@burdenoff/sdk-libs 2026.501.6

package/dist/modules/auth/index.cjs

@@ -0,0 +1,71 @@
+'use strict';Object.defineProperty(exports,'__esModule',{value:true});var re=require('cross-fetch'),crypto=require('crypto');function _interopDefault(e){return e&&e.__esModule?e:{default:e}}var re__default=/*#__PURE__*/_interopDefault(re);var Q=["password","secret","clientSecret","apiKey","token","mfaCode","accessToken","refreshToken","workspaceToken","authorization"],ee=/\b(eyJ[A-Za-z0-9_-]+\.[A-Za-z0-9_-]+\.[A-Za-z0-9_-]+)\b/g;function te(u){let a=u.replace(ee,"<redacted-jwt>");for(let d of Q){let s=new RegExp(`("${d}"\\s*:\\s*")[^"]*(")`,"gi");a=a.replace(s,"$1<redacted>$2");}return a}var m=class extends Error{code;cause;constructor(a,d="SDK_ERROR",s){super(te(a)),this.name="SdkError",this.code=d,this.cause=s;}},c=class extends m{constructor(a="Authentication failed",d){super(a,"AUTHENTICATION_ERROR",d),this.name="AuthenticationError";}};var k=class extends m{constructor(a,d){super(a,"NETWORK_ERROR",d),this.name="NetworkError";}};var w=class extends m{constructor(a="Device code expired"){super(a,"DEVICE_CODE_EXPIRED"),this.name="DeviceCodeExpiredError";}},T=class extends m{constructor(a="Device authorization denied by user"){super(a,"DEVICE_CODE_DENIED"),this.name="DeviceCodeDeniedError";}};function I(u=64){return crypto.randomBytes(u).toString("base64url").slice(0,u)}function _(u){return crypto.createHash("sha256").update(u).digest("base64url")}function y(){return crypto.randomBytes(32).toString("base64url")}var P=`
+  fragment AuthUser on User {
+    id
+    email
+    username
+  }
+`,U=`
+  ${P}
+  mutation SignUp($input: SignUpInput!) {
+    signUp(input: $input) {
+      user { ...AuthUser }
+      accessToken
+      refreshToken
+      expiresIn
+    }
+  }
+`,R=`
+  ${P}
+  mutation SignIn($input: SignInInput!) {
+    signIn(input: $input) {
+      user { ...AuthUser }
+      accessToken
+      refreshToken
+      expiresIn
+    }
+  }
+`,v=`
+  ${P}
+  mutation RefreshToken($token: String!) {
+    refreshToken(token: $token) {
+      user { ...AuthUser }
+      accessToken
+      refreshToken
+      expiresIn
+    }
+  }
+`,$=`
+  mutation SignOut {
+    signOut
+  }
+`,D=`
+  mutation AuthenticateApp($input: AuthenticateAppInput!) {
+    authenticateApp(input: $input) {
+      accessToken
+      tokenType
+      expiresIn
+      scopes
+    }
+  }
+`,O=`
+  mutation IssueWorkspaceToken($input: IssueWorkspaceTokenInput!) {
+    issueWorkspaceToken(input: $input) {
+      success
+      token
+      expiresAt
+      scopes
+      error { code message }
+    }
+  }
+`,b=`
+  query MyWorkspaces($limit: Int) {
+    myWorkspaces(limit: $limit) {
+      items { id name slug tenantId organizationId }
+    }
+  }
+`,W=`
+  query Me {
+    me { id email username isActive emailVerified }
+  }
+`;var x=typeof fetch<"u"?fetch:re__default.default;function N(u){let{gql:a,auth:d,oidc:s,logger:q}=u;async function g(e){await d.setTokens(e);}async function M(e){let t=(await a.global.request(R,{input:e})).signIn;return await g({accessToken:t.accessToken,refreshToken:t.refreshToken,expiresAt:Date.now()+t.expiresIn*1e3}),t}async function K(e){let t=(await a.global.request(U,{input:e})).signUp;return await g({accessToken:t.accessToken,refreshToken:t.refreshToken,expiresAt:Date.now()+t.expiresIn*1e3}),t}async function j(){let e=await d.getTokens();if(!e?.refreshToken)throw new c("No refresh token available");let t=(await a.global.request(v,{token:e.refreshToken})).refreshToken,n={accessToken:t.accessToken,refreshToken:t.refreshToken,expiresAt:Date.now()+t.expiresIn*1e3};return await g(n),n}async function z(){try{await a.global.request($);}catch(e){q.warn(`signOut server-side failed: ${e.message}`);}finally{await d.clearTokens();}}async function L(){return (await a.global.request(W)).me}async function V(){let e=await d.getTokens();return e?.accessToken?!(e.expiresAt&&Date.now()>=e.expiresAt):!!d.getApiKey()}async function G(e){d.setApiKey(e);}async function F(e,o){if(!s.issuer)throw new c("oidcIssuer required for client credentials flow");let t=`${s.issuer}/token`,n=new URLSearchParams({grant_type:"client_credentials",client_id:e,client_secret:o}).toString(),r;try{r=await x(t,{method:"POST",headers:{"Content-Type":"application/x-www-form-urlencoded"},body:n});}catch(h){throw new k(`token endpoint unreachable: ${h.message}`,h)}if(!r.ok){let h=await r.text().catch(()=>"Unknown");throw new c(`client_credentials failed (${r.status}): ${h}`)}let i=await r.json(),l=i.expires_in??3600,p={accessToken:i.access_token,refreshToken:i.refresh_token??"",expiresAt:Date.now()+l*1e3};return await g(p),p}async function H(e,o,t){let r=(await a.global.request(D,{input:{clientId:e,clientSecret:o,scopes:t}})).authenticateApp;return await g({accessToken:r.accessToken,refreshToken:"",expiresAt:Date.now()+r.expiresIn*1e3}),r}async function C(e){if(!s.issuer)throw new c("oidcIssuer required for device code flow");if(!s.clientId)throw new c("clientId required for device code flow");let o=`${s.issuer}/oidc/device/code`,t=new URLSearchParams({client_id:s.clientId,...e&&e.length>0?{scope:e.join(" ")}:{}}).toString(),n;try{n=await x(o,{method:"POST",headers:{"Content-Type":"application/x-www-form-urlencoded"},body:t});}catch(i){throw new k(`device endpoint unreachable: ${i.message}`,i)}if(!n.ok){let i=await n.text().catch(()=>"Unknown");throw new c(`device code request failed (${n.status}): ${i}`)}let r=await n.json();return {deviceCode:r.device_code,userCode:r.user_code,verificationUri:r.verification_uri,verificationUriComplete:r.verification_uri_complete??null,expiresIn:r.expires_in,interval:r.interval??5}}async function E(e,o=5){if(!s.issuer)throw new c("oidcIssuer required");if(!s.clientId)throw new c("clientId required");let t=`${s.issuer}/oauth/device/token`,n=o;for(;;){await new Promise(p=>setTimeout(p,n*1e3));let r;try{r=await x(t,{method:"POST",headers:{"Content-Type":"application/x-www-form-urlencoded"},body:new URLSearchParams({grant_type:"urn:ietf:params:oauth:grant-type:device_code",device_code:e,client_id:s.clientId}).toString()});}catch(p){throw new k(`device poll failed: ${p.message}`,p)}let i=await r.json();if(r.ok&&i.access_token){let p=i.expires_in??3600,h={accessToken:i.access_token,refreshToken:i.refresh_token??"",expiresAt:Date.now()+p*1e3};return await g(h),h}let l=i.error;switch(l){case "authorization_pending":continue;case "slow_down":n+=5;continue;case "expired_token":throw new w;case "access_denied":throw new T;default:throw new c(`device code polling failed: ${i.error_description??l??"Unknown"}`)}}}async function Y(e){let o=await C(e),t=E(o.deviceCode,o.interval);return {userCode:o.userCode,verificationUri:o.verificationUri,promise:t}}function Z(e){if(!s.issuer)throw new c("oidcIssuer required");if(!s.clientId)throw new c("clientId required");let o=I(),t=_(o),n=e?.state??y(),r=e?.redirectUri??s.redirectUri??"http://localhost:8400/callback",i=e?.scopes??["openid","profile","email","offline_access"],l=new URLSearchParams({response_type:"code",client_id:s.clientId,redirect_uri:r,scope:i.join(" "),code_challenge:t,code_challenge_method:"S256",state:n});return {url:`${s.issuer}/oidc/auth?${l.toString()}`,state:n,codeVerifier:o,redirectUri:r}}async function B(e,o,t){if(!s.issuer)throw new c("oidcIssuer required");if(!s.clientId)throw new c("clientId required");let n=`${s.issuer}/oidc/token`,r=new URLSearchParams({grant_type:"authorization_code",code:e,redirect_uri:t??s.redirectUri??"http://localhost:8400/callback",client_id:s.clientId,code_verifier:o}).toString(),i;try{i=await x(n,{method:"POST",headers:{"Content-Type":"application/x-www-form-urlencoded"},body:r});}catch(f){throw new k(`auth code exchange failed: ${f.message}`,f)}if(!i.ok){let f=await i.text().catch(()=>"Unknown");throw new c(`auth code exchange failed (${i.status}): ${f}`)}let l=await i.json(),p=l.expires_in??3600,h={accessToken:l.access_token,refreshToken:l.refresh_token??"",expiresAt:Date.now()+p*1e3};return await g(h),h}async function J(e=50){return (await a.global.request(b,{limit:e})).myWorkspaces.items}async function X(e,o){let n=(await a.workspaceAuthOnly.request(O,{input:{workspaceId:e,organizationId:o}})).issueWorkspaceToken;if(!n.success||!n.token)throw new c(`Workspace token issuance failed: ${n.error?.message??"Unknown"}`);return d.setWorkspaceToken(n.token),{token:n.token,expiresAt:n.expiresAt,scopes:n.scopes??[]}}return {signIn:M,signUp:K,refreshToken:j,signOut:z,getCurrentUser:L,isAuthenticated:V,loginWithApiKey:G,loginWithClientCredentials:F,authenticateApp:H,startDeviceCodeFlow:C,pollDeviceCodeAuth:E,loginWithDeviceCode:Y,buildAuthorizationUrl:Z,exchangeAuthCode:B,fetchWorkspaces:J,issueWorkspaceToken:X}}var se={id:"auth",version:"1.0.0",displayName:"Auth",attach(u){return N(u)}},Te=se;
+exports.default=Te;exports.generateCodeChallenge=_;exports.generateCodeVerifier=I;exports.generateState=y;

package/dist/modules/auth/index.d.cts

@@ -0,0 +1,94 @@
+import { T as TokenPair, S as SdkModule } from '../../module-JDbvil5h.cjs';
+import 'graphql-request';
+
+interface User {
+    id: string;
+    email: string;
+    username: string;
+    isActive?: boolean;
+    emailVerified?: boolean;
+}
+interface AuthPayload {
+    user: User;
+    accessToken: string;
+    refreshToken: string;
+    expiresIn: number;
+}
+interface SignInInput {
+    username: string;
+    password: string;
+}
+interface SignUpInput {
+    email: string;
+    username: string;
+    password: string;
+    firstName?: string;
+    lastName?: string;
+}
+interface DeviceCodeResponse {
+    deviceCode: string;
+    userCode: string;
+    verificationUri: string;
+    verificationUriComplete: string | null;
+    expiresIn: number;
+    interval: number;
+}
+interface AuthCodeChallenge {
+    url: string;
+    state: string;
+    codeVerifier: string;
+    redirectUri: string;
+}
+interface AuthCodeExchangeResult {
+    accessToken: string;
+    tokenType: string;
+    expiresIn: number;
+    scopes: string[];
+}
+interface IssuedWorkspaceToken {
+    token: string;
+    expiresAt: string;
+    scopes: string[];
+}
+interface MyWorkspace {
+    id: string;
+    name: string;
+    slug: string;
+    tenantId: string;
+    organizationId: string;
+}
+
+interface AuthApi {
+    signIn(input: SignInInput): Promise<AuthPayload>;
+    signUp(input: SignUpInput): Promise<AuthPayload>;
+    refreshToken(): Promise<TokenPair>;
+    signOut(): Promise<void>;
+    getCurrentUser(): Promise<User>;
+    isAuthenticated(): Promise<boolean>;
+    loginWithApiKey(apiKey: string): Promise<void>;
+    loginWithClientCredentials(clientId: string, clientSecret: string): Promise<TokenPair>;
+    authenticateApp(clientId: string, clientSecret: string, scopes?: string[]): Promise<AuthCodeExchangeResult>;
+    startDeviceCodeFlow(scopes?: string[]): Promise<DeviceCodeResponse>;
+    pollDeviceCodeAuth(deviceCode: string, interval?: number): Promise<TokenPair>;
+    loginWithDeviceCode(scopes?: string[]): Promise<{
+        userCode: string;
+        verificationUri: string;
+        promise: Promise<TokenPair>;
+    }>;
+    buildAuthorizationUrl(opts?: {
+        redirectUri?: string;
+        scopes?: string[];
+        state?: string;
+    }): AuthCodeChallenge;
+    exchangeAuthCode(code: string, codeVerifier: string, redirectUri?: string): Promise<TokenPair>;
+    fetchWorkspaces(limit?: number): Promise<MyWorkspace[]>;
+    issueWorkspaceToken(workspaceId: string, organizationId: string): Promise<IssuedWorkspaceToken>;
+}
+
+declare function generateCodeVerifier(length?: number): string;
+declare function generateCodeChallenge(verifier: string): string;
+declare function generateState(): string;
+
+declare const authModule: SdkModule<AuthApi>;
+
+export { type AuthApi, type AuthCodeChallenge, type AuthCodeExchangeResult, type AuthPayload, type DeviceCodeResponse, type IssuedWorkspaceToken, type MyWorkspace, type SignInInput, type SignUpInput, type User, authModule as default, generateCodeChallenge, generateCodeVerifier, generateState };

package/dist/modules/auth/index.d.ts

@@ -0,0 +1,94 @@
+import { T as TokenPair, S as SdkModule } from '../../module-JDbvil5h.js';
+import 'graphql-request';
+
+interface User {
+    id: string;
+    email: string;
+    username: string;
+    isActive?: boolean;
+    emailVerified?: boolean;
+}
+interface AuthPayload {
+    user: User;
+    accessToken: string;
+    refreshToken: string;
+    expiresIn: number;
+}
+interface SignInInput {
+    username: string;
+    password: string;
+}
+interface SignUpInput {
+    email: string;
+    username: string;
+    password: string;
+    firstName?: string;
+    lastName?: string;
+}
+interface DeviceCodeResponse {
+    deviceCode: string;
+    userCode: string;
+    verificationUri: string;
+    verificationUriComplete: string | null;
+    expiresIn: number;
+    interval: number;
+}
+interface AuthCodeChallenge {
+    url: string;
+    state: string;
+    codeVerifier: string;
+    redirectUri: string;
+}
+interface AuthCodeExchangeResult {
+    accessToken: string;
+    tokenType: string;
+    expiresIn: number;
+    scopes: string[];
+}
+interface IssuedWorkspaceToken {
+    token: string;
+    expiresAt: string;
+    scopes: string[];
+}
+interface MyWorkspace {
+    id: string;
+    name: string;
+    slug: string;
+    tenantId: string;
+    organizationId: string;
+}
+
+interface AuthApi {
+    signIn(input: SignInInput): Promise<AuthPayload>;
+    signUp(input: SignUpInput): Promise<AuthPayload>;
+    refreshToken(): Promise<TokenPair>;
+    signOut(): Promise<void>;
+    getCurrentUser(): Promise<User>;
+    isAuthenticated(): Promise<boolean>;
+    loginWithApiKey(apiKey: string): Promise<void>;
+    loginWithClientCredentials(clientId: string, clientSecret: string): Promise<TokenPair>;
+    authenticateApp(clientId: string, clientSecret: string, scopes?: string[]): Promise<AuthCodeExchangeResult>;
+    startDeviceCodeFlow(scopes?: string[]): Promise<DeviceCodeResponse>;
+    pollDeviceCodeAuth(deviceCode: string, interval?: number): Promise<TokenPair>;
+    loginWithDeviceCode(scopes?: string[]): Promise<{
+        userCode: string;
+        verificationUri: string;
+        promise: Promise<TokenPair>;
+    }>;
+    buildAuthorizationUrl(opts?: {
+        redirectUri?: string;
+        scopes?: string[];
+        state?: string;
+    }): AuthCodeChallenge;
+    exchangeAuthCode(code: string, codeVerifier: string, redirectUri?: string): Promise<TokenPair>;
+    fetchWorkspaces(limit?: number): Promise<MyWorkspace[]>;
+    issueWorkspaceToken(workspaceId: string, organizationId: string): Promise<IssuedWorkspaceToken>;
+}
+
+declare function generateCodeVerifier(length?: number): string;
+declare function generateCodeChallenge(verifier: string): string;
+declare function generateState(): string;
+
+declare const authModule: SdkModule<AuthApi>;
+
+export { type AuthApi, type AuthCodeChallenge, type AuthCodeExchangeResult, type AuthPayload, type DeviceCodeResponse, type IssuedWorkspaceToken, type MyWorkspace, type SignInInput, type SignUpInput, type User, authModule as default, generateCodeChallenge, generateCodeVerifier, generateState };

package/dist/modules/auth/index.js

@@ -0,0 +1,71 @@
+import {c,e,i,h}from'../../chunk-NEREAHJ6.js';import ee from'cross-fetch';import {randomBytes,createHash}from'crypto';function A(p=64){return randomBytes(p).toString("base64url").slice(0,p)}function P(p){return createHash("sha256").update(p).digest("base64url")}function y(){return randomBytes(32).toString("base64url")}var I=`
+  fragment AuthUser on User {
+    id
+    email
+    username
+  }
+`,v=`
+  ${I}
+  mutation SignUp($input: SignUpInput!) {
+    signUp(input: $input) {
+      user { ...AuthUser }
+      accessToken
+      refreshToken
+      expiresIn
+    }
+  }
+`,E=`
+  ${I}
+  mutation SignIn($input: SignInInput!) {
+    signIn(input: $input) {
+      user { ...AuthUser }
+      accessToken
+      refreshToken
+      expiresIn
+    }
+  }
+`,W=`
+  ${I}
+  mutation RefreshToken($token: String!) {
+    refreshToken(token: $token) {
+      user { ...AuthUser }
+      accessToken
+      refreshToken
+      expiresIn
+    }
+  }
+`,$=`
+  mutation SignOut {
+    signOut
+  }
+`,R=`
+  mutation AuthenticateApp($input: AuthenticateAppInput!) {
+    authenticateApp(input: $input) {
+      accessToken
+      tokenType
+      expiresIn
+      scopes
+    }
+  }
+`,b=`
+  mutation IssueWorkspaceToken($input: IssueWorkspaceTokenInput!) {
+    issueWorkspaceToken(input: $input) {
+      success
+      token
+      expiresAt
+      scopes
+      error { code message }
+    }
+  }
+`,O=`
+  query MyWorkspaces($limit: Int) {
+    myWorkspaces(limit: $limit) {
+      items { id name slug tenantId organizationId }
+    }
+  }
+`,q=`
+  query Me {
+    me { id email username isActive emailVerified }
+  }
+`;var m=typeof fetch<"u"?fetch:ee;function D(p){let{gql:l,auth:h$1,oidc:i$1,logger:N}=p;async function g(e){await h$1.setTokens(e);}async function M(e){let t=(await l.global.request(E,{input:e})).signIn;return await g({accessToken:t.accessToken,refreshToken:t.refreshToken,expiresAt:Date.now()+t.expiresIn*1e3}),t}async function K(e){let t=(await l.global.request(v,{input:e})).signUp;return await g({accessToken:t.accessToken,refreshToken:t.refreshToken,expiresAt:Date.now()+t.expiresIn*1e3}),t}async function j(){let e=await h$1.getTokens();if(!e?.refreshToken)throw new c("No refresh token available");let t=(await l.global.request(W,{token:e.refreshToken})).refreshToken,n={accessToken:t.accessToken,refreshToken:t.refreshToken,expiresAt:Date.now()+t.expiresIn*1e3};return await g(n),n}async function G(){try{await l.global.request($);}catch(e){N.warn(`signOut server-side failed: ${e.message}`);}finally{await h$1.clearTokens();}}async function z(){return (await l.global.request(q)).me}async function F(){let e=await h$1.getTokens();return e?.accessToken?!(e.expiresAt&&Date.now()>=e.expiresAt):!!h$1.getApiKey()}async function V(e){h$1.setApiKey(e);}async function H(e$1,s){if(!i$1.issuer)throw new c("oidcIssuer required for client credentials flow");let t=`${i$1.issuer}/token`,n=new URLSearchParams({grant_type:"client_credentials",client_id:e$1,client_secret:s}).toString(),r;try{r=await m(t,{method:"POST",headers:{"Content-Type":"application/x-www-form-urlencoded"},body:n});}catch(d){throw new e(`token endpoint unreachable: ${d.message}`,d)}if(!r.ok){let d=await r.text().catch(()=>"Unknown");throw new c(`client_credentials failed (${r.status}): ${d}`)}let o=await r.json(),u=o.expires_in??3600,c$1={accessToken:o.access_token,refreshToken:o.refresh_token??"",expiresAt:Date.now()+u*1e3};return await g(c$1),c$1}async function L(e,s,t){let r=(await l.global.request(R,{input:{clientId:e,clientSecret:s,scopes:t}})).authenticateApp;return await g({accessToken:r.accessToken,refreshToken:"",expiresAt:Date.now()+r.expiresIn*1e3}),r}async function x(e$1){if(!i$1.issuer)throw new c("oidcIssuer required for device code flow");if(!i$1.clientId)throw new c("clientId required for device code flow");let s=`${i$1.issuer}/oidc/device/code`,t=new URLSearchParams({client_id:i$1.clientId,...e$1&&e$1.length>0?{scope:e$1.join(" ")}:{}}).toString(),n;try{n=await m(s,{method:"POST",headers:{"Content-Type":"application/x-www-form-urlencoded"},body:t});}catch(o){throw new e(`device endpoint unreachable: ${o.message}`,o)}if(!n.ok){let o=await n.text().catch(()=>"Unknown");throw new c(`device code request failed (${n.status}): ${o}`)}let r=await n.json();return {deviceCode:r.device_code,userCode:r.user_code,verificationUri:r.verification_uri,verificationUriComplete:r.verification_uri_complete??null,expiresIn:r.expires_in,interval:r.interval??5}}async function _(e$1,s=5){if(!i$1.issuer)throw new c("oidcIssuer required");if(!i$1.clientId)throw new c("clientId required");let t=`${i$1.issuer}/oauth/device/token`,n=s;for(;;){await new Promise(c=>setTimeout(c,n*1e3));let r;try{r=await m(t,{method:"POST",headers:{"Content-Type":"application/x-www-form-urlencoded"},body:new URLSearchParams({grant_type:"urn:ietf:params:oauth:grant-type:device_code",device_code:e$1,client_id:i$1.clientId}).toString()});}catch(c){throw new e(`device poll failed: ${c.message}`,c)}let o=await r.json();if(r.ok&&o.access_token){let c=o.expires_in??3600,d={accessToken:o.access_token,refreshToken:o.refresh_token??"",expiresAt:Date.now()+c*1e3};return await g(d),d}let u=o.error;switch(u){case "authorization_pending":continue;case "slow_down":n+=5;continue;case "expired_token":throw new h;case "access_denied":throw new i;default:throw new c(`device code polling failed: ${o.error_description??u??"Unknown"}`)}}}async function B(e){let s=await x(e),t=_(s.deviceCode,s.interval);return {userCode:s.userCode,verificationUri:s.verificationUri,promise:t}}function Y(e){if(!i$1.issuer)throw new c("oidcIssuer required");if(!i$1.clientId)throw new c("clientId required");let s=A(),t=P(s),n=e?.state??y(),r=e?.redirectUri??i$1.redirectUri??"http://localhost:8400/callback",o=e?.scopes??["openid","profile","email","offline_access"],u=new URLSearchParams({response_type:"code",client_id:i$1.clientId,redirect_uri:r,scope:o.join(" "),code_challenge:t,code_challenge_method:"S256",state:n});return {url:`${i$1.issuer}/oidc/auth?${u.toString()}`,state:n,codeVerifier:s,redirectUri:r}}async function J(e$1,s,t){if(!i$1.issuer)throw new c("oidcIssuer required");if(!i$1.clientId)throw new c("clientId required");let n=`${i$1.issuer}/oidc/token`,r=new URLSearchParams({grant_type:"authorization_code",code:e$1,redirect_uri:t??i$1.redirectUri??"http://localhost:8400/callback",client_id:i$1.clientId,code_verifier:s}).toString(),o;try{o=await m(n,{method:"POST",headers:{"Content-Type":"application/x-www-form-urlencoded"},body:r});}catch(f){throw new e(`auth code exchange failed: ${f.message}`,f)}if(!o.ok){let f=await o.text().catch(()=>"Unknown");throw new c(`auth code exchange failed (${o.status}): ${f}`)}let u=await o.json(),c$1=u.expires_in??3600,d={accessToken:u.access_token,refreshToken:u.refresh_token??"",expiresAt:Date.now()+c$1*1e3};return await g(d),d}async function Q(e=50){return (await l.global.request(O,{limit:e})).myWorkspaces.items}async function X(e,s){let n=(await l.workspaceAuthOnly.request(b,{input:{workspaceId:e,organizationId:s}})).issueWorkspaceToken;if(!n.success||!n.token)throw new c(`Workspace token issuance failed: ${n.error?.message??"Unknown"}`);return h$1.setWorkspaceToken(n.token),{token:n.token,expiresAt:n.expiresAt,scopes:n.scopes??[]}}return {signIn:M,signUp:K,refreshToken:j,signOut:G,getCurrentUser:z,isAuthenticated:F,loginWithApiKey:V,loginWithClientCredentials:H,authenticateApp:L,startDeviceCodeFlow:x,pollDeviceCodeAuth:_,loginWithDeviceCode:B,buildAuthorizationUrl:Y,exchangeAuthCode:J,fetchWorkspaces:Q,issueWorkspaceToken:X}}var te={id:"auth",version:"1.0.0",displayName:"Auth",attach(p){return D(p)}},ge=te;
+export{ge as default,P as generateCodeChallenge,A as generateCodeVerifier,y as generateState};

package/dist/modules/billing/index.cjs

@@ -0,0 +1,203 @@
+'use strict';var r=`
+  query GetActiveSubscriptions($billingAccountId: ID!) {
+    getActiveSubscriptions(billingAccountId: $billingAccountId) {
+      id status seatCount nextBillingDate startDate endDate billingAccountId planId
+    }
+  }
+`,s=`
+  query GetSubscription($id: ID!) {
+    getSubscription(id: $id) {
+      id status startDate endDate seatCount billingAccountId planId
+      autoRenewal canceledAt cancellationReason
+    }
+  }
+`,u=`
+  query GetPaginatedSubscriptions(
+    $billingAccountId: ID
+    $page: Int
+    $pageSize: Int
+  ) {
+    getPaginatedSubscriptions(
+      billingAccountId: $billingAccountId
+      page: $page
+      pageSize: $pageSize
+    ) {
+      subscriptions {
+        id billingAccountId planId status startDate endDate
+        recurrence autoRenewal seatCount lastSeatChangeAt paymentGateway
+        canceledAt cancellationReason canceledBy nextBillingDate
+        lastBillingDate lastRenewalDate context createdAt updatedAt
+      }
+      totalCount hasMore page pageSize totalPages
+    }
+  }
+`,d=`
+  mutation UpdateSubscriptionSeats($input: UpdateSubscriptionSeatsInput!) {
+    updateSubscriptionSeats(input: $input) {
+      id seatCount lastSeatChangeAt
+    }
+  }
+`,p=`
+  mutation CancelSubscription($input: CancelSubscriptionInput!) {
+    cancelSubscription(input: $input) {
+      id status canceledAt cancellationReason
+    }
+  }
+`,c=`
+  query GetAllPlans($filter: PlanFilterInput) {
+    getAllPlans(filter: $filter) {
+      id name description price currency duration productId isActive
+      features metadata createdAt updatedAt
+    }
+  }
+`,l=`
+  query GetPlan($id: ID!) {
+    getPlan(id: $id) {
+      id name description price currency duration productId isActive
+      features metadata createdAt updatedAt
+    }
+  }
+`,A=`
+  query GetAllAddOns($filter: AddOnFilterInput, $limit: Int) {
+    getAllAddOns(filter: $filter, limit: $limit) {
+      id name description price currency productId isActive createdAt updatedAt
+    }
+  }
+`,g=`
+  query GetAddOn($id: ID!) {
+    getAddOn(id: $id) {
+      id name description price currency productId isActive createdAt updatedAt
+    }
+  }
+`,m=`
+  query GetPaginatedInvoices($billingAccountId: ID!, $page: Int, $pageSize: Int) {
+    getPaginatedInvoices(billingAccountId: $billingAccountId, page: $page, pageSize: $pageSize) {
+      invoices {
+        id invoiceNumber billingAccountId status amount currency
+        dueDate paidAt pdfUrl metadata createdAt updatedAt
+      }
+      totalCount hasMore
+    }
+  }
+`,y=`
+  query GetInvoice($id: ID!) {
+    getInvoice(id: $id) {
+      id invoiceNumber billingAccountId status amount currency
+      dueDate paidAt pdfUrl metadata createdAt updatedAt
+    }
+  }
+`,I=`
+  query GetCoupons($filter: CouponFilterInput) {
+    getCoupons(filter: $filter) {
+      coupons {
+        id code description discountType discountValue currency
+        expiresAt maxRedemptions redemptions isActive createdAt updatedAt
+      }
+      totalCount
+    }
+  }
+`,S=`
+  query GetCoupon($code: String!) {
+    getCoupon(code: $code) {
+      id code description discountType discountValue currency
+      expiresAt maxRedemptions redemptions isActive
+    }
+  }
+`,C=`
+  mutation CreateCoupon($input: CreateCouponInput!) {
+    createCoupon(input: $input) {
+      id code discountType discountValue isActive
+    }
+  }
+`,P=`
+  mutation UpdateCoupon($id: ID!, $input: UpdateCouponInput!) {
+    updateCoupon(id: $id, input: $input) {
+      id code description discountValue isActive
+    }
+  }
+`,f=`
+  query GetPendingRefunds($page: Int, $pageSize: Int) {
+    getPendingRefunds(page: $page, pageSize: $pageSize) {
+      records { id paymentId invoiceId amount currency status reason createdAt updatedAt }
+      totalCount page pageSize totalPages
+    }
+  }
+`,b=`
+  mutation RequestRefund($input: RequestRefundInput!) {
+    requestRefund(input: $input) {
+      id paymentId invoiceId amount status reason
+    }
+  }
+`,R=`
+  query GetCreditBalance($billingAccountId: ID!) {
+    getCreditBalance(billingAccountId: $billingAccountId) {
+      total
+      byType { type balance }
+    }
+  }
+`,T=`
+  mutation SpendCredits($input: SpendCreditsInput!) {
+    spendCredits(input: $input) {
+      success remainingBalance transactionId error
+    }
+  }
+`,E=`
+  mutation RequestCreditWithdrawal($input: RequestCreditWithdrawalInput!) {
+    requestCreditWithdrawal(input: $input) {
+      id billingAccountId amount status createdAt
+    }
+  }
+`,q=`
+  query GetUsageDashboard($period: AnalyticsPeriod!) {
+    getUsageDashboard(period: $period) {
+      period totalEvents byTag byResource
+    }
+  }
+`,x=`
+  query GetPaymentMethods($billingAccountId: ID!) {
+    getPaymentMethods(billingAccountId: $billingAccountId) {
+      id billingAccountId type brand last4 expiryMonth expiryYear
+      isDefault createdAt updatedAt
+    }
+  }
+`,D=`
+  mutation AddPaymentMethod($input: AddPaymentMethodInput!) {
+    addPaymentMethod(input: $input) {
+      id billingAccountId type brand last4 isDefault
+    }
+  }
+`,U=`
+  mutation DeletePaymentMethod($id: ID!) {
+    deletePaymentMethod(id: $id) { success }
+  }
+`,_=`
+  query GetEarningsSummary($billingAccountId: ID!) {
+    getEarningsSummary(billingAccountId: $billingAccountId) {
+      billingAccountId totalEarned totalPaid pendingPayout currency
+    }
+  }
+`,$=`
+  query GetPayoutAccounts($billingAccountId: ID!) {
+    getPayoutAccounts(billingAccountId: $billingAccountId) {
+      id billingAccountId type isDefault metadata createdAt
+    }
+  }
+`,h=`
+  mutation AddPayoutAccount($input: AddPayoutAccountInput!) {
+    addPayoutAccount(input: $input) {
+      id billingAccountId type isDefault
+    }
+  }
+`,O=`
+  mutation RequestPayout($input: RequestPayoutInput!) {
+    requestPayout(input: $input) {
+      id billingAccountId amount status createdAt
+    }
+  }
+`,N=`
+  mutation CreateCheckoutSession($planId: ID!, $opts: CheckoutSessionInput) {
+    createCheckoutSession(planId: $planId, opts: $opts) {
+      url sessionId
+    }
+  }
+`;function M(i){let{global:e}=i.gql;return {async list(t,n){return (await e.request(A,{filter:t,limit:n?.limit})).getAllAddOns},async get(t){return (await e.request(g,{id:t})).getAddOn}}}function v(i){let{global:e}=i.gql;return {async earnings(t){return (await e.request(_,{billingAccountId:t})).getEarningsSummary},async payoutAccounts(t){return (await e.request($,{billingAccountId:t})).getPayoutAccounts},async addPayoutAccount(t){return (await e.request(h,{input:t})).addPayoutAccount},async requestPayout(t){return (await e.request(O,{input:t})).requestPayout}}}function B(i){let{global:e}=i.gql;return {async list(t){return (await e.request(I,{filter:t})).getCoupons},async get(t){return (await e.request(S,{code:t})).getCoupon},async create(t){return (await e.request(C,{input:t})).createCoupon},async update(t,n){return (await e.request(P,{id:t,input:n})).updateCoupon}}}function G(i){let{global:e}=i.gql;return {async balance(t){return (await e.request(R,{billingAccountId:t})).getCreditBalance},async spend(t){return (await e.request(T,{input:t})).spendCredits},async withdraw(t){return (await e.request(E,{input:t})).requestCreditWithdrawal}}}function w(i){let{global:e}=i.gql;return {async list(t,n){return (await e.request(m,{billingAccountId:t,page:n?.page,pageSize:n?.pageSize})).getPaginatedInvoices},async get(t){return (await e.request(y,{id:t})).getInvoice}}}function k(i){let{global:e}=i.gql;return {async list(t){return (await e.request(x,{billingAccountId:t})).getPaymentMethods},async add(t){return (await e.request(D,{input:t})).addPaymentMethod},async delete(t){return (await e.request(U,{id:t})).deletePaymentMethod}}}function L(i){let{global:e}=i.gql;return {async list(t){return (await e.request(c,{filter:t})).getAllPlans},async get(t){return (await e.request(l,{id:t})).getPlan}}}function j(i){let{global:e}=i.gql;return {async list(t){return (await e.request(f,{page:t?.page,pageSize:t?.pageSize})).getPendingRefunds},async request(t){return (await e.request(b,{input:t})).requestRefund}}}function z(i){let{global:e}=i.gql;return {async list(t){return (await e.request(u,{billingAccountId:t?.billingAccountId,page:t?.page,pageSize:t?.pageSize})).getPaginatedSubscriptions},async get(t){return (await e.request(s,{id:t})).getSubscription},async active(t){return (await e.request(r,{billingAccountId:t})).getActiveSubscriptions},async updateSeats(t){return (await e.request(d,{input:t})).updateSubscriptionSeats},async cancel(t){return (await e.request(p,{input:t})).cancelSubscription}}}function F(i){let{global:e}=i.gql;return {async dashboard(t){return (await e.request(q,{period:t})).getUsageDashboard}}}var Y={id:"billing",version:"1.0.0",displayName:"Billing",dependsOn:["auth"],attach(i){let{global:e}=i.gql;return {subscriptions:z(i),plans:L(i),addons:M(i),invoices:w(i),coupons:B(i),refunds:j(i),credits:G(i),usage:F(i),paymentMethods:k(i),affiliate:v(i),async getCheckoutUrl(t,n){return (await e.request(N,{planId:t,opts:n})).createCheckoutSession}}}},Mt=Y;module.exports=Mt;