@borrowbetter/arpcsdk 0.2.0 → 0.3.0

package/README.md

@@ -19,10 +19,11 @@ pnpm add @borrowbetter/arpcsdk
 import { ArpcSDK } from "@borrowbetter/arpcsdk";
 
 const sdk = new ArpcSDK({
-  oauthUrl: "https://oauth.stg.ffngcp.com",
-  gatewayUrl: "https://apis-gateway-v2.stg.fdrgcp.com",
-  username: "borrowbetter@seller.com",   // OAuth client_id (also the seller_agent_email)
-  password: process.env.FDR_OAUTH_PASSWORD!,
+  environment: "stg",                      // "dev" | "stg" | "prd" — drives both hosts
+  auth: {
+    username: "borrowbetter@seller.com",   // OAuth client_id (also the seller_agent_email)
+    password: process.env.ARPC_OAUTH_PASSWORD!,
+  },
 });
 
 // The first api call authenticates automatically — it exchanges your
@@ -40,7 +41,7 @@ Every operation returns `{ status, data, headers }` and **never throws on a non-
 
 Four things to hold in your head:
 
-- **Two hosts.** Auth happens on the **OAuth host** (`POST /v1/token`, HTTP Basic). Everything else goes to the **API gateway**. The SDK routes each call to the right one.
+- **Two hosts, one switch.** Auth happens on the **OAuth host** (`POST /v1/token`, HTTP Basic). Everything else goes to the **API gateway**. You pick an `environment` and the SDK derives both — see [Environments](#environments).
 - **The passport.** `fdr_applicant_id` is minted once at eligibility and threads through *every* subsequent call. You carry it between operations.
 - **Automatic token lifecycle.** Every `api` call carries a bearer JWT (**~900s / 15 min TTL**) that the SDK manages for you: it exchanges your credentials on the first call, caches the token, attaches it to every request, and re-exchanges ~30s before expiry. Concurrent calls share a single exchange. See [Token caching](#token-caching) to persist or share the token.
 - **No-throw responses.** Operations return `{ status, data, headers }`. Branch on `status` — don't wrap every call in try/catch.
@@ -141,9 +142,33 @@ sequenceDiagram
 
 Key property: **no inactivation.** Transferring does *not* close the digital lead — both stay active, and whichever path enrolls first wins. If retail enrolls first, a later digital enroll returns a duplicate / "already enrolled" error (expected). So calling it early is safe.
 
+## Environments
+
+`environment` is required and selects both hosts. Note they sit on different domains — the OAuth host is `ffngcp.com`, the gateway is `fdrgcp.com`.
+
+| `environment` | OAuth host | API gateway |
+| --- | --- | --- |
+| `"dev"` | `https://oauth.dev.ffngcp.com` | `https://apis-gateway-v2.dev.fdrgcp.com` |
+| `"stg"` | `https://oauth.stg.ffngcp.com` | `https://apis-gateway-v2.stg.fdrgcp.com` |
+| `"prd"` | `https://oauth.prd.ffngcp.com` | `https://apis-gateway-v2.prd.fdrgcp.com` |
+
+Credentials are issued per environment — a STG client_id will not authenticate against PRD.
+
+Point at a host the table doesn't cover — a local mock, say — by overriding either one via `urls`. Anything you omit still comes from `environment`.
+
+```typescript
+const sdk = new ArpcSDK({
+  environment: "prd",
+  auth: { username, password },
+  urls: { gateway: "http://localhost:8080" },  // oauth still from "prd"
+});
+```
+
+The table is exported as `ARPC_ENDPOINTS` if you need to read a host without constructing an SDK. It's frozen — it backs both host resolution and environment validation, so mutating it isn't a supported way to redirect the SDK. Use `urls` for that.
+
 ## Token caching
 
-By default the bearer token lives in-memory, per-process — good enough for a single long-running service. Pass a `cache` in the config to change where it lives: persist it across restarts, or share one token across workers/instances instead of each exchanging its own.
+By default the bearer token lives in-memory, per-process — good enough for a single long-running service. Pass `auth.cache` to change where it lives: persist it across restarts, or share one token across workers/instances instead of each exchanging its own.
 
 ```typescript
 interface TokenCache {
@@ -173,13 +198,15 @@ const cache: TokenCache = {
   },
 };
 
-const sdk = new ArpcSDK({ /* …hosts + creds… */, cache });
+const sdk = new ArpcSDK({
+  environment: "stg",
+  auth: { username, password, cache },
+});
 ```
 
 ## Development
 
 ```bash
-cp .env.example .env   # fill in STG credentials
 pnpm install
 pnpm codegen           # regenerate the typed client from the OpenAPI spec
 pnpm smoke             # drive the full flow end-to-end against live STG
@@ -187,6 +214,15 @@ pnpm typecheck
 pnpm build             # codegen + tsup → dist/ (esm + cjs + d.ts)
 ```
 
+`pnpm smoke` reads its credentials from `.env` (via dotenv-flow):
+
+```bash
+ARPC_OAUTH_USERNAME=...
+ARPC_OAUTH_PASSWORD=...
+```
+
+These are the smoke script's, not the SDK's — the library never reads `process.env`. The script pins `environment: "stg"` in code rather than taking it from `.env`: it drives a real enrollment against the canned STG test identity, so it must not be pointable at PRD.
+
 The typed client (`src/generated/`) is generated from the committed spec (`openapi/api-v2026.15.0.json`) and is not checked in — `pnpm codegen` (run automatically by `build`) reproduces it. To move to a newer spec, drop the JSON in `openapi/` and update `input.target` in `codegen.ts`.
 
 ## Releasing

package/dist/index.d.mts

@@ -17,9 +17,8 @@ interface HttpResponse<T> {
  * SDK configuration.
  *
  * The library never reads the environment itself — a consumer constructs
- * `new ArpcSDK(config)`, which calls `configure()`. The `configFromEnv()` helper
- * is a convenience for the dev scripts (smoke / server), which load `.env` via
- * dotenv-flow and pass the result in.
+ * `new ArpcSDK(config)`, which calls `configure()`. Where that config comes
+ * from (env vars, a secrets manager, a config service) is the caller's business.
  */
 /**
  * Bearer-token store. The SDK authenticates lazily on the first gateway call:
@@ -35,11 +34,29 @@ interface TokenCache {
     /** Persist a freshly exchanged token. `expiresAt` already includes the SDK's refresh skew. */
     set(token: string, expiresAt: Date): Promise<void>;
 }
-interface ArpcConfig {
+/** FDR deployment target. Selects both hosts — see `ARPC_ENDPOINTS`. */
+type ArpcEnvironment = "dev" | "stg" | "prd";
+/** The host pair a single environment resolves to. */
+interface ArpcEndpoint {
     /** OAuth host — token exchange only (`POST /v1/token`). */
-    oauthUrl: string;
+    readonly oauth: string;
     /** API gateway host — every non-auth call. */
-    gatewayUrl: string;
+    readonly gateway: string;
+}
+/**
+ * Per-environment hosts. The two differ by domain, not just subdomain: the
+ * OAuth host is `ffngcp.com`, the gateway is `fdrgcp.com`.
+ *
+ * Frozen: this table backs both host resolution and environment validation, so
+ * a consumer mutating it would quietly change SDK behavior.
+ */
+declare const ARPC_ENDPOINTS: Readonly<Record<ArpcEnvironment, ArpcEndpoint>>;
+/**
+ * Narrow a raw string to an `ArpcEnvironment`. Useful when the value arrives
+ * untyped — an env var, a JSON config file, a request payload.
+ */
+declare function isArpcEnvironment(value: string): value is ArpcEnvironment;
+interface ArpcAuth {
     /**
      * OAuth client_id (HTTP Basic username). Also used as the lead's
      * `seller_agent_email` — the OAuth identity is a registered DRA agent.
@@ -50,6 +67,22 @@ interface ArpcConfig {
     /** Bearer-token store. Defaults to an in-memory, per-process cache. */
     cache?: TokenCache;
 }
+/**
+ * Escape hatch — per-host overrides of the `environment` defaults. Omit a key
+ * (or leave it `undefined`) to keep that environment's host.
+ */
+interface ArpcUrls {
+    /** OAuth host — token exchange only (`POST /v1/token`). */
+    oauth?: string;
+    /** API gateway host — every non-auth call. */
+    gateway?: string;
+}
+interface ArpcConfig {
+    /** Selects the FDR environment. Drives both hosts. */
+    environment: ArpcEnvironment;
+    auth: ArpcAuth;
+    urls?: ArpcUrls;
+}
 
 /**
  * Generated by orval v7.21.0 🍺
@@ -2805,17 +2838,18 @@ interface UwSubmissionV2Response {
  * ARPC SDK — a typed, agnostic client for FDR's ARPC DEX API (Achieve
  * Resolution Partner Connect, Digital Enrollment Experience).
  *
- * Thin by design: it owns the two-host routing, the OAuth token lifecycle, and
- * bearer injection, and exposes the full endpoint surface as typed operations
- * on `sdk.api`. It does not orchestrate the enrollment sequence — the caller
+ * Thin by design: it owns the two-host routing (both derived from
+ * `environment`), the OAuth token lifecycle, and bearer injection, and exposes
+ * the full endpoint surface as typed operations on `sdk.api`. It does not
+ * orchestrate the enrollment sequence — the caller
  * assembles payloads and threads the `fdr_applicant_id` between calls. See
  * `scripts/smoke.ts` for a full end-to-end reference sequence (incl. the program
  * poll loop).
  *
  * Auth is lazy: the first `api` call exchanges credentials for a bearer JWT and
  * caches it (~900s TTL), then re-exchanges shortly before it expires. There's no
- * explicit login step. Supply a `cache` in the config to persist the token
- * across restarts or share it across workers; otherwise it's held in-process.
+ * explicit login step. Supply `auth.cache` to persist the token across restarts
+ * or share it across workers; otherwise it's held in-process.
  *
  * Operations never throw on a non-2xx: each returns `{ status, data, headers }`,
  * so a business gate (e.g. a UW/DRA readiness failure) comes back as a normal
@@ -2828,10 +2862,11 @@ interface UwSubmissionV2Response {
  * @example
  * ```typescript
  * const sdk = new ArpcSDK({
- *   oauthUrl: "https://oauth.stg.ffngcp.com",
- *   gatewayUrl: "https://apis-gateway-v2.stg.fdrgcp.com",
- *   username: "borrowbetter@seller.com",
- *   password: process.env.FDR_OAUTH_PASSWORD!,
+ *   environment: "stg",
+ *   auth: {
+ *     username: "borrowbetter@seller.com",
+ *     password: process.env.ARPC_OAUTH_PASSWORD!,
+ *   },
  * });
  *
  * // The first call authenticates automatically and caches the token.
@@ -2861,4 +2896,4 @@ declare class ArpcSDK {
     constructor(config: ArpcConfig);
 }
 
-export { type ARPCErrorResponse, type Address, type Applicant, type ApplicationSendEmailResponse, type ArpcConfig, ArpcSDK, type AuditInfo, type BankDetails, type BankDetailsInput, type BankUpdateRequest, type Check, CheckType, type CoApplicant, type Consents, type CreateLeadRequest, type CreateLeadResponse, type CreditPullConsent, type DebtAccount, type DraApplicant, type DraApplicantInput, DraApplicantInputSigningType, type DraRequest, type DraResponse, type EligibilityAddress, type EligibilityApplicant, type EligibilityApplication, type EligibilityDebtAccount, type EligibilityRequest, type EligibilityResponse, type ErrorDetails, type FieldValidationError, FieldValidationErrorReasonCode, type HttpResponse, type IneligibleReason, type LeadApplicant, LeadApplicantEmploymentStatus, type LeadApplicantInput, LeadApplicantPayFrequency, type LeadApplication, LeadApplicationCreditPullSource, LeadApplicationFdrOrCss, LeadApplicationFixedIncome, LeadApplicationOwnOrRent, type LeadCondition, LeadConditionActive, type LeadCreditor, type LeadDebtAccount, LeadDebtAccountOwnership, LeadDebtAccountResponsibility, type LeadDistribution, type LeadPatchRequest, type LeadReadiness, type LeadResponse, type LeadTransferRequest, type LeadTransferResponse, LeadTransferResponseResponse, type MailingAddress, type PatchAddress, type PatchApplicant, type PatchCoApplicant, type PatchCondition, type PatchDebtAccount, type PaymentOption, type ProgramRequest, type ProgramSummaryTaskRequest, type ProgramSummaryTaskResponse, type ReadinessCheck, ReadinessCheckType, type ReadinessErrorResponse, ReadinessErrorResponseErrorCode, type ReadinessResponse, type RegisterApplicantResponse, type RegisterApplicantV2Address, type RegisterApplicantV2Request, type SpinwheelNetworkUserRequest, type SpinwheelNetworkUserResponse, type StatelessReadinessRequest, type TokenCache, type Tracking, type UwSubmissionV2Response };
+export { type ARPCErrorResponse, ARPC_ENDPOINTS, type Address, type Applicant, type ApplicationSendEmailResponse, type ArpcAuth, type ArpcConfig, type ArpcEndpoint, type ArpcEnvironment, ArpcSDK, type ArpcUrls, type AuditInfo, type BankDetails, type BankDetailsInput, type BankUpdateRequest, type Check, CheckType, type CoApplicant, type Consents, type CreateLeadRequest, type CreateLeadResponse, type CreditPullConsent, type DebtAccount, type DraApplicant, type DraApplicantInput, DraApplicantInputSigningType, type DraRequest, type DraResponse, type EligibilityAddress, type EligibilityApplicant, type EligibilityApplication, type EligibilityDebtAccount, type EligibilityRequest, type EligibilityResponse, type ErrorDetails, type FieldValidationError, FieldValidationErrorReasonCode, type HttpResponse, type IneligibleReason, type LeadApplicant, LeadApplicantEmploymentStatus, type LeadApplicantInput, LeadApplicantPayFrequency, type LeadApplication, LeadApplicationCreditPullSource, LeadApplicationFdrOrCss, LeadApplicationFixedIncome, LeadApplicationOwnOrRent, type LeadCondition, LeadConditionActive, type LeadCreditor, type LeadDebtAccount, LeadDebtAccountOwnership, LeadDebtAccountResponsibility, type LeadDistribution, type LeadPatchRequest, type LeadReadiness, type LeadResponse, type LeadTransferRequest, type LeadTransferResponse, LeadTransferResponseResponse, type MailingAddress, type PatchAddress, type PatchApplicant, type PatchCoApplicant, type PatchCondition, type PatchDebtAccount, type PaymentOption, type ProgramRequest, type ProgramSummaryTaskRequest, type ProgramSummaryTaskResponse, type ReadinessCheck, ReadinessCheckType, type ReadinessErrorResponse, ReadinessErrorResponseErrorCode, type ReadinessResponse, type RegisterApplicantResponse, type RegisterApplicantV2Address, type RegisterApplicantV2Request, type SpinwheelNetworkUserRequest, type SpinwheelNetworkUserResponse, type StatelessReadinessRequest, type TokenCache, type Tracking, type UwSubmissionV2Response, isArpcEnvironment };

package/dist/index.d.ts

@@ -17,9 +17,8 @@ interface HttpResponse<T> {
  * SDK configuration.
  *
  * The library never reads the environment itself — a consumer constructs
- * `new ArpcSDK(config)`, which calls `configure()`. The `configFromEnv()` helper
- * is a convenience for the dev scripts (smoke / server), which load `.env` via
- * dotenv-flow and pass the result in.
+ * `new ArpcSDK(config)`, which calls `configure()`. Where that config comes
+ * from (env vars, a secrets manager, a config service) is the caller's business.
  */
 /**
  * Bearer-token store. The SDK authenticates lazily on the first gateway call:
@@ -35,11 +34,29 @@ interface TokenCache {
     /** Persist a freshly exchanged token. `expiresAt` already includes the SDK's refresh skew. */
     set(token: string, expiresAt: Date): Promise<void>;
 }
-interface ArpcConfig {
+/** FDR deployment target. Selects both hosts — see `ARPC_ENDPOINTS`. */
+type ArpcEnvironment = "dev" | "stg" | "prd";
+/** The host pair a single environment resolves to. */
+interface ArpcEndpoint {
     /** OAuth host — token exchange only (`POST /v1/token`). */
-    oauthUrl: string;
+    readonly oauth: string;
     /** API gateway host — every non-auth call. */
-    gatewayUrl: string;
+    readonly gateway: string;
+}
+/**
+ * Per-environment hosts. The two differ by domain, not just subdomain: the
+ * OAuth host is `ffngcp.com`, the gateway is `fdrgcp.com`.
+ *
+ * Frozen: this table backs both host resolution and environment validation, so
+ * a consumer mutating it would quietly change SDK behavior.
+ */
+declare const ARPC_ENDPOINTS: Readonly<Record<ArpcEnvironment, ArpcEndpoint>>;
+/**
+ * Narrow a raw string to an `ArpcEnvironment`. Useful when the value arrives
+ * untyped — an env var, a JSON config file, a request payload.
+ */
+declare function isArpcEnvironment(value: string): value is ArpcEnvironment;
+interface ArpcAuth {
     /**
      * OAuth client_id (HTTP Basic username). Also used as the lead's
      * `seller_agent_email` — the OAuth identity is a registered DRA agent.
@@ -50,6 +67,22 @@ interface ArpcConfig {
     /** Bearer-token store. Defaults to an in-memory, per-process cache. */
     cache?: TokenCache;
 }
+/**
+ * Escape hatch — per-host overrides of the `environment` defaults. Omit a key
+ * (or leave it `undefined`) to keep that environment's host.
+ */
+interface ArpcUrls {
+    /** OAuth host — token exchange only (`POST /v1/token`). */
+    oauth?: string;
+    /** API gateway host — every non-auth call. */
+    gateway?: string;
+}
+interface ArpcConfig {
+    /** Selects the FDR environment. Drives both hosts. */
+    environment: ArpcEnvironment;
+    auth: ArpcAuth;
+    urls?: ArpcUrls;
+}
 
 /**
  * Generated by orval v7.21.0 🍺
@@ -2805,17 +2838,18 @@ interface UwSubmissionV2Response {
  * ARPC SDK — a typed, agnostic client for FDR's ARPC DEX API (Achieve
  * Resolution Partner Connect, Digital Enrollment Experience).
  *
- * Thin by design: it owns the two-host routing, the OAuth token lifecycle, and
- * bearer injection, and exposes the full endpoint surface as typed operations
- * on `sdk.api`. It does not orchestrate the enrollment sequence — the caller
+ * Thin by design: it owns the two-host routing (both derived from
+ * `environment`), the OAuth token lifecycle, and bearer injection, and exposes
+ * the full endpoint surface as typed operations on `sdk.api`. It does not
+ * orchestrate the enrollment sequence — the caller
  * assembles payloads and threads the `fdr_applicant_id` between calls. See
  * `scripts/smoke.ts` for a full end-to-end reference sequence (incl. the program
  * poll loop).
  *
  * Auth is lazy: the first `api` call exchanges credentials for a bearer JWT and
  * caches it (~900s TTL), then re-exchanges shortly before it expires. There's no
- * explicit login step. Supply a `cache` in the config to persist the token
- * across restarts or share it across workers; otherwise it's held in-process.
+ * explicit login step. Supply `auth.cache` to persist the token across restarts
+ * or share it across workers; otherwise it's held in-process.
  *
  * Operations never throw on a non-2xx: each returns `{ status, data, headers }`,
  * so a business gate (e.g. a UW/DRA readiness failure) comes back as a normal
@@ -2828,10 +2862,11 @@ interface UwSubmissionV2Response {
  * @example
  * ```typescript
  * const sdk = new ArpcSDK({
- *   oauthUrl: "https://oauth.stg.ffngcp.com",
- *   gatewayUrl: "https://apis-gateway-v2.stg.fdrgcp.com",
- *   username: "borrowbetter@seller.com",
- *   password: process.env.FDR_OAUTH_PASSWORD!,
+ *   environment: "stg",
+ *   auth: {
+ *     username: "borrowbetter@seller.com",
+ *     password: process.env.ARPC_OAUTH_PASSWORD!,
+ *   },
  * });
  *
  * // The first call authenticates automatically and caches the token.
@@ -2861,4 +2896,4 @@ declare class ArpcSDK {
     constructor(config: ArpcConfig);
 }
 
-export { type ARPCErrorResponse, type Address, type Applicant, type ApplicationSendEmailResponse, type ArpcConfig, ArpcSDK, type AuditInfo, type BankDetails, type BankDetailsInput, type BankUpdateRequest, type Check, CheckType, type CoApplicant, type Consents, type CreateLeadRequest, type CreateLeadResponse, type CreditPullConsent, type DebtAccount, type DraApplicant, type DraApplicantInput, DraApplicantInputSigningType, type DraRequest, type DraResponse, type EligibilityAddress, type EligibilityApplicant, type EligibilityApplication, type EligibilityDebtAccount, type EligibilityRequest, type EligibilityResponse, type ErrorDetails, type FieldValidationError, FieldValidationErrorReasonCode, type HttpResponse, type IneligibleReason, type LeadApplicant, LeadApplicantEmploymentStatus, type LeadApplicantInput, LeadApplicantPayFrequency, type LeadApplication, LeadApplicationCreditPullSource, LeadApplicationFdrOrCss, LeadApplicationFixedIncome, LeadApplicationOwnOrRent, type LeadCondition, LeadConditionActive, type LeadCreditor, type LeadDebtAccount, LeadDebtAccountOwnership, LeadDebtAccountResponsibility, type LeadDistribution, type LeadPatchRequest, type LeadReadiness, type LeadResponse, type LeadTransferRequest, type LeadTransferResponse, LeadTransferResponseResponse, type MailingAddress, type PatchAddress, type PatchApplicant, type PatchCoApplicant, type PatchCondition, type PatchDebtAccount, type PaymentOption, type ProgramRequest, type ProgramSummaryTaskRequest, type ProgramSummaryTaskResponse, type ReadinessCheck, ReadinessCheckType, type ReadinessErrorResponse, ReadinessErrorResponseErrorCode, type ReadinessResponse, type RegisterApplicantResponse, type RegisterApplicantV2Address, type RegisterApplicantV2Request, type SpinwheelNetworkUserRequest, type SpinwheelNetworkUserResponse, type StatelessReadinessRequest, type TokenCache, type Tracking, type UwSubmissionV2Response };
+export { type ARPCErrorResponse, ARPC_ENDPOINTS, type Address, type Applicant, type ApplicationSendEmailResponse, type ArpcAuth, type ArpcConfig, type ArpcEndpoint, type ArpcEnvironment, ArpcSDK, type ArpcUrls, type AuditInfo, type BankDetails, type BankDetailsInput, type BankUpdateRequest, type Check, CheckType, type CoApplicant, type Consents, type CreateLeadRequest, type CreateLeadResponse, type CreditPullConsent, type DebtAccount, type DraApplicant, type DraApplicantInput, DraApplicantInputSigningType, type DraRequest, type DraResponse, type EligibilityAddress, type EligibilityApplicant, type EligibilityApplication, type EligibilityDebtAccount, type EligibilityRequest, type EligibilityResponse, type ErrorDetails, type FieldValidationError, FieldValidationErrorReasonCode, type HttpResponse, type IneligibleReason, type LeadApplicant, LeadApplicantEmploymentStatus, type LeadApplicantInput, LeadApplicantPayFrequency, type LeadApplication, LeadApplicationCreditPullSource, LeadApplicationFdrOrCss, LeadApplicationFixedIncome, LeadApplicationOwnOrRent, type LeadCondition, LeadConditionActive, type LeadCreditor, type LeadDebtAccount, LeadDebtAccountOwnership, LeadDebtAccountResponsibility, type LeadDistribution, type LeadPatchRequest, type LeadReadiness, type LeadResponse, type LeadTransferRequest, type LeadTransferResponse, LeadTransferResponseResponse, type MailingAddress, type PatchAddress, type PatchApplicant, type PatchCoApplicant, type PatchCondition, type PatchDebtAccount, type PaymentOption, type ProgramRequest, type ProgramSummaryTaskRequest, type ProgramSummaryTaskResponse, type ReadinessCheck, ReadinessCheckType, type ReadinessErrorResponse, ReadinessErrorResponseErrorCode, type ReadinessResponse, type RegisterApplicantResponse, type RegisterApplicantV2Address, type RegisterApplicantV2Request, type SpinwheelNetworkUserRequest, type SpinwheelNetworkUserResponse, type StatelessReadinessRequest, type TokenCache, type Tracking, type UwSubmissionV2Response, isArpcEnvironment };

package/dist/index.js

@@ -7,9 +7,38 @@ function _interopDefault (e) { return e && e.__esModule ? e : { default: e }; }
 var ky__default = /*#__PURE__*/_interopDefault(ky);
 
 // src/config.ts
+var ARPC_ENDPOINTS = Object.freeze({
+  dev: Object.freeze({
+    oauth: "https://oauth.dev.ffngcp.com",
+    gateway: "https://apis-gateway-v2.dev.fdrgcp.com"
+  }),
+  stg: Object.freeze({
+    oauth: "https://oauth.stg.ffngcp.com",
+    gateway: "https://apis-gateway-v2.stg.fdrgcp.com"
+  }),
+  prd: Object.freeze({
+    oauth: "https://oauth.prd.ffngcp.com",
+    gateway: "https://apis-gateway-v2.prd.fdrgcp.com"
+  })
+});
+function isArpcEnvironment(value) {
+  return Object.keys(ARPC_ENDPOINTS).includes(value);
+}
 var current = null;
+function resolveUrls(config) {
+  if (!isArpcEnvironment(config.environment)) {
+    throw new Error(
+      `Unknown environment: ${config.environment} (expected one of ${Object.keys(ARPC_ENDPOINTS).join(", ")})`
+    );
+  }
+  const defaults = ARPC_ENDPOINTS[config.environment];
+  return {
+    oauth: config.urls?.oauth ?? defaults.oauth,
+    gateway: config.urls?.gateway ?? defaults.gateway
+  };
+}
 function configure(config) {
-  current = config;
+  current = { ...config, urls: resolveUrls(config) };
 }
 function getConfig() {
   if (!current) {
@@ -22,9 +51,11 @@ function getConfig() {
 var TOKEN_SKEW_MS = 3e4;
 var DEFAULT_TTL_S = 900;
 async function exchangeToken() {
-  const { oauthUrl, username, password } = getConfig();
-  const basic = Buffer.from(`${username}:${password}`).toString("base64");
-  return ky__default.default.post(`${oauthUrl}/v1/token`, {
+  const { urls, auth } = getConfig();
+  const basic = Buffer.from(`${auth.username}:${auth.password}`).toString(
+    "base64"
+  );
+  return ky__default.default.post(`${urls.oauth}/v1/token`, {
     headers: { Authorization: `Basic ${basic}` },
     body: new URLSearchParams({ grant_type: "client_credentials" })
   }).json();
@@ -42,7 +73,7 @@ var defaultCache = {
 };
 var inflight = null;
 function resolveToken() {
-  const store = getConfig().cache ?? defaultCache;
+  const store = getConfig().auth.cache ?? defaultCache;
   if (inflight) return inflight;
   inflight = (async () => {
     const cached = await store.get();
@@ -64,7 +95,7 @@ function resolveToken() {
 var customInstance = async (request, options) => {
   const { url, method, params, data, signal } = { ...request, ...options };
   const headers = { ...request.headers, ...options?.headers };
-  const target = new URL(url, getConfig().gatewayUrl);
+  const target = new URL(url, getConfig().urls.gateway);
   if (params) {
     for (const [key, value] of Object.entries(params)) {
       if (value !== void 0 && value !== null)
@@ -274,6 +305,8 @@ var ArpcSDK = class {
   }
 };
 
+exports.ARPC_ENDPOINTS = ARPC_ENDPOINTS;
 exports.ArpcSDK = ArpcSDK;
+exports.isArpcEnvironment = isArpcEnvironment;
 //# sourceMappingURL=index.js.map
 //# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/config.ts","../src/auth.ts","../src/http/client.ts","../src/generated/arpc.ts","../src/index.ts"],"names":["ky"],"mappings":";;;;;;;;;AAuCA,IAAI,OAAA,GAA6B,IAAA;AAG1B,SAAS,UAAU,MAAA,EAA0B;AACnD,EAAA,OAAA,GAAU,MAAA;AACX;AAGO,SAAS,SAAA,GAAwB;AACvC,EAAA,IAAI,CAAC,OAAA,EAAS;AACb,IAAA,MAAM,IAAI,KAAA;AAAA,MACT;AAAA,KACD;AAAA,EACD;AACA,EAAA,OAAO,OAAA;AACR;ACtCA,IAAM,aAAA,GAAgB,GAAA;AAEtB,IAAM,aAAA,GAAgB,GAAA;AAGtB,eAAsB,aAAA,GAAwC;AAC7D,EAAA,MAAM,EAAE,QAAA,EAAU,QAAA,EAAU,QAAA,KAAa,SAAA,EAAU;AACnD,EAAA,MAAM,KAAA,GAAQ,MAAA,CAAO,IAAA,CAAK,CAAA,EAAG,QAAQ,IAAI,QAAQ,CAAA,CAAE,CAAA,CAAE,QAAA,CAAS,QAAQ,CAAA;AAEtE,EAAA,OAAOA,mBAAA,CACL,IAAA,CAAK,CAAA,EAAG,QAAQ,CAAA,SAAA,CAAA,EAAa;AAAA,IAC7B,OAAA,EAAS,EAAE,aAAA,EAAe,CAAA,MAAA,EAAS,KAAK,CAAA,CAAA,EAAG;AAAA,IAC3C,MAAM,IAAI,eAAA,CAAgB,EAAE,UAAA,EAAY,sBAAsB;AAAA,GAC9D,EACA,IAAA,EAAoB;AACvB;AAGA,IAAI,QAAA,GAA0B,IAAA;AAC9B,IAAI,YAAA,GAAe,CAAA;AACnB,IAAM,YAAA,GAA2B;AAAA,EAChC,MAAM,GAAA,GAAM;AACX,IAAA,OAAO,QAAA,IAAY,IAAA,CAAK,GAAA,EAAI,GAAI,eAAe,QAAA,GAAW,IAAA;AAAA,EAC3D,CAAA;AAAA,EACA,MAAM,GAAA,CAAI,KAAA,EAAO,SAAA,EAAW;AAC3B,IAAA,QAAA,GAAW,KAAA;AACX,IAAA,YAAA,GAAe,UAAU,OAAA,EAAQ;AAAA,EAClC;AACD,CAAA;AAIA,IAAI,QAAA,GAAmC,IAAA;AAMhC,SAAS,YAAA,GAAgC;AAC/C,EAAA,MAAM,KAAA,GAAQ,SAAA,EAAU,CAAE,KAAA,IAAS,YAAA;AACnC,EAAA,IAAI,UAAU,OAAO,QAAA;AAErB,EAAA,QAAA,GAAA,CAAY,YAAY;AACvB,IAAA,MAAM,MAAA,GAAS,MAAM,KAAA,CAAM,GAAA,EAAI;AAC/B,IAAA,IAAI,QAAQ,OAAO,MAAA;AACnB,IAAA,MAAM,GAAA,GAAM,MAAM,aAAA,EAAc;AAChC,IAAA,MAAM,GAAA,GAAA,CAAO,GAAA,CAAI,UAAA,IAAc,aAAA,IAAiB,GAAA;AAChD,IAAA,MAAM,KAAA,CAAM,GAAA;AAAA,MACX,GAAA,CAAI,YAAA;AAAA,MACJ,IAAI,IAAA,CAAK,IAAA,CAAK,GAAA,EAAI,GAAI,MAAM,aAAa;AAAA,KAC1C;AACA,IAAA,OAAO,GAAA,CAAI,YAAA;AAAA,EACZ,CAAA,GAAG,CAAE,OAAA,CAAQ,MAAM;AAClB,IAAA,QAAA,GAAW,IAAA;AAAA,EACZ,CAAC,CAAA;AACD,EAAA,OAAO,QAAA;AACR;;;ACxCO,IAAM,cAAA,GAAiB,OAC7B,OAAA,EACA,OAAA,KAC8B;AAC9B,EAAA,MAAM,EAAE,GAAA,EAAK,MAAA,EAAQ,MAAA,EAAQ,IAAA,EAAM,MAAA,EAAO,GAAI,EAAE,GAAG,OAAA,EAAS,GAAG,OAAA,EAAQ;AAIvE,EAAA,MAAM,UAAU,EAAE,GAAG,QAAQ,OAAA,EAAS,GAAG,SAAS,OAAA,EAAQ;AAE1D,EAAA,MAAM,SAAS,IAAI,GAAA,CAAI,GAAA,EAAK,SAAA,GAAY,UAAU,CAAA;AAClD,EAAA,IAAI,MAAA,EAAQ;AACX,IAAA,KAAA,MAAW,CAAC,GAAA,EAAK,KAAK,KAAK,MAAA,CAAO,OAAA,CAAQ,MAAM,CAAA,EAAG;AAClD,MAAA,IAAI,KAAA,KAAU,UAAa,KAAA,KAAU,IAAA;AACpC,QAAA,MAAA,CAAO,YAAA,CAAa,GAAA,CAAI,GAAA,EAAK,MAAA,CAAO,KAAK,CAAC,CAAA;AAAA,IAC5C;AAAA,EACD;AAEA,EAAA,MAAM,QAAA,GAAW,MAAMA,mBAAAA,CAAG,MAAA,EAAQ;AAAA,IACjC,MAAA;AAAA,IACA,OAAA;AAAA,IACA,KAAA,EAAO;AAAA;AAAA;AAAA;AAAA,MAIN,aAAA,EAAe;AAAA,QACd,OAAO,GAAA,KAAQ;AACd,UAAA,GAAA,CAAI,QAAQ,GAAA,CAAI,eAAA,EAAiB,UAAU,MAAM,YAAA,EAAc,CAAA,CAAE,CAAA;AAAA,QAClE;AAAA;AACD,KACD;AAAA,IACA,GAAI,IAAA,KAAS,MAAA,GAAY,EAAE,IAAA,EAAM,IAAA,KAAS,EAAC;AAAA,IAC3C,MAAA;AAAA,IACA,eAAA,EAAiB,KAAA;AAAA,IACjB,KAAA,EAAO,CAAA;AAAA;AAAA;AAAA;AAAA,IAIP,OAAA,EAAS;AAAA,GACT,CAAA;AAED,EAAA,MAAM,IAAA,GAAO,MAAM,QAAA,CAAS,IAAA,EAAK;AACjC,EAAA,IAAI,IAAA;AACJ,EAAA,IAAI;AACH,IAAA,IAAA,GAAQ,IAAA,GAAO,IAAA,CAAK,KAAA,CAAM,IAAI,CAAA,GAAI,KAAA,CAAA;AAAA,EACnC,CAAA,CAAA,MAAQ;AAGP,IAAA,IAAA,GAAO,IAAA;AAAA,EACR;AACA,EAAA,OAAO,EAAE,QAAQ,QAAA,CAAS,MAAA,EAAQ,MAAM,IAAA,EAAM,OAAA,EAAS,SAAS,OAAA,EAAQ;AACzE,CAAA;;;AC9CS,IAAM,4CAA4C,MAAM;AAKjE,EAAA,MAAM,cAAA,GAAiB,CACnB,iBAAA,EACH,OAAA,KAA0E;AACrE,IAAA,OAAO,cAAA;AAAA,MACP;AAAA,QAAC,GAAA,EAAK,CAAA,eAAA,CAAA;AAAA,QAAmB,MAAA,EAAQ,MAAA;AAAA,QACjC,OAAA,EAAS,EAAC,cAAA,EAAgB,kBAAA,EAAoB;AAAA,QAC9C,IAAA,EAAM;AAAA,OACR;AAAA,MACE;AAAA,KAAO;AAAA,EACT,CAAA;AAMJ,EAAA,MAAM,yBAAA,GAA4B,CAC9B,yBAAA,EACH,OAAA,KAAyE;AACpE,IAAA,OAAO,cAAA;AAAA,MACP;AAAA,QAAC,GAAA,EAAK,CAAA,yBAAA,CAAA;AAAA,QAA6B,MAAA,EAAQ,MAAA;AAAA,QAC3C,OAAA,EAAS,EAAC,cAAA,EAAgB,kBAAA,EAAoB;AAAA,QAC9C,IAAA,EAAM;AAAA,OACR;AAAA,MACE;AAAA,KAAO;AAAA,EACT,CAAA;AAMJ,EAAA,MAAM,0BAAA,GAA6B,CAC/B,2BAAA,EACH,OAAA,KAAoF;AAC/E,IAAA,OAAO,cAAA;AAAA,MACP;AAAA,QAAC,GAAA,EAAK,CAAA,sCAAA,CAAA;AAAA,QAA0C,MAAA,EAAQ,MAAA;AAAA,QACxD,OAAA,EAAS,EAAC,cAAA,EAAgB,kBAAA,EAAoB;AAAA,QAC9C,IAAA,EAAM;AAAA,OACR;AAAA,MACE;AAAA,KAAO;AAAA,EACT,CAAA;AAMJ,EAAA,MAAM,4BAAA,GAA+B,CACjC,WAAA,EACA,iBAAA,EACH,OAAA,KAAoE;AAC/D,IAAA,OAAO,cAAA;AAAA,MACP;AAAA,QAAC,GAAA,EAAK,+BAA+B,WAAW,CAAA,CAAA;AAAA,QAAI,MAAA,EAAQ,OAAA;AAAA,QAC5D,OAAA,EAAS,EAAC,cAAA,EAAgB,kBAAA,EAAoB;AAAA,QAC9C,IAAA,EAAM;AAAA,OACR;AAAA,MACE;AAAA,KAAO;AAAA,EACT,CAAA;AAMJ,EAAA,MAAM,SAAA,GAAY,CACd,cAAA,EACH,OAAA,KAAoF;AAC/E,IAAA,OAAO,cAAA;AAAA,MACP;AAAA,QAAC,GAAA,EAAK,8BAA8B,cAAc,CAAA,CAAA;AAAA,QAAI,MAAA,EAAQ;AAAA,OAChE;AAAA,MACE;AAAA,KAAO;AAAA,EACT,CAAA;AAMJ,EAAA,MAAM,YAAA,GAAe,CACjB,mBAAA,EACH,OAAA,KAA4E;AACvE,IAAA,OAAO,cAAA;AAAA,MACP;AAAA,QAAC,GAAA,EAAK,CAAA,6BAAA,CAAA;AAAA,QAAiC,MAAA,EAAQ,MAAA;AAAA,QAC/C,OAAA,EAAS,EAAC,cAAA,EAAgB,kBAAA,EAAoB;AAAA,QAC9C,IAAA,EAAM;AAAA,OACR;AAAA,MACE;AAAA,KAAO;AAAA,EACT,CAAA;AAMJ,EAAA,MAAM,QAAA,GAAW,CACb,cAAA,EACH,OAAA,KAAoE;AAC/D,IAAA,OAAO,cAAA;AAAA,MACP;AAAA,QAAC,GAAA,EAAK,mBAAmB,cAAc,CAAA,CAAA;AAAA,QAAI,MAAA,EAAQ;AAAA,OACrD;AAAA,MACE;AAAA,KAAO;AAAA,EACT,CAAA;AAMJ,EAAA,MAAM,SAAA,GAAY,CACd,cAAA,EACA,gBAAA,EACH,OAAA,KAAoE;AAC/D,IAAA,OAAO,cAAA;AAAA,MACP;AAAA,QAAC,GAAA,EAAK,mBAAmB,cAAc,CAAA,CAAA;AAAA,QAAI,MAAA,EAAQ,OAAA;AAAA,QACnD,OAAA,EAAS,EAAC,cAAA,EAAgB,kBAAA,EAAoB;AAAA,QAC9C,IAAA,EAAM;AAAA,OACR;AAAA,MACE;AAAA,KAAO;AAAA,EACT,CAAA;AAMJ,EAAA,MAAM,uBAAA,GAA0B,CAC5B,WAAA,EACH,OAAA,KAAyE;AACpE,IAAA,OAAO,cAAA;AAAA,MACP;AAAA,QAAC,GAAA,EAAK,mBAAmB,WAAW,CAAA,UAAA,CAAA;AAAA,QAAc,MAAA,EAAQ;AAAA,OAC5D;AAAA,MACE;AAAA,KAAO;AAAA,EACT,CAAA;AAMJ,EAAA,MAAM,WAAA,GAAc,CAChB,WAAA,EACA,UAAA,EACH,OAAA,KAAmE;AAC9D,IAAA,OAAO,cAAA;AAAA,MACP;AAAA,QAAC,GAAA,EAAK,mBAAmB,WAAW,CAAA,IAAA,CAAA;AAAA,QAAQ,MAAA,EAAQ,MAAA;AAAA,QACpD,OAAA,EAAS,EAAC,cAAA,EAAgB,kBAAA,EAAoB;AAAA,QAC9C,IAAA,EAAM;AAAA,OACR;AAAA,MACE;AAAA,KAAO;AAAA,EACT,CAAA;AAMJ,EAAA,MAAM,mBAAA,GAAsB,CACxB,0BAAA,EACH,OAAA,KAAiF;AAC5E,IAAA,OAAO,cAAA;AAAA,MACP;AAAA,QAAC,GAAA,EAAK,CAAA,sBAAA,CAAA;AAAA,QAA0B,MAAA,EAAQ,MAAA;AAAA,QACxC,OAAA,EAAS,EAAC,cAAA,EAAgB,kBAAA,EAAoB;AAAA,QAC9C,IAAA,EAAM;AAAA,OACR;AAAA,MACE;AAAA,KAAO;AAAA,EACT,CAAA;AAMJ,EAAA,MAAM,iBAAA,GAAoB,CACtB,cAAA,EACH,OAAA,KAAoE;AAC/D,IAAA,OAAO,cAAA;AAAA,MACP;AAAA,QAAC,GAAA,EAAK,CAAA,uBAAA,CAAA;AAAA,QAA2B,MAAA,EAAQ,MAAA;AAAA,QACzC,OAAA,EAAS,EAAC,cAAA,EAAgB,kBAAA,EAAoB;AAAA,QAC9C,IAAA,EAAM;AAAA,OACR;AAAA,MACE;AAAA,KAAO;AAAA,EACT,CAAA;AAMJ,EAAA,MAAM,gBAAA,GAAmB,CACrB,kBAAA,EACH,OAAA,KAA2E;AACtE,IAAA,OAAO,cAAA;AAAA,MACP;AAAA,QAAC,GAAA,EAAK,CAAA,2BAAA,CAAA;AAAA,QAA+B,MAAA,EAAQ,MAAA;AAAA,QAC7C,OAAA,EAAS,EAAC,cAAA,EAAgB,kBAAA,EAAoB;AAAA,QAC9C,IAAA,EAAM;AAAA,OACR;AAAA,MACE;AAAA,KAAO;AAAA,EACT,CAAA;AAMJ,EAAA,MAAM,cAAA,GAAiB,CACnB,cAAA,EACH,OAAA,KAA8E;AACzE,IAAA,OAAO,cAAA;AAAA,MACP;AAAA,QAAC,GAAA,EAAK,iCAAiC,cAAc,CAAA,CAAA;AAAA,QAAI,MAAA,EAAQ;AAAA,OACnE;AAAA,MACE;AAAA,KAAO;AAAA,EACT,CAAA;AAMJ,EAAA,MAAM,wBAAA,GAA2B,CAC7B,EAAA,EACA,yBAAA,EACH,OAAA,KAAkF;AAC7E,IAAA,OAAO,cAAA;AAAA,MACP;AAAA,QAAC,GAAA,EAAK,wCAAwC,EAAE,CAAA,CAAA;AAAA,QAAI,MAAA,EAAQ,MAAA;AAAA,QAC5D,OAAA,EAAS,EAAC,cAAA,EAAgB,kBAAA,EAAoB;AAAA,QAC9C,IAAA,EAAM;AAAA,OACR;AAAA,MACE;AAAA,KAAO;AAAA,EACT,CAAA;AAEJ,EAAA,OAAO,EAAC,cAAA,EAAe,yBAAA,EAA0B,0BAAA,EAA2B,8BAA6B,SAAA,EAAU,YAAA,EAAa,QAAA,EAAS,SAAA,EAAU,yBAAwB,WAAA,EAAY,mBAAA,EAAoB,iBAAA,EAAkB,gBAAA,EAAiB,gBAAe,wBAAA,EAAwB;AAAC,CAAA;;;ACtN/Q,IAAM,UAAN,MAAc;AAAA,EAIpB,YAAY,MAAA,EAAoB;AAFhC;AAAA,IAAA,IAAA,CAAS,MAAM,yCAAA,EAA0C;AAGxD,IAAA,SAAA,CAAU,MAAM,CAAA;AAAA,EACjB;AACD","file":"index.js","sourcesContent":["/**\n * SDK configuration.\n *\n * The library never reads the environment itself — a consumer constructs\n * `new ArpcSDK(config)`, which calls `configure()`. The `configFromEnv()` helper\n * is a convenience for the dev scripts (smoke / server), which load `.env` via\n * dotenv-flow and pass the result in.\n */\n/**\n * Bearer-token store. The SDK authenticates lazily on the first gateway call:\n * it asks `get()` for a still-valid token and, on `null`, exchanges credentials\n * and hands the fresh token to `set()`. Owning expiry is the cache's job —\n * `get()` returns `null` once the token is stale (or near-stale). The default\n * store is in-memory and per-process; supply one to persist across restarts or\n * share across workers.\n */\nexport interface TokenCache {\n\t/** Return a valid bearer token, or `null` if absent/expired. */\n\tget(): Promise<string | null>;\n\t/** Persist a freshly exchanged token. `expiresAt` already includes the SDK's refresh skew. */\n\tset(token: string, expiresAt: Date): Promise<void>;\n}\n\nexport interface ArpcConfig {\n\t/** OAuth host — token exchange only (`POST /v1/token`). */\n\toauthUrl: string;\n\t/** API gateway host — every non-auth call. */\n\tgatewayUrl: string;\n\t/**\n\t * OAuth client_id (HTTP Basic username). Also used as the lead's\n\t * `seller_agent_email` — the OAuth identity is a registered DRA agent.\n\t */\n\tusername: string;\n\t/** OAuth client_secret (HTTP Basic password). */\n\tpassword: string;\n\t/** Bearer-token store. Defaults to an in-memory, per-process cache. */\n\tcache?: TokenCache;\n}\n\nlet current: ArpcConfig | null = null;\n\n/** Set the active config. Called by the `ArpcSDK` constructor. */\nexport function configure(config: ArpcConfig): void {\n\tcurrent = config;\n}\n\n/** Read the active config. Throws if the SDK hasn't been constructed yet. */\nexport function getConfig(): ArpcConfig {\n\tif (!current) {\n\t\tthrow new Error(\n\t\t\t\"ArpcSDK is not configured — construct `new ArpcSDK(config)` before making calls\",\n\t\t);\n\t}\n\treturn current;\n}\n\n/**\n * Build a config from environment variables. Not used by the library itself —\n * only the dev scripts call this after loading `.env`.\n */\nexport function configFromEnv(\n\tenv: NodeJS.ProcessEnv = process.env,\n): ArpcConfig {\n\tconst need = (key: string): string => {\n\t\tconst value = env[key];\n\t\tif (!value)\n\t\t\tthrow new Error(`Missing required env var: ${key} (set it in .env)`);\n\t\treturn value;\n\t};\n\treturn {\n\t\toauthUrl: need(\"FDR_OAUTH_URL\"),\n\t\tgatewayUrl: need(\"FDR_API_GATEWAY_URL\"),\n\t\tusername: need(\"FDR_OAUTH_USERNAME\"),\n\t\tpassword: need(\"FDR_OAUTH_PASSWORD\"),\n\t};\n}\n","import ky from \"ky\";\nimport { getConfig, type TokenCache } from \"./config\";\n\n// Token lifecycle lives in the orchestration layer, not the generated client:\n// the exchange targets the OAuth host (not the gateway), uses HTTP Basic, and is\n// form-encoded. Authentication is lazy — `resolveToken()` runs from the ky\n// beforeRequest hook on the first gateway call (and again once the token goes\n// stale), so callers never manage the token by hand.\nexport interface TokenResponse {\n\taccess_token: string;\n\ttoken_type?: string;\n\texpires_in?: number;\n}\n\n// Refresh this many ms before the server's stated expiry, so a token never\n// lapses mid-flight. Applied once, when we compute the stored `expiresAt`.\nconst TOKEN_SKEW_MS = 30_000;\n// FDR tokens are ~900s; fall back to that if the response omits expires_in.\nconst DEFAULT_TTL_S = 900;\n\n/** Raw credentials → bearer JWT. No storage; `resolveToken()` owns that. */\nexport async function exchangeToken(): Promise<TokenResponse> {\n\tconst { oauthUrl, username, password } = getConfig();\n\tconst basic = Buffer.from(`${username}:${password}`).toString(\"base64\");\n\n\treturn ky\n\t\t.post(`${oauthUrl}/v1/token`, {\n\t\t\theaders: { Authorization: `Basic ${basic}` },\n\t\t\tbody: new URLSearchParams({ grant_type: \"client_credentials\" }),\n\t\t})\n\t\t.json<TokenResponse>();\n}\n\n// Default store: in-memory, per-process. Used when config omits `cache`.\nlet memToken: string | null = null;\nlet memExpiresAt = 0;\nconst defaultCache: TokenCache = {\n\tasync get() {\n\t\treturn memToken && Date.now() < memExpiresAt ? memToken : null;\n\t},\n\tasync set(token, expiresAt) {\n\t\tmemToken = token;\n\t\tmemExpiresAt = expiresAt.getTime();\n\t},\n};\n\n// Single-flight guard: a cold burst of concurrent gateway calls performs one\n// exchange, not one per call.\nlet inflight: Promise<string> | null = null;\n\n/**\n * Return a valid bearer token, exchanging + caching on a miss. Called by the\n * gateway beforeRequest hook; not part of the public surface.\n */\nexport function resolveToken(): Promise<string> {\n\tconst store = getConfig().cache ?? defaultCache;\n\tif (inflight) return inflight;\n\n\tinflight = (async () => {\n\t\tconst cached = await store.get();\n\t\tif (cached) return cached;\n\t\tconst res = await exchangeToken();\n\t\tconst ttl = (res.expires_in ?? DEFAULT_TTL_S) * 1000;\n\t\tawait store.set(\n\t\t\tres.access_token,\n\t\t\tnew Date(Date.now() + ttl - TOKEN_SKEW_MS),\n\t\t);\n\t\treturn res.access_token;\n\t})().finally(() => {\n\t\tinflight = null;\n\t});\n\treturn inflight;\n}\n","import ky from \"ky\";\nimport { resolveToken } from \"../auth\";\nimport { getConfig } from \"../config\";\n\n// ---------------------------------------------------------------------------\n// Orval custom mutator (ky-backed).\n//\n// Every generated operation calls `customInstance<T>(config, options)`. We\n// route all calls to the API gateway, attach the bearer token via a\n// beforeRequest hook (lazy auth — `resolveToken()` exchanges/refreshes as\n// needed), and return a small { status, data, headers } wrapper WITHOUT\n// throwing on non-2xx — the caller inspects status codes itself (202 +\n// Retry-After on program, 400 on a UW/DRA gate, etc.).\n// ---------------------------------------------------------------------------\n\n// Shape Orval passes as the first arg (axios-style request config).\nexport interface RequestConfig {\n\turl: string;\n\tmethod: string;\n\tparams?: Record<string, unknown>;\n\tdata?: unknown;\n\theaders?: Record<string, string>;\n\tsignal?: AbortSignal;\n\tresponseType?: string;\n}\n\nexport interface HttpResponse<T> {\n\tstatus: number;\n\tdata: T;\n\theaders: Headers;\n}\n\nexport const customInstance = async <T>(\n\trequest: RequestConfig,\n\toptions?: Partial<RequestConfig>,\n): Promise<HttpResponse<T>> => {\n\tconst { url, method, params, data, signal } = { ...request, ...options };\n\t// Merge headers from both sides — a per-call override (e.g. an\n\t// x-correlation-id in `options.headers`) must not drop the operation's\n\t// Content-Type. The bearer token is layered on last, below.\n\tconst headers = { ...request.headers, ...options?.headers };\n\n\tconst target = new URL(url, getConfig().gatewayUrl);\n\tif (params) {\n\t\tfor (const [key, value] of Object.entries(params)) {\n\t\t\tif (value !== undefined && value !== null)\n\t\t\t\ttarget.searchParams.set(key, String(value));\n\t\t}\n\t}\n\n\tconst response = await ky(target, {\n\t\tmethod,\n\t\theaders,\n\t\thooks: {\n\t\t\t// Lazy bearer injection: resolveToken() exchanges on the first call\n\t\t\t// and refreshes once the cached token goes stale. The OAuth exchange\n\t\t\t// itself runs on a bare ky.post (no hook), so there's no recursion.\n\t\t\tbeforeRequest: [\n\t\t\t\tasync (req) => {\n\t\t\t\t\treq.headers.set(\"Authorization\", `Bearer ${await resolveToken()}`);\n\t\t\t\t},\n\t\t\t],\n\t\t},\n\t\t...(data !== undefined ? { json: data } : {}),\n\t\tsignal,\n\t\tthrowHttpErrors: false,\n\t\tretry: 0,\n\t\t// Some gateway calls (program generation in particular) can take well over ky's\n\t\t// 10s default to respond. Raise the per-request ceiling; the program poll loop\n\t\t// handles 202/Retry-After on top of this.\n\t\ttimeout: 60_000,\n\t});\n\n\tconst text = await response.text();\n\tlet body: T;\n\ttry {\n\t\tbody = (text ? JSON.parse(text) : undefined) as T;\n\t} catch {\n\t\t// Non-JSON body (e.g. a gateway HTML error page on a transient 5xx). Don't throw —\n\t\t// hand back the raw text so callers can inspect status/body and retry as needed.\n\t\tbody = text as unknown as T;\n\t}\n\treturn { status: response.status, data: body, headers: response.headers };\n};\n","/**\n * Generated by orval v7.21.0 🍺\n * Do not edit manually.\n * ARPC — Achieve Resolution Partner Connect API\n * FDR Wholesale API — A Hybrid Integration Model designed to maximise partner velocity without compromising enterprise data standards. DEX (Digital Enrollment Experience) is the partner-facing integration layer that powers the full applicant lifecycle. The `fdr_applicant_id` acts as the applicant's passport across all systems, persisted from first eligibility check through enrollment. All endpoints require a valid Bearer JWT with the `arpc.all` role.\n * OpenAPI spec version: 2026.15.0\n */\nimport type {\n  ARPCErrorResponse,\n  ApplicationSendEmailResponse,\n  BankUpdateRequest,\n  CreateLeadRequest,\n  CreateLeadResponse,\n  DraRequest,\n  DraResponse,\n  EligibilityRequest,\n  EligibilityResponse,\n  LeadPatchRequest,\n  LeadResponse,\n  LeadTransferRequest,\n  LeadTransferResponse,\n  ProgramRequest,\n  ProgramSummaryTaskRequest,\n  ProgramSummaryTaskResponse,\n  ReadinessResponse,\n  RegisterApplicantResponse,\n  RegisterApplicantV2Request,\n  SpinwheelNetworkUserRequest,\n  SpinwheelNetworkUserResponse,\n  StatelessReadinessRequest,\n  UwSubmissionV2Response\n} from './model';\n\nimport { customInstance } from '../http/client';\ntype SecondParameter<T extends (...args: never) => unknown> = Parameters<T>[1];\n\n\n  export const getARPCAchieveResolutionPartnerConnectAPI = () => {\n/**\n * Synchronous Orchestration: Handles both lead creation and income/expense data in one step, eliminating the async polling black box. Data authority shifts here — Achieve (SUIP SF) becomes the Source of Truth once the lead is formally promoted. Returns the full lead creation result including program options.\n * @summary Sync wholesale lead creation\n */\nconst createLeadSync = (\n    createLeadRequest: CreateLeadRequest,\n options?: SecondParameter<typeof customInstance<CreateLeadResponse>>,) => {\n      return customInstance<CreateLeadResponse>(\n      {url: `/v3/application`, method: 'POST',\n      headers: {'Content-Type': 'application/json', },\n      data: createLeadRequest\n    },\n      options);\n    }\n  \n/**\n * Stateless Readiness Check: Pre-flight validation before initiating program calculations. Catches duplicate SSNs or emails early to prevent downstream failures. Requires a valid Authorization header.\n * @summary Check application readiness\n */\nconst checkApplicationReadiness = (\n    statelessReadinessRequest: StatelessReadinessRequest,\n options?: SecondParameter<typeof customInstance<ReadinessResponse>>,) => {\n      return customInstance<ReadinessResponse>(\n      {url: `/v1/application/readiness`, method: 'POST',\n      headers: {'Content-Type': 'application/json', },\n      data: statelessReadinessRequest\n    },\n      options);\n    }\n  \n/**\n * Recovery endpoint — only required when the async Spinwheel user creation triggered by `POST /v1/applicant/register` fails due to a user error (e.g. invalid SSN or DOB). Not needed in the happy path. Authenticates the seller, resolves the law firm / program, creates an applicant ID when needed, and connects the applicant to the Spinwheel network. Requires a valid Authorization header.\n * @summary Create / connect Spinwheel network user\n */\nconst createSpinwheelNetworkUser = (\n    spinwheelNetworkUserRequest: SpinwheelNetworkUserRequest,\n options?: SecondParameter<typeof customInstance<SpinwheelNetworkUserResponse>>,) => {\n      return customInstance<SpinwheelNetworkUserResponse>(\n      {url: `/v1/application/spinwheel-network-user`, method: 'POST',\n      headers: {'Content-Type': 'application/json', },\n      data: spinwheelNetworkUserRequest\n    },\n      options);\n    }\n  \n/**\n * Authenticates the seller, validates banking disclosure requirements, optionally validates the submitted account and routing numbers, patches the program, and returns the refreshed lead payload. Requires a valid Authorization header.\n * @summary Update applicant bank details\n */\nconst updateApplicationBankDetails = (\n    applicantId: string,\n    bankUpdateRequest: BankUpdateRequest,\n options?: SecondParameter<typeof customInstance<LeadResponse>>,) => {\n      return customInstance<LeadResponse>(\n      {url: `/v1/application/bank-update/${applicantId}`, method: 'PATCH',\n      headers: {'Content-Type': 'application/json', },\n      data: bankUpdateRequest\n    },\n      options);\n    }\n  \n/**\n * Banking Disclosure: Manually triggers the banking disclosure email. **This endpoint is optional** — it is only needed when the disclosure was not already sent automatically by `POST /v2/application/uw-submission/{fdrApplicantId}` (which auto-sends on full UW approval). Use this endpoint for conditional approvals or when the v1 UW submission path is in use. A critical legal prerequisite that must be completed before enrollment can proceed. Requires a valid Authorization header.\n * @summary Send banking disclosure email (optional — only if not auto-sent by v2 UW submission)\n */\nconst sendEmail = (\n    fdrApplicantId: string,\n options?: SecondParameter<typeof customInstance<ApplicationSendEmailResponse>>,) => {\n      return customInstance<ApplicationSendEmailResponse>(\n      {url: `/v1/application/send-email/${fdrApplicantId}`, method: 'POST'\n    },\n      options);\n    }\n  \n/**\n * Submits a lead evaluation request. fdr_applicant_id is required in the request body. Requires a valid Authorization header with the arpc.all role.\n * @summary Transfer a lead to the debt-resolution program\n */\nconst leadTransfer = (\n    leadTransferRequest: LeadTransferRequest,\n options?: SecondParameter<typeof customInstance<LeadTransferResponse>>,) => {\n      return customInstance<LeadTransferResponse>(\n      {url: `/v1/application/lead-transfer`, method: 'POST',\n      headers: {'Content-Type': 'application/json', },\n      data: leadTransferRequest\n    },\n      options);\n    }\n  \n/**\n * Fetches the current state of an application / lead record by FDR applicant ID. Requires a valid Authorization header.\n * @summary Read application / lead details\n */\nconst readLead = (\n    fdrApplicantId: string,\n options?: SecondParameter<typeof customInstance<LeadResponse>>,) => {\n      return customInstance<LeadResponse>(\n      {url: `/v1/application/${fdrApplicantId}`, method: 'GET'\n    },\n      options);\n    }\n  \n/**\n * Applies a partial update to an existing wholesale lead record. Requires a valid Authorization header and an x-correlation-id header for request tracing.\n * @summary Partial update of application / lead record\n */\nconst patchLead = (\n    fdrApplicantId: string,\n    leadPatchRequest: LeadPatchRequest,\n options?: SecondParameter<typeof customInstance<LeadResponse>>,) => {\n      return customInstance<LeadResponse>(\n      {url: `/v1/application/${fdrApplicantId}`, method: 'PATCH',\n      headers: {'Content-Type': 'application/json', },\n      data: leadPatchRequest\n    },\n      options);\n    }\n  \n/**\n * DRA Readiness Check: Final pre-flight confirming the lead is approved and all prerequisites are met before initiating the embedded signing session. Requires a valid Authorization header.\n * @summary Get application readiness status\n */\nconst getApplicationReadiness = (\n    applicantId: string,\n options?: SecondParameter<typeof customInstance<ReadinessResponse>>,) => {\n      return customInstance<ReadinessResponse>(\n      {url: `/v1/application/${applicantId}/readiness`, method: 'GET'\n    },\n      options);\n    }\n  \n/**\n * Embedded DRA Signing: Returns an Embedded Signing URL so the applicant signs the Debt Resolution Agreement via DocuSign directly within the Symple UI, preventing session breakage. Successful legal execution triggers automatic enrollment. Requires a valid Authorization header.\n * @summary Generate Debt Resolution Agreement (DRA)\n */\nconst generateDra = (\n    applicantId: string,\n    draRequest: DraRequest,\n options?: SecondParameter<typeof customInstance<DraResponse>>,) => {\n      return customInstance<DraResponse>(\n      {url: `/v2/application/${applicantId}/dra`, method: 'POST',\n      headers: {'Content-Type': 'application/json', },\n      data: draRequest\n    },\n      options);\n    }\n  \n/**\n * **Recommended endpoint.** `POST /v1/applicant/register` is deprecated and will be retired by end of July 2026 (deadline can be extended on request if your team needs more time). Identity Anchoring: Persists applicant PII to the Managed Package and generates the `fdr_applicant_id` — the applicant's passport across all systems. Routes to the correct Salesforce target (MP or WiB) based on seller identity, and triggers the async credit fetch. Requires a valid Authorization header.\n * @summary Seller-aware applicant registration (v2 — unified ARPCErrorResponse envelope) — recommended\n */\nconst registerApplicantV2 = (\n    registerApplicantV2Request: RegisterApplicantV2Request,\n options?: SecondParameter<typeof customInstance<RegisterApplicantResponse>>,) => {\n      return customInstance<RegisterApplicantResponse>(\n      {url: `/v2/applicant/register`, method: 'POST',\n      headers: {'Content-Type': 'application/json', },\n      data: registerApplicantV2Request\n    },\n      options);\n    }\n  \n/**\n * Async Polling Loop: Call this single endpoint for both initial generation and refresh. Returns 202 Accepted with a Retry-After header while credit is still pending. Once ready, the Managed Package orchestrates the calculation and persists the program result. Requires a valid Authorization header.\n * @summary Generate application program (v1)\n */\nconst generateProgramV1 = (\n    programRequest: ProgramRequest,\n options?: SecondParameter<typeof customInstance<LeadResponse>>,) => {\n      return customInstance<LeadResponse>(\n      {url: `/v1/application/program`, method: 'POST',\n      headers: {'Content-Type': 'application/json', },\n      data: programRequest\n    },\n      options);\n    }\n  \n/**\n * Eligibility Scout: A stateless, real-time quote based on anonymised data — no PII required. Returns estimated program options to anchor the conversation before any registration occurs. Requires a valid Authorization header.\n * @summary Check application eligibility\n */\nconst checkEligibility = (\n    eligibilityRequest: EligibilityRequest,\n options?: SecondParameter<typeof customInstance<EligibilityResponse>>,) => {\n      return customInstance<EligibilityResponse>(\n      {url: `/v2/application/eligibility`, method: 'POST',\n      headers: {'Content-Type': 'application/json', },\n      data: eligibilityRequest\n    },\n      options);\n    }\n  \n/**\n * **Recommended endpoint — supersedes v1.** Submits a wholesale application to the underwriting system. On full UW approval (`sub_status = 'UW Approved'`) the banking disclosure email is sent automatically — no separate `send-email` call is needed in this path. Conditional approvals suppress the auto-send; in that case the manual `POST /v1/application/send-email/{fdrApplicantId}` endpoint can be used. Uses the SF Object API directly (no suip-proxy hop). Requires a valid Authorization header.\n * @summary Submit application to underwriting (v2 — auto banking disclosure) — recommended\n */\nconst uwSubmissionV2 = (\n    fdrApplicantId: string,\n options?: SecondParameter<typeof customInstance<UwSubmissionV2Response>>,) => {\n      return customInstance<UwSubmissionV2Response>(\n      {url: `/v2/application/uw-submission/${fdrApplicantId}`, method: 'POST'\n    },\n      options);\n    }\n  \n/**\n * Creates a SUIP Salesforce 'Program Summary Recording' task for the applicant identified by the {id} path variable. For DEX (or missing header), the parent SF opportunity is additionally PATCHed with the seller-config partner default PSC. For DC, the task is created and the parent SF opportunity is PATCHed only when ws_psc_code is provided in the request payload.\n * @summary Create program-summary recording task\n */\nconst createProgramSummaryTask = (\n    id: string,\n    programSummaryTaskRequest: ProgramSummaryTaskRequest,\n options?: SecondParameter<typeof customInstance<ProgramSummaryTaskResponse>>,) => {\n      return customInstance<ProgramSummaryTaskResponse>(\n      {url: `/v2/application/program-summary-task/${id}`, method: 'POST',\n      headers: {'Content-Type': 'application/json', },\n      data: programSummaryTaskRequest\n    },\n      options);\n    }\n  \nreturn {createLeadSync,checkApplicationReadiness,createSpinwheelNetworkUser,updateApplicationBankDetails,sendEmail,leadTransfer,readLead,patchLead,getApplicationReadiness,generateDra,registerApplicantV2,generateProgramV1,checkEligibility,uwSubmissionV2,createProgramSummaryTask}};\nexport type CreateLeadSyncResult = NonNullable<Awaited<ReturnType<ReturnType<typeof getARPCAchieveResolutionPartnerConnectAPI>['createLeadSync']>>>\nexport type CheckApplicationReadinessResult = NonNullable<Awaited<ReturnType<ReturnType<typeof getARPCAchieveResolutionPartnerConnectAPI>['checkApplicationReadiness']>>>\nexport type CreateSpinwheelNetworkUserResult = NonNullable<Awaited<ReturnType<ReturnType<typeof getARPCAchieveResolutionPartnerConnectAPI>['createSpinwheelNetworkUser']>>>\nexport type UpdateApplicationBankDetailsResult = NonNullable<Awaited<ReturnType<ReturnType<typeof getARPCAchieveResolutionPartnerConnectAPI>['updateApplicationBankDetails']>>>\nexport type SendEmailResult = NonNullable<Awaited<ReturnType<ReturnType<typeof getARPCAchieveResolutionPartnerConnectAPI>['sendEmail']>>>\nexport type LeadTransferResult = NonNullable<Awaited<ReturnType<ReturnType<typeof getARPCAchieveResolutionPartnerConnectAPI>['leadTransfer']>>>\nexport type ReadLeadResult = NonNullable<Awaited<ReturnType<ReturnType<typeof getARPCAchieveResolutionPartnerConnectAPI>['readLead']>>>\nexport type PatchLeadResult = NonNullable<Awaited<ReturnType<ReturnType<typeof getARPCAchieveResolutionPartnerConnectAPI>['patchLead']>>>\nexport type GetApplicationReadinessResult = NonNullable<Awaited<ReturnType<ReturnType<typeof getARPCAchieveResolutionPartnerConnectAPI>['getApplicationReadiness']>>>\nexport type GenerateDraResult = NonNullable<Awaited<ReturnType<ReturnType<typeof getARPCAchieveResolutionPartnerConnectAPI>['generateDra']>>>\nexport type RegisterApplicantV2Result = NonNullable<Awaited<ReturnType<ReturnType<typeof getARPCAchieveResolutionPartnerConnectAPI>['registerApplicantV2']>>>\nexport type GenerateProgramV1Result = NonNullable<Awaited<ReturnType<ReturnType<typeof getARPCAchieveResolutionPartnerConnectAPI>['generateProgramV1']>>>\nexport type CheckEligibilityResult = NonNullable<Awaited<ReturnType<ReturnType<typeof getARPCAchieveResolutionPartnerConnectAPI>['checkEligibility']>>>\nexport type UwSubmissionV2Result = NonNullable<Awaited<ReturnType<ReturnType<typeof getARPCAchieveResolutionPartnerConnectAPI>['uwSubmissionV2']>>>\nexport type CreateProgramSummaryTaskResult = NonNullable<Awaited<ReturnType<ReturnType<typeof getARPCAchieveResolutionPartnerConnectAPI>['createProgramSummaryTask']>>>\n","import { type ArpcConfig, configure } from \"./config\";\nimport { getARPCAchieveResolutionPartnerConnectAPI } from \"./generated/arpc\";\n\nexport type { ArpcConfig, TokenCache } from \"./config\";\nexport type * from \"./generated/model\";\nexport type { HttpResponse } from \"./http/client\";\n\n/**\n * ARPC SDK — a typed, agnostic client for FDR's ARPC DEX API (Achieve\n * Resolution Partner Connect, Digital Enrollment Experience).\n *\n * Thin by design: it owns the two-host routing, the OAuth token lifecycle, and\n * bearer injection, and exposes the full endpoint surface as typed operations\n * on `sdk.api`. It does not orchestrate the enrollment sequence — the caller\n * assembles payloads and threads the `fdr_applicant_id` between calls. See\n * `scripts/smoke.ts` for a full end-to-end reference sequence (incl. the program\n * poll loop).\n *\n * Auth is lazy: the first `api` call exchanges credentials for a bearer JWT and\n * caches it (~900s TTL), then re-exchanges shortly before it expires. There's no\n * explicit login step. Supply a `cache` in the config to persist the token\n * across restarts or share it across workers; otherwise it's held in-process.\n *\n * Operations never throw on a non-2xx: each returns `{ status, data, headers }`,\n * so a business gate (e.g. a UW/DRA readiness failure) comes back as a normal\n * response you inspect via `status`/`data`. Only transport errors throw.\n *\n * Note: config and the default token cache are process-global — construct one\n * `ArpcSDK` per process. A second instance reconfigures the first; instances are\n * not isolated (single-tenant by design).\n *\n * @example\n * ```typescript\n * const sdk = new ArpcSDK({\n *   oauthUrl: \"https://oauth.stg.ffngcp.com\",\n *   gatewayUrl: \"https://apis-gateway-v2.stg.fdrgcp.com\",\n *   username: \"borrowbetter@seller.com\",\n *   password: process.env.FDR_OAUTH_PASSWORD!,\n * });\n *\n * // The first call authenticates automatically and caches the token.\n * const elig = await sdk.api.checkEligibility({ ... });\n * const faid = elig.data.application?.applicant?.fdr_applicant_id;\n * ```\n */\nexport class ArpcSDK {\n\t/** The full typed endpoint surface — one method per gateway operation. */\n\treadonly api = getARPCAchieveResolutionPartnerConnectAPI();\n\n\tconstructor(config: ArpcConfig) {\n\t\tconfigure(config);\n\t}\n}\n"]}
+{"version":3,"sources":["../src/config.ts","../src/auth.ts","../src/http/client.ts","../src/generated/arpc.ts","../src/index.ts"],"names":["ky"],"mappings":";;;;;;;;;AAwCO,IAAM,cAAA,GACZ,OAAO,MAAA,CAAO;AAAA,EACb,GAAA,EAAK,OAAO,MAAA,CAAO;AAAA,IAClB,KAAA,EAAO,8BAAA;AAAA,IACP,OAAA,EAAS;AAAA,GACT,CAAA;AAAA,EACD,GAAA,EAAK,OAAO,MAAA,CAAO;AAAA,IAClB,KAAA,EAAO,8BAAA;AAAA,IACP,OAAA,EAAS;AAAA,GACT,CAAA;AAAA,EACD,GAAA,EAAK,OAAO,MAAA,CAAO;AAAA,IAClB,KAAA,EAAO,8BAAA;AAAA,IACP,OAAA,EAAS;AAAA,GACT;AACF,CAAC;AAMK,SAAS,kBAAkB,KAAA,EAAyC;AAE1E,EAAA,OAAO,MAAA,CAAO,IAAA,CAAK,cAAc,CAAA,CAAE,SAAS,KAAK,CAAA;AAClD;AAqCA,IAAI,OAAA,GAAqC,IAAA;AAQzC,SAAS,YAAY,MAAA,EAAwC;AAC5D,EAAA,IAAI,CAAC,iBAAA,CAAkB,MAAA,CAAO,WAAW,CAAA,EAAG;AAC3C,IAAA,MAAM,IAAI,KAAA;AAAA,MACT,CAAA,qBAAA,EAAwB,MAAA,CAAO,WAAW,CAAA,kBAAA,EAAqB,MAAA,CAAO,KAAK,cAAc,CAAA,CAAE,IAAA,CAAK,IAAI,CAAC,CAAA,CAAA;AAAA,KACtG;AAAA,EACD;AACA,EAAA,MAAM,QAAA,GAAW,cAAA,CAAe,MAAA,CAAO,WAAW,CAAA;AAClD,EAAA,OAAO;AAAA,IACN,KAAA,EAAO,MAAA,CAAO,IAAA,EAAM,KAAA,IAAS,QAAA,CAAS,KAAA;AAAA,IACtC,OAAA,EAAS,MAAA,CAAO,IAAA,EAAM,OAAA,IAAW,QAAA,CAAS;AAAA,GAC3C;AACD;AAGO,SAAS,UAAU,MAAA,EAA0B;AACnD,EAAA,OAAA,GAAU,EAAE,GAAG,MAAA,EAAQ,IAAA,EAAM,WAAA,CAAY,MAAM,CAAA,EAAE;AAClD;AAGO,SAAS,SAAA,GAAgC;AAC/C,EAAA,IAAI,CAAC,OAAA,EAAS;AACb,IAAA,MAAM,IAAI,KAAA;AAAA,MACT;AAAA,KACD;AAAA,EACD;AACA,EAAA,OAAO,OAAA;AACR;ACtHA,IAAM,aAAA,GAAgB,GAAA;AAEtB,IAAM,aAAA,GAAgB,GAAA;AAGtB,eAAsB,aAAA,GAAwC;AAC7D,EAAA,MAAM,EAAE,IAAA,EAAM,IAAA,EAAK,GAAI,SAAA,EAAU;AACjC,EAAA,MAAM,KAAA,GAAQ,MAAA,CAAO,IAAA,CAAK,CAAA,EAAG,IAAA,CAAK,QAAQ,CAAA,CAAA,EAAI,IAAA,CAAK,QAAQ,CAAA,CAAE,CAAA,CAAE,QAAA;AAAA,IAC9D;AAAA,GACD;AAEA,EAAA,OAAOA,mBAAA,CACL,IAAA,CAAK,CAAA,EAAG,IAAA,CAAK,KAAK,CAAA,SAAA,CAAA,EAAa;AAAA,IAC/B,OAAA,EAAS,EAAE,aAAA,EAAe,CAAA,MAAA,EAAS,KAAK,CAAA,CAAA,EAAG;AAAA,IAC3C,MAAM,IAAI,eAAA,CAAgB,EAAE,UAAA,EAAY,sBAAsB;AAAA,GAC9D,EACA,IAAA,EAAoB;AACvB;AAGA,IAAI,QAAA,GAA0B,IAAA;AAC9B,IAAI,YAAA,GAAe,CAAA;AACnB,IAAM,YAAA,GAA2B;AAAA,EAChC,MAAM,GAAA,GAAM;AACX,IAAA,OAAO,QAAA,IAAY,IAAA,CAAK,GAAA,EAAI,GAAI,eAAe,QAAA,GAAW,IAAA;AAAA,EAC3D,CAAA;AAAA,EACA,MAAM,GAAA,CAAI,KAAA,EAAO,SAAA,EAAW;AAC3B,IAAA,QAAA,GAAW,KAAA;AACX,IAAA,YAAA,GAAe,UAAU,OAAA,EAAQ;AAAA,EAClC;AACD,CAAA;AAIA,IAAI,QAAA,GAAmC,IAAA;AAMhC,SAAS,YAAA,GAAgC;AAC/C,EAAA,MAAM,KAAA,GAAQ,SAAA,EAAU,CAAE,IAAA,CAAK,KAAA,IAAS,YAAA;AACxC,EAAA,IAAI,UAAU,OAAO,QAAA;AAErB,EAAA,QAAA,GAAA,CAAY,YAAY;AACvB,IAAA,MAAM,MAAA,GAAS,MAAM,KAAA,CAAM,GAAA,EAAI;AAC/B,IAAA,IAAI,QAAQ,OAAO,MAAA;AACnB,IAAA,MAAM,GAAA,GAAM,MAAM,aAAA,EAAc;AAChC,IAAA,MAAM,GAAA,GAAA,CAAO,GAAA,CAAI,UAAA,IAAc,aAAA,IAAiB,GAAA;AAChD,IAAA,MAAM,KAAA,CAAM,GAAA;AAAA,MACX,GAAA,CAAI,YAAA;AAAA,MACJ,IAAI,IAAA,CAAK,IAAA,CAAK,GAAA,EAAI,GAAI,MAAM,aAAa;AAAA,KAC1C;AACA,IAAA,OAAO,GAAA,CAAI,YAAA;AAAA,EACZ,CAAA,GAAG,CAAE,OAAA,CAAQ,MAAM;AAClB,IAAA,QAAA,GAAW,IAAA;AAAA,EACZ,CAAC,CAAA;AACD,EAAA,OAAO,QAAA;AACR;;;AC1CO,IAAM,cAAA,GAAiB,OAC7B,OAAA,EACA,OAAA,KAC8B;AAC9B,EAAA,MAAM,EAAE,GAAA,EAAK,MAAA,EAAQ,MAAA,EAAQ,IAAA,EAAM,MAAA,EAAO,GAAI,EAAE,GAAG,OAAA,EAAS,GAAG,OAAA,EAAQ;AAIvE,EAAA,MAAM,UAAU,EAAE,GAAG,QAAQ,OAAA,EAAS,GAAG,SAAS,OAAA,EAAQ;AAE1D,EAAA,MAAM,SAAS,IAAI,GAAA,CAAI,KAAK,SAAA,EAAU,CAAE,KAAK,OAAO,CAAA;AACpD,EAAA,IAAI,MAAA,EAAQ;AACX,IAAA,KAAA,MAAW,CAAC,GAAA,EAAK,KAAK,KAAK,MAAA,CAAO,OAAA,CAAQ,MAAM,CAAA,EAAG;AAClD,MAAA,IAAI,KAAA,KAAU,UAAa,KAAA,KAAU,IAAA;AACpC,QAAA,MAAA,CAAO,YAAA,CAAa,GAAA,CAAI,GAAA,EAAK,MAAA,CAAO,KAAK,CAAC,CAAA;AAAA,IAC5C;AAAA,EACD;AAEA,EAAA,MAAM,QAAA,GAAW,MAAMA,mBAAAA,CAAG,MAAA,EAAQ;AAAA,IACjC,MAAA;AAAA,IACA,OAAA;AAAA,IACA,KAAA,EAAO;AAAA;AAAA;AAAA;AAAA,MAIN,aAAA,EAAe;AAAA,QACd,OAAO,GAAA,KAAQ;AACd,UAAA,GAAA,CAAI,QAAQ,GAAA,CAAI,eAAA,EAAiB,UAAU,MAAM,YAAA,EAAc,CAAA,CAAE,CAAA;AAAA,QAClE;AAAA;AACD,KACD;AAAA,IACA,GAAI,IAAA,KAAS,MAAA,GAAY,EAAE,IAAA,EAAM,IAAA,KAAS,EAAC;AAAA,IAC3C,MAAA;AAAA,IACA,eAAA,EAAiB,KAAA;AAAA,IACjB,KAAA,EAAO,CAAA;AAAA;AAAA;AAAA;AAAA,IAIP,OAAA,EAAS;AAAA,GACT,CAAA;AAED,EAAA,MAAM,IAAA,GAAO,MAAM,QAAA,CAAS,IAAA,EAAK;AACjC,EAAA,IAAI,IAAA;AACJ,EAAA,IAAI;AACH,IAAA,IAAA,GAAQ,IAAA,GAAO,IAAA,CAAK,KAAA,CAAM,IAAI,CAAA,GAAI,KAAA,CAAA;AAAA,EACnC,CAAA,CAAA,MAAQ;AAGP,IAAA,IAAA,GAAO,IAAA;AAAA,EACR;AACA,EAAA,OAAO,EAAE,QAAQ,QAAA,CAAS,MAAA,EAAQ,MAAM,IAAA,EAAM,OAAA,EAAS,SAAS,OAAA,EAAQ;AACzE,CAAA;;;AC9CS,IAAM,4CAA4C,MAAM;AAKjE,EAAA,MAAM,cAAA,GAAiB,CACnB,iBAAA,EACH,OAAA,KAA0E;AACrE,IAAA,OAAO,cAAA;AAAA,MACP;AAAA,QAAC,GAAA,EAAK,CAAA,eAAA,CAAA;AAAA,QAAmB,MAAA,EAAQ,MAAA;AAAA,QACjC,OAAA,EAAS,EAAC,cAAA,EAAgB,kBAAA,EAAoB;AAAA,QAC9C,IAAA,EAAM;AAAA,OACR;AAAA,MACE;AAAA,KAAO;AAAA,EACT,CAAA;AAMJ,EAAA,MAAM,yBAAA,GAA4B,CAC9B,yBAAA,EACH,OAAA,KAAyE;AACpE,IAAA,OAAO,cAAA;AAAA,MACP;AAAA,QAAC,GAAA,EAAK,CAAA,yBAAA,CAAA;AAAA,QAA6B,MAAA,EAAQ,MAAA;AAAA,QAC3C,OAAA,EAAS,EAAC,cAAA,EAAgB,kBAAA,EAAoB;AAAA,QAC9C,IAAA,EAAM;AAAA,OACR;AAAA,MACE;AAAA,KAAO;AAAA,EACT,CAAA;AAMJ,EAAA,MAAM,0BAAA,GAA6B,CAC/B,2BAAA,EACH,OAAA,KAAoF;AAC/E,IAAA,OAAO,cAAA;AAAA,MACP;AAAA,QAAC,GAAA,EAAK,CAAA,sCAAA,CAAA;AAAA,QAA0C,MAAA,EAAQ,MAAA;AAAA,QACxD,OAAA,EAAS,EAAC,cAAA,EAAgB,kBAAA,EAAoB;AAAA,QAC9C,IAAA,EAAM;AAAA,OACR;AAAA,MACE;AAAA,KAAO;AAAA,EACT,CAAA;AAMJ,EAAA,MAAM,4BAAA,GAA+B,CACjC,WAAA,EACA,iBAAA,EACH,OAAA,KAAoE;AAC/D,IAAA,OAAO,cAAA;AAAA,MACP;AAAA,QAAC,GAAA,EAAK,+BAA+B,WAAW,CAAA,CAAA;AAAA,QAAI,MAAA,EAAQ,OAAA;AAAA,QAC5D,OAAA,EAAS,EAAC,cAAA,EAAgB,kBAAA,EAAoB;AAAA,QAC9C,IAAA,EAAM;AAAA,OACR;AAAA,MACE;AAAA,KAAO;AAAA,EACT,CAAA;AAMJ,EAAA,MAAM,SAAA,GAAY,CACd,cAAA,EACH,OAAA,KAAoF;AAC/E,IAAA,OAAO,cAAA;AAAA,MACP;AAAA,QAAC,GAAA,EAAK,8BAA8B,cAAc,CAAA,CAAA;AAAA,QAAI,MAAA,EAAQ;AAAA,OAChE;AAAA,MACE;AAAA,KAAO;AAAA,EACT,CAAA;AAMJ,EAAA,MAAM,YAAA,GAAe,CACjB,mBAAA,EACH,OAAA,KAA4E;AACvE,IAAA,OAAO,cAAA;AAAA,MACP;AAAA,QAAC,GAAA,EAAK,CAAA,6BAAA,CAAA;AAAA,QAAiC,MAAA,EAAQ,MAAA;AAAA,QAC/C,OAAA,EAAS,EAAC,cAAA,EAAgB,kBAAA,EAAoB;AAAA,QAC9C,IAAA,EAAM;AAAA,OACR;AAAA,MACE;AAAA,KAAO;AAAA,EACT,CAAA;AAMJ,EAAA,MAAM,QAAA,GAAW,CACb,cAAA,EACH,OAAA,KAAoE;AAC/D,IAAA,OAAO,cAAA;AAAA,MACP;AAAA,QAAC,GAAA,EAAK,mBAAmB,cAAc,CAAA,CAAA;AAAA,QAAI,MAAA,EAAQ;AAAA,OACrD;AAAA,MACE;AAAA,KAAO;AAAA,EACT,CAAA;AAMJ,EAAA,MAAM,SAAA,GAAY,CACd,cAAA,EACA,gBAAA,EACH,OAAA,KAAoE;AAC/D,IAAA,OAAO,cAAA;AAAA,MACP;AAAA,QAAC,GAAA,EAAK,mBAAmB,cAAc,CAAA,CAAA;AAAA,QAAI,MAAA,EAAQ,OAAA;AAAA,QACnD,OAAA,EAAS,EAAC,cAAA,EAAgB,kBAAA,EAAoB;AAAA,QAC9C,IAAA,EAAM;AAAA,OACR;AAAA,MACE;AAAA,KAAO;AAAA,EACT,CAAA;AAMJ,EAAA,MAAM,uBAAA,GAA0B,CAC5B,WAAA,EACH,OAAA,KAAyE;AACpE,IAAA,OAAO,cAAA;AAAA,MACP;AAAA,QAAC,GAAA,EAAK,mBAAmB,WAAW,CAAA,UAAA,CAAA;AAAA,QAAc,MAAA,EAAQ;AAAA,OAC5D;AAAA,MACE;AAAA,KAAO;AAAA,EACT,CAAA;AAMJ,EAAA,MAAM,WAAA,GAAc,CAChB,WAAA,EACA,UAAA,EACH,OAAA,KAAmE;AAC9D,IAAA,OAAO,cAAA;AAAA,MACP;AAAA,QAAC,GAAA,EAAK,mBAAmB,WAAW,CAAA,IAAA,CAAA;AAAA,QAAQ,MAAA,EAAQ,MAAA;AAAA,QACpD,OAAA,EAAS,EAAC,cAAA,EAAgB,kBAAA,EAAoB;AAAA,QAC9C,IAAA,EAAM;AAAA,OACR;AAAA,MACE;AAAA,KAAO;AAAA,EACT,CAAA;AAMJ,EAAA,MAAM,mBAAA,GAAsB,CACxB,0BAAA,EACH,OAAA,KAAiF;AAC5E,IAAA,OAAO,cAAA;AAAA,MACP;AAAA,QAAC,GAAA,EAAK,CAAA,sBAAA,CAAA;AAAA,QAA0B,MAAA,EAAQ,MAAA;AAAA,QACxC,OAAA,EAAS,EAAC,cAAA,EAAgB,kBAAA,EAAoB;AAAA,QAC9C,IAAA,EAAM;AAAA,OACR;AAAA,MACE;AAAA,KAAO;AAAA,EACT,CAAA;AAMJ,EAAA,MAAM,iBAAA,GAAoB,CACtB,cAAA,EACH,OAAA,KAAoE;AAC/D,IAAA,OAAO,cAAA;AAAA,MACP;AAAA,QAAC,GAAA,EAAK,CAAA,uBAAA,CAAA;AAAA,QAA2B,MAAA,EAAQ,MAAA;AAAA,QACzC,OAAA,EAAS,EAAC,cAAA,EAAgB,kBAAA,EAAoB;AAAA,QAC9C,IAAA,EAAM;AAAA,OACR;AAAA,MACE;AAAA,KAAO;AAAA,EACT,CAAA;AAMJ,EAAA,MAAM,gBAAA,GAAmB,CACrB,kBAAA,EACH,OAAA,KAA2E;AACtE,IAAA,OAAO,cAAA;AAAA,MACP;AAAA,QAAC,GAAA,EAAK,CAAA,2BAAA,CAAA;AAAA,QAA+B,MAAA,EAAQ,MAAA;AAAA,QAC7C,OAAA,EAAS,EAAC,cAAA,EAAgB,kBAAA,EAAoB;AAAA,QAC9C,IAAA,EAAM;AAAA,OACR;AAAA,MACE;AAAA,KAAO;AAAA,EACT,CAAA;AAMJ,EAAA,MAAM,cAAA,GAAiB,CACnB,cAAA,EACH,OAAA,KAA8E;AACzE,IAAA,OAAO,cAAA;AAAA,MACP;AAAA,QAAC,GAAA,EAAK,iCAAiC,cAAc,CAAA,CAAA;AAAA,QAAI,MAAA,EAAQ;AAAA,OACnE;AAAA,MACE;AAAA,KAAO;AAAA,EACT,CAAA;AAMJ,EAAA,MAAM,wBAAA,GAA2B,CAC7B,EAAA,EACA,yBAAA,EACH,OAAA,KAAkF;AAC7E,IAAA,OAAO,cAAA;AAAA,MACP;AAAA,QAAC,GAAA,EAAK,wCAAwC,EAAE,CAAA,CAAA;AAAA,QAAI,MAAA,EAAQ,MAAA;AAAA,QAC5D,OAAA,EAAS,EAAC,cAAA,EAAgB,kBAAA,EAAoB;AAAA,QAC9C,IAAA,EAAM;AAAA,OACR;AAAA,MACE;AAAA,KAAO;AAAA,EACT,CAAA;AAEJ,EAAA,OAAO,EAAC,cAAA,EAAe,yBAAA,EAA0B,0BAAA,EAA2B,8BAA6B,SAAA,EAAU,YAAA,EAAa,QAAA,EAAS,SAAA,EAAU,yBAAwB,WAAA,EAAY,mBAAA,EAAoB,iBAAA,EAAkB,gBAAA,EAAiB,gBAAe,wBAAA,EAAwB;AAAC,CAAA;;;AC5M/Q,IAAM,UAAN,MAAc;AAAA,EAIpB,YAAY,MAAA,EAAoB;AAFhC;AAAA,IAAA,IAAA,CAAS,MAAM,yCAAA,EAA0C;AAGxD,IAAA,SAAA,CAAU,MAAM,CAAA;AAAA,EACjB;AACD","file":"index.js","sourcesContent":["/**\n * SDK configuration.\n *\n * The library never reads the environment itself — a consumer constructs\n * `new ArpcSDK(config)`, which calls `configure()`. Where that config comes\n * from (env vars, a secrets manager, a config service) is the caller's business.\n */\n/**\n * Bearer-token store. The SDK authenticates lazily on the first gateway call:\n * it asks `get()` for a still-valid token and, on `null`, exchanges credentials\n * and hands the fresh token to `set()`. Owning expiry is the cache's job —\n * `get()` returns `null` once the token is stale (or near-stale). The default\n * store is in-memory and per-process; supply one to persist across restarts or\n * share across workers.\n */\nexport interface TokenCache {\n\t/** Return a valid bearer token, or `null` if absent/expired. */\n\tget(): Promise<string | null>;\n\t/** Persist a freshly exchanged token. `expiresAt` already includes the SDK's refresh skew. */\n\tset(token: string, expiresAt: Date): Promise<void>;\n}\n\n/** FDR deployment target. Selects both hosts — see `ARPC_ENDPOINTS`. */\nexport type ArpcEnvironment = \"dev\" | \"stg\" | \"prd\";\n\n/** The host pair a single environment resolves to. */\nexport interface ArpcEndpoint {\n\t/** OAuth host — token exchange only (`POST /v1/token`). */\n\treadonly oauth: string;\n\t/** API gateway host — every non-auth call. */\n\treadonly gateway: string;\n}\n\n/**\n * Per-environment hosts. The two differ by domain, not just subdomain: the\n * OAuth host is `ffngcp.com`, the gateway is `fdrgcp.com`.\n *\n * Frozen: this table backs both host resolution and environment validation, so\n * a consumer mutating it would quietly change SDK behavior.\n */\nexport const ARPC_ENDPOINTS: Readonly<Record<ArpcEnvironment, ArpcEndpoint>> =\n\tObject.freeze({\n\t\tdev: Object.freeze({\n\t\t\toauth: \"https://oauth.dev.ffngcp.com\",\n\t\t\tgateway: \"https://apis-gateway-v2.dev.fdrgcp.com\",\n\t\t}),\n\t\tstg: Object.freeze({\n\t\t\toauth: \"https://oauth.stg.ffngcp.com\",\n\t\t\tgateway: \"https://apis-gateway-v2.stg.fdrgcp.com\",\n\t\t}),\n\t\tprd: Object.freeze({\n\t\t\toauth: \"https://oauth.prd.ffngcp.com\",\n\t\t\tgateway: \"https://apis-gateway-v2.prd.fdrgcp.com\",\n\t\t}),\n\t});\n\n/**\n * Narrow a raw string to an `ArpcEnvironment`. Useful when the value arrives\n * untyped — an env var, a JSON config file, a request payload.\n */\nexport function isArpcEnvironment(value: string): value is ArpcEnvironment {\n\t// Own keys only — `in` would also match inherited members like `toString`.\n\treturn Object.keys(ARPC_ENDPOINTS).includes(value);\n}\n\nexport interface ArpcAuth {\n\t/**\n\t * OAuth client_id (HTTP Basic username). Also used as the lead's\n\t * `seller_agent_email` — the OAuth identity is a registered DRA agent.\n\t */\n\tusername: string;\n\t/** OAuth client_secret (HTTP Basic password). */\n\tpassword: string;\n\t/** Bearer-token store. Defaults to an in-memory, per-process cache. */\n\tcache?: TokenCache;\n}\n\n/**\n * Escape hatch — per-host overrides of the `environment` defaults. Omit a key\n * (or leave it `undefined`) to keep that environment's host.\n */\nexport interface ArpcUrls {\n\t/** OAuth host — token exchange only (`POST /v1/token`). */\n\toauth?: string;\n\t/** API gateway host — every non-auth call. */\n\tgateway?: string;\n}\n\nexport interface ArpcConfig {\n\t/** Selects the FDR environment. Drives both hosts. */\n\tenvironment: ArpcEnvironment;\n\tauth: ArpcAuth;\n\turls?: ArpcUrls;\n}\n\n/** Config as the internals consume it — hosts resolved to concrete strings. */\nexport interface ResolvedArpcConfig extends ArpcConfig {\n\turls: Required<ArpcUrls>;\n}\n\nlet current: ResolvedArpcConfig | null = null;\n\n/**\n * Fold the environment defaults together with any caller overrides. The guard\n * looks unreachable given the types, but `environment` routinely arrives from\n * somewhere untyped (an env var, a JSON config, a JS caller) — catch it here\n * rather than letting `undefined` reach a request URL.\n */\nfunction resolveUrls(config: ArpcConfig): Required<ArpcUrls> {\n\tif (!isArpcEnvironment(config.environment)) {\n\t\tthrow new Error(\n\t\t\t`Unknown environment: ${config.environment} (expected one of ${Object.keys(ARPC_ENDPOINTS).join(\", \")})`,\n\t\t);\n\t}\n\tconst defaults = ARPC_ENDPOINTS[config.environment];\n\treturn {\n\t\toauth: config.urls?.oauth ?? defaults.oauth,\n\t\tgateway: config.urls?.gateway ?? defaults.gateway,\n\t};\n}\n\n/** Set the active config, resolving hosts once. Called by the `ArpcSDK` constructor. */\nexport function configure(config: ArpcConfig): void {\n\tcurrent = { ...config, urls: resolveUrls(config) };\n}\n\n/** Read the active config. Throws if the SDK hasn't been constructed yet. */\nexport function getConfig(): ResolvedArpcConfig {\n\tif (!current) {\n\t\tthrow new Error(\n\t\t\t\"ArpcSDK is not configured — construct `new ArpcSDK(config)` before making calls\",\n\t\t);\n\t}\n\treturn current;\n}\n","import ky from \"ky\";\nimport { getConfig, type TokenCache } from \"./config\";\n\n// Token lifecycle lives in the orchestration layer, not the generated client:\n// the exchange targets the OAuth host (not the gateway), uses HTTP Basic, and is\n// form-encoded. Authentication is lazy — `resolveToken()` runs from the ky\n// beforeRequest hook on the first gateway call (and again once the token goes\n// stale), so callers never manage the token by hand.\nexport interface TokenResponse {\n\taccess_token: string;\n\ttoken_type?: string;\n\texpires_in?: number;\n}\n\n// Refresh this many ms before the server's stated expiry, so a token never\n// lapses mid-flight. Applied once, when we compute the stored `expiresAt`.\nconst TOKEN_SKEW_MS = 30_000;\n// FDR tokens are ~900s; fall back to that if the response omits expires_in.\nconst DEFAULT_TTL_S = 900;\n\n/** Raw credentials → bearer JWT. No storage; `resolveToken()` owns that. */\nexport async function exchangeToken(): Promise<TokenResponse> {\n\tconst { urls, auth } = getConfig();\n\tconst basic = Buffer.from(`${auth.username}:${auth.password}`).toString(\n\t\t\"base64\",\n\t);\n\n\treturn ky\n\t\t.post(`${urls.oauth}/v1/token`, {\n\t\t\theaders: { Authorization: `Basic ${basic}` },\n\t\t\tbody: new URLSearchParams({ grant_type: \"client_credentials\" }),\n\t\t})\n\t\t.json<TokenResponse>();\n}\n\n// Default store: in-memory, per-process. Used when config omits `cache`.\nlet memToken: string | null = null;\nlet memExpiresAt = 0;\nconst defaultCache: TokenCache = {\n\tasync get() {\n\t\treturn memToken && Date.now() < memExpiresAt ? memToken : null;\n\t},\n\tasync set(token, expiresAt) {\n\t\tmemToken = token;\n\t\tmemExpiresAt = expiresAt.getTime();\n\t},\n};\n\n// Single-flight guard: a cold burst of concurrent gateway calls performs one\n// exchange, not one per call.\nlet inflight: Promise<string> | null = null;\n\n/**\n * Return a valid bearer token, exchanging + caching on a miss. Called by the\n * gateway beforeRequest hook; not part of the public surface.\n */\nexport function resolveToken(): Promise<string> {\n\tconst store = getConfig().auth.cache ?? defaultCache;\n\tif (inflight) return inflight;\n\n\tinflight = (async () => {\n\t\tconst cached = await store.get();\n\t\tif (cached) return cached;\n\t\tconst res = await exchangeToken();\n\t\tconst ttl = (res.expires_in ?? DEFAULT_TTL_S) * 1000;\n\t\tawait store.set(\n\t\t\tres.access_token,\n\t\t\tnew Date(Date.now() + ttl - TOKEN_SKEW_MS),\n\t\t);\n\t\treturn res.access_token;\n\t})().finally(() => {\n\t\tinflight = null;\n\t});\n\treturn inflight;\n}\n","import ky from \"ky\";\nimport { resolveToken } from \"../auth\";\nimport { getConfig } from \"../config\";\n\n// ---------------------------------------------------------------------------\n// Orval custom mutator (ky-backed).\n//\n// Every generated operation calls `customInstance<T>(config, options)`. We\n// route all calls to the API gateway, attach the bearer token via a\n// beforeRequest hook (lazy auth — `resolveToken()` exchanges/refreshes as\n// needed), and return a small { status, data, headers } wrapper WITHOUT\n// throwing on non-2xx — the caller inspects status codes itself (202 +\n// Retry-After on program, 400 on a UW/DRA gate, etc.).\n// ---------------------------------------------------------------------------\n\n// Shape Orval passes as the first arg (axios-style request config).\nexport interface RequestConfig {\n\turl: string;\n\tmethod: string;\n\tparams?: Record<string, unknown>;\n\tdata?: unknown;\n\theaders?: Record<string, string>;\n\tsignal?: AbortSignal;\n\tresponseType?: string;\n}\n\nexport interface HttpResponse<T> {\n\tstatus: number;\n\tdata: T;\n\theaders: Headers;\n}\n\nexport const customInstance = async <T>(\n\trequest: RequestConfig,\n\toptions?: Partial<RequestConfig>,\n): Promise<HttpResponse<T>> => {\n\tconst { url, method, params, data, signal } = { ...request, ...options };\n\t// Merge headers from both sides — a per-call override (e.g. an\n\t// x-correlation-id in `options.headers`) must not drop the operation's\n\t// Content-Type. The bearer token is layered on last, below.\n\tconst headers = { ...request.headers, ...options?.headers };\n\n\tconst target = new URL(url, getConfig().urls.gateway);\n\tif (params) {\n\t\tfor (const [key, value] of Object.entries(params)) {\n\t\t\tif (value !== undefined && value !== null)\n\t\t\t\ttarget.searchParams.set(key, String(value));\n\t\t}\n\t}\n\n\tconst response = await ky(target, {\n\t\tmethod,\n\t\theaders,\n\t\thooks: {\n\t\t\t// Lazy bearer injection: resolveToken() exchanges on the first call\n\t\t\t// and refreshes once the cached token goes stale. The OAuth exchange\n\t\t\t// itself runs on a bare ky.post (no hook), so there's no recursion.\n\t\t\tbeforeRequest: [\n\t\t\t\tasync (req) => {\n\t\t\t\t\treq.headers.set(\"Authorization\", `Bearer ${await resolveToken()}`);\n\t\t\t\t},\n\t\t\t],\n\t\t},\n\t\t...(data !== undefined ? { json: data } : {}),\n\t\tsignal,\n\t\tthrowHttpErrors: false,\n\t\tretry: 0,\n\t\t// Some gateway calls (program generation in particular) can take well over ky's\n\t\t// 10s default to respond. Raise the per-request ceiling; the program poll loop\n\t\t// handles 202/Retry-After on top of this.\n\t\ttimeout: 60_000,\n\t});\n\n\tconst text = await response.text();\n\tlet body: T;\n\ttry {\n\t\tbody = (text ? JSON.parse(text) : undefined) as T;\n\t} catch {\n\t\t// Non-JSON body (e.g. a gateway HTML error page on a transient 5xx). Don't throw —\n\t\t// hand back the raw text so callers can inspect status/body and retry as needed.\n\t\tbody = text as unknown as T;\n\t}\n\treturn { status: response.status, data: body, headers: response.headers };\n};\n","/**\n * Generated by orval v7.21.0 🍺\n * Do not edit manually.\n * ARPC — Achieve Resolution Partner Connect API\n * FDR Wholesale API — A Hybrid Integration Model designed to maximise partner velocity without compromising enterprise data standards. DEX (Digital Enrollment Experience) is the partner-facing integration layer that powers the full applicant lifecycle. The `fdr_applicant_id` acts as the applicant's passport across all systems, persisted from first eligibility check through enrollment. All endpoints require a valid Bearer JWT with the `arpc.all` role.\n * OpenAPI spec version: 2026.15.0\n */\nimport type {\n  ARPCErrorResponse,\n  ApplicationSendEmailResponse,\n  BankUpdateRequest,\n  CreateLeadRequest,\n  CreateLeadResponse,\n  DraRequest,\n  DraResponse,\n  EligibilityRequest,\n  EligibilityResponse,\n  LeadPatchRequest,\n  LeadResponse,\n  LeadTransferRequest,\n  LeadTransferResponse,\n  ProgramRequest,\n  ProgramSummaryTaskRequest,\n  ProgramSummaryTaskResponse,\n  ReadinessResponse,\n  RegisterApplicantResponse,\n  RegisterApplicantV2Request,\n  SpinwheelNetworkUserRequest,\n  SpinwheelNetworkUserResponse,\n  StatelessReadinessRequest,\n  UwSubmissionV2Response\n} from './model';\n\nimport { customInstance } from '../http/client';\ntype SecondParameter<T extends (...args: never) => unknown> = Parameters<T>[1];\n\n\n  export const getARPCAchieveResolutionPartnerConnectAPI = () => {\n/**\n * Synchronous Orchestration: Handles both lead creation and income/expense data in one step, eliminating the async polling black box. Data authority shifts here — Achieve (SUIP SF) becomes the Source of Truth once the lead is formally promoted. Returns the full lead creation result including program options.\n * @summary Sync wholesale lead creation\n */\nconst createLeadSync = (\n    createLeadRequest: CreateLeadRequest,\n options?: SecondParameter<typeof customInstance<CreateLeadResponse>>,) => {\n      return customInstance<CreateLeadResponse>(\n      {url: `/v3/application`, method: 'POST',\n      headers: {'Content-Type': 'application/json', },\n      data: createLeadRequest\n    },\n      options);\n    }\n  \n/**\n * Stateless Readiness Check: Pre-flight validation before initiating program calculations. Catches duplicate SSNs or emails early to prevent downstream failures. Requires a valid Authorization header.\n * @summary Check application readiness\n */\nconst checkApplicationReadiness = (\n    statelessReadinessRequest: StatelessReadinessRequest,\n options?: SecondParameter<typeof customInstance<ReadinessResponse>>,) => {\n      return customInstance<ReadinessResponse>(\n      {url: `/v1/application/readiness`, method: 'POST',\n      headers: {'Content-Type': 'application/json', },\n      data: statelessReadinessRequest\n    },\n      options);\n    }\n  \n/**\n * Recovery endpoint — only required when the async Spinwheel user creation triggered by `POST /v1/applicant/register` fails due to a user error (e.g. invalid SSN or DOB). Not needed in the happy path. Authenticates the seller, resolves the law firm / program, creates an applicant ID when needed, and connects the applicant to the Spinwheel network. Requires a valid Authorization header.\n * @summary Create / connect Spinwheel network user\n */\nconst createSpinwheelNetworkUser = (\n    spinwheelNetworkUserRequest: SpinwheelNetworkUserRequest,\n options?: SecondParameter<typeof customInstance<SpinwheelNetworkUserResponse>>,) => {\n      return customInstance<SpinwheelNetworkUserResponse>(\n      {url: `/v1/application/spinwheel-network-user`, method: 'POST',\n      headers: {'Content-Type': 'application/json', },\n      data: spinwheelNetworkUserRequest\n    },\n      options);\n    }\n  \n/**\n * Authenticates the seller, validates banking disclosure requirements, optionally validates the submitted account and routing numbers, patches the program, and returns the refreshed lead payload. Requires a valid Authorization header.\n * @summary Update applicant bank details\n */\nconst updateApplicationBankDetails = (\n    applicantId: string,\n    bankUpdateRequest: BankUpdateRequest,\n options?: SecondParameter<typeof customInstance<LeadResponse>>,) => {\n      return customInstance<LeadResponse>(\n      {url: `/v1/application/bank-update/${applicantId}`, method: 'PATCH',\n      headers: {'Content-Type': 'application/json', },\n      data: bankUpdateRequest\n    },\n      options);\n    }\n  \n/**\n * Banking Disclosure: Manually triggers the banking disclosure email. **This endpoint is optional** — it is only needed when the disclosure was not already sent automatically by `POST /v2/application/uw-submission/{fdrApplicantId}` (which auto-sends on full UW approval). Use this endpoint for conditional approvals or when the v1 UW submission path is in use. A critical legal prerequisite that must be completed before enrollment can proceed. Requires a valid Authorization header.\n * @summary Send banking disclosure email (optional — only if not auto-sent by v2 UW submission)\n */\nconst sendEmail = (\n    fdrApplicantId: string,\n options?: SecondParameter<typeof customInstance<ApplicationSendEmailResponse>>,) => {\n      return customInstance<ApplicationSendEmailResponse>(\n      {url: `/v1/application/send-email/${fdrApplicantId}`, method: 'POST'\n    },\n      options);\n    }\n  \n/**\n * Submits a lead evaluation request. fdr_applicant_id is required in the request body. Requires a valid Authorization header with the arpc.all role.\n * @summary Transfer a lead to the debt-resolution program\n */\nconst leadTransfer = (\n    leadTransferRequest: LeadTransferRequest,\n options?: SecondParameter<typeof customInstance<LeadTransferResponse>>,) => {\n      return customInstance<LeadTransferResponse>(\n      {url: `/v1/application/lead-transfer`, method: 'POST',\n      headers: {'Content-Type': 'application/json', },\n      data: leadTransferRequest\n    },\n      options);\n    }\n  \n/**\n * Fetches the current state of an application / lead record by FDR applicant ID. Requires a valid Authorization header.\n * @summary Read application / lead details\n */\nconst readLead = (\n    fdrApplicantId: string,\n options?: SecondParameter<typeof customInstance<LeadResponse>>,) => {\n      return customInstance<LeadResponse>(\n      {url: `/v1/application/${fdrApplicantId}`, method: 'GET'\n    },\n      options);\n    }\n  \n/**\n * Applies a partial update to an existing wholesale lead record. Requires a valid Authorization header and an x-correlation-id header for request tracing.\n * @summary Partial update of application / lead record\n */\nconst patchLead = (\n    fdrApplicantId: string,\n    leadPatchRequest: LeadPatchRequest,\n options?: SecondParameter<typeof customInstance<LeadResponse>>,) => {\n      return customInstance<LeadResponse>(\n      {url: `/v1/application/${fdrApplicantId}`, method: 'PATCH',\n      headers: {'Content-Type': 'application/json', },\n      data: leadPatchRequest\n    },\n      options);\n    }\n  \n/**\n * DRA Readiness Check: Final pre-flight confirming the lead is approved and all prerequisites are met before initiating the embedded signing session. Requires a valid Authorization header.\n * @summary Get application readiness status\n */\nconst getApplicationReadiness = (\n    applicantId: string,\n options?: SecondParameter<typeof customInstance<ReadinessResponse>>,) => {\n      return customInstance<ReadinessResponse>(\n      {url: `/v1/application/${applicantId}/readiness`, method: 'GET'\n    },\n      options);\n    }\n  \n/**\n * Embedded DRA Signing: Returns an Embedded Signing URL so the applicant signs the Debt Resolution Agreement via DocuSign directly within the Symple UI, preventing session breakage. Successful legal execution triggers automatic enrollment. Requires a valid Authorization header.\n * @summary Generate Debt Resolution Agreement (DRA)\n */\nconst generateDra = (\n    applicantId: string,\n    draRequest: DraRequest,\n options?: SecondParameter<typeof customInstance<DraResponse>>,) => {\n      return customInstance<DraResponse>(\n      {url: `/v2/application/${applicantId}/dra`, method: 'POST',\n      headers: {'Content-Type': 'application/json', },\n      data: draRequest\n    },\n      options);\n    }\n  \n/**\n * **Recommended endpoint.** `POST /v1/applicant/register` is deprecated and will be retired by end of July 2026 (deadline can be extended on request if your team needs more time). Identity Anchoring: Persists applicant PII to the Managed Package and generates the `fdr_applicant_id` — the applicant's passport across all systems. Routes to the correct Salesforce target (MP or WiB) based on seller identity, and triggers the async credit fetch. Requires a valid Authorization header.\n * @summary Seller-aware applicant registration (v2 — unified ARPCErrorResponse envelope) — recommended\n */\nconst registerApplicantV2 = (\n    registerApplicantV2Request: RegisterApplicantV2Request,\n options?: SecondParameter<typeof customInstance<RegisterApplicantResponse>>,) => {\n      return customInstance<RegisterApplicantResponse>(\n      {url: `/v2/applicant/register`, method: 'POST',\n      headers: {'Content-Type': 'application/json', },\n      data: registerApplicantV2Request\n    },\n      options);\n    }\n  \n/**\n * Async Polling Loop: Call this single endpoint for both initial generation and refresh. Returns 202 Accepted with a Retry-After header while credit is still pending. Once ready, the Managed Package orchestrates the calculation and persists the program result. Requires a valid Authorization header.\n * @summary Generate application program (v1)\n */\nconst generateProgramV1 = (\n    programRequest: ProgramRequest,\n options?: SecondParameter<typeof customInstance<LeadResponse>>,) => {\n      return customInstance<LeadResponse>(\n      {url: `/v1/application/program`, method: 'POST',\n      headers: {'Content-Type': 'application/json', },\n      data: programRequest\n    },\n      options);\n    }\n  \n/**\n * Eligibility Scout: A stateless, real-time quote based on anonymised data — no PII required. Returns estimated program options to anchor the conversation before any registration occurs. Requires a valid Authorization header.\n * @summary Check application eligibility\n */\nconst checkEligibility = (\n    eligibilityRequest: EligibilityRequest,\n options?: SecondParameter<typeof customInstance<EligibilityResponse>>,) => {\n      return customInstance<EligibilityResponse>(\n      {url: `/v2/application/eligibility`, method: 'POST',\n      headers: {'Content-Type': 'application/json', },\n      data: eligibilityRequest\n    },\n      options);\n    }\n  \n/**\n * **Recommended endpoint — supersedes v1.** Submits a wholesale application to the underwriting system. On full UW approval (`sub_status = 'UW Approved'`) the banking disclosure email is sent automatically — no separate `send-email` call is needed in this path. Conditional approvals suppress the auto-send; in that case the manual `POST /v1/application/send-email/{fdrApplicantId}` endpoint can be used. Uses the SF Object API directly (no suip-proxy hop). Requires a valid Authorization header.\n * @summary Submit application to underwriting (v2 — auto banking disclosure) — recommended\n */\nconst uwSubmissionV2 = (\n    fdrApplicantId: string,\n options?: SecondParameter<typeof customInstance<UwSubmissionV2Response>>,) => {\n      return customInstance<UwSubmissionV2Response>(\n      {url: `/v2/application/uw-submission/${fdrApplicantId}`, method: 'POST'\n    },\n      options);\n    }\n  \n/**\n * Creates a SUIP Salesforce 'Program Summary Recording' task for the applicant identified by the {id} path variable. For DEX (or missing header), the parent SF opportunity is additionally PATCHed with the seller-config partner default PSC. For DC, the task is created and the parent SF opportunity is PATCHed only when ws_psc_code is provided in the request payload.\n * @summary Create program-summary recording task\n */\nconst createProgramSummaryTask = (\n    id: string,\n    programSummaryTaskRequest: ProgramSummaryTaskRequest,\n options?: SecondParameter<typeof customInstance<ProgramSummaryTaskResponse>>,) => {\n      return customInstance<ProgramSummaryTaskResponse>(\n      {url: `/v2/application/program-summary-task/${id}`, method: 'POST',\n      headers: {'Content-Type': 'application/json', },\n      data: programSummaryTaskRequest\n    },\n      options);\n    }\n  \nreturn {createLeadSync,checkApplicationReadiness,createSpinwheelNetworkUser,updateApplicationBankDetails,sendEmail,leadTransfer,readLead,patchLead,getApplicationReadiness,generateDra,registerApplicantV2,generateProgramV1,checkEligibility,uwSubmissionV2,createProgramSummaryTask}};\nexport type CreateLeadSyncResult = NonNullable<Awaited<ReturnType<ReturnType<typeof getARPCAchieveResolutionPartnerConnectAPI>['createLeadSync']>>>\nexport type CheckApplicationReadinessResult = NonNullable<Awaited<ReturnType<ReturnType<typeof getARPCAchieveResolutionPartnerConnectAPI>['checkApplicationReadiness']>>>\nexport type CreateSpinwheelNetworkUserResult = NonNullable<Awaited<ReturnType<ReturnType<typeof getARPCAchieveResolutionPartnerConnectAPI>['createSpinwheelNetworkUser']>>>\nexport type UpdateApplicationBankDetailsResult = NonNullable<Awaited<ReturnType<ReturnType<typeof getARPCAchieveResolutionPartnerConnectAPI>['updateApplicationBankDetails']>>>\nexport type SendEmailResult = NonNullable<Awaited<ReturnType<ReturnType<typeof getARPCAchieveResolutionPartnerConnectAPI>['sendEmail']>>>\nexport type LeadTransferResult = NonNullable<Awaited<ReturnType<ReturnType<typeof getARPCAchieveResolutionPartnerConnectAPI>['leadTransfer']>>>\nexport type ReadLeadResult = NonNullable<Awaited<ReturnType<ReturnType<typeof getARPCAchieveResolutionPartnerConnectAPI>['readLead']>>>\nexport type PatchLeadResult = NonNullable<Awaited<ReturnType<ReturnType<typeof getARPCAchieveResolutionPartnerConnectAPI>['patchLead']>>>\nexport type GetApplicationReadinessResult = NonNullable<Awaited<ReturnType<ReturnType<typeof getARPCAchieveResolutionPartnerConnectAPI>['getApplicationReadiness']>>>\nexport type GenerateDraResult = NonNullable<Awaited<ReturnType<ReturnType<typeof getARPCAchieveResolutionPartnerConnectAPI>['generateDra']>>>\nexport type RegisterApplicantV2Result = NonNullable<Awaited<ReturnType<ReturnType<typeof getARPCAchieveResolutionPartnerConnectAPI>['registerApplicantV2']>>>\nexport type GenerateProgramV1Result = NonNullable<Awaited<ReturnType<ReturnType<typeof getARPCAchieveResolutionPartnerConnectAPI>['generateProgramV1']>>>\nexport type CheckEligibilityResult = NonNullable<Awaited<ReturnType<ReturnType<typeof getARPCAchieveResolutionPartnerConnectAPI>['checkEligibility']>>>\nexport type UwSubmissionV2Result = NonNullable<Awaited<ReturnType<ReturnType<typeof getARPCAchieveResolutionPartnerConnectAPI>['uwSubmissionV2']>>>\nexport type CreateProgramSummaryTaskResult = NonNullable<Awaited<ReturnType<ReturnType<typeof getARPCAchieveResolutionPartnerConnectAPI>['createProgramSummaryTask']>>>\n","import { type ArpcConfig, configure } from \"./config\";\nimport { getARPCAchieveResolutionPartnerConnectAPI } from \"./generated/arpc\";\n\nexport type {\n\tArpcAuth,\n\tArpcConfig,\n\tArpcEndpoint,\n\tArpcEnvironment,\n\tArpcUrls,\n\tTokenCache,\n} from \"./config\";\nexport { ARPC_ENDPOINTS, isArpcEnvironment } from \"./config\";\nexport type * from \"./generated/model\";\nexport type { HttpResponse } from \"./http/client\";\n\n/**\n * ARPC SDK — a typed, agnostic client for FDR's ARPC DEX API (Achieve\n * Resolution Partner Connect, Digital Enrollment Experience).\n *\n * Thin by design: it owns the two-host routing (both derived from\n * `environment`), the OAuth token lifecycle, and bearer injection, and exposes\n * the full endpoint surface as typed operations on `sdk.api`. It does not\n * orchestrate the enrollment sequence — the caller\n * assembles payloads and threads the `fdr_applicant_id` between calls. See\n * `scripts/smoke.ts` for a full end-to-end reference sequence (incl. the program\n * poll loop).\n *\n * Auth is lazy: the first `api` call exchanges credentials for a bearer JWT and\n * caches it (~900s TTL), then re-exchanges shortly before it expires. There's no\n * explicit login step. Supply `auth.cache` to persist the token across restarts\n * or share it across workers; otherwise it's held in-process.\n *\n * Operations never throw on a non-2xx: each returns `{ status, data, headers }`,\n * so a business gate (e.g. a UW/DRA readiness failure) comes back as a normal\n * response you inspect via `status`/`data`. Only transport errors throw.\n *\n * Note: config and the default token cache are process-global — construct one\n * `ArpcSDK` per process. A second instance reconfigures the first; instances are\n * not isolated (single-tenant by design).\n *\n * @example\n * ```typescript\n * const sdk = new ArpcSDK({\n *   environment: \"stg\",\n *   auth: {\n *     username: \"borrowbetter@seller.com\",\n *     password: process.env.ARPC_OAUTH_PASSWORD!,\n *   },\n * });\n *\n * // The first call authenticates automatically and caches the token.\n * const elig = await sdk.api.checkEligibility({ ... });\n * const faid = elig.data.application?.applicant?.fdr_applicant_id;\n * ```\n */\nexport class ArpcSDK {\n\t/** The full typed endpoint surface — one method per gateway operation. */\n\treadonly api = getARPCAchieveResolutionPartnerConnectAPI();\n\n\tconstructor(config: ArpcConfig) {\n\t\tconfigure(config);\n\t}\n}\n"]}

package/dist/index.mjs

@@ -1,9 +1,38 @@
 import ky from 'ky';
 
 // src/config.ts
+var ARPC_ENDPOINTS = Object.freeze({
+  dev: Object.freeze({
+    oauth: "https://oauth.dev.ffngcp.com",
+    gateway: "https://apis-gateway-v2.dev.fdrgcp.com"
+  }),
+  stg: Object.freeze({
+    oauth: "https://oauth.stg.ffngcp.com",
+    gateway: "https://apis-gateway-v2.stg.fdrgcp.com"
+  }),
+  prd: Object.freeze({
+    oauth: "https://oauth.prd.ffngcp.com",
+    gateway: "https://apis-gateway-v2.prd.fdrgcp.com"
+  })
+});
+function isArpcEnvironment(value) {
+  return Object.keys(ARPC_ENDPOINTS).includes(value);
+}
 var current = null;
+function resolveUrls(config) {
+  if (!isArpcEnvironment(config.environment)) {
+    throw new Error(
+      `Unknown environment: ${config.environment} (expected one of ${Object.keys(ARPC_ENDPOINTS).join(", ")})`
+    );
+  }
+  const defaults = ARPC_ENDPOINTS[config.environment];
+  return {
+    oauth: config.urls?.oauth ?? defaults.oauth,
+    gateway: config.urls?.gateway ?? defaults.gateway
+  };
+}
 function configure(config) {
-  current = config;
+  current = { ...config, urls: resolveUrls(config) };
 }
 function getConfig() {
   if (!current) {
@@ -16,9 +45,11 @@ function getConfig() {
 var TOKEN_SKEW_MS = 3e4;
 var DEFAULT_TTL_S = 900;
 async function exchangeToken() {
-  const { oauthUrl, username, password } = getConfig();
-  const basic = Buffer.from(`${username}:${password}`).toString("base64");
-  return ky.post(`${oauthUrl}/v1/token`, {
+  const { urls, auth } = getConfig();
+  const basic = Buffer.from(`${auth.username}:${auth.password}`).toString(
+    "base64"
+  );
+  return ky.post(`${urls.oauth}/v1/token`, {
     headers: { Authorization: `Basic ${basic}` },
     body: new URLSearchParams({ grant_type: "client_credentials" })
   }).json();
@@ -36,7 +67,7 @@ var defaultCache = {
 };
 var inflight = null;
 function resolveToken() {
-  const store = getConfig().cache ?? defaultCache;
+  const store = getConfig().auth.cache ?? defaultCache;
   if (inflight) return inflight;
   inflight = (async () => {
     const cached = await store.get();
@@ -58,7 +89,7 @@ function resolveToken() {
 var customInstance = async (request, options) => {
   const { url, method, params, data, signal } = { ...request, ...options };
   const headers = { ...request.headers, ...options?.headers };
-  const target = new URL(url, getConfig().gatewayUrl);
+  const target = new URL(url, getConfig().urls.gateway);
   if (params) {
     for (const [key, value] of Object.entries(params)) {
       if (value !== void 0 && value !== null)
@@ -268,6 +299,6 @@ var ArpcSDK = class {
   }
 };
 
-export { ArpcSDK };
+export { ARPC_ENDPOINTS, ArpcSDK, isArpcEnvironment };
 //# sourceMappingURL=index.mjs.map
 //# sourceMappingURL=index.mjs.map

package/dist/index.mjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/config.ts","../src/auth.ts","../src/http/client.ts","../src/generated/arpc.ts","../src/index.ts"],"names":["ky"],"mappings":";;;AAuCA,IAAI,OAAA,GAA6B,IAAA;AAG1B,SAAS,UAAU,MAAA,EAA0B;AACnD,EAAA,OAAA,GAAU,MAAA;AACX;AAGO,SAAS,SAAA,GAAwB;AACvC,EAAA,IAAI,CAAC,OAAA,EAAS;AACb,IAAA,MAAM,IAAI,KAAA;AAAA,MACT;AAAA,KACD;AAAA,EACD;AACA,EAAA,OAAO,OAAA;AACR;ACtCA,IAAM,aAAA,GAAgB,GAAA;AAEtB,IAAM,aAAA,GAAgB,GAAA;AAGtB,eAAsB,aAAA,GAAwC;AAC7D,EAAA,MAAM,EAAE,QAAA,EAAU,QAAA,EAAU,QAAA,KAAa,SAAA,EAAU;AACnD,EAAA,MAAM,KAAA,GAAQ,MAAA,CAAO,IAAA,CAAK,CAAA,EAAG,QAAQ,IAAI,QAAQ,CAAA,CAAE,CAAA,CAAE,QAAA,CAAS,QAAQ,CAAA;AAEtE,EAAA,OAAO,EAAA,CACL,IAAA,CAAK,CAAA,EAAG,QAAQ,CAAA,SAAA,CAAA,EAAa;AAAA,IAC7B,OAAA,EAAS,EAAE,aAAA,EAAe,CAAA,MAAA,EAAS,KAAK,CAAA,CAAA,EAAG;AAAA,IAC3C,MAAM,IAAI,eAAA,CAAgB,EAAE,UAAA,EAAY,sBAAsB;AAAA,GAC9D,EACA,IAAA,EAAoB;AACvB;AAGA,IAAI,QAAA,GAA0B,IAAA;AAC9B,IAAI,YAAA,GAAe,CAAA;AACnB,IAAM,YAAA,GAA2B;AAAA,EAChC,MAAM,GAAA,GAAM;AACX,IAAA,OAAO,QAAA,IAAY,IAAA,CAAK,GAAA,EAAI,GAAI,eAAe,QAAA,GAAW,IAAA;AAAA,EAC3D,CAAA;AAAA,EACA,MAAM,GAAA,CAAI,KAAA,EAAO,SAAA,EAAW;AAC3B,IAAA,QAAA,GAAW,KAAA;AACX,IAAA,YAAA,GAAe,UAAU,OAAA,EAAQ;AAAA,EAClC;AACD,CAAA;AAIA,IAAI,QAAA,GAAmC,IAAA;AAMhC,SAAS,YAAA,GAAgC;AAC/C,EAAA,MAAM,KAAA,GAAQ,SAAA,EAAU,CAAE,KAAA,IAAS,YAAA;AACnC,EAAA,IAAI,UAAU,OAAO,QAAA;AAErB,EAAA,QAAA,GAAA,CAAY,YAAY;AACvB,IAAA,MAAM,MAAA,GAAS,MAAM,KAAA,CAAM,GAAA,EAAI;AAC/B,IAAA,IAAI,QAAQ,OAAO,MAAA;AACnB,IAAA,MAAM,GAAA,GAAM,MAAM,aAAA,EAAc;AAChC,IAAA,MAAM,GAAA,GAAA,CAAO,GAAA,CAAI,UAAA,IAAc,aAAA,IAAiB,GAAA;AAChD,IAAA,MAAM,KAAA,CAAM,GAAA;AAAA,MACX,GAAA,CAAI,YAAA;AAAA,MACJ,IAAI,IAAA,CAAK,IAAA,CAAK,GAAA,EAAI,GAAI,MAAM,aAAa;AAAA,KAC1C;AACA,IAAA,OAAO,GAAA,CAAI,YAAA;AAAA,EACZ,CAAA,GAAG,CAAE,OAAA,CAAQ,MAAM;AAClB,IAAA,QAAA,GAAW,IAAA;AAAA,EACZ,CAAC,CAAA;AACD,EAAA,OAAO,QAAA;AACR;;;ACxCO,IAAM,cAAA,GAAiB,OAC7B,OAAA,EACA,OAAA,KAC8B;AAC9B,EAAA,MAAM,EAAE,GAAA,EAAK,MAAA,EAAQ,MAAA,EAAQ,IAAA,EAAM,MAAA,EAAO,GAAI,EAAE,GAAG,OAAA,EAAS,GAAG,OAAA,EAAQ;AAIvE,EAAA,MAAM,UAAU,EAAE,GAAG,QAAQ,OAAA,EAAS,GAAG,SAAS,OAAA,EAAQ;AAE1D,EAAA,MAAM,SAAS,IAAI,GAAA,CAAI,GAAA,EAAK,SAAA,GAAY,UAAU,CAAA;AAClD,EAAA,IAAI,MAAA,EAAQ;AACX,IAAA,KAAA,MAAW,CAAC,GAAA,EAAK,KAAK,KAAK,MAAA,CAAO,OAAA,CAAQ,MAAM,CAAA,EAAG;AAClD,MAAA,IAAI,KAAA,KAAU,UAAa,KAAA,KAAU,IAAA;AACpC,QAAA,MAAA,CAAO,YAAA,CAAa,GAAA,CAAI,GAAA,EAAK,MAAA,CAAO,KAAK,CAAC,CAAA;AAAA,IAC5C;AAAA,EACD;AAEA,EAAA,MAAM,QAAA,GAAW,MAAMA,EAAAA,CAAG,MAAA,EAAQ;AAAA,IACjC,MAAA;AAAA,IACA,OAAA;AAAA,IACA,KAAA,EAAO;AAAA;AAAA;AAAA;AAAA,MAIN,aAAA,EAAe;AAAA,QACd,OAAO,GAAA,KAAQ;AACd,UAAA,GAAA,CAAI,QAAQ,GAAA,CAAI,eAAA,EAAiB,UAAU,MAAM,YAAA,EAAc,CAAA,CAAE,CAAA;AAAA,QAClE;AAAA;AACD,KACD;AAAA,IACA,GAAI,IAAA,KAAS,MAAA,GAAY,EAAE,IAAA,EAAM,IAAA,KAAS,EAAC;AAAA,IAC3C,MAAA;AAAA,IACA,eAAA,EAAiB,KAAA;AAAA,IACjB,KAAA,EAAO,CAAA;AAAA;AAAA;AAAA;AAAA,IAIP,OAAA,EAAS;AAAA,GACT,CAAA;AAED,EAAA,MAAM,IAAA,GAAO,MAAM,QAAA,CAAS,IAAA,EAAK;AACjC,EAAA,IAAI,IAAA;AACJ,EAAA,IAAI;AACH,IAAA,IAAA,GAAQ,IAAA,GAAO,IAAA,CAAK,KAAA,CAAM,IAAI,CAAA,GAAI,KAAA,CAAA;AAAA,EACnC,CAAA,CAAA,MAAQ;AAGP,IAAA,IAAA,GAAO,IAAA;AAAA,EACR;AACA,EAAA,OAAO,EAAE,QAAQ,QAAA,CAAS,MAAA,EAAQ,MAAM,IAAA,EAAM,OAAA,EAAS,SAAS,OAAA,EAAQ;AACzE,CAAA;;;AC9CS,IAAM,4CAA4C,MAAM;AAKjE,EAAA,MAAM,cAAA,GAAiB,CACnB,iBAAA,EACH,OAAA,KAA0E;AACrE,IAAA,OAAO,cAAA;AAAA,MACP;AAAA,QAAC,GAAA,EAAK,CAAA,eAAA,CAAA;AAAA,QAAmB,MAAA,EAAQ,MAAA;AAAA,QACjC,OAAA,EAAS,EAAC,cAAA,EAAgB,kBAAA,EAAoB;AAAA,QAC9C,IAAA,EAAM;AAAA,OACR;AAAA,MACE;AAAA,KAAO;AAAA,EACT,CAAA;AAMJ,EAAA,MAAM,yBAAA,GAA4B,CAC9B,yBAAA,EACH,OAAA,KAAyE;AACpE,IAAA,OAAO,cAAA;AAAA,MACP;AAAA,QAAC,GAAA,EAAK,CAAA,yBAAA,CAAA;AAAA,QAA6B,MAAA,EAAQ,MAAA;AAAA,QAC3C,OAAA,EAAS,EAAC,cAAA,EAAgB,kBAAA,EAAoB;AAAA,QAC9C,IAAA,EAAM;AAAA,OACR;AAAA,MACE;AAAA,KAAO;AAAA,EACT,CAAA;AAMJ,EAAA,MAAM,0BAAA,GAA6B,CAC/B,2BAAA,EACH,OAAA,KAAoF;AAC/E,IAAA,OAAO,cAAA;AAAA,MACP;AAAA,QAAC,GAAA,EAAK,CAAA,sCAAA,CAAA;AAAA,QAA0C,MAAA,EAAQ,MAAA;AAAA,QACxD,OAAA,EAAS,EAAC,cAAA,EAAgB,kBAAA,EAAoB;AAAA,QAC9C,IAAA,EAAM;AAAA,OACR;AAAA,MACE;AAAA,KAAO;AAAA,EACT,CAAA;AAMJ,EAAA,MAAM,4BAAA,GAA+B,CACjC,WAAA,EACA,iBAAA,EACH,OAAA,KAAoE;AAC/D,IAAA,OAAO,cAAA;AAAA,MACP;AAAA,QAAC,GAAA,EAAK,+BAA+B,WAAW,CAAA,CAAA;AAAA,QAAI,MAAA,EAAQ,OAAA;AAAA,QAC5D,OAAA,EAAS,EAAC,cAAA,EAAgB,kBAAA,EAAoB;AAAA,QAC9C,IAAA,EAAM;AAAA,OACR;AAAA,MACE;AAAA,KAAO;AAAA,EACT,CAAA;AAMJ,EAAA,MAAM,SAAA,GAAY,CACd,cAAA,EACH,OAAA,KAAoF;AAC/E,IAAA,OAAO,cAAA;AAAA,MACP;AAAA,QAAC,GAAA,EAAK,8BAA8B,cAAc,CAAA,CAAA;AAAA,QAAI,MAAA,EAAQ;AAAA,OAChE;AAAA,MACE;AAAA,KAAO;AAAA,EACT,CAAA;AAMJ,EAAA,MAAM,YAAA,GAAe,CACjB,mBAAA,EACH,OAAA,KAA4E;AACvE,IAAA,OAAO,cAAA;AAAA,MACP;AAAA,QAAC,GAAA,EAAK,CAAA,6BAAA,CAAA;AAAA,QAAiC,MAAA,EAAQ,MAAA;AAAA,QAC/C,OAAA,EAAS,EAAC,cAAA,EAAgB,kBAAA,EAAoB;AAAA,QAC9C,IAAA,EAAM;AAAA,OACR;AAAA,MACE;AAAA,KAAO;AAAA,EACT,CAAA;AAMJ,EAAA,MAAM,QAAA,GAAW,CACb,cAAA,EACH,OAAA,KAAoE;AAC/D,IAAA,OAAO,cAAA;AAAA,MACP;AAAA,QAAC,GAAA,EAAK,mBAAmB,cAAc,CAAA,CAAA;AAAA,QAAI,MAAA,EAAQ;AAAA,OACrD;AAAA,MACE;AAAA,KAAO;AAAA,EACT,CAAA;AAMJ,EAAA,MAAM,SAAA,GAAY,CACd,cAAA,EACA,gBAAA,EACH,OAAA,KAAoE;AAC/D,IAAA,OAAO,cAAA;AAAA,MACP;AAAA,QAAC,GAAA,EAAK,mBAAmB,cAAc,CAAA,CAAA;AAAA,QAAI,MAAA,EAAQ,OAAA;AAAA,QACnD,OAAA,EAAS,EAAC,cAAA,EAAgB,kBAAA,EAAoB;AAAA,QAC9C,IAAA,EAAM;AAAA,OACR;AAAA,MACE;AAAA,KAAO;AAAA,EACT,CAAA;AAMJ,EAAA,MAAM,uBAAA,GAA0B,CAC5B,WAAA,EACH,OAAA,KAAyE;AACpE,IAAA,OAAO,cAAA;AAAA,MACP;AAAA,QAAC,GAAA,EAAK,mBAAmB,WAAW,CAAA,UAAA,CAAA;AAAA,QAAc,MAAA,EAAQ;AAAA,OAC5D;AAAA,MACE;AAAA,KAAO;AAAA,EACT,CAAA;AAMJ,EAAA,MAAM,WAAA,GAAc,CAChB,WAAA,EACA,UAAA,EACH,OAAA,KAAmE;AAC9D,IAAA,OAAO,cAAA;AAAA,MACP;AAAA,QAAC,GAAA,EAAK,mBAAmB,WAAW,CAAA,IAAA,CAAA;AAAA,QAAQ,MAAA,EAAQ,MAAA;AAAA,QACpD,OAAA,EAAS,EAAC,cAAA,EAAgB,kBAAA,EAAoB;AAAA,QAC9C,IAAA,EAAM;AAAA,OACR;AAAA,MACE;AAAA,KAAO;AAAA,EACT,CAAA;AAMJ,EAAA,MAAM,mBAAA,GAAsB,CACxB,0BAAA,EACH,OAAA,KAAiF;AAC5E,IAAA,OAAO,cAAA;AAAA,MACP;AAAA,QAAC,GAAA,EAAK,CAAA,sBAAA,CAAA;AAAA,QAA0B,MAAA,EAAQ,MAAA;AAAA,QACxC,OAAA,EAAS,EAAC,cAAA,EAAgB,kBAAA,EAAoB;AAAA,QAC9C,IAAA,EAAM;AAAA,OACR;AAAA,MACE;AAAA,KAAO;AAAA,EACT,CAAA;AAMJ,EAAA,MAAM,iBAAA,GAAoB,CACtB,cAAA,EACH,OAAA,KAAoE;AAC/D,IAAA,OAAO,cAAA;AAAA,MACP;AAAA,QAAC,GAAA,EAAK,CAAA,uBAAA,CAAA;AAAA,QAA2B,MAAA,EAAQ,MAAA;AAAA,QACzC,OAAA,EAAS,EAAC,cAAA,EAAgB,kBAAA,EAAoB;AAAA,QAC9C,IAAA,EAAM;AAAA,OACR;AAAA,MACE;AAAA,KAAO;AAAA,EACT,CAAA;AAMJ,EAAA,MAAM,gBAAA,GAAmB,CACrB,kBAAA,EACH,OAAA,KAA2E;AACtE,IAAA,OAAO,cAAA;AAAA,MACP;AAAA,QAAC,GAAA,EAAK,CAAA,2BAAA,CAAA;AAAA,QAA+B,MAAA,EAAQ,MAAA;AAAA,QAC7C,OAAA,EAAS,EAAC,cAAA,EAAgB,kBAAA,EAAoB;AAAA,QAC9C,IAAA,EAAM;AAAA,OACR;AAAA,MACE;AAAA,KAAO;AAAA,EACT,CAAA;AAMJ,EAAA,MAAM,cAAA,GAAiB,CACnB,cAAA,EACH,OAAA,KAA8E;AACzE,IAAA,OAAO,cAAA;AAAA,MACP;AAAA,QAAC,GAAA,EAAK,iCAAiC,cAAc,CAAA,CAAA;AAAA,QAAI,MAAA,EAAQ;AAAA,OACnE;AAAA,MACE;AAAA,KAAO;AAAA,EACT,CAAA;AAMJ,EAAA,MAAM,wBAAA,GAA2B,CAC7B,EAAA,EACA,yBAAA,EACH,OAAA,KAAkF;AAC7E,IAAA,OAAO,cAAA;AAAA,MACP;AAAA,QAAC,GAAA,EAAK,wCAAwC,EAAE,CAAA,CAAA;AAAA,QAAI,MAAA,EAAQ,MAAA;AAAA,QAC5D,OAAA,EAAS,EAAC,cAAA,EAAgB,kBAAA,EAAoB;AAAA,QAC9C,IAAA,EAAM;AAAA,OACR;AAAA,MACE;AAAA,KAAO;AAAA,EACT,CAAA;AAEJ,EAAA,OAAO,EAAC,cAAA,EAAe,yBAAA,EAA0B,0BAAA,EAA2B,8BAA6B,SAAA,EAAU,YAAA,EAAa,QAAA,EAAS,SAAA,EAAU,yBAAwB,WAAA,EAAY,mBAAA,EAAoB,iBAAA,EAAkB,gBAAA,EAAiB,gBAAe,wBAAA,EAAwB;AAAC,CAAA;;;ACtN/Q,IAAM,UAAN,MAAc;AAAA,EAIpB,YAAY,MAAA,EAAoB;AAFhC;AAAA,IAAA,IAAA,CAAS,MAAM,yCAAA,EAA0C;AAGxD,IAAA,SAAA,CAAU,MAAM,CAAA;AAAA,EACjB;AACD","file":"index.mjs","sourcesContent":["/**\n * SDK configuration.\n *\n * The library never reads the environment itself — a consumer constructs\n * `new ArpcSDK(config)`, which calls `configure()`. The `configFromEnv()` helper\n * is a convenience for the dev scripts (smoke / server), which load `.env` via\n * dotenv-flow and pass the result in.\n */\n/**\n * Bearer-token store. The SDK authenticates lazily on the first gateway call:\n * it asks `get()` for a still-valid token and, on `null`, exchanges credentials\n * and hands the fresh token to `set()`. Owning expiry is the cache's job —\n * `get()` returns `null` once the token is stale (or near-stale). The default\n * store is in-memory and per-process; supply one to persist across restarts or\n * share across workers.\n */\nexport interface TokenCache {\n\t/** Return a valid bearer token, or `null` if absent/expired. */\n\tget(): Promise<string | null>;\n\t/** Persist a freshly exchanged token. `expiresAt` already includes the SDK's refresh skew. */\n\tset(token: string, expiresAt: Date): Promise<void>;\n}\n\nexport interface ArpcConfig {\n\t/** OAuth host — token exchange only (`POST /v1/token`). */\n\toauthUrl: string;\n\t/** API gateway host — every non-auth call. */\n\tgatewayUrl: string;\n\t/**\n\t * OAuth client_id (HTTP Basic username). Also used as the lead's\n\t * `seller_agent_email` — the OAuth identity is a registered DRA agent.\n\t */\n\tusername: string;\n\t/** OAuth client_secret (HTTP Basic password). */\n\tpassword: string;\n\t/** Bearer-token store. Defaults to an in-memory, per-process cache. */\n\tcache?: TokenCache;\n}\n\nlet current: ArpcConfig | null = null;\n\n/** Set the active config. Called by the `ArpcSDK` constructor. */\nexport function configure(config: ArpcConfig): void {\n\tcurrent = config;\n}\n\n/** Read the active config. Throws if the SDK hasn't been constructed yet. */\nexport function getConfig(): ArpcConfig {\n\tif (!current) {\n\t\tthrow new Error(\n\t\t\t\"ArpcSDK is not configured — construct `new ArpcSDK(config)` before making calls\",\n\t\t);\n\t}\n\treturn current;\n}\n\n/**\n * Build a config from environment variables. Not used by the library itself —\n * only the dev scripts call this after loading `.env`.\n */\nexport function configFromEnv(\n\tenv: NodeJS.ProcessEnv = process.env,\n): ArpcConfig {\n\tconst need = (key: string): string => {\n\t\tconst value = env[key];\n\t\tif (!value)\n\t\t\tthrow new Error(`Missing required env var: ${key} (set it in .env)`);\n\t\treturn value;\n\t};\n\treturn {\n\t\toauthUrl: need(\"FDR_OAUTH_URL\"),\n\t\tgatewayUrl: need(\"FDR_API_GATEWAY_URL\"),\n\t\tusername: need(\"FDR_OAUTH_USERNAME\"),\n\t\tpassword: need(\"FDR_OAUTH_PASSWORD\"),\n\t};\n}\n","import ky from \"ky\";\nimport { getConfig, type TokenCache } from \"./config\";\n\n// Token lifecycle lives in the orchestration layer, not the generated client:\n// the exchange targets the OAuth host (not the gateway), uses HTTP Basic, and is\n// form-encoded. Authentication is lazy — `resolveToken()` runs from the ky\n// beforeRequest hook on the first gateway call (and again once the token goes\n// stale), so callers never manage the token by hand.\nexport interface TokenResponse {\n\taccess_token: string;\n\ttoken_type?: string;\n\texpires_in?: number;\n}\n\n// Refresh this many ms before the server's stated expiry, so a token never\n// lapses mid-flight. Applied once, when we compute the stored `expiresAt`.\nconst TOKEN_SKEW_MS = 30_000;\n// FDR tokens are ~900s; fall back to that if the response omits expires_in.\nconst DEFAULT_TTL_S = 900;\n\n/** Raw credentials → bearer JWT. No storage; `resolveToken()` owns that. */\nexport async function exchangeToken(): Promise<TokenResponse> {\n\tconst { oauthUrl, username, password } = getConfig();\n\tconst basic = Buffer.from(`${username}:${password}`).toString(\"base64\");\n\n\treturn ky\n\t\t.post(`${oauthUrl}/v1/token`, {\n\t\t\theaders: { Authorization: `Basic ${basic}` },\n\t\t\tbody: new URLSearchParams({ grant_type: \"client_credentials\" }),\n\t\t})\n\t\t.json<TokenResponse>();\n}\n\n// Default store: in-memory, per-process. Used when config omits `cache`.\nlet memToken: string | null = null;\nlet memExpiresAt = 0;\nconst defaultCache: TokenCache = {\n\tasync get() {\n\t\treturn memToken && Date.now() < memExpiresAt ? memToken : null;\n\t},\n\tasync set(token, expiresAt) {\n\t\tmemToken = token;\n\t\tmemExpiresAt = expiresAt.getTime();\n\t},\n};\n\n// Single-flight guard: a cold burst of concurrent gateway calls performs one\n// exchange, not one per call.\nlet inflight: Promise<string> | null = null;\n\n/**\n * Return a valid bearer token, exchanging + caching on a miss. Called by the\n * gateway beforeRequest hook; not part of the public surface.\n */\nexport function resolveToken(): Promise<string> {\n\tconst store = getConfig().cache ?? defaultCache;\n\tif (inflight) return inflight;\n\n\tinflight = (async () => {\n\t\tconst cached = await store.get();\n\t\tif (cached) return cached;\n\t\tconst res = await exchangeToken();\n\t\tconst ttl = (res.expires_in ?? DEFAULT_TTL_S) * 1000;\n\t\tawait store.set(\n\t\t\tres.access_token,\n\t\t\tnew Date(Date.now() + ttl - TOKEN_SKEW_MS),\n\t\t);\n\t\treturn res.access_token;\n\t})().finally(() => {\n\t\tinflight = null;\n\t});\n\treturn inflight;\n}\n","import ky from \"ky\";\nimport { resolveToken } from \"../auth\";\nimport { getConfig } from \"../config\";\n\n// ---------------------------------------------------------------------------\n// Orval custom mutator (ky-backed).\n//\n// Every generated operation calls `customInstance<T>(config, options)`. We\n// route all calls to the API gateway, attach the bearer token via a\n// beforeRequest hook (lazy auth — `resolveToken()` exchanges/refreshes as\n// needed), and return a small { status, data, headers } wrapper WITHOUT\n// throwing on non-2xx — the caller inspects status codes itself (202 +\n// Retry-After on program, 400 on a UW/DRA gate, etc.).\n// ---------------------------------------------------------------------------\n\n// Shape Orval passes as the first arg (axios-style request config).\nexport interface RequestConfig {\n\turl: string;\n\tmethod: string;\n\tparams?: Record<string, unknown>;\n\tdata?: unknown;\n\theaders?: Record<string, string>;\n\tsignal?: AbortSignal;\n\tresponseType?: string;\n}\n\nexport interface HttpResponse<T> {\n\tstatus: number;\n\tdata: T;\n\theaders: Headers;\n}\n\nexport const customInstance = async <T>(\n\trequest: RequestConfig,\n\toptions?: Partial<RequestConfig>,\n): Promise<HttpResponse<T>> => {\n\tconst { url, method, params, data, signal } = { ...request, ...options };\n\t// Merge headers from both sides — a per-call override (e.g. an\n\t// x-correlation-id in `options.headers`) must not drop the operation's\n\t// Content-Type. The bearer token is layered on last, below.\n\tconst headers = { ...request.headers, ...options?.headers };\n\n\tconst target = new URL(url, getConfig().gatewayUrl);\n\tif (params) {\n\t\tfor (const [key, value] of Object.entries(params)) {\n\t\t\tif (value !== undefined && value !== null)\n\t\t\t\ttarget.searchParams.set(key, String(value));\n\t\t}\n\t}\n\n\tconst response = await ky(target, {\n\t\tmethod,\n\t\theaders,\n\t\thooks: {\n\t\t\t// Lazy bearer injection: resolveToken() exchanges on the first call\n\t\t\t// and refreshes once the cached token goes stale. The OAuth exchange\n\t\t\t// itself runs on a bare ky.post (no hook), so there's no recursion.\n\t\t\tbeforeRequest: [\n\t\t\t\tasync (req) => {\n\t\t\t\t\treq.headers.set(\"Authorization\", `Bearer ${await resolveToken()}`);\n\t\t\t\t},\n\t\t\t],\n\t\t},\n\t\t...(data !== undefined ? { json: data } : {}),\n\t\tsignal,\n\t\tthrowHttpErrors: false,\n\t\tretry: 0,\n\t\t// Some gateway calls (program generation in particular) can take well over ky's\n\t\t// 10s default to respond. Raise the per-request ceiling; the program poll loop\n\t\t// handles 202/Retry-After on top of this.\n\t\ttimeout: 60_000,\n\t});\n\n\tconst text = await response.text();\n\tlet body: T;\n\ttry {\n\t\tbody = (text ? JSON.parse(text) : undefined) as T;\n\t} catch {\n\t\t// Non-JSON body (e.g. a gateway HTML error page on a transient 5xx). Don't throw —\n\t\t// hand back the raw text so callers can inspect status/body and retry as needed.\n\t\tbody = text as unknown as T;\n\t}\n\treturn { status: response.status, data: body, headers: response.headers };\n};\n","/**\n * Generated by orval v7.21.0 🍺\n * Do not edit manually.\n * ARPC — Achieve Resolution Partner Connect API\n * FDR Wholesale API — A Hybrid Integration Model designed to maximise partner velocity without compromising enterprise data standards. DEX (Digital Enrollment Experience) is the partner-facing integration layer that powers the full applicant lifecycle. The `fdr_applicant_id` acts as the applicant's passport across all systems, persisted from first eligibility check through enrollment. All endpoints require a valid Bearer JWT with the `arpc.all` role.\n * OpenAPI spec version: 2026.15.0\n */\nimport type {\n  ARPCErrorResponse,\n  ApplicationSendEmailResponse,\n  BankUpdateRequest,\n  CreateLeadRequest,\n  CreateLeadResponse,\n  DraRequest,\n  DraResponse,\n  EligibilityRequest,\n  EligibilityResponse,\n  LeadPatchRequest,\n  LeadResponse,\n  LeadTransferRequest,\n  LeadTransferResponse,\n  ProgramRequest,\n  ProgramSummaryTaskRequest,\n  ProgramSummaryTaskResponse,\n  ReadinessResponse,\n  RegisterApplicantResponse,\n  RegisterApplicantV2Request,\n  SpinwheelNetworkUserRequest,\n  SpinwheelNetworkUserResponse,\n  StatelessReadinessRequest,\n  UwSubmissionV2Response\n} from './model';\n\nimport { customInstance } from '../http/client';\ntype SecondParameter<T extends (...args: never) => unknown> = Parameters<T>[1];\n\n\n  export const getARPCAchieveResolutionPartnerConnectAPI = () => {\n/**\n * Synchronous Orchestration: Handles both lead creation and income/expense data in one step, eliminating the async polling black box. Data authority shifts here — Achieve (SUIP SF) becomes the Source of Truth once the lead is formally promoted. Returns the full lead creation result including program options.\n * @summary Sync wholesale lead creation\n */\nconst createLeadSync = (\n    createLeadRequest: CreateLeadRequest,\n options?: SecondParameter<typeof customInstance<CreateLeadResponse>>,) => {\n      return customInstance<CreateLeadResponse>(\n      {url: `/v3/application`, method: 'POST',\n      headers: {'Content-Type': 'application/json', },\n      data: createLeadRequest\n    },\n      options);\n    }\n  \n/**\n * Stateless Readiness Check: Pre-flight validation before initiating program calculations. Catches duplicate SSNs or emails early to prevent downstream failures. Requires a valid Authorization header.\n * @summary Check application readiness\n */\nconst checkApplicationReadiness = (\n    statelessReadinessRequest: StatelessReadinessRequest,\n options?: SecondParameter<typeof customInstance<ReadinessResponse>>,) => {\n      return customInstance<ReadinessResponse>(\n      {url: `/v1/application/readiness`, method: 'POST',\n      headers: {'Content-Type': 'application/json', },\n      data: statelessReadinessRequest\n    },\n      options);\n    }\n  \n/**\n * Recovery endpoint — only required when the async Spinwheel user creation triggered by `POST /v1/applicant/register` fails due to a user error (e.g. invalid SSN or DOB). Not needed in the happy path. Authenticates the seller, resolves the law firm / program, creates an applicant ID when needed, and connects the applicant to the Spinwheel network. Requires a valid Authorization header.\n * @summary Create / connect Spinwheel network user\n */\nconst createSpinwheelNetworkUser = (\n    spinwheelNetworkUserRequest: SpinwheelNetworkUserRequest,\n options?: SecondParameter<typeof customInstance<SpinwheelNetworkUserResponse>>,) => {\n      return customInstance<SpinwheelNetworkUserResponse>(\n      {url: `/v1/application/spinwheel-network-user`, method: 'POST',\n      headers: {'Content-Type': 'application/json', },\n      data: spinwheelNetworkUserRequest\n    },\n      options);\n    }\n  \n/**\n * Authenticates the seller, validates banking disclosure requirements, optionally validates the submitted account and routing numbers, patches the program, and returns the refreshed lead payload. Requires a valid Authorization header.\n * @summary Update applicant bank details\n */\nconst updateApplicationBankDetails = (\n    applicantId: string,\n    bankUpdateRequest: BankUpdateRequest,\n options?: SecondParameter<typeof customInstance<LeadResponse>>,) => {\n      return customInstance<LeadResponse>(\n      {url: `/v1/application/bank-update/${applicantId}`, method: 'PATCH',\n      headers: {'Content-Type': 'application/json', },\n      data: bankUpdateRequest\n    },\n      options);\n    }\n  \n/**\n * Banking Disclosure: Manually triggers the banking disclosure email. **This endpoint is optional** — it is only needed when the disclosure was not already sent automatically by `POST /v2/application/uw-submission/{fdrApplicantId}` (which auto-sends on full UW approval). Use this endpoint for conditional approvals or when the v1 UW submission path is in use. A critical legal prerequisite that must be completed before enrollment can proceed. Requires a valid Authorization header.\n * @summary Send banking disclosure email (optional — only if not auto-sent by v2 UW submission)\n */\nconst sendEmail = (\n    fdrApplicantId: string,\n options?: SecondParameter<typeof customInstance<ApplicationSendEmailResponse>>,) => {\n      return customInstance<ApplicationSendEmailResponse>(\n      {url: `/v1/application/send-email/${fdrApplicantId}`, method: 'POST'\n    },\n      options);\n    }\n  \n/**\n * Submits a lead evaluation request. fdr_applicant_id is required in the request body. Requires a valid Authorization header with the arpc.all role.\n * @summary Transfer a lead to the debt-resolution program\n */\nconst leadTransfer = (\n    leadTransferRequest: LeadTransferRequest,\n options?: SecondParameter<typeof customInstance<LeadTransferResponse>>,) => {\n      return customInstance<LeadTransferResponse>(\n      {url: `/v1/application/lead-transfer`, method: 'POST',\n      headers: {'Content-Type': 'application/json', },\n      data: leadTransferRequest\n    },\n      options);\n    }\n  \n/**\n * Fetches the current state of an application / lead record by FDR applicant ID. Requires a valid Authorization header.\n * @summary Read application / lead details\n */\nconst readLead = (\n    fdrApplicantId: string,\n options?: SecondParameter<typeof customInstance<LeadResponse>>,) => {\n      return customInstance<LeadResponse>(\n      {url: `/v1/application/${fdrApplicantId}`, method: 'GET'\n    },\n      options);\n    }\n  \n/**\n * Applies a partial update to an existing wholesale lead record. Requires a valid Authorization header and an x-correlation-id header for request tracing.\n * @summary Partial update of application / lead record\n */\nconst patchLead = (\n    fdrApplicantId: string,\n    leadPatchRequest: LeadPatchRequest,\n options?: SecondParameter<typeof customInstance<LeadResponse>>,) => {\n      return customInstance<LeadResponse>(\n      {url: `/v1/application/${fdrApplicantId}`, method: 'PATCH',\n      headers: {'Content-Type': 'application/json', },\n      data: leadPatchRequest\n    },\n      options);\n    }\n  \n/**\n * DRA Readiness Check: Final pre-flight confirming the lead is approved and all prerequisites are met before initiating the embedded signing session. Requires a valid Authorization header.\n * @summary Get application readiness status\n */\nconst getApplicationReadiness = (\n    applicantId: string,\n options?: SecondParameter<typeof customInstance<ReadinessResponse>>,) => {\n      return customInstance<ReadinessResponse>(\n      {url: `/v1/application/${applicantId}/readiness`, method: 'GET'\n    },\n      options);\n    }\n  \n/**\n * Embedded DRA Signing: Returns an Embedded Signing URL so the applicant signs the Debt Resolution Agreement via DocuSign directly within the Symple UI, preventing session breakage. Successful legal execution triggers automatic enrollment. Requires a valid Authorization header.\n * @summary Generate Debt Resolution Agreement (DRA)\n */\nconst generateDra = (\n    applicantId: string,\n    draRequest: DraRequest,\n options?: SecondParameter<typeof customInstance<DraResponse>>,) => {\n      return customInstance<DraResponse>(\n      {url: `/v2/application/${applicantId}/dra`, method: 'POST',\n      headers: {'Content-Type': 'application/json', },\n      data: draRequest\n    },\n      options);\n    }\n  \n/**\n * **Recommended endpoint.** `POST /v1/applicant/register` is deprecated and will be retired by end of July 2026 (deadline can be extended on request if your team needs more time). Identity Anchoring: Persists applicant PII to the Managed Package and generates the `fdr_applicant_id` — the applicant's passport across all systems. Routes to the correct Salesforce target (MP or WiB) based on seller identity, and triggers the async credit fetch. Requires a valid Authorization header.\n * @summary Seller-aware applicant registration (v2 — unified ARPCErrorResponse envelope) — recommended\n */\nconst registerApplicantV2 = (\n    registerApplicantV2Request: RegisterApplicantV2Request,\n options?: SecondParameter<typeof customInstance<RegisterApplicantResponse>>,) => {\n      return customInstance<RegisterApplicantResponse>(\n      {url: `/v2/applicant/register`, method: 'POST',\n      headers: {'Content-Type': 'application/json', },\n      data: registerApplicantV2Request\n    },\n      options);\n    }\n  \n/**\n * Async Polling Loop: Call this single endpoint for both initial generation and refresh. Returns 202 Accepted with a Retry-After header while credit is still pending. Once ready, the Managed Package orchestrates the calculation and persists the program result. Requires a valid Authorization header.\n * @summary Generate application program (v1)\n */\nconst generateProgramV1 = (\n    programRequest: ProgramRequest,\n options?: SecondParameter<typeof customInstance<LeadResponse>>,) => {\n      return customInstance<LeadResponse>(\n      {url: `/v1/application/program`, method: 'POST',\n      headers: {'Content-Type': 'application/json', },\n      data: programRequest\n    },\n      options);\n    }\n  \n/**\n * Eligibility Scout: A stateless, real-time quote based on anonymised data — no PII required. Returns estimated program options to anchor the conversation before any registration occurs. Requires a valid Authorization header.\n * @summary Check application eligibility\n */\nconst checkEligibility = (\n    eligibilityRequest: EligibilityRequest,\n options?: SecondParameter<typeof customInstance<EligibilityResponse>>,) => {\n      return customInstance<EligibilityResponse>(\n      {url: `/v2/application/eligibility`, method: 'POST',\n      headers: {'Content-Type': 'application/json', },\n      data: eligibilityRequest\n    },\n      options);\n    }\n  \n/**\n * **Recommended endpoint — supersedes v1.** Submits a wholesale application to the underwriting system. On full UW approval (`sub_status = 'UW Approved'`) the banking disclosure email is sent automatically — no separate `send-email` call is needed in this path. Conditional approvals suppress the auto-send; in that case the manual `POST /v1/application/send-email/{fdrApplicantId}` endpoint can be used. Uses the SF Object API directly (no suip-proxy hop). Requires a valid Authorization header.\n * @summary Submit application to underwriting (v2 — auto banking disclosure) — recommended\n */\nconst uwSubmissionV2 = (\n    fdrApplicantId: string,\n options?: SecondParameter<typeof customInstance<UwSubmissionV2Response>>,) => {\n      return customInstance<UwSubmissionV2Response>(\n      {url: `/v2/application/uw-submission/${fdrApplicantId}`, method: 'POST'\n    },\n      options);\n    }\n  \n/**\n * Creates a SUIP Salesforce 'Program Summary Recording' task for the applicant identified by the {id} path variable. For DEX (or missing header), the parent SF opportunity is additionally PATCHed with the seller-config partner default PSC. For DC, the task is created and the parent SF opportunity is PATCHed only when ws_psc_code is provided in the request payload.\n * @summary Create program-summary recording task\n */\nconst createProgramSummaryTask = (\n    id: string,\n    programSummaryTaskRequest: ProgramSummaryTaskRequest,\n options?: SecondParameter<typeof customInstance<ProgramSummaryTaskResponse>>,) => {\n      return customInstance<ProgramSummaryTaskResponse>(\n      {url: `/v2/application/program-summary-task/${id}`, method: 'POST',\n      headers: {'Content-Type': 'application/json', },\n      data: programSummaryTaskRequest\n    },\n      options);\n    }\n  \nreturn {createLeadSync,checkApplicationReadiness,createSpinwheelNetworkUser,updateApplicationBankDetails,sendEmail,leadTransfer,readLead,patchLead,getApplicationReadiness,generateDra,registerApplicantV2,generateProgramV1,checkEligibility,uwSubmissionV2,createProgramSummaryTask}};\nexport type CreateLeadSyncResult = NonNullable<Awaited<ReturnType<ReturnType<typeof getARPCAchieveResolutionPartnerConnectAPI>['createLeadSync']>>>\nexport type CheckApplicationReadinessResult = NonNullable<Awaited<ReturnType<ReturnType<typeof getARPCAchieveResolutionPartnerConnectAPI>['checkApplicationReadiness']>>>\nexport type CreateSpinwheelNetworkUserResult = NonNullable<Awaited<ReturnType<ReturnType<typeof getARPCAchieveResolutionPartnerConnectAPI>['createSpinwheelNetworkUser']>>>\nexport type UpdateApplicationBankDetailsResult = NonNullable<Awaited<ReturnType<ReturnType<typeof getARPCAchieveResolutionPartnerConnectAPI>['updateApplicationBankDetails']>>>\nexport type SendEmailResult = NonNullable<Awaited<ReturnType<ReturnType<typeof getARPCAchieveResolutionPartnerConnectAPI>['sendEmail']>>>\nexport type LeadTransferResult = NonNullable<Awaited<ReturnType<ReturnType<typeof getARPCAchieveResolutionPartnerConnectAPI>['leadTransfer']>>>\nexport type ReadLeadResult = NonNullable<Awaited<ReturnType<ReturnType<typeof getARPCAchieveResolutionPartnerConnectAPI>['readLead']>>>\nexport type PatchLeadResult = NonNullable<Awaited<ReturnType<ReturnType<typeof getARPCAchieveResolutionPartnerConnectAPI>['patchLead']>>>\nexport type GetApplicationReadinessResult = NonNullable<Awaited<ReturnType<ReturnType<typeof getARPCAchieveResolutionPartnerConnectAPI>['getApplicationReadiness']>>>\nexport type GenerateDraResult = NonNullable<Awaited<ReturnType<ReturnType<typeof getARPCAchieveResolutionPartnerConnectAPI>['generateDra']>>>\nexport type RegisterApplicantV2Result = NonNullable<Awaited<ReturnType<ReturnType<typeof getARPCAchieveResolutionPartnerConnectAPI>['registerApplicantV2']>>>\nexport type GenerateProgramV1Result = NonNullable<Awaited<ReturnType<ReturnType<typeof getARPCAchieveResolutionPartnerConnectAPI>['generateProgramV1']>>>\nexport type CheckEligibilityResult = NonNullable<Awaited<ReturnType<ReturnType<typeof getARPCAchieveResolutionPartnerConnectAPI>['checkEligibility']>>>\nexport type UwSubmissionV2Result = NonNullable<Awaited<ReturnType<ReturnType<typeof getARPCAchieveResolutionPartnerConnectAPI>['uwSubmissionV2']>>>\nexport type CreateProgramSummaryTaskResult = NonNullable<Awaited<ReturnType<ReturnType<typeof getARPCAchieveResolutionPartnerConnectAPI>['createProgramSummaryTask']>>>\n","import { type ArpcConfig, configure } from \"./config\";\nimport { getARPCAchieveResolutionPartnerConnectAPI } from \"./generated/arpc\";\n\nexport type { ArpcConfig, TokenCache } from \"./config\";\nexport type * from \"./generated/model\";\nexport type { HttpResponse } from \"./http/client\";\n\n/**\n * ARPC SDK — a typed, agnostic client for FDR's ARPC DEX API (Achieve\n * Resolution Partner Connect, Digital Enrollment Experience).\n *\n * Thin by design: it owns the two-host routing, the OAuth token lifecycle, and\n * bearer injection, and exposes the full endpoint surface as typed operations\n * on `sdk.api`. It does not orchestrate the enrollment sequence — the caller\n * assembles payloads and threads the `fdr_applicant_id` between calls. See\n * `scripts/smoke.ts` for a full end-to-end reference sequence (incl. the program\n * poll loop).\n *\n * Auth is lazy: the first `api` call exchanges credentials for a bearer JWT and\n * caches it (~900s TTL), then re-exchanges shortly before it expires. There's no\n * explicit login step. Supply a `cache` in the config to persist the token\n * across restarts or share it across workers; otherwise it's held in-process.\n *\n * Operations never throw on a non-2xx: each returns `{ status, data, headers }`,\n * so a business gate (e.g. a UW/DRA readiness failure) comes back as a normal\n * response you inspect via `status`/`data`. Only transport errors throw.\n *\n * Note: config and the default token cache are process-global — construct one\n * `ArpcSDK` per process. A second instance reconfigures the first; instances are\n * not isolated (single-tenant by design).\n *\n * @example\n * ```typescript\n * const sdk = new ArpcSDK({\n *   oauthUrl: \"https://oauth.stg.ffngcp.com\",\n *   gatewayUrl: \"https://apis-gateway-v2.stg.fdrgcp.com\",\n *   username: \"borrowbetter@seller.com\",\n *   password: process.env.FDR_OAUTH_PASSWORD!,\n * });\n *\n * // The first call authenticates automatically and caches the token.\n * const elig = await sdk.api.checkEligibility({ ... });\n * const faid = elig.data.application?.applicant?.fdr_applicant_id;\n * ```\n */\nexport class ArpcSDK {\n\t/** The full typed endpoint surface — one method per gateway operation. */\n\treadonly api = getARPCAchieveResolutionPartnerConnectAPI();\n\n\tconstructor(config: ArpcConfig) {\n\t\tconfigure(config);\n\t}\n}\n"]}
+{"version":3,"sources":["../src/config.ts","../src/auth.ts","../src/http/client.ts","../src/generated/arpc.ts","../src/index.ts"],"names":["ky"],"mappings":";;;AAwCO,IAAM,cAAA,GACZ,OAAO,MAAA,CAAO;AAAA,EACb,GAAA,EAAK,OAAO,MAAA,CAAO;AAAA,IAClB,KAAA,EAAO,8BAAA;AAAA,IACP,OAAA,EAAS;AAAA,GACT,CAAA;AAAA,EACD,GAAA,EAAK,OAAO,MAAA,CAAO;AAAA,IAClB,KAAA,EAAO,8BAAA;AAAA,IACP,OAAA,EAAS;AAAA,GACT,CAAA;AAAA,EACD,GAAA,EAAK,OAAO,MAAA,CAAO;AAAA,IAClB,KAAA,EAAO,8BAAA;AAAA,IACP,OAAA,EAAS;AAAA,GACT;AACF,CAAC;AAMK,SAAS,kBAAkB,KAAA,EAAyC;AAE1E,EAAA,OAAO,MAAA,CAAO,IAAA,CAAK,cAAc,CAAA,CAAE,SAAS,KAAK,CAAA;AAClD;AAqCA,IAAI,OAAA,GAAqC,IAAA;AAQzC,SAAS,YAAY,MAAA,EAAwC;AAC5D,EAAA,IAAI,CAAC,iBAAA,CAAkB,MAAA,CAAO,WAAW,CAAA,EAAG;AAC3C,IAAA,MAAM,IAAI,KAAA;AAAA,MACT,CAAA,qBAAA,EAAwB,MAAA,CAAO,WAAW,CAAA,kBAAA,EAAqB,MAAA,CAAO,KAAK,cAAc,CAAA,CAAE,IAAA,CAAK,IAAI,CAAC,CAAA,CAAA;AAAA,KACtG;AAAA,EACD;AACA,EAAA,MAAM,QAAA,GAAW,cAAA,CAAe,MAAA,CAAO,WAAW,CAAA;AAClD,EAAA,OAAO;AAAA,IACN,KAAA,EAAO,MAAA,CAAO,IAAA,EAAM,KAAA,IAAS,QAAA,CAAS,KAAA;AAAA,IACtC,OAAA,EAAS,MAAA,CAAO,IAAA,EAAM,OAAA,IAAW,QAAA,CAAS;AAAA,GAC3C;AACD;AAGO,SAAS,UAAU,MAAA,EAA0B;AACnD,EAAA,OAAA,GAAU,EAAE,GAAG,MAAA,EAAQ,IAAA,EAAM,WAAA,CAAY,MAAM,CAAA,EAAE;AAClD;AAGO,SAAS,SAAA,GAAgC;AAC/C,EAAA,IAAI,CAAC,OAAA,EAAS;AACb,IAAA,MAAM,IAAI,KAAA;AAAA,MACT;AAAA,KACD;AAAA,EACD;AACA,EAAA,OAAO,OAAA;AACR;ACtHA,IAAM,aAAA,GAAgB,GAAA;AAEtB,IAAM,aAAA,GAAgB,GAAA;AAGtB,eAAsB,aAAA,GAAwC;AAC7D,EAAA,MAAM,EAAE,IAAA,EAAM,IAAA,EAAK,GAAI,SAAA,EAAU;AACjC,EAAA,MAAM,KAAA,GAAQ,MAAA,CAAO,IAAA,CAAK,CAAA,EAAG,IAAA,CAAK,QAAQ,CAAA,CAAA,EAAI,IAAA,CAAK,QAAQ,CAAA,CAAE,CAAA,CAAE,QAAA;AAAA,IAC9D;AAAA,GACD;AAEA,EAAA,OAAO,EAAA,CACL,IAAA,CAAK,CAAA,EAAG,IAAA,CAAK,KAAK,CAAA,SAAA,CAAA,EAAa;AAAA,IAC/B,OAAA,EAAS,EAAE,aAAA,EAAe,CAAA,MAAA,EAAS,KAAK,CAAA,CAAA,EAAG;AAAA,IAC3C,MAAM,IAAI,eAAA,CAAgB,EAAE,UAAA,EAAY,sBAAsB;AAAA,GAC9D,EACA,IAAA,EAAoB;AACvB;AAGA,IAAI,QAAA,GAA0B,IAAA;AAC9B,IAAI,YAAA,GAAe,CAAA;AACnB,IAAM,YAAA,GAA2B;AAAA,EAChC,MAAM,GAAA,GAAM;AACX,IAAA,OAAO,QAAA,IAAY,IAAA,CAAK,GAAA,EAAI,GAAI,eAAe,QAAA,GAAW,IAAA;AAAA,EAC3D,CAAA;AAAA,EACA,MAAM,GAAA,CAAI,KAAA,EAAO,SAAA,EAAW;AAC3B,IAAA,QAAA,GAAW,KAAA;AACX,IAAA,YAAA,GAAe,UAAU,OAAA,EAAQ;AAAA,EAClC;AACD,CAAA;AAIA,IAAI,QAAA,GAAmC,IAAA;AAMhC,SAAS,YAAA,GAAgC;AAC/C,EAAA,MAAM,KAAA,GAAQ,SAAA,EAAU,CAAE,IAAA,CAAK,KAAA,IAAS,YAAA;AACxC,EAAA,IAAI,UAAU,OAAO,QAAA;AAErB,EAAA,QAAA,GAAA,CAAY,YAAY;AACvB,IAAA,MAAM,MAAA,GAAS,MAAM,KAAA,CAAM,GAAA,EAAI;AAC/B,IAAA,IAAI,QAAQ,OAAO,MAAA;AACnB,IAAA,MAAM,GAAA,GAAM,MAAM,aAAA,EAAc;AAChC,IAAA,MAAM,GAAA,GAAA,CAAO,GAAA,CAAI,UAAA,IAAc,aAAA,IAAiB,GAAA;AAChD,IAAA,MAAM,KAAA,CAAM,GAAA;AAAA,MACX,GAAA,CAAI,YAAA;AAAA,MACJ,IAAI,IAAA,CAAK,IAAA,CAAK,GAAA,EAAI,GAAI,MAAM,aAAa;AAAA,KAC1C;AACA,IAAA,OAAO,GAAA,CAAI,YAAA;AAAA,EACZ,CAAA,GAAG,CAAE,OAAA,CAAQ,MAAM;AAClB,IAAA,QAAA,GAAW,IAAA;AAAA,EACZ,CAAC,CAAA;AACD,EAAA,OAAO,QAAA;AACR;;;AC1CO,IAAM,cAAA,GAAiB,OAC7B,OAAA,EACA,OAAA,KAC8B;AAC9B,EAAA,MAAM,EAAE,GAAA,EAAK,MAAA,EAAQ,MAAA,EAAQ,IAAA,EAAM,MAAA,EAAO,GAAI,EAAE,GAAG,OAAA,EAAS,GAAG,OAAA,EAAQ;AAIvE,EAAA,MAAM,UAAU,EAAE,GAAG,QAAQ,OAAA,EAAS,GAAG,SAAS,OAAA,EAAQ;AAE1D,EAAA,MAAM,SAAS,IAAI,GAAA,CAAI,KAAK,SAAA,EAAU,CAAE,KAAK,OAAO,CAAA;AACpD,EAAA,IAAI,MAAA,EAAQ;AACX,IAAA,KAAA,MAAW,CAAC,GAAA,EAAK,KAAK,KAAK,MAAA,CAAO,OAAA,CAAQ,MAAM,CAAA,EAAG;AAClD,MAAA,IAAI,KAAA,KAAU,UAAa,KAAA,KAAU,IAAA;AACpC,QAAA,MAAA,CAAO,YAAA,CAAa,GAAA,CAAI,GAAA,EAAK,MAAA,CAAO,KAAK,CAAC,CAAA;AAAA,IAC5C;AAAA,EACD;AAEA,EAAA,MAAM,QAAA,GAAW,MAAMA,EAAAA,CAAG,MAAA,EAAQ;AAAA,IACjC,MAAA;AAAA,IACA,OAAA;AAAA,IACA,KAAA,EAAO;AAAA;AAAA;AAAA;AAAA,MAIN,aAAA,EAAe;AAAA,QACd,OAAO,GAAA,KAAQ;AACd,UAAA,GAAA,CAAI,QAAQ,GAAA,CAAI,eAAA,EAAiB,UAAU,MAAM,YAAA,EAAc,CAAA,CAAE,CAAA;AAAA,QAClE;AAAA;AACD,KACD;AAAA,IACA,GAAI,IAAA,KAAS,MAAA,GAAY,EAAE,IAAA,EAAM,IAAA,KAAS,EAAC;AAAA,IAC3C,MAAA;AAAA,IACA,eAAA,EAAiB,KAAA;AAAA,IACjB,KAAA,EAAO,CAAA;AAAA;AAAA;AAAA;AAAA,IAIP,OAAA,EAAS;AAAA,GACT,CAAA;AAED,EAAA,MAAM,IAAA,GAAO,MAAM,QAAA,CAAS,IAAA,EAAK;AACjC,EAAA,IAAI,IAAA;AACJ,EAAA,IAAI;AACH,IAAA,IAAA,GAAQ,IAAA,GAAO,IAAA,CAAK,KAAA,CAAM,IAAI,CAAA,GAAI,KAAA,CAAA;AAAA,EACnC,CAAA,CAAA,MAAQ;AAGP,IAAA,IAAA,GAAO,IAAA;AAAA,EACR;AACA,EAAA,OAAO,EAAE,QAAQ,QAAA,CAAS,MAAA,EAAQ,MAAM,IAAA,EAAM,OAAA,EAAS,SAAS,OAAA,EAAQ;AACzE,CAAA;;;AC9CS,IAAM,4CAA4C,MAAM;AAKjE,EAAA,MAAM,cAAA,GAAiB,CACnB,iBAAA,EACH,OAAA,KAA0E;AACrE,IAAA,OAAO,cAAA;AAAA,MACP;AAAA,QAAC,GAAA,EAAK,CAAA,eAAA,CAAA;AAAA,QAAmB,MAAA,EAAQ,MAAA;AAAA,QACjC,OAAA,EAAS,EAAC,cAAA,EAAgB,kBAAA,EAAoB;AAAA,QAC9C,IAAA,EAAM;AAAA,OACR;AAAA,MACE;AAAA,KAAO;AAAA,EACT,CAAA;AAMJ,EAAA,MAAM,yBAAA,GAA4B,CAC9B,yBAAA,EACH,OAAA,KAAyE;AACpE,IAAA,OAAO,cAAA;AAAA,MACP;AAAA,QAAC,GAAA,EAAK,CAAA,yBAAA,CAAA;AAAA,QAA6B,MAAA,EAAQ,MAAA;AAAA,QAC3C,OAAA,EAAS,EAAC,cAAA,EAAgB,kBAAA,EAAoB;AAAA,QAC9C,IAAA,EAAM;AAAA,OACR;AAAA,MACE;AAAA,KAAO;AAAA,EACT,CAAA;AAMJ,EAAA,MAAM,0BAAA,GAA6B,CAC/B,2BAAA,EACH,OAAA,KAAoF;AAC/E,IAAA,OAAO,cAAA;AAAA,MACP;AAAA,QAAC,GAAA,EAAK,CAAA,sCAAA,CAAA;AAAA,QAA0C,MAAA,EAAQ,MAAA;AAAA,QACxD,OAAA,EAAS,EAAC,cAAA,EAAgB,kBAAA,EAAoB;AAAA,QAC9C,IAAA,EAAM;AAAA,OACR;AAAA,MACE;AAAA,KAAO;AAAA,EACT,CAAA;AAMJ,EAAA,MAAM,4BAAA,GAA+B,CACjC,WAAA,EACA,iBAAA,EACH,OAAA,KAAoE;AAC/D,IAAA,OAAO,cAAA;AAAA,MACP;AAAA,QAAC,GAAA,EAAK,+BAA+B,WAAW,CAAA,CAAA;AAAA,QAAI,MAAA,EAAQ,OAAA;AAAA,QAC5D,OAAA,EAAS,EAAC,cAAA,EAAgB,kBAAA,EAAoB;AAAA,QAC9C,IAAA,EAAM;AAAA,OACR;AAAA,MACE;AAAA,KAAO;AAAA,EACT,CAAA;AAMJ,EAAA,MAAM,SAAA,GAAY,CACd,cAAA,EACH,OAAA,KAAoF;AAC/E,IAAA,OAAO,cAAA;AAAA,MACP;AAAA,QAAC,GAAA,EAAK,8BAA8B,cAAc,CAAA,CAAA;AAAA,QAAI,MAAA,EAAQ;AAAA,OAChE;AAAA,MACE;AAAA,KAAO;AAAA,EACT,CAAA;AAMJ,EAAA,MAAM,YAAA,GAAe,CACjB,mBAAA,EACH,OAAA,KAA4E;AACvE,IAAA,OAAO,cAAA;AAAA,MACP;AAAA,QAAC,GAAA,EAAK,CAAA,6BAAA,CAAA;AAAA,QAAiC,MAAA,EAAQ,MAAA;AAAA,QAC/C,OAAA,EAAS,EAAC,cAAA,EAAgB,kBAAA,EAAoB;AAAA,QAC9C,IAAA,EAAM;AAAA,OACR;AAAA,MACE;AAAA,KAAO;AAAA,EACT,CAAA;AAMJ,EAAA,MAAM,QAAA,GAAW,CACb,cAAA,EACH,OAAA,KAAoE;AAC/D,IAAA,OAAO,cAAA;AAAA,MACP;AAAA,QAAC,GAAA,EAAK,mBAAmB,cAAc,CAAA,CAAA;AAAA,QAAI,MAAA,EAAQ;AAAA,OACrD;AAAA,MACE;AAAA,KAAO;AAAA,EACT,CAAA;AAMJ,EAAA,MAAM,SAAA,GAAY,CACd,cAAA,EACA,gBAAA,EACH,OAAA,KAAoE;AAC/D,IAAA,OAAO,cAAA;AAAA,MACP;AAAA,QAAC,GAAA,EAAK,mBAAmB,cAAc,CAAA,CAAA;AAAA,QAAI,MAAA,EAAQ,OAAA;AAAA,QACnD,OAAA,EAAS,EAAC,cAAA,EAAgB,kBAAA,EAAoB;AAAA,QAC9C,IAAA,EAAM;AAAA,OACR;AAAA,MACE;AAAA,KAAO;AAAA,EACT,CAAA;AAMJ,EAAA,MAAM,uBAAA,GAA0B,CAC5B,WAAA,EACH,OAAA,KAAyE;AACpE,IAAA,OAAO,cAAA;AAAA,MACP;AAAA,QAAC,GAAA,EAAK,mBAAmB,WAAW,CAAA,UAAA,CAAA;AAAA,QAAc,MAAA,EAAQ;AAAA,OAC5D;AAAA,MACE;AAAA,KAAO;AAAA,EACT,CAAA;AAMJ,EAAA,MAAM,WAAA,GAAc,CAChB,WAAA,EACA,UAAA,EACH,OAAA,KAAmE;AAC9D,IAAA,OAAO,cAAA;AAAA,MACP;AAAA,QAAC,GAAA,EAAK,mBAAmB,WAAW,CAAA,IAAA,CAAA;AAAA,QAAQ,MAAA,EAAQ,MAAA;AAAA,QACpD,OAAA,EAAS,EAAC,cAAA,EAAgB,kBAAA,EAAoB;AAAA,QAC9C,IAAA,EAAM;AAAA,OACR;AAAA,MACE;AAAA,KAAO;AAAA,EACT,CAAA;AAMJ,EAAA,MAAM,mBAAA,GAAsB,CACxB,0BAAA,EACH,OAAA,KAAiF;AAC5E,IAAA,OAAO,cAAA;AAAA,MACP;AAAA,QAAC,GAAA,EAAK,CAAA,sBAAA,CAAA;AAAA,QAA0B,MAAA,EAAQ,MAAA;AAAA,QACxC,OAAA,EAAS,EAAC,cAAA,EAAgB,kBAAA,EAAoB;AAAA,QAC9C,IAAA,EAAM;AAAA,OACR;AAAA,MACE;AAAA,KAAO;AAAA,EACT,CAAA;AAMJ,EAAA,MAAM,iBAAA,GAAoB,CACtB,cAAA,EACH,OAAA,KAAoE;AAC/D,IAAA,OAAO,cAAA;AAAA,MACP;AAAA,QAAC,GAAA,EAAK,CAAA,uBAAA,CAAA;AAAA,QAA2B,MAAA,EAAQ,MAAA;AAAA,QACzC,OAAA,EAAS,EAAC,cAAA,EAAgB,kBAAA,EAAoB;AAAA,QAC9C,IAAA,EAAM;AAAA,OACR;AAAA,MACE;AAAA,KAAO;AAAA,EACT,CAAA;AAMJ,EAAA,MAAM,gBAAA,GAAmB,CACrB,kBAAA,EACH,OAAA,KAA2E;AACtE,IAAA,OAAO,cAAA;AAAA,MACP;AAAA,QAAC,GAAA,EAAK,CAAA,2BAAA,CAAA;AAAA,QAA+B,MAAA,EAAQ,MAAA;AAAA,QAC7C,OAAA,EAAS,EAAC,cAAA,EAAgB,kBAAA,EAAoB;AAAA,QAC9C,IAAA,EAAM;AAAA,OACR;AAAA,MACE;AAAA,KAAO;AAAA,EACT,CAAA;AAMJ,EAAA,MAAM,cAAA,GAAiB,CACnB,cAAA,EACH,OAAA,KAA8E;AACzE,IAAA,OAAO,cAAA;AAAA,MACP;AAAA,QAAC,GAAA,EAAK,iCAAiC,cAAc,CAAA,CAAA;AAAA,QAAI,MAAA,EAAQ;AAAA,OACnE;AAAA,MACE;AAAA,KAAO;AAAA,EACT,CAAA;AAMJ,EAAA,MAAM,wBAAA,GAA2B,CAC7B,EAAA,EACA,yBAAA,EACH,OAAA,KAAkF;AAC7E,IAAA,OAAO,cAAA;AAAA,MACP;AAAA,QAAC,GAAA,EAAK,wCAAwC,EAAE,CAAA,CAAA;AAAA,QAAI,MAAA,EAAQ,MAAA;AAAA,QAC5D,OAAA,EAAS,EAAC,cAAA,EAAgB,kBAAA,EAAoB;AAAA,QAC9C,IAAA,EAAM;AAAA,OACR;AAAA,MACE;AAAA,KAAO;AAAA,EACT,CAAA;AAEJ,EAAA,OAAO,EAAC,cAAA,EAAe,yBAAA,EAA0B,0BAAA,EAA2B,8BAA6B,SAAA,EAAU,YAAA,EAAa,QAAA,EAAS,SAAA,EAAU,yBAAwB,WAAA,EAAY,mBAAA,EAAoB,iBAAA,EAAkB,gBAAA,EAAiB,gBAAe,wBAAA,EAAwB;AAAC,CAAA;;;AC5M/Q,IAAM,UAAN,MAAc;AAAA,EAIpB,YAAY,MAAA,EAAoB;AAFhC;AAAA,IAAA,IAAA,CAAS,MAAM,yCAAA,EAA0C;AAGxD,IAAA,SAAA,CAAU,MAAM,CAAA;AAAA,EACjB;AACD","file":"index.mjs","sourcesContent":["/**\n * SDK configuration.\n *\n * The library never reads the environment itself — a consumer constructs\n * `new ArpcSDK(config)`, which calls `configure()`. Where that config comes\n * from (env vars, a secrets manager, a config service) is the caller's business.\n */\n/**\n * Bearer-token store. The SDK authenticates lazily on the first gateway call:\n * it asks `get()` for a still-valid token and, on `null`, exchanges credentials\n * and hands the fresh token to `set()`. Owning expiry is the cache's job —\n * `get()` returns `null` once the token is stale (or near-stale). The default\n * store is in-memory and per-process; supply one to persist across restarts or\n * share across workers.\n */\nexport interface TokenCache {\n\t/** Return a valid bearer token, or `null` if absent/expired. */\n\tget(): Promise<string | null>;\n\t/** Persist a freshly exchanged token. `expiresAt` already includes the SDK's refresh skew. */\n\tset(token: string, expiresAt: Date): Promise<void>;\n}\n\n/** FDR deployment target. Selects both hosts — see `ARPC_ENDPOINTS`. */\nexport type ArpcEnvironment = \"dev\" | \"stg\" | \"prd\";\n\n/** The host pair a single environment resolves to. */\nexport interface ArpcEndpoint {\n\t/** OAuth host — token exchange only (`POST /v1/token`). */\n\treadonly oauth: string;\n\t/** API gateway host — every non-auth call. */\n\treadonly gateway: string;\n}\n\n/**\n * Per-environment hosts. The two differ by domain, not just subdomain: the\n * OAuth host is `ffngcp.com`, the gateway is `fdrgcp.com`.\n *\n * Frozen: this table backs both host resolution and environment validation, so\n * a consumer mutating it would quietly change SDK behavior.\n */\nexport const ARPC_ENDPOINTS: Readonly<Record<ArpcEnvironment, ArpcEndpoint>> =\n\tObject.freeze({\n\t\tdev: Object.freeze({\n\t\t\toauth: \"https://oauth.dev.ffngcp.com\",\n\t\t\tgateway: \"https://apis-gateway-v2.dev.fdrgcp.com\",\n\t\t}),\n\t\tstg: Object.freeze({\n\t\t\toauth: \"https://oauth.stg.ffngcp.com\",\n\t\t\tgateway: \"https://apis-gateway-v2.stg.fdrgcp.com\",\n\t\t}),\n\t\tprd: Object.freeze({\n\t\t\toauth: \"https://oauth.prd.ffngcp.com\",\n\t\t\tgateway: \"https://apis-gateway-v2.prd.fdrgcp.com\",\n\t\t}),\n\t});\n\n/**\n * Narrow a raw string to an `ArpcEnvironment`. Useful when the value arrives\n * untyped — an env var, a JSON config file, a request payload.\n */\nexport function isArpcEnvironment(value: string): value is ArpcEnvironment {\n\t// Own keys only — `in` would also match inherited members like `toString`.\n\treturn Object.keys(ARPC_ENDPOINTS).includes(value);\n}\n\nexport interface ArpcAuth {\n\t/**\n\t * OAuth client_id (HTTP Basic username). Also used as the lead's\n\t * `seller_agent_email` — the OAuth identity is a registered DRA agent.\n\t */\n\tusername: string;\n\t/** OAuth client_secret (HTTP Basic password). */\n\tpassword: string;\n\t/** Bearer-token store. Defaults to an in-memory, per-process cache. */\n\tcache?: TokenCache;\n}\n\n/**\n * Escape hatch — per-host overrides of the `environment` defaults. Omit a key\n * (or leave it `undefined`) to keep that environment's host.\n */\nexport interface ArpcUrls {\n\t/** OAuth host — token exchange only (`POST /v1/token`). */\n\toauth?: string;\n\t/** API gateway host — every non-auth call. */\n\tgateway?: string;\n}\n\nexport interface ArpcConfig {\n\t/** Selects the FDR environment. Drives both hosts. */\n\tenvironment: ArpcEnvironment;\n\tauth: ArpcAuth;\n\turls?: ArpcUrls;\n}\n\n/** Config as the internals consume it — hosts resolved to concrete strings. */\nexport interface ResolvedArpcConfig extends ArpcConfig {\n\turls: Required<ArpcUrls>;\n}\n\nlet current: ResolvedArpcConfig | null = null;\n\n/**\n * Fold the environment defaults together with any caller overrides. The guard\n * looks unreachable given the types, but `environment` routinely arrives from\n * somewhere untyped (an env var, a JSON config, a JS caller) — catch it here\n * rather than letting `undefined` reach a request URL.\n */\nfunction resolveUrls(config: ArpcConfig): Required<ArpcUrls> {\n\tif (!isArpcEnvironment(config.environment)) {\n\t\tthrow new Error(\n\t\t\t`Unknown environment: ${config.environment} (expected one of ${Object.keys(ARPC_ENDPOINTS).join(\", \")})`,\n\t\t);\n\t}\n\tconst defaults = ARPC_ENDPOINTS[config.environment];\n\treturn {\n\t\toauth: config.urls?.oauth ?? defaults.oauth,\n\t\tgateway: config.urls?.gateway ?? defaults.gateway,\n\t};\n}\n\n/** Set the active config, resolving hosts once. Called by the `ArpcSDK` constructor. */\nexport function configure(config: ArpcConfig): void {\n\tcurrent = { ...config, urls: resolveUrls(config) };\n}\n\n/** Read the active config. Throws if the SDK hasn't been constructed yet. */\nexport function getConfig(): ResolvedArpcConfig {\n\tif (!current) {\n\t\tthrow new Error(\n\t\t\t\"ArpcSDK is not configured — construct `new ArpcSDK(config)` before making calls\",\n\t\t);\n\t}\n\treturn current;\n}\n","import ky from \"ky\";\nimport { getConfig, type TokenCache } from \"./config\";\n\n// Token lifecycle lives in the orchestration layer, not the generated client:\n// the exchange targets the OAuth host (not the gateway), uses HTTP Basic, and is\n// form-encoded. Authentication is lazy — `resolveToken()` runs from the ky\n// beforeRequest hook on the first gateway call (and again once the token goes\n// stale), so callers never manage the token by hand.\nexport interface TokenResponse {\n\taccess_token: string;\n\ttoken_type?: string;\n\texpires_in?: number;\n}\n\n// Refresh this many ms before the server's stated expiry, so a token never\n// lapses mid-flight. Applied once, when we compute the stored `expiresAt`.\nconst TOKEN_SKEW_MS = 30_000;\n// FDR tokens are ~900s; fall back to that if the response omits expires_in.\nconst DEFAULT_TTL_S = 900;\n\n/** Raw credentials → bearer JWT. No storage; `resolveToken()` owns that. */\nexport async function exchangeToken(): Promise<TokenResponse> {\n\tconst { urls, auth } = getConfig();\n\tconst basic = Buffer.from(`${auth.username}:${auth.password}`).toString(\n\t\t\"base64\",\n\t);\n\n\treturn ky\n\t\t.post(`${urls.oauth}/v1/token`, {\n\t\t\theaders: { Authorization: `Basic ${basic}` },\n\t\t\tbody: new URLSearchParams({ grant_type: \"client_credentials\" }),\n\t\t})\n\t\t.json<TokenResponse>();\n}\n\n// Default store: in-memory, per-process. Used when config omits `cache`.\nlet memToken: string | null = null;\nlet memExpiresAt = 0;\nconst defaultCache: TokenCache = {\n\tasync get() {\n\t\treturn memToken && Date.now() < memExpiresAt ? memToken : null;\n\t},\n\tasync set(token, expiresAt) {\n\t\tmemToken = token;\n\t\tmemExpiresAt = expiresAt.getTime();\n\t},\n};\n\n// Single-flight guard: a cold burst of concurrent gateway calls performs one\n// exchange, not one per call.\nlet inflight: Promise<string> | null = null;\n\n/**\n * Return a valid bearer token, exchanging + caching on a miss. Called by the\n * gateway beforeRequest hook; not part of the public surface.\n */\nexport function resolveToken(): Promise<string> {\n\tconst store = getConfig().auth.cache ?? defaultCache;\n\tif (inflight) return inflight;\n\n\tinflight = (async () => {\n\t\tconst cached = await store.get();\n\t\tif (cached) return cached;\n\t\tconst res = await exchangeToken();\n\t\tconst ttl = (res.expires_in ?? DEFAULT_TTL_S) * 1000;\n\t\tawait store.set(\n\t\t\tres.access_token,\n\t\t\tnew Date(Date.now() + ttl - TOKEN_SKEW_MS),\n\t\t);\n\t\treturn res.access_token;\n\t})().finally(() => {\n\t\tinflight = null;\n\t});\n\treturn inflight;\n}\n","import ky from \"ky\";\nimport { resolveToken } from \"../auth\";\nimport { getConfig } from \"../config\";\n\n// ---------------------------------------------------------------------------\n// Orval custom mutator (ky-backed).\n//\n// Every generated operation calls `customInstance<T>(config, options)`. We\n// route all calls to the API gateway, attach the bearer token via a\n// beforeRequest hook (lazy auth — `resolveToken()` exchanges/refreshes as\n// needed), and return a small { status, data, headers } wrapper WITHOUT\n// throwing on non-2xx — the caller inspects status codes itself (202 +\n// Retry-After on program, 400 on a UW/DRA gate, etc.).\n// ---------------------------------------------------------------------------\n\n// Shape Orval passes as the first arg (axios-style request config).\nexport interface RequestConfig {\n\turl: string;\n\tmethod: string;\n\tparams?: Record<string, unknown>;\n\tdata?: unknown;\n\theaders?: Record<string, string>;\n\tsignal?: AbortSignal;\n\tresponseType?: string;\n}\n\nexport interface HttpResponse<T> {\n\tstatus: number;\n\tdata: T;\n\theaders: Headers;\n}\n\nexport const customInstance = async <T>(\n\trequest: RequestConfig,\n\toptions?: Partial<RequestConfig>,\n): Promise<HttpResponse<T>> => {\n\tconst { url, method, params, data, signal } = { ...request, ...options };\n\t// Merge headers from both sides — a per-call override (e.g. an\n\t// x-correlation-id in `options.headers`) must not drop the operation's\n\t// Content-Type. The bearer token is layered on last, below.\n\tconst headers = { ...request.headers, ...options?.headers };\n\n\tconst target = new URL(url, getConfig().urls.gateway);\n\tif (params) {\n\t\tfor (const [key, value] of Object.entries(params)) {\n\t\t\tif (value !== undefined && value !== null)\n\t\t\t\ttarget.searchParams.set(key, String(value));\n\t\t}\n\t}\n\n\tconst response = await ky(target, {\n\t\tmethod,\n\t\theaders,\n\t\thooks: {\n\t\t\t// Lazy bearer injection: resolveToken() exchanges on the first call\n\t\t\t// and refreshes once the cached token goes stale. The OAuth exchange\n\t\t\t// itself runs on a bare ky.post (no hook), so there's no recursion.\n\t\t\tbeforeRequest: [\n\t\t\t\tasync (req) => {\n\t\t\t\t\treq.headers.set(\"Authorization\", `Bearer ${await resolveToken()}`);\n\t\t\t\t},\n\t\t\t],\n\t\t},\n\t\t...(data !== undefined ? { json: data } : {}),\n\t\tsignal,\n\t\tthrowHttpErrors: false,\n\t\tretry: 0,\n\t\t// Some gateway calls (program generation in particular) can take well over ky's\n\t\t// 10s default to respond. Raise the per-request ceiling; the program poll loop\n\t\t// handles 202/Retry-After on top of this.\n\t\ttimeout: 60_000,\n\t});\n\n\tconst text = await response.text();\n\tlet body: T;\n\ttry {\n\t\tbody = (text ? JSON.parse(text) : undefined) as T;\n\t} catch {\n\t\t// Non-JSON body (e.g. a gateway HTML error page on a transient 5xx). Don't throw —\n\t\t// hand back the raw text so callers can inspect status/body and retry as needed.\n\t\tbody = text as unknown as T;\n\t}\n\treturn { status: response.status, data: body, headers: response.headers };\n};\n","/**\n * Generated by orval v7.21.0 🍺\n * Do not edit manually.\n * ARPC — Achieve Resolution Partner Connect API\n * FDR Wholesale API — A Hybrid Integration Model designed to maximise partner velocity without compromising enterprise data standards. DEX (Digital Enrollment Experience) is the partner-facing integration layer that powers the full applicant lifecycle. The `fdr_applicant_id` acts as the applicant's passport across all systems, persisted from first eligibility check through enrollment. All endpoints require a valid Bearer JWT with the `arpc.all` role.\n * OpenAPI spec version: 2026.15.0\n */\nimport type {\n  ARPCErrorResponse,\n  ApplicationSendEmailResponse,\n  BankUpdateRequest,\n  CreateLeadRequest,\n  CreateLeadResponse,\n  DraRequest,\n  DraResponse,\n  EligibilityRequest,\n  EligibilityResponse,\n  LeadPatchRequest,\n  LeadResponse,\n  LeadTransferRequest,\n  LeadTransferResponse,\n  ProgramRequest,\n  ProgramSummaryTaskRequest,\n  ProgramSummaryTaskResponse,\n  ReadinessResponse,\n  RegisterApplicantResponse,\n  RegisterApplicantV2Request,\n  SpinwheelNetworkUserRequest,\n  SpinwheelNetworkUserResponse,\n  StatelessReadinessRequest,\n  UwSubmissionV2Response\n} from './model';\n\nimport { customInstance } from '../http/client';\ntype SecondParameter<T extends (...args: never) => unknown> = Parameters<T>[1];\n\n\n  export const getARPCAchieveResolutionPartnerConnectAPI = () => {\n/**\n * Synchronous Orchestration: Handles both lead creation and income/expense data in one step, eliminating the async polling black box. Data authority shifts here — Achieve (SUIP SF) becomes the Source of Truth once the lead is formally promoted. Returns the full lead creation result including program options.\n * @summary Sync wholesale lead creation\n */\nconst createLeadSync = (\n    createLeadRequest: CreateLeadRequest,\n options?: SecondParameter<typeof customInstance<CreateLeadResponse>>,) => {\n      return customInstance<CreateLeadResponse>(\n      {url: `/v3/application`, method: 'POST',\n      headers: {'Content-Type': 'application/json', },\n      data: createLeadRequest\n    },\n      options);\n    }\n  \n/**\n * Stateless Readiness Check: Pre-flight validation before initiating program calculations. Catches duplicate SSNs or emails early to prevent downstream failures. Requires a valid Authorization header.\n * @summary Check application readiness\n */\nconst checkApplicationReadiness = (\n    statelessReadinessRequest: StatelessReadinessRequest,\n options?: SecondParameter<typeof customInstance<ReadinessResponse>>,) => {\n      return customInstance<ReadinessResponse>(\n      {url: `/v1/application/readiness`, method: 'POST',\n      headers: {'Content-Type': 'application/json', },\n      data: statelessReadinessRequest\n    },\n      options);\n    }\n  \n/**\n * Recovery endpoint — only required when the async Spinwheel user creation triggered by `POST /v1/applicant/register` fails due to a user error (e.g. invalid SSN or DOB). Not needed in the happy path. Authenticates the seller, resolves the law firm / program, creates an applicant ID when needed, and connects the applicant to the Spinwheel network. Requires a valid Authorization header.\n * @summary Create / connect Spinwheel network user\n */\nconst createSpinwheelNetworkUser = (\n    spinwheelNetworkUserRequest: SpinwheelNetworkUserRequest,\n options?: SecondParameter<typeof customInstance<SpinwheelNetworkUserResponse>>,) => {\n      return customInstance<SpinwheelNetworkUserResponse>(\n      {url: `/v1/application/spinwheel-network-user`, method: 'POST',\n      headers: {'Content-Type': 'application/json', },\n      data: spinwheelNetworkUserRequest\n    },\n      options);\n    }\n  \n/**\n * Authenticates the seller, validates banking disclosure requirements, optionally validates the submitted account and routing numbers, patches the program, and returns the refreshed lead payload. Requires a valid Authorization header.\n * @summary Update applicant bank details\n */\nconst updateApplicationBankDetails = (\n    applicantId: string,\n    bankUpdateRequest: BankUpdateRequest,\n options?: SecondParameter<typeof customInstance<LeadResponse>>,) => {\n      return customInstance<LeadResponse>(\n      {url: `/v1/application/bank-update/${applicantId}`, method: 'PATCH',\n      headers: {'Content-Type': 'application/json', },\n      data: bankUpdateRequest\n    },\n      options);\n    }\n  \n/**\n * Banking Disclosure: Manually triggers the banking disclosure email. **This endpoint is optional** — it is only needed when the disclosure was not already sent automatically by `POST /v2/application/uw-submission/{fdrApplicantId}` (which auto-sends on full UW approval). Use this endpoint for conditional approvals or when the v1 UW submission path is in use. A critical legal prerequisite that must be completed before enrollment can proceed. Requires a valid Authorization header.\n * @summary Send banking disclosure email (optional — only if not auto-sent by v2 UW submission)\n */\nconst sendEmail = (\n    fdrApplicantId: string,\n options?: SecondParameter<typeof customInstance<ApplicationSendEmailResponse>>,) => {\n      return customInstance<ApplicationSendEmailResponse>(\n      {url: `/v1/application/send-email/${fdrApplicantId}`, method: 'POST'\n    },\n      options);\n    }\n  \n/**\n * Submits a lead evaluation request. fdr_applicant_id is required in the request body. Requires a valid Authorization header with the arpc.all role.\n * @summary Transfer a lead to the debt-resolution program\n */\nconst leadTransfer = (\n    leadTransferRequest: LeadTransferRequest,\n options?: SecondParameter<typeof customInstance<LeadTransferResponse>>,) => {\n      return customInstance<LeadTransferResponse>(\n      {url: `/v1/application/lead-transfer`, method: 'POST',\n      headers: {'Content-Type': 'application/json', },\n      data: leadTransferRequest\n    },\n      options);\n    }\n  \n/**\n * Fetches the current state of an application / lead record by FDR applicant ID. Requires a valid Authorization header.\n * @summary Read application / lead details\n */\nconst readLead = (\n    fdrApplicantId: string,\n options?: SecondParameter<typeof customInstance<LeadResponse>>,) => {\n      return customInstance<LeadResponse>(\n      {url: `/v1/application/${fdrApplicantId}`, method: 'GET'\n    },\n      options);\n    }\n  \n/**\n * Applies a partial update to an existing wholesale lead record. Requires a valid Authorization header and an x-correlation-id header for request tracing.\n * @summary Partial update of application / lead record\n */\nconst patchLead = (\n    fdrApplicantId: string,\n    leadPatchRequest: LeadPatchRequest,\n options?: SecondParameter<typeof customInstance<LeadResponse>>,) => {\n      return customInstance<LeadResponse>(\n      {url: `/v1/application/${fdrApplicantId}`, method: 'PATCH',\n      headers: {'Content-Type': 'application/json', },\n      data: leadPatchRequest\n    },\n      options);\n    }\n  \n/**\n * DRA Readiness Check: Final pre-flight confirming the lead is approved and all prerequisites are met before initiating the embedded signing session. Requires a valid Authorization header.\n * @summary Get application readiness status\n */\nconst getApplicationReadiness = (\n    applicantId: string,\n options?: SecondParameter<typeof customInstance<ReadinessResponse>>,) => {\n      return customInstance<ReadinessResponse>(\n      {url: `/v1/application/${applicantId}/readiness`, method: 'GET'\n    },\n      options);\n    }\n  \n/**\n * Embedded DRA Signing: Returns an Embedded Signing URL so the applicant signs the Debt Resolution Agreement via DocuSign directly within the Symple UI, preventing session breakage. Successful legal execution triggers automatic enrollment. Requires a valid Authorization header.\n * @summary Generate Debt Resolution Agreement (DRA)\n */\nconst generateDra = (\n    applicantId: string,\n    draRequest: DraRequest,\n options?: SecondParameter<typeof customInstance<DraResponse>>,) => {\n      return customInstance<DraResponse>(\n      {url: `/v2/application/${applicantId}/dra`, method: 'POST',\n      headers: {'Content-Type': 'application/json', },\n      data: draRequest\n    },\n      options);\n    }\n  \n/**\n * **Recommended endpoint.** `POST /v1/applicant/register` is deprecated and will be retired by end of July 2026 (deadline can be extended on request if your team needs more time). Identity Anchoring: Persists applicant PII to the Managed Package and generates the `fdr_applicant_id` — the applicant's passport across all systems. Routes to the correct Salesforce target (MP or WiB) based on seller identity, and triggers the async credit fetch. Requires a valid Authorization header.\n * @summary Seller-aware applicant registration (v2 — unified ARPCErrorResponse envelope) — recommended\n */\nconst registerApplicantV2 = (\n    registerApplicantV2Request: RegisterApplicantV2Request,\n options?: SecondParameter<typeof customInstance<RegisterApplicantResponse>>,) => {\n      return customInstance<RegisterApplicantResponse>(\n      {url: `/v2/applicant/register`, method: 'POST',\n      headers: {'Content-Type': 'application/json', },\n      data: registerApplicantV2Request\n    },\n      options);\n    }\n  \n/**\n * Async Polling Loop: Call this single endpoint for both initial generation and refresh. Returns 202 Accepted with a Retry-After header while credit is still pending. Once ready, the Managed Package orchestrates the calculation and persists the program result. Requires a valid Authorization header.\n * @summary Generate application program (v1)\n */\nconst generateProgramV1 = (\n    programRequest: ProgramRequest,\n options?: SecondParameter<typeof customInstance<LeadResponse>>,) => {\n      return customInstance<LeadResponse>(\n      {url: `/v1/application/program`, method: 'POST',\n      headers: {'Content-Type': 'application/json', },\n      data: programRequest\n    },\n      options);\n    }\n  \n/**\n * Eligibility Scout: A stateless, real-time quote based on anonymised data — no PII required. Returns estimated program options to anchor the conversation before any registration occurs. Requires a valid Authorization header.\n * @summary Check application eligibility\n */\nconst checkEligibility = (\n    eligibilityRequest: EligibilityRequest,\n options?: SecondParameter<typeof customInstance<EligibilityResponse>>,) => {\n      return customInstance<EligibilityResponse>(\n      {url: `/v2/application/eligibility`, method: 'POST',\n      headers: {'Content-Type': 'application/json', },\n      data: eligibilityRequest\n    },\n      options);\n    }\n  \n/**\n * **Recommended endpoint — supersedes v1.** Submits a wholesale application to the underwriting system. On full UW approval (`sub_status = 'UW Approved'`) the banking disclosure email is sent automatically — no separate `send-email` call is needed in this path. Conditional approvals suppress the auto-send; in that case the manual `POST /v1/application/send-email/{fdrApplicantId}` endpoint can be used. Uses the SF Object API directly (no suip-proxy hop). Requires a valid Authorization header.\n * @summary Submit application to underwriting (v2 — auto banking disclosure) — recommended\n */\nconst uwSubmissionV2 = (\n    fdrApplicantId: string,\n options?: SecondParameter<typeof customInstance<UwSubmissionV2Response>>,) => {\n      return customInstance<UwSubmissionV2Response>(\n      {url: `/v2/application/uw-submission/${fdrApplicantId}`, method: 'POST'\n    },\n      options);\n    }\n  \n/**\n * Creates a SUIP Salesforce 'Program Summary Recording' task for the applicant identified by the {id} path variable. For DEX (or missing header), the parent SF opportunity is additionally PATCHed with the seller-config partner default PSC. For DC, the task is created and the parent SF opportunity is PATCHed only when ws_psc_code is provided in the request payload.\n * @summary Create program-summary recording task\n */\nconst createProgramSummaryTask = (\n    id: string,\n    programSummaryTaskRequest: ProgramSummaryTaskRequest,\n options?: SecondParameter<typeof customInstance<ProgramSummaryTaskResponse>>,) => {\n      return customInstance<ProgramSummaryTaskResponse>(\n      {url: `/v2/application/program-summary-task/${id}`, method: 'POST',\n      headers: {'Content-Type': 'application/json', },\n      data: programSummaryTaskRequest\n    },\n      options);\n    }\n  \nreturn {createLeadSync,checkApplicationReadiness,createSpinwheelNetworkUser,updateApplicationBankDetails,sendEmail,leadTransfer,readLead,patchLead,getApplicationReadiness,generateDra,registerApplicantV2,generateProgramV1,checkEligibility,uwSubmissionV2,createProgramSummaryTask}};\nexport type CreateLeadSyncResult = NonNullable<Awaited<ReturnType<ReturnType<typeof getARPCAchieveResolutionPartnerConnectAPI>['createLeadSync']>>>\nexport type CheckApplicationReadinessResult = NonNullable<Awaited<ReturnType<ReturnType<typeof getARPCAchieveResolutionPartnerConnectAPI>['checkApplicationReadiness']>>>\nexport type CreateSpinwheelNetworkUserResult = NonNullable<Awaited<ReturnType<ReturnType<typeof getARPCAchieveResolutionPartnerConnectAPI>['createSpinwheelNetworkUser']>>>\nexport type UpdateApplicationBankDetailsResult = NonNullable<Awaited<ReturnType<ReturnType<typeof getARPCAchieveResolutionPartnerConnectAPI>['updateApplicationBankDetails']>>>\nexport type SendEmailResult = NonNullable<Awaited<ReturnType<ReturnType<typeof getARPCAchieveResolutionPartnerConnectAPI>['sendEmail']>>>\nexport type LeadTransferResult = NonNullable<Awaited<ReturnType<ReturnType<typeof getARPCAchieveResolutionPartnerConnectAPI>['leadTransfer']>>>\nexport type ReadLeadResult = NonNullable<Awaited<ReturnType<ReturnType<typeof getARPCAchieveResolutionPartnerConnectAPI>['readLead']>>>\nexport type PatchLeadResult = NonNullable<Awaited<ReturnType<ReturnType<typeof getARPCAchieveResolutionPartnerConnectAPI>['patchLead']>>>\nexport type GetApplicationReadinessResult = NonNullable<Awaited<ReturnType<ReturnType<typeof getARPCAchieveResolutionPartnerConnectAPI>['getApplicationReadiness']>>>\nexport type GenerateDraResult = NonNullable<Awaited<ReturnType<ReturnType<typeof getARPCAchieveResolutionPartnerConnectAPI>['generateDra']>>>\nexport type RegisterApplicantV2Result = NonNullable<Awaited<ReturnType<ReturnType<typeof getARPCAchieveResolutionPartnerConnectAPI>['registerApplicantV2']>>>\nexport type GenerateProgramV1Result = NonNullable<Awaited<ReturnType<ReturnType<typeof getARPCAchieveResolutionPartnerConnectAPI>['generateProgramV1']>>>\nexport type CheckEligibilityResult = NonNullable<Awaited<ReturnType<ReturnType<typeof getARPCAchieveResolutionPartnerConnectAPI>['checkEligibility']>>>\nexport type UwSubmissionV2Result = NonNullable<Awaited<ReturnType<ReturnType<typeof getARPCAchieveResolutionPartnerConnectAPI>['uwSubmissionV2']>>>\nexport type CreateProgramSummaryTaskResult = NonNullable<Awaited<ReturnType<ReturnType<typeof getARPCAchieveResolutionPartnerConnectAPI>['createProgramSummaryTask']>>>\n","import { type ArpcConfig, configure } from \"./config\";\nimport { getARPCAchieveResolutionPartnerConnectAPI } from \"./generated/arpc\";\n\nexport type {\n\tArpcAuth,\n\tArpcConfig,\n\tArpcEndpoint,\n\tArpcEnvironment,\n\tArpcUrls,\n\tTokenCache,\n} from \"./config\";\nexport { ARPC_ENDPOINTS, isArpcEnvironment } from \"./config\";\nexport type * from \"./generated/model\";\nexport type { HttpResponse } from \"./http/client\";\n\n/**\n * ARPC SDK — a typed, agnostic client for FDR's ARPC DEX API (Achieve\n * Resolution Partner Connect, Digital Enrollment Experience).\n *\n * Thin by design: it owns the two-host routing (both derived from\n * `environment`), the OAuth token lifecycle, and bearer injection, and exposes\n * the full endpoint surface as typed operations on `sdk.api`. It does not\n * orchestrate the enrollment sequence — the caller\n * assembles payloads and threads the `fdr_applicant_id` between calls. See\n * `scripts/smoke.ts` for a full end-to-end reference sequence (incl. the program\n * poll loop).\n *\n * Auth is lazy: the first `api` call exchanges credentials for a bearer JWT and\n * caches it (~900s TTL), then re-exchanges shortly before it expires. There's no\n * explicit login step. Supply `auth.cache` to persist the token across restarts\n * or share it across workers; otherwise it's held in-process.\n *\n * Operations never throw on a non-2xx: each returns `{ status, data, headers }`,\n * so a business gate (e.g. a UW/DRA readiness failure) comes back as a normal\n * response you inspect via `status`/`data`. Only transport errors throw.\n *\n * Note: config and the default token cache are process-global — construct one\n * `ArpcSDK` per process. A second instance reconfigures the first; instances are\n * not isolated (single-tenant by design).\n *\n * @example\n * ```typescript\n * const sdk = new ArpcSDK({\n *   environment: \"stg\",\n *   auth: {\n *     username: \"borrowbetter@seller.com\",\n *     password: process.env.ARPC_OAUTH_PASSWORD!,\n *   },\n * });\n *\n * // The first call authenticates automatically and caches the token.\n * const elig = await sdk.api.checkEligibility({ ... });\n * const faid = elig.data.application?.applicant?.fdr_applicant_id;\n * ```\n */\nexport class ArpcSDK {\n\t/** The full typed endpoint surface — one method per gateway operation. */\n\treadonly api = getARPCAchieveResolutionPartnerConnectAPI();\n\n\tconstructor(config: ArpcConfig) {\n\t\tconfigure(config);\n\t}\n}\n"]}

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "@borrowbetter/arpcsdk",
-	"version": "0.2.0",
+	"version": "0.3.0",
 	"description": "Typed, agnostic client for FDR's ARPC DEX API — Achieve Resolution Partner Connect (Digital Enrollment Experience)",
 	"author": "BorrowBetter",
 	"license": "MIT",