@codixus/client 0.1.0 → 0.1.3

package/dist/index.cjs

@@ -34,7 +34,8 @@ __export(index_exports, {
   CodixusClient: () => CodixusClient,
   CodixusError: () => import_shared.CodixusError,
   Collection: () => Collection,
-  ErrorCodes: () => import_shared.ErrorCodes
+  ErrorCodes: () => import_shared.ErrorCodes,
+  setCryptoProvider: () => setCryptoProvider
 });
 module.exports = __toCommonJS(index_exports);
 
@@ -206,63 +207,9 @@ var AuthManager = class {
 
 // src/api/api-client.ts
 var import_axios = __toESM(require("axios"), 1);
-async function sha256(data) {
-  if (typeof globalThis.crypto?.subtle !== "undefined") {
-    const encoded = new TextEncoder().encode(data);
-    const hash = await globalThis.crypto.subtle.digest("SHA-256", encoded);
-    return Array.from(
-      new Uint8Array(hash),
-      (b) => b.toString(16).padStart(2, "0")
-    ).join("");
-  }
-  return simpleHash(data);
-}
-async function hmacSha256(secret, data) {
-  if (typeof globalThis.crypto?.subtle !== "undefined") {
-    const key = await globalThis.crypto.subtle.importKey(
-      "raw",
-      new TextEncoder().encode(secret),
-      { name: "HMAC", hash: "SHA-256" },
-      false,
-      ["sign"]
-    );
-    const sig = await globalThis.crypto.subtle.sign(
-      "HMAC",
-      key,
-      new TextEncoder().encode(data)
-    );
-    return Array.from(
-      new Uint8Array(sig),
-      (b) => b.toString(16).padStart(2, "0")
-    ).join("");
-  }
-  return simpleHmac(secret, data);
-}
-function simpleHash(str) {
-  let hash = 0;
-  for (let i = 0; i < str.length; i++) {
-    const char = str.charCodeAt(i);
-    hash = (hash << 5) - hash + char;
-    hash |= 0;
-  }
-  return Math.abs(hash).toString(16).padStart(16, "0");
-}
-function simpleHmac(key, data) {
-  return simpleHash(key + ":" + data);
-}
-function generateNonce() {
-  if (typeof globalThis.crypto?.randomUUID === "function") {
-    return globalThis.crypto.randomUUID();
-  }
-  const bytes = new Uint8Array(16);
-  if (typeof globalThis.crypto?.getRandomValues === "function") {
-    globalThis.crypto.getRandomValues(bytes);
-  } else {
-    for (let i = 0; i < 16; i++) {
-      bytes[i] = Math.floor(Math.random() * 256);
-    }
-  }
-  return Array.from(bytes, (b) => b.toString(16).padStart(2, "0")).join("");
+var _crypto = null;
+function setCryptoProvider(provider) {
+  _crypto = provider;
 }
 var ApiClient = class {
   constructor(baseURL, authManager, appSecret) {
@@ -279,15 +226,15 @@ var ApiClient = class {
           config.headers.Authorization = `Bearer ${token}`;
         }
       }
-      if (this.appSecret) {
+      if (this.appSecret && _crypto) {
         const timestamp = Date.now().toString();
-        const nonce = generateNonce();
+        const nonce = _crypto.randomUUID();
         const body = config.data && typeof config.data === "object" ? JSON.stringify(config.data) : config.data ?? "";
-        const bodyHash = body ? await sha256(body) : "";
+        const bodyHash = body ? await _crypto.sha256(body) : "";
         const method = (config.method ?? "GET").toUpperCase();
         const url = config.url ?? "/";
         const payload = [method, url, timestamp, nonce, bodyHash].join("\n");
-        const signature = await hmacSha256(this.appSecret, payload);
+        const signature = await _crypto.hmacSha256(this.appSecret, payload);
         config.headers["X-Codixus-Timestamp"] = timestamp;
         config.headers["X-Codixus-Nonce"] = nonce;
         config.headers["X-Codixus-Signature"] = signature;
@@ -446,6 +393,7 @@ var CodixusClient = class {
   CodixusClient,
   CodixusError,
   Collection,
-  ErrorCodes
+  ErrorCodes,
+  setCryptoProvider
 });
 //# sourceMappingURL=index.cjs.map

package/dist/index.cjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/index.ts","../src/auth/auth-manager.ts","../src/api/api-client.ts","../src/db/collection.ts"],"sourcesContent":["import {\n  AuthManager,\n  type StorageAdapter,\n  type SignInParams,\n  type AuthState,\n} from \"./auth/auth-manager.js\";\nimport { ApiClient } from \"./api/api-client.js\";\nimport { Collection, type FindOptions } from \"./db/collection.js\";\n\nexport interface CodixusClientConfig {\n  apiUrl: string;\n  storageKey?: string;\n  storage?: StorageAdapter | null;\n  appSecret?: string;\n}\n\nexport class CodixusClient {\n  readonly auth: AuthManager;\n  readonly api: ApiClient;\n\n  constructor(config: CodixusClientConfig) {\n    const storageKey = config.storageKey ?? \"codixus\";\n    const storage = config.storage ?? null;\n\n    this.auth = new AuthManager(storage, storageKey);\n    this.api = new ApiClient(config.apiUrl, this.auth, config.appSecret);\n    this.auth._setApi(this.api);\n  }\n\n  /**\n   * Create a typed collection accessor.\n   * Maps to auto REST routes on server: codixus.rest(Model)\n   *\n   * @example\n   * interface Product { _id: string; name: string; price: number; }\n   * const products = codixus.collection<Product>(\"products\");\n   * const all = await products.find();            // Product[]\n   * const one = await products.findById(\"abc\");   // Product | null\n   */\n  collection<T>(name: string): Collection<T> {\n    return new Collection<T>(this.api, `/api/${name}`);\n  }\n\n  async init(): Promise<void> {\n    await this.auth.init();\n  }\n}\n\nexport {\n  type StorageAdapter,\n  type SignInParams,\n  type AuthState,\n} from \"./auth/auth-manager.js\";\nexport { ApiClient } from \"./api/api-client.js\";\nexport { Collection, type FindOptions } from \"./db/collection.js\";\n\n// Re-export shared types\nexport {\n  type AuthUser,\n  type TokenPair,\n  type DeviceInfo,\n  type DeviceMetadata,\n  type AuthTokenRequest,\n  type AuthTokenResponse,\n  type ApiResponse,\n  CodixusError,\n  ErrorCodes,\n} from \"@codixus/shared\";\n","import type {\n  AuthTokenResponse,\n  DeviceInfo,\n  DeviceMetadata,\n} from \"@codixus/shared\";\nimport type { ApiClient } from \"../api/api-client.js\";\n\nexport interface StorageAdapter {\n  getItem(key: string): Promise<string | null> | string | null;\n  setItem(key: string, value: string): Promise<void> | void;\n  removeItem(key: string): Promise<void> | void;\n}\n\nexport interface SignInParams {\n  deviceId?: string;\n  deviceInfo: DeviceInfo;\n  metadata?: DeviceMetadata;\n}\n\nexport interface AuthState {\n  isAuthenticated: boolean;\n  isLoading: boolean;\n  user: Record<string, unknown> | null;\n}\n\ntype AuthStateListener = (state: AuthState) => void;\n\nexport class AuthManager {\n  private accessToken: string | null = null;\n  private refreshTokenValue: string | null = null;\n  private user: Record<string, unknown> | null = null;\n  private listeners: Set<AuthStateListener> = new Set();\n  private _isLoading = true;\n  private storageKey: string;\n  private api!: ApiClient;\n  private deviceId: string | null = null;\n\n  constructor(\n    private storage: StorageAdapter | null,\n    storageKey: string,\n  ) {\n    this.storageKey = storageKey;\n  }\n\n  /** @internal */\n  _setApi(api: ApiClient): void {\n    this.api = api;\n  }\n\n  async init(): Promise<void> {\n    if (!this.storage) {\n      this._isLoading = false;\n      return;\n    }\n\n    try {\n      const storedRefresh = await this.storage.getItem(\n        `${this.storageKey}_refresh_token`,\n      );\n      const storedUser = await this.storage.getItem(\n        `${this.storageKey}_user`,\n      );\n      const storedDeviceId = await this.storage.getItem(\n        `${this.storageKey}_device_id`,\n      );\n\n      if (storedRefresh) {\n        this.refreshTokenValue = storedRefresh;\n      }\n      if (storedUser) {\n        try {\n          this.user = JSON.parse(storedUser);\n        } catch {\n          // Corrupted user data in storage, ignore\n        }\n      }\n      if (storedDeviceId) {\n        this.deviceId = storedDeviceId;\n      }\n    } catch (error) {\n      console.warn(\"[CodixusClient] Failed to restore auth state from storage:\", error);\n    }\n\n    this._isLoading = false;\n    this.notify();\n  }\n\n  async signIn(\n    params: SignInParams,\n  ): Promise<{ user: Record<string, unknown>; isNewUser: boolean }> {\n    const deviceId = params.deviceId ?? this.deviceId ?? this.generateDeviceId();\n\n    const response = await this.api.post<AuthTokenResponse>(\"/auth/token\", {\n      deviceId,\n      deviceInfo: params.deviceInfo,\n      metadata: params.metadata,\n    });\n\n    const data = response.data;\n    this.accessToken = data.accessToken;\n    this.refreshTokenValue = data.refreshToken;\n    this.user = data.user;\n    this.deviceId = deviceId;\n\n    // Persist\n    if (this.storage) {\n      await this.storage.setItem(\n        `${this.storageKey}_refresh_token`,\n        data.refreshToken,\n      );\n      await this.storage.setItem(\n        `${this.storageKey}_user`,\n        JSON.stringify(data.user),\n      );\n      await this.storage.setItem(`${this.storageKey}_device_id`, deviceId);\n    }\n\n    this.notify();\n    return { user: data.user, isNewUser: data.isNewUser };\n  }\n\n  async getToken(): Promise<string | null> {\n    if (this.accessToken) return this.accessToken;\n\n    // Try refresh\n    if (this.refreshTokenValue) {\n      try {\n        await this.forceRefresh();\n        return this.accessToken;\n      } catch {\n        return null;\n      }\n    }\n\n    return null;\n  }\n\n  async forceRefresh(): Promise<string | null> {\n    if (!this.refreshTokenValue) return null;\n\n    try {\n      const response = await this.api.post<{\n        success: boolean;\n        accessToken: string;\n        refreshToken: string;\n      }>(\"/auth/refresh\", {\n        refreshToken: this.refreshTokenValue,\n      });\n\n      this.accessToken = response.data.accessToken;\n      this.refreshTokenValue = response.data.refreshToken;\n\n      if (this.storage) {\n        await this.storage.setItem(\n          `${this.storageKey}_refresh_token`,\n          response.data.refreshToken,\n        );\n      }\n\n      return this.accessToken;\n    } catch {\n      // Refresh failed, clear auth state\n      await this.signOut();\n      return null;\n    }\n  }\n\n  async signOut(): Promise<void> {\n    // Notify server\n    if (this.refreshTokenValue) {\n      try {\n        await this.api.post(\"/auth/logout\", {\n          refreshToken: this.refreshTokenValue,\n        });\n      } catch {}\n    }\n\n    this.accessToken = null;\n    this.refreshTokenValue = null;\n    this.user = null;\n\n    if (this.storage) {\n      await this.storage.removeItem(`${this.storageKey}_refresh_token`);\n      await this.storage.removeItem(`${this.storageKey}_user`);\n      await this.storage.removeItem(`${this.storageKey}_device_id`);\n    }\n\n    this.notify();\n  }\n\n  getState(): AuthState {\n    return {\n      isAuthenticated: this.accessToken !== null || this.refreshTokenValue !== null,\n      isLoading: this._isLoading,\n      user: this.user,\n    };\n  }\n\n  getDeviceId(): string | null {\n    return this.deviceId;\n  }\n\n  onAuthStateChange(listener: AuthStateListener): () => void {\n    this.listeners.add(listener);\n    // Call immediately with current state\n    listener(this.getState());\n    return () => {\n      this.listeners.delete(listener);\n    };\n  }\n\n  /** @internal - used by API interceptor */\n  _getAccessToken(): string | null {\n    return this.accessToken;\n  }\n\n  /** @internal - called by API interceptor after refresh */\n  _setAccessToken(token: string): void {\n    this.accessToken = token;\n  }\n\n  private notify(): void {\n    const state = this.getState();\n    for (const listener of this.listeners) {\n      listener(state);\n    }\n  }\n\n  private generateDeviceId(): string {\n    const bytes = new Uint8Array(16);\n    crypto.getRandomValues(bytes);\n    return \"dev-\" + Array.from(bytes, (b) => b.toString(16).padStart(2, \"0\")).join(\"\");\n  }\n}\n","import axios, {\n  type AxiosInstance,\n  type AxiosRequestConfig,\n  type AxiosResponse,\n} from \"axios\";\nimport type { AuthManager } from \"../auth/auth-manager.js\";\n\n// Lightweight crypto helpers that work in both browser and React Native\nasync function sha256(data: string): Promise<string> {\n  if (typeof globalThis.crypto?.subtle !== \"undefined\") {\n    const encoded = new TextEncoder().encode(data);\n    const hash = await globalThis.crypto.subtle.digest(\"SHA-256\", encoded);\n    return Array.from(new Uint8Array(hash), (b) =>\n      b.toString(16).padStart(2, \"0\"),\n    ).join(\"\");\n  }\n  // Fallback: simple hash (React Native without crypto.subtle)\n  return simpleHash(data);\n}\n\nasync function hmacSha256(secret: string, data: string): Promise<string> {\n  if (typeof globalThis.crypto?.subtle !== \"undefined\") {\n    const key = await globalThis.crypto.subtle.importKey(\n      \"raw\",\n      new TextEncoder().encode(secret),\n      { name: \"HMAC\", hash: \"SHA-256\" },\n      false,\n      [\"sign\"],\n    );\n    const sig = await globalThis.crypto.subtle.sign(\n      \"HMAC\",\n      key,\n      new TextEncoder().encode(data),\n    );\n    return Array.from(new Uint8Array(sig), (b) =>\n      b.toString(16).padStart(2, \"0\"),\n    ).join(\"\");\n  }\n  // Fallback for environments without SubtleCrypto\n  return simpleHmac(secret, data);\n}\n\n// Simple fallback hash for environments without SubtleCrypto\nfunction simpleHash(str: string): string {\n  let hash = 0;\n  for (let i = 0; i < str.length; i++) {\n    const char = str.charCodeAt(i);\n    hash = (hash << 5) - hash + char;\n    hash |= 0;\n  }\n  return Math.abs(hash).toString(16).padStart(16, \"0\");\n}\n\nfunction simpleHmac(key: string, data: string): string {\n  return simpleHash(key + \":\" + data);\n}\n\nfunction generateNonce(): string {\n  if (typeof globalThis.crypto?.randomUUID === \"function\") {\n    return globalThis.crypto.randomUUID();\n  }\n  // Fallback\n  const bytes = new Uint8Array(16);\n  if (typeof globalThis.crypto?.getRandomValues === \"function\") {\n    globalThis.crypto.getRandomValues(bytes);\n  } else {\n    for (let i = 0; i < 16; i++) {\n      bytes[i] = Math.floor(Math.random() * 256);\n    }\n  }\n  return Array.from(bytes, (b) => b.toString(16).padStart(2, \"0\")).join(\"\");\n}\n\nexport class ApiClient {\n  readonly instance: AxiosInstance;\n  private refreshPromise: Promise<string | null> | null = null;\n  private appSecret: string | undefined;\n\n  constructor(\n    baseURL: string,\n    private authManager: AuthManager,\n    appSecret?: string,\n  ) {\n    this.appSecret = appSecret;\n\n    this.instance = axios.create({\n      baseURL,\n      headers: { \"Content-Type\": \"application/json\" },\n    });\n\n    // Request interceptor: add Bearer token + signing\n    this.instance.interceptors.request.use(async (config) => {\n      // Skip auth for auth endpoints\n      if (!config.url?.includes(\"/auth/\")) {\n        const token = this.authManager._getAccessToken();\n        if (token) {\n          config.headers.Authorization = `Bearer ${token}`;\n        }\n      }\n\n      // Request signing\n      if (this.appSecret) {\n        const timestamp = Date.now().toString();\n        const nonce = generateNonce();\n        const body =\n          config.data && typeof config.data === \"object\"\n            ? JSON.stringify(config.data)\n            : (config.data ?? \"\");\n        const bodyHash = body ? await sha256(body) : \"\";\n        const method = (config.method ?? \"GET\").toUpperCase();\n        const url = config.url ?? \"/\";\n        const payload = [method, url, timestamp, nonce, bodyHash].join(\"\\n\");\n        const signature = await hmacSha256(this.appSecret, payload);\n\n        config.headers[\"X-Codixus-Timestamp\"] = timestamp;\n        config.headers[\"X-Codixus-Nonce\"] = nonce;\n        config.headers[\"X-Codixus-Signature\"] = signature;\n      }\n\n      return config;\n    });\n\n    // Response interceptor: handle 401 with token refresh\n    this.instance.interceptors.response.use(\n      (response) => response,\n      async (error) => {\n        if (error.response?.status === 401) {\n          const originalRequest = error.config;\n          if (originalRequest && !originalRequest._retry) {\n            originalRequest._retry = true;\n\n            try {\n              // Promise lock to prevent concurrent refreshes\n              if (!this.refreshPromise) {\n                this.refreshPromise = this.authManager\n                  .forceRefresh()\n                  .finally(() => {\n                    this.refreshPromise = null;\n                  });\n              }\n\n              const newToken = await this.refreshPromise;\n              if (newToken) {\n                originalRequest.headers.Authorization = `Bearer ${newToken}`;\n                return this.instance(originalRequest);\n              }\n            } catch (refreshError) {\n              console.warn(\"[CodixusClient] Token refresh failed:\", refreshError);\n            }\n          }\n        }\n        return Promise.reject(error);\n      },\n    );\n  }\n\n  async get<T = unknown>(\n    url: string,\n    config?: AxiosRequestConfig,\n  ): Promise<AxiosResponse<T>> {\n    return this.instance.get<T>(url, config);\n  }\n\n  async post<T = unknown>(\n    url: string,\n    data?: unknown,\n    config?: AxiosRequestConfig,\n  ): Promise<AxiosResponse<T>> {\n    return this.instance.post<T>(url, data, config);\n  }\n\n  async patch<T = unknown>(\n    url: string,\n    data?: unknown,\n    config?: AxiosRequestConfig,\n  ): Promise<AxiosResponse<T>> {\n    return this.instance.patch<T>(url, data, config);\n  }\n\n  async delete<T = unknown>(\n    url: string,\n    config?: AxiosRequestConfig,\n  ): Promise<AxiosResponse<T>> {\n    return this.instance.delete<T>(url, config);\n  }\n\n  async put<T = unknown>(\n    url: string,\n    data?: unknown,\n    config?: AxiosRequestConfig,\n  ): Promise<AxiosResponse<T>> {\n    return this.instance.put<T>(url, data, config);\n  }\n}\n","import type { ApiClient } from \"../api/api-client.js\";\n\nexport interface FindOptions {\n  sort?: Record<string, 1 | -1>;\n  limit?: number;\n  skip?: number;\n  cursor?: string | number;\n}\n\nexport class Collection<T = Record<string, unknown>> {\n  constructor(\n    private api: ApiClient,\n    private basePath: string,\n  ) {}\n\n  async find(\n    filter?: Record<string, unknown>,\n    options?: FindOptions,\n  ): Promise<T[]> {\n    const params = new URLSearchParams();\n    if (filter && Object.keys(filter).length > 0) {\n      params.set(\"filter\", JSON.stringify(filter));\n    }\n    if (options?.sort) params.set(\"sort\", JSON.stringify(options.sort));\n    if (options?.limit) params.set(\"limit\", String(options.limit));\n    if (options?.skip) params.set(\"skip\", String(options.skip));\n    if (options?.cursor) params.set(\"cursor\", String(options.cursor));\n\n    const qs = params.toString();\n    const url = qs ? `${this.basePath}?${qs}` : this.basePath;\n    const { data } = await this.api.get<{ success: boolean; data: T[]; nextCursor?: string | null }>(url);\n    return data.data;\n  }\n\n  async findWithCursor(\n    filter?: Record<string, unknown>,\n    options?: FindOptions,\n  ): Promise<{ data: T[]; nextCursor: string | number | null }> {\n    const params = new URLSearchParams();\n    if (filter && Object.keys(filter).length > 0) {\n      params.set(\"filter\", JSON.stringify(filter));\n    }\n    if (options?.sort) params.set(\"sort\", JSON.stringify(options.sort));\n    if (options?.limit) params.set(\"limit\", String(options.limit));\n    if (options?.cursor) params.set(\"cursor\", String(options.cursor));\n\n    const qs = params.toString();\n    const url = qs ? `${this.basePath}?${qs}` : this.basePath;\n    const { data } = await this.api.get<{ success: boolean; data: T[]; nextCursor: string | number | null }>(url);\n    return { data: data.data, nextCursor: data.nextCursor };\n  }\n\n  async findById(id: string): Promise<T | null> {\n    try {\n      const { data } = await this.api.get<{ success: boolean; data: T }>(\n        `${this.basePath}/${id}`,\n      );\n      return data.data;\n    } catch (error: any) {\n      if (error.response?.status === 404) return null;\n      throw error;\n    }\n  }\n\n  async create(doc: Partial<T> & Record<string, unknown>): Promise<T> {\n    const { data } = await this.api.post<{ success: boolean; data: T }>(\n      this.basePath,\n      doc,\n    );\n    return data.data;\n  }\n\n  async updateById(\n    id: string,\n    update: Record<string, unknown>,\n  ): Promise<T> {\n    const { data } = await this.api.patch<{ success: boolean; data: T }>(\n      `${this.basePath}/${id}`,\n      { update },\n    );\n    return data.data;\n  }\n\n  async deleteById(id: string): Promise<void> {\n    await this.api.delete(`${this.basePath}/${id}`);\n  }\n\n  async count(filter?: Record<string, unknown>): Promise<number> {\n    const { data } = await this.api.post<{ success: boolean; count: number }>(\n      `${this.basePath}/count`,\n      { filter: filter ?? {} },\n    );\n    return data.count;\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;;;AC2BO,IAAM,cAAN,MAAkB;AAAA,EAUvB,YACU,SACR,YACA;AAFQ;AAGR,SAAK,aAAa;AAAA,EACpB;AAAA,EAdQ,cAA6B;AAAA,EAC7B,oBAAmC;AAAA,EACnC,OAAuC;AAAA,EACvC,YAAoC,oBAAI,IAAI;AAAA,EAC5C,aAAa;AAAA,EACb;AAAA,EACA;AAAA,EACA,WAA0B;AAAA;AAAA,EAUlC,QAAQ,KAAsB;AAC5B,SAAK,MAAM;AAAA,EACb;AAAA,EAEA,MAAM,OAAsB;AAC1B,QAAI,CAAC,KAAK,SAAS;AACjB,WAAK,aAAa;AAClB;AAAA,IACF;AAEA,QAAI;AACF,YAAM,gBAAgB,MAAM,KAAK,QAAQ;AAAA,QACvC,GAAG,KAAK,UAAU;AAAA,MACpB;AACA,YAAM,aAAa,MAAM,KAAK,QAAQ;AAAA,QACpC,GAAG,KAAK,UAAU;AAAA,MACpB;AACA,YAAM,iBAAiB,MAAM,KAAK,QAAQ;AAAA,QACxC,GAAG,KAAK,UAAU;AAAA,MACpB;AAEA,UAAI,eAAe;AACjB,aAAK,oBAAoB;AAAA,MAC3B;AACA,UAAI,YAAY;AACd,YAAI;AACF,eAAK,OAAO,KAAK,MAAM,UAAU;AAAA,QACnC,QAAQ;AAAA,QAER;AAAA,MACF;AACA,UAAI,gBAAgB;AAClB,aAAK,WAAW;AAAA,MAClB;AAAA,IACF,SAAS,OAAO;AACd,cAAQ,KAAK,8DAA8D,KAAK;AAAA,IAClF;AAEA,SAAK,aAAa;AAClB,SAAK,OAAO;AAAA,EACd;AAAA,EAEA,MAAM,OACJ,QACgE;AAChE,UAAM,WAAW,OAAO,YAAY,KAAK,YAAY,KAAK,iBAAiB;AAE3E,UAAM,WAAW,MAAM,KAAK,IAAI,KAAwB,eAAe;AAAA,MACrE;AAAA,MACA,YAAY,OAAO;AAAA,MACnB,UAAU,OAAO;AAAA,IACnB,CAAC;AAED,UAAM,OAAO,SAAS;AACtB,SAAK,cAAc,KAAK;AACxB,SAAK,oBAAoB,KAAK;AAC9B,SAAK,OAAO,KAAK;AACjB,SAAK,WAAW;AAGhB,QAAI,KAAK,SAAS;AAChB,YAAM,KAAK,QAAQ;AAAA,QACjB,GAAG,KAAK,UAAU;AAAA,QAClB,KAAK;AAAA,MACP;AACA,YAAM,KAAK,QAAQ;AAAA,QACjB,GAAG,KAAK,UAAU;AAAA,QAClB,KAAK,UAAU,KAAK,IAAI;AAAA,MAC1B;AACA,YAAM,KAAK,QAAQ,QAAQ,GAAG,KAAK,UAAU,cAAc,QAAQ;AAAA,IACrE;AAEA,SAAK,OAAO;AACZ,WAAO,EAAE,MAAM,KAAK,MAAM,WAAW,KAAK,UAAU;AAAA,EACtD;AAAA,EAEA,MAAM,WAAmC;AACvC,QAAI,KAAK,YAAa,QAAO,KAAK;AAGlC,QAAI,KAAK,mBAAmB;AAC1B,UAAI;AACF,cAAM,KAAK,aAAa;AACxB,eAAO,KAAK;AAAA,MACd,QAAQ;AACN,eAAO;AAAA,MACT;AAAA,IACF;AAEA,WAAO;AAAA,EACT;AAAA,EAEA,MAAM,eAAuC;AAC3C,QAAI,CAAC,KAAK,kBAAmB,QAAO;AAEpC,QAAI;AACF,YAAM,WAAW,MAAM,KAAK,IAAI,KAI7B,iBAAiB;AAAA,QAClB,cAAc,KAAK;AAAA,MACrB,CAAC;AAED,WAAK,cAAc,SAAS,KAAK;AACjC,WAAK,oBAAoB,SAAS,KAAK;AAEvC,UAAI,KAAK,SAAS;AAChB,cAAM,KAAK,QAAQ;AAAA,UACjB,GAAG,KAAK,UAAU;AAAA,UAClB,SAAS,KAAK;AAAA,QAChB;AAAA,MACF;AAEA,aAAO,KAAK;AAAA,IACd,QAAQ;AAEN,YAAM,KAAK,QAAQ;AACnB,aAAO;AAAA,IACT;AAAA,EACF;AAAA,EAEA,MAAM,UAAyB;AAE7B,QAAI,KAAK,mBAAmB;AAC1B,UAAI;AACF,cAAM,KAAK,IAAI,KAAK,gBAAgB;AAAA,UAClC,cAAc,KAAK;AAAA,QACrB,CAAC;AAAA,MACH,QAAQ;AAAA,MAAC;AAAA,IACX;AAEA,SAAK,cAAc;AACnB,SAAK,oBAAoB;AACzB,SAAK,OAAO;AAEZ,QAAI,KAAK,SAAS;AAChB,YAAM,KAAK,QAAQ,WAAW,GAAG,KAAK,UAAU,gBAAgB;AAChE,YAAM,KAAK,QAAQ,WAAW,GAAG,KAAK,UAAU,OAAO;AACvD,YAAM,KAAK,QAAQ,WAAW,GAAG,KAAK,UAAU,YAAY;AAAA,IAC9D;AAEA,SAAK,OAAO;AAAA,EACd;AAAA,EAEA,WAAsB;AACpB,WAAO;AAAA,MACL,iBAAiB,KAAK,gBAAgB,QAAQ,KAAK,sBAAsB;AAAA,MACzE,WAAW,KAAK;AAAA,MAChB,MAAM,KAAK;AAAA,IACb;AAAA,EACF;AAAA,EAEA,cAA6B;AAC3B,WAAO,KAAK;AAAA,EACd;AAAA,EAEA,kBAAkB,UAAyC;AACzD,SAAK,UAAU,IAAI,QAAQ;AAE3B,aAAS,KAAK,SAAS,CAAC;AACxB,WAAO,MAAM;AACX,WAAK,UAAU,OAAO,QAAQ;AAAA,IAChC;AAAA,EACF;AAAA;AAAA,EAGA,kBAAiC;AAC/B,WAAO,KAAK;AAAA,EACd;AAAA;AAAA,EAGA,gBAAgB,OAAqB;AACnC,SAAK,cAAc;AAAA,EACrB;AAAA,EAEQ,SAAe;AACrB,UAAM,QAAQ,KAAK,SAAS;AAC5B,eAAW,YAAY,KAAK,WAAW;AACrC,eAAS,KAAK;AAAA,IAChB;AAAA,EACF;AAAA,EAEQ,mBAA2B;AACjC,UAAM,QAAQ,IAAI,WAAW,EAAE;AAC/B,WAAO,gBAAgB,KAAK;AAC5B,WAAO,SAAS,MAAM,KAAK,OAAO,CAAC,MAAM,EAAE,SAAS,EAAE,EAAE,SAAS,GAAG,GAAG,CAAC,EAAE,KAAK,EAAE;AAAA,EACnF;AACF;;;ACzOA,mBAIO;AAIP,eAAe,OAAO,MAA+B;AACnD,MAAI,OAAO,WAAW,QAAQ,WAAW,aAAa;AACpD,UAAM,UAAU,IAAI,YAAY,EAAE,OAAO,IAAI;AAC7C,UAAM,OAAO,MAAM,WAAW,OAAO,OAAO,OAAO,WAAW,OAAO;AACrE,WAAO,MAAM;AAAA,MAAK,IAAI,WAAW,IAAI;AAAA,MAAG,CAAC,MACvC,EAAE,SAAS,EAAE,EAAE,SAAS,GAAG,GAAG;AAAA,IAChC,EAAE,KAAK,EAAE;AAAA,EACX;AAEA,SAAO,WAAW,IAAI;AACxB;AAEA,eAAe,WAAW,QAAgB,MAA+B;AACvE,MAAI,OAAO,WAAW,QAAQ,WAAW,aAAa;AACpD,UAAM,MAAM,MAAM,WAAW,OAAO,OAAO;AAAA,MACzC;AAAA,MACA,IAAI,YAAY,EAAE,OAAO,MAAM;AAAA,MAC/B,EAAE,MAAM,QAAQ,MAAM,UAAU;AAAA,MAChC;AAAA,MACA,CAAC,MAAM;AAAA,IACT;AACA,UAAM,MAAM,MAAM,WAAW,OAAO,OAAO;AAAA,MACzC;AAAA,MACA;AAAA,MACA,IAAI,YAAY,EAAE,OAAO,IAAI;AAAA,IAC/B;AACA,WAAO,MAAM;AAAA,MAAK,IAAI,WAAW,GAAG;AAAA,MAAG,CAAC,MACtC,EAAE,SAAS,EAAE,EAAE,SAAS,GAAG,GAAG;AAAA,IAChC,EAAE,KAAK,EAAE;AAAA,EACX;AAEA,SAAO,WAAW,QAAQ,IAAI;AAChC;AAGA,SAAS,WAAW,KAAqB;AACvC,MAAI,OAAO;AACX,WAAS,IAAI,GAAG,IAAI,IAAI,QAAQ,KAAK;AACnC,UAAM,OAAO,IAAI,WAAW,CAAC;AAC7B,YAAQ,QAAQ,KAAK,OAAO;AAC5B,YAAQ;AAAA,EACV;AACA,SAAO,KAAK,IAAI,IAAI,EAAE,SAAS,EAAE,EAAE,SAAS,IAAI,GAAG;AACrD;AAEA,SAAS,WAAW,KAAa,MAAsB;AACrD,SAAO,WAAW,MAAM,MAAM,IAAI;AACpC;AAEA,SAAS,gBAAwB;AAC/B,MAAI,OAAO,WAAW,QAAQ,eAAe,YAAY;AACvD,WAAO,WAAW,OAAO,WAAW;AAAA,EACtC;AAEA,QAAM,QAAQ,IAAI,WAAW,EAAE;AAC/B,MAAI,OAAO,WAAW,QAAQ,oBAAoB,YAAY;AAC5D,eAAW,OAAO,gBAAgB,KAAK;AAAA,EACzC,OAAO;AACL,aAAS,IAAI,GAAG,IAAI,IAAI,KAAK;AAC3B,YAAM,CAAC,IAAI,KAAK,MAAM,KAAK,OAAO,IAAI,GAAG;AAAA,IAC3C;AAAA,EACF;AACA,SAAO,MAAM,KAAK,OAAO,CAAC,MAAM,EAAE,SAAS,EAAE,EAAE,SAAS,GAAG,GAAG,CAAC,EAAE,KAAK,EAAE;AAC1E;AAEO,IAAM,YAAN,MAAgB;AAAA,EAKrB,YACE,SACQ,aACR,WACA;AAFQ;AAGR,SAAK,YAAY;AAEjB,SAAK,WAAW,aAAAA,QAAM,OAAO;AAAA,MAC3B;AAAA,MACA,SAAS,EAAE,gBAAgB,mBAAmB;AAAA,IAChD,CAAC;AAGD,SAAK,SAAS,aAAa,QAAQ,IAAI,OAAO,WAAW;AAEvD,UAAI,CAAC,OAAO,KAAK,SAAS,QAAQ,GAAG;AACnC,cAAM,QAAQ,KAAK,YAAY,gBAAgB;AAC/C,YAAI,OAAO;AACT,iBAAO,QAAQ,gBAAgB,UAAU,KAAK;AAAA,QAChD;AAAA,MACF;AAGA,UAAI,KAAK,WAAW;AAClB,cAAM,YAAY,KAAK,IAAI,EAAE,SAAS;AACtC,cAAM,QAAQ,cAAc;AAC5B,cAAM,OACJ,OAAO,QAAQ,OAAO,OAAO,SAAS,WAClC,KAAK,UAAU,OAAO,IAAI,IACzB,OAAO,QAAQ;AACtB,cAAM,WAAW,OAAO,MAAM,OAAO,IAAI,IAAI;AAC7C,cAAM,UAAU,OAAO,UAAU,OAAO,YAAY;AACpD,cAAM,MAAM,OAAO,OAAO;AAC1B,cAAM,UAAU,CAAC,QAAQ,KAAK,WAAW,OAAO,QAAQ,EAAE,KAAK,IAAI;AACnE,cAAM,YAAY,MAAM,WAAW,KAAK,WAAW,OAAO;AAE1D,eAAO,QAAQ,qBAAqB,IAAI;AACxC,eAAO,QAAQ,iBAAiB,IAAI;AACpC,eAAO,QAAQ,qBAAqB,IAAI;AAAA,MAC1C;AAEA,aAAO;AAAA,IACT,CAAC;AAGD,SAAK,SAAS,aAAa,SAAS;AAAA,MAClC,CAAC,aAAa;AAAA,MACd,OAAO,UAAU;AACf,YAAI,MAAM,UAAU,WAAW,KAAK;AAClC,gBAAM,kBAAkB,MAAM;AAC9B,cAAI,mBAAmB,CAAC,gBAAgB,QAAQ;AAC9C,4BAAgB,SAAS;AAEzB,gBAAI;AAEF,kBAAI,CAAC,KAAK,gBAAgB;AACxB,qBAAK,iBAAiB,KAAK,YACxB,aAAa,EACb,QAAQ,MAAM;AACb,uBAAK,iBAAiB;AAAA,gBACxB,CAAC;AAAA,cACL;AAEA,oBAAM,WAAW,MAAM,KAAK;AAC5B,kBAAI,UAAU;AACZ,gCAAgB,QAAQ,gBAAgB,UAAU,QAAQ;AAC1D,uBAAO,KAAK,SAAS,eAAe;AAAA,cACtC;AAAA,YACF,SAAS,cAAc;AACrB,sBAAQ,KAAK,yCAAyC,YAAY;AAAA,YACpE;AAAA,UACF;AAAA,QACF;AACA,eAAO,QAAQ,OAAO,KAAK;AAAA,MAC7B;AAAA,IACF;AAAA,EACF;AAAA,EAhFS;AAAA,EACD,iBAAgD;AAAA,EAChD;AAAA,EAgFR,MAAM,IACJ,KACA,QAC2B;AAC3B,WAAO,KAAK,SAAS,IAAO,KAAK,MAAM;AAAA,EACzC;AAAA,EAEA,MAAM,KACJ,KACA,MACA,QAC2B;AAC3B,WAAO,KAAK,SAAS,KAAQ,KAAK,MAAM,MAAM;AAAA,EAChD;AAAA,EAEA,MAAM,MACJ,KACA,MACA,QAC2B;AAC3B,WAAO,KAAK,SAAS,MAAS,KAAK,MAAM,MAAM;AAAA,EACjD;AAAA,EAEA,MAAM,OACJ,KACA,QAC2B;AAC3B,WAAO,KAAK,SAAS,OAAU,KAAK,MAAM;AAAA,EAC5C;AAAA,EAEA,MAAM,IACJ,KACA,MACA,QAC2B;AAC3B,WAAO,KAAK,SAAS,IAAO,KAAK,MAAM,MAAM;AAAA,EAC/C;AACF;;;ACxLO,IAAM,aAAN,MAA8C;AAAA,EACnD,YACU,KACA,UACR;AAFQ;AACA;AAAA,EACP;AAAA,EAEH,MAAM,KACJ,QACA,SACc;AACd,UAAM,SAAS,IAAI,gBAAgB;AACnC,QAAI,UAAU,OAAO,KAAK,MAAM,EAAE,SAAS,GAAG;AAC5C,aAAO,IAAI,UAAU,KAAK,UAAU,MAAM,CAAC;AAAA,IAC7C;AACA,QAAI,SAAS,KAAM,QAAO,IAAI,QAAQ,KAAK,UAAU,QAAQ,IAAI,CAAC;AAClE,QAAI,SAAS,MAAO,QAAO,IAAI,SAAS,OAAO,QAAQ,KAAK,CAAC;AAC7D,QAAI,SAAS,KAAM,QAAO,IAAI,QAAQ,OAAO,QAAQ,IAAI,CAAC;AAC1D,QAAI,SAAS,OAAQ,QAAO,IAAI,UAAU,OAAO,QAAQ,MAAM,CAAC;AAEhE,UAAM,KAAK,OAAO,SAAS;AAC3B,UAAM,MAAM,KAAK,GAAG,KAAK,QAAQ,IAAI,EAAE,KAAK,KAAK;AACjD,UAAM,EAAE,KAAK,IAAI,MAAM,KAAK,IAAI,IAAiE,GAAG;AACpG,WAAO,KAAK;AAAA,EACd;AAAA,EAEA,MAAM,eACJ,QACA,SAC4D;AAC5D,UAAM,SAAS,IAAI,gBAAgB;AACnC,QAAI,UAAU,OAAO,KAAK,MAAM,EAAE,SAAS,GAAG;AAC5C,aAAO,IAAI,UAAU,KAAK,UAAU,MAAM,CAAC;AAAA,IAC7C;AACA,QAAI,SAAS,KAAM,QAAO,IAAI,QAAQ,KAAK,UAAU,QAAQ,IAAI,CAAC;AAClE,QAAI,SAAS,MAAO,QAAO,IAAI,SAAS,OAAO,QAAQ,KAAK,CAAC;AAC7D,QAAI,SAAS,OAAQ,QAAO,IAAI,UAAU,OAAO,QAAQ,MAAM,CAAC;AAEhE,UAAM,KAAK,OAAO,SAAS;AAC3B,UAAM,MAAM,KAAK,GAAG,KAAK,QAAQ,IAAI,EAAE,KAAK,KAAK;AACjD,UAAM,EAAE,KAAK,IAAI,MAAM,KAAK,IAAI,IAAyE,GAAG;AAC5G,WAAO,EAAE,MAAM,KAAK,MAAM,YAAY,KAAK,WAAW;AAAA,EACxD;AAAA,EAEA,MAAM,SAAS,IAA+B;AAC5C,QAAI;AACF,YAAM,EAAE,KAAK,IAAI,MAAM,KAAK,IAAI;AAAA,QAC9B,GAAG,KAAK,QAAQ,IAAI,EAAE;AAAA,MACxB;AACA,aAAO,KAAK;AAAA,IACd,SAAS,OAAY;AACnB,UAAI,MAAM,UAAU,WAAW,IAAK,QAAO;AAC3C,YAAM;AAAA,IACR;AAAA,EACF;AAAA,EAEA,MAAM,OAAO,KAAuD;AAClE,UAAM,EAAE,KAAK,IAAI,MAAM,KAAK,IAAI;AAAA,MAC9B,KAAK;AAAA,MACL;AAAA,IACF;AACA,WAAO,KAAK;AAAA,EACd;AAAA,EAEA,MAAM,WACJ,IACA,QACY;AACZ,UAAM,EAAE,KAAK,IAAI,MAAM,KAAK,IAAI;AAAA,MAC9B,GAAG,KAAK,QAAQ,IAAI,EAAE;AAAA,MACtB,EAAE,OAAO;AAAA,IACX;AACA,WAAO,KAAK;AAAA,EACd;AAAA,EAEA,MAAM,WAAW,IAA2B;AAC1C,UAAM,KAAK,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,EAAE,EAAE;AAAA,EAChD;AAAA,EAEA,MAAM,MAAM,QAAmD;AAC7D,UAAM,EAAE,KAAK,IAAI,MAAM,KAAK,IAAI;AAAA,MAC9B,GAAG,KAAK,QAAQ;AAAA,MAChB,EAAE,QAAQ,UAAU,CAAC,EAAE;AAAA,IACzB;AACA,WAAO,KAAK;AAAA,EACd;AACF;;;AHrCA,oBAUO;AAnDA,IAAM,gBAAN,MAAoB;AAAA,EAChB;AAAA,EACA;AAAA,EAET,YAAY,QAA6B;AACvC,UAAM,aAAa,OAAO,cAAc;AACxC,UAAM,UAAU,OAAO,WAAW;AAElC,SAAK,OAAO,IAAI,YAAY,SAAS,UAAU;AAC/C,SAAK,MAAM,IAAI,UAAU,OAAO,QAAQ,KAAK,MAAM,OAAO,SAAS;AACnE,SAAK,KAAK,QAAQ,KAAK,GAAG;AAAA,EAC5B;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAYA,WAAc,MAA6B;AACzC,WAAO,IAAI,WAAc,KAAK,KAAK,QAAQ,IAAI,EAAE;AAAA,EACnD;AAAA,EAEA,MAAM,OAAsB;AAC1B,UAAM,KAAK,KAAK,KAAK;AAAA,EACvB;AACF;","names":["axios"]}
+{"version":3,"sources":["../src/index.ts","../src/auth/auth-manager.ts","../src/api/api-client.ts","../src/db/collection.ts"],"sourcesContent":["import {\n  AuthManager,\n  type StorageAdapter,\n  type SignInParams,\n  type AuthState,\n} from \"./auth/auth-manager.js\";\nimport { ApiClient } from \"./api/api-client.js\";\nimport { Collection, type FindOptions } from \"./db/collection.js\";\n\nexport interface CodixusClientConfig {\n  apiUrl: string;\n  storageKey?: string;\n  storage?: StorageAdapter | null;\n  appSecret?: string;\n}\n\nexport class CodixusClient {\n  readonly auth: AuthManager;\n  readonly api: ApiClient;\n\n  constructor(config: CodixusClientConfig) {\n    const storageKey = config.storageKey ?? \"codixus\";\n    const storage = config.storage ?? null;\n\n    this.auth = new AuthManager(storage, storageKey);\n    this.api = new ApiClient(config.apiUrl, this.auth, config.appSecret);\n    this.auth._setApi(this.api);\n  }\n\n  /**\n   * Create a typed collection accessor.\n   * Maps to auto REST routes on server: codixus.rest(Model)\n   *\n   * @example\n   * interface Product { _id: string; name: string; price: number; }\n   * const products = codixus.collection<Product>(\"products\");\n   * const all = await products.find();            // Product[]\n   * const one = await products.findById(\"abc\");   // Product | null\n   */\n  collection<T>(name: string): Collection<T> {\n    return new Collection<T>(this.api, `/api/${name}`);\n  }\n\n  async init(): Promise<void> {\n    await this.auth.init();\n  }\n}\n\nexport {\n  type StorageAdapter,\n  type SignInParams,\n  type AuthState,\n} from \"./auth/auth-manager.js\";\nexport { ApiClient, setCryptoProvider, type CryptoProvider } from \"./api/api-client.js\";\nexport { Collection, type FindOptions } from \"./db/collection.js\";\n\n// Re-export shared types\nexport {\n  type AuthUser,\n  type TokenPair,\n  type DeviceInfo,\n  type DeviceMetadata,\n  type AuthTokenRequest,\n  type AuthTokenResponse,\n  type ApiResponse,\n  CodixusError,\n  ErrorCodes,\n} from \"@codixus/shared\";\n","import type {\n  AuthTokenResponse,\n  DeviceInfo,\n  DeviceMetadata,\n} from \"@codixus/shared\";\nimport type { ApiClient } from \"../api/api-client.js\";\n\nexport interface StorageAdapter {\n  getItem(key: string): Promise<string | null> | string | null;\n  setItem(key: string, value: string): Promise<void> | void;\n  removeItem(key: string): Promise<void> | void;\n}\n\nexport interface SignInParams {\n  deviceId?: string;\n  deviceInfo: DeviceInfo;\n  metadata?: DeviceMetadata;\n}\n\nexport interface AuthState {\n  isAuthenticated: boolean;\n  isLoading: boolean;\n  user: Record<string, unknown> | null;\n}\n\ntype AuthStateListener = (state: AuthState) => void;\n\nexport class AuthManager {\n  private accessToken: string | null = null;\n  private refreshTokenValue: string | null = null;\n  private user: Record<string, unknown> | null = null;\n  private listeners: Set<AuthStateListener> = new Set();\n  private _isLoading = true;\n  private storageKey: string;\n  private api!: ApiClient;\n  private deviceId: string | null = null;\n\n  constructor(\n    private storage: StorageAdapter | null,\n    storageKey: string,\n  ) {\n    this.storageKey = storageKey;\n  }\n\n  /** @internal */\n  _setApi(api: ApiClient): void {\n    this.api = api;\n  }\n\n  async init(): Promise<void> {\n    if (!this.storage) {\n      this._isLoading = false;\n      return;\n    }\n\n    try {\n      const storedRefresh = await this.storage.getItem(\n        `${this.storageKey}_refresh_token`,\n      );\n      const storedUser = await this.storage.getItem(\n        `${this.storageKey}_user`,\n      );\n      const storedDeviceId = await this.storage.getItem(\n        `${this.storageKey}_device_id`,\n      );\n\n      if (storedRefresh) {\n        this.refreshTokenValue = storedRefresh;\n      }\n      if (storedUser) {\n        try {\n          this.user = JSON.parse(storedUser);\n        } catch {\n          // Corrupted user data in storage, ignore\n        }\n      }\n      if (storedDeviceId) {\n        this.deviceId = storedDeviceId;\n      }\n    } catch (error) {\n      console.warn(\"[CodixusClient] Failed to restore auth state from storage:\", error);\n    }\n\n    this._isLoading = false;\n    this.notify();\n  }\n\n  async signIn(\n    params: SignInParams,\n  ): Promise<{ user: Record<string, unknown>; isNewUser: boolean }> {\n    const deviceId = params.deviceId ?? this.deviceId ?? this.generateDeviceId();\n\n    const response = await this.api.post<AuthTokenResponse>(\"/auth/token\", {\n      deviceId,\n      deviceInfo: params.deviceInfo,\n      metadata: params.metadata,\n    });\n\n    const data = response.data;\n    this.accessToken = data.accessToken;\n    this.refreshTokenValue = data.refreshToken;\n    this.user = data.user;\n    this.deviceId = deviceId;\n\n    // Persist\n    if (this.storage) {\n      await this.storage.setItem(\n        `${this.storageKey}_refresh_token`,\n        data.refreshToken,\n      );\n      await this.storage.setItem(\n        `${this.storageKey}_user`,\n        JSON.stringify(data.user),\n      );\n      await this.storage.setItem(`${this.storageKey}_device_id`, deviceId);\n    }\n\n    this.notify();\n    return { user: data.user, isNewUser: data.isNewUser };\n  }\n\n  async getToken(): Promise<string | null> {\n    if (this.accessToken) return this.accessToken;\n\n    // Try refresh\n    if (this.refreshTokenValue) {\n      try {\n        await this.forceRefresh();\n        return this.accessToken;\n      } catch {\n        return null;\n      }\n    }\n\n    return null;\n  }\n\n  async forceRefresh(): Promise<string | null> {\n    if (!this.refreshTokenValue) return null;\n\n    try {\n      const response = await this.api.post<{\n        success: boolean;\n        accessToken: string;\n        refreshToken: string;\n      }>(\"/auth/refresh\", {\n        refreshToken: this.refreshTokenValue,\n      });\n\n      this.accessToken = response.data.accessToken;\n      this.refreshTokenValue = response.data.refreshToken;\n\n      if (this.storage) {\n        await this.storage.setItem(\n          `${this.storageKey}_refresh_token`,\n          response.data.refreshToken,\n        );\n      }\n\n      return this.accessToken;\n    } catch {\n      // Refresh failed, clear auth state\n      await this.signOut();\n      return null;\n    }\n  }\n\n  async signOut(): Promise<void> {\n    // Notify server\n    if (this.refreshTokenValue) {\n      try {\n        await this.api.post(\"/auth/logout\", {\n          refreshToken: this.refreshTokenValue,\n        });\n      } catch {}\n    }\n\n    this.accessToken = null;\n    this.refreshTokenValue = null;\n    this.user = null;\n\n    if (this.storage) {\n      await this.storage.removeItem(`${this.storageKey}_refresh_token`);\n      await this.storage.removeItem(`${this.storageKey}_user`);\n      await this.storage.removeItem(`${this.storageKey}_device_id`);\n    }\n\n    this.notify();\n  }\n\n  getState(): AuthState {\n    return {\n      isAuthenticated: this.accessToken !== null || this.refreshTokenValue !== null,\n      isLoading: this._isLoading,\n      user: this.user,\n    };\n  }\n\n  getDeviceId(): string | null {\n    return this.deviceId;\n  }\n\n  onAuthStateChange(listener: AuthStateListener): () => void {\n    this.listeners.add(listener);\n    // Call immediately with current state\n    listener(this.getState());\n    return () => {\n      this.listeners.delete(listener);\n    };\n  }\n\n  /** @internal - used by API interceptor */\n  _getAccessToken(): string | null {\n    return this.accessToken;\n  }\n\n  /** @internal - called by API interceptor after refresh */\n  _setAccessToken(token: string): void {\n    this.accessToken = token;\n  }\n\n  private notify(): void {\n    const state = this.getState();\n    for (const listener of this.listeners) {\n      listener(state);\n    }\n  }\n\n  private generateDeviceId(): string {\n    const bytes = new Uint8Array(16);\n    crypto.getRandomValues(bytes);\n    return \"dev-\" + Array.from(bytes, (b) => b.toString(16).padStart(2, \"0\")).join(\"\");\n  }\n}\n","import axios, {\n  type AxiosInstance,\n  type AxiosRequestConfig,\n  type AxiosResponse,\n} from \"axios\";\nimport type { AuthManager } from \"../auth/auth-manager.js\";\n\n// Crypto functions — injected from outside to avoid platform-specific imports\nexport interface CryptoProvider {\n  sha256(data: string): Promise<string>;\n  hmacSha256(secret: string, data: string): Promise<string>;\n  randomUUID(): string;\n}\n\n// Default: no-op (signing disabled if no crypto provider)\nlet _crypto: CryptoProvider | null = null;\n\nexport function setCryptoProvider(provider: CryptoProvider): void {\n  _crypto = provider;\n}\n\nfunction generateNonce(): string {\n  if (_crypto) return _crypto.randomUUID();\n  if (typeof globalThis.crypto?.randomUUID === \"function\") {\n    return globalThis.crypto.randomUUID();\n  }\n  const bytes = new Uint8Array(16);\n  if (typeof globalThis.crypto?.getRandomValues === \"function\") {\n    globalThis.crypto.getRandomValues(bytes);\n  } else {\n    for (let i = 0; i < 16; i++) {\n      bytes[i] = Math.floor(Math.random() * 256);\n    }\n  }\n  return Array.from(bytes, (b) => b.toString(16).padStart(2, \"0\")).join(\"\");\n}\n\nexport class ApiClient {\n  readonly instance: AxiosInstance;\n  private refreshPromise: Promise<string | null> | null = null;\n  private appSecret: string | undefined;\n\n  constructor(\n    baseURL: string,\n    private authManager: AuthManager,\n    appSecret?: string,\n  ) {\n    this.appSecret = appSecret;\n\n    this.instance = axios.create({\n      baseURL,\n      headers: { \"Content-Type\": \"application/json\" },\n    });\n\n    // Request interceptor: add Bearer token + signing\n    this.instance.interceptors.request.use(async (config) => {\n      // Skip auth for auth endpoints\n      if (!config.url?.includes(\"/auth/\")) {\n        const token = this.authManager._getAccessToken();\n        if (token) {\n          config.headers.Authorization = `Bearer ${token}`;\n        }\n      }\n\n      // Request signing (only if crypto provider is set)\n      if (this.appSecret && _crypto) {\n        const timestamp = Date.now().toString();\n        const nonce = _crypto.randomUUID();\n        const body =\n          config.data && typeof config.data === \"object\"\n            ? JSON.stringify(config.data)\n            : (config.data ?? \"\");\n        const bodyHash = body ? await _crypto.sha256(body) : \"\";\n        const method = (config.method ?? \"GET\").toUpperCase();\n        const url = config.url ?? \"/\";\n        const payload = [method, url, timestamp, nonce, bodyHash].join(\"\\n\");\n        const signature = await _crypto.hmacSha256(this.appSecret, payload);\n\n        config.headers[\"X-Codixus-Timestamp\"] = timestamp;\n        config.headers[\"X-Codixus-Nonce\"] = nonce;\n        config.headers[\"X-Codixus-Signature\"] = signature;\n      }\n\n      return config;\n    });\n\n    // Response interceptor: handle 401 with token refresh\n    this.instance.interceptors.response.use(\n      (response) => response,\n      async (error) => {\n        if (error.response?.status === 401) {\n          const originalRequest = error.config;\n          if (originalRequest && !originalRequest._retry) {\n            originalRequest._retry = true;\n\n            try {\n              if (!this.refreshPromise) {\n                this.refreshPromise = this.authManager\n                  .forceRefresh()\n                  .finally(() => {\n                    this.refreshPromise = null;\n                  });\n              }\n\n              const newToken = await this.refreshPromise;\n              if (newToken) {\n                originalRequest.headers.Authorization = `Bearer ${newToken}`;\n                return this.instance(originalRequest);\n              }\n            } catch (refreshError) {\n              console.warn(\"[CodixusClient] Token refresh failed:\", refreshError);\n            }\n          }\n        }\n        return Promise.reject(error);\n      },\n    );\n  }\n\n  async get<T = unknown>(url: string, config?: AxiosRequestConfig): Promise<AxiosResponse<T>> {\n    return this.instance.get<T>(url, config);\n  }\n\n  async post<T = unknown>(url: string, data?: unknown, config?: AxiosRequestConfig): Promise<AxiosResponse<T>> {\n    return this.instance.post<T>(url, data, config);\n  }\n\n  async patch<T = unknown>(url: string, data?: unknown, config?: AxiosRequestConfig): Promise<AxiosResponse<T>> {\n    return this.instance.patch<T>(url, data, config);\n  }\n\n  async delete<T = unknown>(url: string, config?: AxiosRequestConfig): Promise<AxiosResponse<T>> {\n    return this.instance.delete<T>(url, config);\n  }\n\n  async put<T = unknown>(url: string, data?: unknown, config?: AxiosRequestConfig): Promise<AxiosResponse<T>> {\n    return this.instance.put<T>(url, data, config);\n  }\n}\n","import type { ApiClient } from \"../api/api-client.js\";\n\nexport interface FindOptions {\n  sort?: Record<string, 1 | -1>;\n  limit?: number;\n  skip?: number;\n  cursor?: string | number;\n}\n\nexport class Collection<T = Record<string, unknown>> {\n  constructor(\n    private api: ApiClient,\n    private basePath: string,\n  ) {}\n\n  async find(\n    filter?: Record<string, unknown>,\n    options?: FindOptions,\n  ): Promise<T[]> {\n    const params = new URLSearchParams();\n    if (filter && Object.keys(filter).length > 0) {\n      params.set(\"filter\", JSON.stringify(filter));\n    }\n    if (options?.sort) params.set(\"sort\", JSON.stringify(options.sort));\n    if (options?.limit) params.set(\"limit\", String(options.limit));\n    if (options?.skip) params.set(\"skip\", String(options.skip));\n    if (options?.cursor) params.set(\"cursor\", String(options.cursor));\n\n    const qs = params.toString();\n    const url = qs ? `${this.basePath}?${qs}` : this.basePath;\n    const { data } = await this.api.get<{ success: boolean; data: T[]; nextCursor?: string | null }>(url);\n    return data.data;\n  }\n\n  async findWithCursor(\n    filter?: Record<string, unknown>,\n    options?: FindOptions,\n  ): Promise<{ data: T[]; nextCursor: string | number | null }> {\n    const params = new URLSearchParams();\n    if (filter && Object.keys(filter).length > 0) {\n      params.set(\"filter\", JSON.stringify(filter));\n    }\n    if (options?.sort) params.set(\"sort\", JSON.stringify(options.sort));\n    if (options?.limit) params.set(\"limit\", String(options.limit));\n    if (options?.cursor) params.set(\"cursor\", String(options.cursor));\n\n    const qs = params.toString();\n    const url = qs ? `${this.basePath}?${qs}` : this.basePath;\n    const { data } = await this.api.get<{ success: boolean; data: T[]; nextCursor: string | number | null }>(url);\n    return { data: data.data, nextCursor: data.nextCursor };\n  }\n\n  async findById(id: string): Promise<T | null> {\n    try {\n      const { data } = await this.api.get<{ success: boolean; data: T }>(\n        `${this.basePath}/${id}`,\n      );\n      return data.data;\n    } catch (error: any) {\n      if (error.response?.status === 404) return null;\n      throw error;\n    }\n  }\n\n  async create(doc: Partial<T> & Record<string, unknown>): Promise<T> {\n    const { data } = await this.api.post<{ success: boolean; data: T }>(\n      this.basePath,\n      doc,\n    );\n    return data.data;\n  }\n\n  async updateById(\n    id: string,\n    update: Record<string, unknown>,\n  ): Promise<T> {\n    const { data } = await this.api.patch<{ success: boolean; data: T }>(\n      `${this.basePath}/${id}`,\n      { update },\n    );\n    return data.data;\n  }\n\n  async deleteById(id: string): Promise<void> {\n    await this.api.delete(`${this.basePath}/${id}`);\n  }\n\n  async count(filter?: Record<string, unknown>): Promise<number> {\n    const { data } = await this.api.post<{ success: boolean; count: number }>(\n      `${this.basePath}/count`,\n      { filter: filter ?? {} },\n    );\n    return data.count;\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;;;AC2BO,IAAM,cAAN,MAAkB;AAAA,EAUvB,YACU,SACR,YACA;AAFQ;AAGR,SAAK,aAAa;AAAA,EACpB;AAAA,EAdQ,cAA6B;AAAA,EAC7B,oBAAmC;AAAA,EACnC,OAAuC;AAAA,EACvC,YAAoC,oBAAI,IAAI;AAAA,EAC5C,aAAa;AAAA,EACb;AAAA,EACA;AAAA,EACA,WAA0B;AAAA;AAAA,EAUlC,QAAQ,KAAsB;AAC5B,SAAK,MAAM;AAAA,EACb;AAAA,EAEA,MAAM,OAAsB;AAC1B,QAAI,CAAC,KAAK,SAAS;AACjB,WAAK,aAAa;AAClB;AAAA,IACF;AAEA,QAAI;AACF,YAAM,gBAAgB,MAAM,KAAK,QAAQ;AAAA,QACvC,GAAG,KAAK,UAAU;AAAA,MACpB;AACA,YAAM,aAAa,MAAM,KAAK,QAAQ;AAAA,QACpC,GAAG,KAAK,UAAU;AAAA,MACpB;AACA,YAAM,iBAAiB,MAAM,KAAK,QAAQ;AAAA,QACxC,GAAG,KAAK,UAAU;AAAA,MACpB;AAEA,UAAI,eAAe;AACjB,aAAK,oBAAoB;AAAA,MAC3B;AACA,UAAI,YAAY;AACd,YAAI;AACF,eAAK,OAAO,KAAK,MAAM,UAAU;AAAA,QACnC,QAAQ;AAAA,QAER;AAAA,MACF;AACA,UAAI,gBAAgB;AAClB,aAAK,WAAW;AAAA,MAClB;AAAA,IACF,SAAS,OAAO;AACd,cAAQ,KAAK,8DAA8D,KAAK;AAAA,IAClF;AAEA,SAAK,aAAa;AAClB,SAAK,OAAO;AAAA,EACd;AAAA,EAEA,MAAM,OACJ,QACgE;AAChE,UAAM,WAAW,OAAO,YAAY,KAAK,YAAY,KAAK,iBAAiB;AAE3E,UAAM,WAAW,MAAM,KAAK,IAAI,KAAwB,eAAe;AAAA,MACrE;AAAA,MACA,YAAY,OAAO;AAAA,MACnB,UAAU,OAAO;AAAA,IACnB,CAAC;AAED,UAAM,OAAO,SAAS;AACtB,SAAK,cAAc,KAAK;AACxB,SAAK,oBAAoB,KAAK;AAC9B,SAAK,OAAO,KAAK;AACjB,SAAK,WAAW;AAGhB,QAAI,KAAK,SAAS;AAChB,YAAM,KAAK,QAAQ;AAAA,QACjB,GAAG,KAAK,UAAU;AAAA,QAClB,KAAK;AAAA,MACP;AACA,YAAM,KAAK,QAAQ;AAAA,QACjB,GAAG,KAAK,UAAU;AAAA,QAClB,KAAK,UAAU,KAAK,IAAI;AAAA,MAC1B;AACA,YAAM,KAAK,QAAQ,QAAQ,GAAG,KAAK,UAAU,cAAc,QAAQ;AAAA,IACrE;AAEA,SAAK,OAAO;AACZ,WAAO,EAAE,MAAM,KAAK,MAAM,WAAW,KAAK,UAAU;AAAA,EACtD;AAAA,EAEA,MAAM,WAAmC;AACvC,QAAI,KAAK,YAAa,QAAO,KAAK;AAGlC,QAAI,KAAK,mBAAmB;AAC1B,UAAI;AACF,cAAM,KAAK,aAAa;AACxB,eAAO,KAAK;AAAA,MACd,QAAQ;AACN,eAAO;AAAA,MACT;AAAA,IACF;AAEA,WAAO;AAAA,EACT;AAAA,EAEA,MAAM,eAAuC;AAC3C,QAAI,CAAC,KAAK,kBAAmB,QAAO;AAEpC,QAAI;AACF,YAAM,WAAW,MAAM,KAAK,IAAI,KAI7B,iBAAiB;AAAA,QAClB,cAAc,KAAK;AAAA,MACrB,CAAC;AAED,WAAK,cAAc,SAAS,KAAK;AACjC,WAAK,oBAAoB,SAAS,KAAK;AAEvC,UAAI,KAAK,SAAS;AAChB,cAAM,KAAK,QAAQ;AAAA,UACjB,GAAG,KAAK,UAAU;AAAA,UAClB,SAAS,KAAK;AAAA,QAChB;AAAA,MACF;AAEA,aAAO,KAAK;AAAA,IACd,QAAQ;AAEN,YAAM,KAAK,QAAQ;AACnB,aAAO;AAAA,IACT;AAAA,EACF;AAAA,EAEA,MAAM,UAAyB;AAE7B,QAAI,KAAK,mBAAmB;AAC1B,UAAI;AACF,cAAM,KAAK,IAAI,KAAK,gBAAgB;AAAA,UAClC,cAAc,KAAK;AAAA,QACrB,CAAC;AAAA,MACH,QAAQ;AAAA,MAAC;AAAA,IACX;AAEA,SAAK,cAAc;AACnB,SAAK,oBAAoB;AACzB,SAAK,OAAO;AAEZ,QAAI,KAAK,SAAS;AAChB,YAAM,KAAK,QAAQ,WAAW,GAAG,KAAK,UAAU,gBAAgB;AAChE,YAAM,KAAK,QAAQ,WAAW,GAAG,KAAK,UAAU,OAAO;AACvD,YAAM,KAAK,QAAQ,WAAW,GAAG,KAAK,UAAU,YAAY;AAAA,IAC9D;AAEA,SAAK,OAAO;AAAA,EACd;AAAA,EAEA,WAAsB;AACpB,WAAO;AAAA,MACL,iBAAiB,KAAK,gBAAgB,QAAQ,KAAK,sBAAsB;AAAA,MACzE,WAAW,KAAK;AAAA,MAChB,MAAM,KAAK;AAAA,IACb;AAAA,EACF;AAAA,EAEA,cAA6B;AAC3B,WAAO,KAAK;AAAA,EACd;AAAA,EAEA,kBAAkB,UAAyC;AACzD,SAAK,UAAU,IAAI,QAAQ;AAE3B,aAAS,KAAK,SAAS,CAAC;AACxB,WAAO,MAAM;AACX,WAAK,UAAU,OAAO,QAAQ;AAAA,IAChC;AAAA,EACF;AAAA;AAAA,EAGA,kBAAiC;AAC/B,WAAO,KAAK;AAAA,EACd;AAAA;AAAA,EAGA,gBAAgB,OAAqB;AACnC,SAAK,cAAc;AAAA,EACrB;AAAA,EAEQ,SAAe;AACrB,UAAM,QAAQ,KAAK,SAAS;AAC5B,eAAW,YAAY,KAAK,WAAW;AACrC,eAAS,KAAK;AAAA,IAChB;AAAA,EACF;AAAA,EAEQ,mBAA2B;AACjC,UAAM,QAAQ,IAAI,WAAW,EAAE;AAC/B,WAAO,gBAAgB,KAAK;AAC5B,WAAO,SAAS,MAAM,KAAK,OAAO,CAAC,MAAM,EAAE,SAAS,EAAE,EAAE,SAAS,GAAG,GAAG,CAAC,EAAE,KAAK,EAAE;AAAA,EACnF;AACF;;;ACzOA,mBAIO;AAWP,IAAI,UAAiC;AAE9B,SAAS,kBAAkB,UAAgC;AAChE,YAAU;AACZ;AAkBO,IAAM,YAAN,MAAgB;AAAA,EAKrB,YACE,SACQ,aACR,WACA;AAFQ;AAGR,SAAK,YAAY;AAEjB,SAAK,WAAW,aAAAA,QAAM,OAAO;AAAA,MAC3B;AAAA,MACA,SAAS,EAAE,gBAAgB,mBAAmB;AAAA,IAChD,CAAC;AAGD,SAAK,SAAS,aAAa,QAAQ,IAAI,OAAO,WAAW;AAEvD,UAAI,CAAC,OAAO,KAAK,SAAS,QAAQ,GAAG;AACnC,cAAM,QAAQ,KAAK,YAAY,gBAAgB;AAC/C,YAAI,OAAO;AACT,iBAAO,QAAQ,gBAAgB,UAAU,KAAK;AAAA,QAChD;AAAA,MACF;AAGA,UAAI,KAAK,aAAa,SAAS;AAC7B,cAAM,YAAY,KAAK,IAAI,EAAE,SAAS;AACtC,cAAM,QAAQ,QAAQ,WAAW;AACjC,cAAM,OACJ,OAAO,QAAQ,OAAO,OAAO,SAAS,WAClC,KAAK,UAAU,OAAO,IAAI,IACzB,OAAO,QAAQ;AACtB,cAAM,WAAW,OAAO,MAAM,QAAQ,OAAO,IAAI,IAAI;AACrD,cAAM,UAAU,OAAO,UAAU,OAAO,YAAY;AACpD,cAAM,MAAM,OAAO,OAAO;AAC1B,cAAM,UAAU,CAAC,QAAQ,KAAK,WAAW,OAAO,QAAQ,EAAE,KAAK,IAAI;AACnE,cAAM,YAAY,MAAM,QAAQ,WAAW,KAAK,WAAW,OAAO;AAElE,eAAO,QAAQ,qBAAqB,IAAI;AACxC,eAAO,QAAQ,iBAAiB,IAAI;AACpC,eAAO,QAAQ,qBAAqB,IAAI;AAAA,MAC1C;AAEA,aAAO;AAAA,IACT,CAAC;AAGD,SAAK,SAAS,aAAa,SAAS;AAAA,MAClC,CAAC,aAAa;AAAA,MACd,OAAO,UAAU;AACf,YAAI,MAAM,UAAU,WAAW,KAAK;AAClC,gBAAM,kBAAkB,MAAM;AAC9B,cAAI,mBAAmB,CAAC,gBAAgB,QAAQ;AAC9C,4BAAgB,SAAS;AAEzB,gBAAI;AACF,kBAAI,CAAC,KAAK,gBAAgB;AACxB,qBAAK,iBAAiB,KAAK,YACxB,aAAa,EACb,QAAQ,MAAM;AACb,uBAAK,iBAAiB;AAAA,gBACxB,CAAC;AAAA,cACL;AAEA,oBAAM,WAAW,MAAM,KAAK;AAC5B,kBAAI,UAAU;AACZ,gCAAgB,QAAQ,gBAAgB,UAAU,QAAQ;AAC1D,uBAAO,KAAK,SAAS,eAAe;AAAA,cACtC;AAAA,YACF,SAAS,cAAc;AACrB,sBAAQ,KAAK,yCAAyC,YAAY;AAAA,YACpE;AAAA,UACF;AAAA,QACF;AACA,eAAO,QAAQ,OAAO,KAAK;AAAA,MAC7B;AAAA,IACF;AAAA,EACF;AAAA,EA/ES;AAAA,EACD,iBAAgD;AAAA,EAChD;AAAA,EA+ER,MAAM,IAAiB,KAAa,QAAwD;AAC1F,WAAO,KAAK,SAAS,IAAO,KAAK,MAAM;AAAA,EACzC;AAAA,EAEA,MAAM,KAAkB,KAAa,MAAgB,QAAwD;AAC3G,WAAO,KAAK,SAAS,KAAQ,KAAK,MAAM,MAAM;AAAA,EAChD;AAAA,EAEA,MAAM,MAAmB,KAAa,MAAgB,QAAwD;AAC5G,WAAO,KAAK,SAAS,MAAS,KAAK,MAAM,MAAM;AAAA,EACjD;AAAA,EAEA,MAAM,OAAoB,KAAa,QAAwD;AAC7F,WAAO,KAAK,SAAS,OAAU,KAAK,MAAM;AAAA,EAC5C;AAAA,EAEA,MAAM,IAAiB,KAAa,MAAgB,QAAwD;AAC1G,WAAO,KAAK,SAAS,IAAO,KAAK,MAAM,MAAM;AAAA,EAC/C;AACF;;;ACjIO,IAAM,aAAN,MAA8C;AAAA,EACnD,YACU,KACA,UACR;AAFQ;AACA;AAAA,EACP;AAAA,EAEH,MAAM,KACJ,QACA,SACc;AACd,UAAM,SAAS,IAAI,gBAAgB;AACnC,QAAI,UAAU,OAAO,KAAK,MAAM,EAAE,SAAS,GAAG;AAC5C,aAAO,IAAI,UAAU,KAAK,UAAU,MAAM,CAAC;AAAA,IAC7C;AACA,QAAI,SAAS,KAAM,QAAO,IAAI,QAAQ,KAAK,UAAU,QAAQ,IAAI,CAAC;AAClE,QAAI,SAAS,MAAO,QAAO,IAAI,SAAS,OAAO,QAAQ,KAAK,CAAC;AAC7D,QAAI,SAAS,KAAM,QAAO,IAAI,QAAQ,OAAO,QAAQ,IAAI,CAAC;AAC1D,QAAI,SAAS,OAAQ,QAAO,IAAI,UAAU,OAAO,QAAQ,MAAM,CAAC;AAEhE,UAAM,KAAK,OAAO,SAAS;AAC3B,UAAM,MAAM,KAAK,GAAG,KAAK,QAAQ,IAAI,EAAE,KAAK,KAAK;AACjD,UAAM,EAAE,KAAK,IAAI,MAAM,KAAK,IAAI,IAAiE,GAAG;AACpG,WAAO,KAAK;AAAA,EACd;AAAA,EAEA,MAAM,eACJ,QACA,SAC4D;AAC5D,UAAM,SAAS,IAAI,gBAAgB;AACnC,QAAI,UAAU,OAAO,KAAK,MAAM,EAAE,SAAS,GAAG;AAC5C,aAAO,IAAI,UAAU,KAAK,UAAU,MAAM,CAAC;AAAA,IAC7C;AACA,QAAI,SAAS,KAAM,QAAO,IAAI,QAAQ,KAAK,UAAU,QAAQ,IAAI,CAAC;AAClE,QAAI,SAAS,MAAO,QAAO,IAAI,SAAS,OAAO,QAAQ,KAAK,CAAC;AAC7D,QAAI,SAAS,OAAQ,QAAO,IAAI,UAAU,OAAO,QAAQ,MAAM,CAAC;AAEhE,UAAM,KAAK,OAAO,SAAS;AAC3B,UAAM,MAAM,KAAK,GAAG,KAAK,QAAQ,IAAI,EAAE,KAAK,KAAK;AACjD,UAAM,EAAE,KAAK,IAAI,MAAM,KAAK,IAAI,IAAyE,GAAG;AAC5G,WAAO,EAAE,MAAM,KAAK,MAAM,YAAY,KAAK,WAAW;AAAA,EACxD;AAAA,EAEA,MAAM,SAAS,IAA+B;AAC5C,QAAI;AACF,YAAM,EAAE,KAAK,IAAI,MAAM,KAAK,IAAI;AAAA,QAC9B,GAAG,KAAK,QAAQ,IAAI,EAAE;AAAA,MACxB;AACA,aAAO,KAAK;AAAA,IACd,SAAS,OAAY;AACnB,UAAI,MAAM,UAAU,WAAW,IAAK,QAAO;AAC3C,YAAM;AAAA,IACR;AAAA,EACF;AAAA,EAEA,MAAM,OAAO,KAAuD;AAClE,UAAM,EAAE,KAAK,IAAI,MAAM,KAAK,IAAI;AAAA,MAC9B,KAAK;AAAA,MACL;AAAA,IACF;AACA,WAAO,KAAK;AAAA,EACd;AAAA,EAEA,MAAM,WACJ,IACA,QACY;AACZ,UAAM,EAAE,KAAK,IAAI,MAAM,KAAK,IAAI;AAAA,MAC9B,GAAG,KAAK,QAAQ,IAAI,EAAE;AAAA,MACtB,EAAE,OAAO;AAAA,IACX;AACA,WAAO,KAAK;AAAA,EACd;AAAA,EAEA,MAAM,WAAW,IAA2B;AAC1C,UAAM,KAAK,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,EAAE,EAAE;AAAA,EAChD;AAAA,EAEA,MAAM,MAAM,QAAmD;AAC7D,UAAM,EAAE,KAAK,IAAI,MAAM,KAAK,IAAI;AAAA,MAC9B,GAAG,KAAK,QAAQ;AAAA,MAChB,EAAE,QAAQ,UAAU,CAAC,EAAE;AAAA,IACzB;AACA,WAAO,KAAK;AAAA,EACd;AACF;;;AHrCA,oBAUO;AAnDA,IAAM,gBAAN,MAAoB;AAAA,EAChB;AAAA,EACA;AAAA,EAET,YAAY,QAA6B;AACvC,UAAM,aAAa,OAAO,cAAc;AACxC,UAAM,UAAU,OAAO,WAAW;AAElC,SAAK,OAAO,IAAI,YAAY,SAAS,UAAU;AAC/C,SAAK,MAAM,IAAI,UAAU,OAAO,QAAQ,KAAK,MAAM,OAAO,SAAS;AACnE,SAAK,KAAK,QAAQ,KAAK,GAAG;AAAA,EAC5B;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAYA,WAAc,MAA6B;AACzC,WAAO,IAAI,WAAc,KAAK,KAAK,QAAQ,IAAI,EAAE;AAAA,EACnD;AAAA,EAEA,MAAM,OAAsB;AAC1B,UAAM,KAAK,KAAK,KAAK;AAAA,EACvB;AACF;","names":["axios"]}

package/dist/index.d.cts

@@ -2,6 +2,12 @@ import { DeviceInfo, DeviceMetadata } from '@codixus/shared';
 export { ApiResponse, AuthTokenRequest, AuthTokenResponse, AuthUser, CodixusError, DeviceInfo, DeviceMetadata, ErrorCodes, TokenPair } from '@codixus/shared';
 import { AxiosInstance, AxiosRequestConfig, AxiosResponse } from 'axios';
 
+interface CryptoProvider {
+    sha256(data: string): Promise<string>;
+    hmacSha256(secret: string, data: string): Promise<string>;
+    randomUUID(): string;
+}
+declare function setCryptoProvider(provider: CryptoProvider): void;
 declare class ApiClient {
     private authManager;
     readonly instance: AxiosInstance;
@@ -109,4 +115,4 @@ declare class CodixusClient {
     init(): Promise<void>;
 }
 
-export { ApiClient, type AuthState, CodixusClient, type CodixusClientConfig, Collection, type FindOptions, type SignInParams, type StorageAdapter };
+export { ApiClient, type AuthState, CodixusClient, type CodixusClientConfig, Collection, type CryptoProvider, type FindOptions, type SignInParams, type StorageAdapter, setCryptoProvider };

package/dist/index.d.ts

@@ -2,6 +2,12 @@ import { DeviceInfo, DeviceMetadata } from '@codixus/shared';
 export { ApiResponse, AuthTokenRequest, AuthTokenResponse, AuthUser, CodixusError, DeviceInfo, DeviceMetadata, ErrorCodes, TokenPair } from '@codixus/shared';
 import { AxiosInstance, AxiosRequestConfig, AxiosResponse } from 'axios';
 
+interface CryptoProvider {
+    sha256(data: string): Promise<string>;
+    hmacSha256(secret: string, data: string): Promise<string>;
+    randomUUID(): string;
+}
+declare function setCryptoProvider(provider: CryptoProvider): void;
 declare class ApiClient {
     private authManager;
     readonly instance: AxiosInstance;
@@ -109,4 +115,4 @@ declare class CodixusClient {
     init(): Promise<void>;
 }
 
-export { ApiClient, type AuthState, CodixusClient, type CodixusClientConfig, Collection, type FindOptions, type SignInParams, type StorageAdapter };
+export { ApiClient, type AuthState, CodixusClient, type CodixusClientConfig, Collection, type CryptoProvider, type FindOptions, type SignInParams, type StorageAdapter, setCryptoProvider };

package/dist/index.js

@@ -166,63 +166,9 @@ var AuthManager = class {
 
 // src/api/api-client.ts
 import axios from "axios";
-async function sha256(data) {
-  if (typeof globalThis.crypto?.subtle !== "undefined") {
-    const encoded = new TextEncoder().encode(data);
-    const hash = await globalThis.crypto.subtle.digest("SHA-256", encoded);
-    return Array.from(
-      new Uint8Array(hash),
-      (b) => b.toString(16).padStart(2, "0")
-    ).join("");
-  }
-  return simpleHash(data);
-}
-async function hmacSha256(secret, data) {
-  if (typeof globalThis.crypto?.subtle !== "undefined") {
-    const key = await globalThis.crypto.subtle.importKey(
-      "raw",
-      new TextEncoder().encode(secret),
-      { name: "HMAC", hash: "SHA-256" },
-      false,
-      ["sign"]
-    );
-    const sig = await globalThis.crypto.subtle.sign(
-      "HMAC",
-      key,
-      new TextEncoder().encode(data)
-    );
-    return Array.from(
-      new Uint8Array(sig),
-      (b) => b.toString(16).padStart(2, "0")
-    ).join("");
-  }
-  return simpleHmac(secret, data);
-}
-function simpleHash(str) {
-  let hash = 0;
-  for (let i = 0; i < str.length; i++) {
-    const char = str.charCodeAt(i);
-    hash = (hash << 5) - hash + char;
-    hash |= 0;
-  }
-  return Math.abs(hash).toString(16).padStart(16, "0");
-}
-function simpleHmac(key, data) {
-  return simpleHash(key + ":" + data);
-}
-function generateNonce() {
-  if (typeof globalThis.crypto?.randomUUID === "function") {
-    return globalThis.crypto.randomUUID();
-  }
-  const bytes = new Uint8Array(16);
-  if (typeof globalThis.crypto?.getRandomValues === "function") {
-    globalThis.crypto.getRandomValues(bytes);
-  } else {
-    for (let i = 0; i < 16; i++) {
-      bytes[i] = Math.floor(Math.random() * 256);
-    }
-  }
-  return Array.from(bytes, (b) => b.toString(16).padStart(2, "0")).join("");
+var _crypto = null;
+function setCryptoProvider(provider) {
+  _crypto = provider;
 }
 var ApiClient = class {
   constructor(baseURL, authManager, appSecret) {
@@ -239,15 +185,15 @@ var ApiClient = class {
           config.headers.Authorization = `Bearer ${token}`;
         }
       }
-      if (this.appSecret) {
+      if (this.appSecret && _crypto) {
         const timestamp = Date.now().toString();
-        const nonce = generateNonce();
+        const nonce = _crypto.randomUUID();
         const body = config.data && typeof config.data === "object" ? JSON.stringify(config.data) : config.data ?? "";
-        const bodyHash = body ? await sha256(body) : "";
+        const bodyHash = body ? await _crypto.sha256(body) : "";
         const method = (config.method ?? "GET").toUpperCase();
         const url = config.url ?? "/";
         const payload = [method, url, timestamp, nonce, bodyHash].join("\n");
-        const signature = await hmacSha256(this.appSecret, payload);
+        const signature = await _crypto.hmacSha256(this.appSecret, payload);
         config.headers["X-Codixus-Timestamp"] = timestamp;
         config.headers["X-Codixus-Nonce"] = nonce;
         config.headers["X-Codixus-Signature"] = signature;
@@ -408,6 +354,7 @@ export {
   CodixusClient,
   CodixusError,
   Collection,
-  ErrorCodes
+  ErrorCodes,
+  setCryptoProvider
 };
 //# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/auth/auth-manager.ts","../src/api/api-client.ts","../src/db/collection.ts","../src/index.ts"],"sourcesContent":["import type {\n  AuthTokenResponse,\n  DeviceInfo,\n  DeviceMetadata,\n} from \"@codixus/shared\";\nimport type { ApiClient } from \"../api/api-client.js\";\n\nexport interface StorageAdapter {\n  getItem(key: string): Promise<string | null> | string | null;\n  setItem(key: string, value: string): Promise<void> | void;\n  removeItem(key: string): Promise<void> | void;\n}\n\nexport interface SignInParams {\n  deviceId?: string;\n  deviceInfo: DeviceInfo;\n  metadata?: DeviceMetadata;\n}\n\nexport interface AuthState {\n  isAuthenticated: boolean;\n  isLoading: boolean;\n  user: Record<string, unknown> | null;\n}\n\ntype AuthStateListener = (state: AuthState) => void;\n\nexport class AuthManager {\n  private accessToken: string | null = null;\n  private refreshTokenValue: string | null = null;\n  private user: Record<string, unknown> | null = null;\n  private listeners: Set<AuthStateListener> = new Set();\n  private _isLoading = true;\n  private storageKey: string;\n  private api!: ApiClient;\n  private deviceId: string | null = null;\n\n  constructor(\n    private storage: StorageAdapter | null,\n    storageKey: string,\n  ) {\n    this.storageKey = storageKey;\n  }\n\n  /** @internal */\n  _setApi(api: ApiClient): void {\n    this.api = api;\n  }\n\n  async init(): Promise<void> {\n    if (!this.storage) {\n      this._isLoading = false;\n      return;\n    }\n\n    try {\n      const storedRefresh = await this.storage.getItem(\n        `${this.storageKey}_refresh_token`,\n      );\n      const storedUser = await this.storage.getItem(\n        `${this.storageKey}_user`,\n      );\n      const storedDeviceId = await this.storage.getItem(\n        `${this.storageKey}_device_id`,\n      );\n\n      if (storedRefresh) {\n        this.refreshTokenValue = storedRefresh;\n      }\n      if (storedUser) {\n        try {\n          this.user = JSON.parse(storedUser);\n        } catch {\n          // Corrupted user data in storage, ignore\n        }\n      }\n      if (storedDeviceId) {\n        this.deviceId = storedDeviceId;\n      }\n    } catch (error) {\n      console.warn(\"[CodixusClient] Failed to restore auth state from storage:\", error);\n    }\n\n    this._isLoading = false;\n    this.notify();\n  }\n\n  async signIn(\n    params: SignInParams,\n  ): Promise<{ user: Record<string, unknown>; isNewUser: boolean }> {\n    const deviceId = params.deviceId ?? this.deviceId ?? this.generateDeviceId();\n\n    const response = await this.api.post<AuthTokenResponse>(\"/auth/token\", {\n      deviceId,\n      deviceInfo: params.deviceInfo,\n      metadata: params.metadata,\n    });\n\n    const data = response.data;\n    this.accessToken = data.accessToken;\n    this.refreshTokenValue = data.refreshToken;\n    this.user = data.user;\n    this.deviceId = deviceId;\n\n    // Persist\n    if (this.storage) {\n      await this.storage.setItem(\n        `${this.storageKey}_refresh_token`,\n        data.refreshToken,\n      );\n      await this.storage.setItem(\n        `${this.storageKey}_user`,\n        JSON.stringify(data.user),\n      );\n      await this.storage.setItem(`${this.storageKey}_device_id`, deviceId);\n    }\n\n    this.notify();\n    return { user: data.user, isNewUser: data.isNewUser };\n  }\n\n  async getToken(): Promise<string | null> {\n    if (this.accessToken) return this.accessToken;\n\n    // Try refresh\n    if (this.refreshTokenValue) {\n      try {\n        await this.forceRefresh();\n        return this.accessToken;\n      } catch {\n        return null;\n      }\n    }\n\n    return null;\n  }\n\n  async forceRefresh(): Promise<string | null> {\n    if (!this.refreshTokenValue) return null;\n\n    try {\n      const response = await this.api.post<{\n        success: boolean;\n        accessToken: string;\n        refreshToken: string;\n      }>(\"/auth/refresh\", {\n        refreshToken: this.refreshTokenValue,\n      });\n\n      this.accessToken = response.data.accessToken;\n      this.refreshTokenValue = response.data.refreshToken;\n\n      if (this.storage) {\n        await this.storage.setItem(\n          `${this.storageKey}_refresh_token`,\n          response.data.refreshToken,\n        );\n      }\n\n      return this.accessToken;\n    } catch {\n      // Refresh failed, clear auth state\n      await this.signOut();\n      return null;\n    }\n  }\n\n  async signOut(): Promise<void> {\n    // Notify server\n    if (this.refreshTokenValue) {\n      try {\n        await this.api.post(\"/auth/logout\", {\n          refreshToken: this.refreshTokenValue,\n        });\n      } catch {}\n    }\n\n    this.accessToken = null;\n    this.refreshTokenValue = null;\n    this.user = null;\n\n    if (this.storage) {\n      await this.storage.removeItem(`${this.storageKey}_refresh_token`);\n      await this.storage.removeItem(`${this.storageKey}_user`);\n      await this.storage.removeItem(`${this.storageKey}_device_id`);\n    }\n\n    this.notify();\n  }\n\n  getState(): AuthState {\n    return {\n      isAuthenticated: this.accessToken !== null || this.refreshTokenValue !== null,\n      isLoading: this._isLoading,\n      user: this.user,\n    };\n  }\n\n  getDeviceId(): string | null {\n    return this.deviceId;\n  }\n\n  onAuthStateChange(listener: AuthStateListener): () => void {\n    this.listeners.add(listener);\n    // Call immediately with current state\n    listener(this.getState());\n    return () => {\n      this.listeners.delete(listener);\n    };\n  }\n\n  /** @internal - used by API interceptor */\n  _getAccessToken(): string | null {\n    return this.accessToken;\n  }\n\n  /** @internal - called by API interceptor after refresh */\n  _setAccessToken(token: string): void {\n    this.accessToken = token;\n  }\n\n  private notify(): void {\n    const state = this.getState();\n    for (const listener of this.listeners) {\n      listener(state);\n    }\n  }\n\n  private generateDeviceId(): string {\n    const bytes = new Uint8Array(16);\n    crypto.getRandomValues(bytes);\n    return \"dev-\" + Array.from(bytes, (b) => b.toString(16).padStart(2, \"0\")).join(\"\");\n  }\n}\n","import axios, {\n  type AxiosInstance,\n  type AxiosRequestConfig,\n  type AxiosResponse,\n} from \"axios\";\nimport type { AuthManager } from \"../auth/auth-manager.js\";\n\n// Lightweight crypto helpers that work in both browser and React Native\nasync function sha256(data: string): Promise<string> {\n  if (typeof globalThis.crypto?.subtle !== \"undefined\") {\n    const encoded = new TextEncoder().encode(data);\n    const hash = await globalThis.crypto.subtle.digest(\"SHA-256\", encoded);\n    return Array.from(new Uint8Array(hash), (b) =>\n      b.toString(16).padStart(2, \"0\"),\n    ).join(\"\");\n  }\n  // Fallback: simple hash (React Native without crypto.subtle)\n  return simpleHash(data);\n}\n\nasync function hmacSha256(secret: string, data: string): Promise<string> {\n  if (typeof globalThis.crypto?.subtle !== \"undefined\") {\n    const key = await globalThis.crypto.subtle.importKey(\n      \"raw\",\n      new TextEncoder().encode(secret),\n      { name: \"HMAC\", hash: \"SHA-256\" },\n      false,\n      [\"sign\"],\n    );\n    const sig = await globalThis.crypto.subtle.sign(\n      \"HMAC\",\n      key,\n      new TextEncoder().encode(data),\n    );\n    return Array.from(new Uint8Array(sig), (b) =>\n      b.toString(16).padStart(2, \"0\"),\n    ).join(\"\");\n  }\n  // Fallback for environments without SubtleCrypto\n  return simpleHmac(secret, data);\n}\n\n// Simple fallback hash for environments without SubtleCrypto\nfunction simpleHash(str: string): string {\n  let hash = 0;\n  for (let i = 0; i < str.length; i++) {\n    const char = str.charCodeAt(i);\n    hash = (hash << 5) - hash + char;\n    hash |= 0;\n  }\n  return Math.abs(hash).toString(16).padStart(16, \"0\");\n}\n\nfunction simpleHmac(key: string, data: string): string {\n  return simpleHash(key + \":\" + data);\n}\n\nfunction generateNonce(): string {\n  if (typeof globalThis.crypto?.randomUUID === \"function\") {\n    return globalThis.crypto.randomUUID();\n  }\n  // Fallback\n  const bytes = new Uint8Array(16);\n  if (typeof globalThis.crypto?.getRandomValues === \"function\") {\n    globalThis.crypto.getRandomValues(bytes);\n  } else {\n    for (let i = 0; i < 16; i++) {\n      bytes[i] = Math.floor(Math.random() * 256);\n    }\n  }\n  return Array.from(bytes, (b) => b.toString(16).padStart(2, \"0\")).join(\"\");\n}\n\nexport class ApiClient {\n  readonly instance: AxiosInstance;\n  private refreshPromise: Promise<string | null> | null = null;\n  private appSecret: string | undefined;\n\n  constructor(\n    baseURL: string,\n    private authManager: AuthManager,\n    appSecret?: string,\n  ) {\n    this.appSecret = appSecret;\n\n    this.instance = axios.create({\n      baseURL,\n      headers: { \"Content-Type\": \"application/json\" },\n    });\n\n    // Request interceptor: add Bearer token + signing\n    this.instance.interceptors.request.use(async (config) => {\n      // Skip auth for auth endpoints\n      if (!config.url?.includes(\"/auth/\")) {\n        const token = this.authManager._getAccessToken();\n        if (token) {\n          config.headers.Authorization = `Bearer ${token}`;\n        }\n      }\n\n      // Request signing\n      if (this.appSecret) {\n        const timestamp = Date.now().toString();\n        const nonce = generateNonce();\n        const body =\n          config.data && typeof config.data === \"object\"\n            ? JSON.stringify(config.data)\n            : (config.data ?? \"\");\n        const bodyHash = body ? await sha256(body) : \"\";\n        const method = (config.method ?? \"GET\").toUpperCase();\n        const url = config.url ?? \"/\";\n        const payload = [method, url, timestamp, nonce, bodyHash].join(\"\\n\");\n        const signature = await hmacSha256(this.appSecret, payload);\n\n        config.headers[\"X-Codixus-Timestamp\"] = timestamp;\n        config.headers[\"X-Codixus-Nonce\"] = nonce;\n        config.headers[\"X-Codixus-Signature\"] = signature;\n      }\n\n      return config;\n    });\n\n    // Response interceptor: handle 401 with token refresh\n    this.instance.interceptors.response.use(\n      (response) => response,\n      async (error) => {\n        if (error.response?.status === 401) {\n          const originalRequest = error.config;\n          if (originalRequest && !originalRequest._retry) {\n            originalRequest._retry = true;\n\n            try {\n              // Promise lock to prevent concurrent refreshes\n              if (!this.refreshPromise) {\n                this.refreshPromise = this.authManager\n                  .forceRefresh()\n                  .finally(() => {\n                    this.refreshPromise = null;\n                  });\n              }\n\n              const newToken = await this.refreshPromise;\n              if (newToken) {\n                originalRequest.headers.Authorization = `Bearer ${newToken}`;\n                return this.instance(originalRequest);\n              }\n            } catch (refreshError) {\n              console.warn(\"[CodixusClient] Token refresh failed:\", refreshError);\n            }\n          }\n        }\n        return Promise.reject(error);\n      },\n    );\n  }\n\n  async get<T = unknown>(\n    url: string,\n    config?: AxiosRequestConfig,\n  ): Promise<AxiosResponse<T>> {\n    return this.instance.get<T>(url, config);\n  }\n\n  async post<T = unknown>(\n    url: string,\n    data?: unknown,\n    config?: AxiosRequestConfig,\n  ): Promise<AxiosResponse<T>> {\n    return this.instance.post<T>(url, data, config);\n  }\n\n  async patch<T = unknown>(\n    url: string,\n    data?: unknown,\n    config?: AxiosRequestConfig,\n  ): Promise<AxiosResponse<T>> {\n    return this.instance.patch<T>(url, data, config);\n  }\n\n  async delete<T = unknown>(\n    url: string,\n    config?: AxiosRequestConfig,\n  ): Promise<AxiosResponse<T>> {\n    return this.instance.delete<T>(url, config);\n  }\n\n  async put<T = unknown>(\n    url: string,\n    data?: unknown,\n    config?: AxiosRequestConfig,\n  ): Promise<AxiosResponse<T>> {\n    return this.instance.put<T>(url, data, config);\n  }\n}\n","import type { ApiClient } from \"../api/api-client.js\";\n\nexport interface FindOptions {\n  sort?: Record<string, 1 | -1>;\n  limit?: number;\n  skip?: number;\n  cursor?: string | number;\n}\n\nexport class Collection<T = Record<string, unknown>> {\n  constructor(\n    private api: ApiClient,\n    private basePath: string,\n  ) {}\n\n  async find(\n    filter?: Record<string, unknown>,\n    options?: FindOptions,\n  ): Promise<T[]> {\n    const params = new URLSearchParams();\n    if (filter && Object.keys(filter).length > 0) {\n      params.set(\"filter\", JSON.stringify(filter));\n    }\n    if (options?.sort) params.set(\"sort\", JSON.stringify(options.sort));\n    if (options?.limit) params.set(\"limit\", String(options.limit));\n    if (options?.skip) params.set(\"skip\", String(options.skip));\n    if (options?.cursor) params.set(\"cursor\", String(options.cursor));\n\n    const qs = params.toString();\n    const url = qs ? `${this.basePath}?${qs}` : this.basePath;\n    const { data } = await this.api.get<{ success: boolean; data: T[]; nextCursor?: string | null }>(url);\n    return data.data;\n  }\n\n  async findWithCursor(\n    filter?: Record<string, unknown>,\n    options?: FindOptions,\n  ): Promise<{ data: T[]; nextCursor: string | number | null }> {\n    const params = new URLSearchParams();\n    if (filter && Object.keys(filter).length > 0) {\n      params.set(\"filter\", JSON.stringify(filter));\n    }\n    if (options?.sort) params.set(\"sort\", JSON.stringify(options.sort));\n    if (options?.limit) params.set(\"limit\", String(options.limit));\n    if (options?.cursor) params.set(\"cursor\", String(options.cursor));\n\n    const qs = params.toString();\n    const url = qs ? `${this.basePath}?${qs}` : this.basePath;\n    const { data } = await this.api.get<{ success: boolean; data: T[]; nextCursor: string | number | null }>(url);\n    return { data: data.data, nextCursor: data.nextCursor };\n  }\n\n  async findById(id: string): Promise<T | null> {\n    try {\n      const { data } = await this.api.get<{ success: boolean; data: T }>(\n        `${this.basePath}/${id}`,\n      );\n      return data.data;\n    } catch (error: any) {\n      if (error.response?.status === 404) return null;\n      throw error;\n    }\n  }\n\n  async create(doc: Partial<T> & Record<string, unknown>): Promise<T> {\n    const { data } = await this.api.post<{ success: boolean; data: T }>(\n      this.basePath,\n      doc,\n    );\n    return data.data;\n  }\n\n  async updateById(\n    id: string,\n    update: Record<string, unknown>,\n  ): Promise<T> {\n    const { data } = await this.api.patch<{ success: boolean; data: T }>(\n      `${this.basePath}/${id}`,\n      { update },\n    );\n    return data.data;\n  }\n\n  async deleteById(id: string): Promise<void> {\n    await this.api.delete(`${this.basePath}/${id}`);\n  }\n\n  async count(filter?: Record<string, unknown>): Promise<number> {\n    const { data } = await this.api.post<{ success: boolean; count: number }>(\n      `${this.basePath}/count`,\n      { filter: filter ?? {} },\n    );\n    return data.count;\n  }\n}\n","import {\n  AuthManager,\n  type StorageAdapter,\n  type SignInParams,\n  type AuthState,\n} from \"./auth/auth-manager.js\";\nimport { ApiClient } from \"./api/api-client.js\";\nimport { Collection, type FindOptions } from \"./db/collection.js\";\n\nexport interface CodixusClientConfig {\n  apiUrl: string;\n  storageKey?: string;\n  storage?: StorageAdapter | null;\n  appSecret?: string;\n}\n\nexport class CodixusClient {\n  readonly auth: AuthManager;\n  readonly api: ApiClient;\n\n  constructor(config: CodixusClientConfig) {\n    const storageKey = config.storageKey ?? \"codixus\";\n    const storage = config.storage ?? null;\n\n    this.auth = new AuthManager(storage, storageKey);\n    this.api = new ApiClient(config.apiUrl, this.auth, config.appSecret);\n    this.auth._setApi(this.api);\n  }\n\n  /**\n   * Create a typed collection accessor.\n   * Maps to auto REST routes on server: codixus.rest(Model)\n   *\n   * @example\n   * interface Product { _id: string; name: string; price: number; }\n   * const products = codixus.collection<Product>(\"products\");\n   * const all = await products.find();            // Product[]\n   * const one = await products.findById(\"abc\");   // Product | null\n   */\n  collection<T>(name: string): Collection<T> {\n    return new Collection<T>(this.api, `/api/${name}`);\n  }\n\n  async init(): Promise<void> {\n    await this.auth.init();\n  }\n}\n\nexport {\n  type StorageAdapter,\n  type SignInParams,\n  type AuthState,\n} from \"./auth/auth-manager.js\";\nexport { ApiClient } from \"./api/api-client.js\";\nexport { Collection, type FindOptions } from \"./db/collection.js\";\n\n// Re-export shared types\nexport {\n  type AuthUser,\n  type TokenPair,\n  type DeviceInfo,\n  type DeviceMetadata,\n  type AuthTokenRequest,\n  type AuthTokenResponse,\n  type ApiResponse,\n  CodixusError,\n  ErrorCodes,\n} from \"@codixus/shared\";\n"],"mappings":";AA2BO,IAAM,cAAN,MAAkB;AAAA,EAUvB,YACU,SACR,YACA;AAFQ;AAGR,SAAK,aAAa;AAAA,EACpB;AAAA,EAdQ,cAA6B;AAAA,EAC7B,oBAAmC;AAAA,EACnC,OAAuC;AAAA,EACvC,YAAoC,oBAAI,IAAI;AAAA,EAC5C,aAAa;AAAA,EACb;AAAA,EACA;AAAA,EACA,WAA0B;AAAA;AAAA,EAUlC,QAAQ,KAAsB;AAC5B,SAAK,MAAM;AAAA,EACb;AAAA,EAEA,MAAM,OAAsB;AAC1B,QAAI,CAAC,KAAK,SAAS;AACjB,WAAK,aAAa;AAClB;AAAA,IACF;AAEA,QAAI;AACF,YAAM,gBAAgB,MAAM,KAAK,QAAQ;AAAA,QACvC,GAAG,KAAK,UAAU;AAAA,MACpB;AACA,YAAM,aAAa,MAAM,KAAK,QAAQ;AAAA,QACpC,GAAG,KAAK,UAAU;AAAA,MACpB;AACA,YAAM,iBAAiB,MAAM,KAAK,QAAQ;AAAA,QACxC,GAAG,KAAK,UAAU;AAAA,MACpB;AAEA,UAAI,eAAe;AACjB,aAAK,oBAAoB;AAAA,MAC3B;AACA,UAAI,YAAY;AACd,YAAI;AACF,eAAK,OAAO,KAAK,MAAM,UAAU;AAAA,QACnC,QAAQ;AAAA,QAER;AAAA,MACF;AACA,UAAI,gBAAgB;AAClB,aAAK,WAAW;AAAA,MAClB;AAAA,IACF,SAAS,OAAO;AACd,cAAQ,KAAK,8DAA8D,KAAK;AAAA,IAClF;AAEA,SAAK,aAAa;AAClB,SAAK,OAAO;AAAA,EACd;AAAA,EAEA,MAAM,OACJ,QACgE;AAChE,UAAM,WAAW,OAAO,YAAY,KAAK,YAAY,KAAK,iBAAiB;AAE3E,UAAM,WAAW,MAAM,KAAK,IAAI,KAAwB,eAAe;AAAA,MACrE;AAAA,MACA,YAAY,OAAO;AAAA,MACnB,UAAU,OAAO;AAAA,IACnB,CAAC;AAED,UAAM,OAAO,SAAS;AACtB,SAAK,cAAc,KAAK;AACxB,SAAK,oBAAoB,KAAK;AAC9B,SAAK,OAAO,KAAK;AACjB,SAAK,WAAW;AAGhB,QAAI,KAAK,SAAS;AAChB,YAAM,KAAK,QAAQ;AAAA,QACjB,GAAG,KAAK,UAAU;AAAA,QAClB,KAAK;AAAA,MACP;AACA,YAAM,KAAK,QAAQ;AAAA,QACjB,GAAG,KAAK,UAAU;AAAA,QAClB,KAAK,UAAU,KAAK,IAAI;AAAA,MAC1B;AACA,YAAM,KAAK,QAAQ,QAAQ,GAAG,KAAK,UAAU,cAAc,QAAQ;AAAA,IACrE;AAEA,SAAK,OAAO;AACZ,WAAO,EAAE,MAAM,KAAK,MAAM,WAAW,KAAK,UAAU;AAAA,EACtD;AAAA,EAEA,MAAM,WAAmC;AACvC,QAAI,KAAK,YAAa,QAAO,KAAK;AAGlC,QAAI,KAAK,mBAAmB;AAC1B,UAAI;AACF,cAAM,KAAK,aAAa;AACxB,eAAO,KAAK;AAAA,MACd,QAAQ;AACN,eAAO;AAAA,MACT;AAAA,IACF;AAEA,WAAO;AAAA,EACT;AAAA,EAEA,MAAM,eAAuC;AAC3C,QAAI,CAAC,KAAK,kBAAmB,QAAO;AAEpC,QAAI;AACF,YAAM,WAAW,MAAM,KAAK,IAAI,KAI7B,iBAAiB;AAAA,QAClB,cAAc,KAAK;AAAA,MACrB,CAAC;AAED,WAAK,cAAc,SAAS,KAAK;AACjC,WAAK,oBAAoB,SAAS,KAAK;AAEvC,UAAI,KAAK,SAAS;AAChB,cAAM,KAAK,QAAQ;AAAA,UACjB,GAAG,KAAK,UAAU;AAAA,UAClB,SAAS,KAAK;AAAA,QAChB;AAAA,MACF;AAEA,aAAO,KAAK;AAAA,IACd,QAAQ;AAEN,YAAM,KAAK,QAAQ;AACnB,aAAO;AAAA,IACT;AAAA,EACF;AAAA,EAEA,MAAM,UAAyB;AAE7B,QAAI,KAAK,mBAAmB;AAC1B,UAAI;AACF,cAAM,KAAK,IAAI,KAAK,gBAAgB;AAAA,UAClC,cAAc,KAAK;AAAA,QACrB,CAAC;AAAA,MACH,QAAQ;AAAA,MAAC;AAAA,IACX;AAEA,SAAK,cAAc;AACnB,SAAK,oBAAoB;AACzB,SAAK,OAAO;AAEZ,QAAI,KAAK,SAAS;AAChB,YAAM,KAAK,QAAQ,WAAW,GAAG,KAAK,UAAU,gBAAgB;AAChE,YAAM,KAAK,QAAQ,WAAW,GAAG,KAAK,UAAU,OAAO;AACvD,YAAM,KAAK,QAAQ,WAAW,GAAG,KAAK,UAAU,YAAY;AAAA,IAC9D;AAEA,SAAK,OAAO;AAAA,EACd;AAAA,EAEA,WAAsB;AACpB,WAAO;AAAA,MACL,iBAAiB,KAAK,gBAAgB,QAAQ,KAAK,sBAAsB;AAAA,MACzE,WAAW,KAAK;AAAA,MAChB,MAAM,KAAK;AAAA,IACb;AAAA,EACF;AAAA,EAEA,cAA6B;AAC3B,WAAO,KAAK;AAAA,EACd;AAAA,EAEA,kBAAkB,UAAyC;AACzD,SAAK,UAAU,IAAI,QAAQ;AAE3B,aAAS,KAAK,SAAS,CAAC;AACxB,WAAO,MAAM;AACX,WAAK,UAAU,OAAO,QAAQ;AAAA,IAChC;AAAA,EACF;AAAA;AAAA,EAGA,kBAAiC;AAC/B,WAAO,KAAK;AAAA,EACd;AAAA;AAAA,EAGA,gBAAgB,OAAqB;AACnC,SAAK,cAAc;AAAA,EACrB;AAAA,EAEQ,SAAe;AACrB,UAAM,QAAQ,KAAK,SAAS;AAC5B,eAAW,YAAY,KAAK,WAAW;AACrC,eAAS,KAAK;AAAA,IAChB;AAAA,EACF;AAAA,EAEQ,mBAA2B;AACjC,UAAM,QAAQ,IAAI,WAAW,EAAE;AAC/B,WAAO,gBAAgB,KAAK;AAC5B,WAAO,SAAS,MAAM,KAAK,OAAO,CAAC,MAAM,EAAE,SAAS,EAAE,EAAE,SAAS,GAAG,GAAG,CAAC,EAAE,KAAK,EAAE;AAAA,EACnF;AACF;;;ACzOA,OAAO,WAIA;AAIP,eAAe,OAAO,MAA+B;AACnD,MAAI,OAAO,WAAW,QAAQ,WAAW,aAAa;AACpD,UAAM,UAAU,IAAI,YAAY,EAAE,OAAO,IAAI;AAC7C,UAAM,OAAO,MAAM,WAAW,OAAO,OAAO,OAAO,WAAW,OAAO;AACrE,WAAO,MAAM;AAAA,MAAK,IAAI,WAAW,IAAI;AAAA,MAAG,CAAC,MACvC,EAAE,SAAS,EAAE,EAAE,SAAS,GAAG,GAAG;AAAA,IAChC,EAAE,KAAK,EAAE;AAAA,EACX;AAEA,SAAO,WAAW,IAAI;AACxB;AAEA,eAAe,WAAW,QAAgB,MAA+B;AACvE,MAAI,OAAO,WAAW,QAAQ,WAAW,aAAa;AACpD,UAAM,MAAM,MAAM,WAAW,OAAO,OAAO;AAAA,MACzC;AAAA,MACA,IAAI,YAAY,EAAE,OAAO,MAAM;AAAA,MAC/B,EAAE,MAAM,QAAQ,MAAM,UAAU;AAAA,MAChC;AAAA,MACA,CAAC,MAAM;AAAA,IACT;AACA,UAAM,MAAM,MAAM,WAAW,OAAO,OAAO;AAAA,MACzC;AAAA,MACA;AAAA,MACA,IAAI,YAAY,EAAE,OAAO,IAAI;AAAA,IAC/B;AACA,WAAO,MAAM;AAAA,MAAK,IAAI,WAAW,GAAG;AAAA,MAAG,CAAC,MACtC,EAAE,SAAS,EAAE,EAAE,SAAS,GAAG,GAAG;AAAA,IAChC,EAAE,KAAK,EAAE;AAAA,EACX;AAEA,SAAO,WAAW,QAAQ,IAAI;AAChC;AAGA,SAAS,WAAW,KAAqB;AACvC,MAAI,OAAO;AACX,WAAS,IAAI,GAAG,IAAI,IAAI,QAAQ,KAAK;AACnC,UAAM,OAAO,IAAI,WAAW,CAAC;AAC7B,YAAQ,QAAQ,KAAK,OAAO;AAC5B,YAAQ;AAAA,EACV;AACA,SAAO,KAAK,IAAI,IAAI,EAAE,SAAS,EAAE,EAAE,SAAS,IAAI,GAAG;AACrD;AAEA,SAAS,WAAW,KAAa,MAAsB;AACrD,SAAO,WAAW,MAAM,MAAM,IAAI;AACpC;AAEA,SAAS,gBAAwB;AAC/B,MAAI,OAAO,WAAW,QAAQ,eAAe,YAAY;AACvD,WAAO,WAAW,OAAO,WAAW;AAAA,EACtC;AAEA,QAAM,QAAQ,IAAI,WAAW,EAAE;AAC/B,MAAI,OAAO,WAAW,QAAQ,oBAAoB,YAAY;AAC5D,eAAW,OAAO,gBAAgB,KAAK;AAAA,EACzC,OAAO;AACL,aAAS,IAAI,GAAG,IAAI,IAAI,KAAK;AAC3B,YAAM,CAAC,IAAI,KAAK,MAAM,KAAK,OAAO,IAAI,GAAG;AAAA,IAC3C;AAAA,EACF;AACA,SAAO,MAAM,KAAK,OAAO,CAAC,MAAM,EAAE,SAAS,EAAE,EAAE,SAAS,GAAG,GAAG,CAAC,EAAE,KAAK,EAAE;AAC1E;AAEO,IAAM,YAAN,MAAgB;AAAA,EAKrB,YACE,SACQ,aACR,WACA;AAFQ;AAGR,SAAK,YAAY;AAEjB,SAAK,WAAW,MAAM,OAAO;AAAA,MAC3B;AAAA,MACA,SAAS,EAAE,gBAAgB,mBAAmB;AAAA,IAChD,CAAC;AAGD,SAAK,SAAS,aAAa,QAAQ,IAAI,OAAO,WAAW;AAEvD,UAAI,CAAC,OAAO,KAAK,SAAS,QAAQ,GAAG;AACnC,cAAM,QAAQ,KAAK,YAAY,gBAAgB;AAC/C,YAAI,OAAO;AACT,iBAAO,QAAQ,gBAAgB,UAAU,KAAK;AAAA,QAChD;AAAA,MACF;AAGA,UAAI,KAAK,WAAW;AAClB,cAAM,YAAY,KAAK,IAAI,EAAE,SAAS;AACtC,cAAM,QAAQ,cAAc;AAC5B,cAAM,OACJ,OAAO,QAAQ,OAAO,OAAO,SAAS,WAClC,KAAK,UAAU,OAAO,IAAI,IACzB,OAAO,QAAQ;AACtB,cAAM,WAAW,OAAO,MAAM,OAAO,IAAI,IAAI;AAC7C,cAAM,UAAU,OAAO,UAAU,OAAO,YAAY;AACpD,cAAM,MAAM,OAAO,OAAO;AAC1B,cAAM,UAAU,CAAC,QAAQ,KAAK,WAAW,OAAO,QAAQ,EAAE,KAAK,IAAI;AACnE,cAAM,YAAY,MAAM,WAAW,KAAK,WAAW,OAAO;AAE1D,eAAO,QAAQ,qBAAqB,IAAI;AACxC,eAAO,QAAQ,iBAAiB,IAAI;AACpC,eAAO,QAAQ,qBAAqB,IAAI;AAAA,MAC1C;AAEA,aAAO;AAAA,IACT,CAAC;AAGD,SAAK,SAAS,aAAa,SAAS;AAAA,MAClC,CAAC,aAAa;AAAA,MACd,OAAO,UAAU;AACf,YAAI,MAAM,UAAU,WAAW,KAAK;AAClC,gBAAM,kBAAkB,MAAM;AAC9B,cAAI,mBAAmB,CAAC,gBAAgB,QAAQ;AAC9C,4BAAgB,SAAS;AAEzB,gBAAI;AAEF,kBAAI,CAAC,KAAK,gBAAgB;AACxB,qBAAK,iBAAiB,KAAK,YACxB,aAAa,EACb,QAAQ,MAAM;AACb,uBAAK,iBAAiB;AAAA,gBACxB,CAAC;AAAA,cACL;AAEA,oBAAM,WAAW,MAAM,KAAK;AAC5B,kBAAI,UAAU;AACZ,gCAAgB,QAAQ,gBAAgB,UAAU,QAAQ;AAC1D,uBAAO,KAAK,SAAS,eAAe;AAAA,cACtC;AAAA,YACF,SAAS,cAAc;AACrB,sBAAQ,KAAK,yCAAyC,YAAY;AAAA,YACpE;AAAA,UACF;AAAA,QACF;AACA,eAAO,QAAQ,OAAO,KAAK;AAAA,MAC7B;AAAA,IACF;AAAA,EACF;AAAA,EAhFS;AAAA,EACD,iBAAgD;AAAA,EAChD;AAAA,EAgFR,MAAM,IACJ,KACA,QAC2B;AAC3B,WAAO,KAAK,SAAS,IAAO,KAAK,MAAM;AAAA,EACzC;AAAA,EAEA,MAAM,KACJ,KACA,MACA,QAC2B;AAC3B,WAAO,KAAK,SAAS,KAAQ,KAAK,MAAM,MAAM;AAAA,EAChD;AAAA,EAEA,MAAM,MACJ,KACA,MACA,QAC2B;AAC3B,WAAO,KAAK,SAAS,MAAS,KAAK,MAAM,MAAM;AAAA,EACjD;AAAA,EAEA,MAAM,OACJ,KACA,QAC2B;AAC3B,WAAO,KAAK,SAAS,OAAU,KAAK,MAAM;AAAA,EAC5C;AAAA,EAEA,MAAM,IACJ,KACA,MACA,QAC2B;AAC3B,WAAO,KAAK,SAAS,IAAO,KAAK,MAAM,MAAM;AAAA,EAC/C;AACF;;;ACxLO,IAAM,aAAN,MAA8C;AAAA,EACnD,YACU,KACA,UACR;AAFQ;AACA;AAAA,EACP;AAAA,EAEH,MAAM,KACJ,QACA,SACc;AACd,UAAM,SAAS,IAAI,gBAAgB;AACnC,QAAI,UAAU,OAAO,KAAK,MAAM,EAAE,SAAS,GAAG;AAC5C,aAAO,IAAI,UAAU,KAAK,UAAU,MAAM,CAAC;AAAA,IAC7C;AACA,QAAI,SAAS,KAAM,QAAO,IAAI,QAAQ,KAAK,UAAU,QAAQ,IAAI,CAAC;AAClE,QAAI,SAAS,MAAO,QAAO,IAAI,SAAS,OAAO,QAAQ,KAAK,CAAC;AAC7D,QAAI,SAAS,KAAM,QAAO,IAAI,QAAQ,OAAO,QAAQ,IAAI,CAAC;AAC1D,QAAI,SAAS,OAAQ,QAAO,IAAI,UAAU,OAAO,QAAQ,MAAM,CAAC;AAEhE,UAAM,KAAK,OAAO,SAAS;AAC3B,UAAM,MAAM,KAAK,GAAG,KAAK,QAAQ,IAAI,EAAE,KAAK,KAAK;AACjD,UAAM,EAAE,KAAK,IAAI,MAAM,KAAK,IAAI,IAAiE,GAAG;AACpG,WAAO,KAAK;AAAA,EACd;AAAA,EAEA,MAAM,eACJ,QACA,SAC4D;AAC5D,UAAM,SAAS,IAAI,gBAAgB;AACnC,QAAI,UAAU,OAAO,KAAK,MAAM,EAAE,SAAS,GAAG;AAC5C,aAAO,IAAI,UAAU,KAAK,UAAU,MAAM,CAAC;AAAA,IAC7C;AACA,QAAI,SAAS,KAAM,QAAO,IAAI,QAAQ,KAAK,UAAU,QAAQ,IAAI,CAAC;AAClE,QAAI,SAAS,MAAO,QAAO,IAAI,SAAS,OAAO,QAAQ,KAAK,CAAC;AAC7D,QAAI,SAAS,OAAQ,QAAO,IAAI,UAAU,OAAO,QAAQ,MAAM,CAAC;AAEhE,UAAM,KAAK,OAAO,SAAS;AAC3B,UAAM,MAAM,KAAK,GAAG,KAAK,QAAQ,IAAI,EAAE,KAAK,KAAK;AACjD,UAAM,EAAE,KAAK,IAAI,MAAM,KAAK,IAAI,IAAyE,GAAG;AAC5G,WAAO,EAAE,MAAM,KAAK,MAAM,YAAY,KAAK,WAAW;AAAA,EACxD;AAAA,EAEA,MAAM,SAAS,IAA+B;AAC5C,QAAI;AACF,YAAM,EAAE,KAAK,IAAI,MAAM,KAAK,IAAI;AAAA,QAC9B,GAAG,KAAK,QAAQ,IAAI,EAAE;AAAA,MACxB;AACA,aAAO,KAAK;AAAA,IACd,SAAS,OAAY;AACnB,UAAI,MAAM,UAAU,WAAW,IAAK,QAAO;AAC3C,YAAM;AAAA,IACR;AAAA,EACF;AAAA,EAEA,MAAM,OAAO,KAAuD;AAClE,UAAM,EAAE,KAAK,IAAI,MAAM,KAAK,IAAI;AAAA,MAC9B,KAAK;AAAA,MACL;AAAA,IACF;AACA,WAAO,KAAK;AAAA,EACd;AAAA,EAEA,MAAM,WACJ,IACA,QACY;AACZ,UAAM,EAAE,KAAK,IAAI,MAAM,KAAK,IAAI;AAAA,MAC9B,GAAG,KAAK,QAAQ,IAAI,EAAE;AAAA,MACtB,EAAE,OAAO;AAAA,IACX;AACA,WAAO,KAAK;AAAA,EACd;AAAA,EAEA,MAAM,WAAW,IAA2B;AAC1C,UAAM,KAAK,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,EAAE,EAAE;AAAA,EAChD;AAAA,EAEA,MAAM,MAAM,QAAmD;AAC7D,UAAM,EAAE,KAAK,IAAI,MAAM,KAAK,IAAI;AAAA,MAC9B,GAAG,KAAK,QAAQ;AAAA,MAChB,EAAE,QAAQ,UAAU,CAAC,EAAE;AAAA,IACzB;AACA,WAAO,KAAK;AAAA,EACd;AACF;;;ACrCA;AAAA,EAQE;AAAA,EACA;AAAA,OACK;AAnDA,IAAM,gBAAN,MAAoB;AAAA,EAChB;AAAA,EACA;AAAA,EAET,YAAY,QAA6B;AACvC,UAAM,aAAa,OAAO,cAAc;AACxC,UAAM,UAAU,OAAO,WAAW;AAElC,SAAK,OAAO,IAAI,YAAY,SAAS,UAAU;AAC/C,SAAK,MAAM,IAAI,UAAU,OAAO,QAAQ,KAAK,MAAM,OAAO,SAAS;AACnE,SAAK,KAAK,QAAQ,KAAK,GAAG;AAAA,EAC5B;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAYA,WAAc,MAA6B;AACzC,WAAO,IAAI,WAAc,KAAK,KAAK,QAAQ,IAAI,EAAE;AAAA,EACnD;AAAA,EAEA,MAAM,OAAsB;AAC1B,UAAM,KAAK,KAAK,KAAK;AAAA,EACvB;AACF;","names":[]}
+{"version":3,"sources":["../src/auth/auth-manager.ts","../src/api/api-client.ts","../src/db/collection.ts","../src/index.ts"],"sourcesContent":["import type {\n  AuthTokenResponse,\n  DeviceInfo,\n  DeviceMetadata,\n} from \"@codixus/shared\";\nimport type { ApiClient } from \"../api/api-client.js\";\n\nexport interface StorageAdapter {\n  getItem(key: string): Promise<string | null> | string | null;\n  setItem(key: string, value: string): Promise<void> | void;\n  removeItem(key: string): Promise<void> | void;\n}\n\nexport interface SignInParams {\n  deviceId?: string;\n  deviceInfo: DeviceInfo;\n  metadata?: DeviceMetadata;\n}\n\nexport interface AuthState {\n  isAuthenticated: boolean;\n  isLoading: boolean;\n  user: Record<string, unknown> | null;\n}\n\ntype AuthStateListener = (state: AuthState) => void;\n\nexport class AuthManager {\n  private accessToken: string | null = null;\n  private refreshTokenValue: string | null = null;\n  private user: Record<string, unknown> | null = null;\n  private listeners: Set<AuthStateListener> = new Set();\n  private _isLoading = true;\n  private storageKey: string;\n  private api!: ApiClient;\n  private deviceId: string | null = null;\n\n  constructor(\n    private storage: StorageAdapter | null,\n    storageKey: string,\n  ) {\n    this.storageKey = storageKey;\n  }\n\n  /** @internal */\n  _setApi(api: ApiClient): void {\n    this.api = api;\n  }\n\n  async init(): Promise<void> {\n    if (!this.storage) {\n      this._isLoading = false;\n      return;\n    }\n\n    try {\n      const storedRefresh = await this.storage.getItem(\n        `${this.storageKey}_refresh_token`,\n      );\n      const storedUser = await this.storage.getItem(\n        `${this.storageKey}_user`,\n      );\n      const storedDeviceId = await this.storage.getItem(\n        `${this.storageKey}_device_id`,\n      );\n\n      if (storedRefresh) {\n        this.refreshTokenValue = storedRefresh;\n      }\n      if (storedUser) {\n        try {\n          this.user = JSON.parse(storedUser);\n        } catch {\n          // Corrupted user data in storage, ignore\n        }\n      }\n      if (storedDeviceId) {\n        this.deviceId = storedDeviceId;\n      }\n    } catch (error) {\n      console.warn(\"[CodixusClient] Failed to restore auth state from storage:\", error);\n    }\n\n    this._isLoading = false;\n    this.notify();\n  }\n\n  async signIn(\n    params: SignInParams,\n  ): Promise<{ user: Record<string, unknown>; isNewUser: boolean }> {\n    const deviceId = params.deviceId ?? this.deviceId ?? this.generateDeviceId();\n\n    const response = await this.api.post<AuthTokenResponse>(\"/auth/token\", {\n      deviceId,\n      deviceInfo: params.deviceInfo,\n      metadata: params.metadata,\n    });\n\n    const data = response.data;\n    this.accessToken = data.accessToken;\n    this.refreshTokenValue = data.refreshToken;\n    this.user = data.user;\n    this.deviceId = deviceId;\n\n    // Persist\n    if (this.storage) {\n      await this.storage.setItem(\n        `${this.storageKey}_refresh_token`,\n        data.refreshToken,\n      );\n      await this.storage.setItem(\n        `${this.storageKey}_user`,\n        JSON.stringify(data.user),\n      );\n      await this.storage.setItem(`${this.storageKey}_device_id`, deviceId);\n    }\n\n    this.notify();\n    return { user: data.user, isNewUser: data.isNewUser };\n  }\n\n  async getToken(): Promise<string | null> {\n    if (this.accessToken) return this.accessToken;\n\n    // Try refresh\n    if (this.refreshTokenValue) {\n      try {\n        await this.forceRefresh();\n        return this.accessToken;\n      } catch {\n        return null;\n      }\n    }\n\n    return null;\n  }\n\n  async forceRefresh(): Promise<string | null> {\n    if (!this.refreshTokenValue) return null;\n\n    try {\n      const response = await this.api.post<{\n        success: boolean;\n        accessToken: string;\n        refreshToken: string;\n      }>(\"/auth/refresh\", {\n        refreshToken: this.refreshTokenValue,\n      });\n\n      this.accessToken = response.data.accessToken;\n      this.refreshTokenValue = response.data.refreshToken;\n\n      if (this.storage) {\n        await this.storage.setItem(\n          `${this.storageKey}_refresh_token`,\n          response.data.refreshToken,\n        );\n      }\n\n      return this.accessToken;\n    } catch {\n      // Refresh failed, clear auth state\n      await this.signOut();\n      return null;\n    }\n  }\n\n  async signOut(): Promise<void> {\n    // Notify server\n    if (this.refreshTokenValue) {\n      try {\n        await this.api.post(\"/auth/logout\", {\n          refreshToken: this.refreshTokenValue,\n        });\n      } catch {}\n    }\n\n    this.accessToken = null;\n    this.refreshTokenValue = null;\n    this.user = null;\n\n    if (this.storage) {\n      await this.storage.removeItem(`${this.storageKey}_refresh_token`);\n      await this.storage.removeItem(`${this.storageKey}_user`);\n      await this.storage.removeItem(`${this.storageKey}_device_id`);\n    }\n\n    this.notify();\n  }\n\n  getState(): AuthState {\n    return {\n      isAuthenticated: this.accessToken !== null || this.refreshTokenValue !== null,\n      isLoading: this._isLoading,\n      user: this.user,\n    };\n  }\n\n  getDeviceId(): string | null {\n    return this.deviceId;\n  }\n\n  onAuthStateChange(listener: AuthStateListener): () => void {\n    this.listeners.add(listener);\n    // Call immediately with current state\n    listener(this.getState());\n    return () => {\n      this.listeners.delete(listener);\n    };\n  }\n\n  /** @internal - used by API interceptor */\n  _getAccessToken(): string | null {\n    return this.accessToken;\n  }\n\n  /** @internal - called by API interceptor after refresh */\n  _setAccessToken(token: string): void {\n    this.accessToken = token;\n  }\n\n  private notify(): void {\n    const state = this.getState();\n    for (const listener of this.listeners) {\n      listener(state);\n    }\n  }\n\n  private generateDeviceId(): string {\n    const bytes = new Uint8Array(16);\n    crypto.getRandomValues(bytes);\n    return \"dev-\" + Array.from(bytes, (b) => b.toString(16).padStart(2, \"0\")).join(\"\");\n  }\n}\n","import axios, {\n  type AxiosInstance,\n  type AxiosRequestConfig,\n  type AxiosResponse,\n} from \"axios\";\nimport type { AuthManager } from \"../auth/auth-manager.js\";\n\n// Crypto functions — injected from outside to avoid platform-specific imports\nexport interface CryptoProvider {\n  sha256(data: string): Promise<string>;\n  hmacSha256(secret: string, data: string): Promise<string>;\n  randomUUID(): string;\n}\n\n// Default: no-op (signing disabled if no crypto provider)\nlet _crypto: CryptoProvider | null = null;\n\nexport function setCryptoProvider(provider: CryptoProvider): void {\n  _crypto = provider;\n}\n\nfunction generateNonce(): string {\n  if (_crypto) return _crypto.randomUUID();\n  if (typeof globalThis.crypto?.randomUUID === \"function\") {\n    return globalThis.crypto.randomUUID();\n  }\n  const bytes = new Uint8Array(16);\n  if (typeof globalThis.crypto?.getRandomValues === \"function\") {\n    globalThis.crypto.getRandomValues(bytes);\n  } else {\n    for (let i = 0; i < 16; i++) {\n      bytes[i] = Math.floor(Math.random() * 256);\n    }\n  }\n  return Array.from(bytes, (b) => b.toString(16).padStart(2, \"0\")).join(\"\");\n}\n\nexport class ApiClient {\n  readonly instance: AxiosInstance;\n  private refreshPromise: Promise<string | null> | null = null;\n  private appSecret: string | undefined;\n\n  constructor(\n    baseURL: string,\n    private authManager: AuthManager,\n    appSecret?: string,\n  ) {\n    this.appSecret = appSecret;\n\n    this.instance = axios.create({\n      baseURL,\n      headers: { \"Content-Type\": \"application/json\" },\n    });\n\n    // Request interceptor: add Bearer token + signing\n    this.instance.interceptors.request.use(async (config) => {\n      // Skip auth for auth endpoints\n      if (!config.url?.includes(\"/auth/\")) {\n        const token = this.authManager._getAccessToken();\n        if (token) {\n          config.headers.Authorization = `Bearer ${token}`;\n        }\n      }\n\n      // Request signing (only if crypto provider is set)\n      if (this.appSecret && _crypto) {\n        const timestamp = Date.now().toString();\n        const nonce = _crypto.randomUUID();\n        const body =\n          config.data && typeof config.data === \"object\"\n            ? JSON.stringify(config.data)\n            : (config.data ?? \"\");\n        const bodyHash = body ? await _crypto.sha256(body) : \"\";\n        const method = (config.method ?? \"GET\").toUpperCase();\n        const url = config.url ?? \"/\";\n        const payload = [method, url, timestamp, nonce, bodyHash].join(\"\\n\");\n        const signature = await _crypto.hmacSha256(this.appSecret, payload);\n\n        config.headers[\"X-Codixus-Timestamp\"] = timestamp;\n        config.headers[\"X-Codixus-Nonce\"] = nonce;\n        config.headers[\"X-Codixus-Signature\"] = signature;\n      }\n\n      return config;\n    });\n\n    // Response interceptor: handle 401 with token refresh\n    this.instance.interceptors.response.use(\n      (response) => response,\n      async (error) => {\n        if (error.response?.status === 401) {\n          const originalRequest = error.config;\n          if (originalRequest && !originalRequest._retry) {\n            originalRequest._retry = true;\n\n            try {\n              if (!this.refreshPromise) {\n                this.refreshPromise = this.authManager\n                  .forceRefresh()\n                  .finally(() => {\n                    this.refreshPromise = null;\n                  });\n              }\n\n              const newToken = await this.refreshPromise;\n              if (newToken) {\n                originalRequest.headers.Authorization = `Bearer ${newToken}`;\n                return this.instance(originalRequest);\n              }\n            } catch (refreshError) {\n              console.warn(\"[CodixusClient] Token refresh failed:\", refreshError);\n            }\n          }\n        }\n        return Promise.reject(error);\n      },\n    );\n  }\n\n  async get<T = unknown>(url: string, config?: AxiosRequestConfig): Promise<AxiosResponse<T>> {\n    return this.instance.get<T>(url, config);\n  }\n\n  async post<T = unknown>(url: string, data?: unknown, config?: AxiosRequestConfig): Promise<AxiosResponse<T>> {\n    return this.instance.post<T>(url, data, config);\n  }\n\n  async patch<T = unknown>(url: string, data?: unknown, config?: AxiosRequestConfig): Promise<AxiosResponse<T>> {\n    return this.instance.patch<T>(url, data, config);\n  }\n\n  async delete<T = unknown>(url: string, config?: AxiosRequestConfig): Promise<AxiosResponse<T>> {\n    return this.instance.delete<T>(url, config);\n  }\n\n  async put<T = unknown>(url: string, data?: unknown, config?: AxiosRequestConfig): Promise<AxiosResponse<T>> {\n    return this.instance.put<T>(url, data, config);\n  }\n}\n","import type { ApiClient } from \"../api/api-client.js\";\n\nexport interface FindOptions {\n  sort?: Record<string, 1 | -1>;\n  limit?: number;\n  skip?: number;\n  cursor?: string | number;\n}\n\nexport class Collection<T = Record<string, unknown>> {\n  constructor(\n    private api: ApiClient,\n    private basePath: string,\n  ) {}\n\n  async find(\n    filter?: Record<string, unknown>,\n    options?: FindOptions,\n  ): Promise<T[]> {\n    const params = new URLSearchParams();\n    if (filter && Object.keys(filter).length > 0) {\n      params.set(\"filter\", JSON.stringify(filter));\n    }\n    if (options?.sort) params.set(\"sort\", JSON.stringify(options.sort));\n    if (options?.limit) params.set(\"limit\", String(options.limit));\n    if (options?.skip) params.set(\"skip\", String(options.skip));\n    if (options?.cursor) params.set(\"cursor\", String(options.cursor));\n\n    const qs = params.toString();\n    const url = qs ? `${this.basePath}?${qs}` : this.basePath;\n    const { data } = await this.api.get<{ success: boolean; data: T[]; nextCursor?: string | null }>(url);\n    return data.data;\n  }\n\n  async findWithCursor(\n    filter?: Record<string, unknown>,\n    options?: FindOptions,\n  ): Promise<{ data: T[]; nextCursor: string | number | null }> {\n    const params = new URLSearchParams();\n    if (filter && Object.keys(filter).length > 0) {\n      params.set(\"filter\", JSON.stringify(filter));\n    }\n    if (options?.sort) params.set(\"sort\", JSON.stringify(options.sort));\n    if (options?.limit) params.set(\"limit\", String(options.limit));\n    if (options?.cursor) params.set(\"cursor\", String(options.cursor));\n\n    const qs = params.toString();\n    const url = qs ? `${this.basePath}?${qs}` : this.basePath;\n    const { data } = await this.api.get<{ success: boolean; data: T[]; nextCursor: string | number | null }>(url);\n    return { data: data.data, nextCursor: data.nextCursor };\n  }\n\n  async findById(id: string): Promise<T | null> {\n    try {\n      const { data } = await this.api.get<{ success: boolean; data: T }>(\n        `${this.basePath}/${id}`,\n      );\n      return data.data;\n    } catch (error: any) {\n      if (error.response?.status === 404) return null;\n      throw error;\n    }\n  }\n\n  async create(doc: Partial<T> & Record<string, unknown>): Promise<T> {\n    const { data } = await this.api.post<{ success: boolean; data: T }>(\n      this.basePath,\n      doc,\n    );\n    return data.data;\n  }\n\n  async updateById(\n    id: string,\n    update: Record<string, unknown>,\n  ): Promise<T> {\n    const { data } = await this.api.patch<{ success: boolean; data: T }>(\n      `${this.basePath}/${id}`,\n      { update },\n    );\n    return data.data;\n  }\n\n  async deleteById(id: string): Promise<void> {\n    await this.api.delete(`${this.basePath}/${id}`);\n  }\n\n  async count(filter?: Record<string, unknown>): Promise<number> {\n    const { data } = await this.api.post<{ success: boolean; count: number }>(\n      `${this.basePath}/count`,\n      { filter: filter ?? {} },\n    );\n    return data.count;\n  }\n}\n","import {\n  AuthManager,\n  type StorageAdapter,\n  type SignInParams,\n  type AuthState,\n} from \"./auth/auth-manager.js\";\nimport { ApiClient } from \"./api/api-client.js\";\nimport { Collection, type FindOptions } from \"./db/collection.js\";\n\nexport interface CodixusClientConfig {\n  apiUrl: string;\n  storageKey?: string;\n  storage?: StorageAdapter | null;\n  appSecret?: string;\n}\n\nexport class CodixusClient {\n  readonly auth: AuthManager;\n  readonly api: ApiClient;\n\n  constructor(config: CodixusClientConfig) {\n    const storageKey = config.storageKey ?? \"codixus\";\n    const storage = config.storage ?? null;\n\n    this.auth = new AuthManager(storage, storageKey);\n    this.api = new ApiClient(config.apiUrl, this.auth, config.appSecret);\n    this.auth._setApi(this.api);\n  }\n\n  /**\n   * Create a typed collection accessor.\n   * Maps to auto REST routes on server: codixus.rest(Model)\n   *\n   * @example\n   * interface Product { _id: string; name: string; price: number; }\n   * const products = codixus.collection<Product>(\"products\");\n   * const all = await products.find();            // Product[]\n   * const one = await products.findById(\"abc\");   // Product | null\n   */\n  collection<T>(name: string): Collection<T> {\n    return new Collection<T>(this.api, `/api/${name}`);\n  }\n\n  async init(): Promise<void> {\n    await this.auth.init();\n  }\n}\n\nexport {\n  type StorageAdapter,\n  type SignInParams,\n  type AuthState,\n} from \"./auth/auth-manager.js\";\nexport { ApiClient, setCryptoProvider, type CryptoProvider } from \"./api/api-client.js\";\nexport { Collection, type FindOptions } from \"./db/collection.js\";\n\n// Re-export shared types\nexport {\n  type AuthUser,\n  type TokenPair,\n  type DeviceInfo,\n  type DeviceMetadata,\n  type AuthTokenRequest,\n  type AuthTokenResponse,\n  type ApiResponse,\n  CodixusError,\n  ErrorCodes,\n} from \"@codixus/shared\";\n"],"mappings":";AA2BO,IAAM,cAAN,MAAkB;AAAA,EAUvB,YACU,SACR,YACA;AAFQ;AAGR,SAAK,aAAa;AAAA,EACpB;AAAA,EAdQ,cAA6B;AAAA,EAC7B,oBAAmC;AAAA,EACnC,OAAuC;AAAA,EACvC,YAAoC,oBAAI,IAAI;AAAA,EAC5C,aAAa;AAAA,EACb;AAAA,EACA;AAAA,EACA,WAA0B;AAAA;AAAA,EAUlC,QAAQ,KAAsB;AAC5B,SAAK,MAAM;AAAA,EACb;AAAA,EAEA,MAAM,OAAsB;AAC1B,QAAI,CAAC,KAAK,SAAS;AACjB,WAAK,aAAa;AAClB;AAAA,IACF;AAEA,QAAI;AACF,YAAM,gBAAgB,MAAM,KAAK,QAAQ;AAAA,QACvC,GAAG,KAAK,UAAU;AAAA,MACpB;AACA,YAAM,aAAa,MAAM,KAAK,QAAQ;AAAA,QACpC,GAAG,KAAK,UAAU;AAAA,MACpB;AACA,YAAM,iBAAiB,MAAM,KAAK,QAAQ;AAAA,QACxC,GAAG,KAAK,UAAU;AAAA,MACpB;AAEA,UAAI,eAAe;AACjB,aAAK,oBAAoB;AAAA,MAC3B;AACA,UAAI,YAAY;AACd,YAAI;AACF,eAAK,OAAO,KAAK,MAAM,UAAU;AAAA,QACnC,QAAQ;AAAA,QAER;AAAA,MACF;AACA,UAAI,gBAAgB;AAClB,aAAK,WAAW;AAAA,MAClB;AAAA,IACF,SAAS,OAAO;AACd,cAAQ,KAAK,8DAA8D,KAAK;AAAA,IAClF;AAEA,SAAK,aAAa;AAClB,SAAK,OAAO;AAAA,EACd;AAAA,EAEA,MAAM,OACJ,QACgE;AAChE,UAAM,WAAW,OAAO,YAAY,KAAK,YAAY,KAAK,iBAAiB;AAE3E,UAAM,WAAW,MAAM,KAAK,IAAI,KAAwB,eAAe;AAAA,MACrE;AAAA,MACA,YAAY,OAAO;AAAA,MACnB,UAAU,OAAO;AAAA,IACnB,CAAC;AAED,UAAM,OAAO,SAAS;AACtB,SAAK,cAAc,KAAK;AACxB,SAAK,oBAAoB,KAAK;AAC9B,SAAK,OAAO,KAAK;AACjB,SAAK,WAAW;AAGhB,QAAI,KAAK,SAAS;AAChB,YAAM,KAAK,QAAQ;AAAA,QACjB,GAAG,KAAK,UAAU;AAAA,QAClB,KAAK;AAAA,MACP;AACA,YAAM,KAAK,QAAQ;AAAA,QACjB,GAAG,KAAK,UAAU;AAAA,QAClB,KAAK,UAAU,KAAK,IAAI;AAAA,MAC1B;AACA,YAAM,KAAK,QAAQ,QAAQ,GAAG,KAAK,UAAU,cAAc,QAAQ;AAAA,IACrE;AAEA,SAAK,OAAO;AACZ,WAAO,EAAE,MAAM,KAAK,MAAM,WAAW,KAAK,UAAU;AAAA,EACtD;AAAA,EAEA,MAAM,WAAmC;AACvC,QAAI,KAAK,YAAa,QAAO,KAAK;AAGlC,QAAI,KAAK,mBAAmB;AAC1B,UAAI;AACF,cAAM,KAAK,aAAa;AACxB,eAAO,KAAK;AAAA,MACd,QAAQ;AACN,eAAO;AAAA,MACT;AAAA,IACF;AAEA,WAAO;AAAA,EACT;AAAA,EAEA,MAAM,eAAuC;AAC3C,QAAI,CAAC,KAAK,kBAAmB,QAAO;AAEpC,QAAI;AACF,YAAM,WAAW,MAAM,KAAK,IAAI,KAI7B,iBAAiB;AAAA,QAClB,cAAc,KAAK;AAAA,MACrB,CAAC;AAED,WAAK,cAAc,SAAS,KAAK;AACjC,WAAK,oBAAoB,SAAS,KAAK;AAEvC,UAAI,KAAK,SAAS;AAChB,cAAM,KAAK,QAAQ;AAAA,UACjB,GAAG,KAAK,UAAU;AAAA,UAClB,SAAS,KAAK;AAAA,QAChB;AAAA,MACF;AAEA,aAAO,KAAK;AAAA,IACd,QAAQ;AAEN,YAAM,KAAK,QAAQ;AACnB,aAAO;AAAA,IACT;AAAA,EACF;AAAA,EAEA,MAAM,UAAyB;AAE7B,QAAI,KAAK,mBAAmB;AAC1B,UAAI;AACF,cAAM,KAAK,IAAI,KAAK,gBAAgB;AAAA,UAClC,cAAc,KAAK;AAAA,QACrB,CAAC;AAAA,MACH,QAAQ;AAAA,MAAC;AAAA,IACX;AAEA,SAAK,cAAc;AACnB,SAAK,oBAAoB;AACzB,SAAK,OAAO;AAEZ,QAAI,KAAK,SAAS;AAChB,YAAM,KAAK,QAAQ,WAAW,GAAG,KAAK,UAAU,gBAAgB;AAChE,YAAM,KAAK,QAAQ,WAAW,GAAG,KAAK,UAAU,OAAO;AACvD,YAAM,KAAK,QAAQ,WAAW,GAAG,KAAK,UAAU,YAAY;AAAA,IAC9D;AAEA,SAAK,OAAO;AAAA,EACd;AAAA,EAEA,WAAsB;AACpB,WAAO;AAAA,MACL,iBAAiB,KAAK,gBAAgB,QAAQ,KAAK,sBAAsB;AAAA,MACzE,WAAW,KAAK;AAAA,MAChB,MAAM,KAAK;AAAA,IACb;AAAA,EACF;AAAA,EAEA,cAA6B;AAC3B,WAAO,KAAK;AAAA,EACd;AAAA,EAEA,kBAAkB,UAAyC;AACzD,SAAK,UAAU,IAAI,QAAQ;AAE3B,aAAS,KAAK,SAAS,CAAC;AACxB,WAAO,MAAM;AACX,WAAK,UAAU,OAAO,QAAQ;AAAA,IAChC;AAAA,EACF;AAAA;AAAA,EAGA,kBAAiC;AAC/B,WAAO,KAAK;AAAA,EACd;AAAA;AAAA,EAGA,gBAAgB,OAAqB;AACnC,SAAK,cAAc;AAAA,EACrB;AAAA,EAEQ,SAAe;AACrB,UAAM,QAAQ,KAAK,SAAS;AAC5B,eAAW,YAAY,KAAK,WAAW;AACrC,eAAS,KAAK;AAAA,IAChB;AAAA,EACF;AAAA,EAEQ,mBAA2B;AACjC,UAAM,QAAQ,IAAI,WAAW,EAAE;AAC/B,WAAO,gBAAgB,KAAK;AAC5B,WAAO,SAAS,MAAM,KAAK,OAAO,CAAC,MAAM,EAAE,SAAS,EAAE,EAAE,SAAS,GAAG,GAAG,CAAC,EAAE,KAAK,EAAE;AAAA,EACnF;AACF;;;ACzOA,OAAO,WAIA;AAWP,IAAI,UAAiC;AAE9B,SAAS,kBAAkB,UAAgC;AAChE,YAAU;AACZ;AAkBO,IAAM,YAAN,MAAgB;AAAA,EAKrB,YACE,SACQ,aACR,WACA;AAFQ;AAGR,SAAK,YAAY;AAEjB,SAAK,WAAW,MAAM,OAAO;AAAA,MAC3B;AAAA,MACA,SAAS,EAAE,gBAAgB,mBAAmB;AAAA,IAChD,CAAC;AAGD,SAAK,SAAS,aAAa,QAAQ,IAAI,OAAO,WAAW;AAEvD,UAAI,CAAC,OAAO,KAAK,SAAS,QAAQ,GAAG;AACnC,cAAM,QAAQ,KAAK,YAAY,gBAAgB;AAC/C,YAAI,OAAO;AACT,iBAAO,QAAQ,gBAAgB,UAAU,KAAK;AAAA,QAChD;AAAA,MACF;AAGA,UAAI,KAAK,aAAa,SAAS;AAC7B,cAAM,YAAY,KAAK,IAAI,EAAE,SAAS;AACtC,cAAM,QAAQ,QAAQ,WAAW;AACjC,cAAM,OACJ,OAAO,QAAQ,OAAO,OAAO,SAAS,WAClC,KAAK,UAAU,OAAO,IAAI,IACzB,OAAO,QAAQ;AACtB,cAAM,WAAW,OAAO,MAAM,QAAQ,OAAO,IAAI,IAAI;AACrD,cAAM,UAAU,OAAO,UAAU,OAAO,YAAY;AACpD,cAAM,MAAM,OAAO,OAAO;AAC1B,cAAM,UAAU,CAAC,QAAQ,KAAK,WAAW,OAAO,QAAQ,EAAE,KAAK,IAAI;AACnE,cAAM,YAAY,MAAM,QAAQ,WAAW,KAAK,WAAW,OAAO;AAElE,eAAO,QAAQ,qBAAqB,IAAI;AACxC,eAAO,QAAQ,iBAAiB,IAAI;AACpC,eAAO,QAAQ,qBAAqB,IAAI;AAAA,MAC1C;AAEA,aAAO;AAAA,IACT,CAAC;AAGD,SAAK,SAAS,aAAa,SAAS;AAAA,MAClC,CAAC,aAAa;AAAA,MACd,OAAO,UAAU;AACf,YAAI,MAAM,UAAU,WAAW,KAAK;AAClC,gBAAM,kBAAkB,MAAM;AAC9B,cAAI,mBAAmB,CAAC,gBAAgB,QAAQ;AAC9C,4BAAgB,SAAS;AAEzB,gBAAI;AACF,kBAAI,CAAC,KAAK,gBAAgB;AACxB,qBAAK,iBAAiB,KAAK,YACxB,aAAa,EACb,QAAQ,MAAM;AACb,uBAAK,iBAAiB;AAAA,gBACxB,CAAC;AAAA,cACL;AAEA,oBAAM,WAAW,MAAM,KAAK;AAC5B,kBAAI,UAAU;AACZ,gCAAgB,QAAQ,gBAAgB,UAAU,QAAQ;AAC1D,uBAAO,KAAK,SAAS,eAAe;AAAA,cACtC;AAAA,YACF,SAAS,cAAc;AACrB,sBAAQ,KAAK,yCAAyC,YAAY;AAAA,YACpE;AAAA,UACF;AAAA,QACF;AACA,eAAO,QAAQ,OAAO,KAAK;AAAA,MAC7B;AAAA,IACF;AAAA,EACF;AAAA,EA/ES;AAAA,EACD,iBAAgD;AAAA,EAChD;AAAA,EA+ER,MAAM,IAAiB,KAAa,QAAwD;AAC1F,WAAO,KAAK,SAAS,IAAO,KAAK,MAAM;AAAA,EACzC;AAAA,EAEA,MAAM,KAAkB,KAAa,MAAgB,QAAwD;AAC3G,WAAO,KAAK,SAAS,KAAQ,KAAK,MAAM,MAAM;AAAA,EAChD;AAAA,EAEA,MAAM,MAAmB,KAAa,MAAgB,QAAwD;AAC5G,WAAO,KAAK,SAAS,MAAS,KAAK,MAAM,MAAM;AAAA,EACjD;AAAA,EAEA,MAAM,OAAoB,KAAa,QAAwD;AAC7F,WAAO,KAAK,SAAS,OAAU,KAAK,MAAM;AAAA,EAC5C;AAAA,EAEA,MAAM,IAAiB,KAAa,MAAgB,QAAwD;AAC1G,WAAO,KAAK,SAAS,IAAO,KAAK,MAAM,MAAM;AAAA,EAC/C;AACF;;;ACjIO,IAAM,aAAN,MAA8C;AAAA,EACnD,YACU,KACA,UACR;AAFQ;AACA;AAAA,EACP;AAAA,EAEH,MAAM,KACJ,QACA,SACc;AACd,UAAM,SAAS,IAAI,gBAAgB;AACnC,QAAI,UAAU,OAAO,KAAK,MAAM,EAAE,SAAS,GAAG;AAC5C,aAAO,IAAI,UAAU,KAAK,UAAU,MAAM,CAAC;AAAA,IAC7C;AACA,QAAI,SAAS,KAAM,QAAO,IAAI,QAAQ,KAAK,UAAU,QAAQ,IAAI,CAAC;AAClE,QAAI,SAAS,MAAO,QAAO,IAAI,SAAS,OAAO,QAAQ,KAAK,CAAC;AAC7D,QAAI,SAAS,KAAM,QAAO,IAAI,QAAQ,OAAO,QAAQ,IAAI,CAAC;AAC1D,QAAI,SAAS,OAAQ,QAAO,IAAI,UAAU,OAAO,QAAQ,MAAM,CAAC;AAEhE,UAAM,KAAK,OAAO,SAAS;AAC3B,UAAM,MAAM,KAAK,GAAG,KAAK,QAAQ,IAAI,EAAE,KAAK,KAAK;AACjD,UAAM,EAAE,KAAK,IAAI,MAAM,KAAK,IAAI,IAAiE,GAAG;AACpG,WAAO,KAAK;AAAA,EACd;AAAA,EAEA,MAAM,eACJ,QACA,SAC4D;AAC5D,UAAM,SAAS,IAAI,gBAAgB;AACnC,QAAI,UAAU,OAAO,KAAK,MAAM,EAAE,SAAS,GAAG;AAC5C,aAAO,IAAI,UAAU,KAAK,UAAU,MAAM,CAAC;AAAA,IAC7C;AACA,QAAI,SAAS,KAAM,QAAO,IAAI,QAAQ,KAAK,UAAU,QAAQ,IAAI,CAAC;AAClE,QAAI,SAAS,MAAO,QAAO,IAAI,SAAS,OAAO,QAAQ,KAAK,CAAC;AAC7D,QAAI,SAAS,OAAQ,QAAO,IAAI,UAAU,OAAO,QAAQ,MAAM,CAAC;AAEhE,UAAM,KAAK,OAAO,SAAS;AAC3B,UAAM,MAAM,KAAK,GAAG,KAAK,QAAQ,IAAI,EAAE,KAAK,KAAK;AACjD,UAAM,EAAE,KAAK,IAAI,MAAM,KAAK,IAAI,IAAyE,GAAG;AAC5G,WAAO,EAAE,MAAM,KAAK,MAAM,YAAY,KAAK,WAAW;AAAA,EACxD;AAAA,EAEA,MAAM,SAAS,IAA+B;AAC5C,QAAI;AACF,YAAM,EAAE,KAAK,IAAI,MAAM,KAAK,IAAI;AAAA,QAC9B,GAAG,KAAK,QAAQ,IAAI,EAAE;AAAA,MACxB;AACA,aAAO,KAAK;AAAA,IACd,SAAS,OAAY;AACnB,UAAI,MAAM,UAAU,WAAW,IAAK,QAAO;AAC3C,YAAM;AAAA,IACR;AAAA,EACF;AAAA,EAEA,MAAM,OAAO,KAAuD;AAClE,UAAM,EAAE,KAAK,IAAI,MAAM,KAAK,IAAI;AAAA,MAC9B,KAAK;AAAA,MACL;AAAA,IACF;AACA,WAAO,KAAK;AAAA,EACd;AAAA,EAEA,MAAM,WACJ,IACA,QACY;AACZ,UAAM,EAAE,KAAK,IAAI,MAAM,KAAK,IAAI;AAAA,MAC9B,GAAG,KAAK,QAAQ,IAAI,EAAE;AAAA,MACtB,EAAE,OAAO;AAAA,IACX;AACA,WAAO,KAAK;AAAA,EACd;AAAA,EAEA,MAAM,WAAW,IAA2B;AAC1C,UAAM,KAAK,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,EAAE,EAAE;AAAA,EAChD;AAAA,EAEA,MAAM,MAAM,QAAmD;AAC7D,UAAM,EAAE,KAAK,IAAI,MAAM,KAAK,IAAI;AAAA,MAC9B,GAAG,KAAK,QAAQ;AAAA,MAChB,EAAE,QAAQ,UAAU,CAAC,EAAE;AAAA,IACzB;AACA,WAAO,KAAK;AAAA,EACd;AACF;;;ACrCA;AAAA,EAQE;AAAA,EACA;AAAA,OACK;AAnDA,IAAM,gBAAN,MAAoB;AAAA,EAChB;AAAA,EACA;AAAA,EAET,YAAY,QAA6B;AACvC,UAAM,aAAa,OAAO,cAAc;AACxC,UAAM,UAAU,OAAO,WAAW;AAElC,SAAK,OAAO,IAAI,YAAY,SAAS,UAAU;AAC/C,SAAK,MAAM,IAAI,UAAU,OAAO,QAAQ,KAAK,MAAM,OAAO,SAAS;AACnE,SAAK,KAAK,QAAQ,KAAK,GAAG;AAAA,EAC5B;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAYA,WAAc,MAA6B;AACzC,WAAO,IAAI,WAAc,KAAK,KAAK,QAAQ,IAAI,EAAE;AAAA,EACnD;AAAA,EAEA,MAAM,OAAsB;AAC1B,UAAM,KAAK,KAAK,KAAK;AAAA,EACvB;AACF;","names":[]}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@codixus/client",
-  "version": "0.1.0",
+  "version": "0.1.3",
   "description": "Client SDK for React Native and web — auth, API client, typed collections",
   "type": "module",
   "license": "SEE LICENSE IN LICENSE",