@burdenoff/sdk-libs 2026.501.6

package/LICENSE

@@ -0,0 +1,4 @@
+Copyright (c) 2026 Burdenoff Consultancy Services Private Limited, Algoshred Technologies Private Limited and all sister companies.
+All rights reserved.
+
+Proprietary software. Unauthorized use, distribution, or modification is prohibited.

package/README.md

@@ -0,0 +1,52 @@
+# @burdenoff/sdk-libs
+
+Modular SDK library shared across all Burdenoff product SDKs (Node/TypeScript).
+
+Each module under `src/modules/<name>/` exports an `SdkModule` with `attach(ctx) -> API`. Product SDKs (`@vibecontrols/sdk-node`, `@botlit/sdk-node`, etc.) become thin shells that pick which modules to mount. Sister to [`@burdenoff/cli-sdk`](https://github.com/algoshred/cli-sdk).
+
+## Architecture
+
+- **Core** (`src/core/`): `SdkContext` prop bag, `SdkModule` contract, `BaseGraphQLClient` (dual workspace+global gateway), `AuthStore` with pluggable `TokenStore` (`InMemory`, `File`, `Env`), error hierarchy with token redaction, `ModuleRegistry` for cross-module access.
+- **Modules** (`src/modules/<name>/`): `index.ts` (default-exports `SdkModule`), `operations.ts` (hand-written `gql` strings), `api.ts` (the class returned by `attach`), `types.ts` (re-exports from `__generated__/`), `__generated__/types.ts` (codegen output, gitignored).
+- **Hard rules**: Modules NEVER import each other directly — use `ctx.modules.get<API>('id')`. Modules NEVER call `process.exit` or write secrets to logs.
+
+## Build
+
+- **tsup** dual ESM+CJS, multi-entry, `dts: true`. Entries: `src/index.ts`, `src/core/index.ts`, `src/modules/*/index.ts`.
+- `external`: `graphql`, `graphql-request`, `graphql-ws` (peer deps).
+- Subpath imports: `@burdenoff/sdk-libs/core`, `@burdenoff/sdk-libs/modules/<name>`.
+
+## Commands
+
+```bash
+bun install
+bun run dev               # tsup watch
+bun run build             # tsup once
+bun run sanity            # format:check + lint + typecheck + build + test
+bun run test              # vitest run
+bun run codegen           # GraphQL types from pinned Hive supergraph
+bun run parity:check      # cross-language manifest diff vs sdk-libs-python
+bun run publish:verdaccio # alpha tag to internal Verdaccio
+```
+
+## Adding a module
+
+1. `mkdir src/modules/<name>` with `index.ts`, `operations.ts`, `api.ts`, `types.ts`.
+2. Default-export an `SdkModule<API>` from `index.ts`.
+3. Add the module to `schema/modules.yaml` (operations + dependsOn).
+4. Mirror in `~/products/sdk-libs-python/` in the same PR pair.
+5. tsup picks it up automatically (`src/modules/*/index.ts` glob).
+
+## Testing
+
+- Unit (`tests/unit/`): pure logic — arg parsers, response transformers, gql doc builders. No HTTP. Vitest, <5s.
+- Integration (`tests/integration/`): MSW intercepts GraphQL requests. Mock factories derived from `__generated__/types`. Schema rename breaks mock = test fail.
+- E2E (`tests/e2e/`): real svc + state, run nightly. Mirrors `~/products/vibecontrols/vibecontrols-doctor/scripts/test-*-crud.sh`.
+- Parity (`tests/parity/<scenario>.yaml`): same scenario file run by node + python. CI fails if shapes diverge.
+
+## Reference
+
+- `~/products/burdenoff-be-sdk-node/` — reference for tsup multi-entry + verdaccio publish.
+- `~/products/cli-sdk/` — sister CLI SDK.
+- `~/products/vibecontrols/vibecontrols-sdk-node/` — first consumer (thin shell).
+- `~/products/dev/audit/index/vibecontrols.md` — 23-module ground-truth.

package/dist/chunk-NEREAHJ6.js

@@ -0,0 +1 @@
+var x=["password","secret","clientSecret","apiKey","token","mfaCode","accessToken","refreshToken","workspaceToken","authorization"],h=/\b(eyJ[A-Za-z0-9_-]+\.[A-Za-z0-9_-]+\.[A-Za-z0-9_-]+)\b/g;function _(s){let e=s.replace(h,"<redacted-jwt>");for(let t of x){let r=new RegExp(`("${t}"\\s*:\\s*")[^"]*(")`,"gi");e=e.replace(r,"$1<redacted>$2");}return e}var n=class extends Error{code;cause;constructor(e,t="SDK_ERROR",r){super(_(e)),this.name="SdkError",this.code=t,this.cause=r;}},o=class extends n{constructor(e="Authentication failed",t){super(e,"AUTHENTICATION_ERROR",t),this.name="AuthenticationError";}},c=class extends n{constructor(e="Not authorized",t){super(e,"AUTHORIZATION_ERROR",t),this.name="AuthorizationError";}},a=class extends n{constructor(e,t){super(e,"NETWORK_ERROR",t),this.name="NetworkError";}},i=class extends n{constructor(e,t){super(e,"VALIDATION_ERROR",t),this.name="ValidationError";}},d=class extends n{constructor(e="Rate limit exceeded",t){super(e,"RATE_LIMIT_ERROR",t),this.name="RateLimitError";}},u=class extends n{constructor(e="Device code expired"){super(e,"DEVICE_CODE_EXPIRED"),this.name="DeviceCodeExpiredError";}},p=class extends n{constructor(e="Device authorization denied by user"){super(e,"DEVICE_CODE_DENIED"),this.name="DeviceCodeDeniedError";}},E=class extends n{constructor(e,t){super(`Module '${e}' declares dependency on '${t}', but '${t}' is not in the module list.`,"MISSING_DEPENDENCY"),this.name="MissingDependencyError";}},l=class extends n{constructor(e){super(`Circular dependency detected among modules: ${e.join(" -> ")}`,"CIRCULAR_DEPENDENCY"),this.name="CircularDependencyError";}},R=class extends n{constructor(e){super(`Module '${e}' is not mounted on this SDK instance. Add it to the modules array passed to createSdk().`,"MODULE_NOT_MOUNTED"),this.name="ModuleNotMountedError";}};export{_ as a,n as b,o as c,c as d,a as e,i as f,d as g,u as h,p as i,E as j,l as k,R as l};

package/dist/chunk-YGVAZ3D7.js

@@ -0,0 +1,2 @@
+import {c,b as b$1,g as g$1,d,e,a,l,j as j$1,k}from'./chunk-NEREAHJ6.js';import {GraphQLClient}from'graphql-request';import {readFile,mkdir,writeFile,unlink}from'fs/promises';import {dirname}from'path';var $=3e4,D=3,B=1e3,j=300*1e3;function Q(t,e){return new Promise((r,o)=>{if(e?.aborted)return o(new b$1("Aborted","ABORTED"));let n=setTimeout(()=>r(),t);e?.addEventListener("abort",()=>{clearTimeout(n),o(new b$1("Aborted","ABORTED"));});})}function U(t){if(t instanceof TypeError)return  true;if(t&&typeof t=="object"&&"response"in t){let e=t.response;if(e&&typeof e.status=="number"&&e.status>=500)return  true}return  false}function K(t){if(t&&typeof t=="object"&&"response"in t){let e=t.response;if(e&&typeof e.status=="number"&&e.status>=400&&e.status<500)return e.status}return null}function M(t){if(t&&typeof t=="object"&&"response"in t){let e=t,r=e.response?.errors?.[0];if(r?.message)return a(r.message);if(e.message)return a(e.message)}return t instanceof Error?a(t.message):a(String(t))}var h=class{workspaceClient;globalClient;opts;constructor(e){this.opts=e,this.workspaceClient=new GraphQLClient(e.workspaceEndpoint),this.globalClient=new GraphQLClient(e.globalEndpoint);}async buildHeaders(e){let r={},o=this.opts.auth.getApiKey();o&&(r["X-API-Key"]=o);let n=await this.opts.auth.getTokens();if(n?.accessToken&&(r.Authorization=`Bearer ${n.accessToken}`),e==="workspace"){let s=this.opts.auth.getWorkspaceToken();s&&(r["X-Workspace-Authorization"]=`Bearer ${s}`);}return r}isExpiringSoon(e){return e?Date.now()+j>=e:false}async ensureFresh(){if(this.opts.autoRefresh===false)return;let e=await this.opts.auth.getTokens();e?.expiresAt&&this.isExpiringSoon(e.expiresAt)&&await this.performTokenRefresh();}async performTokenRefresh(){let e=await this.opts.auth.getTokens();if(!e?.refreshToken)throw new c("No refresh token available");let o=await this.globalClient.request("mutation RefreshToken($token: String!) { refreshToken(token: $token) { accessToken refreshToken expiresIn } }",{token:e.refreshToken}),n=Date.now()+o.refreshToken.expiresIn*1e3,s={accessToken:o.refreshToken.accessToken,refreshToken:o.refreshToken.refreshToken,expiresAt:n};return await this.opts.auth.setTokens(s),this.opts.onTokenRefresh&&await this.opts.onTokenRefresh(s),s}async executeWithRetry(e$1,r,o,n,s){let i=this.opts.timeout??$,a;for(let u=0;u<D;u++){let x=new AbortController,E=s?.signal??this.opts.defaultSignal,G=()=>x.abort();E?.addEventListener("abort",G);let F=setTimeout(()=>x.abort(),i);try{let f=await this.buildHeaders(r);return await e$1.request({document:o,variables:n,signal:x.signal,requestHeaders:f})}catch(f){if(a=f,K(f)!==null)break;if(U(f)&&u<D-1){await Q(B*2**u,E);continue}break}finally{clearTimeout(F),E?.removeEventListener("abort",G);}}let l=K(a);if(l!==null){let u=M(a);switch(l){case 401:throw new c(u,a);case 403:throw new d(u,a);case 429:throw new g$1(u,a);default:throw new b$1(u,`HTTP_${l}`,a)}}throw a instanceof TypeError?new e(M(a),a):a instanceof b$1?a:new b$1(M(a),"SDK_ERROR",a)}async globalRequest(e,r,o){return this.executeWithRetry(this.globalClient,"global",e,r,o)}async workspaceRequest(e,r,o){return await this.ensureFresh(),this.executeWithRetry(this.workspaceClient,"workspace",e,r,o)}async workspaceAuthOnlyRequest(e,r,o){return this.executeWithRetry(this.workspaceClient,"workspace",e,r,o)}};function m(t,e){return e==="workspace"?{request:(r,o,n)=>t.workspaceRequest(r,o,n)}:e==="global"?{request:(r,o,n)=>t.globalRequest(r,o,n)}:{request:(r,o,n)=>t.workspaceAuthOnlyRequest(r,o,n)}}var g=class{tokens;constructor(e){this.tokens=e??null;}async get(){return this.tokens?{...this.tokens}:null}async set(e){this.tokens={...e};}async clear(){this.tokens=null;}},S=class{constructor(e){this.opts=e;}opts;async get(){try{let e=await readFile(this.opts.path,"utf8"),r=JSON.parse(e);return r&&typeof r.accessToken=="string"?{accessToken:r.accessToken,refreshToken:r.refreshToken??"",expiresAt:typeof r.expiresAt=="number"?r.expiresAt:void 0}:null}catch(e){if(V(e)==="ENOENT")return null;throw new Error(a(`FileTokenStore.get failed: ${e.message}`))}}async set(e){await mkdir(dirname(this.opts.path),{recursive:true}),await writeFile(this.opts.path,JSON.stringify(e,null,2),{mode:384});}async clear(){try{await unlink(this.opts.path);}catch(e){if(V(e)!=="ENOENT")throw e}}};function V(t){if(t&&typeof t=="object"&&"code"in t&&typeof t.code=="string")return t.code}var b=class{constructor(e){this.opts=e;}opts;async get(){let e=process.env[this.opts.accessTokenVar];if(!e)return null;let r=this.opts.refreshTokenVar?process.env[this.opts.refreshTokenVar]??"":"",o=this.opts.expiresAtVar?process.env[this.opts.expiresAtVar]:void 0,n=o?Number.parseInt(o,10):void 0;return {accessToken:e,refreshToken:r,expiresAt:n}}async set(e){}async clear(){}};var T=class{constructor(e){this.tokenStore=e;}tokenStore;workspaceToken=null;apiKey=null;async getTokens(){return this.tokenStore.get()}async setTokens(e){await this.tokenStore.set(e);}async clearTokens(){await this.tokenStore.clear(),this.workspaceToken=null;}setWorkspaceToken(e){this.workspaceToken=e;}getWorkspaceToken(){return this.workspaceToken}setApiKey(e){this.apiKey=e;}getApiKey(){return this.apiKey}async isAuthenticated(){return (await this.getTokens())?.accessToken?true:!!this.apiKey}};function v(t){let e=t?.tokenStore??new g(t?.tokens??null),r=new T(e);return t?.workspaceToken&&r.setWorkspaceToken(t.workspaceToken),t?.apiKey&&r.setApiKey(t.apiKey),r}var _={debug:10,info:20,warn:30,error:40};function O(t={}){let e=_[t.level??"warn"],r=t.prefix?`[${t.prefix}]`:"";function o(n,s,i){if(_[n]<e)return;let a$1=`${r}[${n}] ${a(s)}`,l=i?JSON.parse(a(JSON.stringify(i))):void 0;n==="error"||n==="warn"?console.error(a$1,l??""):console.warn(a$1,l??"");}return {debug:(n,s)=>o("debug",n,s),info:(n,s)=>o("info",n,s),warn:(n,s)=>o("warn",n,s),error:(n,s)=>o("error",n,s)}}var y=class{apis=new Map;set(e,r){this.apis.set(e,r);}get(e){if(!this.apis.has(e))throw new l(e);return this.apis.get(e)}has(e){return this.apis.has(e)}ids(){return Array.from(this.apis.keys())}};function Y(t){let e=t.productVersion??"0.0.0",r=t.env??Z(t.workspaceEndpoint),o=t.logger??O({level:t.logLevel??"warn",prefix:t.productName}),n=t.accessToken?{accessToken:t.accessToken,refreshToken:t.refreshToken??""}:null,s=v({tokens:n,workspaceToken:t.workspaceToken??null,apiKey:t.apiKey??null,tokenStore:t.tokenStore}),a={issuer:t.oidcIssuer??ee(t.globalEndpoint),clientId:t.clientId,clientSecret:t.clientSecret,redirectUri:t.redirectUri},l=new h({workspaceEndpoint:t.workspaceEndpoint,globalEndpoint:t.globalEndpoint,auth:s,timeout:t.timeout,autoRefresh:t.autoRefresh,onTokenRefresh:t.onTokenRefresh,defaultSignal:t.signal});return {productName:t.productName,productVersion:e,env:r,gql:{workspace:m(l,"workspace"),global:m(l,"global"),workspaceAuthOnly:m(l,"workspaceAuthOnly")},client:l,auth:s,oidc:a,logger:o,modules:new y,signal:t.signal}}function Z(t){return t.includes("localhost")||t.includes("127.0.0.1")?"local":t.includes("alpha")?"alpha":t.includes("dev")?"dev":"prod"}function ee(t){return t.includes("localhost")||t.includes("127.0.0.1")?t.replace(/\/graphql$/,"").replace(/\/global\/graphql$/,"/global"):"https://graphql.burdenoff.com/global"}function I(t){let e=new Map;for(let i of t){if(e.has(i.id))throw new b$1(`Duplicate module id: '${i.id}'`,"DUPLICATE_MODULE");e.set(i.id,i);}for(let i of t)for(let a of i.dependsOn??[])if(!e.has(a))throw new j$1(i.id,a);let r=[],o=new Set,n=new Set,s=(i,a)=>{if(!n.has(i.id)){if(o.has(i.id))throw new k([...a,i.id]);o.add(i.id);for(let l of i.dependsOn??[]){let u=e.get(l);u&&s(u,[...a,i.id]);}o.delete(i.id),n.add(i.id),r.push(i);}};for(let i of t)s(i,[]);return r}function De(t,e){let r=I(e),o={};for(let n of r){let s=n.attach(t);t.modules.set(n.id,s),o[n.id]=s;}return {ctx:t,modules:o}}
+export{h as a,m as b,g as c,S as d,b as e,T as f,v as g,O as h,y as i,Y as j,I as k,De as l};

package/dist/core/index.cjs

@@ -0,0 +1,2 @@
+'use strict';var graphqlRequest=require('graphql-request'),promises=require('fs/promises'),path=require('path');var j=["password","secret","clientSecret","apiKey","token","mfaCode","accessToken","refreshToken","workspaceToken","authorization"],B=/\b(eyJ[A-Za-z0-9_-]+\.[A-Za-z0-9_-]+\.[A-Za-z0-9_-]+)\b/g;function p(t){let e=t.replace(B,"<redacted-jwt>");for(let r of j){let o=new RegExp(`("${r}"\\s*:\\s*")[^"]*(")`,"gi");e=e.replace(o,"$1<redacted>$2");}return e}var c=class extends Error{code;cause;constructor(e,r="SDK_ERROR",o){super(p(e)),this.name="SdkError",this.code=r,this.cause=o;}},k=class extends c{constructor(e="Authentication failed",r){super(e,"AUTHENTICATION_ERROR",r),this.name="AuthenticationError";}},f=class extends c{constructor(e="Not authorized",r){super(e,"AUTHORIZATION_ERROR",r),this.name="AuthorizationError";}},m=class extends c{constructor(e,r){super(e,"NETWORK_ERROR",r),this.name="NetworkError";}},L=class extends c{constructor(e,r){super(e,"VALIDATION_ERROR",r),this.name="ValidationError";}},T=class extends c{constructor(e="Rate limit exceeded",r){super(e,"RATE_LIMIT_ERROR",r),this.name="RateLimitError";}},M=class extends c{constructor(e="Device code expired"){super(e,"DEVICE_CODE_EXPIRED"),this.name="DeviceCodeExpiredError";}},q=class extends c{constructor(e="Device authorization denied by user"){super(e,"DEVICE_CODE_DENIED"),this.name="DeviceCodeDeniedError";}},y=class extends c{constructor(e,r){super(`Module '${e}' declares dependency on '${r}', but '${r}' is not in the module list.`,"MISSING_DEPENDENCY"),this.name="MissingDependencyError";}},w=class extends c{constructor(e){super(`Circular dependency detected among modules: ${e.join(" -> ")}`,"CIRCULAR_DEPENDENCY"),this.name="CircularDependencyError";}},E=class extends c{constructor(e){super(`Module '${e}' is not mounted on this SDK instance. Add it to the modules array passed to createSdk().`,"MODULE_NOT_MOUNTED"),this.name="ModuleNotMountedError";}};var Q=3e4,K=3,z=1e3,W=300*1e3;function H(t,e){return new Promise((r,o)=>{if(e?.aborted)return o(new c("Aborted","ABORTED"));let n=setTimeout(()=>r(),t);e?.addEventListener("abort",()=>{clearTimeout(n),o(new c("Aborted","ABORTED"));});})}function J(t){if(t instanceof TypeError)return  true;if(t&&typeof t=="object"&&"response"in t){let e=t.response;if(e&&typeof e.status=="number"&&e.status>=500)return  true}return  false}function V(t){if(t&&typeof t=="object"&&"response"in t){let e=t.response;if(e&&typeof e.status=="number"&&e.status>=400&&e.status<500)return e.status}return null}function I(t){if(t&&typeof t=="object"&&"response"in t){let e=t,r=e.response?.errors?.[0];if(r?.message)return p(r.message);if(e.message)return p(e.message)}return t instanceof Error?p(t.message):p(String(t))}var x=class{workspaceClient;globalClient;opts;constructor(e){this.opts=e,this.workspaceClient=new graphqlRequest.GraphQLClient(e.workspaceEndpoint),this.globalClient=new graphqlRequest.GraphQLClient(e.globalEndpoint);}async buildHeaders(e){let r={},o=this.opts.auth.getApiKey();o&&(r["X-API-Key"]=o);let n=await this.opts.auth.getTokens();if(n?.accessToken&&(r.Authorization=`Bearer ${n.accessToken}`),e==="workspace"){let s=this.opts.auth.getWorkspaceToken();s&&(r["X-Workspace-Authorization"]=`Bearer ${s}`);}return r}isExpiringSoon(e){return e?Date.now()+W>=e:false}async ensureFresh(){if(this.opts.autoRefresh===false)return;let e=await this.opts.auth.getTokens();e?.expiresAt&&this.isExpiringSoon(e.expiresAt)&&await this.performTokenRefresh();}async performTokenRefresh(){let e=await this.opts.auth.getTokens();if(!e?.refreshToken)throw new k("No refresh token available");let o=await this.globalClient.request("mutation RefreshToken($token: String!) { refreshToken(token: $token) { accessToken refreshToken expiresIn } }",{token:e.refreshToken}),n=Date.now()+o.refreshToken.expiresIn*1e3,s={accessToken:o.refreshToken.accessToken,refreshToken:o.refreshToken.refreshToken,expiresAt:n};return await this.opts.auth.setTokens(s),this.opts.onTokenRefresh&&await this.opts.onTokenRefresh(s),s}async executeWithRetry(e,r,o,n,s){let i=this.opts.timeout??Q,a;for(let u=0;u<K;u++){let O=new AbortController,P=s?.signal??this.opts.defaultSignal,_=()=>O.abort();P?.addEventListener("abort",_);let U=setTimeout(()=>O.abort(),i);try{let g=await this.buildHeaders(r);return await e.request({document:o,variables:n,signal:O.signal,requestHeaders:g})}catch(g){if(a=g,V(g)!==null)break;if(J(g)&&u<K-1){await H(z*2**u,P);continue}break}finally{clearTimeout(U),P?.removeEventListener("abort",_);}}let l=V(a);if(l!==null){let u=I(a);switch(l){case 401:throw new k(u,a);case 403:throw new f(u,a);case 429:throw new T(u,a);default:throw new c(u,`HTTP_${l}`,a)}}throw a instanceof TypeError?new m(I(a),a):a instanceof c?a:new c(I(a),"SDK_ERROR",a)}async globalRequest(e,r,o){return this.executeWithRetry(this.globalClient,"global",e,r,o)}async workspaceRequest(e,r,o){return await this.ensureFresh(),this.executeWithRetry(this.workspaceClient,"workspace",e,r,o)}async workspaceAuthOnlyRequest(e,r,o){return this.executeWithRetry(this.workspaceClient,"workspace",e,r,o)}};function S(t,e){return e==="workspace"?{request:(r,o,n)=>t.workspaceRequest(r,o,n)}:e==="global"?{request:(r,o,n)=>t.globalRequest(r,o,n)}:{request:(r,o,n)=>t.workspaceAuthOnlyRequest(r,o,n)}}var h=class{tokens;constructor(e){this.tokens=e??null;}async get(){return this.tokens?{...this.tokens}:null}async set(e){this.tokens={...e};}async clear(){this.tokens=null;}},v=class{constructor(e){this.opts=e;}opts;async get(){try{let e=await promises.readFile(this.opts.path,"utf8"),r=JSON.parse(e);return r&&typeof r.accessToken=="string"?{accessToken:r.accessToken,refreshToken:r.refreshToken??"",expiresAt:typeof r.expiresAt=="number"?r.expiresAt:void 0}:null}catch(e){if($(e)==="ENOENT")return null;throw new Error(p(`FileTokenStore.get failed: ${e.message}`))}}async set(e){await promises.mkdir(path.dirname(this.opts.path),{recursive:true}),await promises.writeFile(this.opts.path,JSON.stringify(e,null,2),{mode:384});}async clear(){try{await promises.unlink(this.opts.path);}catch(e){if($(e)!=="ENOENT")throw e}}};function $(t){if(t&&typeof t=="object"&&"code"in t&&typeof t.code=="string")return t.code}var A=class{constructor(e){this.opts=e;}opts;async get(){let e=process.env[this.opts.accessTokenVar];if(!e)return null;let r=this.opts.refreshTokenVar?process.env[this.opts.refreshTokenVar]??"":"",o=this.opts.expiresAtVar?process.env[this.opts.expiresAtVar]:void 0,n=o?Number.parseInt(o,10):void 0;return {accessToken:e,refreshToken:r,expiresAt:n}}async set(e){}async clear(){}};var R=class{constructor(e){this.tokenStore=e;}tokenStore;workspaceToken=null;apiKey=null;async getTokens(){return this.tokenStore.get()}async setTokens(e){await this.tokenStore.set(e);}async clearTokens(){await this.tokenStore.clear(),this.workspaceToken=null;}setWorkspaceToken(e){this.workspaceToken=e;}getWorkspaceToken(){return this.workspaceToken}setApiKey(e){this.apiKey=e;}getApiKey(){return this.apiKey}async isAuthenticated(){return (await this.getTokens())?.accessToken?true:!!this.apiKey}};function C(t){let e=t?.tokenStore??new h(t?.tokens??null),r=new R(e);return t?.workspaceToken&&r.setWorkspaceToken(t.workspaceToken),t?.apiKey&&r.setApiKey(t.apiKey),r}var F={debug:10,info:20,warn:30,error:40};function D(t={}){let e=F[t.level??"warn"],r=t.prefix?`[${t.prefix}]`:"";function o(n,s,i){if(F[n]<e)return;let a=`${r}[${n}] ${p(s)}`,l=i?JSON.parse(p(JSON.stringify(i))):void 0;n==="error"||n==="warn"?console.error(a,l??""):console.warn(a,l??"");}return {debug:(n,s)=>o("debug",n,s),info:(n,s)=>o("info",n,s),warn:(n,s)=>o("warn",n,s),error:(n,s)=>o("error",n,s)}}var b=class{apis=new Map;set(e,r){this.apis.set(e,r);}get(e){if(!this.apis.has(e))throw new E(e);return this.apis.get(e)}has(e){return this.apis.has(e)}ids(){return Array.from(this.apis.keys())}};function re(t){let e=t.productVersion??"0.0.0",r=t.env??oe(t.workspaceEndpoint),o=t.logger??D({level:t.logLevel??"warn",prefix:t.productName}),n=t.accessToken?{accessToken:t.accessToken,refreshToken:t.refreshToken??""}:null,s=C({tokens:n,workspaceToken:t.workspaceToken??null,apiKey:t.apiKey??null,tokenStore:t.tokenStore}),a={issuer:t.oidcIssuer??ne(t.globalEndpoint),clientId:t.clientId,clientSecret:t.clientSecret,redirectUri:t.redirectUri},l=new x({workspaceEndpoint:t.workspaceEndpoint,globalEndpoint:t.globalEndpoint,auth:s,timeout:t.timeout,autoRefresh:t.autoRefresh,onTokenRefresh:t.onTokenRefresh,defaultSignal:t.signal});return {productName:t.productName,productVersion:e,env:r,gql:{workspace:S(l,"workspace"),global:S(l,"global"),workspaceAuthOnly:S(l,"workspaceAuthOnly")},client:l,auth:s,oidc:a,logger:o,modules:new b,signal:t.signal}}function oe(t){return t.includes("localhost")||t.includes("127.0.0.1")?"local":t.includes("alpha")?"alpha":t.includes("dev")?"dev":"prod"}function ne(t){return t.includes("localhost")||t.includes("127.0.0.1")?t.replace(/\/graphql$/,"").replace(/\/global\/graphql$/,"/global"):"https://graphql.burdenoff.com/global"}function N(t){let e=new Map;for(let i of t){if(e.has(i.id))throw new c(`Duplicate module id: '${i.id}'`,"DUPLICATE_MODULE");e.set(i.id,i);}for(let i of t)for(let a of i.dependsOn??[])if(!e.has(a))throw new y(i.id,a);let r=[],o=new Set,n=new Set,s=(i,a)=>{if(!n.has(i.id)){if(o.has(i.id))throw new w([...a,i.id]);o.add(i.id);for(let l of i.dependsOn??[]){let u=e.get(l);u&&s(u,[...a,i.id]);}o.delete(i.id),n.add(i.id),r.push(i);}};for(let i of t)s(i,[]);return r}function Ve(t,e){let r=N(e),o={};for(let n of r){let s=n.attach(t);t.modules.set(n.id,s),o[n.id]=s;}return {ctx:t,modules:o}}
+exports.AuthStore=R;exports.AuthenticationError=k;exports.AuthorizationError=f;exports.BaseGraphQLClient=x;exports.CircularDependencyError=w;exports.DeviceCodeDeniedError=q;exports.DeviceCodeExpiredError=M;exports.EnvTokenStore=A;exports.FileTokenStore=v;exports.InMemoryTokenStore=h;exports.MissingDependencyError=y;exports.ModuleNotMountedError=E;exports.ModuleRegistry=b;exports.NetworkError=m;exports.RateLimitError=T;exports.SdkError=c;exports.ValidationError=L;exports.buildContext=re;exports.createAuthStore=C;exports.createLogger=D;exports.createSdk=Ve;exports.gqlClient=S;exports.redactTokens=p;exports.sortModules=N;

package/dist/core/index.d.cts

@@ -0,0 +1,52 @@
+import { S as SdkModule, a as SdkContext } from '../module-JDbvil5h.cjs';
+export { A as AuthStore, B as BaseGraphQLClient, C as ContextInput, E as Env, b as EnvTokenStore, c as EnvTokenStoreOptions, F as FileTokenStore, d as FileTokenStoreOptions, G as GqlClient, e as GqlRequestOptions, I as InMemoryTokenStore, J as Json, L as LogLevel, f as Logger, M as ModuleRegistry, O as OidcConfig, P as PaginationInput, g as SdkContextConfig, T as TokenPair, h as TokenStore, i as buildContext, j as createAuthStore, k as createLogger, l as gqlClient, s as sortModules } from '../module-JDbvil5h.cjs';
+import 'graphql-request';
+
+declare function redactTokens(input: string): string;
+declare class SdkError extends Error {
+    readonly code: string;
+    readonly cause: unknown;
+    constructor(message: string, code?: string, cause?: unknown);
+}
+declare class AuthenticationError extends SdkError {
+    constructor(message?: string, cause?: unknown);
+}
+declare class AuthorizationError extends SdkError {
+    constructor(message?: string, cause?: unknown);
+}
+declare class NetworkError extends SdkError {
+    constructor(message: string, cause?: unknown);
+}
+declare class ValidationError extends SdkError {
+    constructor(message: string, cause?: unknown);
+}
+declare class RateLimitError extends SdkError {
+    constructor(message?: string, cause?: unknown);
+}
+declare class DeviceCodeExpiredError extends SdkError {
+    constructor(message?: string);
+}
+declare class DeviceCodeDeniedError extends SdkError {
+    constructor(message?: string);
+}
+declare class MissingDependencyError extends SdkError {
+    constructor(moduleId: string, missingDep: string);
+}
+declare class CircularDependencyError extends SdkError {
+    constructor(cycle: readonly string[]);
+}
+declare class ModuleNotMountedError extends SdkError {
+    constructor(moduleId: string);
+}
+
+interface MountedSdk<MountedModules extends readonly SdkModule[]> {
+    ctx: SdkContext;
+    modules: {
+        [K in MountedModules[number]['id']]: ReturnType<Extract<MountedModules[number], {
+            id: K;
+        }>['attach']>;
+    };
+}
+declare function createSdk<const Modules extends readonly SdkModule[]>(ctx: SdkContext, modules: Modules): MountedSdk<Modules>;
+
+export { AuthenticationError, AuthorizationError, CircularDependencyError, DeviceCodeDeniedError, DeviceCodeExpiredError, MissingDependencyError, ModuleNotMountedError, type MountedSdk, NetworkError, RateLimitError, SdkContext, SdkError, SdkModule, ValidationError, createSdk, redactTokens };

package/dist/core/index.d.ts

@@ -0,0 +1,52 @@
+import { S as SdkModule, a as SdkContext } from '../module-JDbvil5h.js';
+export { A as AuthStore, B as BaseGraphQLClient, C as ContextInput, E as Env, b as EnvTokenStore, c as EnvTokenStoreOptions, F as FileTokenStore, d as FileTokenStoreOptions, G as GqlClient, e as GqlRequestOptions, I as InMemoryTokenStore, J as Json, L as LogLevel, f as Logger, M as ModuleRegistry, O as OidcConfig, P as PaginationInput, g as SdkContextConfig, T as TokenPair, h as TokenStore, i as buildContext, j as createAuthStore, k as createLogger, l as gqlClient, s as sortModules } from '../module-JDbvil5h.js';
+import 'graphql-request';
+
+declare function redactTokens(input: string): string;
+declare class SdkError extends Error {
+    readonly code: string;
+    readonly cause: unknown;
+    constructor(message: string, code?: string, cause?: unknown);
+}
+declare class AuthenticationError extends SdkError {
+    constructor(message?: string, cause?: unknown);
+}
+declare class AuthorizationError extends SdkError {
+    constructor(message?: string, cause?: unknown);
+}
+declare class NetworkError extends SdkError {
+    constructor(message: string, cause?: unknown);
+}
+declare class ValidationError extends SdkError {
+    constructor(message: string, cause?: unknown);
+}
+declare class RateLimitError extends SdkError {
+    constructor(message?: string, cause?: unknown);
+}
+declare class DeviceCodeExpiredError extends SdkError {
+    constructor(message?: string);
+}
+declare class DeviceCodeDeniedError extends SdkError {
+    constructor(message?: string);
+}
+declare class MissingDependencyError extends SdkError {
+    constructor(moduleId: string, missingDep: string);
+}
+declare class CircularDependencyError extends SdkError {
+    constructor(cycle: readonly string[]);
+}
+declare class ModuleNotMountedError extends SdkError {
+    constructor(moduleId: string);
+}
+
+interface MountedSdk<MountedModules extends readonly SdkModule[]> {
+    ctx: SdkContext;
+    modules: {
+        [K in MountedModules[number]['id']]: ReturnType<Extract<MountedModules[number], {
+            id: K;
+        }>['attach']>;
+    };
+}
+declare function createSdk<const Modules extends readonly SdkModule[]>(ctx: SdkContext, modules: Modules): MountedSdk<Modules>;
+
+export { AuthenticationError, AuthorizationError, CircularDependencyError, DeviceCodeDeniedError, DeviceCodeExpiredError, MissingDependencyError, ModuleNotMountedError, type MountedSdk, NetworkError, RateLimitError, SdkContext, SdkError, SdkModule, ValidationError, createSdk, redactTokens };

package/dist/core/index.js

@@ -0,0 +1 @@
+export{f as AuthStore,a as BaseGraphQLClient,e as EnvTokenStore,d as FileTokenStore,c as InMemoryTokenStore,i as ModuleRegistry,j as buildContext,g as createAuthStore,h as createLogger,l as createSdk,b as gqlClient,k as sortModules}from'../chunk-YGVAZ3D7.js';export{c as AuthenticationError,d as AuthorizationError,k as CircularDependencyError,i as DeviceCodeDeniedError,h as DeviceCodeExpiredError,j as MissingDependencyError,l as ModuleNotMountedError,e as NetworkError,g as RateLimitError,b as SdkError,f as ValidationError,a as redactTokens}from'../chunk-NEREAHJ6.js';

package/dist/index.cjs

@@ -0,0 +1,2 @@
+'use strict';var graphqlRequest=require('graphql-request'),promises=require('fs/promises'),path=require('path');var j=["password","secret","clientSecret","apiKey","token","mfaCode","accessToken","refreshToken","workspaceToken","authorization"],B=/\b(eyJ[A-Za-z0-9_-]+\.[A-Za-z0-9_-]+\.[A-Za-z0-9_-]+)\b/g;function p(t){let e=t.replace(B,"<redacted-jwt>");for(let r of j){let o=new RegExp(`("${r}"\\s*:\\s*")[^"]*(")`,"gi");e=e.replace(o,"$1<redacted>$2");}return e}var c=class extends Error{code;cause;constructor(e,r="SDK_ERROR",o){super(p(e)),this.name="SdkError",this.code=r,this.cause=o;}},k=class extends c{constructor(e="Authentication failed",r){super(e,"AUTHENTICATION_ERROR",r),this.name="AuthenticationError";}},f=class extends c{constructor(e="Not authorized",r){super(e,"AUTHORIZATION_ERROR",r),this.name="AuthorizationError";}},m=class extends c{constructor(e,r){super(e,"NETWORK_ERROR",r),this.name="NetworkError";}},L=class extends c{constructor(e,r){super(e,"VALIDATION_ERROR",r),this.name="ValidationError";}},T=class extends c{constructor(e="Rate limit exceeded",r){super(e,"RATE_LIMIT_ERROR",r),this.name="RateLimitError";}},M=class extends c{constructor(e="Device code expired"){super(e,"DEVICE_CODE_EXPIRED"),this.name="DeviceCodeExpiredError";}},q=class extends c{constructor(e="Device authorization denied by user"){super(e,"DEVICE_CODE_DENIED"),this.name="DeviceCodeDeniedError";}},y=class extends c{constructor(e,r){super(`Module '${e}' declares dependency on '${r}', but '${r}' is not in the module list.`,"MISSING_DEPENDENCY"),this.name="MissingDependencyError";}},w=class extends c{constructor(e){super(`Circular dependency detected among modules: ${e.join(" -> ")}`,"CIRCULAR_DEPENDENCY"),this.name="CircularDependencyError";}},E=class extends c{constructor(e){super(`Module '${e}' is not mounted on this SDK instance. Add it to the modules array passed to createSdk().`,"MODULE_NOT_MOUNTED"),this.name="ModuleNotMountedError";}};var Q=3e4,K=3,z=1e3,W=300*1e3;function H(t,e){return new Promise((r,o)=>{if(e?.aborted)return o(new c("Aborted","ABORTED"));let n=setTimeout(()=>r(),t);e?.addEventListener("abort",()=>{clearTimeout(n),o(new c("Aborted","ABORTED"));});})}function J(t){if(t instanceof TypeError)return  true;if(t&&typeof t=="object"&&"response"in t){let e=t.response;if(e&&typeof e.status=="number"&&e.status>=500)return  true}return  false}function V(t){if(t&&typeof t=="object"&&"response"in t){let e=t.response;if(e&&typeof e.status=="number"&&e.status>=400&&e.status<500)return e.status}return null}function I(t){if(t&&typeof t=="object"&&"response"in t){let e=t,r=e.response?.errors?.[0];if(r?.message)return p(r.message);if(e.message)return p(e.message)}return t instanceof Error?p(t.message):p(String(t))}var x=class{workspaceClient;globalClient;opts;constructor(e){this.opts=e,this.workspaceClient=new graphqlRequest.GraphQLClient(e.workspaceEndpoint),this.globalClient=new graphqlRequest.GraphQLClient(e.globalEndpoint);}async buildHeaders(e){let r={},o=this.opts.auth.getApiKey();o&&(r["X-API-Key"]=o);let n=await this.opts.auth.getTokens();if(n?.accessToken&&(r.Authorization=`Bearer ${n.accessToken}`),e==="workspace"){let s=this.opts.auth.getWorkspaceToken();s&&(r["X-Workspace-Authorization"]=`Bearer ${s}`);}return r}isExpiringSoon(e){return e?Date.now()+W>=e:false}async ensureFresh(){if(this.opts.autoRefresh===false)return;let e=await this.opts.auth.getTokens();e?.expiresAt&&this.isExpiringSoon(e.expiresAt)&&await this.performTokenRefresh();}async performTokenRefresh(){let e=await this.opts.auth.getTokens();if(!e?.refreshToken)throw new k("No refresh token available");let o=await this.globalClient.request("mutation RefreshToken($token: String!) { refreshToken(token: $token) { accessToken refreshToken expiresIn } }",{token:e.refreshToken}),n=Date.now()+o.refreshToken.expiresIn*1e3,s={accessToken:o.refreshToken.accessToken,refreshToken:o.refreshToken.refreshToken,expiresAt:n};return await this.opts.auth.setTokens(s),this.opts.onTokenRefresh&&await this.opts.onTokenRefresh(s),s}async executeWithRetry(e,r,o,n,s){let i=this.opts.timeout??Q,a;for(let u=0;u<K;u++){let O=new AbortController,P=s?.signal??this.opts.defaultSignal,_=()=>O.abort();P?.addEventListener("abort",_);let U=setTimeout(()=>O.abort(),i);try{let g=await this.buildHeaders(r);return await e.request({document:o,variables:n,signal:O.signal,requestHeaders:g})}catch(g){if(a=g,V(g)!==null)break;if(J(g)&&u<K-1){await H(z*2**u,P);continue}break}finally{clearTimeout(U),P?.removeEventListener("abort",_);}}let l=V(a);if(l!==null){let u=I(a);switch(l){case 401:throw new k(u,a);case 403:throw new f(u,a);case 429:throw new T(u,a);default:throw new c(u,`HTTP_${l}`,a)}}throw a instanceof TypeError?new m(I(a),a):a instanceof c?a:new c(I(a),"SDK_ERROR",a)}async globalRequest(e,r,o){return this.executeWithRetry(this.globalClient,"global",e,r,o)}async workspaceRequest(e,r,o){return await this.ensureFresh(),this.executeWithRetry(this.workspaceClient,"workspace",e,r,o)}async workspaceAuthOnlyRequest(e,r,o){return this.executeWithRetry(this.workspaceClient,"workspace",e,r,o)}};function S(t,e){return e==="workspace"?{request:(r,o,n)=>t.workspaceRequest(r,o,n)}:e==="global"?{request:(r,o,n)=>t.globalRequest(r,o,n)}:{request:(r,o,n)=>t.workspaceAuthOnlyRequest(r,o,n)}}var h=class{tokens;constructor(e){this.tokens=e??null;}async get(){return this.tokens?{...this.tokens}:null}async set(e){this.tokens={...e};}async clear(){this.tokens=null;}},v=class{constructor(e){this.opts=e;}opts;async get(){try{let e=await promises.readFile(this.opts.path,"utf8"),r=JSON.parse(e);return r&&typeof r.accessToken=="string"?{accessToken:r.accessToken,refreshToken:r.refreshToken??"",expiresAt:typeof r.expiresAt=="number"?r.expiresAt:void 0}:null}catch(e){if($(e)==="ENOENT")return null;throw new Error(p(`FileTokenStore.get failed: ${e.message}`))}}async set(e){await promises.mkdir(path.dirname(this.opts.path),{recursive:true}),await promises.writeFile(this.opts.path,JSON.stringify(e,null,2),{mode:384});}async clear(){try{await promises.unlink(this.opts.path);}catch(e){if($(e)!=="ENOENT")throw e}}};function $(t){if(t&&typeof t=="object"&&"code"in t&&typeof t.code=="string")return t.code}var A=class{constructor(e){this.opts=e;}opts;async get(){let e=process.env[this.opts.accessTokenVar];if(!e)return null;let r=this.opts.refreshTokenVar?process.env[this.opts.refreshTokenVar]??"":"",o=this.opts.expiresAtVar?process.env[this.opts.expiresAtVar]:void 0,n=o?Number.parseInt(o,10):void 0;return {accessToken:e,refreshToken:r,expiresAt:n}}async set(e){}async clear(){}};var R=class{constructor(e){this.tokenStore=e;}tokenStore;workspaceToken=null;apiKey=null;async getTokens(){return this.tokenStore.get()}async setTokens(e){await this.tokenStore.set(e);}async clearTokens(){await this.tokenStore.clear(),this.workspaceToken=null;}setWorkspaceToken(e){this.workspaceToken=e;}getWorkspaceToken(){return this.workspaceToken}setApiKey(e){this.apiKey=e;}getApiKey(){return this.apiKey}async isAuthenticated(){return (await this.getTokens())?.accessToken?true:!!this.apiKey}};function C(t){let e=t?.tokenStore??new h(t?.tokens??null),r=new R(e);return t?.workspaceToken&&r.setWorkspaceToken(t.workspaceToken),t?.apiKey&&r.setApiKey(t.apiKey),r}var F={debug:10,info:20,warn:30,error:40};function D(t={}){let e=F[t.level??"warn"],r=t.prefix?`[${t.prefix}]`:"";function o(n,s,i){if(F[n]<e)return;let a=`${r}[${n}] ${p(s)}`,l=i?JSON.parse(p(JSON.stringify(i))):void 0;n==="error"||n==="warn"?console.error(a,l??""):console.warn(a,l??"");}return {debug:(n,s)=>o("debug",n,s),info:(n,s)=>o("info",n,s),warn:(n,s)=>o("warn",n,s),error:(n,s)=>o("error",n,s)}}var b=class{apis=new Map;set(e,r){this.apis.set(e,r);}get(e){if(!this.apis.has(e))throw new E(e);return this.apis.get(e)}has(e){return this.apis.has(e)}ids(){return Array.from(this.apis.keys())}};function re(t){let e=t.productVersion??"0.0.0",r=t.env??oe(t.workspaceEndpoint),o=t.logger??D({level:t.logLevel??"warn",prefix:t.productName}),n=t.accessToken?{accessToken:t.accessToken,refreshToken:t.refreshToken??""}:null,s=C({tokens:n,workspaceToken:t.workspaceToken??null,apiKey:t.apiKey??null,tokenStore:t.tokenStore}),a={issuer:t.oidcIssuer??ne(t.globalEndpoint),clientId:t.clientId,clientSecret:t.clientSecret,redirectUri:t.redirectUri},l=new x({workspaceEndpoint:t.workspaceEndpoint,globalEndpoint:t.globalEndpoint,auth:s,timeout:t.timeout,autoRefresh:t.autoRefresh,onTokenRefresh:t.onTokenRefresh,defaultSignal:t.signal});return {productName:t.productName,productVersion:e,env:r,gql:{workspace:S(l,"workspace"),global:S(l,"global"),workspaceAuthOnly:S(l,"workspaceAuthOnly")},client:l,auth:s,oidc:a,logger:o,modules:new b,signal:t.signal}}function oe(t){return t.includes("localhost")||t.includes("127.0.0.1")?"local":t.includes("alpha")?"alpha":t.includes("dev")?"dev":"prod"}function ne(t){return t.includes("localhost")||t.includes("127.0.0.1")?t.replace(/\/graphql$/,"").replace(/\/global\/graphql$/,"/global"):"https://graphql.burdenoff.com/global"}function N(t){let e=new Map;for(let i of t){if(e.has(i.id))throw new c(`Duplicate module id: '${i.id}'`,"DUPLICATE_MODULE");e.set(i.id,i);}for(let i of t)for(let a of i.dependsOn??[])if(!e.has(a))throw new y(i.id,a);let r=[],o=new Set,n=new Set,s=(i,a)=>{if(!n.has(i.id)){if(o.has(i.id))throw new w([...a,i.id]);o.add(i.id);for(let l of i.dependsOn??[]){let u=e.get(l);u&&s(u,[...a,i.id]);}o.delete(i.id),n.add(i.id),r.push(i);}};for(let i of t)s(i,[]);return r}function Ve(t,e){let r=N(e),o={};for(let n of r){let s=n.attach(t);t.modules.set(n.id,s),o[n.id]=s;}return {ctx:t,modules:o}}
+exports.AuthStore=R;exports.AuthenticationError=k;exports.AuthorizationError=f;exports.BaseGraphQLClient=x;exports.CircularDependencyError=w;exports.DeviceCodeDeniedError=q;exports.DeviceCodeExpiredError=M;exports.EnvTokenStore=A;exports.FileTokenStore=v;exports.InMemoryTokenStore=h;exports.MissingDependencyError=y;exports.ModuleNotMountedError=E;exports.ModuleRegistry=b;exports.NetworkError=m;exports.RateLimitError=T;exports.SdkError=c;exports.ValidationError=L;exports.buildContext=re;exports.createAuthStore=C;exports.createLogger=D;exports.createSdk=Ve;exports.gqlClient=S;exports.redactTokens=p;exports.sortModules=N;

package/dist/index.d.cts

@@ -0,0 +1,3 @@
+export { AuthenticationError, AuthorizationError, CircularDependencyError, DeviceCodeDeniedError, DeviceCodeExpiredError, MissingDependencyError, ModuleNotMountedError, MountedSdk, NetworkError, RateLimitError, SdkError, ValidationError, createSdk, redactTokens } from './core/index.cjs';
+export { A as AuthStore, B as BaseGraphQLClient, C as ContextInput, E as Env, b as EnvTokenStore, c as EnvTokenStoreOptions, F as FileTokenStore, d as FileTokenStoreOptions, G as GqlClient, e as GqlRequestOptions, I as InMemoryTokenStore, J as Json, L as LogLevel, f as Logger, M as ModuleRegistry, O as OidcConfig, P as PaginationInput, a as SdkContext, g as SdkContextConfig, S as SdkModule, T as TokenPair, h as TokenStore, i as buildContext, j as createAuthStore, k as createLogger, l as gqlClient, s as sortModules } from './module-JDbvil5h.cjs';
+import 'graphql-request';

package/dist/index.d.ts

@@ -0,0 +1,3 @@
+export { AuthenticationError, AuthorizationError, CircularDependencyError, DeviceCodeDeniedError, DeviceCodeExpiredError, MissingDependencyError, ModuleNotMountedError, MountedSdk, NetworkError, RateLimitError, SdkError, ValidationError, createSdk, redactTokens } from './core/index.js';
+export { A as AuthStore, B as BaseGraphQLClient, C as ContextInput, E as Env, b as EnvTokenStore, c as EnvTokenStoreOptions, F as FileTokenStore, d as FileTokenStoreOptions, G as GqlClient, e as GqlRequestOptions, I as InMemoryTokenStore, J as Json, L as LogLevel, f as Logger, M as ModuleRegistry, O as OidcConfig, P as PaginationInput, a as SdkContext, g as SdkContextConfig, S as SdkModule, T as TokenPair, h as TokenStore, i as buildContext, j as createAuthStore, k as createLogger, l as gqlClient, s as sortModules } from './module-JDbvil5h.js';
+import 'graphql-request';

package/dist/index.js

@@ -0,0 +1 @@
+export{f as AuthStore,a as BaseGraphQLClient,e as EnvTokenStore,d as FileTokenStore,c as InMemoryTokenStore,i as ModuleRegistry,j as buildContext,g as createAuthStore,h as createLogger,l as createSdk,b as gqlClient,k as sortModules}from'./chunk-YGVAZ3D7.js';export{c as AuthenticationError,d as AuthorizationError,k as CircularDependencyError,i as DeviceCodeDeniedError,h as DeviceCodeExpiredError,j as MissingDependencyError,l as ModuleNotMountedError,e as NetworkError,g as RateLimitError,b as SdkError,f as ValidationError,a as redactTokens}from'./chunk-NEREAHJ6.js';

package/dist/module-JDbvil5h.d.cts

@@ -0,0 +1,194 @@
+import { RequestDocument, Variables } from 'graphql-request';
+
+interface TokenPair {
+    accessToken: string;
+    refreshToken: string;
+    expiresAt?: number;
+}
+type Json = unknown;
+type Env = 'prod' | 'alpha' | 'dev' | 'local';
+interface PaginationInput {
+    limit?: number;
+    offset?: number;
+    sortBy?: string;
+    sortOrder?: 'asc' | 'desc';
+}
+interface ContextInput {
+    userId?: string;
+    workspaceId?: string;
+    projectId?: string;
+    appId?: string;
+    custom?: Record<string, unknown>;
+}
+
+interface TokenStore {
+    get(): Promise<TokenPair | null>;
+    set(tokens: TokenPair): Promise<void>;
+    clear(): Promise<void>;
+}
+declare class InMemoryTokenStore implements TokenStore {
+    private tokens;
+    constructor(initial?: TokenPair | null);
+    get(): Promise<TokenPair | null>;
+    set(tokens: TokenPair): Promise<void>;
+    clear(): Promise<void>;
+}
+interface FileTokenStoreOptions {
+    path: string;
+}
+declare class FileTokenStore implements TokenStore {
+    private readonly opts;
+    constructor(opts: FileTokenStoreOptions);
+    get(): Promise<TokenPair | null>;
+    set(tokens: TokenPair): Promise<void>;
+    clear(): Promise<void>;
+}
+interface EnvTokenStoreOptions {
+    accessTokenVar: string;
+    refreshTokenVar?: string;
+    expiresAtVar?: string;
+}
+declare class EnvTokenStore implements TokenStore {
+    private readonly opts;
+    constructor(opts: EnvTokenStoreOptions);
+    get(): Promise<TokenPair | null>;
+    set(_tokens: TokenPair): Promise<void>;
+    clear(): Promise<void>;
+}
+
+declare class AuthStore {
+    private readonly tokenStore;
+    private workspaceToken;
+    private apiKey;
+    constructor(tokenStore: TokenStore);
+    getTokens(): Promise<TokenPair | null>;
+    setTokens(tokens: TokenPair): Promise<void>;
+    clearTokens(): Promise<void>;
+    setWorkspaceToken(token: string | null): void;
+    getWorkspaceToken(): string | null;
+    setApiKey(key: string | null): void;
+    getApiKey(): string | null;
+    isAuthenticated(): Promise<boolean>;
+}
+declare function createAuthStore(initial?: {
+    tokens?: TokenPair | null;
+    workspaceToken?: string | null;
+    apiKey?: string | null;
+    tokenStore?: TokenStore;
+}): AuthStore;
+
+interface BaseGraphQLClientOptions {
+    workspaceEndpoint: string;
+    globalEndpoint: string;
+    auth: AuthStore;
+    timeout?: number;
+    autoRefresh?: boolean;
+    onTokenRefresh?: (tokens: {
+        accessToken: string;
+        refreshToken: string;
+        expiresAt?: number;
+    }) => void | Promise<void>;
+    defaultSignal?: AbortSignal;
+}
+interface GqlRequestOptions {
+    signal?: AbortSignal;
+}
+declare class BaseGraphQLClient {
+    private readonly workspaceClient;
+    private readonly globalClient;
+    private readonly opts;
+    constructor(opts: BaseGraphQLClientOptions);
+    private buildHeaders;
+    private isExpiringSoon;
+    private ensureFresh;
+    performTokenRefresh(): Promise<{
+        accessToken: string;
+        refreshToken: string;
+        expiresAt?: number;
+    }>;
+    private executeWithRetry;
+    globalRequest<T>(document: RequestDocument, variables?: Variables, options?: GqlRequestOptions): Promise<T>;
+    workspaceRequest<T>(document: RequestDocument, variables?: Variables, options?: GqlRequestOptions): Promise<T>;
+    workspaceAuthOnlyRequest<T>(document: RequestDocument, variables?: Variables, options?: GqlRequestOptions): Promise<T>;
+}
+interface GqlClient {
+    request<T>(document: RequestDocument, variables?: Variables, options?: GqlRequestOptions): Promise<T>;
+}
+declare function gqlClient(base: BaseGraphQLClient, scope: 'workspace' | 'global' | 'workspaceAuthOnly'): GqlClient;
+
+type LogLevel = 'debug' | 'info' | 'warn' | 'error';
+interface Logger {
+    debug(msg: string, meta?: Record<string, unknown>): void;
+    info(msg: string, meta?: Record<string, unknown>): void;
+    warn(msg: string, meta?: Record<string, unknown>): void;
+    error(msg: string, meta?: Record<string, unknown>): void;
+}
+declare function createLogger(opts?: {
+    level?: LogLevel;
+    prefix?: string;
+}): Logger;
+
+declare class ModuleRegistry {
+    private readonly apis;
+    set(id: string, api: unknown): void;
+    get<API>(id: string): API;
+    has(id: string): boolean;
+    ids(): readonly string[];
+}
+
+interface SdkContextConfig {
+    productName: string;
+    productVersion?: string;
+    workspaceEndpoint: string;
+    globalEndpoint: string;
+    oidcIssuer?: string;
+    clientId?: string;
+    clientSecret?: string;
+    redirectUri?: string;
+    apiKey?: string;
+    accessToken?: string;
+    refreshToken?: string;
+    workspaceToken?: string;
+    tokenStore?: TokenStore;
+    timeout?: number;
+    autoRefresh?: boolean;
+    onTokenRefresh?: (tokens: TokenPair) => void | Promise<void>;
+    env?: Env;
+    logLevel?: LogLevel;
+    logger?: Logger;
+    signal?: AbortSignal;
+}
+interface OidcConfig {
+    issuer: string;
+    clientId?: string;
+    clientSecret?: string;
+    redirectUri?: string;
+}
+interface SdkContext {
+    readonly productName: string;
+    readonly productVersion: string;
+    readonly env: Env;
+    readonly gql: {
+        workspace: GqlClient;
+        global: GqlClient;
+        workspaceAuthOnly: GqlClient;
+    };
+    readonly client: BaseGraphQLClient;
+    readonly auth: AuthStore;
+    readonly oidc: OidcConfig;
+    readonly logger: Logger;
+    readonly modules: ModuleRegistry;
+    readonly signal?: AbortSignal;
+}
+declare function buildContext(config: SdkContextConfig): SdkContext;
+
+interface SdkModule<API = unknown> {
+    readonly id: string;
+    readonly version: string;
+    readonly displayName: string;
+    readonly dependsOn?: readonly string[];
+    attach(ctx: SdkContext): API;
+}
+declare function sortModules(modules: readonly SdkModule[]): SdkModule[];
+
+export { AuthStore as A, BaseGraphQLClient as B, type ContextInput as C, type Env as E, FileTokenStore as F, type GqlClient as G, InMemoryTokenStore as I, type Json as J, type LogLevel as L, ModuleRegistry as M, type OidcConfig as O, type PaginationInput as P, type SdkModule as S, type TokenPair as T, type SdkContext as a, EnvTokenStore as b, type EnvTokenStoreOptions as c, type FileTokenStoreOptions as d, type GqlRequestOptions as e, type Logger as f, type SdkContextConfig as g, type TokenStore as h, buildContext as i, createAuthStore as j, createLogger as k, gqlClient as l, sortModules as s };

package/dist/module-JDbvil5h.d.ts

@@ -0,0 +1,194 @@
+import { RequestDocument, Variables } from 'graphql-request';
+
+interface TokenPair {
+    accessToken: string;
+    refreshToken: string;
+    expiresAt?: number;
+}
+type Json = unknown;
+type Env = 'prod' | 'alpha' | 'dev' | 'local';
+interface PaginationInput {
+    limit?: number;
+    offset?: number;
+    sortBy?: string;
+    sortOrder?: 'asc' | 'desc';
+}
+interface ContextInput {
+    userId?: string;
+    workspaceId?: string;
+    projectId?: string;
+    appId?: string;
+    custom?: Record<string, unknown>;
+}
+
+interface TokenStore {
+    get(): Promise<TokenPair | null>;
+    set(tokens: TokenPair): Promise<void>;
+    clear(): Promise<void>;
+}
+declare class InMemoryTokenStore implements TokenStore {
+    private tokens;
+    constructor(initial?: TokenPair | null);
+    get(): Promise<TokenPair | null>;
+    set(tokens: TokenPair): Promise<void>;
+    clear(): Promise<void>;
+}
+interface FileTokenStoreOptions {
+    path: string;
+}
+declare class FileTokenStore implements TokenStore {
+    private readonly opts;
+    constructor(opts: FileTokenStoreOptions);
+    get(): Promise<TokenPair | null>;
+    set(tokens: TokenPair): Promise<void>;
+    clear(): Promise<void>;
+}
+interface EnvTokenStoreOptions {
+    accessTokenVar: string;
+    refreshTokenVar?: string;
+    expiresAtVar?: string;
+}
+declare class EnvTokenStore implements TokenStore {
+    private readonly opts;
+    constructor(opts: EnvTokenStoreOptions);
+    get(): Promise<TokenPair | null>;
+    set(_tokens: TokenPair): Promise<void>;
+    clear(): Promise<void>;
+}
+
+declare class AuthStore {
+    private readonly tokenStore;
+    private workspaceToken;
+    private apiKey;
+    constructor(tokenStore: TokenStore);
+    getTokens(): Promise<TokenPair | null>;
+    setTokens(tokens: TokenPair): Promise<void>;
+    clearTokens(): Promise<void>;
+    setWorkspaceToken(token: string | null): void;
+    getWorkspaceToken(): string | null;
+    setApiKey(key: string | null): void;
+    getApiKey(): string | null;
+    isAuthenticated(): Promise<boolean>;
+}
+declare function createAuthStore(initial?: {
+    tokens?: TokenPair | null;
+    workspaceToken?: string | null;
+    apiKey?: string | null;
+    tokenStore?: TokenStore;
+}): AuthStore;
+
+interface BaseGraphQLClientOptions {
+    workspaceEndpoint: string;
+    globalEndpoint: string;
+    auth: AuthStore;
+    timeout?: number;
+    autoRefresh?: boolean;
+    onTokenRefresh?: (tokens: {
+        accessToken: string;
+        refreshToken: string;
+        expiresAt?: number;
+    }) => void | Promise<void>;
+    defaultSignal?: AbortSignal;
+}
+interface GqlRequestOptions {
+    signal?: AbortSignal;
+}
+declare class BaseGraphQLClient {
+    private readonly workspaceClient;
+    private readonly globalClient;
+    private readonly opts;
+    constructor(opts: BaseGraphQLClientOptions);
+    private buildHeaders;
+    private isExpiringSoon;
+    private ensureFresh;
+    performTokenRefresh(): Promise<{
+        accessToken: string;
+        refreshToken: string;
+        expiresAt?: number;
+    }>;
+    private executeWithRetry;
+    globalRequest<T>(document: RequestDocument, variables?: Variables, options?: GqlRequestOptions): Promise<T>;
+    workspaceRequest<T>(document: RequestDocument, variables?: Variables, options?: GqlRequestOptions): Promise<T>;
+    workspaceAuthOnlyRequest<T>(document: RequestDocument, variables?: Variables, options?: GqlRequestOptions): Promise<T>;
+}
+interface GqlClient {
+    request<T>(document: RequestDocument, variables?: Variables, options?: GqlRequestOptions): Promise<T>;
+}
+declare function gqlClient(base: BaseGraphQLClient, scope: 'workspace' | 'global' | 'workspaceAuthOnly'): GqlClient;
+
+type LogLevel = 'debug' | 'info' | 'warn' | 'error';
+interface Logger {
+    debug(msg: string, meta?: Record<string, unknown>): void;
+    info(msg: string, meta?: Record<string, unknown>): void;
+    warn(msg: string, meta?: Record<string, unknown>): void;
+    error(msg: string, meta?: Record<string, unknown>): void;
+}
+declare function createLogger(opts?: {
+    level?: LogLevel;
+    prefix?: string;
+}): Logger;
+
+declare class ModuleRegistry {
+    private readonly apis;
+    set(id: string, api: unknown): void;
+    get<API>(id: string): API;
+    has(id: string): boolean;
+    ids(): readonly string[];
+}
+
+interface SdkContextConfig {
+    productName: string;
+    productVersion?: string;
+    workspaceEndpoint: string;
+    globalEndpoint: string;
+    oidcIssuer?: string;
+    clientId?: string;
+    clientSecret?: string;
+    redirectUri?: string;
+    apiKey?: string;
+    accessToken?: string;
+    refreshToken?: string;
+    workspaceToken?: string;
+    tokenStore?: TokenStore;
+    timeout?: number;
+    autoRefresh?: boolean;
+    onTokenRefresh?: (tokens: TokenPair) => void | Promise<void>;
+    env?: Env;
+    logLevel?: LogLevel;
+    logger?: Logger;
+    signal?: AbortSignal;
+}
+interface OidcConfig {
+    issuer: string;
+    clientId?: string;
+    clientSecret?: string;
+    redirectUri?: string;
+}
+interface SdkContext {
+    readonly productName: string;
+    readonly productVersion: string;
+    readonly env: Env;
+    readonly gql: {
+        workspace: GqlClient;
+        global: GqlClient;
+        workspaceAuthOnly: GqlClient;
+    };
+    readonly client: BaseGraphQLClient;
+    readonly auth: AuthStore;
+    readonly oidc: OidcConfig;
+    readonly logger: Logger;
+    readonly modules: ModuleRegistry;
+    readonly signal?: AbortSignal;
+}
+declare function buildContext(config: SdkContextConfig): SdkContext;
+
+interface SdkModule<API = unknown> {
+    readonly id: string;
+    readonly version: string;
+    readonly displayName: string;
+    readonly dependsOn?: readonly string[];
+    attach(ctx: SdkContext): API;
+}
+declare function sortModules(modules: readonly SdkModule[]): SdkModule[];
+
+export { AuthStore as A, BaseGraphQLClient as B, type ContextInput as C, type Env as E, FileTokenStore as F, type GqlClient as G, InMemoryTokenStore as I, type Json as J, type LogLevel as L, ModuleRegistry as M, type OidcConfig as O, type PaginationInput as P, type SdkModule as S, type TokenPair as T, type SdkContext as a, EnvTokenStore as b, type EnvTokenStoreOptions as c, type FileTokenStoreOptions as d, type GqlRequestOptions as e, type Logger as f, type SdkContextConfig as g, type TokenStore as h, buildContext as i, createAuthStore as j, createLogger as k, gqlClient as l, sortModules as s };