAAiB,EACjB,gBAAgB,EAChB,kBAAkB,EAClB,WAAW,EACX,oBAAoB,EACpB,gBAAgB,EAChB,mBAAmB,EACnB,UAAU,EACV,WAAW,EACX,IAAI,EACJ,iBAAiB,EACjB,yBAAyB,EACzB,gBAAgB,EAChB,wBAAwB,EACxB,kBAAkB,EAClB,kBAAkB,EAClB,WAAW,EACX,iBAAiB,EACjB,aAAa,EACb,eAAe,EACf,iBAAiB,EAEjB,eAAe,EACf,OAAO,EAEP,YAAY,EACZ,gBAAgB,EAChB,gBAAgB,EAChB,cAAc,EACd,eAAe,EACf,cAAc,EACd,cAAc,EACd,MAAM,EACN,cAAc,EACd,iBAAiB,EACjB,IAAI,EACL,MAAM,YAAY,CAAC;AAIpB,qBAAa,YAAY;IACvB,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAS;IACjC,OAAO,CAAC,MAAM,CAAC,CAAS;IACxB,OAAO,CAAC,WAAW,CAAC,CAAS;IAC7B,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAS;IACpC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAe;IACzC,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAa;IAC7C,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAS;IACnC,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAC,CAAoC;IACtE,OAAO,CAAC,kBAAkB,CAAK;IAC/B,OAAO,CAAC,mBAAmB,CAAC,CAAmB;IAC/C,OAAO,CAAC,QAAQ,CAAC,sBAAsB,CAAoC;gBAE/D,IAAI,EAAE,mBAAmB;IAarC,SAAS,CAAC,GAAG,EAAE,MAAM,GAAG,SAAS,GAAG,IAAI;IAKxC,SAAS,IAAI,MAAM,GAAG,SAAS;IAO/B,cAAc,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,GAAG,IAAI;IAK/C,cAAc,IAAI,MAAM,GAAG,SAAS;IAIpC,mFAAmF;IAC7E,kBAAkB,IAAI,OAAO,CAAC,OAAO,CAAC;YAmB9B,sBAAsB;IAcpC,QAAQ,CAAC,IAAI;0BACO,MAAM,YAAY,MAAM,SAAS,MAAM;kBACrC,IAAI;;uBAET,MAAM,YAAY,MAAM;;;;kCASb,MAAM,QAAQ,MAAM;;gBAIvB,MAAM;kBAAQ,MAAM;wBAAc,MAAM;;0BAI7C,MAAM;gBACN,MAAM;iBAAO,MAAM;;wBAErB,MAAM;MACtB;IAEF,QAAQ,CAAC,QAAQ;;kBAEL,MAAM;MAChB;IAKF,wDAAwD;IACxD,QAAQ,CAAC,cAAc;wBACL,wBAAwB;MAYxC;IAKF,QAAQ,CAAC,MAAM;;wBAGG,gBAAgB;kBAGtB,MAAM;qBAEH,MAAM,SAAS,gBAAgB;qBAG/B,MAAM,QAAQ,MAAM;qBAGpB,MAAM;qBAGN,MAAM;sBAEL,MAAM;uBAEL,MAAM;0BAEH,MAAM;iBAKf,CAAC,oBAAoB,MAAM;uBAGrB,CAAC,oBAAoB,MAAM,UAAU,WAAW;wBAG/C,MAAM,QAAQ,UAAU,GAAG,iBAAiB,UAAU,OAAO;oBAUjE,MAAM;mBAGP,MAAM;sBAGH,MAAM;0BAOF,MAAM;gBAKhB,CAAC,gBAAgB,MAAM,QAAQ,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;kBAGpD,CAAC,gBAAgB,MAAM,QAAQ,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;iBAGvD,CAAC,uBACJ,MAAM,WACD,CAAC,KAAK,EAAE,CAAC,EAAE,QAAQ,EAAE,gBAAgB,KAAK,IAAI,SAChD,gBAAgB,KACtB,YAAY;MAEf;IAIF,QAAQ,CAAC,SAAS;mBAEL,cAAc;4BAWL,MAAM,WAAU,eAAe;yBAMlC,MAAM,WAAU,eAAe;0BAUrC,MAAM,WACN,CAAC,KAAK,EAAE,cAAc,KAAK,IAAI,SACjC,gBAAgB,KACtB,YAAY;MAgBf;IAMF,QAAQ,CAAC,IAAI;wBAEK,MAAM;sBAKR,MAAM;0BAOF,MAAM,YAAY,MAAM,GAAG,iBAAiB;kCAapC,MAAM,WAAW,yBAAyB;yBASnD,MAAM,WAAW,iBAAiB;+BAa5B,MAAM,YAAY,MAAM,GAAG,iBAAiB;4BAiBlC,MAAM,UAAS,iBAAiB;2BAQhD,MAAM,UAAS,iBAAiB;2BAQhC,MAAM,SAAS,aAAa;;uBAkBnC,MAAM,kBACE,MAAM,GAAG,aAAa,YAC7B,eAAe;yBA2BT,MAAM,QAAQ,iBAAiB,KAAG,YAAY;2BAmB5C,MAAM,aAAa,MAAM;0BAChB,MAAM;;MAIlC;IAOF,GAAG,CAAC,CAAC,GAAG,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,GAAE,QAAa,GAAG,SAAS,CAAC,CAAC,CAAC;IAoDlE,iFAAiF;IACjF,GAAG,CAAC,CAAC,EAAE,SAAS,EAAE,YAAY,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE,QAAQ,GAAG,CAAC;IAIvD,QAAQ,CAAC,IAAI;QACX,oEAAoE;eAC7D,OAAO,YAAY,UAAU,kBAAkB,MAAM,WAAW,cAAc,KAAG,OAAO,CAAC,iBAAiB,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;QAEvI,4EAA4E;uBAC9D,IAAI,CAAC,QAAQ,EAAE,WAAW,CAAC,SAAc,WAAW;MAKlE;IAII,QAAQ,CAAC,CAAC,EACd,OAAO,EAAE,MAAM,EACf,QAAQ,EAAE,MAAM,EAChB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC7B,IAAI,CAAC,EAAE,WAAW,GACjB,OAAO,CAAC,CAAC,CAAC;IAeb,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,CAAC,CAAC;IAGpD,IAAI,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,CAAC,CAAC;IAGrE,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,CAAC,CAAC;IAGpE,KAAK,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,CAAC,CAAC;IAGtE,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,CAAC,CAAC;IAQpD,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAAC,GAAG,MAAM;IAwBlF,SAAS,CAAC,CAAC,EACT,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAAC,GAAG,SAAS,EAC/D,OAAO,EAAE,CAAC,KAAK,EAAE,CAAC,EAAE,QAAQ,EAAE,gBAAgB,KAAK,IAAI,EACvD,IAAI,CAAC,EAAE,gBAAgB,GACtB,YAAY;IA2Ef,OAAO,CAAC,kBAAkB;IAmJ1B,OAAO,CAAC,eAAe;IAmBvB,OAAO,CAAC,OAAO;IASf,OAAO,CAAC,WAAW;IAInB,OAAO,CAAC,uBAAuB;YAIjB,OAAO;CA4DtB;AAgBD,wBAAgB,SAAS,CAAC,CAAC,EAAE,GAAG,EAAE,eAAe,CAAC,OAAO,CAAC,GAAG,CAAC,CAgB7D;AAED,MAAM,WAAW,SAAS,CAAC,QAAQ,GAAG,OAAO;IAC3C,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,GAAG,CAAC,CAAC,GAAG,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;IAChE,IAAI,CAAC,CAAC,GAAG,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;IACjF,GAAG,CAAC,CAAC,GAAG,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;IAChF,KAAK,CAAC,CAAC,GAAG,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;IAClF,GAAG,CAAC,CAAC,GAAG,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;IAChE,IAAI,CAAC,CAAC,GAAG,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,IAAI,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;IACjG,SAAS,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,KAAK,EAAE,CAAC,EAAE,QAAQ,EAAE,gBAAgB,KAAK,IAAI,EAAE,IAAI,CAAC,EAAE,gBAAgB,GAAG,YAAY,CAAC;IAC3H,MAAM,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,MAAM,CAAC;CACtD"}
+{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../src/client.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,cAAc,EAAE,eAAe,EAAqB,MAAM,mBAAmB,CAAC;AAC5F,OAAO,EAAmB,KAAK,cAAc,EAAE,KAAK,iBAAiB,EAAE,MAAM,eAAe,CAAC;AAE7F,OAAO,KAAK,EAAE,YAAY,EAAE,QAAQ,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAC7E,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,WAAW,CAAC;AAC9C,OAAO,KAAK,EACV,KAAK,EACL,WAAW,EACX,cAAc,EACd,gBAAgB,EAChB,iBAAiB,EACjB,iBAAiB,EACjB,gBAAgB,EAChB,kBAAkB,EAClB,WAAW,EACX,oBAAoB,EACpB,gBAAgB,EAChB,mBAAmB,EACnB,UAAU,EACV,WAAW,EACX,IAAI,EACJ,iBAAiB,EACjB,yBAAyB,EACzB,gBAAgB,EAChB,wBAAwB,EACxB,kBAAkB,EAClB,kBAAkB,EAClB,WAAW,EACX,iBAAiB,EACjB,aAAa,EACb,eAAe,EACf,iBAAiB,EAEjB,eAAe,EACf,OAAO,EAEP,YAAY,EACZ,gBAAgB,EAChB,gBAAgB,EAChB,cAAc,EACd,eAAe,EACf,cAAc,EACd,cAAc,EACd,MAAM,EACN,cAAc,EACd,iBAAiB,EACjB,IAAI,EACL,MAAM,YAAY,CAAC;AAIpB,qBAAa,YAAY;IACvB,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAS;IACjC,OAAO,CAAC,MAAM,CAAC,CAAS;IACxB,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAc;IACvC,OAAO,CAAC,WAAW,CAAC,CAAS;IAC7B,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAS;IACpC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAe;IACzC,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAa;IAC7C,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAS;IACnC,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAC,CAAoC;IACtE,OAAO,CAAC,kBAAkB,CAAK;IAC/B,OAAO,CAAC,mBAAmB,CAAC,CAAmB;IAC/C,OAAO,CAAC,QAAQ,CAAC,sBAAsB,CAAoC;gBAE/D,IAAI,EAAE,mBAAmB;IAmBrC,SAAS,CAAC,GAAG,EAAE,MAAM,GAAG,SAAS,GAAG,IAAI;IAMxC,SAAS,IAAI,MAAM,GAAG,SAAS;IAO/B,cAAc,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,GAAG,IAAI;IAM/C,8EAA8E;IAC9E,cAAc,IAAI,MAAM,GAAG,SAAS;IAIpC,mFAAmF;IAC7E,kBAAkB,IAAI,OAAO,CAAC,OAAO,CAAC;YAoB9B,sBAAsB;IAepC,QAAQ,CAAC,IAAI;0BACO,MAAM,GAAG,eAAe,aAAa,MAAM,SAAS,MAAM;kBAGjD,IAAI;oCAA0B,OAAO;;uBAGjD,MAAM,GAAG,cAAc,aAAa,MAAM;;;;;sBAiB7C,OAAO,CAAC,UAAU,CAAC;kCAIL,MAAM,QAAQ,MAAM;;gBAIvB,MAAM;kBAAQ,MAAM;wBAAc,MAAM;;0BAI7C,MAAM;gBACN,MAAM;iBAAO,MAAM;;wBAErB,MAAM;MACtB;IAEF,QAAQ,CAAC,QAAQ;;kBAEL,MAAM;MAChB;IAKF,wDAAwD;IACxD,QAAQ,CAAC,cAAc;wBACL,wBAAwB;MAYxC;IAKF,QAAQ,CAAC,MAAM;;wBAGG,gBAAgB;kBAGtB,MAAM;qBAEH,MAAM,SAAS,gBAAgB;qBAG/B,MAAM,QAAQ,MAAM;qBAGpB,MAAM;qBAGN,MAAM;sBAEL,MAAM;uBAEL,MAAM;0BAEH,MAAM;iBAKf,CAAC,oBAAoB,MAAM;uBAGrB,CAAC,oBAAoB,MAAM,UAAU,WAAW;wBAG/C,MAAM,QAAQ,UAAU,GAAG,iBAAiB,UAAU,OAAO;oBAUjE,MAAM;mBAGP,MAAM;sBAGH,MAAM;0BAOF,MAAM;gBAKhB,CAAC,gBAAgB,MAAM,QAAQ,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;kBAGpD,CAAC,gBAAgB,MAAM,QAAQ,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;iBAGvD,CAAC,uBACJ,MAAM,WACD,CAAC,KAAK,EAAE,CAAC,EAAE,QAAQ,EAAE,gBAAgB,KAAK,IAAI,SAChD,gBAAgB,KACtB,YAAY;MAEf;IAIF,QAAQ,CAAC,SAAS;mBAEL,cAAc;4BAWL,MAAM,WAAU,eAAe;yBAMlC,MAAM,WAAU,eAAe;0BAUrC,MAAM,WACN,CAAC,KAAK,EAAE,cAAc,KAAK,IAAI,SACjC,gBAAgB,KACtB,YAAY;MAgBf;IAMF,QAAQ,CAAC,IAAI;wBAEK,MAAM;sBAKR,MAAM;0BAOF,MAAM,YAAY,MAAM,GAAG,iBAAiB;kCAapC,MAAM,WAAW,yBAAyB;yBASnD,MAAM,WAAW,iBAAiB;+BAa5B,MAAM,YAAY,MAAM,GAAG,iBAAiB;4BAiBlC,MAAM,UAAS,iBAAiB;2BAQhD,MAAM,UAAS,iBAAiB;2BAQhC,MAAM,SAAS,aAAa;;uBAkBnC,MAAM,kBACE,MAAM,GAAG,aAAa,YAC7B,eAAe;yBA2BT,MAAM,QAAQ,iBAAiB,KAAG,YAAY;2BAmB5C,MAAM,aAAa,MAAM;0BAChB,MAAM;;MAIlC;IAOF,GAAG,CAAC,CAAC,GAAG,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,GAAE,QAAa,GAAG,SAAS,CAAC,CAAC,CAAC;IA4DlE,iFAAiF;IACjF,GAAG,CAAC,CAAC,EAAE,SAAS,EAAE,YAAY,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE,QAAQ,GAAG,CAAC;IAIvD,QAAQ,CAAC,IAAI;QACX,oEAAoE;eAC7D,OAAO,YAAY,UAAU,kBAAkB,MAAM,WAAW,cAAc,KAAG,OAAO,CAAC,iBAAiB,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;QAEvI,4EAA4E;uBAC9D,IAAI,CAAC,QAAQ,EAAE,WAAW,CAAC,SAAc,WAAW;MAKlE;IAII,QAAQ,CAAC,CAAC,EACd,OAAO,EAAE,MAAM,EACf,QAAQ,EAAE,MAAM,EAChB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC7B,IAAI,CAAC,EAAE,WAAW,GACjB,OAAO,CAAC,CAAC,CAAC;IAeb,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,CAAC,CAAC;IAGpD,IAAI,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,CAAC,CAAC;IAGrE,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,CAAC,CAAC;IAGpE,KAAK,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,CAAC,CAAC;IAGtE,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,CAAC,CAAC;IAQpD,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAAC,GAAG,MAAM;IAwBlF,SAAS,CAAC,CAAC,EACT,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAAC,GAAG,SAAS,EAC/D,OAAO,EAAE,CAAC,KAAK,EAAE,CAAC,EAAE,QAAQ,EAAE,gBAAgB,KAAK,IAAI,EACvD,IAAI,CAAC,EAAE,gBAAgB,GACtB,YAAY;IAIf,OAAO,CAAC,eAAe;IA6EvB,OAAO,CAAC,kBAAkB;IAmK1B,OAAO,CAAC,eAAe;IAmBvB,OAAO,CAAC,OAAO;IASf,OAAO,CAAC,mBAAmB;IAO3B,OAAO,CAAC,WAAW;IAInB,OAAO,CAAC,uBAAuB;YAIjB,OAAO;CAsEtB;AAgBD,wBAAgB,SAAS,CAAC,CAAC,EAAE,GAAG,EAAE,eAAe,CAAC,OAAO,CAAC,GAAG,CAAC,CAgB7D;AAED,MAAM,WAAW,SAAS,CAAC,QAAQ,GAAG,OAAO;IAC3C,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,UAAU,CAAC,EAAE,aAAa,CAAC;IACpC,GAAG,CAAC,CAAC,GAAG,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;IAChE,IAAI,CAAC,CAAC,GAAG,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;IACjF,GAAG,CAAC,CAAC,GAAG,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;IAChF,KAAK,CAAC,CAAC,GAAG,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;IAClF,GAAG,CAAC,CAAC,GAAG,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;IAChE,IAAI,CAAC,CAAC,GAAG,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,IAAI,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;IACjG,SAAS,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,KAAK,EAAE,CAAC,EAAE,QAAQ,EAAE,gBAAgB,KAAK,IAAI,EAAE,IAAI,CAAC,EAAE,gBAAgB,GAAG,YAAY,CAAC;IAC3H,MAAM,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,MAAM,CAAC;CACtD"}