@codixus/client 0.1.0 → 0.1.2

package/dist/chunk-DGUM43GV.js

@@ -0,0 +1,11 @@
+var __require = /* @__PURE__ */ ((x) => typeof require !== "undefined" ? require : typeof Proxy !== "undefined" ? new Proxy(x, {
+  get: (a, b) => (typeof require !== "undefined" ? require : a)[b]
+}) : x)(function(x) {
+  if (typeof require !== "undefined") return require.apply(this, arguments);
+  throw Error('Dynamic require of "' + x + '" is not supported');
+});
+
+export {
+  __require
+};
+//# sourceMappingURL=chunk-DGUM43GV.js.map

package/dist/chunk-DGUM43GV.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":[],"sourcesContent":[],"mappings":"","names":[]}

package/dist/index.cjs

@@ -206,7 +206,23 @@ var AuthManager = class {
 
 // src/api/api-client.ts
 var import_axios = __toESM(require("axios"), 1);
+var _cryptoModule = null;
+function getNodeCrypto() {
+  if (_cryptoModule === void 0) return null;
+  if (_cryptoModule) return _cryptoModule;
+  try {
+    _cryptoModule = require("crypto");
+    return _cryptoModule;
+  } catch {
+    _cryptoModule = void 0;
+    return null;
+  }
+}
 async function sha256(data) {
+  const nodeCrypto = getNodeCrypto();
+  if (nodeCrypto) {
+    return nodeCrypto.createHash("sha256").update(data).digest("hex");
+  }
   if (typeof globalThis.crypto?.subtle !== "undefined") {
     const encoded = new TextEncoder().encode(data);
     const hash = await globalThis.crypto.subtle.digest("SHA-256", encoded);
@@ -215,40 +231,82 @@ async function sha256(data) {
       (b) => b.toString(16).padStart(2, "0")
     ).join("");
   }
-  return simpleHash(data);
+  try {
+    const ExpoCrypto = require("expo-crypto");
+    return await ExpoCrypto.digestStringAsync(
+      ExpoCrypto.CryptoDigestAlgorithm.SHA256,
+      data
+    );
+  } catch {
+    throw new Error("No crypto implementation available for SHA-256");
+  }
 }
 async function hmacSha256(secret, data) {
+  const nodeCrypto = getNodeCrypto();
+  if (nodeCrypto) {
+    return nodeCrypto.createHmac("sha256", secret).update(data).digest("hex");
+  }
   if (typeof globalThis.crypto?.subtle !== "undefined") {
-    const key = await globalThis.crypto.subtle.importKey(
-      "raw",
-      new TextEncoder().encode(secret),
-      { name: "HMAC", hash: "SHA-256" },
-      false,
-      ["sign"]
+    try {
+      const key = await globalThis.crypto.subtle.importKey(
+        "raw",
+        new TextEncoder().encode(secret),
+        { name: "HMAC", hash: "SHA-256" },
+        false,
+        ["sign"]
+      );
+      const sig = await globalThis.crypto.subtle.sign(
+        "HMAC",
+        key,
+        new TextEncoder().encode(data)
+      );
+      return Array.from(
+        new Uint8Array(sig),
+        (b) => b.toString(16).padStart(2, "0")
+      ).join("");
+    } catch {
+    }
+  }
+  try {
+    const ExpoCrypto = require("expo-crypto");
+    const BLOCK_SIZE = 64;
+    let keyBytes = new Uint8Array(
+      secret.split("").map((c) => c.charCodeAt(0))
     );
-    const sig = await globalThis.crypto.subtle.sign(
-      "HMAC",
-      key,
-      new TextEncoder().encode(data)
+    if (keyBytes.length > BLOCK_SIZE) {
+      const hashed = await ExpoCrypto.digestStringAsync(
+        ExpoCrypto.CryptoDigestAlgorithm.SHA256,
+        secret
+      );
+      keyBytes = new Uint8Array(
+        hashed.match(/.{2}/g).map((h) => parseInt(h, 16))
+      );
+    }
+    const paddedKey = new Uint8Array(BLOCK_SIZE);
+    paddedKey.set(keyBytes);
+    const ipad = new Uint8Array(BLOCK_SIZE);
+    const opad = new Uint8Array(BLOCK_SIZE);
+    for (let i = 0; i < BLOCK_SIZE; i++) {
+      ipad[i] = paddedKey[i] ^ 54;
+      opad[i] = paddedKey[i] ^ 92;
+    }
+    const innerData = String.fromCharCode(...ipad) + data;
+    const innerHash = await ExpoCrypto.digestStringAsync(
+      ExpoCrypto.CryptoDigestAlgorithm.SHA256,
+      innerData
     );
-    return Array.from(
-      new Uint8Array(sig),
-      (b) => b.toString(16).padStart(2, "0")
-    ).join("");
+    const innerBytes = new Uint8Array(
+      innerHash.match(/.{2}/g).map((h) => parseInt(h, 16))
+    );
+    const outerData = String.fromCharCode(...opad) + String.fromCharCode(...innerBytes);
+    const result = await ExpoCrypto.digestStringAsync(
+      ExpoCrypto.CryptoDigestAlgorithm.SHA256,
+      outerData
+    );
+    return result;
+  } catch {
+    throw new Error("No crypto implementation available for HMAC-SHA256");
   }
-  return simpleHmac(secret, data);
-}
-function simpleHash(str) {
-  let hash = 0;
-  for (let i = 0; i < str.length; i++) {
-    const char = str.charCodeAt(i);
-    hash = (hash << 5) - hash + char;
-    hash |= 0;
-  }
-  return Math.abs(hash).toString(16).padStart(16, "0");
-}
-function simpleHmac(key, data) {
-  return simpleHash(key + ":" + data);
 }
 function generateNonce() {
   if (typeof globalThis.crypto?.randomUUID === "function") {
@@ -313,7 +371,10 @@ var ApiClient = class {
                 return this.instance(originalRequest);
               }
             } catch (refreshError) {
-              console.warn("[CodixusClient] Token refresh failed:", refreshError);
+              console.warn(
+                "[CodixusClient] Token refresh failed:",
+                refreshError
+              );
             }
           }
         }

package/dist/index.cjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/index.ts","../src/auth/auth-manager.ts","../src/api/api-client.ts","../src/db/collection.ts"],"sourcesContent":["import {\n  AuthManager,\n  type StorageAdapter,\n  type SignInParams,\n  type AuthState,\n} from \"./auth/auth-manager.js\";\nimport { ApiClient } from \"./api/api-client.js\";\nimport { Collection, type FindOptions } from \"./db/collection.js\";\n\nexport interface CodixusClientConfig {\n  apiUrl: string;\n  storageKey?: string;\n  storage?: StorageAdapter | null;\n  appSecret?: string;\n}\n\nexport class CodixusClient {\n  readonly auth: AuthManager;\n  readonly api: ApiClient;\n\n  constructor(config: CodixusClientConfig) {\n    const storageKey = config.storageKey ?? \"codixus\";\n    const storage = config.storage ?? null;\n\n    this.auth = new AuthManager(storage, storageKey);\n    this.api = new ApiClient(config.apiUrl, this.auth, config.appSecret);\n    this.auth._setApi(this.api);\n  }\n\n  /**\n   * Create a typed collection accessor.\n   * Maps to auto REST routes on server: codixus.rest(Model)\n   *\n   * @example\n   * interface Product { _id: string; name: string; price: number; }\n   * const products = codixus.collection<Product>(\"products\");\n   * const all = await products.find();            // Product[]\n   * const one = await products.findById(\"abc\");   // Product | null\n   */\n  collection<T>(name: string): Collection<T> {\n    return new Collection<T>(this.api, `/api/${name}`);\n  }\n\n  async init(): Promise<void> {\n    await this.auth.init();\n  }\n}\n\nexport {\n  type StorageAdapter,\n  type SignInParams,\n  type AuthState,\n} from \"./auth/auth-manager.js\";\nexport { ApiClient } from \"./api/api-client.js\";\nexport { Collection, type FindOptions } from \"./db/collection.js\";\n\n// Re-export shared types\nexport {\n  type AuthUser,\n  type TokenPair,\n  type DeviceInfo,\n  type DeviceMetadata,\n  type AuthTokenRequest,\n  type AuthTokenResponse,\n  type ApiResponse,\n  CodixusError,\n  ErrorCodes,\n} from \"@codixus/shared\";\n","import type {\n  AuthTokenResponse,\n  DeviceInfo,\n  DeviceMetadata,\n} from \"@codixus/shared\";\nimport type { ApiClient } from \"../api/api-client.js\";\n\nexport interface StorageAdapter {\n  getItem(key: string): Promise<string | null> | string | null;\n  setItem(key: string, value: string): Promise<void> | void;\n  removeItem(key: string): Promise<void> | void;\n}\n\nexport interface SignInParams {\n  deviceId?: string;\n  deviceInfo: DeviceInfo;\n  metadata?: DeviceMetadata;\n}\n\nexport interface AuthState {\n  isAuthenticated: boolean;\n  isLoading: boolean;\n  user: Record<string, unknown> | null;\n}\n\ntype AuthStateListener = (state: AuthState) => void;\n\nexport class AuthManager {\n  private accessToken: string | null = null;\n  private refreshTokenValue: string | null = null;\n  private user: Record<string, unknown> | null = null;\n  private listeners: Set<AuthStateListener> = new Set();\n  private _isLoading = true;\n  private storageKey: string;\n  private api!: ApiClient;\n  private deviceId: string | null = null;\n\n  constructor(\n    private storage: StorageAdapter | null,\n    storageKey: string,\n  ) {\n    this.storageKey = storageKey;\n  }\n\n  /** @internal */\n  _setApi(api: ApiClient): void {\n    this.api = api;\n  }\n\n  async init(): Promise<void> {\n    if (!this.storage) {\n      this._isLoading = false;\n      return;\n    }\n\n    try {\n      const storedRefresh = await this.storage.getItem(\n        `${this.storageKey}_refresh_token`,\n      );\n      const storedUser = await this.storage.getItem(\n        `${this.storageKey}_user`,\n      );\n      const storedDeviceId = await this.storage.getItem(\n        `${this.storageKey}_device_id`,\n      );\n\n      if (storedRefresh) {\n        this.refreshTokenValue = storedRefresh;\n      }\n      if (storedUser) {\n        try {\n          this.user = JSON.parse(storedUser);\n        } catch {\n          // Corrupted user data in storage, ignore\n        }\n      }\n      if (storedDeviceId) {\n        this.deviceId = storedDeviceId;\n      }\n    } catch (error) {\n      console.warn(\"[CodixusClient] Failed to restore auth state from storage:\", error);\n    }\n\n    this._isLoading = false;\n    this.notify();\n  }\n\n  async signIn(\n    params: SignInParams,\n  ): Promise<{ user: Record<string, unknown>; isNewUser: boolean }> {\n    const deviceId = params.deviceId ?? this.deviceId ?? this.generateDeviceId();\n\n    const response = await this.api.post<AuthTokenResponse>(\"/auth/token\", {\n      deviceId,\n      deviceInfo: params.deviceInfo,\n      metadata: params.metadata,\n    });\n\n    const data = response.data;\n    this.accessToken = data.accessToken;\n    this.refreshTokenValue = data.refreshToken;\n    this.user = data.user;\n    this.deviceId = deviceId;\n\n    // Persist\n    if (this.storage) {\n      await this.storage.setItem(\n        `${this.storageKey}_refresh_token`,\n        data.refreshToken,\n      );\n      await this.storage.setItem(\n        `${this.storageKey}_user`,\n        JSON.stringify(data.user),\n      );\n      await this.storage.setItem(`${this.storageKey}_device_id`, deviceId);\n    }\n\n    this.notify();\n    return { user: data.user, isNewUser: data.isNewUser };\n  }\n\n  async getToken(): Promise<string | null> {\n    if (this.accessToken) return this.accessToken;\n\n    // Try refresh\n    if (this.refreshTokenValue) {\n      try {\n        await this.forceRefresh();\n        return this.accessToken;\n      } catch {\n        return null;\n      }\n    }\n\n    return null;\n  }\n\n  async forceRefresh(): Promise<string | null> {\n    if (!this.refreshTokenValue) return null;\n\n    try {\n      const response = await this.api.post<{\n        success: boolean;\n        accessToken: string;\n        refreshToken: string;\n      }>(\"/auth/refresh\", {\n        refreshToken: this.refreshTokenValue,\n      });\n\n      this.accessToken = response.data.accessToken;\n      this.refreshTokenValue = response.data.refreshToken;\n\n      if (this.storage) {\n        await this.storage.setItem(\n          `${this.storageKey}_refresh_token`,\n          response.data.refreshToken,\n        );\n      }\n\n      return this.accessToken;\n    } catch {\n      // Refresh failed, clear auth state\n      await this.signOut();\n      return null;\n    }\n  }\n\n  async signOut(): Promise<void> {\n    // Notify server\n    if (this.refreshTokenValue) {\n      try {\n        await this.api.post(\"/auth/logout\", {\n          refreshToken: this.refreshTokenValue,\n        });\n      } catch {}\n    }\n\n    this.accessToken = null;\n    this.refreshTokenValue = null;\n    this.user = null;\n\n    if (this.storage) {\n      await this.storage.removeItem(`${this.storageKey}_refresh_token`);\n      await this.storage.removeItem(`${this.storageKey}_user`);\n      await this.storage.removeItem(`${this.storageKey}_device_id`);\n    }\n\n    this.notify();\n  }\n\n  getState(): AuthState {\n    return {\n      isAuthenticated: this.accessToken !== null || this.refreshTokenValue !== null,\n      isLoading: this._isLoading,\n      user: this.user,\n    };\n  }\n\n  getDeviceId(): string | null {\n    return this.deviceId;\n  }\n\n  onAuthStateChange(listener: AuthStateListener): () => void {\n    this.listeners.add(listener);\n    // Call immediately with current state\n    listener(this.getState());\n    return () => {\n      this.listeners.delete(listener);\n    };\n  }\n\n  /** @internal - used by API interceptor */\n  _getAccessToken(): string | null {\n    return this.accessToken;\n  }\n\n  /** @internal - called by API interceptor after refresh */\n  _setAccessToken(token: string): void {\n    this.accessToken = token;\n  }\n\n  private notify(): void {\n    const state = this.getState();\n    for (const listener of this.listeners) {\n      listener(state);\n    }\n  }\n\n  private generateDeviceId(): string {\n    const bytes = new Uint8Array(16);\n    crypto.getRandomValues(bytes);\n    return \"dev-\" + Array.from(bytes, (b) => b.toString(16).padStart(2, \"0\")).join(\"\");\n  }\n}\n","import axios, {\n  type AxiosInstance,\n  type AxiosRequestConfig,\n  type AxiosResponse,\n} from \"axios\";\nimport type { AuthManager } from \"../auth/auth-manager.js\";\n\n// Lightweight crypto helpers that work in both browser and React Native\nasync function sha256(data: string): Promise<string> {\n  if (typeof globalThis.crypto?.subtle !== \"undefined\") {\n    const encoded = new TextEncoder().encode(data);\n    const hash = await globalThis.crypto.subtle.digest(\"SHA-256\", encoded);\n    return Array.from(new Uint8Array(hash), (b) =>\n      b.toString(16).padStart(2, \"0\"),\n    ).join(\"\");\n  }\n  // Fallback: simple hash (React Native without crypto.subtle)\n  return simpleHash(data);\n}\n\nasync function hmacSha256(secret: string, data: string): Promise<string> {\n  if (typeof globalThis.crypto?.subtle !== \"undefined\") {\n    const key = await globalThis.crypto.subtle.importKey(\n      \"raw\",\n      new TextEncoder().encode(secret),\n      { name: \"HMAC\", hash: \"SHA-256\" },\n      false,\n      [\"sign\"],\n    );\n    const sig = await globalThis.crypto.subtle.sign(\n      \"HMAC\",\n      key,\n      new TextEncoder().encode(data),\n    );\n    return Array.from(new Uint8Array(sig), (b) =>\n      b.toString(16).padStart(2, \"0\"),\n    ).join(\"\");\n  }\n  // Fallback for environments without SubtleCrypto\n  return simpleHmac(secret, data);\n}\n\n// Simple fallback hash for environments without SubtleCrypto\nfunction simpleHash(str: string): string {\n  let hash = 0;\n  for (let i = 0; i < str.length; i++) {\n    const char = str.charCodeAt(i);\n    hash = (hash << 5) - hash + char;\n    hash |= 0;\n  }\n  return Math.abs(hash).toString(16).padStart(16, \"0\");\n}\n\nfunction simpleHmac(key: string, data: string): string {\n  return simpleHash(key + \":\" + data);\n}\n\nfunction generateNonce(): string {\n  if (typeof globalThis.crypto?.randomUUID === \"function\") {\n    return globalThis.crypto.randomUUID();\n  }\n  // Fallback\n  const bytes = new Uint8Array(16);\n  if (typeof globalThis.crypto?.getRandomValues === \"function\") {\n    globalThis.crypto.getRandomValues(bytes);\n  } else {\n    for (let i = 0; i < 16; i++) {\n      bytes[i] = Math.floor(Math.random() * 256);\n    }\n  }\n  return Array.from(bytes, (b) => b.toString(16).padStart(2, \"0\")).join(\"\");\n}\n\nexport class ApiClient {\n  readonly instance: AxiosInstance;\n  private refreshPromise: Promise<string | null> | null = null;\n  private appSecret: string | undefined;\n\n  constructor(\n    baseURL: string,\n    private authManager: AuthManager,\n    appSecret?: string,\n  ) {\n    this.appSecret = appSecret;\n\n    this.instance = axios.create({\n      baseURL,\n      headers: { \"Content-Type\": \"application/json\" },\n    });\n\n    // Request interceptor: add Bearer token + signing\n    this.instance.interceptors.request.use(async (config) => {\n      // Skip auth for auth endpoints\n      if (!config.url?.includes(\"/auth/\")) {\n        const token = this.authManager._getAccessToken();\n        if (token) {\n          config.headers.Authorization = `Bearer ${token}`;\n        }\n      }\n\n      // Request signing\n      if (this.appSecret) {\n        const timestamp = Date.now().toString();\n        const nonce = generateNonce();\n        const body =\n          config.data && typeof config.data === \"object\"\n            ? JSON.stringify(config.data)\n            : (config.data ?? \"\");\n        const bodyHash = body ? await sha256(body) : \"\";\n        const method = (config.method ?? \"GET\").toUpperCase();\n        const url = config.url ?? \"/\";\n        const payload = [method, url, timestamp, nonce, bodyHash].join(\"\\n\");\n        const signature = await hmacSha256(this.appSecret, payload);\n\n        config.headers[\"X-Codixus-Timestamp\"] = timestamp;\n        config.headers[\"X-Codixus-Nonce\"] = nonce;\n        config.headers[\"X-Codixus-Signature\"] = signature;\n      }\n\n      return config;\n    });\n\n    // Response interceptor: handle 401 with token refresh\n    this.instance.interceptors.response.use(\n      (response) => response,\n      async (error) => {\n        if (error.response?.status === 401) {\n          const originalRequest = error.config;\n          if (originalRequest && !originalRequest._retry) {\n            originalRequest._retry = true;\n\n            try {\n              // Promise lock to prevent concurrent refreshes\n              if (!this.refreshPromise) {\n                this.refreshPromise = this.authManager\n                  .forceRefresh()\n                  .finally(() => {\n                    this.refreshPromise = null;\n                  });\n              }\n\n              const newToken = await this.refreshPromise;\n              if (newToken) {\n                originalRequest.headers.Authorization = `Bearer ${newToken}`;\n                return this.instance(originalRequest);\n              }\n            } catch (refreshError) {\n              console.warn(\"[CodixusClient] Token refresh failed:\", refreshError);\n            }\n          }\n        }\n        return Promise.reject(error);\n      },\n    );\n  }\n\n  async get<T = unknown>(\n    url: string,\n    config?: AxiosRequestConfig,\n  ): Promise<AxiosResponse<T>> {\n    return this.instance.get<T>(url, config);\n  }\n\n  async post<T = unknown>(\n    url: string,\n    data?: unknown,\n    config?: AxiosRequestConfig,\n  ): Promise<AxiosResponse<T>> {\n    return this.instance.post<T>(url, data, config);\n  }\n\n  async patch<T = unknown>(\n    url: string,\n    data?: unknown,\n    config?: AxiosRequestConfig,\n  ): Promise<AxiosResponse<T>> {\n    return this.instance.patch<T>(url, data, config);\n  }\n\n  async delete<T = unknown>(\n    url: string,\n    config?: AxiosRequestConfig,\n  ): Promise<AxiosResponse<T>> {\n    return this.instance.delete<T>(url, config);\n  }\n\n  async put<T = unknown>(\n    url: string,\n    data?: unknown,\n    config?: AxiosRequestConfig,\n  ): Promise<AxiosResponse<T>> {\n    return this.instance.put<T>(url, data, config);\n  }\n}\n","import type { ApiClient } from \"../api/api-client.js\";\n\nexport interface FindOptions {\n  sort?: Record<string, 1 | -1>;\n  limit?: number;\n  skip?: number;\n  cursor?: string | number;\n}\n\nexport class Collection<T = Record<string, unknown>> {\n  constructor(\n    private api: ApiClient,\n    private basePath: string,\n  ) {}\n\n  async find(\n    filter?: Record<string, unknown>,\n    options?: FindOptions,\n  ): Promise<T[]> {\n    const params = new URLSearchParams();\n    if (filter && Object.keys(filter).length > 0) {\n      params.set(\"filter\", JSON.stringify(filter));\n    }\n    if (options?.sort) params.set(\"sort\", JSON.stringify(options.sort));\n    if (options?.limit) params.set(\"limit\", String(options.limit));\n    if (options?.skip) params.set(\"skip\", String(options.skip));\n    if (options?.cursor) params.set(\"cursor\", String(options.cursor));\n\n    const qs = params.toString();\n    const url = qs ? `${this.basePath}?${qs}` : this.basePath;\n    const { data } = await this.api.get<{ success: boolean; data: T[]; nextCursor?: string | null }>(url);\n    return data.data;\n  }\n\n  async findWithCursor(\n    filter?: Record<string, unknown>,\n    options?: FindOptions,\n  ): Promise<{ data: T[]; nextCursor: string | number | null }> {\n    const params = new URLSearchParams();\n    if (filter && Object.keys(filter).length > 0) {\n      params.set(\"filter\", JSON.stringify(filter));\n    }\n    if (options?.sort) params.set(\"sort\", JSON.stringify(options.sort));\n    if (options?.limit) params.set(\"limit\", String(options.limit));\n    if (options?.cursor) params.set(\"cursor\", String(options.cursor));\n\n    const qs = params.toString();\n    const url = qs ? `${this.basePath}?${qs}` : this.basePath;\n    const { data } = await this.api.get<{ success: boolean; data: T[]; nextCursor: string | number | null }>(url);\n    return { data: data.data, nextCursor: data.nextCursor };\n  }\n\n  async findById(id: string): Promise<T | null> {\n    try {\n      const { data } = await this.api.get<{ success: boolean; data: T }>(\n        `${this.basePath}/${id}`,\n      );\n      return data.data;\n    } catch (error: any) {\n      if (error.response?.status === 404) return null;\n      throw error;\n    }\n  }\n\n  async create(doc: Partial<T> & Record<string, unknown>): Promise<T> {\n    const { data } = await this.api.post<{ success: boolean; data: T }>(\n      this.basePath,\n      doc,\n    );\n    return data.data;\n  }\n\n  async updateById(\n    id: string,\n    update: Record<string, unknown>,\n  ): Promise<T> {\n    const { data } = await this.api.patch<{ success: boolean; data: T }>(\n      `${this.basePath}/${id}`,\n      { update },\n    );\n    return data.data;\n  }\n\n  async deleteById(id: string): Promise<void> {\n    await this.api.delete(`${this.basePath}/${id}`);\n  }\n\n  async count(filter?: Record<string, unknown>): Promise<number> {\n    const { data } = await this.api.post<{ success: boolean; count: number }>(\n      `${this.basePath}/count`,\n      { filter: filter ?? {} },\n    );\n    return data.count;\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;;;AC2BO,IAAM,cAAN,MAAkB;AAAA,EAUvB,YACU,SACR,YACA;AAFQ;AAGR,SAAK,aAAa;AAAA,EACpB;AAAA,EAdQ,cAA6B;AAAA,EAC7B,oBAAmC;AAAA,EACnC,OAAuC;AAAA,EACvC,YAAoC,oBAAI,IAAI;AAAA,EAC5C,aAAa;AAAA,EACb;AAAA,EACA;AAAA,EACA,WAA0B;AAAA;AAAA,EAUlC,QAAQ,KAAsB;AAC5B,SAAK,MAAM;AAAA,EACb;AAAA,EAEA,MAAM,OAAsB;AAC1B,QAAI,CAAC,KAAK,SAAS;AACjB,WAAK,aAAa;AAClB;AAAA,IACF;AAEA,QAAI;AACF,YAAM,gBAAgB,MAAM,KAAK,QAAQ;AAAA,QACvC,GAAG,KAAK,UAAU;AAAA,MACpB;AACA,YAAM,aAAa,MAAM,KAAK,QAAQ;AAAA,QACpC,GAAG,KAAK,UAAU;AAAA,MACpB;AACA,YAAM,iBAAiB,MAAM,KAAK,QAAQ;AAAA,QACxC,GAAG,KAAK,UAAU;AAAA,MACpB;AAEA,UAAI,eAAe;AACjB,aAAK,oBAAoB;AAAA,MAC3B;AACA,UAAI,YAAY;AACd,YAAI;AACF,eAAK,OAAO,KAAK,MAAM,UAAU;AAAA,QACnC,QAAQ;AAAA,QAER;AAAA,MACF;AACA,UAAI,gBAAgB;AAClB,aAAK,WAAW;AAAA,MAClB;AAAA,IACF,SAAS,OAAO;AACd,cAAQ,KAAK,8DAA8D,KAAK;AAAA,IAClF;AAEA,SAAK,aAAa;AAClB,SAAK,OAAO;AAAA,EACd;AAAA,EAEA,MAAM,OACJ,QACgE;AAChE,UAAM,WAAW,OAAO,YAAY,KAAK,YAAY,KAAK,iBAAiB;AAE3E,UAAM,WAAW,MAAM,KAAK,IAAI,KAAwB,eAAe;AAAA,MACrE;AAAA,MACA,YAAY,OAAO;AAAA,MACnB,UAAU,OAAO;AAAA,IACnB,CAAC;AAED,UAAM,OAAO,SAAS;AACtB,SAAK,cAAc,KAAK;AACxB,SAAK,oBAAoB,KAAK;AAC9B,SAAK,OAAO,KAAK;AACjB,SAAK,WAAW;AAGhB,QAAI,KAAK,SAAS;AAChB,YAAM,KAAK,QAAQ;AAAA,QACjB,GAAG,KAAK,UAAU;AAAA,QAClB,KAAK;AAAA,MACP;AACA,YAAM,KAAK,QAAQ;AAAA,QACjB,GAAG,KAAK,UAAU;AAAA,QAClB,KAAK,UAAU,KAAK,IAAI;AAAA,MAC1B;AACA,YAAM,KAAK,QAAQ,QAAQ,GAAG,KAAK,UAAU,cAAc,QAAQ;AAAA,IACrE;AAEA,SAAK,OAAO;AACZ,WAAO,EAAE,MAAM,KAAK,MAAM,WAAW,KAAK,UAAU;AAAA,EACtD;AAAA,EAEA,MAAM,WAAmC;AACvC,QAAI,KAAK,YAAa,QAAO,KAAK;AAGlC,QAAI,KAAK,mBAAmB;AAC1B,UAAI;AACF,cAAM,KAAK,aAAa;AACxB,eAAO,KAAK;AAAA,MACd,QAAQ;AACN,eAAO;AAAA,MACT;AAAA,IACF;AAEA,WAAO;AAAA,EACT;AAAA,EAEA,MAAM,eAAuC;AAC3C,QAAI,CAAC,KAAK,kBAAmB,QAAO;AAEpC,QAAI;AACF,YAAM,WAAW,MAAM,KAAK,IAAI,KAI7B,iBAAiB;AAAA,QAClB,cAAc,KAAK;AAAA,MACrB,CAAC;AAED,WAAK,cAAc,SAAS,KAAK;AACjC,WAAK,oBAAoB,SAAS,KAAK;AAEvC,UAAI,KAAK,SAAS;AAChB,cAAM,KAAK,QAAQ;AAAA,UACjB,GAAG,KAAK,UAAU;AAAA,UAClB,SAAS,KAAK;AAAA,QAChB;AAAA,MACF;AAEA,aAAO,KAAK;AAAA,IACd,QAAQ;AAEN,YAAM,KAAK,QAAQ;AACnB,aAAO;AAAA,IACT;AAAA,EACF;AAAA,EAEA,MAAM,UAAyB;AAE7B,QAAI,KAAK,mBAAmB;AAC1B,UAAI;AACF,cAAM,KAAK,IAAI,KAAK,gBAAgB;AAAA,UAClC,cAAc,KAAK;AAAA,QACrB,CAAC;AAAA,MACH,QAAQ;AAAA,MAAC;AAAA,IACX;AAEA,SAAK,cAAc;AACnB,SAAK,oBAAoB;AACzB,SAAK,OAAO;AAEZ,QAAI,KAAK,SAAS;AAChB,YAAM,KAAK,QAAQ,WAAW,GAAG,KAAK,UAAU,gBAAgB;AAChE,YAAM,KAAK,QAAQ,WAAW,GAAG,KAAK,UAAU,OAAO;AACvD,YAAM,KAAK,QAAQ,WAAW,GAAG,KAAK,UAAU,YAAY;AAAA,IAC9D;AAEA,SAAK,OAAO;AAAA,EACd;AAAA,EAEA,WAAsB;AACpB,WAAO;AAAA,MACL,iBAAiB,KAAK,gBAAgB,QAAQ,KAAK,sBAAsB;AAAA,MACzE,WAAW,KAAK;AAAA,MAChB,MAAM,KAAK;AAAA,IACb;AAAA,EACF;AAAA,EAEA,cAA6B;AAC3B,WAAO,KAAK;AAAA,EACd;AAAA,EAEA,kBAAkB,UAAyC;AACzD,SAAK,UAAU,IAAI,QAAQ;AAE3B,aAAS,KAAK,SAAS,CAAC;AACxB,WAAO,MAAM;AACX,WAAK,UAAU,OAAO,QAAQ;AAAA,IAChC;AAAA,EACF;AAAA;AAAA,EAGA,kBAAiC;AAC/B,WAAO,KAAK;AAAA,EACd;AAAA;AAAA,EAGA,gBAAgB,OAAqB;AACnC,SAAK,cAAc;AAAA,EACrB;AAAA,EAEQ,SAAe;AACrB,UAAM,QAAQ,KAAK,SAAS;AAC5B,eAAW,YAAY,KAAK,WAAW;AACrC,eAAS,KAAK;AAAA,IAChB;AAAA,EACF;AAAA,EAEQ,mBAA2B;AACjC,UAAM,QAAQ,IAAI,WAAW,EAAE;AAC/B,WAAO,gBAAgB,KAAK;AAC5B,WAAO,SAAS,MAAM,KAAK,OAAO,CAAC,MAAM,EAAE,SAAS,EAAE,EAAE,SAAS,GAAG,GAAG,CAAC,EAAE,KAAK,EAAE;AAAA,EACnF;AACF;;;ACzOA,mBAIO;AAIP,eAAe,OAAO,MAA+B;AACnD,MAAI,OAAO,WAAW,QAAQ,WAAW,aAAa;AACpD,UAAM,UAAU,IAAI,YAAY,EAAE,OAAO,IAAI;AAC7C,UAAM,OAAO,MAAM,WAAW,OAAO,OAAO,OAAO,WAAW,OAAO;AACrE,WAAO,MAAM;AAAA,MAAK,IAAI,WAAW,IAAI;AAAA,MAAG,CAAC,MACvC,EAAE,SAAS,EAAE,EAAE,SAAS,GAAG,GAAG;AAAA,IAChC,EAAE,KAAK,EAAE;AAAA,EACX;AAEA,SAAO,WAAW,IAAI;AACxB;AAEA,eAAe,WAAW,QAAgB,MAA+B;AACvE,MAAI,OAAO,WAAW,QAAQ,WAAW,aAAa;AACpD,UAAM,MAAM,MAAM,WAAW,OAAO,OAAO;AAAA,MACzC;AAAA,MACA,IAAI,YAAY,EAAE,OAAO,MAAM;AAAA,MAC/B,EAAE,MAAM,QAAQ,MAAM,UAAU;AAAA,MAChC;AAAA,MACA,CAAC,MAAM;AAAA,IACT;AACA,UAAM,MAAM,MAAM,WAAW,OAAO,OAAO;AAAA,MACzC;AAAA,MACA;AAAA,MACA,IAAI,YAAY,EAAE,OAAO,IAAI;AAAA,IAC/B;AACA,WAAO,MAAM;AAAA,MAAK,IAAI,WAAW,GAAG;AAAA,MAAG,CAAC,MACtC,EAAE,SAAS,EAAE,EAAE,SAAS,GAAG,GAAG;AAAA,IAChC,EAAE,KAAK,EAAE;AAAA,EACX;AAEA,SAAO,WAAW,QAAQ,IAAI;AAChC;AAGA,SAAS,WAAW,KAAqB;AACvC,MAAI,OAAO;AACX,WAAS,IAAI,GAAG,IAAI,IAAI,QAAQ,KAAK;AACnC,UAAM,OAAO,IAAI,WAAW,CAAC;AAC7B,YAAQ,QAAQ,KAAK,OAAO;AAC5B,YAAQ;AAAA,EACV;AACA,SAAO,KAAK,IAAI,IAAI,EAAE,SAAS,EAAE,EAAE,SAAS,IAAI,GAAG;AACrD;AAEA,SAAS,WAAW,KAAa,MAAsB;AACrD,SAAO,WAAW,MAAM,MAAM,IAAI;AACpC;AAEA,SAAS,gBAAwB;AAC/B,MAAI,OAAO,WAAW,QAAQ,eAAe,YAAY;AACvD,WAAO,WAAW,OAAO,WAAW;AAAA,EACtC;AAEA,QAAM,QAAQ,IAAI,WAAW,EAAE;AAC/B,MAAI,OAAO,WAAW,QAAQ,oBAAoB,YAAY;AAC5D,eAAW,OAAO,gBAAgB,KAAK;AAAA,EACzC,OAAO;AACL,aAAS,IAAI,GAAG,IAAI,IAAI,KAAK;AAC3B,YAAM,CAAC,IAAI,KAAK,MAAM,KAAK,OAAO,IAAI,GAAG;AAAA,IAC3C;AAAA,EACF;AACA,SAAO,MAAM,KAAK,OAAO,CAAC,MAAM,EAAE,SAAS,EAAE,EAAE,SAAS,GAAG,GAAG,CAAC,EAAE,KAAK,EAAE;AAC1E;AAEO,IAAM,YAAN,MAAgB;AAAA,EAKrB,YACE,SACQ,aACR,WACA;AAFQ;AAGR,SAAK,YAAY;AAEjB,SAAK,WAAW,aAAAA,QAAM,OAAO;AAAA,MAC3B;AAAA,MACA,SAAS,EAAE,gBAAgB,mBAAmB;AAAA,IAChD,CAAC;AAGD,SAAK,SAAS,aAAa,QAAQ,IAAI,OAAO,WAAW;AAEvD,UAAI,CAAC,OAAO,KAAK,SAAS,QAAQ,GAAG;AACnC,cAAM,QAAQ,KAAK,YAAY,gBAAgB;AAC/C,YAAI,OAAO;AACT,iBAAO,QAAQ,gBAAgB,UAAU,KAAK;AAAA,QAChD;AAAA,MACF;AAGA,UAAI,KAAK,WAAW;AAClB,cAAM,YAAY,KAAK,IAAI,EAAE,SAAS;AACtC,cAAM,QAAQ,cAAc;AAC5B,cAAM,OACJ,OAAO,QAAQ,OAAO,OAAO,SAAS,WAClC,KAAK,UAAU,OAAO,IAAI,IACzB,OAAO,QAAQ;AACtB,cAAM,WAAW,OAAO,MAAM,OAAO,IAAI,IAAI;AAC7C,cAAM,UAAU,OAAO,UAAU,OAAO,YAAY;AACpD,cAAM,MAAM,OAAO,OAAO;AAC1B,cAAM,UAAU,CAAC,QAAQ,KAAK,WAAW,OAAO,QAAQ,EAAE,KAAK,IAAI;AACnE,cAAM,YAAY,MAAM,WAAW,KAAK,WAAW,OAAO;AAE1D,eAAO,QAAQ,qBAAqB,IAAI;AACxC,eAAO,QAAQ,iBAAiB,IAAI;AACpC,eAAO,QAAQ,qBAAqB,IAAI;AAAA,MAC1C;AAEA,aAAO;AAAA,IACT,CAAC;AAGD,SAAK,SAAS,aAAa,SAAS;AAAA,MAClC,CAAC,aAAa;AAAA,MACd,OAAO,UAAU;AACf,YAAI,MAAM,UAAU,WAAW,KAAK;AAClC,gBAAM,kBAAkB,MAAM;AAC9B,cAAI,mBAAmB,CAAC,gBAAgB,QAAQ;AAC9C,4BAAgB,SAAS;AAEzB,gBAAI;AAEF,kBAAI,CAAC,KAAK,gBAAgB;AACxB,qBAAK,iBAAiB,KAAK,YACxB,aAAa,EACb,QAAQ,MAAM;AACb,uBAAK,iBAAiB;AAAA,gBACxB,CAAC;AAAA,cACL;AAEA,oBAAM,WAAW,MAAM,KAAK;AAC5B,kBAAI,UAAU;AACZ,gCAAgB,QAAQ,gBAAgB,UAAU,QAAQ;AAC1D,uBAAO,KAAK,SAAS,eAAe;AAAA,cACtC;AAAA,YACF,SAAS,cAAc;AACrB,sBAAQ,KAAK,yCAAyC,YAAY;AAAA,YACpE;AAAA,UACF;AAAA,QACF;AACA,eAAO,QAAQ,OAAO,KAAK;AAAA,MAC7B;AAAA,IACF;AAAA,EACF;AAAA,EAhFS;AAAA,EACD,iBAAgD;AAAA,EAChD;AAAA,EAgFR,MAAM,IACJ,KACA,QAC2B;AAC3B,WAAO,KAAK,SAAS,IAAO,KAAK,MAAM;AAAA,EACzC;AAAA,EAEA,MAAM,KACJ,KACA,MACA,QAC2B;AAC3B,WAAO,KAAK,SAAS,KAAQ,KAAK,MAAM,MAAM;AAAA,EAChD;AAAA,EAEA,MAAM,MACJ,KACA,MACA,QAC2B;AAC3B,WAAO,KAAK,SAAS,MAAS,KAAK,MAAM,MAAM;AAAA,EACjD;AAAA,EAEA,MAAM,OACJ,KACA,QAC2B;AAC3B,WAAO,KAAK,SAAS,OAAU,KAAK,MAAM;AAAA,EAC5C;AAAA,EAEA,MAAM,IACJ,KACA,MACA,QAC2B;AAC3B,WAAO,KAAK,SAAS,IAAO,KAAK,MAAM,MAAM;AAAA,EAC/C;AACF;;;ACxLO,IAAM,aAAN,MAA8C;AAAA,EACnD,YACU,KACA,UACR;AAFQ;AACA;AAAA,EACP;AAAA,EAEH,MAAM,KACJ,QACA,SACc;AACd,UAAM,SAAS,IAAI,gBAAgB;AACnC,QAAI,UAAU,OAAO,KAAK,MAAM,EAAE,SAAS,GAAG;AAC5C,aAAO,IAAI,UAAU,KAAK,UAAU,MAAM,CAAC;AAAA,IAC7C;AACA,QAAI,SAAS,KAAM,QAAO,IAAI,QAAQ,KAAK,UAAU,QAAQ,IAAI,CAAC;AAClE,QAAI,SAAS,MAAO,QAAO,IAAI,SAAS,OAAO,QAAQ,KAAK,CAAC;AAC7D,QAAI,SAAS,KAAM,QAAO,IAAI,QAAQ,OAAO,QAAQ,IAAI,CAAC;AAC1D,QAAI,SAAS,OAAQ,QAAO,IAAI,UAAU,OAAO,QAAQ,MAAM,CAAC;AAEhE,UAAM,KAAK,OAAO,SAAS;AAC3B,UAAM,MAAM,KAAK,GAAG,KAAK,QAAQ,IAAI,EAAE,KAAK,KAAK;AACjD,UAAM,EAAE,KAAK,IAAI,MAAM,KAAK,IAAI,IAAiE,GAAG;AACpG,WAAO,KAAK;AAAA,EACd;AAAA,EAEA,MAAM,eACJ,QACA,SAC4D;AAC5D,UAAM,SAAS,IAAI,gBAAgB;AACnC,QAAI,UAAU,OAAO,KAAK,MAAM,EAAE,SAAS,GAAG;AAC5C,aAAO,IAAI,UAAU,KAAK,UAAU,MAAM,CAAC;AAAA,IAC7C;AACA,QAAI,SAAS,KAAM,QAAO,IAAI,QAAQ,KAAK,UAAU,QAAQ,IAAI,CAAC;AAClE,QAAI,SAAS,MAAO,QAAO,IAAI,SAAS,OAAO,QAAQ,KAAK,CAAC;AAC7D,QAAI,SAAS,OAAQ,QAAO,IAAI,UAAU,OAAO,QAAQ,MAAM,CAAC;AAEhE,UAAM,KAAK,OAAO,SAAS;AAC3B,UAAM,MAAM,KAAK,GAAG,KAAK,QAAQ,IAAI,EAAE,KAAK,KAAK;AACjD,UAAM,EAAE,KAAK,IAAI,MAAM,KAAK,IAAI,IAAyE,GAAG;AAC5G,WAAO,EAAE,MAAM,KAAK,MAAM,YAAY,KAAK,WAAW;AAAA,EACxD;AAAA,EAEA,MAAM,SAAS,IAA+B;AAC5C,QAAI;AACF,YAAM,EAAE,KAAK,IAAI,MAAM,KAAK,IAAI;AAAA,QAC9B,GAAG,KAAK,QAAQ,IAAI,EAAE;AAAA,MACxB;AACA,aAAO,KAAK;AAAA,IACd,SAAS,OAAY;AACnB,UAAI,MAAM,UAAU,WAAW,IAAK,QAAO;AAC3C,YAAM;AAAA,IACR;AAAA,EACF;AAAA,EAEA,MAAM,OAAO,KAAuD;AAClE,UAAM,EAAE,KAAK,IAAI,MAAM,KAAK,IAAI;AAAA,MAC9B,KAAK;AAAA,MACL;AAAA,IACF;AACA,WAAO,KAAK;AAAA,EACd;AAAA,EAEA,MAAM,WACJ,IACA,QACY;AACZ,UAAM,EAAE,KAAK,IAAI,MAAM,KAAK,IAAI;AAAA,MAC9B,GAAG,KAAK,QAAQ,IAAI,EAAE;AAAA,MACtB,EAAE,OAAO;AAAA,IACX;AACA,WAAO,KAAK;AAAA,EACd;AAAA,EAEA,MAAM,WAAW,IAA2B;AAC1C,UAAM,KAAK,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,EAAE,EAAE;AAAA,EAChD;AAAA,EAEA,MAAM,MAAM,QAAmD;AAC7D,UAAM,EAAE,KAAK,IAAI,MAAM,KAAK,IAAI;AAAA,MAC9B,GAAG,KAAK,QAAQ;AAAA,MAChB,EAAE,QAAQ,UAAU,CAAC,EAAE;AAAA,IACzB;AACA,WAAO,KAAK;AAAA,EACd;AACF;;;AHrCA,oBAUO;AAnDA,IAAM,gBAAN,MAAoB;AAAA,EAChB;AAAA,EACA;AAAA,EAET,YAAY,QAA6B;AACvC,UAAM,aAAa,OAAO,cAAc;AACxC,UAAM,UAAU,OAAO,WAAW;AAElC,SAAK,OAAO,IAAI,YAAY,SAAS,UAAU;AAC/C,SAAK,MAAM,IAAI,UAAU,OAAO,QAAQ,KAAK,MAAM,OAAO,SAAS;AACnE,SAAK,KAAK,QAAQ,KAAK,GAAG;AAAA,EAC5B;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAYA,WAAc,MAA6B;AACzC,WAAO,IAAI,WAAc,KAAK,KAAK,QAAQ,IAAI,EAAE;AAAA,EACnD;AAAA,EAEA,MAAM,OAAsB;AAC1B,UAAM,KAAK,KAAK,KAAK;AAAA,EACvB;AACF;","names":["axios"]}
+{"version":3,"sources":["../src/index.ts","../src/auth/auth-manager.ts","../src/api/api-client.ts","../src/db/collection.ts"],"sourcesContent":["import {\n  AuthManager,\n  type StorageAdapter,\n  type SignInParams,\n  type AuthState,\n} from \"./auth/auth-manager.js\";\nimport { ApiClient } from \"./api/api-client.js\";\nimport { Collection, type FindOptions } from \"./db/collection.js\";\n\nexport interface CodixusClientConfig {\n  apiUrl: string;\n  storageKey?: string;\n  storage?: StorageAdapter | null;\n  appSecret?: string;\n}\n\nexport class CodixusClient {\n  readonly auth: AuthManager;\n  readonly api: ApiClient;\n\n  constructor(config: CodixusClientConfig) {\n    const storageKey = config.storageKey ?? \"codixus\";\n    const storage = config.storage ?? null;\n\n    this.auth = new AuthManager(storage, storageKey);\n    this.api = new ApiClient(config.apiUrl, this.auth, config.appSecret);\n    this.auth._setApi(this.api);\n  }\n\n  /**\n   * Create a typed collection accessor.\n   * Maps to auto REST routes on server: codixus.rest(Model)\n   *\n   * @example\n   * interface Product { _id: string; name: string; price: number; }\n   * const products = codixus.collection<Product>(\"products\");\n   * const all = await products.find();            // Product[]\n   * const one = await products.findById(\"abc\");   // Product | null\n   */\n  collection<T>(name: string): Collection<T> {\n    return new Collection<T>(this.api, `/api/${name}`);\n  }\n\n  async init(): Promise<void> {\n    await this.auth.init();\n  }\n}\n\nexport {\n  type StorageAdapter,\n  type SignInParams,\n  type AuthState,\n} from \"./auth/auth-manager.js\";\nexport { ApiClient } from \"./api/api-client.js\";\nexport { Collection, type FindOptions } from \"./db/collection.js\";\n\n// Re-export shared types\nexport {\n  type AuthUser,\n  type TokenPair,\n  type DeviceInfo,\n  type DeviceMetadata,\n  type AuthTokenRequest,\n  type AuthTokenResponse,\n  type ApiResponse,\n  CodixusError,\n  ErrorCodes,\n} from \"@codixus/shared\";\n","import type {\n  AuthTokenResponse,\n  DeviceInfo,\n  DeviceMetadata,\n} from \"@codixus/shared\";\nimport type { ApiClient } from \"../api/api-client.js\";\n\nexport interface StorageAdapter {\n  getItem(key: string): Promise<string | null> | string | null;\n  setItem(key: string, value: string): Promise<void> | void;\n  removeItem(key: string): Promise<void> | void;\n}\n\nexport interface SignInParams {\n  deviceId?: string;\n  deviceInfo: DeviceInfo;\n  metadata?: DeviceMetadata;\n}\n\nexport interface AuthState {\n  isAuthenticated: boolean;\n  isLoading: boolean;\n  user: Record<string, unknown> | null;\n}\n\ntype AuthStateListener = (state: AuthState) => void;\n\nexport class AuthManager {\n  private accessToken: string | null = null;\n  private refreshTokenValue: string | null = null;\n  private user: Record<string, unknown> | null = null;\n  private listeners: Set<AuthStateListener> = new Set();\n  private _isLoading = true;\n  private storageKey: string;\n  private api!: ApiClient;\n  private deviceId: string | null = null;\n\n  constructor(\n    private storage: StorageAdapter | null,\n    storageKey: string,\n  ) {\n    this.storageKey = storageKey;\n  }\n\n  /** @internal */\n  _setApi(api: ApiClient): void {\n    this.api = api;\n  }\n\n  async init(): Promise<void> {\n    if (!this.storage) {\n      this._isLoading = false;\n      return;\n    }\n\n    try {\n      const storedRefresh = await this.storage.getItem(\n        `${this.storageKey}_refresh_token`,\n      );\n      const storedUser = await this.storage.getItem(\n        `${this.storageKey}_user`,\n      );\n      const storedDeviceId = await this.storage.getItem(\n        `${this.storageKey}_device_id`,\n      );\n\n      if (storedRefresh) {\n        this.refreshTokenValue = storedRefresh;\n      }\n      if (storedUser) {\n        try {\n          this.user = JSON.parse(storedUser);\n        } catch {\n          // Corrupted user data in storage, ignore\n        }\n      }\n      if (storedDeviceId) {\n        this.deviceId = storedDeviceId;\n      }\n    } catch (error) {\n      console.warn(\"[CodixusClient] Failed to restore auth state from storage:\", error);\n    }\n\n    this._isLoading = false;\n    this.notify();\n  }\n\n  async signIn(\n    params: SignInParams,\n  ): Promise<{ user: Record<string, unknown>; isNewUser: boolean }> {\n    const deviceId = params.deviceId ?? this.deviceId ?? this.generateDeviceId();\n\n    const response = await this.api.post<AuthTokenResponse>(\"/auth/token\", {\n      deviceId,\n      deviceInfo: params.deviceInfo,\n      metadata: params.metadata,\n    });\n\n    const data = response.data;\n    this.accessToken = data.accessToken;\n    this.refreshTokenValue = data.refreshToken;\n    this.user = data.user;\n    this.deviceId = deviceId;\n\n    // Persist\n    if (this.storage) {\n      await this.storage.setItem(\n        `${this.storageKey}_refresh_token`,\n        data.refreshToken,\n      );\n      await this.storage.setItem(\n        `${this.storageKey}_user`,\n        JSON.stringify(data.user),\n      );\n      await this.storage.setItem(`${this.storageKey}_device_id`, deviceId);\n    }\n\n    this.notify();\n    return { user: data.user, isNewUser: data.isNewUser };\n  }\n\n  async getToken(): Promise<string | null> {\n    if (this.accessToken) return this.accessToken;\n\n    // Try refresh\n    if (this.refreshTokenValue) {\n      try {\n        await this.forceRefresh();\n        return this.accessToken;\n      } catch {\n        return null;\n      }\n    }\n\n    return null;\n  }\n\n  async forceRefresh(): Promise<string | null> {\n    if (!this.refreshTokenValue) return null;\n\n    try {\n      const response = await this.api.post<{\n        success: boolean;\n        accessToken: string;\n        refreshToken: string;\n      }>(\"/auth/refresh\", {\n        refreshToken: this.refreshTokenValue,\n      });\n\n      this.accessToken = response.data.accessToken;\n      this.refreshTokenValue = response.data.refreshToken;\n\n      if (this.storage) {\n        await this.storage.setItem(\n          `${this.storageKey}_refresh_token`,\n          response.data.refreshToken,\n        );\n      }\n\n      return this.accessToken;\n    } catch {\n      // Refresh failed, clear auth state\n      await this.signOut();\n      return null;\n    }\n  }\n\n  async signOut(): Promise<void> {\n    // Notify server\n    if (this.refreshTokenValue) {\n      try {\n        await this.api.post(\"/auth/logout\", {\n          refreshToken: this.refreshTokenValue,\n        });\n      } catch {}\n    }\n\n    this.accessToken = null;\n    this.refreshTokenValue = null;\n    this.user = null;\n\n    if (this.storage) {\n      await this.storage.removeItem(`${this.storageKey}_refresh_token`);\n      await this.storage.removeItem(`${this.storageKey}_user`);\n      await this.storage.removeItem(`${this.storageKey}_device_id`);\n    }\n\n    this.notify();\n  }\n\n  getState(): AuthState {\n    return {\n      isAuthenticated: this.accessToken !== null || this.refreshTokenValue !== null,\n      isLoading: this._isLoading,\n      user: this.user,\n    };\n  }\n\n  getDeviceId(): string | null {\n    return this.deviceId;\n  }\n\n  onAuthStateChange(listener: AuthStateListener): () => void {\n    this.listeners.add(listener);\n    // Call immediately with current state\n    listener(this.getState());\n    return () => {\n      this.listeners.delete(listener);\n    };\n  }\n\n  /** @internal - used by API interceptor */\n  _getAccessToken(): string | null {\n    return this.accessToken;\n  }\n\n  /** @internal - called by API interceptor after refresh */\n  _setAccessToken(token: string): void {\n    this.accessToken = token;\n  }\n\n  private notify(): void {\n    const state = this.getState();\n    for (const listener of this.listeners) {\n      listener(state);\n    }\n  }\n\n  private generateDeviceId(): string {\n    const bytes = new Uint8Array(16);\n    crypto.getRandomValues(bytes);\n    return \"dev-\" + Array.from(bytes, (b) => b.toString(16).padStart(2, \"0\")).join(\"\");\n  }\n}\n","import axios, {\n  type AxiosInstance,\n  type AxiosRequestConfig,\n  type AxiosResponse,\n} from \"axios\";\nimport type { AuthManager } from \"../auth/auth-manager.js\";\n\n// Crypto helpers — use Node.js crypto when available (tests, SSR),\n// otherwise use expo-crypto for React Native\nlet _cryptoModule: any = null;\n\nfunction getNodeCrypto(): any {\n  if (_cryptoModule === undefined) return null;\n  if (_cryptoModule) return _cryptoModule;\n  try {\n    // Node.js / Bun environment\n    _cryptoModule = require(\"node:crypto\");\n    return _cryptoModule;\n  } catch {\n    _cryptoModule = undefined;\n    return null;\n  }\n}\n\nasync function sha256(data: string): Promise<string> {\n  // Try Node.js crypto first (works in tests + SSR)\n  const nodeCrypto = getNodeCrypto();\n  if (nodeCrypto) {\n    return nodeCrypto.createHash(\"sha256\").update(data).digest(\"hex\");\n  }\n\n  // Try SubtleCrypto (web browsers)\n  if (typeof globalThis.crypto?.subtle !== \"undefined\") {\n    const encoded = new TextEncoder().encode(data);\n    const hash = await globalThis.crypto.subtle.digest(\"SHA-256\", encoded);\n    return Array.from(new Uint8Array(hash), (b) =>\n      b.toString(16).padStart(2, \"0\"),\n    ).join(\"\");\n  }\n\n  // React Native — use expo-crypto\n  try {\n    const ExpoCrypto = require(\"expo-crypto\");\n    return await ExpoCrypto.digestStringAsync(\n      ExpoCrypto.CryptoDigestAlgorithm.SHA256,\n      data,\n    );\n  } catch {\n    throw new Error(\"No crypto implementation available for SHA-256\");\n  }\n}\n\nasync function hmacSha256(secret: string, data: string): Promise<string> {\n  // Try Node.js crypto first\n  const nodeCrypto = getNodeCrypto();\n  if (nodeCrypto) {\n    return nodeCrypto.createHmac(\"sha256\", secret).update(data).digest(\"hex\");\n  }\n\n  // Try SubtleCrypto (web browsers)\n  if (typeof globalThis.crypto?.subtle !== \"undefined\") {\n    try {\n      const key = await globalThis.crypto.subtle.importKey(\n        \"raw\",\n        new TextEncoder().encode(secret),\n        { name: \"HMAC\", hash: \"SHA-256\" },\n        false,\n        [\"sign\"],\n      );\n      const sig = await globalThis.crypto.subtle.sign(\n        \"HMAC\",\n        key,\n        new TextEncoder().encode(data),\n      );\n      return Array.from(new Uint8Array(sig), (b) =>\n        b.toString(16).padStart(2, \"0\"),\n      ).join(\"\");\n    } catch {\n      // SubtleCrypto might exist but not work (e.g. non-secure context)\n    }\n  }\n\n  // React Native — manual HMAC via expo-crypto SHA256\n  // HMAC(key, msg) = SHA256((key XOR opad) || SHA256((key XOR ipad) || msg))\n  try {\n    const ExpoCrypto = require(\"expo-crypto\");\n    const BLOCK_SIZE = 64; // SHA-256 block size\n\n    // Prepare key\n    let keyBytes = new Uint8Array(\n      secret.split(\"\").map((c) => c.charCodeAt(0)),\n    );\n    if (keyBytes.length > BLOCK_SIZE) {\n      // Hash key if longer than block size\n      const hashed = await ExpoCrypto.digestStringAsync(\n        ExpoCrypto.CryptoDigestAlgorithm.SHA256,\n        secret,\n      );\n      keyBytes = new Uint8Array(\n        hashed.match(/.{2}/g)!.map((h: string) => parseInt(h, 16)),\n      );\n    }\n\n    // Pad key to BLOCK_SIZE\n    const paddedKey = new Uint8Array(BLOCK_SIZE);\n    paddedKey.set(keyBytes);\n\n    // ipad = key XOR 0x36, opad = key XOR 0x5c\n    const ipad = new Uint8Array(BLOCK_SIZE);\n    const opad = new Uint8Array(BLOCK_SIZE);\n    for (let i = 0; i < BLOCK_SIZE; i++) {\n      ipad[i] = paddedKey[i]! ^ 0x36;\n      opad[i] = paddedKey[i]! ^ 0x5c;\n    }\n\n    // Inner hash: SHA256(ipad || message)\n    const innerData =\n      String.fromCharCode(...ipad) + data;\n    const innerHash = await ExpoCrypto.digestStringAsync(\n      ExpoCrypto.CryptoDigestAlgorithm.SHA256,\n      innerData,\n    );\n\n    // Outer hash: SHA256(opad || innerHash_bytes)\n    const innerBytes = new Uint8Array(\n      innerHash.match(/.{2}/g)!.map((h: string) => parseInt(h, 16)),\n    );\n    const outerData = String.fromCharCode(...opad) + String.fromCharCode(...innerBytes);\n    const result = await ExpoCrypto.digestStringAsync(\n      ExpoCrypto.CryptoDigestAlgorithm.SHA256,\n      outerData,\n    );\n\n    return result;\n  } catch {\n    throw new Error(\"No crypto implementation available for HMAC-SHA256\");\n  }\n}\n\nfunction generateNonce(): string {\n  if (typeof globalThis.crypto?.randomUUID === \"function\") {\n    return globalThis.crypto.randomUUID();\n  }\n  // Fallback\n  const bytes = new Uint8Array(16);\n  if (typeof globalThis.crypto?.getRandomValues === \"function\") {\n    globalThis.crypto.getRandomValues(bytes);\n  } else {\n    for (let i = 0; i < 16; i++) {\n      bytes[i] = Math.floor(Math.random() * 256);\n    }\n  }\n  return Array.from(bytes, (b) => b.toString(16).padStart(2, \"0\")).join(\"\");\n}\n\nexport class ApiClient {\n  readonly instance: AxiosInstance;\n  private refreshPromise: Promise<string | null> | null = null;\n  private appSecret: string | undefined;\n\n  constructor(\n    baseURL: string,\n    private authManager: AuthManager,\n    appSecret?: string,\n  ) {\n    this.appSecret = appSecret;\n\n    this.instance = axios.create({\n      baseURL,\n      headers: { \"Content-Type\": \"application/json\" },\n    });\n\n    // Request interceptor: add Bearer token + signing\n    this.instance.interceptors.request.use(async (config) => {\n      // Skip auth for auth endpoints\n      if (!config.url?.includes(\"/auth/\")) {\n        const token = this.authManager._getAccessToken();\n        if (token) {\n          config.headers.Authorization = `Bearer ${token}`;\n        }\n      }\n\n      // Request signing\n      if (this.appSecret) {\n        const timestamp = Date.now().toString();\n        const nonce = generateNonce();\n        const body =\n          config.data && typeof config.data === \"object\"\n            ? JSON.stringify(config.data)\n            : (config.data ?? \"\");\n        const bodyHash = body ? await sha256(body) : \"\";\n        const method = (config.method ?? \"GET\").toUpperCase();\n        const url = config.url ?? \"/\";\n        const payload = [method, url, timestamp, nonce, bodyHash].join(\"\\n\");\n        const signature = await hmacSha256(this.appSecret, payload);\n\n        config.headers[\"X-Codixus-Timestamp\"] = timestamp;\n        config.headers[\"X-Codixus-Nonce\"] = nonce;\n        config.headers[\"X-Codixus-Signature\"] = signature;\n      }\n\n      return config;\n    });\n\n    // Response interceptor: handle 401 with token refresh\n    this.instance.interceptors.response.use(\n      (response) => response,\n      async (error) => {\n        if (error.response?.status === 401) {\n          const originalRequest = error.config;\n          if (originalRequest && !originalRequest._retry) {\n            originalRequest._retry = true;\n\n            try {\n              // Promise lock to prevent concurrent refreshes\n              if (!this.refreshPromise) {\n                this.refreshPromise = this.authManager\n                  .forceRefresh()\n                  .finally(() => {\n                    this.refreshPromise = null;\n                  });\n              }\n\n              const newToken = await this.refreshPromise;\n              if (newToken) {\n                originalRequest.headers.Authorization = `Bearer ${newToken}`;\n                return this.instance(originalRequest);\n              }\n            } catch (refreshError) {\n              console.warn(\n                \"[CodixusClient] Token refresh failed:\",\n                refreshError,\n              );\n            }\n          }\n        }\n        return Promise.reject(error);\n      },\n    );\n  }\n\n  async get<T = unknown>(\n    url: string,\n    config?: AxiosRequestConfig,\n  ): Promise<AxiosResponse<T>> {\n    return this.instance.get<T>(url, config);\n  }\n\n  async post<T = unknown>(\n    url: string,\n    data?: unknown,\n    config?: AxiosRequestConfig,\n  ): Promise<AxiosResponse<T>> {\n    return this.instance.post<T>(url, data, config);\n  }\n\n  async patch<T = unknown>(\n    url: string,\n    data?: unknown,\n    config?: AxiosRequestConfig,\n  ): Promise<AxiosResponse<T>> {\n    return this.instance.patch<T>(url, data, config);\n  }\n\n  async delete<T = unknown>(\n    url: string,\n    config?: AxiosRequestConfig,\n  ): Promise<AxiosResponse<T>> {\n    return this.instance.delete<T>(url, config);\n  }\n\n  async put<T = unknown>(\n    url: string,\n    data?: unknown,\n    config?: AxiosRequestConfig,\n  ): Promise<AxiosResponse<T>> {\n    return this.instance.put<T>(url, data, config);\n  }\n}\n","import type { ApiClient } from \"../api/api-client.js\";\n\nexport interface FindOptions {\n  sort?: Record<string, 1 | -1>;\n  limit?: number;\n  skip?: number;\n  cursor?: string | number;\n}\n\nexport class Collection<T = Record<string, unknown>> {\n  constructor(\n    private api: ApiClient,\n    private basePath: string,\n  ) {}\n\n  async find(\n    filter?: Record<string, unknown>,\n    options?: FindOptions,\n  ): Promise<T[]> {\n    const params = new URLSearchParams();\n    if (filter && Object.keys(filter).length > 0) {\n      params.set(\"filter\", JSON.stringify(filter));\n    }\n    if (options?.sort) params.set(\"sort\", JSON.stringify(options.sort));\n    if (options?.limit) params.set(\"limit\", String(options.limit));\n    if (options?.skip) params.set(\"skip\", String(options.skip));\n    if (options?.cursor) params.set(\"cursor\", String(options.cursor));\n\n    const qs = params.toString();\n    const url = qs ? `${this.basePath}?${qs}` : this.basePath;\n    const { data } = await this.api.get<{ success: boolean; data: T[]; nextCursor?: string | null }>(url);\n    return data.data;\n  }\n\n  async findWithCursor(\n    filter?: Record<string, unknown>,\n    options?: FindOptions,\n  ): Promise<{ data: T[]; nextCursor: string | number | null }> {\n    const params = new URLSearchParams();\n    if (filter && Object.keys(filter).length > 0) {\n      params.set(\"filter\", JSON.stringify(filter));\n    }\n    if (options?.sort) params.set(\"sort\", JSON.stringify(options.sort));\n    if (options?.limit) params.set(\"limit\", String(options.limit));\n    if (options?.cursor) params.set(\"cursor\", String(options.cursor));\n\n    const qs = params.toString();\n    const url = qs ? `${this.basePath}?${qs}` : this.basePath;\n    const { data } = await this.api.get<{ success: boolean; data: T[]; nextCursor: string | number | null }>(url);\n    return { data: data.data, nextCursor: data.nextCursor };\n  }\n\n  async findById(id: string): Promise<T | null> {\n    try {\n      const { data } = await this.api.get<{ success: boolean; data: T }>(\n        `${this.basePath}/${id}`,\n      );\n      return data.data;\n    } catch (error: any) {\n      if (error.response?.status === 404) return null;\n      throw error;\n    }\n  }\n\n  async create(doc: Partial<T> & Record<string, unknown>): Promise<T> {\n    const { data } = await this.api.post<{ success: boolean; data: T }>(\n      this.basePath,\n      doc,\n    );\n    return data.data;\n  }\n\n  async updateById(\n    id: string,\n    update: Record<string, unknown>,\n  ): Promise<T> {\n    const { data } = await this.api.patch<{ success: boolean; data: T }>(\n      `${this.basePath}/${id}`,\n      { update },\n    );\n    return data.data;\n  }\n\n  async deleteById(id: string): Promise<void> {\n    await this.api.delete(`${this.basePath}/${id}`);\n  }\n\n  async count(filter?: Record<string, unknown>): Promise<number> {\n    const { data } = await this.api.post<{ success: boolean; count: number }>(\n      `${this.basePath}/count`,\n      { filter: filter ?? {} },\n    );\n    return data.count;\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;;;AC2BO,IAAM,cAAN,MAAkB;AAAA,EAUvB,YACU,SACR,YACA;AAFQ;AAGR,SAAK,aAAa;AAAA,EACpB;AAAA,EAdQ,cAA6B;AAAA,EAC7B,oBAAmC;AAAA,EACnC,OAAuC;AAAA,EACvC,YAAoC,oBAAI,IAAI;AAAA,EAC5C,aAAa;AAAA,EACb;AAAA,EACA;AAAA,EACA,WAA0B;AAAA;AAAA,EAUlC,QAAQ,KAAsB;AAC5B,SAAK,MAAM;AAAA,EACb;AAAA,EAEA,MAAM,OAAsB;AAC1B,QAAI,CAAC,KAAK,SAAS;AACjB,WAAK,aAAa;AAClB;AAAA,IACF;AAEA,QAAI;AACF,YAAM,gBAAgB,MAAM,KAAK,QAAQ;AAAA,QACvC,GAAG,KAAK,UAAU;AAAA,MACpB;AACA,YAAM,aAAa,MAAM,KAAK,QAAQ;AAAA,QACpC,GAAG,KAAK,UAAU;AAAA,MACpB;AACA,YAAM,iBAAiB,MAAM,KAAK,QAAQ;AAAA,QACxC,GAAG,KAAK,UAAU;AAAA,MACpB;AAEA,UAAI,eAAe;AACjB,aAAK,oBAAoB;AAAA,MAC3B;AACA,UAAI,YAAY;AACd,YAAI;AACF,eAAK,OAAO,KAAK,MAAM,UAAU;AAAA,QACnC,QAAQ;AAAA,QAER;AAAA,MACF;AACA,UAAI,gBAAgB;AAClB,aAAK,WAAW;AAAA,MAClB;AAAA,IACF,SAAS,OAAO;AACd,cAAQ,KAAK,8DAA8D,KAAK;AAAA,IAClF;AAEA,SAAK,aAAa;AAClB,SAAK,OAAO;AAAA,EACd;AAAA,EAEA,MAAM,OACJ,QACgE;AAChE,UAAM,WAAW,OAAO,YAAY,KAAK,YAAY,KAAK,iBAAiB;AAE3E,UAAM,WAAW,MAAM,KAAK,IAAI,KAAwB,eAAe;AAAA,MACrE;AAAA,MACA,YAAY,OAAO;AAAA,MACnB,UAAU,OAAO;AAAA,IACnB,CAAC;AAED,UAAM,OAAO,SAAS;AACtB,SAAK,cAAc,KAAK;AACxB,SAAK,oBAAoB,KAAK;AAC9B,SAAK,OAAO,KAAK;AACjB,SAAK,WAAW;AAGhB,QAAI,KAAK,SAAS;AAChB,YAAM,KAAK,QAAQ;AAAA,QACjB,GAAG,KAAK,UAAU;AAAA,QAClB,KAAK;AAAA,MACP;AACA,YAAM,KAAK,QAAQ;AAAA,QACjB,GAAG,KAAK,UAAU;AAAA,QAClB,KAAK,UAAU,KAAK,IAAI;AAAA,MAC1B;AACA,YAAM,KAAK,QAAQ,QAAQ,GAAG,KAAK,UAAU,cAAc,QAAQ;AAAA,IACrE;AAEA,SAAK,OAAO;AACZ,WAAO,EAAE,MAAM,KAAK,MAAM,WAAW,KAAK,UAAU;AAAA,EACtD;AAAA,EAEA,MAAM,WAAmC;AACvC,QAAI,KAAK,YAAa,QAAO,KAAK;AAGlC,QAAI,KAAK,mBAAmB;AAC1B,UAAI;AACF,cAAM,KAAK,aAAa;AACxB,eAAO,KAAK;AAAA,MACd,QAAQ;AACN,eAAO;AAAA,MACT;AAAA,IACF;AAEA,WAAO;AAAA,EACT;AAAA,EAEA,MAAM,eAAuC;AAC3C,QAAI,CAAC,KAAK,kBAAmB,QAAO;AAEpC,QAAI;AACF,YAAM,WAAW,MAAM,KAAK,IAAI,KAI7B,iBAAiB;AAAA,QAClB,cAAc,KAAK;AAAA,MACrB,CAAC;AAED,WAAK,cAAc,SAAS,KAAK;AACjC,WAAK,oBAAoB,SAAS,KAAK;AAEvC,UAAI,KAAK,SAAS;AAChB,cAAM,KAAK,QAAQ;AAAA,UACjB,GAAG,KAAK,UAAU;AAAA,UAClB,SAAS,KAAK;AAAA,QAChB;AAAA,MACF;AAEA,aAAO,KAAK;AAAA,IACd,QAAQ;AAEN,YAAM,KAAK,QAAQ;AACnB,aAAO;AAAA,IACT;AAAA,EACF;AAAA,EAEA,MAAM,UAAyB;AAE7B,QAAI,KAAK,mBAAmB;AAC1B,UAAI;AACF,cAAM,KAAK,IAAI,KAAK,gBAAgB;AAAA,UAClC,cAAc,KAAK;AAAA,QACrB,CAAC;AAAA,MACH,QAAQ;AAAA,MAAC;AAAA,IACX;AAEA,SAAK,cAAc;AACnB,SAAK,oBAAoB;AACzB,SAAK,OAAO;AAEZ,QAAI,KAAK,SAAS;AAChB,YAAM,KAAK,QAAQ,WAAW,GAAG,KAAK,UAAU,gBAAgB;AAChE,YAAM,KAAK,QAAQ,WAAW,GAAG,KAAK,UAAU,OAAO;AACvD,YAAM,KAAK,QAAQ,WAAW,GAAG,KAAK,UAAU,YAAY;AAAA,IAC9D;AAEA,SAAK,OAAO;AAAA,EACd;AAAA,EAEA,WAAsB;AACpB,WAAO;AAAA,MACL,iBAAiB,KAAK,gBAAgB,QAAQ,KAAK,sBAAsB;AAAA,MACzE,WAAW,KAAK;AAAA,MAChB,MAAM,KAAK;AAAA,IACb;AAAA,EACF;AAAA,EAEA,cAA6B;AAC3B,WAAO,KAAK;AAAA,EACd;AAAA,EAEA,kBAAkB,UAAyC;AACzD,SAAK,UAAU,IAAI,QAAQ;AAE3B,aAAS,KAAK,SAAS,CAAC;AACxB,WAAO,MAAM;AACX,WAAK,UAAU,OAAO,QAAQ;AAAA,IAChC;AAAA,EACF;AAAA;AAAA,EAGA,kBAAiC;AAC/B,WAAO,KAAK;AAAA,EACd;AAAA;AAAA,EAGA,gBAAgB,OAAqB;AACnC,SAAK,cAAc;AAAA,EACrB;AAAA,EAEQ,SAAe;AACrB,UAAM,QAAQ,KAAK,SAAS;AAC5B,eAAW,YAAY,KAAK,WAAW;AACrC,eAAS,KAAK;AAAA,IAChB;AAAA,EACF;AAAA,EAEQ,mBAA2B;AACjC,UAAM,QAAQ,IAAI,WAAW,EAAE;AAC/B,WAAO,gBAAgB,KAAK;AAC5B,WAAO,SAAS,MAAM,KAAK,OAAO,CAAC,MAAM,EAAE,SAAS,EAAE,EAAE,SAAS,GAAG,GAAG,CAAC,EAAE,KAAK,EAAE;AAAA,EACnF;AACF;;;ACzOA,mBAIO;AAKP,IAAI,gBAAqB;AAEzB,SAAS,gBAAqB;AAC5B,MAAI,kBAAkB,OAAW,QAAO;AACxC,MAAI,cAAe,QAAO;AAC1B,MAAI;AAEF,oBAAgB,QAAQ,QAAa;AACrC,WAAO;AAAA,EACT,QAAQ;AACN,oBAAgB;AAChB,WAAO;AAAA,EACT;AACF;AAEA,eAAe,OAAO,MAA+B;AAEnD,QAAM,aAAa,cAAc;AACjC,MAAI,YAAY;AACd,WAAO,WAAW,WAAW,QAAQ,EAAE,OAAO,IAAI,EAAE,OAAO,KAAK;AAAA,EAClE;AAGA,MAAI,OAAO,WAAW,QAAQ,WAAW,aAAa;AACpD,UAAM,UAAU,IAAI,YAAY,EAAE,OAAO,IAAI;AAC7C,UAAM,OAAO,MAAM,WAAW,OAAO,OAAO,OAAO,WAAW,OAAO;AACrE,WAAO,MAAM;AAAA,MAAK,IAAI,WAAW,IAAI;AAAA,MAAG,CAAC,MACvC,EAAE,SAAS,EAAE,EAAE,SAAS,GAAG,GAAG;AAAA,IAChC,EAAE,KAAK,EAAE;AAAA,EACX;AAGA,MAAI;AACF,UAAM,aAAa,QAAQ,aAAa;AACxC,WAAO,MAAM,WAAW;AAAA,MACtB,WAAW,sBAAsB;AAAA,MACjC;AAAA,IACF;AAAA,EACF,QAAQ;AACN,UAAM,IAAI,MAAM,gDAAgD;AAAA,EAClE;AACF;AAEA,eAAe,WAAW,QAAgB,MAA+B;AAEvE,QAAM,aAAa,cAAc;AACjC,MAAI,YAAY;AACd,WAAO,WAAW,WAAW,UAAU,MAAM,EAAE,OAAO,IAAI,EAAE,OAAO,KAAK;AAAA,EAC1E;AAGA,MAAI,OAAO,WAAW,QAAQ,WAAW,aAAa;AACpD,QAAI;AACF,YAAM,MAAM,MAAM,WAAW,OAAO,OAAO;AAAA,QACzC;AAAA,QACA,IAAI,YAAY,EAAE,OAAO,MAAM;AAAA,QAC/B,EAAE,MAAM,QAAQ,MAAM,UAAU;AAAA,QAChC;AAAA,QACA,CAAC,MAAM;AAAA,MACT;AACA,YAAM,MAAM,MAAM,WAAW,OAAO,OAAO;AAAA,QACzC;AAAA,QACA;AAAA,QACA,IAAI,YAAY,EAAE,OAAO,IAAI;AAAA,MAC/B;AACA,aAAO,MAAM;AAAA,QAAK,IAAI,WAAW,GAAG;AAAA,QAAG,CAAC,MACtC,EAAE,SAAS,EAAE,EAAE,SAAS,GAAG,GAAG;AAAA,MAChC,EAAE,KAAK,EAAE;AAAA,IACX,QAAQ;AAAA,IAER;AAAA,EACF;AAIA,MAAI;AACF,UAAM,aAAa,QAAQ,aAAa;AACxC,UAAM,aAAa;AAGnB,QAAI,WAAW,IAAI;AAAA,MACjB,OAAO,MAAM,EAAE,EAAE,IAAI,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;AAAA,IAC7C;AACA,QAAI,SAAS,SAAS,YAAY;AAEhC,YAAM,SAAS,MAAM,WAAW;AAAA,QAC9B,WAAW,sBAAsB;AAAA,QACjC;AAAA,MACF;AACA,iBAAW,IAAI;AAAA,QACb,OAAO,MAAM,OAAO,EAAG,IAAI,CAAC,MAAc,SAAS,GAAG,EAAE,CAAC;AAAA,MAC3D;AAAA,IACF;AAGA,UAAM,YAAY,IAAI,WAAW,UAAU;AAC3C,cAAU,IAAI,QAAQ;AAGtB,UAAM,OAAO,IAAI,WAAW,UAAU;AACtC,UAAM,OAAO,IAAI,WAAW,UAAU;AACtC,aAAS,IAAI,GAAG,IAAI,YAAY,KAAK;AACnC,WAAK,CAAC,IAAI,UAAU,CAAC,IAAK;AAC1B,WAAK,CAAC,IAAI,UAAU,CAAC,IAAK;AAAA,IAC5B;AAGA,UAAM,YACJ,OAAO,aAAa,GAAG,IAAI,IAAI;AACjC,UAAM,YAAY,MAAM,WAAW;AAAA,MACjC,WAAW,sBAAsB;AAAA,MACjC;AAAA,IACF;AAGA,UAAM,aAAa,IAAI;AAAA,MACrB,UAAU,MAAM,OAAO,EAAG,IAAI,CAAC,MAAc,SAAS,GAAG,EAAE,CAAC;AAAA,IAC9D;AACA,UAAM,YAAY,OAAO,aAAa,GAAG,IAAI,IAAI,OAAO,aAAa,GAAG,UAAU;AAClF,UAAM,SAAS,MAAM,WAAW;AAAA,MAC9B,WAAW,sBAAsB;AAAA,MACjC;AAAA,IACF;AAEA,WAAO;AAAA,EACT,QAAQ;AACN,UAAM,IAAI,MAAM,oDAAoD;AAAA,EACtE;AACF;AAEA,SAAS,gBAAwB;AAC/B,MAAI,OAAO,WAAW,QAAQ,eAAe,YAAY;AACvD,WAAO,WAAW,OAAO,WAAW;AAAA,EACtC;AAEA,QAAM,QAAQ,IAAI,WAAW,EAAE;AAC/B,MAAI,OAAO,WAAW,QAAQ,oBAAoB,YAAY;AAC5D,eAAW,OAAO,gBAAgB,KAAK;AAAA,EACzC,OAAO;AACL,aAAS,IAAI,GAAG,IAAI,IAAI,KAAK;AAC3B,YAAM,CAAC,IAAI,KAAK,MAAM,KAAK,OAAO,IAAI,GAAG;AAAA,IAC3C;AAAA,EACF;AACA,SAAO,MAAM,KAAK,OAAO,CAAC,MAAM,EAAE,SAAS,EAAE,EAAE,SAAS,GAAG,GAAG,CAAC,EAAE,KAAK,EAAE;AAC1E;AAEO,IAAM,YAAN,MAAgB;AAAA,EAKrB,YACE,SACQ,aACR,WACA;AAFQ;AAGR,SAAK,YAAY;AAEjB,SAAK,WAAW,aAAAA,QAAM,OAAO;AAAA,MAC3B;AAAA,MACA,SAAS,EAAE,gBAAgB,mBAAmB;AAAA,IAChD,CAAC;AAGD,SAAK,SAAS,aAAa,QAAQ,IAAI,OAAO,WAAW;AAEvD,UAAI,CAAC,OAAO,KAAK,SAAS,QAAQ,GAAG;AACnC,cAAM,QAAQ,KAAK,YAAY,gBAAgB;AAC/C,YAAI,OAAO;AACT,iBAAO,QAAQ,gBAAgB,UAAU,KAAK;AAAA,QAChD;AAAA,MACF;AAGA,UAAI,KAAK,WAAW;AAClB,cAAM,YAAY,KAAK,IAAI,EAAE,SAAS;AACtC,cAAM,QAAQ,cAAc;AAC5B,cAAM,OACJ,OAAO,QAAQ,OAAO,OAAO,SAAS,WAClC,KAAK,UAAU,OAAO,IAAI,IACzB,OAAO,QAAQ;AACtB,cAAM,WAAW,OAAO,MAAM,OAAO,IAAI,IAAI;AAC7C,cAAM,UAAU,OAAO,UAAU,OAAO,YAAY;AACpD,cAAM,MAAM,OAAO,OAAO;AAC1B,cAAM,UAAU,CAAC,QAAQ,KAAK,WAAW,OAAO,QAAQ,EAAE,KAAK,IAAI;AACnE,cAAM,YAAY,MAAM,WAAW,KAAK,WAAW,OAAO;AAE1D,eAAO,QAAQ,qBAAqB,IAAI;AACxC,eAAO,QAAQ,iBAAiB,IAAI;AACpC,eAAO,QAAQ,qBAAqB,IAAI;AAAA,MAC1C;AAEA,aAAO;AAAA,IACT,CAAC;AAGD,SAAK,SAAS,aAAa,SAAS;AAAA,MAClC,CAAC,aAAa;AAAA,MACd,OAAO,UAAU;AACf,YAAI,MAAM,UAAU,WAAW,KAAK;AAClC,gBAAM,kBAAkB,MAAM;AAC9B,cAAI,mBAAmB,CAAC,gBAAgB,QAAQ;AAC9C,4BAAgB,SAAS;AAEzB,gBAAI;AAEF,kBAAI,CAAC,KAAK,gBAAgB;AACxB,qBAAK,iBAAiB,KAAK,YACxB,aAAa,EACb,QAAQ,MAAM;AACb,uBAAK,iBAAiB;AAAA,gBACxB,CAAC;AAAA,cACL;AAEA,oBAAM,WAAW,MAAM,KAAK;AAC5B,kBAAI,UAAU;AACZ,gCAAgB,QAAQ,gBAAgB,UAAU,QAAQ;AAC1D,uBAAO,KAAK,SAAS,eAAe;AAAA,cACtC;AAAA,YACF,SAAS,cAAc;AACrB,sBAAQ;AAAA,gBACN;AAAA,gBACA;AAAA,cACF;AAAA,YACF;AAAA,UACF;AAAA,QACF;AACA,eAAO,QAAQ,OAAO,KAAK;AAAA,MAC7B;AAAA,IACF;AAAA,EACF;AAAA,EAnFS;AAAA,EACD,iBAAgD;AAAA,EAChD;AAAA,EAmFR,MAAM,IACJ,KACA,QAC2B;AAC3B,WAAO,KAAK,SAAS,IAAO,KAAK,MAAM;AAAA,EACzC;AAAA,EAEA,MAAM,KACJ,KACA,MACA,QAC2B;AAC3B,WAAO,KAAK,SAAS,KAAQ,KAAK,MAAM,MAAM;AAAA,EAChD;AAAA,EAEA,MAAM,MACJ,KACA,MACA,QAC2B;AAC3B,WAAO,KAAK,SAAS,MAAS,KAAK,MAAM,MAAM;AAAA,EACjD;AAAA,EAEA,MAAM,OACJ,KACA,QAC2B;AAC3B,WAAO,KAAK,SAAS,OAAU,KAAK,MAAM;AAAA,EAC5C;AAAA,EAEA,MAAM,IACJ,KACA,MACA,QAC2B;AAC3B,WAAO,KAAK,SAAS,IAAO,KAAK,MAAM,MAAM;AAAA,EAC/C;AACF;;;AC7QO,IAAM,aAAN,MAA8C;AAAA,EACnD,YACU,KACA,UACR;AAFQ;AACA;AAAA,EACP;AAAA,EAEH,MAAM,KACJ,QACA,SACc;AACd,UAAM,SAAS,IAAI,gBAAgB;AACnC,QAAI,UAAU,OAAO,KAAK,MAAM,EAAE,SAAS,GAAG;AAC5C,aAAO,IAAI,UAAU,KAAK,UAAU,MAAM,CAAC;AAAA,IAC7C;AACA,QAAI,SAAS,KAAM,QAAO,IAAI,QAAQ,KAAK,UAAU,QAAQ,IAAI,CAAC;AAClE,QAAI,SAAS,MAAO,QAAO,IAAI,SAAS,OAAO,QAAQ,KAAK,CAAC;AAC7D,QAAI,SAAS,KAAM,QAAO,IAAI,QAAQ,OAAO,QAAQ,IAAI,CAAC;AAC1D,QAAI,SAAS,OAAQ,QAAO,IAAI,UAAU,OAAO,QAAQ,MAAM,CAAC;AAEhE,UAAM,KAAK,OAAO,SAAS;AAC3B,UAAM,MAAM,KAAK,GAAG,KAAK,QAAQ,IAAI,EAAE,KAAK,KAAK;AACjD,UAAM,EAAE,KAAK,IAAI,MAAM,KAAK,IAAI,IAAiE,GAAG;AACpG,WAAO,KAAK;AAAA,EACd;AAAA,EAEA,MAAM,eACJ,QACA,SAC4D;AAC5D,UAAM,SAAS,IAAI,gBAAgB;AACnC,QAAI,UAAU,OAAO,KAAK,MAAM,EAAE,SAAS,GAAG;AAC5C,aAAO,IAAI,UAAU,KAAK,UAAU,MAAM,CAAC;AAAA,IAC7C;AACA,QAAI,SAAS,KAAM,QAAO,IAAI,QAAQ,KAAK,UAAU,QAAQ,IAAI,CAAC;AAClE,QAAI,SAAS,MAAO,QAAO,IAAI,SAAS,OAAO,QAAQ,KAAK,CAAC;AAC7D,QAAI,SAAS,OAAQ,QAAO,IAAI,UAAU,OAAO,QAAQ,MAAM,CAAC;AAEhE,UAAM,KAAK,OAAO,SAAS;AAC3B,UAAM,MAAM,KAAK,GAAG,KAAK,QAAQ,IAAI,EAAE,KAAK,KAAK;AACjD,UAAM,EAAE,KAAK,IAAI,MAAM,KAAK,IAAI,IAAyE,GAAG;AAC5G,WAAO,EAAE,MAAM,KAAK,MAAM,YAAY,KAAK,WAAW;AAAA,EACxD;AAAA,EAEA,MAAM,SAAS,IAA+B;AAC5C,QAAI;AACF,YAAM,EAAE,KAAK,IAAI,MAAM,KAAK,IAAI;AAAA,QAC9B,GAAG,KAAK,QAAQ,IAAI,EAAE;AAAA,MACxB;AACA,aAAO,KAAK;AAAA,IACd,SAAS,OAAY;AACnB,UAAI,MAAM,UAAU,WAAW,IAAK,QAAO;AAC3C,YAAM;AAAA,IACR;AAAA,EACF;AAAA,EAEA,MAAM,OAAO,KAAuD;AAClE,UAAM,EAAE,KAAK,IAAI,MAAM,KAAK,IAAI;AAAA,MAC9B,KAAK;AAAA,MACL;AAAA,IACF;AACA,WAAO,KAAK;AAAA,EACd;AAAA,EAEA,MAAM,WACJ,IACA,QACY;AACZ,UAAM,EAAE,KAAK,IAAI,MAAM,KAAK,IAAI;AAAA,MAC9B,GAAG,KAAK,QAAQ,IAAI,EAAE;AAAA,MACtB,EAAE,OAAO;AAAA,IACX;AACA,WAAO,KAAK;AAAA,EACd;AAAA,EAEA,MAAM,WAAW,IAA2B;AAC1C,UAAM,KAAK,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,EAAE,EAAE;AAAA,EAChD;AAAA,EAEA,MAAM,MAAM,QAAmD;AAC7D,UAAM,EAAE,KAAK,IAAI,MAAM,KAAK,IAAI;AAAA,MAC9B,GAAG,KAAK,QAAQ;AAAA,MAChB,EAAE,QAAQ,UAAU,CAAC,EAAE;AAAA,IACzB;AACA,WAAO,KAAK;AAAA,EACd;AACF;;;AHrCA,oBAUO;AAnDA,IAAM,gBAAN,MAAoB;AAAA,EAChB;AAAA,EACA;AAAA,EAET,YAAY,QAA6B;AACvC,UAAM,aAAa,OAAO,cAAc;AACxC,UAAM,UAAU,OAAO,WAAW;AAElC,SAAK,OAAO,IAAI,YAAY,SAAS,UAAU;AAC/C,SAAK,MAAM,IAAI,UAAU,OAAO,QAAQ,KAAK,MAAM,OAAO,SAAS;AACnE,SAAK,KAAK,QAAQ,KAAK,GAAG;AAAA,EAC5B;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAYA,WAAc,MAA6B;AACzC,WAAO,IAAI,WAAc,KAAK,KAAK,QAAQ,IAAI,EAAE;AAAA,EACnD;AAAA,EAEA,MAAM,OAAsB;AAC1B,UAAM,KAAK,KAAK,KAAK;AAAA,EACvB;AACF;","names":["axios"]}

package/dist/index.js

@@ -1,3 +1,7 @@
+import {
+  __require
+} from "./chunk-DGUM43GV.js";
+
 // src/auth/auth-manager.ts
 var AuthManager = class {
   constructor(storage, storageKey) {
@@ -166,7 +170,23 @@ var AuthManager = class {
 
 // src/api/api-client.ts
 import axios from "axios";
+var _cryptoModule = null;
+function getNodeCrypto() {
+  if (_cryptoModule === void 0) return null;
+  if (_cryptoModule) return _cryptoModule;
+  try {
+    _cryptoModule = __require("crypto");
+    return _cryptoModule;
+  } catch {
+    _cryptoModule = void 0;
+    return null;
+  }
+}
 async function sha256(data) {
+  const nodeCrypto = getNodeCrypto();
+  if (nodeCrypto) {
+    return nodeCrypto.createHash("sha256").update(data).digest("hex");
+  }
   if (typeof globalThis.crypto?.subtle !== "undefined") {
     const encoded = new TextEncoder().encode(data);
     const hash = await globalThis.crypto.subtle.digest("SHA-256", encoded);
@@ -175,40 +195,82 @@ async function sha256(data) {
       (b) => b.toString(16).padStart(2, "0")
     ).join("");
   }
-  return simpleHash(data);
+  try {
+    const ExpoCrypto = __require("expo-crypto");
+    return await ExpoCrypto.digestStringAsync(
+      ExpoCrypto.CryptoDigestAlgorithm.SHA256,
+      data
+    );
+  } catch {
+    throw new Error("No crypto implementation available for SHA-256");
+  }
 }
 async function hmacSha256(secret, data) {
+  const nodeCrypto = getNodeCrypto();
+  if (nodeCrypto) {
+    return nodeCrypto.createHmac("sha256", secret).update(data).digest("hex");
+  }
   if (typeof globalThis.crypto?.subtle !== "undefined") {
-    const key = await globalThis.crypto.subtle.importKey(
-      "raw",
-      new TextEncoder().encode(secret),
-      { name: "HMAC", hash: "SHA-256" },
-      false,
-      ["sign"]
+    try {
+      const key = await globalThis.crypto.subtle.importKey(
+        "raw",
+        new TextEncoder().encode(secret),
+        { name: "HMAC", hash: "SHA-256" },
+        false,
+        ["sign"]
+      );
+      const sig = await globalThis.crypto.subtle.sign(
+        "HMAC",
+        key,
+        new TextEncoder().encode(data)
+      );
+      return Array.from(
+        new Uint8Array(sig),
+        (b) => b.toString(16).padStart(2, "0")
+      ).join("");
+    } catch {
+    }
+  }
+  try {
+    const ExpoCrypto = __require("expo-crypto");
+    const BLOCK_SIZE = 64;
+    let keyBytes = new Uint8Array(
+      secret.split("").map((c) => c.charCodeAt(0))
     );
-    const sig = await globalThis.crypto.subtle.sign(
-      "HMAC",
-      key,
-      new TextEncoder().encode(data)
+    if (keyBytes.length > BLOCK_SIZE) {
+      const hashed = await ExpoCrypto.digestStringAsync(
+        ExpoCrypto.CryptoDigestAlgorithm.SHA256,
+        secret
+      );
+      keyBytes = new Uint8Array(
+        hashed.match(/.{2}/g).map((h) => parseInt(h, 16))
+      );
+    }
+    const paddedKey = new Uint8Array(BLOCK_SIZE);
+    paddedKey.set(keyBytes);
+    const ipad = new Uint8Array(BLOCK_SIZE);
+    const opad = new Uint8Array(BLOCK_SIZE);
+    for (let i = 0; i < BLOCK_SIZE; i++) {
+      ipad[i] = paddedKey[i] ^ 54;
+      opad[i] = paddedKey[i] ^ 92;
+    }
+    const innerData = String.fromCharCode(...ipad) + data;
+    const innerHash = await ExpoCrypto.digestStringAsync(
+      ExpoCrypto.CryptoDigestAlgorithm.SHA256,
+      innerData
     );
-    return Array.from(
-      new Uint8Array(sig),
-      (b) => b.toString(16).padStart(2, "0")
-    ).join("");
+    const innerBytes = new Uint8Array(
+      innerHash.match(/.{2}/g).map((h) => parseInt(h, 16))
+    );
+    const outerData = String.fromCharCode(...opad) + String.fromCharCode(...innerBytes);
+    const result = await ExpoCrypto.digestStringAsync(
+      ExpoCrypto.CryptoDigestAlgorithm.SHA256,
+      outerData
+    );
+    return result;
+  } catch {
+    throw new Error("No crypto implementation available for HMAC-SHA256");
   }
-  return simpleHmac(secret, data);
-}
-function simpleHash(str) {
-  let hash = 0;
-  for (let i = 0; i < str.length; i++) {
-    const char = str.charCodeAt(i);
-    hash = (hash << 5) - hash + char;
-    hash |= 0;
-  }
-  return Math.abs(hash).toString(16).padStart(16, "0");
-}
-function simpleHmac(key, data) {
-  return simpleHash(key + ":" + data);
 }
 function generateNonce() {
   if (typeof globalThis.crypto?.randomUUID === "function") {
@@ -273,7 +335,10 @@ var ApiClient = class {
                 return this.instance(originalRequest);
               }
             } catch (refreshError) {
-              console.warn("[CodixusClient] Token refresh failed:", refreshError);
+              console.warn(
+                "[CodixusClient] Token refresh failed:",
+                refreshError
+              );
             }
           }
         }

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/auth/auth-manager.ts","../src/api/api-client.ts","../src/db/collection.ts","../src/index.ts"],"sourcesContent":["import type {\n  AuthTokenResponse,\n  DeviceInfo,\n  DeviceMetadata,\n} from \"@codixus/shared\";\nimport type { ApiClient } from \"../api/api-client.js\";\n\nexport interface StorageAdapter {\n  getItem(key: string): Promise<string | null> | string | null;\n  setItem(key: string, value: string): Promise<void> | void;\n  removeItem(key: string): Promise<void> | void;\n}\n\nexport interface SignInParams {\n  deviceId?: string;\n  deviceInfo: DeviceInfo;\n  metadata?: DeviceMetadata;\n}\n\nexport interface AuthState {\n  isAuthenticated: boolean;\n  isLoading: boolean;\n  user: Record<string, unknown> | null;\n}\n\ntype AuthStateListener = (state: AuthState) => void;\n\nexport class AuthManager {\n  private accessToken: string | null = null;\n  private refreshTokenValue: string | null = null;\n  private user: Record<string, unknown> | null = null;\n  private listeners: Set<AuthStateListener> = new Set();\n  private _isLoading = true;\n  private storageKey: string;\n  private api!: ApiClient;\n  private deviceId: string | null = null;\n\n  constructor(\n    private storage: StorageAdapter | null,\n    storageKey: string,\n  ) {\n    this.storageKey = storageKey;\n  }\n\n  /** @internal */\n  _setApi(api: ApiClient): void {\n    this.api = api;\n  }\n\n  async init(): Promise<void> {\n    if (!this.storage) {\n      this._isLoading = false;\n      return;\n    }\n\n    try {\n      const storedRefresh = await this.storage.getItem(\n        `${this.storageKey}_refresh_token`,\n      );\n      const storedUser = await this.storage.getItem(\n        `${this.storageKey}_user`,\n      );\n      const storedDeviceId = await this.storage.getItem(\n        `${this.storageKey}_device_id`,\n      );\n\n      if (storedRefresh) {\n        this.refreshTokenValue = storedRefresh;\n      }\n      if (storedUser) {\n        try {\n          this.user = JSON.parse(storedUser);\n        } catch {\n          // Corrupted user data in storage, ignore\n        }\n      }\n      if (storedDeviceId) {\n        this.deviceId = storedDeviceId;\n      }\n    } catch (error) {\n      console.warn(\"[CodixusClient] Failed to restore auth state from storage:\", error);\n    }\n\n    this._isLoading = false;\n    this.notify();\n  }\n\n  async signIn(\n    params: SignInParams,\n  ): Promise<{ user: Record<string, unknown>; isNewUser: boolean }> {\n    const deviceId = params.deviceId ?? this.deviceId ?? this.generateDeviceId();\n\n    const response = await this.api.post<AuthTokenResponse>(\"/auth/token\", {\n      deviceId,\n      deviceInfo: params.deviceInfo,\n      metadata: params.metadata,\n    });\n\n    const data = response.data;\n    this.accessToken = data.accessToken;\n    this.refreshTokenValue = data.refreshToken;\n    this.user = data.user;\n    this.deviceId = deviceId;\n\n    // Persist\n    if (this.storage) {\n      await this.storage.setItem(\n        `${this.storageKey}_refresh_token`,\n        data.refreshToken,\n      );\n      await this.storage.setItem(\n        `${this.storageKey}_user`,\n        JSON.stringify(data.user),\n      );\n      await this.storage.setItem(`${this.storageKey}_device_id`, deviceId);\n    }\n\n    this.notify();\n    return { user: data.user, isNewUser: data.isNewUser };\n  }\n\n  async getToken(): Promise<string | null> {\n    if (this.accessToken) return this.accessToken;\n\n    // Try refresh\n    if (this.refreshTokenValue) {\n      try {\n        await this.forceRefresh();\n        return this.accessToken;\n      } catch {\n        return null;\n      }\n    }\n\n    return null;\n  }\n\n  async forceRefresh(): Promise<string | null> {\n    if (!this.refreshTokenValue) return null;\n\n    try {\n      const response = await this.api.post<{\n        success: boolean;\n        accessToken: string;\n        refreshToken: string;\n      }>(\"/auth/refresh\", {\n        refreshToken: this.refreshTokenValue,\n      });\n\n      this.accessToken = response.data.accessToken;\n      this.refreshTokenValue = response.data.refreshToken;\n\n      if (this.storage) {\n        await this.storage.setItem(\n          `${this.storageKey}_refresh_token`,\n          response.data.refreshToken,\n        );\n      }\n\n      return this.accessToken;\n    } catch {\n      // Refresh failed, clear auth state\n      await this.signOut();\n      return null;\n    }\n  }\n\n  async signOut(): Promise<void> {\n    // Notify server\n    if (this.refreshTokenValue) {\n      try {\n        await this.api.post(\"/auth/logout\", {\n          refreshToken: this.refreshTokenValue,\n        });\n      } catch {}\n    }\n\n    this.accessToken = null;\n    this.refreshTokenValue = null;\n    this.user = null;\n\n    if (this.storage) {\n      await this.storage.removeItem(`${this.storageKey}_refresh_token`);\n      await this.storage.removeItem(`${this.storageKey}_user`);\n      await this.storage.removeItem(`${this.storageKey}_device_id`);\n    }\n\n    this.notify();\n  }\n\n  getState(): AuthState {\n    return {\n      isAuthenticated: this.accessToken !== null || this.refreshTokenValue !== null,\n      isLoading: this._isLoading,\n      user: this.user,\n    };\n  }\n\n  getDeviceId(): string | null {\n    return this.deviceId;\n  }\n\n  onAuthStateChange(listener: AuthStateListener): () => void {\n    this.listeners.add(listener);\n    // Call immediately with current state\n    listener(this.getState());\n    return () => {\n      this.listeners.delete(listener);\n    };\n  }\n\n  /** @internal - used by API interceptor */\n  _getAccessToken(): string | null {\n    return this.accessToken;\n  }\n\n  /** @internal - called by API interceptor after refresh */\n  _setAccessToken(token: string): void {\n    this.accessToken = token;\n  }\n\n  private notify(): void {\n    const state = this.getState();\n    for (const listener of this.listeners) {\n      listener(state);\n    }\n  }\n\n  private generateDeviceId(): string {\n    const bytes = new Uint8Array(16);\n    crypto.getRandomValues(bytes);\n    return \"dev-\" + Array.from(bytes, (b) => b.toString(16).padStart(2, \"0\")).join(\"\");\n  }\n}\n","import axios, {\n  type AxiosInstance,\n  type AxiosRequestConfig,\n  type AxiosResponse,\n} from \"axios\";\nimport type { AuthManager } from \"../auth/auth-manager.js\";\n\n// Lightweight crypto helpers that work in both browser and React Native\nasync function sha256(data: string): Promise<string> {\n  if (typeof globalThis.crypto?.subtle !== \"undefined\") {\n    const encoded = new TextEncoder().encode(data);\n    const hash = await globalThis.crypto.subtle.digest(\"SHA-256\", encoded);\n    return Array.from(new Uint8Array(hash), (b) =>\n      b.toString(16).padStart(2, \"0\"),\n    ).join(\"\");\n  }\n  // Fallback: simple hash (React Native without crypto.subtle)\n  return simpleHash(data);\n}\n\nasync function hmacSha256(secret: string, data: string): Promise<string> {\n  if (typeof globalThis.crypto?.subtle !== \"undefined\") {\n    const key = await globalThis.crypto.subtle.importKey(\n      \"raw\",\n      new TextEncoder().encode(secret),\n      { name: \"HMAC\", hash: \"SHA-256\" },\n      false,\n      [\"sign\"],\n    );\n    const sig = await globalThis.crypto.subtle.sign(\n      \"HMAC\",\n      key,\n      new TextEncoder().encode(data),\n    );\n    return Array.from(new Uint8Array(sig), (b) =>\n      b.toString(16).padStart(2, \"0\"),\n    ).join(\"\");\n  }\n  // Fallback for environments without SubtleCrypto\n  return simpleHmac(secret, data);\n}\n\n// Simple fallback hash for environments without SubtleCrypto\nfunction simpleHash(str: string): string {\n  let hash = 0;\n  for (let i = 0; i < str.length; i++) {\n    const char = str.charCodeAt(i);\n    hash = (hash << 5) - hash + char;\n    hash |= 0;\n  }\n  return Math.abs(hash).toString(16).padStart(16, \"0\");\n}\n\nfunction simpleHmac(key: string, data: string): string {\n  return simpleHash(key + \":\" + data);\n}\n\nfunction generateNonce(): string {\n  if (typeof globalThis.crypto?.randomUUID === \"function\") {\n    return globalThis.crypto.randomUUID();\n  }\n  // Fallback\n  const bytes = new Uint8Array(16);\n  if (typeof globalThis.crypto?.getRandomValues === \"function\") {\n    globalThis.crypto.getRandomValues(bytes);\n  } else {\n    for (let i = 0; i < 16; i++) {\n      bytes[i] = Math.floor(Math.random() * 256);\n    }\n  }\n  return Array.from(bytes, (b) => b.toString(16).padStart(2, \"0\")).join(\"\");\n}\n\nexport class ApiClient {\n  readonly instance: AxiosInstance;\n  private refreshPromise: Promise<string | null> | null = null;\n  private appSecret: string | undefined;\n\n  constructor(\n    baseURL: string,\n    private authManager: AuthManager,\n    appSecret?: string,\n  ) {\n    this.appSecret = appSecret;\n\n    this.instance = axios.create({\n      baseURL,\n      headers: { \"Content-Type\": \"application/json\" },\n    });\n\n    // Request interceptor: add Bearer token + signing\n    this.instance.interceptors.request.use(async (config) => {\n      // Skip auth for auth endpoints\n      if (!config.url?.includes(\"/auth/\")) {\n        const token = this.authManager._getAccessToken();\n        if (token) {\n          config.headers.Authorization = `Bearer ${token}`;\n        }\n      }\n\n      // Request signing\n      if (this.appSecret) {\n        const timestamp = Date.now().toString();\n        const nonce = generateNonce();\n        const body =\n          config.data && typeof config.data === \"object\"\n            ? JSON.stringify(config.data)\n            : (config.data ?? \"\");\n        const bodyHash = body ? await sha256(body) : \"\";\n        const method = (config.method ?? \"GET\").toUpperCase();\n        const url = config.url ?? \"/\";\n        const payload = [method, url, timestamp, nonce, bodyHash].join(\"\\n\");\n        const signature = await hmacSha256(this.appSecret, payload);\n\n        config.headers[\"X-Codixus-Timestamp\"] = timestamp;\n        config.headers[\"X-Codixus-Nonce\"] = nonce;\n        config.headers[\"X-Codixus-Signature\"] = signature;\n      }\n\n      return config;\n    });\n\n    // Response interceptor: handle 401 with token refresh\n    this.instance.interceptors.response.use(\n      (response) => response,\n      async (error) => {\n        if (error.response?.status === 401) {\n          const originalRequest = error.config;\n          if (originalRequest && !originalRequest._retry) {\n            originalRequest._retry = true;\n\n            try {\n              // Promise lock to prevent concurrent refreshes\n              if (!this.refreshPromise) {\n                this.refreshPromise = this.authManager\n                  .forceRefresh()\n                  .finally(() => {\n                    this.refreshPromise = null;\n                  });\n              }\n\n              const newToken = await this.refreshPromise;\n              if (newToken) {\n                originalRequest.headers.Authorization = `Bearer ${newToken}`;\n                return this.instance(originalRequest);\n              }\n            } catch (refreshError) {\n              console.warn(\"[CodixusClient] Token refresh failed:\", refreshError);\n            }\n          }\n        }\n        return Promise.reject(error);\n      },\n    );\n  }\n\n  async get<T = unknown>(\n    url: string,\n    config?: AxiosRequestConfig,\n  ): Promise<AxiosResponse<T>> {\n    return this.instance.get<T>(url, config);\n  }\n\n  async post<T = unknown>(\n    url: string,\n    data?: unknown,\n    config?: AxiosRequestConfig,\n  ): Promise<AxiosResponse<T>> {\n    return this.instance.post<T>(url, data, config);\n  }\n\n  async patch<T = unknown>(\n    url: string,\n    data?: unknown,\n    config?: AxiosRequestConfig,\n  ): Promise<AxiosResponse<T>> {\n    return this.instance.patch<T>(url, data, config);\n  }\n\n  async delete<T = unknown>(\n    url: string,\n    config?: AxiosRequestConfig,\n  ): Promise<AxiosResponse<T>> {\n    return this.instance.delete<T>(url, config);\n  }\n\n  async put<T = unknown>(\n    url: string,\n    data?: unknown,\n    config?: AxiosRequestConfig,\n  ): Promise<AxiosResponse<T>> {\n    return this.instance.put<T>(url, data, config);\n  }\n}\n","import type { ApiClient } from \"../api/api-client.js\";\n\nexport interface FindOptions {\n  sort?: Record<string, 1 | -1>;\n  limit?: number;\n  skip?: number;\n  cursor?: string | number;\n}\n\nexport class Collection<T = Record<string, unknown>> {\n  constructor(\n    private api: ApiClient,\n    private basePath: string,\n  ) {}\n\n  async find(\n    filter?: Record<string, unknown>,\n    options?: FindOptions,\n  ): Promise<T[]> {\n    const params = new URLSearchParams();\n    if (filter && Object.keys(filter).length > 0) {\n      params.set(\"filter\", JSON.stringify(filter));\n    }\n    if (options?.sort) params.set(\"sort\", JSON.stringify(options.sort));\n    if (options?.limit) params.set(\"limit\", String(options.limit));\n    if (options?.skip) params.set(\"skip\", String(options.skip));\n    if (options?.cursor) params.set(\"cursor\", String(options.cursor));\n\n    const qs = params.toString();\n    const url = qs ? `${this.basePath}?${qs}` : this.basePath;\n    const { data } = await this.api.get<{ success: boolean; data: T[]; nextCursor?: string | null }>(url);\n    return data.data;\n  }\n\n  async findWithCursor(\n    filter?: Record<string, unknown>,\n    options?: FindOptions,\n  ): Promise<{ data: T[]; nextCursor: string | number | null }> {\n    const params = new URLSearchParams();\n    if (filter && Object.keys(filter).length > 0) {\n      params.set(\"filter\", JSON.stringify(filter));\n    }\n    if (options?.sort) params.set(\"sort\", JSON.stringify(options.sort));\n    if (options?.limit) params.set(\"limit\", String(options.limit));\n    if (options?.cursor) params.set(\"cursor\", String(options.cursor));\n\n    const qs = params.toString();\n    const url = qs ? `${this.basePath}?${qs}` : this.basePath;\n    const { data } = await this.api.get<{ success: boolean; data: T[]; nextCursor: string | number | null }>(url);\n    return { data: data.data, nextCursor: data.nextCursor };\n  }\n\n  async findById(id: string): Promise<T | null> {\n    try {\n      const { data } = await this.api.get<{ success: boolean; data: T }>(\n        `${this.basePath}/${id}`,\n      );\n      return data.data;\n    } catch (error: any) {\n      if (error.response?.status === 404) return null;\n      throw error;\n    }\n  }\n\n  async create(doc: Partial<T> & Record<string, unknown>): Promise<T> {\n    const { data } = await this.api.post<{ success: boolean; data: T }>(\n      this.basePath,\n      doc,\n    );\n    return data.data;\n  }\n\n  async updateById(\n    id: string,\n    update: Record<string, unknown>,\n  ): Promise<T> {\n    const { data } = await this.api.patch<{ success: boolean; data: T }>(\n      `${this.basePath}/${id}`,\n      { update },\n    );\n    return data.data;\n  }\n\n  async deleteById(id: string): Promise<void> {\n    await this.api.delete(`${this.basePath}/${id}`);\n  }\n\n  async count(filter?: Record<string, unknown>): Promise<number> {\n    const { data } = await this.api.post<{ success: boolean; count: number }>(\n      `${this.basePath}/count`,\n      { filter: filter ?? {} },\n    );\n    return data.count;\n  }\n}\n","import {\n  AuthManager,\n  type StorageAdapter,\n  type SignInParams,\n  type AuthState,\n} from \"./auth/auth-manager.js\";\nimport { ApiClient } from \"./api/api-client.js\";\nimport { Collection, type FindOptions } from \"./db/collection.js\";\n\nexport interface CodixusClientConfig {\n  apiUrl: string;\n  storageKey?: string;\n  storage?: StorageAdapter | null;\n  appSecret?: string;\n}\n\nexport class CodixusClient {\n  readonly auth: AuthManager;\n  readonly api: ApiClient;\n\n  constructor(config: CodixusClientConfig) {\n    const storageKey = config.storageKey ?? \"codixus\";\n    const storage = config.storage ?? null;\n\n    this.auth = new AuthManager(storage, storageKey);\n    this.api = new ApiClient(config.apiUrl, this.auth, config.appSecret);\n    this.auth._setApi(this.api);\n  }\n\n  /**\n   * Create a typed collection accessor.\n   * Maps to auto REST routes on server: codixus.rest(Model)\n   *\n   * @example\n   * interface Product { _id: string; name: string; price: number; }\n   * const products = codixus.collection<Product>(\"products\");\n   * const all = await products.find();            // Product[]\n   * const one = await products.findById(\"abc\");   // Product | null\n   */\n  collection<T>(name: string): Collection<T> {\n    return new Collection<T>(this.api, `/api/${name}`);\n  }\n\n  async init(): Promise<void> {\n    await this.auth.init();\n  }\n}\n\nexport {\n  type StorageAdapter,\n  type SignInParams,\n  type AuthState,\n} from \"./auth/auth-manager.js\";\nexport { ApiClient } from \"./api/api-client.js\";\nexport { Collection, type FindOptions } from \"./db/collection.js\";\n\n// Re-export shared types\nexport {\n  type AuthUser,\n  type TokenPair,\n  type DeviceInfo,\n  type DeviceMetadata,\n  type AuthTokenRequest,\n  type AuthTokenResponse,\n  type ApiResponse,\n  CodixusError,\n  ErrorCodes,\n} from \"@codixus/shared\";\n"],"mappings":";AA2BO,IAAM,cAAN,MAAkB;AAAA,EAUvB,YACU,SACR,YACA;AAFQ;AAGR,SAAK,aAAa;AAAA,EACpB;AAAA,EAdQ,cAA6B;AAAA,EAC7B,oBAAmC;AAAA,EACnC,OAAuC;AAAA,EACvC,YAAoC,oBAAI,IAAI;AAAA,EAC5C,aAAa;AAAA,EACb;AAAA,EACA;AAAA,EACA,WAA0B;AAAA;AAAA,EAUlC,QAAQ,KAAsB;AAC5B,SAAK,MAAM;AAAA,EACb;AAAA,EAEA,MAAM,OAAsB;AAC1B,QAAI,CAAC,KAAK,SAAS;AACjB,WAAK,aAAa;AAClB;AAAA,IACF;AAEA,QAAI;AACF,YAAM,gBAAgB,MAAM,KAAK,QAAQ;AAAA,QACvC,GAAG,KAAK,UAAU;AAAA,MACpB;AACA,YAAM,aAAa,MAAM,KAAK,QAAQ;AAAA,QACpC,GAAG,KAAK,UAAU;AAAA,MACpB;AACA,YAAM,iBAAiB,MAAM,KAAK,QAAQ;AAAA,QACxC,GAAG,KAAK,UAAU;AAAA,MACpB;AAEA,UAAI,eAAe;AACjB,aAAK,oBAAoB;AAAA,MAC3B;AACA,UAAI,YAAY;AACd,YAAI;AACF,eAAK,OAAO,KAAK,MAAM,UAAU;AAAA,QACnC,QAAQ;AAAA,QAER;AAAA,MACF;AACA,UAAI,gBAAgB;AAClB,aAAK,WAAW;AAAA,MAClB;AAAA,IACF,SAAS,OAAO;AACd,cAAQ,KAAK,8DAA8D,KAAK;AAAA,IAClF;AAEA,SAAK,aAAa;AAClB,SAAK,OAAO;AAAA,EACd;AAAA,EAEA,MAAM,OACJ,QACgE;AAChE,UAAM,WAAW,OAAO,YAAY,KAAK,YAAY,KAAK,iBAAiB;AAE3E,UAAM,WAAW,MAAM,KAAK,IAAI,KAAwB,eAAe;AAAA,MACrE;AAAA,MACA,YAAY,OAAO;AAAA,MACnB,UAAU,OAAO;AAAA,IACnB,CAAC;AAED,UAAM,OAAO,SAAS;AACtB,SAAK,cAAc,KAAK;AACxB,SAAK,oBAAoB,KAAK;AAC9B,SAAK,OAAO,KAAK;AACjB,SAAK,WAAW;AAGhB,QAAI,KAAK,SAAS;AAChB,YAAM,KAAK,QAAQ;AAAA,QACjB,GAAG,KAAK,UAAU;AAAA,QAClB,KAAK;AAAA,MACP;AACA,YAAM,KAAK,QAAQ;AAAA,QACjB,GAAG,KAAK,UAAU;AAAA,QAClB,KAAK,UAAU,KAAK,IAAI;AAAA,MAC1B;AACA,YAAM,KAAK,QAAQ,QAAQ,GAAG,KAAK,UAAU,cAAc,QAAQ;AAAA,IACrE;AAEA,SAAK,OAAO;AACZ,WAAO,EAAE,MAAM,KAAK,MAAM,WAAW,KAAK,UAAU;AAAA,EACtD;AAAA,EAEA,MAAM,WAAmC;AACvC,QAAI,KAAK,YAAa,QAAO,KAAK;AAGlC,QAAI,KAAK,mBAAmB;AAC1B,UAAI;AACF,cAAM,KAAK,aAAa;AACxB,eAAO,KAAK;AAAA,MACd,QAAQ;AACN,eAAO;AAAA,MACT;AAAA,IACF;AAEA,WAAO;AAAA,EACT;AAAA,EAEA,MAAM,eAAuC;AAC3C,QAAI,CAAC,KAAK,kBAAmB,QAAO;AAEpC,QAAI;AACF,YAAM,WAAW,MAAM,KAAK,IAAI,KAI7B,iBAAiB;AAAA,QAClB,cAAc,KAAK;AAAA,MACrB,CAAC;AAED,WAAK,cAAc,SAAS,KAAK;AACjC,WAAK,oBAAoB,SAAS,KAAK;AAEvC,UAAI,KAAK,SAAS;AAChB,cAAM,KAAK,QAAQ;AAAA,UACjB,GAAG,KAAK,UAAU;AAAA,UAClB,SAAS,KAAK;AAAA,QAChB;AAAA,MACF;AAEA,aAAO,KAAK;AAAA,IACd,QAAQ;AAEN,YAAM,KAAK,QAAQ;AACnB,aAAO;AAAA,IACT;AAAA,EACF;AAAA,EAEA,MAAM,UAAyB;AAE7B,QAAI,KAAK,mBAAmB;AAC1B,UAAI;AACF,cAAM,KAAK,IAAI,KAAK,gBAAgB;AAAA,UAClC,cAAc,KAAK;AAAA,QACrB,CAAC;AAAA,MACH,QAAQ;AAAA,MAAC;AAAA,IACX;AAEA,SAAK,cAAc;AACnB,SAAK,oBAAoB;AACzB,SAAK,OAAO;AAEZ,QAAI,KAAK,SAAS;AAChB,YAAM,KAAK,QAAQ,WAAW,GAAG,KAAK,UAAU,gBAAgB;AAChE,YAAM,KAAK,QAAQ,WAAW,GAAG,KAAK,UAAU,OAAO;AACvD,YAAM,KAAK,QAAQ,WAAW,GAAG,KAAK,UAAU,YAAY;AAAA,IAC9D;AAEA,SAAK,OAAO;AAAA,EACd;AAAA,EAEA,WAAsB;AACpB,WAAO;AAAA,MACL,iBAAiB,KAAK,gBAAgB,QAAQ,KAAK,sBAAsB;AAAA,MACzE,WAAW,KAAK;AAAA,MAChB,MAAM,KAAK;AAAA,IACb;AAAA,EACF;AAAA,EAEA,cAA6B;AAC3B,WAAO,KAAK;AAAA,EACd;AAAA,EAEA,kBAAkB,UAAyC;AACzD,SAAK,UAAU,IAAI,QAAQ;AAE3B,aAAS,KAAK,SAAS,CAAC;AACxB,WAAO,MAAM;AACX,WAAK,UAAU,OAAO,QAAQ;AAAA,IAChC;AAAA,EACF;AAAA;AAAA,EAGA,kBAAiC;AAC/B,WAAO,KAAK;AAAA,EACd;AAAA;AAAA,EAGA,gBAAgB,OAAqB;AACnC,SAAK,cAAc;AAAA,EACrB;AAAA,EAEQ,SAAe;AACrB,UAAM,QAAQ,KAAK,SAAS;AAC5B,eAAW,YAAY,KAAK,WAAW;AACrC,eAAS,KAAK;AAAA,IAChB;AAAA,EACF;AAAA,EAEQ,mBAA2B;AACjC,UAAM,QAAQ,IAAI,WAAW,EAAE;AAC/B,WAAO,gBAAgB,KAAK;AAC5B,WAAO,SAAS,MAAM,KAAK,OAAO,CAAC,MAAM,EAAE,SAAS,EAAE,EAAE,SAAS,GAAG,GAAG,CAAC,EAAE,KAAK,EAAE;AAAA,EACnF;AACF;;;ACzOA,OAAO,WAIA;AAIP,eAAe,OAAO,MAA+B;AACnD,MAAI,OAAO,WAAW,QAAQ,WAAW,aAAa;AACpD,UAAM,UAAU,IAAI,YAAY,EAAE,OAAO,IAAI;AAC7C,UAAM,OAAO,MAAM,WAAW,OAAO,OAAO,OAAO,WAAW,OAAO;AACrE,WAAO,MAAM;AAAA,MAAK,IAAI,WAAW,IAAI;AAAA,MAAG,CAAC,MACvC,EAAE,SAAS,EAAE,EAAE,SAAS,GAAG,GAAG;AAAA,IAChC,EAAE,KAAK,EAAE;AAAA,EACX;AAEA,SAAO,WAAW,IAAI;AACxB;AAEA,eAAe,WAAW,QAAgB,MAA+B;AACvE,MAAI,OAAO,WAAW,QAAQ,WAAW,aAAa;AACpD,UAAM,MAAM,MAAM,WAAW,OAAO,OAAO;AAAA,MACzC;AAAA,MACA,IAAI,YAAY,EAAE,OAAO,MAAM;AAAA,MAC/B,EAAE,MAAM,QAAQ,MAAM,UAAU;AAAA,MAChC;AAAA,MACA,CAAC,MAAM;AAAA,IACT;AACA,UAAM,MAAM,MAAM,WAAW,OAAO,OAAO;AAAA,MACzC;AAAA,MACA;AAAA,MACA,IAAI,YAAY,EAAE,OAAO,IAAI;AAAA,IAC/B;AACA,WAAO,MAAM;AAAA,MAAK,IAAI,WAAW,GAAG;AAAA,MAAG,CAAC,MACtC,EAAE,SAAS,EAAE,EAAE,SAAS,GAAG,GAAG;AAAA,IAChC,EAAE,KAAK,EAAE;AAAA,EACX;AAEA,SAAO,WAAW,QAAQ,IAAI;AAChC;AAGA,SAAS,WAAW,KAAqB;AACvC,MAAI,OAAO;AACX,WAAS,IAAI,GAAG,IAAI,IAAI,QAAQ,KAAK;AACnC,UAAM,OAAO,IAAI,WAAW,CAAC;AAC7B,YAAQ,QAAQ,KAAK,OAAO;AAC5B,YAAQ;AAAA,EACV;AACA,SAAO,KAAK,IAAI,IAAI,EAAE,SAAS,EAAE,EAAE,SAAS,IAAI,GAAG;AACrD;AAEA,SAAS,WAAW,KAAa,MAAsB;AACrD,SAAO,WAAW,MAAM,MAAM,IAAI;AACpC;AAEA,SAAS,gBAAwB;AAC/B,MAAI,OAAO,WAAW,QAAQ,eAAe,YAAY;AACvD,WAAO,WAAW,OAAO,WAAW;AAAA,EACtC;AAEA,QAAM,QAAQ,IAAI,WAAW,EAAE;AAC/B,MAAI,OAAO,WAAW,QAAQ,oBAAoB,YAAY;AAC5D,eAAW,OAAO,gBAAgB,KAAK;AAAA,EACzC,OAAO;AACL,aAAS,IAAI,GAAG,IAAI,IAAI,KAAK;AAC3B,YAAM,CAAC,IAAI,KAAK,MAAM,KAAK,OAAO,IAAI,GAAG;AAAA,IAC3C;AAAA,EACF;AACA,SAAO,MAAM,KAAK,OAAO,CAAC,MAAM,EAAE,SAAS,EAAE,EAAE,SAAS,GAAG,GAAG,CAAC,EAAE,KAAK,EAAE;AAC1E;AAEO,IAAM,YAAN,MAAgB;AAAA,EAKrB,YACE,SACQ,aACR,WACA;AAFQ;AAGR,SAAK,YAAY;AAEjB,SAAK,WAAW,MAAM,OAAO;AAAA,MAC3B;AAAA,MACA,SAAS,EAAE,gBAAgB,mBAAmB;AAAA,IAChD,CAAC;AAGD,SAAK,SAAS,aAAa,QAAQ,IAAI,OAAO,WAAW;AAEvD,UAAI,CAAC,OAAO,KAAK,SAAS,QAAQ,GAAG;AACnC,cAAM,QAAQ,KAAK,YAAY,gBAAgB;AAC/C,YAAI,OAAO;AACT,iBAAO,QAAQ,gBAAgB,UAAU,KAAK;AAAA,QAChD;AAAA,MACF;AAGA,UAAI,KAAK,WAAW;AAClB,cAAM,YAAY,KAAK,IAAI,EAAE,SAAS;AACtC,cAAM,QAAQ,cAAc;AAC5B,cAAM,OACJ,OAAO,QAAQ,OAAO,OAAO,SAAS,WAClC,KAAK,UAAU,OAAO,IAAI,IACzB,OAAO,QAAQ;AACtB,cAAM,WAAW,OAAO,MAAM,OAAO,IAAI,IAAI;AAC7C,cAAM,UAAU,OAAO,UAAU,OAAO,YAAY;AACpD,cAAM,MAAM,OAAO,OAAO;AAC1B,cAAM,UAAU,CAAC,QAAQ,KAAK,WAAW,OAAO,QAAQ,EAAE,KAAK,IAAI;AACnE,cAAM,YAAY,MAAM,WAAW,KAAK,WAAW,OAAO;AAE1D,eAAO,QAAQ,qBAAqB,IAAI;AACxC,eAAO,QAAQ,iBAAiB,IAAI;AACpC,eAAO,QAAQ,qBAAqB,IAAI;AAAA,MAC1C;AAEA,aAAO;AAAA,IACT,CAAC;AAGD,SAAK,SAAS,aAAa,SAAS;AAAA,MAClC,CAAC,aAAa;AAAA,MACd,OAAO,UAAU;AACf,YAAI,MAAM,UAAU,WAAW,KAAK;AAClC,gBAAM,kBAAkB,MAAM;AAC9B,cAAI,mBAAmB,CAAC,gBAAgB,QAAQ;AAC9C,4BAAgB,SAAS;AAEzB,gBAAI;AAEF,kBAAI,CAAC,KAAK,gBAAgB;AACxB,qBAAK,iBAAiB,KAAK,YACxB,aAAa,EACb,QAAQ,MAAM;AACb,uBAAK,iBAAiB;AAAA,gBACxB,CAAC;AAAA,cACL;AAEA,oBAAM,WAAW,MAAM,KAAK;AAC5B,kBAAI,UAAU;AACZ,gCAAgB,QAAQ,gBAAgB,UAAU,QAAQ;AAC1D,uBAAO,KAAK,SAAS,eAAe;AAAA,cACtC;AAAA,YACF,SAAS,cAAc;AACrB,sBAAQ,KAAK,yCAAyC,YAAY;AAAA,YACpE;AAAA,UACF;AAAA,QACF;AACA,eAAO,QAAQ,OAAO,KAAK;AAAA,MAC7B;AAAA,IACF;AAAA,EACF;AAAA,EAhFS;AAAA,EACD,iBAAgD;AAAA,EAChD;AAAA,EAgFR,MAAM,IACJ,KACA,QAC2B;AAC3B,WAAO,KAAK,SAAS,IAAO,KAAK,MAAM;AAAA,EACzC;AAAA,EAEA,MAAM,KACJ,KACA,MACA,QAC2B;AAC3B,WAAO,KAAK,SAAS,KAAQ,KAAK,MAAM,MAAM;AAAA,EAChD;AAAA,EAEA,MAAM,MACJ,KACA,MACA,QAC2B;AAC3B,WAAO,KAAK,SAAS,MAAS,KAAK,MAAM,MAAM;AAAA,EACjD;AAAA,EAEA,MAAM,OACJ,KACA,QAC2B;AAC3B,WAAO,KAAK,SAAS,OAAU,KAAK,MAAM;AAAA,EAC5C;AAAA,EAEA,MAAM,IACJ,KACA,MACA,QAC2B;AAC3B,WAAO,KAAK,SAAS,IAAO,KAAK,MAAM,MAAM;AAAA,EAC/C;AACF;;;ACxLO,IAAM,aAAN,MAA8C;AAAA,EACnD,YACU,KACA,UACR;AAFQ;AACA;AAAA,EACP;AAAA,EAEH,MAAM,KACJ,QACA,SACc;AACd,UAAM,SAAS,IAAI,gBAAgB;AACnC,QAAI,UAAU,OAAO,KAAK,MAAM,EAAE,SAAS,GAAG;AAC5C,aAAO,IAAI,UAAU,KAAK,UAAU,MAAM,CAAC;AAAA,IAC7C;AACA,QAAI,SAAS,KAAM,QAAO,IAAI,QAAQ,KAAK,UAAU,QAAQ,IAAI,CAAC;AAClE,QAAI,SAAS,MAAO,QAAO,IAAI,SAAS,OAAO,QAAQ,KAAK,CAAC;AAC7D,QAAI,SAAS,KAAM,QAAO,IAAI,QAAQ,OAAO,QAAQ,IAAI,CAAC;AAC1D,QAAI,SAAS,OAAQ,QAAO,IAAI,UAAU,OAAO,QAAQ,MAAM,CAAC;AAEhE,UAAM,KAAK,OAAO,SAAS;AAC3B,UAAM,MAAM,KAAK,GAAG,KAAK,QAAQ,IAAI,EAAE,KAAK,KAAK;AACjD,UAAM,EAAE,KAAK,IAAI,MAAM,KAAK,IAAI,IAAiE,GAAG;AACpG,WAAO,KAAK;AAAA,EACd;AAAA,EAEA,MAAM,eACJ,QACA,SAC4D;AAC5D,UAAM,SAAS,IAAI,gBAAgB;AACnC,QAAI,UAAU,OAAO,KAAK,MAAM,EAAE,SAAS,GAAG;AAC5C,aAAO,IAAI,UAAU,KAAK,UAAU,MAAM,CAAC;AAAA,IAC7C;AACA,QAAI,SAAS,KAAM,QAAO,IAAI,QAAQ,KAAK,UAAU,QAAQ,IAAI,CAAC;AAClE,QAAI,SAAS,MAAO,QAAO,IAAI,SAAS,OAAO,QAAQ,KAAK,CAAC;AAC7D,QAAI,SAAS,OAAQ,QAAO,IAAI,UAAU,OAAO,QAAQ,MAAM,CAAC;AAEhE,UAAM,KAAK,OAAO,SAAS;AAC3B,UAAM,MAAM,KAAK,GAAG,KAAK,QAAQ,IAAI,EAAE,KAAK,KAAK;AACjD,UAAM,EAAE,KAAK,IAAI,MAAM,KAAK,IAAI,IAAyE,GAAG;AAC5G,WAAO,EAAE,MAAM,KAAK,MAAM,YAAY,KAAK,WAAW;AAAA,EACxD;AAAA,EAEA,MAAM,SAAS,IAA+B;AAC5C,QAAI;AACF,YAAM,EAAE,KAAK,IAAI,MAAM,KAAK,IAAI;AAAA,QAC9B,GAAG,KAAK,QAAQ,IAAI,EAAE;AAAA,MACxB;AACA,aAAO,KAAK;AAAA,IACd,SAAS,OAAY;AACnB,UAAI,MAAM,UAAU,WAAW,IAAK,QAAO;AAC3C,YAAM;AAAA,IACR;AAAA,EACF;AAAA,EAEA,MAAM,OAAO,KAAuD;AAClE,UAAM,EAAE,KAAK,IAAI,MAAM,KAAK,IAAI;AAAA,MAC9B,KAAK;AAAA,MACL;AAAA,IACF;AACA,WAAO,KAAK;AAAA,EACd;AAAA,EAEA,MAAM,WACJ,IACA,QACY;AACZ,UAAM,EAAE,KAAK,IAAI,MAAM,KAAK,IAAI;AAAA,MAC9B,GAAG,KAAK,QAAQ,IAAI,EAAE;AAAA,MACtB,EAAE,OAAO;AAAA,IACX;AACA,WAAO,KAAK;AAAA,EACd;AAAA,EAEA,MAAM,WAAW,IAA2B;AAC1C,UAAM,KAAK,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,EAAE,EAAE;AAAA,EAChD;AAAA,EAEA,MAAM,MAAM,QAAmD;AAC7D,UAAM,EAAE,KAAK,IAAI,MAAM,KAAK,IAAI;AAAA,MAC9B,GAAG,KAAK,QAAQ;AAAA,MAChB,EAAE,QAAQ,UAAU,CAAC,EAAE;AAAA,IACzB;AACA,WAAO,KAAK;AAAA,EACd;AACF;;;ACrCA;AAAA,EAQE;AAAA,EACA;AAAA,OACK;AAnDA,IAAM,gBAAN,MAAoB;AAAA,EAChB;AAAA,EACA;AAAA,EAET,YAAY,QAA6B;AACvC,UAAM,aAAa,OAAO,cAAc;AACxC,UAAM,UAAU,OAAO,WAAW;AAElC,SAAK,OAAO,IAAI,YAAY,SAAS,UAAU;AAC/C,SAAK,MAAM,IAAI,UAAU,OAAO,QAAQ,KAAK,MAAM,OAAO,SAAS;AACnE,SAAK,KAAK,QAAQ,KAAK,GAAG;AAAA,EAC5B;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAYA,WAAc,MAA6B;AACzC,WAAO,IAAI,WAAc,KAAK,KAAK,QAAQ,IAAI,EAAE;AAAA,EACnD;AAAA,EAEA,MAAM,OAAsB;AAC1B,UAAM,KAAK,KAAK,KAAK;AAAA,EACvB;AACF;","names":[]}
+{"version":3,"sources":["../src/auth/auth-manager.ts","../src/api/api-client.ts","../src/db/collection.ts","../src/index.ts"],"sourcesContent":["import type {\n  AuthTokenResponse,\n  DeviceInfo,\n  DeviceMetadata,\n} from \"@codixus/shared\";\nimport type { ApiClient } from \"../api/api-client.js\";\n\nexport interface StorageAdapter {\n  getItem(key: string): Promise<string | null> | string | null;\n  setItem(key: string, value: string): Promise<void> | void;\n  removeItem(key: string): Promise<void> | void;\n}\n\nexport interface SignInParams {\n  deviceId?: string;\n  deviceInfo: DeviceInfo;\n  metadata?: DeviceMetadata;\n}\n\nexport interface AuthState {\n  isAuthenticated: boolean;\n  isLoading: boolean;\n  user: Record<string, unknown> | null;\n}\n\ntype AuthStateListener = (state: AuthState) => void;\n\nexport class AuthManager {\n  private accessToken: string | null = null;\n  private refreshTokenValue: string | null = null;\n  private user: Record<string, unknown> | null = null;\n  private listeners: Set<AuthStateListener> = new Set();\n  private _isLoading = true;\n  private storageKey: string;\n  private api!: ApiClient;\n  private deviceId: string | null = null;\n\n  constructor(\n    private storage: StorageAdapter | null,\n    storageKey: string,\n  ) {\n    this.storageKey = storageKey;\n  }\n\n  /** @internal */\n  _setApi(api: ApiClient): void {\n    this.api = api;\n  }\n\n  async init(): Promise<void> {\n    if (!this.storage) {\n      this._isLoading = false;\n      return;\n    }\n\n    try {\n      const storedRefresh = await this.storage.getItem(\n        `${this.storageKey}_refresh_token`,\n      );\n      const storedUser = await this.storage.getItem(\n        `${this.storageKey}_user`,\n      );\n      const storedDeviceId = await this.storage.getItem(\n        `${this.storageKey}_device_id`,\n      );\n\n      if (storedRefresh) {\n        this.refreshTokenValue = storedRefresh;\n      }\n      if (storedUser) {\n        try {\n          this.user = JSON.parse(storedUser);\n        } catch {\n          // Corrupted user data in storage, ignore\n        }\n      }\n      if (storedDeviceId) {\n        this.deviceId = storedDeviceId;\n      }\n    } catch (error) {\n      console.warn(\"[CodixusClient] Failed to restore auth state from storage:\", error);\n    }\n\n    this._isLoading = false;\n    this.notify();\n  }\n\n  async signIn(\n    params: SignInParams,\n  ): Promise<{ user: Record<string, unknown>; isNewUser: boolean }> {\n    const deviceId = params.deviceId ?? this.deviceId ?? this.generateDeviceId();\n\n    const response = await this.api.post<AuthTokenResponse>(\"/auth/token\", {\n      deviceId,\n      deviceInfo: params.deviceInfo,\n      metadata: params.metadata,\n    });\n\n    const data = response.data;\n    this.accessToken = data.accessToken;\n    this.refreshTokenValue = data.refreshToken;\n    this.user = data.user;\n    this.deviceId = deviceId;\n\n    // Persist\n    if (this.storage) {\n      await this.storage.setItem(\n        `${this.storageKey}_refresh_token`,\n        data.refreshToken,\n      );\n      await this.storage.setItem(\n        `${this.storageKey}_user`,\n        JSON.stringify(data.user),\n      );\n      await this.storage.setItem(`${this.storageKey}_device_id`, deviceId);\n    }\n\n    this.notify();\n    return { user: data.user, isNewUser: data.isNewUser };\n  }\n\n  async getToken(): Promise<string | null> {\n    if (this.accessToken) return this.accessToken;\n\n    // Try refresh\n    if (this.refreshTokenValue) {\n      try {\n        await this.forceRefresh();\n        return this.accessToken;\n      } catch {\n        return null;\n      }\n    }\n\n    return null;\n  }\n\n  async forceRefresh(): Promise<string | null> {\n    if (!this.refreshTokenValue) return null;\n\n    try {\n      const response = await this.api.post<{\n        success: boolean;\n        accessToken: string;\n        refreshToken: string;\n      }>(\"/auth/refresh\", {\n        refreshToken: this.refreshTokenValue,\n      });\n\n      this.accessToken = response.data.accessToken;\n      this.refreshTokenValue = response.data.refreshToken;\n\n      if (this.storage) {\n        await this.storage.setItem(\n          `${this.storageKey}_refresh_token`,\n          response.data.refreshToken,\n        );\n      }\n\n      return this.accessToken;\n    } catch {\n      // Refresh failed, clear auth state\n      await this.signOut();\n      return null;\n    }\n  }\n\n  async signOut(): Promise<void> {\n    // Notify server\n    if (this.refreshTokenValue) {\n      try {\n        await this.api.post(\"/auth/logout\", {\n          refreshToken: this.refreshTokenValue,\n        });\n      } catch {}\n    }\n\n    this.accessToken = null;\n    this.refreshTokenValue = null;\n    this.user = null;\n\n    if (this.storage) {\n      await this.storage.removeItem(`${this.storageKey}_refresh_token`);\n      await this.storage.removeItem(`${this.storageKey}_user`);\n      await this.storage.removeItem(`${this.storageKey}_device_id`);\n    }\n\n    this.notify();\n  }\n\n  getState(): AuthState {\n    return {\n      isAuthenticated: this.accessToken !== null || this.refreshTokenValue !== null,\n      isLoading: this._isLoading,\n      user: this.user,\n    };\n  }\n\n  getDeviceId(): string | null {\n    return this.deviceId;\n  }\n\n  onAuthStateChange(listener: AuthStateListener): () => void {\n    this.listeners.add(listener);\n    // Call immediately with current state\n    listener(this.getState());\n    return () => {\n      this.listeners.delete(listener);\n    };\n  }\n\n  /** @internal - used by API interceptor */\n  _getAccessToken(): string | null {\n    return this.accessToken;\n  }\n\n  /** @internal - called by API interceptor after refresh */\n  _setAccessToken(token: string): void {\n    this.accessToken = token;\n  }\n\n  private notify(): void {\n    const state = this.getState();\n    for (const listener of this.listeners) {\n      listener(state);\n    }\n  }\n\n  private generateDeviceId(): string {\n    const bytes = new Uint8Array(16);\n    crypto.getRandomValues(bytes);\n    return \"dev-\" + Array.from(bytes, (b) => b.toString(16).padStart(2, \"0\")).join(\"\");\n  }\n}\n","import axios, {\n  type AxiosInstance,\n  type AxiosRequestConfig,\n  type AxiosResponse,\n} from \"axios\";\nimport type { AuthManager } from \"../auth/auth-manager.js\";\n\n// Crypto helpers — use Node.js crypto when available (tests, SSR),\n// otherwise use expo-crypto for React Native\nlet _cryptoModule: any = null;\n\nfunction getNodeCrypto(): any {\n  if (_cryptoModule === undefined) return null;\n  if (_cryptoModule) return _cryptoModule;\n  try {\n    // Node.js / Bun environment\n    _cryptoModule = require(\"node:crypto\");\n    return _cryptoModule;\n  } catch {\n    _cryptoModule = undefined;\n    return null;\n  }\n}\n\nasync function sha256(data: string): Promise<string> {\n  // Try Node.js crypto first (works in tests + SSR)\n  const nodeCrypto = getNodeCrypto();\n  if (nodeCrypto) {\n    return nodeCrypto.createHash(\"sha256\").update(data).digest(\"hex\");\n  }\n\n  // Try SubtleCrypto (web browsers)\n  if (typeof globalThis.crypto?.subtle !== \"undefined\") {\n    const encoded = new TextEncoder().encode(data);\n    const hash = await globalThis.crypto.subtle.digest(\"SHA-256\", encoded);\n    return Array.from(new Uint8Array(hash), (b) =>\n      b.toString(16).padStart(2, \"0\"),\n    ).join(\"\");\n  }\n\n  // React Native — use expo-crypto\n  try {\n    const ExpoCrypto = require(\"expo-crypto\");\n    return await ExpoCrypto.digestStringAsync(\n      ExpoCrypto.CryptoDigestAlgorithm.SHA256,\n      data,\n    );\n  } catch {\n    throw new Error(\"No crypto implementation available for SHA-256\");\n  }\n}\n\nasync function hmacSha256(secret: string, data: string): Promise<string> {\n  // Try Node.js crypto first\n  const nodeCrypto = getNodeCrypto();\n  if (nodeCrypto) {\n    return nodeCrypto.createHmac(\"sha256\", secret).update(data).digest(\"hex\");\n  }\n\n  // Try SubtleCrypto (web browsers)\n  if (typeof globalThis.crypto?.subtle !== \"undefined\") {\n    try {\n      const key = await globalThis.crypto.subtle.importKey(\n        \"raw\",\n        new TextEncoder().encode(secret),\n        { name: \"HMAC\", hash: \"SHA-256\" },\n        false,\n        [\"sign\"],\n      );\n      const sig = await globalThis.crypto.subtle.sign(\n        \"HMAC\",\n        key,\n        new TextEncoder().encode(data),\n      );\n      return Array.from(new Uint8Array(sig), (b) =>\n        b.toString(16).padStart(2, \"0\"),\n      ).join(\"\");\n    } catch {\n      // SubtleCrypto might exist but not work (e.g. non-secure context)\n    }\n  }\n\n  // React Native — manual HMAC via expo-crypto SHA256\n  // HMAC(key, msg) = SHA256((key XOR opad) || SHA256((key XOR ipad) || msg))\n  try {\n    const ExpoCrypto = require(\"expo-crypto\");\n    const BLOCK_SIZE = 64; // SHA-256 block size\n\n    // Prepare key\n    let keyBytes = new Uint8Array(\n      secret.split(\"\").map((c) => c.charCodeAt(0)),\n    );\n    if (keyBytes.length > BLOCK_SIZE) {\n      // Hash key if longer than block size\n      const hashed = await ExpoCrypto.digestStringAsync(\n        ExpoCrypto.CryptoDigestAlgorithm.SHA256,\n        secret,\n      );\n      keyBytes = new Uint8Array(\n        hashed.match(/.{2}/g)!.map((h: string) => parseInt(h, 16)),\n      );\n    }\n\n    // Pad key to BLOCK_SIZE\n    const paddedKey = new Uint8Array(BLOCK_SIZE);\n    paddedKey.set(keyBytes);\n\n    // ipad = key XOR 0x36, opad = key XOR 0x5c\n    const ipad = new Uint8Array(BLOCK_SIZE);\n    const opad = new Uint8Array(BLOCK_SIZE);\n    for (let i = 0; i < BLOCK_SIZE; i++) {\n      ipad[i] = paddedKey[i]! ^ 0x36;\n      opad[i] = paddedKey[i]! ^ 0x5c;\n    }\n\n    // Inner hash: SHA256(ipad || message)\n    const innerData =\n      String.fromCharCode(...ipad) + data;\n    const innerHash = await ExpoCrypto.digestStringAsync(\n      ExpoCrypto.CryptoDigestAlgorithm.SHA256,\n      innerData,\n    );\n\n    // Outer hash: SHA256(opad || innerHash_bytes)\n    const innerBytes = new Uint8Array(\n      innerHash.match(/.{2}/g)!.map((h: string) => parseInt(h, 16)),\n    );\n    const outerData = String.fromCharCode(...opad) + String.fromCharCode(...innerBytes);\n    const result = await ExpoCrypto.digestStringAsync(\n      ExpoCrypto.CryptoDigestAlgorithm.SHA256,\n      outerData,\n    );\n\n    return result;\n  } catch {\n    throw new Error(\"No crypto implementation available for HMAC-SHA256\");\n  }\n}\n\nfunction generateNonce(): string {\n  if (typeof globalThis.crypto?.randomUUID === \"function\") {\n    return globalThis.crypto.randomUUID();\n  }\n  // Fallback\n  const bytes = new Uint8Array(16);\n  if (typeof globalThis.crypto?.getRandomValues === \"function\") {\n    globalThis.crypto.getRandomValues(bytes);\n  } else {\n    for (let i = 0; i < 16; i++) {\n      bytes[i] = Math.floor(Math.random() * 256);\n    }\n  }\n  return Array.from(bytes, (b) => b.toString(16).padStart(2, \"0\")).join(\"\");\n}\n\nexport class ApiClient {\n  readonly instance: AxiosInstance;\n  private refreshPromise: Promise<string | null> | null = null;\n  private appSecret: string | undefined;\n\n  constructor(\n    baseURL: string,\n    private authManager: AuthManager,\n    appSecret?: string,\n  ) {\n    this.appSecret = appSecret;\n\n    this.instance = axios.create({\n      baseURL,\n      headers: { \"Content-Type\": \"application/json\" },\n    });\n\n    // Request interceptor: add Bearer token + signing\n    this.instance.interceptors.request.use(async (config) => {\n      // Skip auth for auth endpoints\n      if (!config.url?.includes(\"/auth/\")) {\n        const token = this.authManager._getAccessToken();\n        if (token) {\n          config.headers.Authorization = `Bearer ${token}`;\n        }\n      }\n\n      // Request signing\n      if (this.appSecret) {\n        const timestamp = Date.now().toString();\n        const nonce = generateNonce();\n        const body =\n          config.data && typeof config.data === \"object\"\n            ? JSON.stringify(config.data)\n            : (config.data ?? \"\");\n        const bodyHash = body ? await sha256(body) : \"\";\n        const method = (config.method ?? \"GET\").toUpperCase();\n        const url = config.url ?? \"/\";\n        const payload = [method, url, timestamp, nonce, bodyHash].join(\"\\n\");\n        const signature = await hmacSha256(this.appSecret, payload);\n\n        config.headers[\"X-Codixus-Timestamp\"] = timestamp;\n        config.headers[\"X-Codixus-Nonce\"] = nonce;\n        config.headers[\"X-Codixus-Signature\"] = signature;\n      }\n\n      return config;\n    });\n\n    // Response interceptor: handle 401 with token refresh\n    this.instance.interceptors.response.use(\n      (response) => response,\n      async (error) => {\n        if (error.response?.status === 401) {\n          const originalRequest = error.config;\n          if (originalRequest && !originalRequest._retry) {\n            originalRequest._retry = true;\n\n            try {\n              // Promise lock to prevent concurrent refreshes\n              if (!this.refreshPromise) {\n                this.refreshPromise = this.authManager\n                  .forceRefresh()\n                  .finally(() => {\n                    this.refreshPromise = null;\n                  });\n              }\n\n              const newToken = await this.refreshPromise;\n              if (newToken) {\n                originalRequest.headers.Authorization = `Bearer ${newToken}`;\n                return this.instance(originalRequest);\n              }\n            } catch (refreshError) {\n              console.warn(\n                \"[CodixusClient] Token refresh failed:\",\n                refreshError,\n              );\n            }\n          }\n        }\n        return Promise.reject(error);\n      },\n    );\n  }\n\n  async get<T = unknown>(\n    url: string,\n    config?: AxiosRequestConfig,\n  ): Promise<AxiosResponse<T>> {\n    return this.instance.get<T>(url, config);\n  }\n\n  async post<T = unknown>(\n    url: string,\n    data?: unknown,\n    config?: AxiosRequestConfig,\n  ): Promise<AxiosResponse<T>> {\n    return this.instance.post<T>(url, data, config);\n  }\n\n  async patch<T = unknown>(\n    url: string,\n    data?: unknown,\n    config?: AxiosRequestConfig,\n  ): Promise<AxiosResponse<T>> {\n    return this.instance.patch<T>(url, data, config);\n  }\n\n  async delete<T = unknown>(\n    url: string,\n    config?: AxiosRequestConfig,\n  ): Promise<AxiosResponse<T>> {\n    return this.instance.delete<T>(url, config);\n  }\n\n  async put<T = unknown>(\n    url: string,\n    data?: unknown,\n    config?: AxiosRequestConfig,\n  ): Promise<AxiosResponse<T>> {\n    return this.instance.put<T>(url, data, config);\n  }\n}\n","import type { ApiClient } from \"../api/api-client.js\";\n\nexport interface FindOptions {\n  sort?: Record<string, 1 | -1>;\n  limit?: number;\n  skip?: number;\n  cursor?: string | number;\n}\n\nexport class Collection<T = Record<string, unknown>> {\n  constructor(\n    private api: ApiClient,\n    private basePath: string,\n  ) {}\n\n  async find(\n    filter?: Record<string, unknown>,\n    options?: FindOptions,\n  ): Promise<T[]> {\n    const params = new URLSearchParams();\n    if (filter && Object.keys(filter).length > 0) {\n      params.set(\"filter\", JSON.stringify(filter));\n    }\n    if (options?.sort) params.set(\"sort\", JSON.stringify(options.sort));\n    if (options?.limit) params.set(\"limit\", String(options.limit));\n    if (options?.skip) params.set(\"skip\", String(options.skip));\n    if (options?.cursor) params.set(\"cursor\", String(options.cursor));\n\n    const qs = params.toString();\n    const url = qs ? `${this.basePath}?${qs}` : this.basePath;\n    const { data } = await this.api.get<{ success: boolean; data: T[]; nextCursor?: string | null }>(url);\n    return data.data;\n  }\n\n  async findWithCursor(\n    filter?: Record<string, unknown>,\n    options?: FindOptions,\n  ): Promise<{ data: T[]; nextCursor: string | number | null }> {\n    const params = new URLSearchParams();\n    if (filter && Object.keys(filter).length > 0) {\n      params.set(\"filter\", JSON.stringify(filter));\n    }\n    if (options?.sort) params.set(\"sort\", JSON.stringify(options.sort));\n    if (options?.limit) params.set(\"limit\", String(options.limit));\n    if (options?.cursor) params.set(\"cursor\", String(options.cursor));\n\n    const qs = params.toString();\n    const url = qs ? `${this.basePath}?${qs}` : this.basePath;\n    const { data } = await this.api.get<{ success: boolean; data: T[]; nextCursor: string | number | null }>(url);\n    return { data: data.data, nextCursor: data.nextCursor };\n  }\n\n  async findById(id: string): Promise<T | null> {\n    try {\n      const { data } = await this.api.get<{ success: boolean; data: T }>(\n        `${this.basePath}/${id}`,\n      );\n      return data.data;\n    } catch (error: any) {\n      if (error.response?.status === 404) return null;\n      throw error;\n    }\n  }\n\n  async create(doc: Partial<T> & Record<string, unknown>): Promise<T> {\n    const { data } = await this.api.post<{ success: boolean; data: T }>(\n      this.basePath,\n      doc,\n    );\n    return data.data;\n  }\n\n  async updateById(\n    id: string,\n    update: Record<string, unknown>,\n  ): Promise<T> {\n    const { data } = await this.api.patch<{ success: boolean; data: T }>(\n      `${this.basePath}/${id}`,\n      { update },\n    );\n    return data.data;\n  }\n\n  async deleteById(id: string): Promise<void> {\n    await this.api.delete(`${this.basePath}/${id}`);\n  }\n\n  async count(filter?: Record<string, unknown>): Promise<number> {\n    const { data } = await this.api.post<{ success: boolean; count: number }>(\n      `${this.basePath}/count`,\n      { filter: filter ?? {} },\n    );\n    return data.count;\n  }\n}\n","import {\n  AuthManager,\n  type StorageAdapter,\n  type SignInParams,\n  type AuthState,\n} from \"./auth/auth-manager.js\";\nimport { ApiClient } from \"./api/api-client.js\";\nimport { Collection, type FindOptions } from \"./db/collection.js\";\n\nexport interface CodixusClientConfig {\n  apiUrl: string;\n  storageKey?: string;\n  storage?: StorageAdapter | null;\n  appSecret?: string;\n}\n\nexport class CodixusClient {\n  readonly auth: AuthManager;\n  readonly api: ApiClient;\n\n  constructor(config: CodixusClientConfig) {\n    const storageKey = config.storageKey ?? \"codixus\";\n    const storage = config.storage ?? null;\n\n    this.auth = new AuthManager(storage, storageKey);\n    this.api = new ApiClient(config.apiUrl, this.auth, config.appSecret);\n    this.auth._setApi(this.api);\n  }\n\n  /**\n   * Create a typed collection accessor.\n   * Maps to auto REST routes on server: codixus.rest(Model)\n   *\n   * @example\n   * interface Product { _id: string; name: string; price: number; }\n   * const products = codixus.collection<Product>(\"products\");\n   * const all = await products.find();            // Product[]\n   * const one = await products.findById(\"abc\");   // Product | null\n   */\n  collection<T>(name: string): Collection<T> {\n    return new Collection<T>(this.api, `/api/${name}`);\n  }\n\n  async init(): Promise<void> {\n    await this.auth.init();\n  }\n}\n\nexport {\n  type StorageAdapter,\n  type SignInParams,\n  type AuthState,\n} from \"./auth/auth-manager.js\";\nexport { ApiClient } from \"./api/api-client.js\";\nexport { Collection, type FindOptions } from \"./db/collection.js\";\n\n// Re-export shared types\nexport {\n  type AuthUser,\n  type TokenPair,\n  type DeviceInfo,\n  type DeviceMetadata,\n  type AuthTokenRequest,\n  type AuthTokenResponse,\n  type ApiResponse,\n  CodixusError,\n  ErrorCodes,\n} from \"@codixus/shared\";\n"],"mappings":";;;;;AA2BO,IAAM,cAAN,MAAkB;AAAA,EAUvB,YACU,SACR,YACA;AAFQ;AAGR,SAAK,aAAa;AAAA,EACpB;AAAA,EAdQ,cAA6B;AAAA,EAC7B,oBAAmC;AAAA,EACnC,OAAuC;AAAA,EACvC,YAAoC,oBAAI,IAAI;AAAA,EAC5C,aAAa;AAAA,EACb;AAAA,EACA;AAAA,EACA,WAA0B;AAAA;AAAA,EAUlC,QAAQ,KAAsB;AAC5B,SAAK,MAAM;AAAA,EACb;AAAA,EAEA,MAAM,OAAsB;AAC1B,QAAI,CAAC,KAAK,SAAS;AACjB,WAAK,aAAa;AAClB;AAAA,IACF;AAEA,QAAI;AACF,YAAM,gBAAgB,MAAM,KAAK,QAAQ;AAAA,QACvC,GAAG,KAAK,UAAU;AAAA,MACpB;AACA,YAAM,aAAa,MAAM,KAAK,QAAQ;AAAA,QACpC,GAAG,KAAK,UAAU;AAAA,MACpB;AACA,YAAM,iBAAiB,MAAM,KAAK,QAAQ;AAAA,QACxC,GAAG,KAAK,UAAU;AAAA,MACpB;AAEA,UAAI,eAAe;AACjB,aAAK,oBAAoB;AAAA,MAC3B;AACA,UAAI,YAAY;AACd,YAAI;AACF,eAAK,OAAO,KAAK,MAAM,UAAU;AAAA,QACnC,QAAQ;AAAA,QAER;AAAA,MACF;AACA,UAAI,gBAAgB;AAClB,aAAK,WAAW;AAAA,MAClB;AAAA,IACF,SAAS,OAAO;AACd,cAAQ,KAAK,8DAA8D,KAAK;AAAA,IAClF;AAEA,SAAK,aAAa;AAClB,SAAK,OAAO;AAAA,EACd;AAAA,EAEA,MAAM,OACJ,QACgE;AAChE,UAAM,WAAW,OAAO,YAAY,KAAK,YAAY,KAAK,iBAAiB;AAE3E,UAAM,WAAW,MAAM,KAAK,IAAI,KAAwB,eAAe;AAAA,MACrE;AAAA,MACA,YAAY,OAAO;AAAA,MACnB,UAAU,OAAO;AAAA,IACnB,CAAC;AAED,UAAM,OAAO,SAAS;AACtB,SAAK,cAAc,KAAK;AACxB,SAAK,oBAAoB,KAAK;AAC9B,SAAK,OAAO,KAAK;AACjB,SAAK,WAAW;AAGhB,QAAI,KAAK,SAAS;AAChB,YAAM,KAAK,QAAQ;AAAA,QACjB,GAAG,KAAK,UAAU;AAAA,QAClB,KAAK;AAAA,MACP;AACA,YAAM,KAAK,QAAQ;AAAA,QACjB,GAAG,KAAK,UAAU;AAAA,QAClB,KAAK,UAAU,KAAK,IAAI;AAAA,MAC1B;AACA,YAAM,KAAK,QAAQ,QAAQ,GAAG,KAAK,UAAU,cAAc,QAAQ;AAAA,IACrE;AAEA,SAAK,OAAO;AACZ,WAAO,EAAE,MAAM,KAAK,MAAM,WAAW,KAAK,UAAU;AAAA,EACtD;AAAA,EAEA,MAAM,WAAmC;AACvC,QAAI,KAAK,YAAa,QAAO,KAAK;AAGlC,QAAI,KAAK,mBAAmB;AAC1B,UAAI;AACF,cAAM,KAAK,aAAa;AACxB,eAAO,KAAK;AAAA,MACd,QAAQ;AACN,eAAO;AAAA,MACT;AAAA,IACF;AAEA,WAAO;AAAA,EACT;AAAA,EAEA,MAAM,eAAuC;AAC3C,QAAI,CAAC,KAAK,kBAAmB,QAAO;AAEpC,QAAI;AACF,YAAM,WAAW,MAAM,KAAK,IAAI,KAI7B,iBAAiB;AAAA,QAClB,cAAc,KAAK;AAAA,MACrB,CAAC;AAED,WAAK,cAAc,SAAS,KAAK;AACjC,WAAK,oBAAoB,SAAS,KAAK;AAEvC,UAAI,KAAK,SAAS;AAChB,cAAM,KAAK,QAAQ;AAAA,UACjB,GAAG,KAAK,UAAU;AAAA,UAClB,SAAS,KAAK;AAAA,QAChB;AAAA,MACF;AAEA,aAAO,KAAK;AAAA,IACd,QAAQ;AAEN,YAAM,KAAK,QAAQ;AACnB,aAAO;AAAA,IACT;AAAA,EACF;AAAA,EAEA,MAAM,UAAyB;AAE7B,QAAI,KAAK,mBAAmB;AAC1B,UAAI;AACF,cAAM,KAAK,IAAI,KAAK,gBAAgB;AAAA,UAClC,cAAc,KAAK;AAAA,QACrB,CAAC;AAAA,MACH,QAAQ;AAAA,MAAC;AAAA,IACX;AAEA,SAAK,cAAc;AACnB,SAAK,oBAAoB;AACzB,SAAK,OAAO;AAEZ,QAAI,KAAK,SAAS;AAChB,YAAM,KAAK,QAAQ,WAAW,GAAG,KAAK,UAAU,gBAAgB;AAChE,YAAM,KAAK,QAAQ,WAAW,GAAG,KAAK,UAAU,OAAO;AACvD,YAAM,KAAK,QAAQ,WAAW,GAAG,KAAK,UAAU,YAAY;AAAA,IAC9D;AAEA,SAAK,OAAO;AAAA,EACd;AAAA,EAEA,WAAsB;AACpB,WAAO;AAAA,MACL,iBAAiB,KAAK,gBAAgB,QAAQ,KAAK,sBAAsB;AAAA,MACzE,WAAW,KAAK;AAAA,MAChB,MAAM,KAAK;AAAA,IACb;AAAA,EACF;AAAA,EAEA,cAA6B;AAC3B,WAAO,KAAK;AAAA,EACd;AAAA,EAEA,kBAAkB,UAAyC;AACzD,SAAK,UAAU,IAAI,QAAQ;AAE3B,aAAS,KAAK,SAAS,CAAC;AACxB,WAAO,MAAM;AACX,WAAK,UAAU,OAAO,QAAQ;AAAA,IAChC;AAAA,EACF;AAAA;AAAA,EAGA,kBAAiC;AAC/B,WAAO,KAAK;AAAA,EACd;AAAA;AAAA,EAGA,gBAAgB,OAAqB;AACnC,SAAK,cAAc;AAAA,EACrB;AAAA,EAEQ,SAAe;AACrB,UAAM,QAAQ,KAAK,SAAS;AAC5B,eAAW,YAAY,KAAK,WAAW;AACrC,eAAS,KAAK;AAAA,IAChB;AAAA,EACF;AAAA,EAEQ,mBAA2B;AACjC,UAAM,QAAQ,IAAI,WAAW,EAAE;AAC/B,WAAO,gBAAgB,KAAK;AAC5B,WAAO,SAAS,MAAM,KAAK,OAAO,CAAC,MAAM,EAAE,SAAS,EAAE,EAAE,SAAS,GAAG,GAAG,CAAC,EAAE,KAAK,EAAE;AAAA,EACnF;AACF;;;ACzOA,OAAO,WAIA;AAKP,IAAI,gBAAqB;AAEzB,SAAS,gBAAqB;AAC5B,MAAI,kBAAkB,OAAW,QAAO;AACxC,MAAI,cAAe,QAAO;AAC1B,MAAI;AAEF,oBAAgB,UAAQ,QAAa;AACrC,WAAO;AAAA,EACT,QAAQ;AACN,oBAAgB;AAChB,WAAO;AAAA,EACT;AACF;AAEA,eAAe,OAAO,MAA+B;AAEnD,QAAM,aAAa,cAAc;AACjC,MAAI,YAAY;AACd,WAAO,WAAW,WAAW,QAAQ,EAAE,OAAO,IAAI,EAAE,OAAO,KAAK;AAAA,EAClE;AAGA,MAAI,OAAO,WAAW,QAAQ,WAAW,aAAa;AACpD,UAAM,UAAU,IAAI,YAAY,EAAE,OAAO,IAAI;AAC7C,UAAM,OAAO,MAAM,WAAW,OAAO,OAAO,OAAO,WAAW,OAAO;AACrE,WAAO,MAAM;AAAA,MAAK,IAAI,WAAW,IAAI;AAAA,MAAG,CAAC,MACvC,EAAE,SAAS,EAAE,EAAE,SAAS,GAAG,GAAG;AAAA,IAChC,EAAE,KAAK,EAAE;AAAA,EACX;AAGA,MAAI;AACF,UAAM,aAAa,UAAQ,aAAa;AACxC,WAAO,MAAM,WAAW;AAAA,MACtB,WAAW,sBAAsB;AAAA,MACjC;AAAA,IACF;AAAA,EACF,QAAQ;AACN,UAAM,IAAI,MAAM,gDAAgD;AAAA,EAClE;AACF;AAEA,eAAe,WAAW,QAAgB,MAA+B;AAEvE,QAAM,aAAa,cAAc;AACjC,MAAI,YAAY;AACd,WAAO,WAAW,WAAW,UAAU,MAAM,EAAE,OAAO,IAAI,EAAE,OAAO,KAAK;AAAA,EAC1E;AAGA,MAAI,OAAO,WAAW,QAAQ,WAAW,aAAa;AACpD,QAAI;AACF,YAAM,MAAM,MAAM,WAAW,OAAO,OAAO;AAAA,QACzC;AAAA,QACA,IAAI,YAAY,EAAE,OAAO,MAAM;AAAA,QAC/B,EAAE,MAAM,QAAQ,MAAM,UAAU;AAAA,QAChC;AAAA,QACA,CAAC,MAAM;AAAA,MACT;AACA,YAAM,MAAM,MAAM,WAAW,OAAO,OAAO;AAAA,QACzC;AAAA,QACA;AAAA,QACA,IAAI,YAAY,EAAE,OAAO,IAAI;AAAA,MAC/B;AACA,aAAO,MAAM;AAAA,QAAK,IAAI,WAAW,GAAG;AAAA,QAAG,CAAC,MACtC,EAAE,SAAS,EAAE,EAAE,SAAS,GAAG,GAAG;AAAA,MAChC,EAAE,KAAK,EAAE;AAAA,IACX,QAAQ;AAAA,IAER;AAAA,EACF;AAIA,MAAI;AACF,UAAM,aAAa,UAAQ,aAAa;AACxC,UAAM,aAAa;AAGnB,QAAI,WAAW,IAAI;AAAA,MACjB,OAAO,MAAM,EAAE,EAAE,IAAI,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;AAAA,IAC7C;AACA,QAAI,SAAS,SAAS,YAAY;AAEhC,YAAM,SAAS,MAAM,WAAW;AAAA,QAC9B,WAAW,sBAAsB;AAAA,QACjC;AAAA,MACF;AACA,iBAAW,IAAI;AAAA,QACb,OAAO,MAAM,OAAO,EAAG,IAAI,CAAC,MAAc,SAAS,GAAG,EAAE,CAAC;AAAA,MAC3D;AAAA,IACF;AAGA,UAAM,YAAY,IAAI,WAAW,UAAU;AAC3C,cAAU,IAAI,QAAQ;AAGtB,UAAM,OAAO,IAAI,WAAW,UAAU;AACtC,UAAM,OAAO,IAAI,WAAW,UAAU;AACtC,aAAS,IAAI,GAAG,IAAI,YAAY,KAAK;AACnC,WAAK,CAAC,IAAI,UAAU,CAAC,IAAK;AAC1B,WAAK,CAAC,IAAI,UAAU,CAAC,IAAK;AAAA,IAC5B;AAGA,UAAM,YACJ,OAAO,aAAa,GAAG,IAAI,IAAI;AACjC,UAAM,YAAY,MAAM,WAAW;AAAA,MACjC,WAAW,sBAAsB;AAAA,MACjC;AAAA,IACF;AAGA,UAAM,aAAa,IAAI;AAAA,MACrB,UAAU,MAAM,OAAO,EAAG,IAAI,CAAC,MAAc,SAAS,GAAG,EAAE,CAAC;AAAA,IAC9D;AACA,UAAM,YAAY,OAAO,aAAa,GAAG,IAAI,IAAI,OAAO,aAAa,GAAG,UAAU;AAClF,UAAM,SAAS,MAAM,WAAW;AAAA,MAC9B,WAAW,sBAAsB;AAAA,MACjC;AAAA,IACF;AAEA,WAAO;AAAA,EACT,QAAQ;AACN,UAAM,IAAI,MAAM,oDAAoD;AAAA,EACtE;AACF;AAEA,SAAS,gBAAwB;AAC/B,MAAI,OAAO,WAAW,QAAQ,eAAe,YAAY;AACvD,WAAO,WAAW,OAAO,WAAW;AAAA,EACtC;AAEA,QAAM,QAAQ,IAAI,WAAW,EAAE;AAC/B,MAAI,OAAO,WAAW,QAAQ,oBAAoB,YAAY;AAC5D,eAAW,OAAO,gBAAgB,KAAK;AAAA,EACzC,OAAO;AACL,aAAS,IAAI,GAAG,IAAI,IAAI,KAAK;AAC3B,YAAM,CAAC,IAAI,KAAK,MAAM,KAAK,OAAO,IAAI,GAAG;AAAA,IAC3C;AAAA,EACF;AACA,SAAO,MAAM,KAAK,OAAO,CAAC,MAAM,EAAE,SAAS,EAAE,EAAE,SAAS,GAAG,GAAG,CAAC,EAAE,KAAK,EAAE;AAC1E;AAEO,IAAM,YAAN,MAAgB;AAAA,EAKrB,YACE,SACQ,aACR,WACA;AAFQ;AAGR,SAAK,YAAY;AAEjB,SAAK,WAAW,MAAM,OAAO;AAAA,MAC3B;AAAA,MACA,SAAS,EAAE,gBAAgB,mBAAmB;AAAA,IAChD,CAAC;AAGD,SAAK,SAAS,aAAa,QAAQ,IAAI,OAAO,WAAW;AAEvD,UAAI,CAAC,OAAO,KAAK,SAAS,QAAQ,GAAG;AACnC,cAAM,QAAQ,KAAK,YAAY,gBAAgB;AAC/C,YAAI,OAAO;AACT,iBAAO,QAAQ,gBAAgB,UAAU,KAAK;AAAA,QAChD;AAAA,MACF;AAGA,UAAI,KAAK,WAAW;AAClB,cAAM,YAAY,KAAK,IAAI,EAAE,SAAS;AACtC,cAAM,QAAQ,cAAc;AAC5B,cAAM,OACJ,OAAO,QAAQ,OAAO,OAAO,SAAS,WAClC,KAAK,UAAU,OAAO,IAAI,IACzB,OAAO,QAAQ;AACtB,cAAM,WAAW,OAAO,MAAM,OAAO,IAAI,IAAI;AAC7C,cAAM,UAAU,OAAO,UAAU,OAAO,YAAY;AACpD,cAAM,MAAM,OAAO,OAAO;AAC1B,cAAM,UAAU,CAAC,QAAQ,KAAK,WAAW,OAAO,QAAQ,EAAE,KAAK,IAAI;AACnE,cAAM,YAAY,MAAM,WAAW,KAAK,WAAW,OAAO;AAE1D,eAAO,QAAQ,qBAAqB,IAAI;AACxC,eAAO,QAAQ,iBAAiB,IAAI;AACpC,eAAO,QAAQ,qBAAqB,IAAI;AAAA,MAC1C;AAEA,aAAO;AAAA,IACT,CAAC;AAGD,SAAK,SAAS,aAAa,SAAS;AAAA,MAClC,CAAC,aAAa;AAAA,MACd,OAAO,UAAU;AACf,YAAI,MAAM,UAAU,WAAW,KAAK;AAClC,gBAAM,kBAAkB,MAAM;AAC9B,cAAI,mBAAmB,CAAC,gBAAgB,QAAQ;AAC9C,4BAAgB,SAAS;AAEzB,gBAAI;AAEF,kBAAI,CAAC,KAAK,gBAAgB;AACxB,qBAAK,iBAAiB,KAAK,YACxB,aAAa,EACb,QAAQ,MAAM;AACb,uBAAK,iBAAiB;AAAA,gBACxB,CAAC;AAAA,cACL;AAEA,oBAAM,WAAW,MAAM,KAAK;AAC5B,kBAAI,UAAU;AACZ,gCAAgB,QAAQ,gBAAgB,UAAU,QAAQ;AAC1D,uBAAO,KAAK,SAAS,eAAe;AAAA,cACtC;AAAA,YACF,SAAS,cAAc;AACrB,sBAAQ;AAAA,gBACN;AAAA,gBACA;AAAA,cACF;AAAA,YACF;AAAA,UACF;AAAA,QACF;AACA,eAAO,QAAQ,OAAO,KAAK;AAAA,MAC7B;AAAA,IACF;AAAA,EACF;AAAA,EAnFS;AAAA,EACD,iBAAgD;AAAA,EAChD;AAAA,EAmFR,MAAM,IACJ,KACA,QAC2B;AAC3B,WAAO,KAAK,SAAS,IAAO,KAAK,MAAM;AAAA,EACzC;AAAA,EAEA,MAAM,KACJ,KACA,MACA,QAC2B;AAC3B,WAAO,KAAK,SAAS,KAAQ,KAAK,MAAM,MAAM;AAAA,EAChD;AAAA,EAEA,MAAM,MACJ,KACA,MACA,QAC2B;AAC3B,WAAO,KAAK,SAAS,MAAS,KAAK,MAAM,MAAM;AAAA,EACjD;AAAA,EAEA,MAAM,OACJ,KACA,QAC2B;AAC3B,WAAO,KAAK,SAAS,OAAU,KAAK,MAAM;AAAA,EAC5C;AAAA,EAEA,MAAM,IACJ,KACA,MACA,QAC2B;AAC3B,WAAO,KAAK,SAAS,IAAO,KAAK,MAAM,MAAM;AAAA,EAC/C;AACF;;;AC7QO,IAAM,aAAN,MAA8C;AAAA,EACnD,YACU,KACA,UACR;AAFQ;AACA;AAAA,EACP;AAAA,EAEH,MAAM,KACJ,QACA,SACc;AACd,UAAM,SAAS,IAAI,gBAAgB;AACnC,QAAI,UAAU,OAAO,KAAK,MAAM,EAAE,SAAS,GAAG;AAC5C,aAAO,IAAI,UAAU,KAAK,UAAU,MAAM,CAAC;AAAA,IAC7C;AACA,QAAI,SAAS,KAAM,QAAO,IAAI,QAAQ,KAAK,UAAU,QAAQ,IAAI,CAAC;AAClE,QAAI,SAAS,MAAO,QAAO,IAAI,SAAS,OAAO,QAAQ,KAAK,CAAC;AAC7D,QAAI,SAAS,KAAM,QAAO,IAAI,QAAQ,OAAO,QAAQ,IAAI,CAAC;AAC1D,QAAI,SAAS,OAAQ,QAAO,IAAI,UAAU,OAAO,QAAQ,MAAM,CAAC;AAEhE,UAAM,KAAK,OAAO,SAAS;AAC3B,UAAM,MAAM,KAAK,GAAG,KAAK,QAAQ,IAAI,EAAE,KAAK,KAAK;AACjD,UAAM,EAAE,KAAK,IAAI,MAAM,KAAK,IAAI,IAAiE,GAAG;AACpG,WAAO,KAAK;AAAA,EACd;AAAA,EAEA,MAAM,eACJ,QACA,SAC4D;AAC5D,UAAM,SAAS,IAAI,gBAAgB;AACnC,QAAI,UAAU,OAAO,KAAK,MAAM,EAAE,SAAS,GAAG;AAC5C,aAAO,IAAI,UAAU,KAAK,UAAU,MAAM,CAAC;AAAA,IAC7C;AACA,QAAI,SAAS,KAAM,QAAO,IAAI,QAAQ,KAAK,UAAU,QAAQ,IAAI,CAAC;AAClE,QAAI,SAAS,MAAO,QAAO,IAAI,SAAS,OAAO,QAAQ,KAAK,CAAC;AAC7D,QAAI,SAAS,OAAQ,QAAO,IAAI,UAAU,OAAO,QAAQ,MAAM,CAAC;AAEhE,UAAM,KAAK,OAAO,SAAS;AAC3B,UAAM,MAAM,KAAK,GAAG,KAAK,QAAQ,IAAI,EAAE,KAAK,KAAK;AACjD,UAAM,EAAE,KAAK,IAAI,MAAM,KAAK,IAAI,IAAyE,GAAG;AAC5G,WAAO,EAAE,MAAM,KAAK,MAAM,YAAY,KAAK,WAAW;AAAA,EACxD;AAAA,EAEA,MAAM,SAAS,IAA+B;AAC5C,QAAI;AACF,YAAM,EAAE,KAAK,IAAI,MAAM,KAAK,IAAI;AAAA,QAC9B,GAAG,KAAK,QAAQ,IAAI,EAAE;AAAA,MACxB;AACA,aAAO,KAAK;AAAA,IACd,SAAS,OAAY;AACnB,UAAI,MAAM,UAAU,WAAW,IAAK,QAAO;AAC3C,YAAM;AAAA,IACR;AAAA,EACF;AAAA,EAEA,MAAM,OAAO,KAAuD;AAClE,UAAM,EAAE,KAAK,IAAI,MAAM,KAAK,IAAI;AAAA,MAC9B,KAAK;AAAA,MACL;AAAA,IACF;AACA,WAAO,KAAK;AAAA,EACd;AAAA,EAEA,MAAM,WACJ,IACA,QACY;AACZ,UAAM,EAAE,KAAK,IAAI,MAAM,KAAK,IAAI;AAAA,MAC9B,GAAG,KAAK,QAAQ,IAAI,EAAE;AAAA,MACtB,EAAE,OAAO;AAAA,IACX;AACA,WAAO,KAAK;AAAA,EACd;AAAA,EAEA,MAAM,WAAW,IAA2B;AAC1C,UAAM,KAAK,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,EAAE,EAAE;AAAA,EAChD;AAAA,EAEA,MAAM,MAAM,QAAmD;AAC7D,UAAM,EAAE,KAAK,IAAI,MAAM,KAAK,IAAI;AAAA,MAC9B,GAAG,KAAK,QAAQ;AAAA,MAChB,EAAE,QAAQ,UAAU,CAAC,EAAE;AAAA,IACzB;AACA,WAAO,KAAK;AAAA,EACd;AACF;;;ACrCA;AAAA,EAQE;AAAA,EACA;AAAA,OACK;AAnDA,IAAM,gBAAN,MAAoB;AAAA,EAChB;AAAA,EACA;AAAA,EAET,YAAY,QAA6B;AACvC,UAAM,aAAa,OAAO,cAAc;AACxC,UAAM,UAAU,OAAO,WAAW;AAElC,SAAK,OAAO,IAAI,YAAY,SAAS,UAAU;AAC/C,SAAK,MAAM,IAAI,UAAU,OAAO,QAAQ,KAAK,MAAM,OAAO,SAAS;AACnE,SAAK,KAAK,QAAQ,KAAK,GAAG;AAAA,EAC5B;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAYA,WAAc,MAA6B;AACzC,WAAO,IAAI,WAAc,KAAK,KAAK,QAAQ,IAAI,EAAE;AAAA,EACnD;AAAA,EAEA,MAAM,OAAsB;AAC1B,UAAM,KAAK,KAAK,KAAK;AAAA,EACvB;AACF;","names":[]}

package/dist/react/index.js

@@ -1,3 +1,5 @@
+import "../chunk-DGUM43GV.js";
+
 // src/react/provider.tsx
 import {
   createContext,

package/dist/react/index.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/react/provider.tsx"],"sourcesContent":["import {\n  createContext,\n  useContext,\n  useState,\n  useEffect,\n  type ReactNode,\n} from \"react\";\nimport type { CodixusClient } from \"../index.js\";\nimport type { AuthState, SignInParams } from \"../auth/auth-manager.js\";\n\ninterface CodixusContextValue {\n  client: CodixusClient;\n  auth: AuthState & {\n    signIn: (params: SignInParams) => Promise<{ user: Record<string, unknown>; isNewUser: boolean }>;\n    signOut: () => Promise<void>;\n  };\n  api: CodixusClient[\"api\"];\n}\n\nconst CodixusContext = createContext<CodixusContextValue | null>(null);\n\nexport function CodixusProvider({\n  client,\n  children,\n}: {\n  client: CodixusClient;\n  children: ReactNode;\n}) {\n  const [authState, setAuthState] = useState<AuthState>({\n    isAuthenticated: false,\n    isLoading: true,\n    user: null,\n  });\n\n  useEffect(() => {\n    client.init();\n    const unsubscribe = client.auth.onAuthStateChange(setAuthState);\n    return unsubscribe;\n  }, [client]);\n\n  const value: CodixusContextValue = {\n    client,\n    auth: {\n      ...authState,\n      signIn: (params) => client.auth.signIn(params),\n      signOut: () => client.auth.signOut(),\n    },\n    api: client.api,\n  };\n\n  return (\n    <CodixusContext.Provider value={value}>{children}</CodixusContext.Provider>\n  );\n}\n\nexport function useCodixus(): CodixusContextValue {\n  const ctx = useContext(CodixusContext);\n  if (!ctx) {\n    throw new Error(\"useCodixus must be used within a CodixusProvider\");\n  }\n  return ctx;\n}\n\nexport function useAuth() {\n  const { auth } = useCodixus();\n  return auth;\n}\n"],"mappings":";AAAA;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OAEK;AA6CH;AAhCJ,IAAM,iBAAiB,cAA0C,IAAI;AAE9D,SAAS,gBAAgB;AAAA,EAC9B;AAAA,EACA;AACF,GAGG;AACD,QAAM,CAAC,WAAW,YAAY,IAAI,SAAoB;AAAA,IACpD,iBAAiB;AAAA,IACjB,WAAW;AAAA,IACX,MAAM;AAAA,EACR,CAAC;AAED,YAAU,MAAM;AACd,WAAO,KAAK;AACZ,UAAM,cAAc,OAAO,KAAK,kBAAkB,YAAY;AAC9D,WAAO;AAAA,EACT,GAAG,CAAC,MAAM,CAAC;AAEX,QAAM,QAA6B;AAAA,IACjC;AAAA,IACA,MAAM;AAAA,MACJ,GAAG;AAAA,MACH,QAAQ,CAAC,WAAW,OAAO,KAAK,OAAO,MAAM;AAAA,MAC7C,SAAS,MAAM,OAAO,KAAK,QAAQ;AAAA,IACrC;AAAA,IACA,KAAK,OAAO;AAAA,EACd;AAEA,SACE,oBAAC,eAAe,UAAf,EAAwB,OAAe,UAAS;AAErD;AAEO,SAAS,aAAkC;AAChD,QAAM,MAAM,WAAW,cAAc;AACrC,MAAI,CAAC,KAAK;AACR,UAAM,IAAI,MAAM,kDAAkD;AAAA,EACpE;AACA,SAAO;AACT;AAEO,SAAS,UAAU;AACxB,QAAM,EAAE,KAAK,IAAI,WAAW;AAC5B,SAAO;AACT;","names":[]}
+{"version":3,"sources":["../../src/react/provider.tsx"],"sourcesContent":["import {\n  createContext,\n  useContext,\n  useState,\n  useEffect,\n  type ReactNode,\n} from \"react\";\nimport type { CodixusClient } from \"../index.js\";\nimport type { AuthState, SignInParams } from \"../auth/auth-manager.js\";\n\ninterface CodixusContextValue {\n  client: CodixusClient;\n  auth: AuthState & {\n    signIn: (params: SignInParams) => Promise<{ user: Record<string, unknown>; isNewUser: boolean }>;\n    signOut: () => Promise<void>;\n  };\n  api: CodixusClient[\"api\"];\n}\n\nconst CodixusContext = createContext<CodixusContextValue | null>(null);\n\nexport function CodixusProvider({\n  client,\n  children,\n}: {\n  client: CodixusClient;\n  children: ReactNode;\n}) {\n  const [authState, setAuthState] = useState<AuthState>({\n    isAuthenticated: false,\n    isLoading: true,\n    user: null,\n  });\n\n  useEffect(() => {\n    client.init();\n    const unsubscribe = client.auth.onAuthStateChange(setAuthState);\n    return unsubscribe;\n  }, [client]);\n\n  const value: CodixusContextValue = {\n    client,\n    auth: {\n      ...authState,\n      signIn: (params) => client.auth.signIn(params),\n      signOut: () => client.auth.signOut(),\n    },\n    api: client.api,\n  };\n\n  return (\n    <CodixusContext.Provider value={value}>{children}</CodixusContext.Provider>\n  );\n}\n\nexport function useCodixus(): CodixusContextValue {\n  const ctx = useContext(CodixusContext);\n  if (!ctx) {\n    throw new Error(\"useCodixus must be used within a CodixusProvider\");\n  }\n  return ctx;\n}\n\nexport function useAuth() {\n  const { auth } = useCodixus();\n  return auth;\n}\n"],"mappings":";;;AAAA;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OAEK;AA6CH;AAhCJ,IAAM,iBAAiB,cAA0C,IAAI;AAE9D,SAAS,gBAAgB;AAAA,EAC9B;AAAA,EACA;AACF,GAGG;AACD,QAAM,CAAC,WAAW,YAAY,IAAI,SAAoB;AAAA,IACpD,iBAAiB;AAAA,IACjB,WAAW;AAAA,IACX,MAAM;AAAA,EACR,CAAC;AAED,YAAU,MAAM;AACd,WAAO,KAAK;AACZ,UAAM,cAAc,OAAO,KAAK,kBAAkB,YAAY;AAC9D,WAAO;AAAA,EACT,GAAG,CAAC,MAAM,CAAC;AAEX,QAAM,QAA6B;AAAA,IACjC;AAAA,IACA,MAAM;AAAA,MACJ,GAAG;AAAA,MACH,QAAQ,CAAC,WAAW,OAAO,KAAK,OAAO,MAAM;AAAA,MAC7C,SAAS,MAAM,OAAO,KAAK,QAAQ;AAAA,IACrC;AAAA,IACA,KAAK,OAAO;AAAA,EACd;AAEA,SACE,oBAAC,eAAe,UAAf,EAAwB,OAAe,UAAS;AAErD;AAEO,SAAS,aAAkC;AAChD,QAAM,MAAM,WAAW,cAAc;AACrC,MAAI,CAAC,KAAK;AACR,UAAM,IAAI,MAAM,kDAAkD;AAAA,EACpE;AACA,SAAO;AACT;AAEO,SAAS,UAAU;AACxB,QAAM,EAAE,KAAK,IAAI,WAAW;AAC5B,SAAO;AACT;","names":[]}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@codixus/client",
-  "version": "0.1.0",
+  "version": "0.1.2",
   "description": "Client SDK for React Native and web — auth, API client, typed collections",
   "type": "module",
   "license": "SEE LICENSE IN LICENSE",