@codixus/client 0.1.0

package/LICENSE

@@ -0,0 +1,31 @@
+Codixus SDK - Proprietary License
+
+Copyright (c) 2026 Codixus. All rights reserved.
+
+This software and associated documentation files (the "Software") are the
+proprietary property of Codixus.
+
+Permission is hereby granted to install and use the Software in applications
+developed by the licensee, subject to the following conditions:
+
+1. The Software may not be copied, modified, merged, published, distributed,
+   sublicensed, or sold, in whole or in part, without the prior written
+   permission of Codixus.
+
+2. The Software may not be reverse engineered, decompiled, or disassembled,
+   except to the extent that such activity is expressly permitted by
+   applicable law.
+
+3. The source code of the Software may not be used to create derivative
+   works or competing products.
+
+4. This license does not grant any rights to use the Codixus name, logo,
+   or trademarks.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/dist/index.cjs

@@ -0,0 +1,451 @@
+"use strict";
+var __create = Object.create;
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __getProtoOf = Object.getPrototypeOf;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__getProtoOf(mod)) : {}, __copyProps(
+  // If the importer is in node compatibility mode or this is not an ESM
+  // file that has been converted to a CommonJS file using a Babel-
+  // compatible transform (i.e. "__esModule" has not been set), then set
+  // "default" to the CommonJS "module.exports" for node compatibility.
+  isNodeMode || !mod || !mod.__esModule ? __defProp(target, "default", { value: mod, enumerable: true }) : target,
+  mod
+));
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+
+// src/index.ts
+var index_exports = {};
+__export(index_exports, {
+  ApiClient: () => ApiClient,
+  CodixusClient: () => CodixusClient,
+  CodixusError: () => import_shared.CodixusError,
+  Collection: () => Collection,
+  ErrorCodes: () => import_shared.ErrorCodes
+});
+module.exports = __toCommonJS(index_exports);
+
+// src/auth/auth-manager.ts
+var AuthManager = class {
+  constructor(storage, storageKey) {
+    this.storage = storage;
+    this.storageKey = storageKey;
+  }
+  accessToken = null;
+  refreshTokenValue = null;
+  user = null;
+  listeners = /* @__PURE__ */ new Set();
+  _isLoading = true;
+  storageKey;
+  api;
+  deviceId = null;
+  /** @internal */
+  _setApi(api) {
+    this.api = api;
+  }
+  async init() {
+    if (!this.storage) {
+      this._isLoading = false;
+      return;
+    }
+    try {
+      const storedRefresh = await this.storage.getItem(
+        `${this.storageKey}_refresh_token`
+      );
+      const storedUser = await this.storage.getItem(
+        `${this.storageKey}_user`
+      );
+      const storedDeviceId = await this.storage.getItem(
+        `${this.storageKey}_device_id`
+      );
+      if (storedRefresh) {
+        this.refreshTokenValue = storedRefresh;
+      }
+      if (storedUser) {
+        try {
+          this.user = JSON.parse(storedUser);
+        } catch {
+        }
+      }
+      if (storedDeviceId) {
+        this.deviceId = storedDeviceId;
+      }
+    } catch (error) {
+      console.warn("[CodixusClient] Failed to restore auth state from storage:", error);
+    }
+    this._isLoading = false;
+    this.notify();
+  }
+  async signIn(params) {
+    const deviceId = params.deviceId ?? this.deviceId ?? this.generateDeviceId();
+    const response = await this.api.post("/auth/token", {
+      deviceId,
+      deviceInfo: params.deviceInfo,
+      metadata: params.metadata
+    });
+    const data = response.data;
+    this.accessToken = data.accessToken;
+    this.refreshTokenValue = data.refreshToken;
+    this.user = data.user;
+    this.deviceId = deviceId;
+    if (this.storage) {
+      await this.storage.setItem(
+        `${this.storageKey}_refresh_token`,
+        data.refreshToken
+      );
+      await this.storage.setItem(
+        `${this.storageKey}_user`,
+        JSON.stringify(data.user)
+      );
+      await this.storage.setItem(`${this.storageKey}_device_id`, deviceId);
+    }
+    this.notify();
+    return { user: data.user, isNewUser: data.isNewUser };
+  }
+  async getToken() {
+    if (this.accessToken) return this.accessToken;
+    if (this.refreshTokenValue) {
+      try {
+        await this.forceRefresh();
+        return this.accessToken;
+      } catch {
+        return null;
+      }
+    }
+    return null;
+  }
+  async forceRefresh() {
+    if (!this.refreshTokenValue) return null;
+    try {
+      const response = await this.api.post("/auth/refresh", {
+        refreshToken: this.refreshTokenValue
+      });
+      this.accessToken = response.data.accessToken;
+      this.refreshTokenValue = response.data.refreshToken;
+      if (this.storage) {
+        await this.storage.setItem(
+          `${this.storageKey}_refresh_token`,
+          response.data.refreshToken
+        );
+      }
+      return this.accessToken;
+    } catch {
+      await this.signOut();
+      return null;
+    }
+  }
+  async signOut() {
+    if (this.refreshTokenValue) {
+      try {
+        await this.api.post("/auth/logout", {
+          refreshToken: this.refreshTokenValue
+        });
+      } catch {
+      }
+    }
+    this.accessToken = null;
+    this.refreshTokenValue = null;
+    this.user = null;
+    if (this.storage) {
+      await this.storage.removeItem(`${this.storageKey}_refresh_token`);
+      await this.storage.removeItem(`${this.storageKey}_user`);
+      await this.storage.removeItem(`${this.storageKey}_device_id`);
+    }
+    this.notify();
+  }
+  getState() {
+    return {
+      isAuthenticated: this.accessToken !== null || this.refreshTokenValue !== null,
+      isLoading: this._isLoading,
+      user: this.user
+    };
+  }
+  getDeviceId() {
+    return this.deviceId;
+  }
+  onAuthStateChange(listener) {
+    this.listeners.add(listener);
+    listener(this.getState());
+    return () => {
+      this.listeners.delete(listener);
+    };
+  }
+  /** @internal - used by API interceptor */
+  _getAccessToken() {
+    return this.accessToken;
+  }
+  /** @internal - called by API interceptor after refresh */
+  _setAccessToken(token) {
+    this.accessToken = token;
+  }
+  notify() {
+    const state = this.getState();
+    for (const listener of this.listeners) {
+      listener(state);
+    }
+  }
+  generateDeviceId() {
+    const bytes = new Uint8Array(16);
+    crypto.getRandomValues(bytes);
+    return "dev-" + Array.from(bytes, (b) => b.toString(16).padStart(2, "0")).join("");
+  }
+};
+
+// src/api/api-client.ts
+var import_axios = __toESM(require("axios"), 1);
+async function sha256(data) {
+  if (typeof globalThis.crypto?.subtle !== "undefined") {
+    const encoded = new TextEncoder().encode(data);
+    const hash = await globalThis.crypto.subtle.digest("SHA-256", encoded);
+    return Array.from(
+      new Uint8Array(hash),
+      (b) => b.toString(16).padStart(2, "0")
+    ).join("");
+  }
+  return simpleHash(data);
+}
+async function hmacSha256(secret, data) {
+  if (typeof globalThis.crypto?.subtle !== "undefined") {
+    const key = await globalThis.crypto.subtle.importKey(
+      "raw",
+      new TextEncoder().encode(secret),
+      { name: "HMAC", hash: "SHA-256" },
+      false,
+      ["sign"]
+    );
+    const sig = await globalThis.crypto.subtle.sign(
+      "HMAC",
+      key,
+      new TextEncoder().encode(data)
+    );
+    return Array.from(
+      new Uint8Array(sig),
+      (b) => b.toString(16).padStart(2, "0")
+    ).join("");
+  }
+  return simpleHmac(secret, data);
+}
+function simpleHash(str) {
+  let hash = 0;
+  for (let i = 0; i < str.length; i++) {
+    const char = str.charCodeAt(i);
+    hash = (hash << 5) - hash + char;
+    hash |= 0;
+  }
+  return Math.abs(hash).toString(16).padStart(16, "0");
+}
+function simpleHmac(key, data) {
+  return simpleHash(key + ":" + data);
+}
+function generateNonce() {
+  if (typeof globalThis.crypto?.randomUUID === "function") {
+    return globalThis.crypto.randomUUID();
+  }
+  const bytes = new Uint8Array(16);
+  if (typeof globalThis.crypto?.getRandomValues === "function") {
+    globalThis.crypto.getRandomValues(bytes);
+  } else {
+    for (let i = 0; i < 16; i++) {
+      bytes[i] = Math.floor(Math.random() * 256);
+    }
+  }
+  return Array.from(bytes, (b) => b.toString(16).padStart(2, "0")).join("");
+}
+var ApiClient = class {
+  constructor(baseURL, authManager, appSecret) {
+    this.authManager = authManager;
+    this.appSecret = appSecret;
+    this.instance = import_axios.default.create({
+      baseURL,
+      headers: { "Content-Type": "application/json" }
+    });
+    this.instance.interceptors.request.use(async (config) => {
+      if (!config.url?.includes("/auth/")) {
+        const token = this.authManager._getAccessToken();
+        if (token) {
+          config.headers.Authorization = `Bearer ${token}`;
+        }
+      }
+      if (this.appSecret) {
+        const timestamp = Date.now().toString();
+        const nonce = generateNonce();
+        const body = config.data && typeof config.data === "object" ? JSON.stringify(config.data) : config.data ?? "";
+        const bodyHash = body ? await sha256(body) : "";
+        const method = (config.method ?? "GET").toUpperCase();
+        const url = config.url ?? "/";
+        const payload = [method, url, timestamp, nonce, bodyHash].join("\n");
+        const signature = await hmacSha256(this.appSecret, payload);
+        config.headers["X-Codixus-Timestamp"] = timestamp;
+        config.headers["X-Codixus-Nonce"] = nonce;
+        config.headers["X-Codixus-Signature"] = signature;
+      }
+      return config;
+    });
+    this.instance.interceptors.response.use(
+      (response) => response,
+      async (error) => {
+        if (error.response?.status === 401) {
+          const originalRequest = error.config;
+          if (originalRequest && !originalRequest._retry) {
+            originalRequest._retry = true;
+            try {
+              if (!this.refreshPromise) {
+                this.refreshPromise = this.authManager.forceRefresh().finally(() => {
+                  this.refreshPromise = null;
+                });
+              }
+              const newToken = await this.refreshPromise;
+              if (newToken) {
+                originalRequest.headers.Authorization = `Bearer ${newToken}`;
+                return this.instance(originalRequest);
+              }
+            } catch (refreshError) {
+              console.warn("[CodixusClient] Token refresh failed:", refreshError);
+            }
+          }
+        }
+        return Promise.reject(error);
+      }
+    );
+  }
+  instance;
+  refreshPromise = null;
+  appSecret;
+  async get(url, config) {
+    return this.instance.get(url, config);
+  }
+  async post(url, data, config) {
+    return this.instance.post(url, data, config);
+  }
+  async patch(url, data, config) {
+    return this.instance.patch(url, data, config);
+  }
+  async delete(url, config) {
+    return this.instance.delete(url, config);
+  }
+  async put(url, data, config) {
+    return this.instance.put(url, data, config);
+  }
+};
+
+// src/db/collection.ts
+var Collection = class {
+  constructor(api, basePath) {
+    this.api = api;
+    this.basePath = basePath;
+  }
+  async find(filter, options) {
+    const params = new URLSearchParams();
+    if (filter && Object.keys(filter).length > 0) {
+      params.set("filter", JSON.stringify(filter));
+    }
+    if (options?.sort) params.set("sort", JSON.stringify(options.sort));
+    if (options?.limit) params.set("limit", String(options.limit));
+    if (options?.skip) params.set("skip", String(options.skip));
+    if (options?.cursor) params.set("cursor", String(options.cursor));
+    const qs = params.toString();
+    const url = qs ? `${this.basePath}?${qs}` : this.basePath;
+    const { data } = await this.api.get(url);
+    return data.data;
+  }
+  async findWithCursor(filter, options) {
+    const params = new URLSearchParams();
+    if (filter && Object.keys(filter).length > 0) {
+      params.set("filter", JSON.stringify(filter));
+    }
+    if (options?.sort) params.set("sort", JSON.stringify(options.sort));
+    if (options?.limit) params.set("limit", String(options.limit));
+    if (options?.cursor) params.set("cursor", String(options.cursor));
+    const qs = params.toString();
+    const url = qs ? `${this.basePath}?${qs}` : this.basePath;
+    const { data } = await this.api.get(url);
+    return { data: data.data, nextCursor: data.nextCursor };
+  }
+  async findById(id) {
+    try {
+      const { data } = await this.api.get(
+        `${this.basePath}/${id}`
+      );
+      return data.data;
+    } catch (error) {
+      if (error.response?.status === 404) return null;
+      throw error;
+    }
+  }
+  async create(doc) {
+    const { data } = await this.api.post(
+      this.basePath,
+      doc
+    );
+    return data.data;
+  }
+  async updateById(id, update) {
+    const { data } = await this.api.patch(
+      `${this.basePath}/${id}`,
+      { update }
+    );
+    return data.data;
+  }
+  async deleteById(id) {
+    await this.api.delete(`${this.basePath}/${id}`);
+  }
+  async count(filter) {
+    const { data } = await this.api.post(
+      `${this.basePath}/count`,
+      { filter: filter ?? {} }
+    );
+    return data.count;
+  }
+};
+
+// src/index.ts
+var import_shared = require("@codixus/shared");
+var CodixusClient = class {
+  auth;
+  api;
+  constructor(config) {
+    const storageKey = config.storageKey ?? "codixus";
+    const storage = config.storage ?? null;
+    this.auth = new AuthManager(storage, storageKey);
+    this.api = new ApiClient(config.apiUrl, this.auth, config.appSecret);
+    this.auth._setApi(this.api);
+  }
+  /**
+   * Create a typed collection accessor.
+   * Maps to auto REST routes on server: codixus.rest(Model)
+   *
+   * @example
+   * interface Product { _id: string; name: string; price: number; }
+   * const products = codixus.collection<Product>("products");
+   * const all = await products.find();            // Product[]
+   * const one = await products.findById("abc");   // Product | null
+   */
+  collection(name) {
+    return new Collection(this.api, `/api/${name}`);
+  }
+  async init() {
+    await this.auth.init();
+  }
+};
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  ApiClient,
+  CodixusClient,
+  CodixusError,
+  Collection,
+  ErrorCodes
+});
+//# sourceMappingURL=index.cjs.map

package/dist/index.cjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/index.ts","../src/auth/auth-manager.ts","../src/api/api-client.ts","../src/db/collection.ts"],"sourcesContent":["import {\n  AuthManager,\n  type StorageAdapter,\n  type SignInParams,\n  type AuthState,\n} from \"./auth/auth-manager.js\";\nimport { ApiClient } from \"./api/api-client.js\";\nimport { Collection, type FindOptions } from \"./db/collection.js\";\n\nexport interface CodixusClientConfig {\n  apiUrl: string;\n  storageKey?: string;\n  storage?: StorageAdapter | null;\n  appSecret?: string;\n}\n\nexport class CodixusClient {\n  readonly auth: AuthManager;\n  readonly api: ApiClient;\n\n  constructor(config: CodixusClientConfig) {\n    const storageKey = config.storageKey ?? \"codixus\";\n    const storage = config.storage ?? null;\n\n    this.auth = new AuthManager(storage, storageKey);\n    this.api = new ApiClient(config.apiUrl, this.auth, config.appSecret);\n    this.auth._setApi(this.api);\n  }\n\n  /**\n   * Create a typed collection accessor.\n   * Maps to auto REST routes on server: codixus.rest(Model)\n   *\n   * @example\n   * interface Product { _id: string; name: string; price: number; }\n   * const products = codixus.collection<Product>(\"products\");\n   * const all = await products.find();            // Product[]\n   * const one = await products.findById(\"abc\");   // Product | null\n   */\n  collection<T>(name: string): Collection<T> {\n    return new Collection<T>(this.api, `/api/${name}`);\n  }\n\n  async init(): Promise<void> {\n    await this.auth.init();\n  }\n}\n\nexport {\n  type StorageAdapter,\n  type SignInParams,\n  type AuthState,\n} from \"./auth/auth-manager.js\";\nexport { ApiClient } from \"./api/api-client.js\";\nexport { Collection, type FindOptions } from \"./db/collection.js\";\n\n// Re-export shared types\nexport {\n  type AuthUser,\n  type TokenPair,\n  type DeviceInfo,\n  type DeviceMetadata,\n  type AuthTokenRequest,\n  type AuthTokenResponse,\n  type ApiResponse,\n  CodixusError,\n  ErrorCodes,\n} from \"@codixus/shared\";\n","import type {\n  AuthTokenResponse,\n  DeviceInfo,\n  DeviceMetadata,\n} from \"@codixus/shared\";\nimport type { ApiClient } from \"../api/api-client.js\";\n\nexport interface StorageAdapter {\n  getItem(key: string): Promise<string | null> | string | null;\n  setItem(key: string, value: string): Promise<void> | void;\n  removeItem(key: string): Promise<void> | void;\n}\n\nexport interface SignInParams {\n  deviceId?: string;\n  deviceInfo: DeviceInfo;\n  metadata?: DeviceMetadata;\n}\n\nexport interface AuthState {\n  isAuthenticated: boolean;\n  isLoading: boolean;\n  user: Record<string, unknown> | null;\n}\n\ntype AuthStateListener = (state: AuthState) => void;\n\nexport class AuthManager {\n  private accessToken: string | null = null;\n  private refreshTokenValue: string | null = null;\n  private user: Record<string, unknown> | null = null;\n  private listeners: Set<AuthStateListener> = new Set();\n  private _isLoading = true;\n  private storageKey: string;\n  private api!: ApiClient;\n  private deviceId: string | null = null;\n\n  constructor(\n    private storage: StorageAdapter | null,\n    storageKey: string,\n  ) {\n    this.storageKey = storageKey;\n  }\n\n  /** @internal */\n  _setApi(api: ApiClient): void {\n    this.api = api;\n  }\n\n  async init(): Promise<void> {\n    if (!this.storage) {\n      this._isLoading = false;\n      return;\n    }\n\n    try {\n      const storedRefresh = await this.storage.getItem(\n        `${this.storageKey}_refresh_token`,\n      );\n      const storedUser = await this.storage.getItem(\n        `${this.storageKey}_user`,\n      );\n      const storedDeviceId = await this.storage.getItem(\n        `${this.storageKey}_device_id`,\n      );\n\n      if (storedRefresh) {\n        this.refreshTokenValue = storedRefresh;\n      }\n      if (storedUser) {\n        try {\n          this.user = JSON.parse(storedUser);\n        } catch {\n          // Corrupted user data in storage, ignore\n        }\n      }\n      if (storedDeviceId) {\n        this.deviceId = storedDeviceId;\n      }\n    } catch (error) {\n      console.warn(\"[CodixusClient] Failed to restore auth state from storage:\", error);\n    }\n\n    this._isLoading = false;\n    this.notify();\n  }\n\n  async signIn(\n    params: SignInParams,\n  ): Promise<{ user: Record<string, unknown>; isNewUser: boolean }> {\n    const deviceId = params.deviceId ?? this.deviceId ?? this.generateDeviceId();\n\n    const response = await this.api.post<AuthTokenResponse>(\"/auth/token\", {\n      deviceId,\n      deviceInfo: params.deviceInfo,\n      metadata: params.metadata,\n    });\n\n    const data = response.data;\n    this.accessToken = data.accessToken;\n    this.refreshTokenValue = data.refreshToken;\n    this.user = data.user;\n    this.deviceId = deviceId;\n\n    // Persist\n    if (this.storage) {\n      await this.storage.setItem(\n        `${this.storageKey}_refresh_token`,\n        data.refreshToken,\n      );\n      await this.storage.setItem(\n        `${this.storageKey}_user`,\n        JSON.stringify(data.user),\n      );\n      await this.storage.setItem(`${this.storageKey}_device_id`, deviceId);\n    }\n\n    this.notify();\n    return { user: data.user, isNewUser: data.isNewUser };\n  }\n\n  async getToken(): Promise<string | null> {\n    if (this.accessToken) return this.accessToken;\n\n    // Try refresh\n    if (this.refreshTokenValue) {\n      try {\n        await this.forceRefresh();\n        return this.accessToken;\n      } catch {\n        return null;\n      }\n    }\n\n    return null;\n  }\n\n  async forceRefresh(): Promise<string | null> {\n    if (!this.refreshTokenValue) return null;\n\n    try {\n      const response = await this.api.post<{\n        success: boolean;\n        accessToken: string;\n        refreshToken: string;\n      }>(\"/auth/refresh\", {\n        refreshToken: this.refreshTokenValue,\n      });\n\n      this.accessToken = response.data.accessToken;\n      this.refreshTokenValue = response.data.refreshToken;\n\n      if (this.storage) {\n        await this.storage.setItem(\n          `${this.storageKey}_refresh_token`,\n          response.data.refreshToken,\n        );\n      }\n\n      return this.accessToken;\n    } catch {\n      // Refresh failed, clear auth state\n      await this.signOut();\n      return null;\n    }\n  }\n\n  async signOut(): Promise<void> {\n    // Notify server\n    if (this.refreshTokenValue) {\n      try {\n        await this.api.post(\"/auth/logout\", {\n          refreshToken: this.refreshTokenValue,\n        });\n      } catch {}\n    }\n\n    this.accessToken = null;\n    this.refreshTokenValue = null;\n    this.user = null;\n\n    if (this.storage) {\n      await this.storage.removeItem(`${this.storageKey}_refresh_token`);\n      await this.storage.removeItem(`${this.storageKey}_user`);\n      await this.storage.removeItem(`${this.storageKey}_device_id`);\n    }\n\n    this.notify();\n  }\n\n  getState(): AuthState {\n    return {\n      isAuthenticated: this.accessToken !== null || this.refreshTokenValue !== null,\n      isLoading: this._isLoading,\n      user: this.user,\n    };\n  }\n\n  getDeviceId(): string | null {\n    return this.deviceId;\n  }\n\n  onAuthStateChange(listener: AuthStateListener): () => void {\n    this.listeners.add(listener);\n    // Call immediately with current state\n    listener(this.getState());\n    return () => {\n      this.listeners.delete(listener);\n    };\n  }\n\n  /** @internal - used by API interceptor */\n  _getAccessToken(): string | null {\n    return this.accessToken;\n  }\n\n  /** @internal - called by API interceptor after refresh */\n  _setAccessToken(token: string): void {\n    this.accessToken = token;\n  }\n\n  private notify(): void {\n    const state = this.getState();\n    for (const listener of this.listeners) {\n      listener(state);\n    }\n  }\n\n  private generateDeviceId(): string {\n    const bytes = new Uint8Array(16);\n    crypto.getRandomValues(bytes);\n    return \"dev-\" + Array.from(bytes, (b) => b.toString(16).padStart(2, \"0\")).join(\"\");\n  }\n}\n","import axios, {\n  type AxiosInstance,\n  type AxiosRequestConfig,\n  type AxiosResponse,\n} from \"axios\";\nimport type { AuthManager } from \"../auth/auth-manager.js\";\n\n// Lightweight crypto helpers that work in both browser and React Native\nasync function sha256(data: string): Promise<string> {\n  if (typeof globalThis.crypto?.subtle !== \"undefined\") {\n    const encoded = new TextEncoder().encode(data);\n    const hash = await globalThis.crypto.subtle.digest(\"SHA-256\", encoded);\n    return Array.from(new Uint8Array(hash), (b) =>\n      b.toString(16).padStart(2, \"0\"),\n    ).join(\"\");\n  }\n  // Fallback: simple hash (React Native without crypto.subtle)\n  return simpleHash(data);\n}\n\nasync function hmacSha256(secret: string, data: string): Promise<string> {\n  if (typeof globalThis.crypto?.subtle !== \"undefined\") {\n    const key = await globalThis.crypto.subtle.importKey(\n      \"raw\",\n      new TextEncoder().encode(secret),\n      { name: \"HMAC\", hash: \"SHA-256\" },\n      false,\n      [\"sign\"],\n    );\n    const sig = await globalThis.crypto.subtle.sign(\n      \"HMAC\",\n      key,\n      new TextEncoder().encode(data),\n    );\n    return Array.from(new Uint8Array(sig), (b) =>\n      b.toString(16).padStart(2, \"0\"),\n    ).join(\"\");\n  }\n  // Fallback for environments without SubtleCrypto\n  return simpleHmac(secret, data);\n}\n\n// Simple fallback hash for environments without SubtleCrypto\nfunction simpleHash(str: string): string {\n  let hash = 0;\n  for (let i = 0; i < str.length; i++) {\n    const char = str.charCodeAt(i);\n    hash = (hash << 5) - hash + char;\n    hash |= 0;\n  }\n  return Math.abs(hash).toString(16).padStart(16, \"0\");\n}\n\nfunction simpleHmac(key: string, data: string): string {\n  return simpleHash(key + \":\" + data);\n}\n\nfunction generateNonce(): string {\n  if (typeof globalThis.crypto?.randomUUID === \"function\") {\n    return globalThis.crypto.randomUUID();\n  }\n  // Fallback\n  const bytes = new Uint8Array(16);\n  if (typeof globalThis.crypto?.getRandomValues === \"function\") {\n    globalThis.crypto.getRandomValues(bytes);\n  } else {\n    for (let i = 0; i < 16; i++) {\n      bytes[i] = Math.floor(Math.random() * 256);\n    }\n  }\n  return Array.from(bytes, (b) => b.toString(16).padStart(2, \"0\")).join(\"\");\n}\n\nexport class ApiClient {\n  readonly instance: AxiosInstance;\n  private refreshPromise: Promise<string | null> | null = null;\n  private appSecret: string | undefined;\n\n  constructor(\n    baseURL: string,\n    private authManager: AuthManager,\n    appSecret?: string,\n  ) {\n    this.appSecret = appSecret;\n\n    this.instance = axios.create({\n      baseURL,\n      headers: { \"Content-Type\": \"application/json\" },\n    });\n\n    // Request interceptor: add Bearer token + signing\n    this.instance.interceptors.request.use(async (config) => {\n      // Skip auth for auth endpoints\n      if (!config.url?.includes(\"/auth/\")) {\n        const token = this.authManager._getAccessToken();\n        if (token) {\n          config.headers.Authorization = `Bearer ${token}`;\n        }\n      }\n\n      // Request signing\n      if (this.appSecret) {\n        const timestamp = Date.now().toString();\n        const nonce = generateNonce();\n        const body =\n          config.data && typeof config.data === \"object\"\n            ? JSON.stringify(config.data)\n            : (config.data ?? \"\");\n        const bodyHash = body ? await sha256(body) : \"\";\n        const method = (config.method ?? \"GET\").toUpperCase();\n        const url = config.url ?? \"/\";\n        const payload = [method, url, timestamp, nonce, bodyHash].join(\"\\n\");\n        const signature = await hmacSha256(this.appSecret, payload);\n\n        config.headers[\"X-Codixus-Timestamp\"] = timestamp;\n        config.headers[\"X-Codixus-Nonce\"] = nonce;\n        config.headers[\"X-Codixus-Signature\"] = signature;\n      }\n\n      return config;\n    });\n\n    // Response interceptor: handle 401 with token refresh\n    this.instance.interceptors.response.use(\n      (response) => response,\n      async (error) => {\n        if (error.response?.status === 401) {\n          const originalRequest = error.config;\n          if (originalRequest && !originalRequest._retry) {\n            originalRequest._retry = true;\n\n            try {\n              // Promise lock to prevent concurrent refreshes\n              if (!this.refreshPromise) {\n                this.refreshPromise = this.authManager\n                  .forceRefresh()\n                  .finally(() => {\n                    this.refreshPromise = null;\n                  });\n              }\n\n              const newToken = await this.refreshPromise;\n              if (newToken) {\n                originalRequest.headers.Authorization = `Bearer ${newToken}`;\n                return this.instance(originalRequest);\n              }\n            } catch (refreshError) {\n              console.warn(\"[CodixusClient] Token refresh failed:\", refreshError);\n            }\n          }\n        }\n        return Promise.reject(error);\n      },\n    );\n  }\n\n  async get<T = unknown>(\n    url: string,\n    config?: AxiosRequestConfig,\n  ): Promise<AxiosResponse<T>> {\n    return this.instance.get<T>(url, config);\n  }\n\n  async post<T = unknown>(\n    url: string,\n    data?: unknown,\n    config?: AxiosRequestConfig,\n  ): Promise<AxiosResponse<T>> {\n    return this.instance.post<T>(url, data, config);\n  }\n\n  async patch<T = unknown>(\n    url: string,\n    data?: unknown,\n    config?: AxiosRequestConfig,\n  ): Promise<AxiosResponse<T>> {\n    return this.instance.patch<T>(url, data, config);\n  }\n\n  async delete<T = unknown>(\n    url: string,\n    config?: AxiosRequestConfig,\n  ): Promise<AxiosResponse<T>> {\n    return this.instance.delete<T>(url, config);\n  }\n\n  async put<T = unknown>(\n    url: string,\n    data?: unknown,\n    config?: AxiosRequestConfig,\n  ): Promise<AxiosResponse<T>> {\n    return this.instance.put<T>(url, data, config);\n  }\n}\n","import type { ApiClient } from \"../api/api-client.js\";\n\nexport interface FindOptions {\n  sort?: Record<string, 1 | -1>;\n  limit?: number;\n  skip?: number;\n  cursor?: string | number;\n}\n\nexport class Collection<T = Record<string, unknown>> {\n  constructor(\n    private api: ApiClient,\n    private basePath: string,\n  ) {}\n\n  async find(\n    filter?: Record<string, unknown>,\n    options?: FindOptions,\n  ): Promise<T[]> {\n    const params = new URLSearchParams();\n    if (filter && Object.keys(filter).length > 0) {\n      params.set(\"filter\", JSON.stringify(filter));\n    }\n    if (options?.sort) params.set(\"sort\", JSON.stringify(options.sort));\n    if (options?.limit) params.set(\"limit\", String(options.limit));\n    if (options?.skip) params.set(\"skip\", String(options.skip));\n    if (options?.cursor) params.set(\"cursor\", String(options.cursor));\n\n    const qs = params.toString();\n    const url = qs ? `${this.basePath}?${qs}` : this.basePath;\n    const { data } = await this.api.get<{ success: boolean; data: T[]; nextCursor?: string | null }>(url);\n    return data.data;\n  }\n\n  async findWithCursor(\n    filter?: Record<string, unknown>,\n    options?: FindOptions,\n  ): Promise<{ data: T[]; nextCursor: string | number | null }> {\n    const params = new URLSearchParams();\n    if (filter && Object.keys(filter).length > 0) {\n      params.set(\"filter\", JSON.stringify(filter));\n    }\n    if (options?.sort) params.set(\"sort\", JSON.stringify(options.sort));\n    if (options?.limit) params.set(\"limit\", String(options.limit));\n    if (options?.cursor) params.set(\"cursor\", String(options.cursor));\n\n    const qs = params.toString();\n    const url = qs ? `${this.basePath}?${qs}` : this.basePath;\n    const { data } = await this.api.get<{ success: boolean; data: T[]; nextCursor: string | number | null }>(url);\n    return { data: data.data, nextCursor: data.nextCursor };\n  }\n\n  async findById(id: string): Promise<T | null> {\n    try {\n      const { data } = await this.api.get<{ success: boolean; data: T }>(\n        `${this.basePath}/${id}`,\n      );\n      return data.data;\n    } catch (error: any) {\n      if (error.response?.status === 404) return null;\n      throw error;\n    }\n  }\n\n  async create(doc: Partial<T> & Record<string, unknown>): Promise<T> {\n    const { data } = await this.api.post<{ success: boolean; data: T }>(\n      this.basePath,\n      doc,\n    );\n    return data.data;\n  }\n\n  async updateById(\n    id: string,\n    update: Record<string, unknown>,\n  ): Promise<T> {\n    const { data } = await this.api.patch<{ success: boolean; data: T }>(\n      `${this.basePath}/${id}`,\n      { update },\n    );\n    return data.data;\n  }\n\n  async deleteById(id: string): Promise<void> {\n    await this.api.delete(`${this.basePath}/${id}`);\n  }\n\n  async count(filter?: Record<string, unknown>): Promise<number> {\n    const { data } = await this.api.post<{ success: boolean; count: number }>(\n      `${this.basePath}/count`,\n      { filter: filter ?? {} },\n    );\n    return data.count;\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;;;AC2BO,IAAM,cAAN,MAAkB;AAAA,EAUvB,YACU,SACR,YACA;AAFQ;AAGR,SAAK,aAAa;AAAA,EACpB;AAAA,EAdQ,cAA6B;AAAA,EAC7B,oBAAmC;AAAA,EACnC,OAAuC;AAAA,EACvC,YAAoC,oBAAI,IAAI;AAAA,EAC5C,aAAa;AAAA,EACb;AAAA,EACA;AAAA,EACA,WAA0B;AAAA;AAAA,EAUlC,QAAQ,KAAsB;AAC5B,SAAK,MAAM;AAAA,EACb;AAAA,EAEA,MAAM,OAAsB;AAC1B,QAAI,CAAC,KAAK,SAAS;AACjB,WAAK,aAAa;AAClB;AAAA,IACF;AAEA,QAAI;AACF,YAAM,gBAAgB,MAAM,KAAK,QAAQ;AAAA,QACvC,GAAG,KAAK,UAAU;AAAA,MACpB;AACA,YAAM,aAAa,MAAM,KAAK,QAAQ;AAAA,QACpC,GAAG,KAAK,UAAU;AAAA,MACpB;AACA,YAAM,iBAAiB,MAAM,KAAK,QAAQ;AAAA,QACxC,GAAG,KAAK,UAAU;AAAA,MACpB;AAEA,UAAI,eAAe;AACjB,aAAK,oBAAoB;AAAA,MAC3B;AACA,UAAI,YAAY;AACd,YAAI;AACF,eAAK,OAAO,KAAK,MAAM,UAAU;AAAA,QACnC,QAAQ;AAAA,QAER;AAAA,MACF;AACA,UAAI,gBAAgB;AAClB,aAAK,WAAW;AAAA,MAClB;AAAA,IACF,SAAS,OAAO;AACd,cAAQ,KAAK,8DAA8D,KAAK;AAAA,IAClF;AAEA,SAAK,aAAa;AAClB,SAAK,OAAO;AAAA,EACd;AAAA,EAEA,MAAM,OACJ,QACgE;AAChE,UAAM,WAAW,OAAO,YAAY,KAAK,YAAY,KAAK,iBAAiB;AAE3E,UAAM,WAAW,MAAM,KAAK,IAAI,KAAwB,eAAe;AAAA,MACrE;AAAA,MACA,YAAY,OAAO;AAAA,MACnB,UAAU,OAAO;AAAA,IACnB,CAAC;AAED,UAAM,OAAO,SAAS;AACtB,SAAK,cAAc,KAAK;AACxB,SAAK,oBAAoB,KAAK;AAC9B,SAAK,OAAO,KAAK;AACjB,SAAK,WAAW;AAGhB,QAAI,KAAK,SAAS;AAChB,YAAM,KAAK,QAAQ;AAAA,QACjB,GAAG,KAAK,UAAU;AAAA,QAClB,KAAK;AAAA,MACP;AACA,YAAM,KAAK,QAAQ;AAAA,QACjB,GAAG,KAAK,UAAU;AAAA,QAClB,KAAK,UAAU,KAAK,IAAI;AAAA,MAC1B;AACA,YAAM,KAAK,QAAQ,QAAQ,GAAG,KAAK,UAAU,cAAc,QAAQ;AAAA,IACrE;AAEA,SAAK,OAAO;AACZ,WAAO,EAAE,MAAM,KAAK,MAAM,WAAW,KAAK,UAAU;AAAA,EACtD;AAAA,EAEA,MAAM,WAAmC;AACvC,QAAI,KAAK,YAAa,QAAO,KAAK;AAGlC,QAAI,KAAK,mBAAmB;AAC1B,UAAI;AACF,cAAM,KAAK,aAAa;AACxB,eAAO,KAAK;AAAA,MACd,QAAQ;AACN,eAAO;AAAA,MACT;AAAA,IACF;AAEA,WAAO;AAAA,EACT;AAAA,EAEA,MAAM,eAAuC;AAC3C,QAAI,CAAC,KAAK,kBAAmB,QAAO;AAEpC,QAAI;AACF,YAAM,WAAW,MAAM,KAAK,IAAI,KAI7B,iBAAiB;AAAA,QAClB,cAAc,KAAK;AAAA,MACrB,CAAC;AAED,WAAK,cAAc,SAAS,KAAK;AACjC,WAAK,oBAAoB,SAAS,KAAK;AAEvC,UAAI,KAAK,SAAS;AAChB,cAAM,KAAK,QAAQ;AAAA,UACjB,GAAG,KAAK,UAAU;AAAA,UAClB,SAAS,KAAK;AAAA,QAChB;AAAA,MACF;AAEA,aAAO,KAAK;AAAA,IACd,QAAQ;AAEN,YAAM,KAAK,QAAQ;AACnB,aAAO;AAAA,IACT;AAAA,EACF;AAAA,EAEA,MAAM,UAAyB;AAE7B,QAAI,KAAK,mBAAmB;AAC1B,UAAI;AACF,cAAM,KAAK,IAAI,KAAK,gBAAgB;AAAA,UAClC,cAAc,KAAK;AAAA,QACrB,CAAC;AAAA,MACH,QAAQ;AAAA,MAAC;AAAA,IACX;AAEA,SAAK,cAAc;AACnB,SAAK,oBAAoB;AACzB,SAAK,OAAO;AAEZ,QAAI,KAAK,SAAS;AAChB,YAAM,KAAK,QAAQ,WAAW,GAAG,KAAK,UAAU,gBAAgB;AAChE,YAAM,KAAK,QAAQ,WAAW,GAAG,KAAK,UAAU,OAAO;AACvD,YAAM,KAAK,QAAQ,WAAW,GAAG,KAAK,UAAU,YAAY;AAAA,IAC9D;AAEA,SAAK,OAAO;AAAA,EACd;AAAA,EAEA,WAAsB;AACpB,WAAO;AAAA,MACL,iBAAiB,KAAK,gBAAgB,QAAQ,KAAK,sBAAsB;AAAA,MACzE,WAAW,KAAK;AAAA,MAChB,MAAM,KAAK;AAAA,IACb;AAAA,EACF;AAAA,EAEA,cAA6B;AAC3B,WAAO,KAAK;AAAA,EACd;AAAA,EAEA,kBAAkB,UAAyC;AACzD,SAAK,UAAU,IAAI,QAAQ;AAE3B,aAAS,KAAK,SAAS,CAAC;AACxB,WAAO,MAAM;AACX,WAAK,UAAU,OAAO,QAAQ;AAAA,IAChC;AAAA,EACF;AAAA;AAAA,EAGA,kBAAiC;AAC/B,WAAO,KAAK;AAAA,EACd;AAAA;AAAA,EAGA,gBAAgB,OAAqB;AACnC,SAAK,cAAc;AAAA,EACrB;AAAA,EAEQ,SAAe;AACrB,UAAM,QAAQ,KAAK,SAAS;AAC5B,eAAW,YAAY,KAAK,WAAW;AACrC,eAAS,KAAK;AAAA,IAChB;AAAA,EACF;AAAA,EAEQ,mBAA2B;AACjC,UAAM,QAAQ,IAAI,WAAW,EAAE;AAC/B,WAAO,gBAAgB,KAAK;AAC5B,WAAO,SAAS,MAAM,KAAK,OAAO,CAAC,MAAM,EAAE,SAAS,EAAE,EAAE,SAAS,GAAG,GAAG,CAAC,EAAE,KAAK,EAAE;AAAA,EACnF;AACF;;;ACzOA,mBAIO;AAIP,eAAe,OAAO,MAA+B;AACnD,MAAI,OAAO,WAAW,QAAQ,WAAW,aAAa;AACpD,UAAM,UAAU,IAAI,YAAY,EAAE,OAAO,IAAI;AAC7C,UAAM,OAAO,MAAM,WAAW,OAAO,OAAO,OAAO,WAAW,OAAO;AACrE,WAAO,MAAM;AAAA,MAAK,IAAI,WAAW,IAAI;AAAA,MAAG,CAAC,MACvC,EAAE,SAAS,EAAE,EAAE,SAAS,GAAG,GAAG;AAAA,IAChC,EAAE,KAAK,EAAE;AAAA,EACX;AAEA,SAAO,WAAW,IAAI;AACxB;AAEA,eAAe,WAAW,QAAgB,MAA+B;AACvE,MAAI,OAAO,WAAW,QAAQ,WAAW,aAAa;AACpD,UAAM,MAAM,MAAM,WAAW,OAAO,OAAO;AAAA,MACzC;AAAA,MACA,IAAI,YAAY,EAAE,OAAO,MAAM;AAAA,MAC/B,EAAE,MAAM,QAAQ,MAAM,UAAU;AAAA,MAChC;AAAA,MACA,CAAC,MAAM;AAAA,IACT;AACA,UAAM,MAAM,MAAM,WAAW,OAAO,OAAO;AAAA,MACzC;AAAA,MACA;AAAA,MACA,IAAI,YAAY,EAAE,OAAO,IAAI;AAAA,IAC/B;AACA,WAAO,MAAM;AAAA,MAAK,IAAI,WAAW,GAAG;AAAA,MAAG,CAAC,MACtC,EAAE,SAAS,EAAE,EAAE,SAAS,GAAG,GAAG;AAAA,IAChC,EAAE,KAAK,EAAE;AAAA,EACX;AAEA,SAAO,WAAW,QAAQ,IAAI;AAChC;AAGA,SAAS,WAAW,KAAqB;AACvC,MAAI,OAAO;AACX,WAAS,IAAI,GAAG,IAAI,IAAI,QAAQ,KAAK;AACnC,UAAM,OAAO,IAAI,WAAW,CAAC;AAC7B,YAAQ,QAAQ,KAAK,OAAO;AAC5B,YAAQ;AAAA,EACV;AACA,SAAO,KAAK,IAAI,IAAI,EAAE,SAAS,EAAE,EAAE,SAAS,IAAI,GAAG;AACrD;AAEA,SAAS,WAAW,KAAa,MAAsB;AACrD,SAAO,WAAW,MAAM,MAAM,IAAI;AACpC;AAEA,SAAS,gBAAwB;AAC/B,MAAI,OAAO,WAAW,QAAQ,eAAe,YAAY;AACvD,WAAO,WAAW,OAAO,WAAW;AAAA,EACtC;AAEA,QAAM,QAAQ,IAAI,WAAW,EAAE;AAC/B,MAAI,OAAO,WAAW,QAAQ,oBAAoB,YAAY;AAC5D,eAAW,OAAO,gBAAgB,KAAK;AAAA,EACzC,OAAO;AACL,aAAS,IAAI,GAAG,IAAI,IAAI,KAAK;AAC3B,YAAM,CAAC,IAAI,KAAK,MAAM,KAAK,OAAO,IAAI,GAAG;AAAA,IAC3C;AAAA,EACF;AACA,SAAO,MAAM,KAAK,OAAO,CAAC,MAAM,EAAE,SAAS,EAAE,EAAE,SAAS,GAAG,GAAG,CAAC,EAAE,KAAK,EAAE;AAC1E;AAEO,IAAM,YAAN,MAAgB;AAAA,EAKrB,YACE,SACQ,aACR,WACA;AAFQ;AAGR,SAAK,YAAY;AAEjB,SAAK,WAAW,aAAAA,QAAM,OAAO;AAAA,MAC3B;AAAA,MACA,SAAS,EAAE,gBAAgB,mBAAmB;AAAA,IAChD,CAAC;AAGD,SAAK,SAAS,aAAa,QAAQ,IAAI,OAAO,WAAW;AAEvD,UAAI,CAAC,OAAO,KAAK,SAAS,QAAQ,GAAG;AACnC,cAAM,QAAQ,KAAK,YAAY,gBAAgB;AAC/C,YAAI,OAAO;AACT,iBAAO,QAAQ,gBAAgB,UAAU,KAAK;AAAA,QAChD;AAAA,MACF;AAGA,UAAI,KAAK,WAAW;AAClB,cAAM,YAAY,KAAK,IAAI,EAAE,SAAS;AACtC,cAAM,QAAQ,cAAc;AAC5B,cAAM,OACJ,OAAO,QAAQ,OAAO,OAAO,SAAS,WAClC,KAAK,UAAU,OAAO,IAAI,IACzB,OAAO,QAAQ;AACtB,cAAM,WAAW,OAAO,MAAM,OAAO,IAAI,IAAI;AAC7C,cAAM,UAAU,OAAO,UAAU,OAAO,YAAY;AACpD,cAAM,MAAM,OAAO,OAAO;AAC1B,cAAM,UAAU,CAAC,QAAQ,KAAK,WAAW,OAAO,QAAQ,EAAE,KAAK,IAAI;AACnE,cAAM,YAAY,MAAM,WAAW,KAAK,WAAW,OAAO;AAE1D,eAAO,QAAQ,qBAAqB,IAAI;AACxC,eAAO,QAAQ,iBAAiB,IAAI;AACpC,eAAO,QAAQ,qBAAqB,IAAI;AAAA,MAC1C;AAEA,aAAO;AAAA,IACT,CAAC;AAGD,SAAK,SAAS,aAAa,SAAS;AAAA,MAClC,CAAC,aAAa;AAAA,MACd,OAAO,UAAU;AACf,YAAI,MAAM,UAAU,WAAW,KAAK;AAClC,gBAAM,kBAAkB,MAAM;AAC9B,cAAI,mBAAmB,CAAC,gBAAgB,QAAQ;AAC9C,4BAAgB,SAAS;AAEzB,gBAAI;AAEF,kBAAI,CAAC,KAAK,gBAAgB;AACxB,qBAAK,iBAAiB,KAAK,YACxB,aAAa,EACb,QAAQ,MAAM;AACb,uBAAK,iBAAiB;AAAA,gBACxB,CAAC;AAAA,cACL;AAEA,oBAAM,WAAW,MAAM,KAAK;AAC5B,kBAAI,UAAU;AACZ,gCAAgB,QAAQ,gBAAgB,UAAU,QAAQ;AAC1D,uBAAO,KAAK,SAAS,eAAe;AAAA,cACtC;AAAA,YACF,SAAS,cAAc;AACrB,sBAAQ,KAAK,yCAAyC,YAAY;AAAA,YACpE;AAAA,UACF;AAAA,QACF;AACA,eAAO,QAAQ,OAAO,KAAK;AAAA,MAC7B;AAAA,IACF;AAAA,EACF;AAAA,EAhFS;AAAA,EACD,iBAAgD;AAAA,EAChD;AAAA,EAgFR,MAAM,IACJ,KACA,QAC2B;AAC3B,WAAO,KAAK,SAAS,IAAO,KAAK,MAAM;AAAA,EACzC;AAAA,EAEA,MAAM,KACJ,KACA,MACA,QAC2B;AAC3B,WAAO,KAAK,SAAS,KAAQ,KAAK,MAAM,MAAM;AAAA,EAChD;AAAA,EAEA,MAAM,MACJ,KACA,MACA,QAC2B;AAC3B,WAAO,KAAK,SAAS,MAAS,KAAK,MAAM,MAAM;AAAA,EACjD;AAAA,EAEA,MAAM,OACJ,KACA,QAC2B;AAC3B,WAAO,KAAK,SAAS,OAAU,KAAK,MAAM;AAAA,EAC5C;AAAA,EAEA,MAAM,IACJ,KACA,MACA,QAC2B;AAC3B,WAAO,KAAK,SAAS,IAAO,KAAK,MAAM,MAAM;AAAA,EAC/C;AACF;;;ACxLO,IAAM,aAAN,MAA8C;AAAA,EACnD,YACU,KACA,UACR;AAFQ;AACA;AAAA,EACP;AAAA,EAEH,MAAM,KACJ,QACA,SACc;AACd,UAAM,SAAS,IAAI,gBAAgB;AACnC,QAAI,UAAU,OAAO,KAAK,MAAM,EAAE,SAAS,GAAG;AAC5C,aAAO,IAAI,UAAU,KAAK,UAAU,MAAM,CAAC;AAAA,IAC7C;AACA,QAAI,SAAS,KAAM,QAAO,IAAI,QAAQ,KAAK,UAAU,QAAQ,IAAI,CAAC;AAClE,QAAI,SAAS,MAAO,QAAO,IAAI,SAAS,OAAO,QAAQ,KAAK,CAAC;AAC7D,QAAI,SAAS,KAAM,QAAO,IAAI,QAAQ,OAAO,QAAQ,IAAI,CAAC;AAC1D,QAAI,SAAS,OAAQ,QAAO,IAAI,UAAU,OAAO,QAAQ,MAAM,CAAC;AAEhE,UAAM,KAAK,OAAO,SAAS;AAC3B,UAAM,MAAM,KAAK,GAAG,KAAK,QAAQ,IAAI,EAAE,KAAK,KAAK;AACjD,UAAM,EAAE,KAAK,IAAI,MAAM,KAAK,IAAI,IAAiE,GAAG;AACpG,WAAO,KAAK;AAAA,EACd;AAAA,EAEA,MAAM,eACJ,QACA,SAC4D;AAC5D,UAAM,SAAS,IAAI,gBAAgB;AACnC,QAAI,UAAU,OAAO,KAAK,MAAM,EAAE,SAAS,GAAG;AAC5C,aAAO,IAAI,UAAU,KAAK,UAAU,MAAM,CAAC;AAAA,IAC7C;AACA,QAAI,SAAS,KAAM,QAAO,IAAI,QAAQ,KAAK,UAAU,QAAQ,IAAI,CAAC;AAClE,QAAI,SAAS,MAAO,QAAO,IAAI,SAAS,OAAO,QAAQ,KAAK,CAAC;AAC7D,QAAI,SAAS,OAAQ,QAAO,IAAI,UAAU,OAAO,QAAQ,MAAM,CAAC;AAEhE,UAAM,KAAK,OAAO,SAAS;AAC3B,UAAM,MAAM,KAAK,GAAG,KAAK,QAAQ,IAAI,EAAE,KAAK,KAAK;AACjD,UAAM,EAAE,KAAK,IAAI,MAAM,KAAK,IAAI,IAAyE,GAAG;AAC5G,WAAO,EAAE,MAAM,KAAK,MAAM,YAAY,KAAK,WAAW;AAAA,EACxD;AAAA,EAEA,MAAM,SAAS,IAA+B;AAC5C,QAAI;AACF,YAAM,EAAE,KAAK,IAAI,MAAM,KAAK,IAAI;AAAA,QAC9B,GAAG,KAAK,QAAQ,IAAI,EAAE;AAAA,MACxB;AACA,aAAO,KAAK;AAAA,IACd,SAAS,OAAY;AACnB,UAAI,MAAM,UAAU,WAAW,IAAK,QAAO;AAC3C,YAAM;AAAA,IACR;AAAA,EACF;AAAA,EAEA,MAAM,OAAO,KAAuD;AAClE,UAAM,EAAE,KAAK,IAAI,MAAM,KAAK,IAAI;AAAA,MAC9B,KAAK;AAAA,MACL;AAAA,IACF;AACA,WAAO,KAAK;AAAA,EACd;AAAA,EAEA,MAAM,WACJ,IACA,QACY;AACZ,UAAM,EAAE,KAAK,IAAI,MAAM,KAAK,IAAI;AAAA,MAC9B,GAAG,KAAK,QAAQ,IAAI,EAAE;AAAA,MACtB,EAAE,OAAO;AAAA,IACX;AACA,WAAO,KAAK;AAAA,EACd;AAAA,EAEA,MAAM,WAAW,IAA2B;AAC1C,UAAM,KAAK,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,EAAE,EAAE;AAAA,EAChD;AAAA,EAEA,MAAM,MAAM,QAAmD;AAC7D,UAAM,EAAE,KAAK,IAAI,MAAM,KAAK,IAAI;AAAA,MAC9B,GAAG,KAAK,QAAQ;AAAA,MAChB,EAAE,QAAQ,UAAU,CAAC,EAAE;AAAA,IACzB;AACA,WAAO,KAAK;AAAA,EACd;AACF;;;AHrCA,oBAUO;AAnDA,IAAM,gBAAN,MAAoB;AAAA,EAChB;AAAA,EACA;AAAA,EAET,YAAY,QAA6B;AACvC,UAAM,aAAa,OAAO,cAAc;AACxC,UAAM,UAAU,OAAO,WAAW;AAElC,SAAK,OAAO,IAAI,YAAY,SAAS,UAAU;AAC/C,SAAK,MAAM,IAAI,UAAU,OAAO,QAAQ,KAAK,MAAM,OAAO,SAAS;AACnE,SAAK,KAAK,QAAQ,KAAK,GAAG;AAAA,EAC5B;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAYA,WAAc,MAA6B;AACzC,WAAO,IAAI,WAAc,KAAK,KAAK,QAAQ,IAAI,EAAE;AAAA,EACnD;AAAA,EAEA,MAAM,OAAsB;AAC1B,UAAM,KAAK,KAAK,KAAK;AAAA,EACvB;AACF;","names":["axios"]}

package/dist/index.d.cts

@@ -0,0 +1,112 @@
+import { DeviceInfo, DeviceMetadata } from '@codixus/shared';
+export { ApiResponse, AuthTokenRequest, AuthTokenResponse, AuthUser, CodixusError, DeviceInfo, DeviceMetadata, ErrorCodes, TokenPair } from '@codixus/shared';
+import { AxiosInstance, AxiosRequestConfig, AxiosResponse } from 'axios';
+
+declare class ApiClient {
+    private authManager;
+    readonly instance: AxiosInstance;
+    private refreshPromise;
+    private appSecret;
+    constructor(baseURL: string, authManager: AuthManager, appSecret?: string);
+    get<T = unknown>(url: string, config?: AxiosRequestConfig): Promise<AxiosResponse<T>>;
+    post<T = unknown>(url: string, data?: unknown, config?: AxiosRequestConfig): Promise<AxiosResponse<T>>;
+    patch<T = unknown>(url: string, data?: unknown, config?: AxiosRequestConfig): Promise<AxiosResponse<T>>;
+    delete<T = unknown>(url: string, config?: AxiosRequestConfig): Promise<AxiosResponse<T>>;
+    put<T = unknown>(url: string, data?: unknown, config?: AxiosRequestConfig): Promise<AxiosResponse<T>>;
+}
+
+interface StorageAdapter {
+    getItem(key: string): Promise<string | null> | string | null;
+    setItem(key: string, value: string): Promise<void> | void;
+    removeItem(key: string): Promise<void> | void;
+}
+interface SignInParams {
+    deviceId?: string;
+    deviceInfo: DeviceInfo;
+    metadata?: DeviceMetadata;
+}
+interface AuthState {
+    isAuthenticated: boolean;
+    isLoading: boolean;
+    user: Record<string, unknown> | null;
+}
+type AuthStateListener = (state: AuthState) => void;
+declare class AuthManager {
+    private storage;
+    private accessToken;
+    private refreshTokenValue;
+    private user;
+    private listeners;
+    private _isLoading;
+    private storageKey;
+    private api;
+    private deviceId;
+    constructor(storage: StorageAdapter | null, storageKey: string);
+    /** @internal */
+    _setApi(api: ApiClient): void;
+    init(): Promise<void>;
+    signIn(params: SignInParams): Promise<{
+        user: Record<string, unknown>;
+        isNewUser: boolean;
+    }>;
+    getToken(): Promise<string | null>;
+    forceRefresh(): Promise<string | null>;
+    signOut(): Promise<void>;
+    getState(): AuthState;
+    getDeviceId(): string | null;
+    onAuthStateChange(listener: AuthStateListener): () => void;
+    /** @internal - used by API interceptor */
+    _getAccessToken(): string | null;
+    /** @internal - called by API interceptor after refresh */
+    _setAccessToken(token: string): void;
+    private notify;
+    private generateDeviceId;
+}
+
+interface FindOptions {
+    sort?: Record<string, 1 | -1>;
+    limit?: number;
+    skip?: number;
+    cursor?: string | number;
+}
+declare class Collection<T = Record<string, unknown>> {
+    private api;
+    private basePath;
+    constructor(api: ApiClient, basePath: string);
+    find(filter?: Record<string, unknown>, options?: FindOptions): Promise<T[]>;
+    findWithCursor(filter?: Record<string, unknown>, options?: FindOptions): Promise<{
+        data: T[];
+        nextCursor: string | number | null;
+    }>;
+    findById(id: string): Promise<T | null>;
+    create(doc: Partial<T> & Record<string, unknown>): Promise<T>;
+    updateById(id: string, update: Record<string, unknown>): Promise<T>;
+    deleteById(id: string): Promise<void>;
+    count(filter?: Record<string, unknown>): Promise<number>;
+}
+
+interface CodixusClientConfig {
+    apiUrl: string;
+    storageKey?: string;
+    storage?: StorageAdapter | null;
+    appSecret?: string;
+}
+declare class CodixusClient {
+    readonly auth: AuthManager;
+    readonly api: ApiClient;
+    constructor(config: CodixusClientConfig);
+    /**
+     * Create a typed collection accessor.
+     * Maps to auto REST routes on server: codixus.rest(Model)
+     *
+     * @example
+     * interface Product { _id: string; name: string; price: number; }
+     * const products = codixus.collection<Product>("products");
+     * const all = await products.find();            // Product[]
+     * const one = await products.findById("abc");   // Product | null
+     */
+    collection<T>(name: string): Collection<T>;
+    init(): Promise<void>;
+}
+
+export { ApiClient, type AuthState, CodixusClient, type CodixusClientConfig, Collection, type FindOptions, type SignInParams, type StorageAdapter };