@auth-craft/client 0.1.0 → 0.1.1

package/dist/index.d.ts

@@ -1,30 +1,21 @@
 /**
- * @auth-craft/client — contract-driven typed client.
+ * @auth-craft/client — full contract-driven typed client (all groups).
  *
- * Wires the absorbed transport (FetchGuard) to the shared api-contract, so the
- * client's methods are generated from — and type-checked against — the same
- * endpoint declarations the backend routes use. No hand-written per-method
- * paths/types: a route change in the contract re-types the call sites here.
+ * The batteries-included client: wires every contract group (auth, password,
+ * verification, session, mfa, oauth, users, tenant) plus the authenticated
+ * raw-HTTP escape hatch (`api`). Methods are generated from the shared
+ * api-contract, so they can't drift from the backend routes.
  *
- * Module groups mirror the route groups: auth, password, verification, session,
- * mfa, oauth, users, tenant. Tenant methods take `{ params: { tenantId }, ... }`
- * because the routes are scoped under /tenants/:tenantId/...
+ * Built on the scope-agnostic core (transport + lifecycle + `.api` + group
+ * factory), re-exported from `@auth-craft/client/core`. If you only need one
+ * scope and want to keep other scopes' code out of your bundle/call surface,
+ * import `createClientCore` from `@auth-craft/client/core` and wire only the
+ * per-group contract subpaths (`@auth-craft/api-contract/auth`, `/tenant`, …).
  */
 import { authContract, mfaContract, oauthContract, passwordContract, sessionContract, tenantsContract, usersContract, verificationContract } from '@auth-craft/api-contract';
-import { type ContractClient } from './proxy';
-export interface AuthCraftClientConfig {
-    baseUrl: string;
-    strategy: 'cookie-auth' | 'body-auth';
-    allowedDomains: string[];
-    refreshEarlyMs?: number;
-    defaultHeaders?: Record<string, string>;
-    workerFactory?: () => Worker;
-    /** Auth context scope → X-Auth-Context header. */
-    context?: 'customer' | 'tenant' | 'system';
-}
-export declare class AuthCraftClient {
-    private fg;
-    private readonly config;
+import { ClientCore, type ClientCoreConfig, type ContractClient } from './core/core';
+export type AuthCraftClientConfig = ClientCoreConfig;
+export declare class AuthCraftClient extends ClientCore {
     auth: ContractClient<typeof authContract>;
     password: ContractClient<typeof passwordContract>;
     verification: ContractClient<typeof verificationContract>;
@@ -33,13 +24,9 @@ export declare class AuthCraftClient {
     oauth: ContractClient<typeof oauthContract>;
     users: ContractClient<typeof usersContract>;
     tenant: ContractClient<typeof tenantsContract>;
-    constructor(config: AuthCraftClientConfig);
     init(): Promise<void>;
-    private wireGroups;
-    buildUrl(path: string): string;
-    destroy(): void;
 }
 export declare function createAuthCraftClient(config: AuthCraftClientConfig): AuthCraftClient;
-export { buildClient } from './proxy';
-export type { ContractClient, EndpointMethod, AuthResult } from './proxy';
+export type { ApiTransport, AuthResult, ClientCore, ClientCoreConfig, ContractClient, EndpointMethod, } from './core/core';
+export { buildClient } from './core/core';
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EACL,YAAY,EACZ,WAAW,EACX,aAAa,EACb,gBAAgB,EAChB,eAAe,EACf,eAAe,EACf,aAAa,EACb,oBAAoB,EACrB,MAAM,0BAA0B,CAAA;AAEjC,OAAO,EAAe,KAAK,cAAc,EAAE,MAAM,SAAS,CAAA;AAE1D,MAAM,WAAW,qBAAqB;IACpC,OAAO,EAAE,MAAM,CAAA;IACf,QAAQ,EAAE,aAAa,GAAG,WAAW,CAAA;IACrC,cAAc,EAAE,MAAM,EAAE,CAAA;IACxB,cAAc,CAAC,EAAE,MAAM,CAAA;IACvB,cAAc,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IACvC,aAAa,CAAC,EAAE,MAAM,MAAM,CAAA;IAC5B,kDAAkD;IAClD,OAAO,CAAC,EAAE,UAAU,GAAG,QAAQ,GAAG,QAAQ,CAAA;CAC3C;AAED,qBAAa,eAAe;IAC1B,OAAO,CAAC,EAAE,CAAgC;IAC1C,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAuB;IAE9C,IAAI,EAAG,cAAc,CAAC,OAAO,YAAY,CAAC,CAAA;IAC1C,QAAQ,EAAG,cAAc,CAAC,OAAO,gBAAgB,CAAC,CAAA;IAClD,YAAY,EAAG,cAAc,CAAC,OAAO,oBAAoB,CAAC,CAAA;IAC1D,OAAO,EAAG,cAAc,CAAC,OAAO,eAAe,CAAC,CAAA;IAChD,GAAG,EAAG,cAAc,CAAC,OAAO,WAAW,CAAC,CAAA;IACxC,KAAK,EAAG,cAAc,CAAC,OAAO,aAAa,CAAC,CAAA;IAC5C,KAAK,EAAG,cAAc,CAAC,OAAO,aAAa,CAAC,CAAA;IAC5C,MAAM,EAAG,cAAc,CAAC,OAAO,eAAe,CAAC,CAAA;gBAEnC,MAAM,EAAE,qBAAqB;IAInC,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;IAwB3B,OAAO,CAAC,UAAU;IAYlB,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM;IAK9B,OAAO,IAAI,IAAI;CAIhB;AAED,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,qBAAqB,GAAG,eAAe,CAEpF;AAED,OAAO,EAAE,WAAW,EAAE,MAAM,SAAS,CAAA;AACrC,YAAY,EAAE,cAAc,EAAE,cAAc,EAAE,UAAU,EAAE,MAAM,SAAS,CAAA"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,EACL,YAAY,EACZ,WAAW,EACX,aAAa,EACb,gBAAgB,EAChB,eAAe,EACf,eAAe,EACf,aAAa,EACb,oBAAoB,EACrB,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAAE,UAAU,EAAE,KAAK,gBAAgB,EAAE,KAAK,cAAc,EAAE,MAAM,aAAa,CAAC;AAErF,MAAM,MAAM,qBAAqB,GAAG,gBAAgB,CAAC;AAErD,qBAAa,eAAgB,SAAQ,UAAU;IAC7C,IAAI,EAAG,cAAc,CAAC,OAAO,YAAY,CAAC,CAAC;IAC3C,QAAQ,EAAG,cAAc,CAAC,OAAO,gBAAgB,CAAC,CAAC;IACnD,YAAY,EAAG,cAAc,CAAC,OAAO,oBAAoB,CAAC,CAAC;IAC3D,OAAO,EAAG,cAAc,CAAC,OAAO,eAAe,CAAC,CAAC;IACjD,GAAG,EAAG,cAAc,CAAC,OAAO,WAAW,CAAC,CAAC;IACzC,KAAK,EAAG,cAAc,CAAC,OAAO,aAAa,CAAC,CAAC;IAC7C,KAAK,EAAG,cAAc,CAAC,OAAO,aAAa,CAAC,CAAC;IAC7C,MAAM,EAAG,cAAc,CAAC,OAAO,eAAe,CAAC,CAAC;IAE1C,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;CAW5B;AAED,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,qBAAqB,GAAG,eAAe,CAEpF;AAED,YAAY,EACV,YAAY,EACZ,UAAU,EACV,UAAU,EACV,gBAAgB,EAChB,cAAc,EACd,cAAc,GACf,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC"}

package/dist/index.js

@@ -1,21 +1,20 @@
 /**
- * @auth-craft/client — contract-driven typed client.
+ * @auth-craft/client — full contract-driven typed client (all groups).
  *
- * Wires the absorbed transport (FetchGuard) to the shared api-contract, so the
- * client's methods are generated from — and type-checked against — the same
- * endpoint declarations the backend routes use. No hand-written per-method
- * paths/types: a route change in the contract re-types the call sites here.
+ * The batteries-included client: wires every contract group (auth, password,
+ * verification, session, mfa, oauth, users, tenant) plus the authenticated
+ * raw-HTTP escape hatch (`api`). Methods are generated from the shared
+ * api-contract, so they can't drift from the backend routes.
  *
- * Module groups mirror the route groups: auth, password, verification, session,
- * mfa, oauth, users, tenant. Tenant methods take `{ params: { tenantId }, ... }`
- * because the routes are scoped under /tenants/:tenantId/...
+ * Built on the scope-agnostic core (transport + lifecycle + `.api` + group
+ * factory), re-exported from `@auth-craft/client/core`. If you only need one
+ * scope and want to keep other scopes' code out of your bundle/call surface,
+ * import `createClientCore` from `@auth-craft/client/core` and wire only the
+ * per-group contract subpaths (`@auth-craft/api-contract/auth`, `/tenant`, …).
  */
-import { authContract, mfaContract, oauthContract, passwordContract, sessionContract, tenantsContract, usersContract, verificationContract } from '@auth-craft/api-contract';
-import { createClient } from '@auth-craft/transport';
-import { buildClient } from './proxy';
-export class AuthCraftClient {
-    fg = null;
-    config;
+import { authContract, mfaContract, oauthContract, passwordContract, sessionContract, tenantsContract, usersContract, verificationContract, } from '@auth-craft/api-contract';
+import { ClientCore } from './core/core';
+export class AuthCraftClient extends ClientCore {
     auth;
     password;
     verification;
@@ -24,51 +23,20 @@ export class AuthCraftClient {
     oauth;
     users;
     tenant;
-    constructor(config) {
-        this.config = config;
-    }
     async init() {
-        const headers = this.config.context && this.config.context !== 'customer'
-            ? { ...this.config.defaultHeaders, 'X-Auth-Context': this.config.context }
-            : this.config.defaultHeaders;
-        this.fg = createClient({
-            provider: {
-                type: this.config.strategy,
-                refreshUrl: this.buildUrl('/auth/refresh'),
-                loginUrl: this.buildUrl('/auth/authenticate'),
-                logoutUrl: this.buildUrl('/auth/logout'),
-                ...(headers ? { headers } : {})
-            },
-            allowedDomains: this.config.allowedDomains,
-            ...(this.config.refreshEarlyMs !== undefined ? { refreshEarlyMs: this.config.refreshEarlyMs } : {}),
-            ...(headers ? { defaultHeaders: headers } : {}),
-            ...(this.config.workerFactory ? { workerFactory: this.config.workerFactory } : {})
-        });
-        await this.fg.whenReady();
-        this.wireGroups(this.fg);
-    }
-    wireGroups(fg) {
-        const url = (p) => this.buildUrl(p);
-        this.auth = buildClient(fg, authContract, url);
-        this.password = buildClient(fg, passwordContract, url);
-        this.verification = buildClient(fg, verificationContract, url);
-        this.session = buildClient(fg, sessionContract, url);
-        this.mfa = buildClient(fg, mfaContract, url);
-        this.oauth = buildClient(fg, oauthContract, url);
-        this.users = buildClient(fg, usersContract, url);
-        this.tenant = buildClient(fg, tenantsContract, url);
-    }
-    buildUrl(path) {
-        const p = path.startsWith('/') ? path : `/${path}`;
-        return `${this.config.baseUrl}${p}`;
-    }
-    destroy() {
-        this.fg?.destroy();
-        this.fg = null;
+        await super.init();
+        this.auth = this.group(authContract);
+        this.password = this.group(passwordContract);
+        this.verification = this.group(verificationContract);
+        this.session = this.group(sessionContract);
+        this.mfa = this.group(mfaContract);
+        this.oauth = this.group(oauthContract);
+        this.users = this.group(usersContract);
+        this.tenant = this.group(tenantsContract);
     }
 }
 export function createAuthCraftClient(config) {
     return new AuthCraftClient(config);
 }
-export { buildClient } from './proxy';
+export { buildClient } from './core/core';
 //# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EACL,YAAY,EACZ,WAAW,EACX,aAAa,EACb,gBAAgB,EAChB,eAAe,EACf,eAAe,EACf,aAAa,EACb,oBAAoB,EACrB,MAAM,0BAA0B,CAAA;AACjC,OAAO,EAAE,YAAY,EAAyB,MAAM,uBAAuB,CAAA;AAC3E,OAAO,EAAE,WAAW,EAAuB,MAAM,SAAS,CAAA;AAa1D,MAAM,OAAO,eAAe;IAClB,EAAE,GAA4B,IAAI,CAAA;IACzB,MAAM,CAAuB;IAE9C,IAAI,CAAsC;IAC1C,QAAQ,CAA0C;IAClD,YAAY,CAA8C;IAC1D,OAAO,CAAyC;IAChD,GAAG,CAAqC;IACxC,KAAK,CAAuC;IAC5C,KAAK,CAAuC;IAC5C,MAAM,CAAyC;IAE/C,YAAY,MAA6B;QACvC,IAAI,CAAC,MAAM,GAAG,MAAM,CAAA;IACtB,CAAC;IAED,KAAK,CAAC,IAAI;QACR,MAAM,OAAO,GACX,IAAI,CAAC,MAAM,CAAC,OAAO,IAAI,IAAI,CAAC,MAAM,CAAC,OAAO,KAAK,UAAU;YACvD,CAAC,CAAC,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC,cAAc,EAAE,gBAAgB,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE;YAC1E,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,cAAc,CAAA;QAEhC,IAAI,CAAC,EAAE,GAAG,YAAY,CAAC;YACrB,QAAQ,EAAE;gBACR,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ;gBAC1B,UAAU,EAAE,IAAI,CAAC,QAAQ,CAAC,eAAe,CAAC;gBAC1C,QAAQ,EAAE,IAAI,CAAC,QAAQ,CAAC,oBAAoB,CAAC;gBAC7C,SAAS,EAAE,IAAI,CAAC,QAAQ,CAAC,cAAc,CAAC;gBACxC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAChC;YACD,cAAc,EAAE,IAAI,CAAC,MAAM,CAAC,cAAc;YAC1C,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,cAAc,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,IAAI,CAAC,MAAM,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACnG,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC/C,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,IAAI,CAAC,MAAM,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACnF,CAAC,CAAA;QAEF,MAAM,IAAI,CAAC,EAAE,CAAC,SAAS,EAAE,CAAA;QACzB,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;IAC1B,CAAC;IAEO,UAAU,CAAC,EAAoB;QACrC,MAAM,GAAG,GAAG,CAAC,CAAS,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAA;QAC3C,IAAI,CAAC,IAAI,GAAG,WAAW,CAAC,EAAE,EAAE,YAAY,EAAE,GAAG,CAAC,CAAA;QAC9C,IAAI,CAAC,QAAQ,GAAG,WAAW,CAAC,EAAE,EAAE,gBAAgB,EAAE,GAAG,CAAC,CAAA;QACtD,IAAI,CAAC,YAAY,GAAG,WAAW,CAAC,EAAE,EAAE,oBAAoB,EAAE,GAAG,CAAC,CAAA;QAC9D,IAAI,CAAC,OAAO,GAAG,WAAW,CAAC,EAAE,EAAE,eAAe,EAAE,GAAG,CAAC,CAAA;QACpD,IAAI,CAAC,GAAG,GAAG,WAAW,CAAC,EAAE,EAAE,WAAW,EAAE,GAAG,CAAC,CAAA;QAC5C,IAAI,CAAC,KAAK,GAAG,WAAW,CAAC,EAAE,EAAE,aAAa,EAAE,GAAG,CAAC,CAAA;QAChD,IAAI,CAAC,KAAK,GAAG,WAAW,CAAC,EAAE,EAAE,aAAa,EAAE,GAAG,CAAC,CAAA;QAChD,IAAI,CAAC,MAAM,GAAG,WAAW,CAAC,EAAE,EAAE,eAAe,EAAE,GAAG,CAAC,CAAA;IACrD,CAAC;IAED,QAAQ,CAAC,IAAY;QACnB,MAAM,CAAC,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAA;QAClD,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,GAAG,CAAC,EAAE,CAAA;IACrC,CAAC;IAED,OAAO;QACL,IAAI,CAAC,EAAE,EAAE,OAAO,EAAE,CAAA;QAClB,IAAI,CAAC,EAAE,GAAG,IAAI,CAAA;IAChB,CAAC;CACF;AAED,MAAM,UAAU,qBAAqB,CAAC,MAA6B;IACjE,OAAO,IAAI,eAAe,CAAC,MAAM,CAAC,CAAA;AACpC,CAAC;AAED,OAAO,EAAE,WAAW,EAAE,MAAM,SAAS,CAAA"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,EACL,YAAY,EACZ,WAAW,EACX,aAAa,EACb,gBAAgB,EAChB,eAAe,EACf,eAAe,EACf,aAAa,EACb,oBAAoB,GACrB,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAAE,UAAU,EAA8C,MAAM,aAAa,CAAC;AAIrF,MAAM,OAAO,eAAgB,SAAQ,UAAU;IAC7C,IAAI,CAAuC;IAC3C,QAAQ,CAA2C;IACnD,YAAY,CAA+C;IAC3D,OAAO,CAA0C;IACjD,GAAG,CAAsC;IACzC,KAAK,CAAwC;IAC7C,KAAK,CAAwC;IAC7C,MAAM,CAA0C;IAEhD,KAAK,CAAC,IAAI;QACR,MAAM,KAAK,CAAC,IAAI,EAAE,CAAC;QACnB,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;QACrC,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC;QAC7C,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC;QACrD,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC;QAC3C,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;QACnC,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;QACvC,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;QACvC,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC;IAC5C,CAAC;CACF;AAED,MAAM,UAAU,qBAAqB,CAAC,MAA6B;IACjE,OAAO,IAAI,eAAe,CAAC,MAAM,CAAC,CAAC;AACrC,CAAC;AAUD,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC"}

package/dist/transport/client.d.ts

@@ -0,0 +1,250 @@
+import { type Result } from 'ts-micro-result';
+import type { AuthResult, FetchEnvelope, FetchGuardOptions, FetchGuardRequestInit } from './types';
+/**
+ * FetchGuard Client - main interface cho việc gọi API thông qua Web Worker
+ */
+export declare class FetchGuardClient {
+    private worker;
+    private messageId;
+    private pendingRequests;
+    /** Track request URLs for debug hooks */
+    private requestUrls;
+    /** Track request timing for metrics */
+    private requestTimings;
+    private authListeners;
+    private readyListeners;
+    private isReady;
+    private requestQueue;
+    private activeRequests;
+    private readonly maxConcurrent;
+    private readonly maxQueueSize;
+    private readonly setupTimeout;
+    private readonly requestTimeout;
+    private setupResolve?;
+    private setupReject?;
+    private readonly debug?;
+    private readonly retry?;
+    private readonly dedupe?;
+    /** In-flight requests for deduplication */
+    private readonly inFlightRequests;
+    /** Recent completed requests for time-window deduplication */
+    private readonly recentResults;
+    constructor(options: FetchGuardOptions);
+    /**
+     * Initialize worker with config and provider
+     */
+    private initializeWorker;
+    /**
+     * Handle worker messages
+     */
+    private handleWorkerMessage;
+    /**
+     * Handle worker errors
+     */
+    private handleWorkerError;
+    /**
+     * Generate unique message ID
+     */
+    private generateMessageId;
+    /**
+     * Make API request with optional deduplication, retry, and AbortSignal support
+     *
+     * @param url - Full URL to fetch
+     * @param options - Request options including optional AbortSignal
+     * @returns Result with FetchEnvelope on success, error on failure
+     *
+     * @example
+     * // With AbortSignal
+     * const controller = new AbortController()
+     * setTimeout(() => controller.abort(), 5000)
+     * const result = await api.fetch('/slow', { signal: controller.signal })
+     */
+    fetch(url: string, options?: FetchGuardRequestInit): Promise<Result<FetchEnvelope>>;
+    /**
+     * Wrap a promise with AbortSignal support
+     */
+    private wrapWithAbortSignal;
+    /**
+     * Fetch with retry logic and AbortSignal support (internal)
+     */
+    private fetchWithRetryAndSignal;
+    /**
+     * Generate deduplication key for request
+     * Returns null if request should not be deduplicated
+     */
+    private getDedupeKey;
+    /**
+     * Apply jitter to a delay value
+     * Jitter adds ±(jitter * delay) randomness to prevent thundering herd
+     * @param delay - Base delay in milliseconds
+     * @param jitter - Jitter factor (0-1)
+     * @returns Jittered delay
+     */
+    private applyJitter;
+    /**
+     * Default retry condition - only retry on NETWORK_ERROR
+     */
+    private defaultShouldRetry;
+    /**
+     * Calculate request metrics from timing data
+     */
+    private calculateMetrics;
+    /**
+     * Sleep helper for retry delay
+     */
+    private sleep;
+    /**
+     * Sleep with abort signal support
+     * Returns true if aborted, false if completed normally
+     */
+    private sleepWithAbort;
+    /**
+     * Fetch with id for external cancellation
+     * Returns { id, result, cancel }
+     * Now uses queue system for sequential processing
+     */
+    fetchWithId(url: string, options?: FetchGuardRequestInit): {
+        id: string;
+        result: Promise<Result<FetchEnvelope>>;
+        cancel: () => void;
+    };
+    /**
+     * Cancel a pending request by ID
+     */
+    cancel(id: string): void;
+    /**
+     * Convenience methods
+     */
+    get(url: string, options?: Omit<FetchGuardRequestInit, 'method' | 'body'>): Promise<Result<FetchEnvelope>>;
+    post(url: string, body?: unknown, options?: Omit<FetchGuardRequestInit, 'method' | 'body'>): Promise<Result<FetchEnvelope>>;
+    put(url: string, body?: unknown, options?: Omit<FetchGuardRequestInit, 'method' | 'body'>): Promise<Result<FetchEnvelope>>;
+    delete(url: string, options?: Omit<FetchGuardRequestInit, 'method' | 'body'>): Promise<Result<FetchEnvelope>>;
+    patch(url: string, body?: unknown, options?: Omit<FetchGuardRequestInit, 'method' | 'body'>): Promise<Result<FetchEnvelope>>;
+    /**
+     * Typed data-API call.
+     *
+     * Issues the HTTP request through the Worker (tokens stay isolated) and
+     * deserializes the backend's ts-micro-result envelope into a domain
+     * `Result<T>` — so callers no longer hand-write "judge status + parse JSON +
+     * map errors". This is the entry point the contract-driven typed client uses
+     * for `kind: 'data'` endpoints.
+     *
+     * Auth-lifecycle endpoints (login/refresh/exchange/logout) must NOT use this —
+     * they go through login()/exchangeToken()/logout() because they touch the
+     * Worker's refresh-token storage.
+     */
+    callJson<T>(method: 'GET' | 'POST' | 'PUT' | 'PATCH' | 'DELETE', url: string, body?: unknown, options?: Omit<FetchGuardRequestInit, 'method' | 'body'>): Promise<Result<T>>;
+    /**
+     * Generic method to call any auth method on provider
+     * @param method - Method name (login, logout, loginWithPhone, etc.)
+     * @param emitEvent - Whether to emit AUTH_STATE_CHANGED event (default: true)
+     * @param args - Arguments to pass to the method
+     * @returns Promise<Result<AuthResult>> - Always returns AuthResult
+     */
+    call(method: string, emitEvent?: boolean, ...args: unknown[]): Promise<Result<AuthResult>>;
+    /**
+     * Convenience wrapper for login
+     * @param payload - Login credentials
+     * @param url - Optional URL override
+     * @param emitEvent - Whether to emit AUTH_STATE_CHANGED event (default: true)
+     */
+    login(payload?: unknown, url?: string, emitEvent?: boolean): Promise<Result<AuthResult>>;
+    /**
+     * Convenience wrapper for logout
+     * @param payload - Optional logout payload
+     * @param emitEvent - Whether to emit AUTH_STATE_CHANGED event (default: true)
+     */
+    logout(payload?: unknown, emitEvent?: boolean): Promise<Result<AuthResult>>;
+    /**
+     * Convenience wrapper for refreshToken
+     * @param emitEvent - Whether to emit AUTH_STATE_CHANGED event (default: true)
+     */
+    refreshToken(emitEvent?: boolean): Promise<Result<AuthResult>>;
+    /**
+     * Exchange current token for a new one with different context
+     *
+     * Useful for:
+     * - Switching tenants in multi-tenant apps
+     * - Changing authorization scope
+     * - Impersonating users (admin feature)
+     *
+     * @param url - URL to call for token exchange
+     * @param options - Exchange options (method, payload, headers)
+     * @param emitEvent - Whether to emit AUTH_STATE_CHANGED event (default: true)
+     *
+     * @example
+     * // Switch tenant
+     * await api.exchangeToken('https://auth.example.com/auth/select-tenant', {
+     *   payload: { tenantId: 'tenant_123' }
+     * })
+     *
+     * // Change scope with PUT method
+     * await api.exchangeToken('https://auth.example.com/auth/switch-context', {
+     *   method: 'PUT',
+     *   payload: { scope: 'admin' }
+     * })
+     *
+     * // With custom headers (overrides defaultHeaders)
+     * await api.exchangeToken('https://auth.example.com/auth/impersonate', {
+     *   payload: { userId: 'user_456' },
+     *   headers: { 'X-Impersonate-Reason': 'support-ticket-123' }
+     * })
+     */
+    exchangeToken(url: string, options?: {
+        method?: 'POST' | 'PUT';
+        payload?: Record<string, unknown>;
+        headers?: Record<string, string>;
+    }, emitEvent?: boolean): Promise<Result<AuthResult>>;
+    /**
+     * Check if worker is ready
+     */
+    ready(): boolean;
+    /**
+     * Wait for worker to be ready
+     * Returns immediately if already ready
+     */
+    whenReady(): Promise<void>;
+    /**
+     * Subscribe to ready event
+     * Callback is called immediately if already ready
+     */
+    onReady(callback: () => void): () => void;
+    /**
+     * Subscribe to auth state changes
+     */
+    onAuthStateChanged(cb: (state: AuthResult) => void): () => void;
+    /** Send PING and await PONG */
+    ping(): Promise<Result<{
+        timestamp: number;
+    }>>;
+    /**
+     * Send message through queue system
+     * All messages go through queue for sequential processing
+     * @param transferables - Optional Transferable objects for zero-copy postMessage
+     */
+    private sendMessageQueued;
+    /**
+     * Process message queue with concurrency limit
+     *
+     * Uses semaphore pattern to allow N concurrent requests.
+     * Benefits:
+     * - Higher throughput than sequential processing
+     * - Backpressure via maxConcurrent limit
+     * - Better error isolation (one failure doesn't affect others)
+     */
+    private processQueue;
+    /**
+     * Called when a request completes (success or error)
+     * Decrements active count and processes next items in queue
+     */
+    private onRequestComplete;
+    /**
+     * Cleanup - terminate worker
+     */
+    destroy(): void;
+}
+/**
+ * Factory function to create FetchGuard client
+ */
+export declare function createClient(options: FetchGuardOptions): FetchGuardClient;
+//# sourceMappingURL=client.d.ts.map

package/dist/transport/client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../../src/transport/client.ts"],"names":[],"mappings":"AAAA,OAAO,EAAW,KAAK,MAAM,EAAE,MAAM,iBAAiB,CAAC;AAMvD,OAAO,KAAK,EACV,UAAU,EAGV,aAAa,EACb,iBAAiB,EACjB,qBAAqB,EAMtB,MAAM,SAAS,CAAC;AAsCjB;;GAEG;AACH,qBAAa,gBAAgB;IAC3B,OAAO,CAAC,MAAM,CAAS;IACvB,OAAO,CAAC,SAAS,CAAK;IAGtB,OAAO,CAAC,eAAe,CAMnB;IACJ,yCAAyC;IACzC,OAAO,CAAC,WAAW,CAA6B;IAChD,uCAAuC;IACvC,OAAO,CAAC,cAAc,CAAoC;IAC1D,OAAO,CAAC,aAAa,CAA0C;IAC/D,OAAO,CAAC,cAAc,CAAyB;IAC/C,OAAO,CAAC,OAAO,CAAS;IAExB,OAAO,CAAC,YAAY,CAAmB;IACvC,OAAO,CAAC,cAAc,CAAK;IAC3B,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAS;IACvC,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAS;IACtC,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAS;IACtC,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAS;IACxC,OAAO,CAAC,YAAY,CAAC,CAAa;IAClC,OAAO,CAAC,WAAW,CAAC,CAAyB;IAC7C,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAa;IACpC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAc;IACrC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAe;IACvC,2CAA2C;IAC3C,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAqD;IACtF,8DAA8D;IAC9D,OAAO,CAAC,QAAQ,CAAC,aAAa,CAA2E;gBAE7F,OAAO,EAAE,iBAAiB;IAwBtC;;OAEG;YACW,gBAAgB;IAmD9B;;OAEG;IACH,OAAO,CAAC,mBAAmB;IA8H3B;;OAEG;IACH,OAAO,CAAC,iBAAiB;IAezB;;OAEG;IACH,OAAO,CAAC,iBAAiB;IAIzB;;;;;;;;;;;;OAYG;IACG,KAAK,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,GAAE,qBAA0B,GAAG,OAAO,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;IAqD7F;;OAEG;IACH,OAAO,CAAC,mBAAmB;IA4B3B;;OAEG;YACW,uBAAuB;IA4ErC;;;OAGG;IACH,OAAO,CAAC,YAAY;IAmBpB;;;;;;OAMG;IACH,OAAO,CAAC,WAAW;IAUnB;;OAEG;IACH,OAAO,CAAC,kBAAkB;IAK1B;;OAEG;IACH,OAAO,CAAC,gBAAgB;IAmBxB;;OAEG;IACH,OAAO,CAAC,KAAK;IAIb;;;OAGG;IACH,OAAO,CAAC,cAAc;IAqBtB;;;;OAIG;IACH,WAAW,CACT,GAAG,EAAE,MAAM,EACX,OAAO,GAAE,qBAA0B,GAClC;QACD,EAAE,EAAE,MAAM,CAAC;QACX,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC;QACvC,MAAM,EAAE,MAAM,IAAI,CAAC;KACpB;IAmED;;OAEG;IACH,MAAM,CAAC,EAAE,EAAE,MAAM,GAAG,IAAI;IAsBxB;;OAEG;IACG,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,GAAE,IAAI,CAAC,qBAAqB,EAAE,QAAQ,GAAG,MAAM,CAAM,GAAG,OAAO,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;IAI9G,IAAI,CACR,GAAG,EAAE,MAAM,EACX,IAAI,CAAC,EAAE,OAAO,EACd,OAAO,GAAE,IAAI,CAAC,qBAAqB,EAAE,QAAQ,GAAG,MAAM,CAAM,GAC3D,OAAO,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;IA0B3B,GAAG,CACP,GAAG,EAAE,MAAM,EACX,IAAI,CAAC,EAAE,OAAO,EACd,OAAO,GAAE,IAAI,CAAC,qBAAqB,EAAE,QAAQ,GAAG,MAAM,CAAM,GAC3D,OAAO,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;IA0B3B,MAAM,CACV,GAAG,EAAE,MAAM,EACX,OAAO,GAAE,IAAI,CAAC,qBAAqB,EAAE,QAAQ,GAAG,MAAM,CAAM,GAC3D,OAAO,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;IAI3B,KAAK,CACT,GAAG,EAAE,MAAM,EACX,IAAI,CAAC,EAAE,OAAO,EACd,OAAO,GAAE,IAAI,CAAC,qBAAqB,EAAE,QAAQ,GAAG,MAAM,CAAM,GAC3D,OAAO,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;IA0BjC;;;;;;;;;;;;OAYG;IACG,QAAQ,CAAC,CAAC,EACd,MAAM,EAAE,KAAK,GAAG,MAAM,GAAG,KAAK,GAAG,OAAO,GAAG,QAAQ,EACnD,GAAG,EAAE,MAAM,EACX,IAAI,CAAC,EAAE,OAAO,EACd,OAAO,GAAE,IAAI,CAAC,qBAAqB,EAAE,QAAQ,GAAG,MAAM,CAAM,GAC3D,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;IA4BrB;;;;;;OAMG;IACG,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,SAAS,CAAC,EAAE,OAAO,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;IAoBhG;;;;;OAKG;IACG,KAAK,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,GAAG,CAAC,EAAE,MAAM,EAAE,SAAS,GAAE,OAAc,GAAG,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;IAepG;;;;OAIG;IACG,MAAM,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,SAAS,GAAE,OAAc,GAAG,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;IAKvF;;;OAGG;IACG,YAAY,CAAC,SAAS,GAAE,OAAc,GAAG,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;IAI1E;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OA6BG;IACG,aAAa,CACjB,GAAG,EAAE,MAAM,EACX,OAAO,CAAC,EAAE;QAAE,MAAM,CAAC,EAAE,MAAM,GAAG,KAAK,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;KAAE,EAC1G,SAAS,GAAE,OAAc,GACxB,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;IAQ9B;;OAEG;IACH,KAAK,IAAI,OAAO;IAIhB;;;OAGG;IACG,SAAS,IAAI,OAAO,CAAC,IAAI,CAAC;IAQhC;;;OAGG;IACH,OAAO,CAAC,QAAQ,EAAE,MAAM,IAAI,GAAG,MAAM,IAAI;IAczC;;OAEG;IACH,kBAAkB,CAAC,EAAE,EAAE,CAAC,KAAK,EAAE,UAAU,KAAK,IAAI,GAAG,MAAM,IAAI;IAK/D,+BAA+B;IACzB,IAAI,IAAI,OAAO,CAAC,MAAM,CAAC;QAAE,SAAS,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAoBpD;;;;OAIG;IACH,OAAO,CAAC,iBAAiB;IAsCzB;;;;;;;;OAQG;IACH,OAAO,CAAC,YAAY;IAiCpB;;;OAGG;IACH,OAAO,CAAC,iBAAiB;IAKzB;;OAEG;IACH,OAAO,IAAI,IAAI;CAYhB;AAED;;GAEG;AACH,wBAAgB,YAAY,CAAC,OAAO,EAAE,iBAAiB,GAAG,gBAAgB,CAEzE"}