@coinlist-co/react 0.0.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (47) hide show
  1. package/README.md +7 -0
  2. package/dist/chunk-5E3P7AMH.js +20 -0
  3. package/dist/chunk-5E3P7AMH.js.map +1 -0
  4. package/dist/chunk-F56RBKNS.js +63 -0
  5. package/dist/chunk-F56RBKNS.js.map +1 -0
  6. package/dist/chunk-NLJMUHOG.js +253 -0
  7. package/dist/chunk-NLJMUHOG.js.map +1 -0
  8. package/dist/chunk-OETRTIQ4.js +274 -0
  9. package/dist/chunk-OETRTIQ4.js.map +1 -0
  10. package/dist/chunk-YJQMJFA7.js +16 -0
  11. package/dist/chunk-YJQMJFA7.js.map +1 -0
  12. package/dist/client/components/index.cjs +445 -0
  13. package/dist/client/components/index.cjs.map +1 -0
  14. package/dist/client/components/index.d.cts +19 -0
  15. package/dist/client/components/index.d.ts +19 -0
  16. package/dist/client/components/index.js +399 -0
  17. package/dist/client/components/index.js.map +1 -0
  18. package/dist/client/core/index.cjs +566 -0
  19. package/dist/client/core/index.cjs.map +1 -0
  20. package/dist/client/core/index.d.cts +22 -0
  21. package/dist/client/core/index.d.ts +22 -0
  22. package/dist/client/core/index.js +35 -0
  23. package/dist/client/core/index.js.map +1 -0
  24. package/dist/client/hooks/index.cjs +56 -0
  25. package/dist/client/hooks/index.cjs.map +1 -0
  26. package/dist/client/hooks/index.d.cts +14 -0
  27. package/dist/client/hooks/index.d.ts +14 -0
  28. package/dist/client/hooks/index.js +9 -0
  29. package/dist/client/hooks/index.js.map +1 -0
  30. package/dist/client/index.cjs +621 -0
  31. package/dist/client/index.cjs.map +1 -0
  32. package/dist/client/index.d.cts +18 -0
  33. package/dist/client/index.d.ts +18 -0
  34. package/dist/client/index.js +41 -0
  35. package/dist/client/index.js.map +1 -0
  36. package/dist/client/styles.css +2 -0
  37. package/dist/coinlist-client-BH_Cn_7u.d.cts +71 -0
  38. package/dist/coinlist-client-fkB3J-2a.d.ts +71 -0
  39. package/dist/oauth-session-g0OPJNKn.d.cts +59 -0
  40. package/dist/oauth-session-g0OPJNKn.d.ts +59 -0
  41. package/dist/server/index.cjs +405 -0
  42. package/dist/server/index.cjs.map +1 -0
  43. package/dist/server/index.d.cts +37 -0
  44. package/dist/server/index.d.ts +37 -0
  45. package/dist/server/index.js +142 -0
  46. package/dist/server/index.js.map +1 -0
  47. package/package.json +122 -0
@@ -0,0 +1,566 @@
1
+ "use strict";
2
+ var __defProp = Object.defineProperty;
3
+ var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
4
+ var __getOwnPropNames = Object.getOwnPropertyNames;
5
+ var __hasOwnProp = Object.prototype.hasOwnProperty;
6
+ var __export = (target, all) => {
7
+ for (var name in all)
8
+ __defProp(target, name, { get: all[name], enumerable: true });
9
+ };
10
+ var __copyProps = (to, from, except, desc) => {
11
+ if (from && typeof from === "object" || typeof from === "function") {
12
+ for (let key of __getOwnPropNames(from))
13
+ if (!__hasOwnProp.call(to, key) && key !== except)
14
+ __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
15
+ }
16
+ return to;
17
+ };
18
+ var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
19
+
20
+ // src/client/core/index.ts
21
+ var core_exports = {};
22
+ __export(core_exports, {
23
+ AuthorizationCode: () => AuthorizationCode,
24
+ ClientId: () => ClientId,
25
+ ClientSecret: () => ClientSecret,
26
+ CodeChallenge: () => CodeChallenge,
27
+ CodeVerifier: () => CodeVerifier,
28
+ OAuthRefreshToken: () => OAuthRefreshToken,
29
+ OAuthSession: () => OAuthSession,
30
+ RedirectUri: () => RedirectUri,
31
+ User: () => User,
32
+ UserEmail: () => UserEmail,
33
+ UserId: () => UserId,
34
+ createCoinListClient: () => createCoinListClient
35
+ });
36
+ module.exports = __toCommonJS(core_exports);
37
+
38
+ // src/shared/api/http-attributes.ts
39
+ var empty = {};
40
+ var concat = (left, right) => ({
41
+ ...left,
42
+ ...right
43
+ });
44
+ var concatAll = (...items) => {
45
+ let result = empty;
46
+ for (const item of items) {
47
+ result = concat(result, item);
48
+ }
49
+ return result;
50
+ };
51
+ var protectedRequest = () => ({ protected: true });
52
+ var userAgent = () => ({ userAgent: true });
53
+ var idempotencyKey = () => ({
54
+ idempotencyKey: true
55
+ });
56
+ var retryAttempt = (attempt) => ({
57
+ retryAttempt: attempt
58
+ });
59
+ var renewAttempted = (value) => ({
60
+ renewAttempted: value
61
+ });
62
+ var isProtected = (attrs) => attrs?.protected === true;
63
+ var needUserAgent = (attrs) => attrs?.userAgent === true;
64
+ var isIdempotent = (attrs) => attrs?.idempotencyKey === true;
65
+ var getRetryAttempt = (attrs) => attrs?.retryAttempt ?? 0;
66
+ var wasRenewAttempted = (attrs) => attrs?.renewAttempted === true;
67
+ var Attributes = {
68
+ empty,
69
+ concat,
70
+ concatAll,
71
+ protected: protectedRequest,
72
+ isProtected,
73
+ userAgent,
74
+ needUserAgent,
75
+ idempotencyKey,
76
+ isIdempotent,
77
+ retryAttempt,
78
+ getRetryAttempt,
79
+ renewAttempted,
80
+ wasRenewAttempted
81
+ };
82
+
83
+ // src/client/core/api/middleware/attach-session-middleware.ts
84
+ function attachSessionMiddleware(fetchAccessToken) {
85
+ return async (request) => {
86
+ if (!Attributes.isProtected(request.attributes)) {
87
+ return request;
88
+ }
89
+ const accessToken = await fetchAccessToken(false);
90
+ if (accessToken === null) {
91
+ return request;
92
+ }
93
+ return {
94
+ ...request,
95
+ headers: {
96
+ ...request.headers ?? {},
97
+ Authorization: `Bearer ${accessToken.value}`
98
+ }
99
+ };
100
+ };
101
+ }
102
+
103
+ // src/shared/api/http.ts
104
+ var HttpError = class extends Error {
105
+ constructor(response) {
106
+ super(`Request failed with ${response.status} status`);
107
+ this.name = "HttpError";
108
+ this.response = response;
109
+ }
110
+ };
111
+ async function makeRequest(request) {
112
+ const headers = {
113
+ Accept: "application/json",
114
+ ...request.method === "POST" && request.body !== void 0 ? { "Content-Type": "application/json" } : {},
115
+ ...request.headers ?? {}
116
+ };
117
+ const init = {
118
+ method: request.method,
119
+ headers,
120
+ ...request.redirect !== void 0 ? { redirect: request.redirect } : {}
121
+ };
122
+ if (request.method === "POST" && request.body !== void 0) {
123
+ init.body = JSON.stringify(request.body);
124
+ }
125
+ const response = await fetch(request.url, init);
126
+ const responseHeaders = headersToRecord(response.headers);
127
+ if (response.status === 204 || response.status === 205) {
128
+ return {
129
+ status: response.status,
130
+ body: null,
131
+ headers: responseHeaders
132
+ };
133
+ }
134
+ if (response.status >= 300 && response.status < 400) {
135
+ await response.text();
136
+ return {
137
+ status: response.status,
138
+ body: null,
139
+ headers: responseHeaders
140
+ };
141
+ }
142
+ const text = await response.text();
143
+ const body = text ? JSON.parse(text) : null;
144
+ return {
145
+ status: response.status,
146
+ body,
147
+ headers: responseHeaders
148
+ };
149
+ }
150
+ function headersToRecord(headers) {
151
+ const record = {};
152
+ headers.forEach((value, key) => {
153
+ record[key.toLowerCase()] = value;
154
+ });
155
+ return record;
156
+ }
157
+ function concatAttributes(request, attrs) {
158
+ const nextAttributes = Attributes.concat(
159
+ request.attributes ?? Attributes.empty,
160
+ attrs
161
+ );
162
+ const nextRequest = {
163
+ ...request,
164
+ attributes: nextAttributes
165
+ };
166
+ return nextRequest;
167
+ }
168
+ var Request = {
169
+ concatAttributes
170
+ };
171
+
172
+ // src/client/core/api/middleware/session-renewal.ts
173
+ function renewSessionMiddleware(fetchAccessToken) {
174
+ return async ({ request, response, retry }) => {
175
+ if (response.status !== 401) {
176
+ return response;
177
+ }
178
+ if (!Attributes.isProtected(request.attributes)) {
179
+ return response;
180
+ }
181
+ if (Attributes.wasRenewAttempted(request.attributes)) {
182
+ return response;
183
+ }
184
+ const newToken = await fetchAccessToken(true);
185
+ if (newToken) {
186
+ const nextRequest = Request.concatAttributes(
187
+ request,
188
+ Attributes.renewAttempted(true)
189
+ );
190
+ return retry(nextRequest);
191
+ } else {
192
+ return response;
193
+ }
194
+ };
195
+ }
196
+
197
+ // src/shared/utils.ts
198
+ async function sha256(data) {
199
+ const bytes = typeof data === "string" ? new TextEncoder().encode(data) : data;
200
+ const buffer = bytes.buffer.slice(
201
+ bytes.byteOffset,
202
+ bytes.byteOffset + bytes.byteLength
203
+ );
204
+ return crypto.subtle.digest("SHA-256", buffer);
205
+ }
206
+ function arrayBufferToBase64Url(buffer, padding = true) {
207
+ const bytes = new Uint8Array(buffer);
208
+ let binary = "";
209
+ for (let i = 0; i < bytes.length; i++) {
210
+ binary += String.fromCharCode(bytes[i]);
211
+ }
212
+ let base64 = btoa(binary);
213
+ base64 = base64.replace(/\+/g, "-").replace(/\//g, "_");
214
+ if (!padding) {
215
+ base64 = base64.replace(/=+$/, "");
216
+ }
217
+ return base64;
218
+ }
219
+ function generateSecureRandomBase64Url(byteLength) {
220
+ const bytes = new Uint8Array(byteLength);
221
+ crypto.getRandomValues(bytes);
222
+ const buffer = bytes.buffer;
223
+ return arrayBufferToBase64Url(buffer, false);
224
+ }
225
+ function getUUIDv4() {
226
+ if (typeof crypto !== "undefined" && typeof crypto.randomUUID === "function") {
227
+ return crypto.randomUUID();
228
+ }
229
+ if (typeof crypto !== "undefined" && typeof crypto.getRandomValues === "function") {
230
+ const bytes = new Uint8Array(16);
231
+ crypto.getRandomValues(bytes);
232
+ bytes[6] = bytes[6] & 15 | 64;
233
+ bytes[8] = bytes[8] & 63 | 128;
234
+ const hex = Array.from(bytes, (b) => b.toString(16).padStart(2, "0"));
235
+ return `${hex.slice(0, 4).join("")}-${hex.slice(4, 6).join("")}-${hex.slice(6, 8).join("")}-${hex.slice(8, 10).join("")}-${hex.slice(10, 16).join("")}`;
236
+ }
237
+ return `${Date.now()}-${Math.random().toString(36).slice(2, 12)}`;
238
+ }
239
+
240
+ // src/client/core/api/middleware/device-id.ts
241
+ var DEVICE_ID_KEY = "coinlist.device_id";
242
+ function getDeviceId() {
243
+ let deviceId = localStorage.getItem(DEVICE_ID_KEY);
244
+ if (!deviceId) {
245
+ deviceId = getUUIDv4();
246
+ localStorage.setItem(DEVICE_ID_KEY, deviceId);
247
+ }
248
+ return deviceId;
249
+ }
250
+
251
+ // src/shared/api/frontline.ts
252
+ var BASE_URL = "https://mobile-api.coinlist.co";
253
+ var HEADER_API_VERSION = "X-API-Version";
254
+ var HEADER_USER_AGENT = "User-Agent";
255
+ var HEADER_IDEMPOTENCY_KEY = "Idempotency-Key";
256
+ var API_VERSION = "2025-10-17";
257
+ var COINLIST_OAUTH_URL = "https://coinlist.co/oauth/authorize";
258
+
259
+ // src/client/core/api/middleware/user-agent.ts
260
+ var userAgentMiddleware = async (request) => {
261
+ if (!Attributes.needUserAgent(request.attributes)) {
262
+ return request;
263
+ }
264
+ const userAgent2 = generateUserAgent();
265
+ return {
266
+ ...request,
267
+ headers: {
268
+ ...request.headers ?? {},
269
+ [HEADER_USER_AGENT]: userAgent2
270
+ }
271
+ };
272
+ };
273
+ function generateUserAgent() {
274
+ const appInfo = `CoinList/1.0`;
275
+ const deviceInfo = "Web Browser";
276
+ const devicePlatform = "DevicePlatform web";
277
+ const deviceAppId = "DeviceAppID co.coinlist.sdk";
278
+ const deviceId = getDeviceId();
279
+ const finalDeviceId = `DeviceID ${deviceId}`;
280
+ return `${appInfo} (${deviceInfo}; ${devicePlatform}; ${deviceAppId}; ${finalDeviceId})`;
281
+ }
282
+
283
+ // src/shared/api/http-client.ts
284
+ var HttpClient = class {
285
+ constructor(config, middleware = {}) {
286
+ this.config = config;
287
+ this.middleware = middleware;
288
+ }
289
+ async send(request) {
290
+ return this.runRequestWithAfterMiddleware(request);
291
+ }
292
+ /**
293
+ * Runs beforeRequest, executeRequest, then the full afterRequest middleware
294
+ * chain. Used by send() and by the retry() callback so that when a
295
+ * middleware calls retry(), the retried response also goes through all
296
+ * afterRequest middleware (e.g. session renewal, retry). Middleware
297
+ * must use request.attributes.retryAttempt (or similar) to avoid infinite
298
+ * recursion when they trigger retries.
299
+ */
300
+ async runRequestWithAfterMiddleware(request) {
301
+ const preparedRequest = await this.runBeforeRequestMiddleware(
302
+ this.withClientDefaults(request)
303
+ );
304
+ let response = await this.executeRequest(preparedRequest);
305
+ for (const middleware of this.middleware.afterRequest ?? []) {
306
+ response = await middleware({
307
+ request: preparedRequest,
308
+ response,
309
+ retry: (nextRequest = preparedRequest) => this.runRequestWithAfterMiddleware(nextRequest)
310
+ });
311
+ }
312
+ return response;
313
+ }
314
+ withClientDefaults(request) {
315
+ const url = this.resolveUrl(request.url);
316
+ const headers = {
317
+ ...request.headers ?? {},
318
+ [HEADER_API_VERSION]: this.config.xApiVersion
319
+ };
320
+ return {
321
+ ...request,
322
+ url,
323
+ headers
324
+ };
325
+ }
326
+ /**
327
+ * Resolves a request URL against the client's baseUrl.
328
+ *
329
+ * @internal Public only for testing. Do not use in application code; use
330
+ * {@link HttpClient.send} with a path and the client will resolve the URL.
331
+ */
332
+ resolveUrl(url) {
333
+ if (url.startsWith("http://") || url.startsWith("https://")) {
334
+ return url;
335
+ }
336
+ const base = this.config.baseUrl.replace(/\/$/, "");
337
+ const path = url.startsWith("/") ? url : `/${url}`;
338
+ return base + path;
339
+ }
340
+ async runBeforeRequestMiddleware(initialRequest) {
341
+ let request = initialRequest;
342
+ for (const middleware of this.middleware.beforeRequest ?? []) {
343
+ request = await middleware(request);
344
+ }
345
+ return request;
346
+ }
347
+ executeRequest(request) {
348
+ return makeRequest(request);
349
+ }
350
+ };
351
+
352
+ // src/shared/api/middleware/idempotency-key.ts
353
+ var idempotencyKeyMiddleware = async (request) => {
354
+ if (!Attributes.isIdempotent(request.attributes)) {
355
+ return request;
356
+ }
357
+ const existingHeaders = request.headers ?? {};
358
+ if (existingHeaders[HEADER_IDEMPOTENCY_KEY]) {
359
+ return request;
360
+ }
361
+ return {
362
+ ...request,
363
+ headers: {
364
+ ...existingHeaders,
365
+ [HEADER_IDEMPOTENCY_KEY]: getUUIDv4()
366
+ }
367
+ };
368
+ };
369
+
370
+ // src/shared/api/middleware/request-retry.ts
371
+ var MAX_ATTEMPTS = 3;
372
+ var INITIAL_DELAY_MS = 300;
373
+ var MAX_DELAY_MS = 2e3;
374
+ var RETRYABLE_4XX = /* @__PURE__ */ new Set([408, 409, 429]);
375
+ function isRetryableStatus(status) {
376
+ return status >= 500 && status < 600 || RETRYABLE_4XX.has(status);
377
+ }
378
+ function getRetryDelayMs(attempt) {
379
+ return Math.min(INITIAL_DELAY_MS * 2 ** (attempt - 1), MAX_DELAY_MS);
380
+ }
381
+ function createRequestRetryMiddleware(options = {}) {
382
+ const delayFn = options.delayFn ?? defaultDelay;
383
+ return async ({ request, response, retry }) => {
384
+ if (!isRetryableStatus(response.status)) {
385
+ return response;
386
+ }
387
+ const currentAttempt = Attributes.getRetryAttempt(request.attributes);
388
+ if (currentAttempt >= MAX_ATTEMPTS - 1) {
389
+ return response;
390
+ }
391
+ const nextAttempt = currentAttempt + 1;
392
+ await delayFn(getRetryDelayMs(nextAttempt));
393
+ const nextRequest = Request.concatAttributes(
394
+ request,
395
+ Attributes.retryAttempt(nextAttempt)
396
+ );
397
+ return retry(nextRequest);
398
+ };
399
+ }
400
+ function defaultDelay(ms) {
401
+ return new Promise((resolve) => setTimeout(resolve, ms));
402
+ }
403
+ var requestRetryMiddleware = createRequestRetryMiddleware();
404
+
405
+ // src/client/core/api/api-client.ts
406
+ var ApiClient = class {
407
+ constructor(config, fetchAccessToken) {
408
+ this.config = config;
409
+ this.fetchAccessToken = fetchAccessToken;
410
+ this.httpClient = new HttpClient(this.config, {
411
+ beforeRequest: [
412
+ attachSessionMiddleware(this.fetchAccessToken),
413
+ userAgentMiddleware,
414
+ idempotencyKeyMiddleware
415
+ ],
416
+ afterRequest: [
417
+ renewSessionMiddleware(this.fetchAccessToken),
418
+ requestRetryMiddleware
419
+ ]
420
+ });
421
+ }
422
+ async send(request) {
423
+ const response = await this.httpClient.send(request);
424
+ if (response.status >= 200 && response.status < 300) {
425
+ return response.body;
426
+ } else {
427
+ throw new HttpError(response);
428
+ }
429
+ }
430
+ };
431
+
432
+ // src/shared/types/oauth.ts
433
+ var AuthorizationCode = (value) => value;
434
+ var CodeVerifier = (value) => value;
435
+ var CodeChallenge = (value) => value;
436
+ var RedirectUri = (value) => value;
437
+ var ClientId = (value) => value;
438
+ var ClientSecret = (value) => value;
439
+
440
+ // src/client/core/coinlist-client.ts
441
+ var OAUTH_STATE_KEY = "coinlist.oauth_state";
442
+ var OAUTH_CODE_VERIFIER_KEY = "coinlist.oauth_code_verifier";
443
+ var CoinListClientImpl = class {
444
+ constructor(_config) {
445
+ this._config = _config;
446
+ /** Cached access token: undefined = loading, null = no token, AccessToken = logged in */
447
+ this._accessToken = void 0;
448
+ this._api = new ApiClient(
449
+ {
450
+ baseUrl: _config.baseUrl || BASE_URL,
451
+ xApiVersion: API_VERSION
452
+ },
453
+ this.fetchAccessToken.bind(this)
454
+ );
455
+ }
456
+ async init() {
457
+ await this.fetchAccessToken(true);
458
+ return this.getAuthState();
459
+ }
460
+ async fetchAccessToken(refresh) {
461
+ if (!refresh && this._accessToken !== void 0) return this._accessToken;
462
+ try {
463
+ const accessToken = await this._config.getAccessToken();
464
+ this._accessToken = accessToken;
465
+ return accessToken;
466
+ } catch (_) {
467
+ this._accessToken = null;
468
+ return null;
469
+ }
470
+ }
471
+ getAuthState() {
472
+ if (this._accessToken === void 0) {
473
+ return "unknown";
474
+ }
475
+ return this._accessToken !== null ? "logged-in" : "logged-out";
476
+ }
477
+ async startOAuth() {
478
+ const state = generateSecureRandomBase64Url(32);
479
+ const codeVerifier = generateSecureRandomBase64Url(32);
480
+ const codeChallengeRaw = await sha256(codeVerifier);
481
+ const codeChallenge = arrayBufferToBase64Url(codeChallengeRaw, false);
482
+ sessionStorage.setItem(OAUTH_STATE_KEY, state);
483
+ sessionStorage.setItem(OAUTH_CODE_VERIFIER_KEY, codeVerifier);
484
+ const params = new URLSearchParams({
485
+ client_id: this._config.clientId,
486
+ response_type: "code",
487
+ redirect_uri: this._config.redirectUri,
488
+ code_challenge: codeChallenge,
489
+ code_challenge_method: "S256",
490
+ state
491
+ });
492
+ const url = `${COINLIST_OAUTH_URL}?${params.toString()}`;
493
+ window.location.href = url;
494
+ }
495
+ completeOAuth() {
496
+ const params = new URLSearchParams(window.location.search);
497
+ const stateParam = params.get("state");
498
+ if (!stateParam) {
499
+ return { type: "error", reason: "missing_state" };
500
+ }
501
+ const storedState = sessionStorage.getItem(OAUTH_STATE_KEY);
502
+ if (storedState === null || storedState !== stateParam) {
503
+ return { type: "error", reason: "invalid_state" };
504
+ }
505
+ const codeParam = params.get("code");
506
+ if (!codeParam) {
507
+ return { type: "error", reason: "missing_code" };
508
+ }
509
+ const codeVerifierValue = sessionStorage.getItem(OAUTH_CODE_VERIFIER_KEY);
510
+ if (!codeVerifierValue) {
511
+ return { type: "error", reason: "missing_code_verifier" };
512
+ }
513
+ return {
514
+ type: "ok",
515
+ code: AuthorizationCode(codeParam),
516
+ codeVerifier: CodeVerifier(codeVerifierValue)
517
+ };
518
+ }
519
+ logout() {
520
+ this._accessToken = null;
521
+ }
522
+ };
523
+ function createCoinListClient(config) {
524
+ return new CoinListClientImpl(config);
525
+ }
526
+
527
+ // src/shared/types/oauth-session.ts
528
+ var OAuthRefreshToken = (value) => value;
529
+ var OAuthSession = {
530
+ fromDto: (dto) => {
531
+ const expiresAt = new Date(Date.now() + dto.expires_in * 1e3);
532
+ return {
533
+ accessToken: {
534
+ value: dto.access_token,
535
+ expiresAt
536
+ },
537
+ ...dto.refresh_token != null && dto.refresh_token !== "" ? { refreshToken: OAuthRefreshToken(dto.refresh_token) } : void 0
538
+ };
539
+ }
540
+ };
541
+
542
+ // src/shared/types/user.ts
543
+ var UserId = (value) => value;
544
+ var UserEmail = (value) => value;
545
+ var User = {
546
+ fromDto: (dto) => ({
547
+ id: UserId(dto.id),
548
+ email: UserEmail(dto.email)
549
+ })
550
+ };
551
+ // Annotate the CommonJS export names for ESM import in node:
552
+ 0 && (module.exports = {
553
+ AuthorizationCode,
554
+ ClientId,
555
+ ClientSecret,
556
+ CodeChallenge,
557
+ CodeVerifier,
558
+ OAuthRefreshToken,
559
+ OAuthSession,
560
+ RedirectUri,
561
+ User,
562
+ UserEmail,
563
+ UserId,
564
+ createCoinListClient
565
+ });
566
+ //# sourceMappingURL=index.cjs.map
@@ -0,0 +1 @@
1
+ {"version":3,"sources":["../../../src/client/core/index.ts","../../../src/shared/api/http-attributes.ts","../../../src/client/core/api/middleware/attach-session-middleware.ts","../../../src/shared/api/http.ts","../../../src/client/core/api/middleware/session-renewal.ts","../../../src/shared/utils.ts","../../../src/client/core/api/middleware/device-id.ts","../../../src/shared/api/frontline.ts","../../../src/client/core/api/middleware/user-agent.ts","../../../src/shared/api/http-client.ts","../../../src/shared/api/middleware/idempotency-key.ts","../../../src/shared/api/middleware/request-retry.ts","../../../src/client/core/api/api-client.ts","../../../src/shared/types/oauth.ts","../../../src/client/core/coinlist-client.ts","../../../src/shared/types/oauth-session.ts","../../../src/shared/types/user.ts"],"sourcesContent":["export {\n type ClientConfig,\n type CoinListClient,\n createCoinListClient,\n} from '@/client/core/coinlist-client';\nexport * from '@/client/core/types/client-types';\nexport * from '@/shared/types/oauth';\nexport * from '@/shared/types/oauth-session';\nexport * from '@/shared/types/user';\n","export type HttpRequestAttributes = {\n protected?: boolean;\n userAgent?: boolean;\n idempotencyKey?: boolean;\n /** Zero-based attempt index: 0 = first request, 1 = first retry, etc. */\n retryAttempt?: number;\n renewAttempted?: boolean;\n};\n\nexport type Attributes = Readonly<HttpRequestAttributes>;\n\nconst empty: Attributes = {};\n\nconst concat = (left: Attributes, right: Attributes): Attributes => ({\n ...left,\n ...right,\n});\n\nconst concatAll = (...items: Attributes[]): Attributes => {\n let result = empty;\n for (const item of items) {\n result = concat(result, item);\n }\n return result;\n};\n\nconst protectedRequest = (): Attributes => ({ protected: true });\nconst userAgent = (): Attributes => ({ userAgent: true });\nconst idempotencyKey = (): Attributes => ({\n idempotencyKey: true,\n});\n\n/** Returns attributes with the given retry attempt (zero-based). */\nconst retryAttempt = (attempt: number): Attributes => ({\n retryAttempt: attempt,\n});\nconst renewAttempted = (value: boolean): Attributes => ({\n renewAttempted: value,\n});\n\nconst isProtected = (attrs?: HttpRequestAttributes): boolean =>\n attrs?.protected === true;\nconst needUserAgent = (attrs?: HttpRequestAttributes): boolean =>\n attrs?.userAgent === true;\nconst isIdempotent = (attrs?: HttpRequestAttributes): boolean =>\n attrs?.idempotencyKey === true;\nconst getRetryAttempt = (attrs?: HttpRequestAttributes): number =>\n attrs?.retryAttempt ?? 0;\nconst wasRenewAttempted = (attrs?: HttpRequestAttributes): boolean =>\n attrs?.renewAttempted === true;\n\nexport const Attributes = {\n empty,\n concat,\n concatAll,\n protected: protectedRequest,\n isProtected,\n userAgent,\n needUserAgent,\n idempotencyKey,\n isIdempotent,\n retryAttempt,\n getRetryAttempt,\n renewAttempted,\n wasRenewAttempted,\n} as const;\n","import type { HttpRequest } from '@/shared/api/http';\nimport { Attributes } from '@/shared/api/http-attributes';\nimport type { BeforeRequestMiddleware } from '@/shared/api/http-client';\nimport type { OAuthAccessToken } from '@/shared/types/oauth-session';\n\nexport function attachSessionMiddleware(\n fetchAccessToken: (refresh: boolean) => Promise<OAuthAccessToken | null>\n): BeforeRequestMiddleware {\n return async (request: HttpRequest): Promise<HttpRequest> => {\n if (!Attributes.isProtected(request.attributes)) {\n return request;\n }\n\n const accessToken = await fetchAccessToken(false);\n if (accessToken === null) {\n return request;\n }\n\n return {\n ...request,\n headers: {\n ...(request.headers ?? {}),\n Authorization: `Bearer ${accessToken.value}`,\n },\n };\n };\n}\n","import {\n Attributes,\n type HttpRequestAttributes,\n} from '@/shared/api/http-attributes';\n\nexport type HttpClientConfig = {\n baseUrl: string;\n xApiVersion: string;\n};\n\nexport type HttpRequest<TBody = unknown> =\n | {\n method: 'GET';\n url: string;\n headers?: Record<string, string>;\n attributes?: HttpRequestAttributes;\n redirect?: RequestRedirect;\n }\n | {\n method: 'POST';\n url: string;\n headers?: Record<string, string>;\n body: TBody;\n attributes?: HttpRequestAttributes;\n redirect?: RequestRedirect;\n };\nexport type HttpResponse<TBody = unknown> = {\n status: number;\n headers?: Record<string, string>;\n body: TBody | null;\n};\n\nexport class HttpError<TBody = unknown> extends Error {\n readonly response: HttpResponse<TBody>;\n\n constructor(response: HttpResponse<TBody>) {\n super(`Request failed with ${response.status} status`);\n this.name = 'HttpError';\n this.response = response;\n }\n}\n\nexport async function makeRequest<TResponse = unknown>(\n request: HttpRequest\n): Promise<HttpResponse<TResponse>> {\n const headers: Record<string, string> = {\n Accept: 'application/json',\n ...(request.method === 'POST' && request.body !== undefined\n ? { 'Content-Type': 'application/json' }\n : {}),\n ...(request.headers ?? {}),\n };\n\n const init: RequestInit = {\n method: request.method,\n headers,\n ...(request.redirect !== undefined ? { redirect: request.redirect } : {}),\n };\n\n if (request.method === 'POST' && request.body !== undefined) {\n init.body = JSON.stringify(request.body);\n }\n\n const response = await fetch(request.url, init);\n const responseHeaders = headersToRecord(response.headers);\n\n if (response.status === 204 || response.status === 205) {\n return {\n status: response.status,\n body: null,\n headers: responseHeaders,\n };\n }\n\n if (response.status >= 300 && response.status < 400) {\n await response.text();\n return {\n status: response.status,\n body: null,\n headers: responseHeaders,\n };\n }\n\n const text = await response.text();\n const body = text ? (JSON.parse(text) as TResponse) : null;\n\n return {\n status: response.status,\n body,\n headers: responseHeaders,\n };\n}\n\nfunction headersToRecord(headers: Headers): Record<string, string> {\n const record: Record<string, string> = {};\n headers.forEach((value, key) => {\n record[key.toLowerCase()] = value;\n });\n return record;\n}\n\nfunction concatAttributes(\n request: HttpRequest,\n attrs: Attributes\n): HttpRequest {\n const nextAttributes = Attributes.concat(\n request.attributes ?? Attributes.empty,\n attrs\n );\n const nextRequest: typeof request = {\n ...request,\n attributes: nextAttributes,\n };\n return nextRequest;\n}\n\nexport const Request = {\n concatAttributes,\n};\n","import { Request } from '@/shared/api/http';\nimport { Attributes } from '@/shared/api/http-attributes';\nimport type { AfterRequestMiddleware } from '@/shared/api/http-client';\nimport type { OAuthAccessToken } from '@/shared/types/oauth-session';\n\nexport function renewSessionMiddleware(\n fetchAccessToken: (refresh: boolean) => Promise<OAuthAccessToken | null>\n): AfterRequestMiddleware {\n return async ({ request, response, retry }) => {\n if (response.status !== 401) {\n return response;\n }\n if (!Attributes.isProtected(request.attributes)) {\n return response;\n }\n if (Attributes.wasRenewAttempted(request.attributes)) {\n return response;\n }\n\n const newToken = await fetchAccessToken(true);\n if (newToken) {\n const nextRequest = Request.concatAttributes(\n request,\n Attributes.renewAttempted(true)\n );\n return retry(nextRequest);\n } else {\n return response;\n }\n };\n}\n","/**\n * Computes SHA-256 digest of the input (UTF-8 string or raw bytes).\n * Uses the Web Crypto API.\n */\nexport async function sha256(data: string | Uint8Array): Promise<ArrayBuffer> {\n const bytes =\n typeof data === 'string' ? new TextEncoder().encode(data) : data;\n const buffer = bytes.buffer.slice(\n bytes.byteOffset,\n bytes.byteOffset + bytes.byteLength\n ) as ArrayBuffer;\n return crypto.subtle.digest('SHA-256', buffer);\n}\n\n/**\n * Converts an ArrayBuffer to Base64-URL encoding (RFC 4648).\n * @param padding - If false, omits trailing '=' padding (e.g. for PKCE).\n */\nexport function arrayBufferToBase64Url(\n buffer: ArrayBuffer,\n padding: boolean = true\n): string {\n const bytes = new Uint8Array(buffer);\n let binary = '';\n for (let i = 0; i < bytes.length; i++) {\n binary += String.fromCharCode(bytes[i]);\n }\n let base64 = btoa(binary);\n base64 = base64.replace(/\\+/g, '-').replace(/\\//g, '_');\n if (!padding) {\n base64 = base64.replace(/=+$/, '');\n }\n return base64;\n}\n\n/**\n * Securely generates random bytes and returns them as Base64-URL (no padding).\n * Suitable for PKCE code_verifier and OAuth state.\n * @param byteLength - Number of random bytes (e.g. 32 for PKCE).\n */\nexport function generateSecureRandomBase64Url(byteLength: number): string {\n const bytes = new Uint8Array(byteLength);\n crypto.getRandomValues(bytes);\n const buffer = bytes.buffer;\n return arrayBufferToBase64Url(buffer, false);\n}\n\n/**\n * Generate a UUID v4 using the standard Web Crypto API (crypto.randomUUID).\n * Falls back to RFC 4122–compliant generation via crypto.getRandomValues in old browsers.\n */\nexport function getUUIDv4(): string {\n if (\n typeof crypto !== 'undefined' &&\n typeof crypto.randomUUID === 'function'\n ) {\n return crypto.randomUUID();\n }\n\n if (\n typeof crypto !== 'undefined' &&\n typeof crypto.getRandomValues === 'function'\n ) {\n const bytes = new Uint8Array(16);\n crypto.getRandomValues(bytes);\n bytes[6] = (bytes[6] & 0x0f) | 0x40;\n bytes[8] = (bytes[8] & 0x3f) | 0x80;\n const hex = Array.from(bytes, (b) => b.toString(16).padStart(2, '0'));\n return `${hex.slice(0, 4).join('')}-${hex.slice(4, 6).join('')}-${hex.slice(6, 8).join('')}-${hex.slice(8, 10).join('')}-${hex.slice(10, 16).join('')}`;\n }\n\n return `${Date.now()}-${Math.random().toString(36).slice(2, 12)}`;\n}\n","'use client';\n\nimport { getUUIDv4 } from '@/shared/utils';\n\nconst DEVICE_ID_KEY = 'coinlist.device_id';\n\n/**\n * Get or create a device ID stored in localStorage.\n * Uses a crypto UUID that persists across sessions.\n */\nexport function getDeviceId(): string {\n let deviceId = localStorage.getItem(DEVICE_ID_KEY);\n\n if (!deviceId) {\n deviceId = getUUIDv4();\n localStorage.setItem(DEVICE_ID_KEY, deviceId);\n }\n\n return deviceId;\n}\n\n/**\n * Clear the stored device ID (useful for testing or logout).\n */\nexport function clearDeviceId(): void {\n localStorage.removeItem(DEVICE_ID_KEY);\n}\n","export const BASE_URL = 'https://mobile-api.coinlist.co';\nexport const HEADER_API_VERSION = 'X-API-Version';\nexport const HEADER_USER_AGENT = 'User-Agent';\nexport const HEADER_IDEMPOTENCY_KEY = 'Idempotency-Key';\nexport const API_VERSION = '2025-10-17';\n\nexport const COINLIST_OAUTH_URL = 'https://coinlist.co/oauth/authorize';\n","'use client';\n\nimport { getDeviceId } from '@/client/core/api/middleware/device-id';\nimport { HEADER_USER_AGENT } from '@/shared/api/frontline';\nimport type { HttpRequest } from '@/shared/api/http';\nimport { Attributes } from '@/shared/api/http-attributes';\nimport type { BeforeRequestMiddleware } from '@/shared/api/http-client';\n\nexport const userAgentMiddleware: BeforeRequestMiddleware = async (\n request: HttpRequest\n): Promise<HttpRequest> => {\n if (!Attributes.needUserAgent(request.attributes)) {\n return request;\n }\n\n const userAgent = generateUserAgent();\n return {\n ...request,\n headers: {\n ...(request.headers ?? {}),\n [HEADER_USER_AGENT]: userAgent,\n },\n };\n};\n\n// Generate User-Agent in the required format for Frontline API\n// Format: <app-info> (<device-info>; DevicePlatform <device-platform>; DeviceAppID <device-app-id>; DeviceID <device-id>)\nfunction generateUserAgent(): string {\n const appInfo = `CoinList/1.0`;\n const deviceInfo = 'Web Browser';\n const devicePlatform = 'DevicePlatform web'; // Must be 'web' for validation\n\n const deviceAppId = 'DeviceAppID co.coinlist.sdk'; // SDK app ID\n\n const deviceId = getDeviceId();\n const finalDeviceId = `DeviceID ${deviceId}`;\n\n return `${appInfo} (${deviceInfo}; ${devicePlatform}; ${deviceAppId}; ${finalDeviceId})`;\n}\n","import { HEADER_API_VERSION } from '@/shared/api/frontline';\nimport type {\n HttpClientConfig,\n HttpRequest,\n HttpResponse,\n} from '@/shared/api/http';\nimport { makeRequest } from '@/shared/api/http';\n\nexport type BeforeRequestMiddleware = (\n request: HttpRequest\n) => Promise<HttpRequest>;\n\nexport type AfterRequestMiddleware = (args: {\n request: HttpRequest;\n response: HttpResponse<unknown>;\n retry: (request?: HttpRequest) => Promise<HttpResponse<unknown>>;\n}) => Promise<HttpResponse<unknown>>;\n\nexport type HttpClientMiddleware = {\n beforeRequest?: BeforeRequestMiddleware[];\n afterRequest?: AfterRequestMiddleware[];\n};\n\nexport class HttpClient {\n constructor(\n readonly config: HttpClientConfig,\n readonly middleware: HttpClientMiddleware = {}\n ) {}\n\n async send<TResponse = unknown>(\n request: HttpRequest\n ): Promise<HttpResponse<TResponse>> {\n return this.runRequestWithAfterMiddleware<TResponse>(request);\n }\n\n /**\n * Runs beforeRequest, executeRequest, then the full afterRequest middleware\n * chain. Used by send() and by the retry() callback so that when a\n * middleware calls retry(), the retried response also goes through all\n * afterRequest middleware (e.g. session renewal, retry). Middleware\n * must use request.attributes.retryAttempt (or similar) to avoid infinite\n * recursion when they trigger retries.\n */\n private async runRequestWithAfterMiddleware<TResponse = unknown>(\n request: HttpRequest\n ): Promise<HttpResponse<TResponse>> {\n const preparedRequest = await this.runBeforeRequestMiddleware(\n this.withClientDefaults(request)\n );\n let response = await this.executeRequest<TResponse>(preparedRequest);\n\n for (const middleware of this.middleware.afterRequest ?? []) {\n response = (await middleware({\n request: preparedRequest,\n response,\n retry: (nextRequest = preparedRequest) =>\n this.runRequestWithAfterMiddleware(nextRequest) as Promise<\n HttpResponse<TResponse>\n >,\n })) as HttpResponse<TResponse>;\n }\n\n return response;\n }\n\n private withClientDefaults(request: HttpRequest): HttpRequest {\n const url = this.resolveUrl(request.url);\n const headers = {\n ...(request.headers ?? {}),\n [HEADER_API_VERSION]: this.config.xApiVersion,\n };\n\n return {\n ...request,\n url,\n headers,\n };\n }\n\n /**\n * Resolves a request URL against the client's baseUrl.\n *\n * @internal Public only for testing. Do not use in application code; use\n * {@link HttpClient.send} with a path and the client will resolve the URL.\n */\n resolveUrl(url: string): string {\n // If already absolute, use as-is.\n if (url.startsWith('http://') || url.startsWith('https://')) {\n return url;\n }\n // Otherwise append path to baseUrl so base path (e.g. /api) is preserved.\n const base = this.config.baseUrl.replace(/\\/$/, '');\n const path = url.startsWith('/') ? url : `/${url}`;\n return base + path;\n }\n\n private async runBeforeRequestMiddleware(\n initialRequest: HttpRequest\n ): Promise<HttpRequest> {\n let request = initialRequest;\n for (const middleware of this.middleware.beforeRequest ?? []) {\n request = await middleware(request);\n }\n\n return request;\n }\n\n private executeRequest<TResponse = unknown>(\n request: HttpRequest\n ): Promise<HttpResponse<TResponse>> {\n return makeRequest<TResponse>(request);\n }\n}\n","import { HEADER_IDEMPOTENCY_KEY } from '@/shared/api/frontline';\nimport type { HttpRequest } from '@/shared/api/http';\nimport { Attributes } from '@/shared/api/http-attributes';\nimport type { BeforeRequestMiddleware } from '@/shared/api/http-client';\nimport { getUUIDv4 } from '@/shared/utils';\n\nexport const idempotencyKeyMiddleware: BeforeRequestMiddleware = async (\n request: HttpRequest\n): Promise<HttpRequest> => {\n if (!Attributes.isIdempotent(request.attributes)) {\n return request;\n }\n\n const existingHeaders = request.headers ?? {};\n if (existingHeaders[HEADER_IDEMPOTENCY_KEY]) {\n return request;\n }\n\n return {\n ...request,\n headers: {\n ...existingHeaders,\n [HEADER_IDEMPOTENCY_KEY]: getUUIDv4(),\n },\n };\n};\n","import { Request } from '@/shared/api/http';\nimport { Attributes } from '@/shared/api/http-attributes';\nimport type { AfterRequestMiddleware } from '@/shared/api/http-client';\n\nconst MAX_ATTEMPTS = 3;\nconst INITIAL_DELAY_MS = 300;\nconst MAX_DELAY_MS = 2000;\n\nconst RETRYABLE_4XX = new Set([408, 409, 429]);\n\nexport function isRetryableStatus(status: number): boolean {\n return (status >= 500 && status < 600) || RETRYABLE_4XX.has(status);\n}\n\nfunction getRetryDelayMs(attempt: number): number {\n return Math.min(INITIAL_DELAY_MS * 2 ** (attempt - 1), MAX_DELAY_MS);\n}\n\nexport type RequestRetryMiddlewareOptions = {\n /**\n * Optional delay function. Defaults to real setTimeout-based delay.\n * Use a no-op (e.g. () => Promise.resolve()) in tests to avoid slow tests.\n */\n delayFn?: (ms: number) => Promise<void>;\n};\n\n/**\n * Creates the request retry after-request middleware. Inject a no-op delayFn\n * in tests to avoid real delays (unit testing best practice).\n */\nexport function createRequestRetryMiddleware(\n options: RequestRetryMiddlewareOptions = {}\n): AfterRequestMiddleware {\n const delayFn = options.delayFn ?? defaultDelay;\n\n return async ({ request, response, retry }) => {\n if (!isRetryableStatus(response.status)) {\n return response;\n }\n\n const currentAttempt = Attributes.getRetryAttempt(request.attributes);\n if (currentAttempt >= MAX_ATTEMPTS - 1) {\n return response;\n }\n\n const nextAttempt = currentAttempt + 1;\n await delayFn(getRetryDelayMs(nextAttempt));\n\n const nextRequest = Request.concatAttributes(\n request,\n Attributes.retryAttempt(nextAttempt)\n );\n return retry(nextRequest);\n };\n}\n\nfunction defaultDelay(ms: number): Promise<void> {\n return new Promise((resolve) => setTimeout(resolve, ms));\n}\n\n/**\n * Retries the request up to 3 times with exponential backoff when the response\n * has a retryable status (5xx server errors). Uses request.attributes.retryAttempt\n * to decide delay and whether to retry, so the middleware does not loop when\n * retry() runs the full HTTP middleware chain again.\n */\nexport const requestRetryMiddleware: AfterRequestMiddleware =\n createRequestRetryMiddleware();\n","'use client';\n\nimport { attachSessionMiddleware } from '@/client/core/api/middleware/attach-session-middleware';\nimport { renewSessionMiddleware } from '@/client/core/api/middleware/session-renewal';\nimport { userAgentMiddleware } from '@/client/core/api/middleware/user-agent';\nimport {\n type HttpClientConfig,\n HttpError,\n type HttpRequest,\n} from '@/shared/api/http';\nimport { HttpClient } from '@/shared/api/http-client';\nimport { idempotencyKeyMiddleware } from '@/shared/api/middleware/idempotency-key';\nimport { requestRetryMiddleware } from '@/shared/api/middleware/request-retry';\nimport type { OAuthAccessToken } from '@/shared/types/oauth-session';\n\nexport class ApiClient {\n private readonly httpClient: HttpClient;\n\n constructor(\n readonly config: HttpClientConfig,\n readonly fetchAccessToken: (\n refresh: boolean\n ) => Promise<OAuthAccessToken | null>\n ) {\n this.httpClient = new HttpClient(this.config, {\n beforeRequest: [\n attachSessionMiddleware(this.fetchAccessToken),\n userAgentMiddleware,\n idempotencyKeyMiddleware,\n ],\n afterRequest: [\n renewSessionMiddleware(this.fetchAccessToken),\n requestRetryMiddleware,\n ],\n });\n }\n\n async send<TResponse>(request: HttpRequest): Promise<TResponse> {\n const response = await this.httpClient.send<TResponse>(request);\n if (response.status >= 200 && response.status < 300) {\n return response.body as TResponse;\n } else {\n throw new HttpError(response);\n }\n }\n}\n","import type { Newtype } from '@/shared/types/newtype';\n\nexport type AuthorizationCode = Newtype<string, 'AuthorizationCode'>;\nexport const AuthorizationCode = (value: string): AuthorizationCode =>\n value as AuthorizationCode;\n\nexport type CodeVerifier = Newtype<string, 'CodeVerifier'>;\nexport const CodeVerifier = (value: string): CodeVerifier =>\n value as CodeVerifier;\n\nexport type CodeChallenge = Newtype<string, 'CodeChallenge'>;\nexport const CodeChallenge = (value: string): CodeChallenge =>\n value as CodeChallenge;\n\nexport type RedirectUri = Newtype<string, 'RedirectUri'>;\nexport const RedirectUri = (value: string): RedirectUri => value as RedirectUri;\n\nexport type ClientId = Newtype<string, 'ClientId'>;\nexport const ClientId = (value: string): ClientId => value as ClientId;\n\nexport type ClientSecret = Newtype<string, 'ClientSecret'>;\nexport const ClientSecret = (value: string): ClientSecret =>\n value as ClientSecret;\n","'use client';\n\nimport { ApiClient } from '@/client/core/api/api-client';\nimport type {\n AuthState,\n OauthClientResult,\n} from '@/client/core/types/client-types';\nimport {\n API_VERSION,\n BASE_URL,\n COINLIST_OAUTH_URL,\n} from '@/shared/api/frontline';\nimport type { Config } from '@/shared/types/config';\nimport { AuthorizationCode, CodeVerifier } from '@/shared/types/oauth';\nimport type { OAuthAccessToken } from '@/shared/types/oauth-session';\nimport {\n arrayBufferToBase64Url,\n generateSecureRandomBase64Url,\n sha256,\n} from '@/shared/utils';\n\n/** Session storage keys for OAuth PKCE (used by startOauth and completeOauth). */\nexport const OAUTH_STATE_KEY = 'coinlist.oauth_state';\nexport const OAUTH_CODE_VERIFIER_KEY = 'coinlist.oauth_code_verifier';\n\nexport interface ClientConfig extends Config {\n /**\n * The SDK user must provide this function. It is responsible for fetching a\n * valid {@link OAuthAccessToken}, or **null** for logged-out users. If your\n * backend is in TypeScript, it is recommended to use\n * {@link CoinListServer#accessToken} from `@/server/coinlist.server`.\n */\n getAccessToken: () => Promise<OAuthAccessToken | null>;\n}\n\nexport interface CoinListClient {\n /**\n * Calls the provided {@link ClientConfig.getAccessToken} lambda to determine\n * the user's {@link AuthState}. This is called automatically by {@link CoinListProvider};\n * you typically do not need to call it yourself unless you are using the client\n * outside of the provider.\n */\n init(): Promise<AuthState>;\n /**\n * Returns the current auth state: `'logged-in'`, `'logged-out'`, or `'unknown'`.\n * Returns **unknown** until {@link CoinListClient.init} has completed. It is\n * recommended to use the `const { isReady, coinlist } = useCoinList()` hook to know when\n * the SDK has initialized, or to manually await {@link CoinListClient.init}\n * before relying on this value.\n */\n getAuthState(): AuthState;\n /**\n * Starts the OAuth flow with PKCE. Generates a random `state` and `code_verifier`,\n * stores them in sessionStorage (for validation in {@link CoinListClient.completeOAuth}\n * on redirect), then redirects the user to the CoinList authorization page. After\n * the user authorizes, they are sent back to your application's redirect URI; call\n * {@link CoinListClient.completeOAuth} on that page to finish the flow.\n */\n startOAuth(): Promise<void>;\n /**\n * Completes the OAuth flow on the FE with PKCE and state validation. Parses the\n * redirect URL (state, code) and validates them against sessionStorage\n * (state, code_verifier). The state check protects against CSRF (cross-site\n * request forgery). Call this on the frontend page the user is redirected\n * to after authorizing.\n *\n * On `ok`: Call your backend to exchange the short-lived `authorizationCode`\n * (and the returned `codeVerifier`) for a long-lived session. If your backend\n * is in TypeScript, you can use {@link CoinListServer#completeOAuth} from\n * `@/server/coinlist.server` (CoinListServer) to perform that exchange.\n *\n * On `error`: `reason` is an {@link OauthClientErrorReason} (e.g. `'missing_state'`, `'invalid_state'`) so you can switch on it and surface a message to the user.\n */\n completeOAuth(): OauthClientResult;\n /**\n * Clears the in-memory access token. Note: you need to manually\n * also logout on the backend via CoinListServer#logout to clear the session cookie.\n */\n logout(): void;\n}\n\nclass CoinListClientImpl implements CoinListClient {\n /** Cached access token: undefined = loading, null = no token, AccessToken = logged in */\n private _accessToken: OAuthAccessToken | null | undefined = undefined;\n // biome-ignore lint/correctness/noUnusedPrivateClassMembers: we'll need it\n private readonly _api: ApiClient;\n\n constructor(readonly _config: ClientConfig) {\n this._api = new ApiClient(\n {\n baseUrl: _config.baseUrl || BASE_URL,\n xApiVersion: API_VERSION,\n },\n this.fetchAccessToken.bind(this)\n );\n }\n\n async init(): Promise<AuthState> {\n await this.fetchAccessToken(true);\n return this.getAuthState();\n }\n\n async fetchAccessToken(refresh: boolean): Promise<OAuthAccessToken | null> {\n if (!refresh && this._accessToken !== undefined) return this._accessToken;\n\n try {\n const accessToken = await this._config.getAccessToken();\n this._accessToken = accessToken;\n return accessToken;\n } catch (_) {\n this._accessToken = null;\n return null;\n }\n }\n\n getAuthState(): AuthState {\n if (this._accessToken === undefined) {\n return 'unknown';\n }\n return this._accessToken !== null ? 'logged-in' : 'logged-out';\n }\n\n async startOAuth(): Promise<void> {\n const state = generateSecureRandomBase64Url(32);\n const codeVerifier = generateSecureRandomBase64Url(32);\n\n const codeChallengeRaw = await sha256(codeVerifier);\n const codeChallenge = arrayBufferToBase64Url(codeChallengeRaw, false);\n\n sessionStorage.setItem(OAUTH_STATE_KEY, state);\n sessionStorage.setItem(OAUTH_CODE_VERIFIER_KEY, codeVerifier);\n\n const params = new URLSearchParams({\n client_id: this._config.clientId,\n response_type: 'code',\n redirect_uri: this._config.redirectUri,\n code_challenge: codeChallenge,\n code_challenge_method: 'S256',\n state,\n });\n const url = `${COINLIST_OAUTH_URL}?${params.toString()}`;\n window.location.href = url;\n }\n\n completeOAuth(): OauthClientResult {\n const params = new URLSearchParams(window.location.search);\n\n const stateParam = params.get('state');\n if (!stateParam) {\n return { type: 'error', reason: 'missing_state' };\n }\n const storedState = sessionStorage.getItem(OAUTH_STATE_KEY);\n if (storedState === null || storedState !== stateParam) {\n return { type: 'error', reason: 'invalid_state' };\n }\n\n const codeParam = params.get('code');\n if (!codeParam) {\n return { type: 'error', reason: 'missing_code' };\n }\n\n const codeVerifierValue = sessionStorage.getItem(OAUTH_CODE_VERIFIER_KEY);\n if (!codeVerifierValue) {\n return { type: 'error', reason: 'missing_code_verifier' };\n }\n\n return {\n type: 'ok',\n code: AuthorizationCode(codeParam),\n codeVerifier: CodeVerifier(codeVerifierValue),\n };\n }\n\n logout(): void {\n this._accessToken = null;\n }\n}\n\nexport function createCoinListClient(config: ClientConfig): CoinListClient {\n return new CoinListClientImpl(config);\n}\n","import type { OAuthSessionDto } from '@/shared/types/dto/oauth-session';\nimport type { Newtype } from '@/shared/types/newtype';\n\nexport type OAuthAccessToken = {\n value: string;\n expiresAt: Date;\n};\n\nexport type OAuthRefreshToken = Newtype<string, 'OAuthRefreshToken'>;\nexport const OAuthRefreshToken = (value: string) => value as OAuthRefreshToken;\n\nexport type OAuthSession = {\n accessToken: OAuthAccessToken;\n refreshToken?: OAuthRefreshToken;\n};\n\nexport const OAuthSession = {\n fromDto: (dto: OAuthSessionDto): OAuthSession => {\n const expiresAt = new Date(Date.now() + dto.expires_in * 1000);\n return {\n accessToken: {\n value: dto.access_token,\n expiresAt,\n },\n ...(dto.refresh_token != null && dto.refresh_token !== ''\n ? { refreshToken: OAuthRefreshToken(dto.refresh_token) }\n : undefined),\n };\n },\n};\n","import type { UserDto } from '@/shared/types/dto/user';\nimport type { Newtype } from '@/shared/types/newtype';\n\nexport type UserId = Newtype<string, 'UserId'>;\nexport const UserId = (value: string) => value as UserId;\nexport type UserEmail = Newtype<string, 'UserEmail'>;\nexport const UserEmail = (value: string) => value as UserEmail;\n\nexport type User = {\n id: UserId;\n email: UserEmail;\n};\n\nexport const User = {\n fromDto: (dto: UserDto): User => ({\n id: UserId(dto.id),\n email: UserEmail(dto.email),\n }),\n};\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;;;ACWA,IAAM,QAAoB,CAAC;AAE3B,IAAM,SAAS,CAAC,MAAkB,WAAmC;AAAA,EACnE,GAAG;AAAA,EACH,GAAG;AACL;AAEA,IAAM,YAAY,IAAI,UAAoC;AACxD,MAAI,SAAS;AACb,aAAW,QAAQ,OAAO;AACxB,aAAS,OAAO,QAAQ,IAAI;AAAA,EAC9B;AACA,SAAO;AACT;AAEA,IAAM,mBAAmB,OAAmB,EAAE,WAAW,KAAK;AAC9D,IAAM,YAAY,OAAmB,EAAE,WAAW,KAAK;AACvD,IAAM,iBAAiB,OAAmB;AAAA,EACxC,gBAAgB;AAClB;AAGA,IAAM,eAAe,CAAC,aAAiC;AAAA,EACrD,cAAc;AAChB;AACA,IAAM,iBAAiB,CAAC,WAAgC;AAAA,EACtD,gBAAgB;AAClB;AAEA,IAAM,cAAc,CAAC,UACnB,OAAO,cAAc;AACvB,IAAM,gBAAgB,CAAC,UACrB,OAAO,cAAc;AACvB,IAAM,eAAe,CAAC,UACpB,OAAO,mBAAmB;AAC5B,IAAM,kBAAkB,CAAC,UACvB,OAAO,gBAAgB;AACzB,IAAM,oBAAoB,CAAC,UACzB,OAAO,mBAAmB;AAErB,IAAM,aAAa;AAAA,EACxB;AAAA,EACA;AAAA,EACA;AAAA,EACA,WAAW;AAAA,EACX;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;;;AC5DO,SAAS,wBACd,kBACyB;AACzB,SAAO,OAAO,YAA+C;AAC3D,QAAI,CAAC,WAAW,YAAY,QAAQ,UAAU,GAAG;AAC/C,aAAO;AAAA,IACT;AAEA,UAAM,cAAc,MAAM,iBAAiB,KAAK;AAChD,QAAI,gBAAgB,MAAM;AACxB,aAAO;AAAA,IACT;AAEA,WAAO;AAAA,MACL,GAAG;AAAA,MACH,SAAS;AAAA,QACP,GAAI,QAAQ,WAAW,CAAC;AAAA,QACxB,eAAe,UAAU,YAAY,KAAK;AAAA,MAC5C;AAAA,IACF;AAAA,EACF;AACF;;;ACMO,IAAM,YAAN,cAAyC,MAAM;AAAA,EAGpD,YAAY,UAA+B;AACzC,UAAM,uBAAuB,SAAS,MAAM,SAAS;AACrD,SAAK,OAAO;AACZ,SAAK,WAAW;AAAA,EAClB;AACF;AAEA,eAAsB,YACpB,SACkC;AAClC,QAAM,UAAkC;AAAA,IACtC,QAAQ;AAAA,IACR,GAAI,QAAQ,WAAW,UAAU,QAAQ,SAAS,SAC9C,EAAE,gBAAgB,mBAAmB,IACrC,CAAC;AAAA,IACL,GAAI,QAAQ,WAAW,CAAC;AAAA,EAC1B;AAEA,QAAM,OAAoB;AAAA,IACxB,QAAQ,QAAQ;AAAA,IAChB;AAAA,IACA,GAAI,QAAQ,aAAa,SAAY,EAAE,UAAU,QAAQ,SAAS,IAAI,CAAC;AAAA,EACzE;AAEA,MAAI,QAAQ,WAAW,UAAU,QAAQ,SAAS,QAAW;AAC3D,SAAK,OAAO,KAAK,UAAU,QAAQ,IAAI;AAAA,EACzC;AAEA,QAAM,WAAW,MAAM,MAAM,QAAQ,KAAK,IAAI;AAC9C,QAAM,kBAAkB,gBAAgB,SAAS,OAAO;AAExD,MAAI,SAAS,WAAW,OAAO,SAAS,WAAW,KAAK;AACtD,WAAO;AAAA,MACL,QAAQ,SAAS;AAAA,MACjB,MAAM;AAAA,MACN,SAAS;AAAA,IACX;AAAA,EACF;AAEA,MAAI,SAAS,UAAU,OAAO,SAAS,SAAS,KAAK;AACnD,UAAM,SAAS,KAAK;AACpB,WAAO;AAAA,MACL,QAAQ,SAAS;AAAA,MACjB,MAAM;AAAA,MACN,SAAS;AAAA,IACX;AAAA,EACF;AAEA,QAAM,OAAO,MAAM,SAAS,KAAK;AACjC,QAAM,OAAO,OAAQ,KAAK,MAAM,IAAI,IAAkB;AAEtD,SAAO;AAAA,IACL,QAAQ,SAAS;AAAA,IACjB;AAAA,IACA,SAAS;AAAA,EACX;AACF;AAEA,SAAS,gBAAgB,SAA0C;AACjE,QAAM,SAAiC,CAAC;AACxC,UAAQ,QAAQ,CAAC,OAAO,QAAQ;AAC9B,WAAO,IAAI,YAAY,CAAC,IAAI;AAAA,EAC9B,CAAC;AACD,SAAO;AACT;AAEA,SAAS,iBACP,SACA,OACa;AACb,QAAM,iBAAiB,WAAW;AAAA,IAChC,QAAQ,cAAc,WAAW;AAAA,IACjC;AAAA,EACF;AACA,QAAM,cAA8B;AAAA,IAClC,GAAG;AAAA,IACH,YAAY;AAAA,EACd;AACA,SAAO;AACT;AAEO,IAAM,UAAU;AAAA,EACrB;AACF;;;ACjHO,SAAS,uBACd,kBACwB;AACxB,SAAO,OAAO,EAAE,SAAS,UAAU,MAAM,MAAM;AAC7C,QAAI,SAAS,WAAW,KAAK;AAC3B,aAAO;AAAA,IACT;AACA,QAAI,CAAC,WAAW,YAAY,QAAQ,UAAU,GAAG;AAC/C,aAAO;AAAA,IACT;AACA,QAAI,WAAW,kBAAkB,QAAQ,UAAU,GAAG;AACpD,aAAO;AAAA,IACT;AAEA,UAAM,WAAW,MAAM,iBAAiB,IAAI;AAC5C,QAAI,UAAU;AACZ,YAAM,cAAc,QAAQ;AAAA,QAC1B;AAAA,QACA,WAAW,eAAe,IAAI;AAAA,MAChC;AACA,aAAO,MAAM,WAAW;AAAA,IAC1B,OAAO;AACL,aAAO;AAAA,IACT;AAAA,EACF;AACF;;;AC1BA,eAAsB,OAAO,MAAiD;AAC5E,QAAM,QACJ,OAAO,SAAS,WAAW,IAAI,YAAY,EAAE,OAAO,IAAI,IAAI;AAC9D,QAAM,SAAS,MAAM,OAAO;AAAA,IAC1B,MAAM;AAAA,IACN,MAAM,aAAa,MAAM;AAAA,EAC3B;AACA,SAAO,OAAO,OAAO,OAAO,WAAW,MAAM;AAC/C;AAMO,SAAS,uBACd,QACA,UAAmB,MACX;AACR,QAAM,QAAQ,IAAI,WAAW,MAAM;AACnC,MAAI,SAAS;AACb,WAAS,IAAI,GAAG,IAAI,MAAM,QAAQ,KAAK;AACrC,cAAU,OAAO,aAAa,MAAM,CAAC,CAAC;AAAA,EACxC;AACA,MAAI,SAAS,KAAK,MAAM;AACxB,WAAS,OAAO,QAAQ,OAAO,GAAG,EAAE,QAAQ,OAAO,GAAG;AACtD,MAAI,CAAC,SAAS;AACZ,aAAS,OAAO,QAAQ,OAAO,EAAE;AAAA,EACnC;AACA,SAAO;AACT;AAOO,SAAS,8BAA8B,YAA4B;AACxE,QAAM,QAAQ,IAAI,WAAW,UAAU;AACvC,SAAO,gBAAgB,KAAK;AAC5B,QAAM,SAAS,MAAM;AACrB,SAAO,uBAAuB,QAAQ,KAAK;AAC7C;AAMO,SAAS,YAAoB;AAClC,MACE,OAAO,WAAW,eAClB,OAAO,OAAO,eAAe,YAC7B;AACA,WAAO,OAAO,WAAW;AAAA,EAC3B;AAEA,MACE,OAAO,WAAW,eAClB,OAAO,OAAO,oBAAoB,YAClC;AACA,UAAM,QAAQ,IAAI,WAAW,EAAE;AAC/B,WAAO,gBAAgB,KAAK;AAC5B,UAAM,CAAC,IAAK,MAAM,CAAC,IAAI,KAAQ;AAC/B,UAAM,CAAC,IAAK,MAAM,CAAC,IAAI,KAAQ;AAC/B,UAAM,MAAM,MAAM,KAAK,OAAO,CAAC,MAAM,EAAE,SAAS,EAAE,EAAE,SAAS,GAAG,GAAG,CAAC;AACpE,WAAO,GAAG,IAAI,MAAM,GAAG,CAAC,EAAE,KAAK,EAAE,CAAC,IAAI,IAAI,MAAM,GAAG,CAAC,EAAE,KAAK,EAAE,CAAC,IAAI,IAAI,MAAM,GAAG,CAAC,EAAE,KAAK,EAAE,CAAC,IAAI,IAAI,MAAM,GAAG,EAAE,EAAE,KAAK,EAAE,CAAC,IAAI,IAAI,MAAM,IAAI,EAAE,EAAE,KAAK,EAAE,CAAC;AAAA,EACvJ;AAEA,SAAO,GAAG,KAAK,IAAI,CAAC,IAAI,KAAK,OAAO,EAAE,SAAS,EAAE,EAAE,MAAM,GAAG,EAAE,CAAC;AACjE;;;ACpEA,IAAM,gBAAgB;AAMf,SAAS,cAAsB;AACpC,MAAI,WAAW,aAAa,QAAQ,aAAa;AAEjD,MAAI,CAAC,UAAU;AACb,eAAW,UAAU;AACrB,iBAAa,QAAQ,eAAe,QAAQ;AAAA,EAC9C;AAEA,SAAO;AACT;;;ACnBO,IAAM,WAAW;AACjB,IAAM,qBAAqB;AAC3B,IAAM,oBAAoB;AAC1B,IAAM,yBAAyB;AAC/B,IAAM,cAAc;AAEpB,IAAM,qBAAqB;;;ACE3B,IAAM,sBAA+C,OAC1D,YACyB;AACzB,MAAI,CAAC,WAAW,cAAc,QAAQ,UAAU,GAAG;AACjD,WAAO;AAAA,EACT;AAEA,QAAMA,aAAY,kBAAkB;AACpC,SAAO;AAAA,IACL,GAAG;AAAA,IACH,SAAS;AAAA,MACP,GAAI,QAAQ,WAAW,CAAC;AAAA,MACxB,CAAC,iBAAiB,GAAGA;AAAA,IACvB;AAAA,EACF;AACF;AAIA,SAAS,oBAA4B;AACnC,QAAM,UAAU;AAChB,QAAM,aAAa;AACnB,QAAM,iBAAiB;AAEvB,QAAM,cAAc;AAEpB,QAAM,WAAW,YAAY;AAC7B,QAAM,gBAAgB,YAAY,QAAQ;AAE1C,SAAO,GAAG,OAAO,KAAK,UAAU,KAAK,cAAc,KAAK,WAAW,KAAK,aAAa;AACvF;;;ACfO,IAAM,aAAN,MAAiB;AAAA,EACtB,YACW,QACA,aAAmC,CAAC,GAC7C;AAFS;AACA;AAAA,EACR;AAAA,EAEH,MAAM,KACJ,SACkC;AAClC,WAAO,KAAK,8BAAyC,OAAO;AAAA,EAC9D;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAUA,MAAc,8BACZ,SACkC;AAClC,UAAM,kBAAkB,MAAM,KAAK;AAAA,MACjC,KAAK,mBAAmB,OAAO;AAAA,IACjC;AACA,QAAI,WAAW,MAAM,KAAK,eAA0B,eAAe;AAEnE,eAAW,cAAc,KAAK,WAAW,gBAAgB,CAAC,GAAG;AAC3D,iBAAY,MAAM,WAAW;AAAA,QAC3B,SAAS;AAAA,QACT;AAAA,QACA,OAAO,CAAC,cAAc,oBACpB,KAAK,8BAA8B,WAAW;AAAA,MAGlD,CAAC;AAAA,IACH;AAEA,WAAO;AAAA,EACT;AAAA,EAEQ,mBAAmB,SAAmC;AAC5D,UAAM,MAAM,KAAK,WAAW,QAAQ,GAAG;AACvC,UAAM,UAAU;AAAA,MACd,GAAI,QAAQ,WAAW,CAAC;AAAA,MACxB,CAAC,kBAAkB,GAAG,KAAK,OAAO;AAAA,IACpC;AAEA,WAAO;AAAA,MACL,GAAG;AAAA,MACH;AAAA,MACA;AAAA,IACF;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,WAAW,KAAqB;AAE9B,QAAI,IAAI,WAAW,SAAS,KAAK,IAAI,WAAW,UAAU,GAAG;AAC3D,aAAO;AAAA,IACT;AAEA,UAAM,OAAO,KAAK,OAAO,QAAQ,QAAQ,OAAO,EAAE;AAClD,UAAM,OAAO,IAAI,WAAW,GAAG,IAAI,MAAM,IAAI,GAAG;AAChD,WAAO,OAAO;AAAA,EAChB;AAAA,EAEA,MAAc,2BACZ,gBACsB;AACtB,QAAI,UAAU;AACd,eAAW,cAAc,KAAK,WAAW,iBAAiB,CAAC,GAAG;AAC5D,gBAAU,MAAM,WAAW,OAAO;AAAA,IACpC;AAEA,WAAO;AAAA,EACT;AAAA,EAEQ,eACN,SACkC;AAClC,WAAO,YAAuB,OAAO;AAAA,EACvC;AACF;;;AC1GO,IAAM,2BAAoD,OAC/D,YACyB;AACzB,MAAI,CAAC,WAAW,aAAa,QAAQ,UAAU,GAAG;AAChD,WAAO;AAAA,EACT;AAEA,QAAM,kBAAkB,QAAQ,WAAW,CAAC;AAC5C,MAAI,gBAAgB,sBAAsB,GAAG;AAC3C,WAAO;AAAA,EACT;AAEA,SAAO;AAAA,IACL,GAAG;AAAA,IACH,SAAS;AAAA,MACP,GAAG;AAAA,MACH,CAAC,sBAAsB,GAAG,UAAU;AAAA,IACtC;AAAA,EACF;AACF;;;ACrBA,IAAM,eAAe;AACrB,IAAM,mBAAmB;AACzB,IAAM,eAAe;AAErB,IAAM,gBAAgB,oBAAI,IAAI,CAAC,KAAK,KAAK,GAAG,CAAC;AAEtC,SAAS,kBAAkB,QAAyB;AACzD,SAAQ,UAAU,OAAO,SAAS,OAAQ,cAAc,IAAI,MAAM;AACpE;AAEA,SAAS,gBAAgB,SAAyB;AAChD,SAAO,KAAK,IAAI,mBAAmB,MAAM,UAAU,IAAI,YAAY;AACrE;AAcO,SAAS,6BACd,UAAyC,CAAC,GAClB;AACxB,QAAM,UAAU,QAAQ,WAAW;AAEnC,SAAO,OAAO,EAAE,SAAS,UAAU,MAAM,MAAM;AAC7C,QAAI,CAAC,kBAAkB,SAAS,MAAM,GAAG;AACvC,aAAO;AAAA,IACT;AAEA,UAAM,iBAAiB,WAAW,gBAAgB,QAAQ,UAAU;AACpE,QAAI,kBAAkB,eAAe,GAAG;AACtC,aAAO;AAAA,IACT;AAEA,UAAM,cAAc,iBAAiB;AACrC,UAAM,QAAQ,gBAAgB,WAAW,CAAC;AAE1C,UAAM,cAAc,QAAQ;AAAA,MAC1B;AAAA,MACA,WAAW,aAAa,WAAW;AAAA,IACrC;AACA,WAAO,MAAM,WAAW;AAAA,EAC1B;AACF;AAEA,SAAS,aAAa,IAA2B;AAC/C,SAAO,IAAI,QAAQ,CAAC,YAAY,WAAW,SAAS,EAAE,CAAC;AACzD;AAQO,IAAM,yBACX,6BAA6B;;;ACpDxB,IAAM,YAAN,MAAgB;AAAA,EAGrB,YACW,QACA,kBAGT;AAJS;AACA;AAIT,SAAK,aAAa,IAAI,WAAW,KAAK,QAAQ;AAAA,MAC5C,eAAe;AAAA,QACb,wBAAwB,KAAK,gBAAgB;AAAA,QAC7C;AAAA,QACA;AAAA,MACF;AAAA,MACA,cAAc;AAAA,QACZ,uBAAuB,KAAK,gBAAgB;AAAA,QAC5C;AAAA,MACF;AAAA,IACF,CAAC;AAAA,EACH;AAAA,EAEA,MAAM,KAAgB,SAA0C;AAC9D,UAAM,WAAW,MAAM,KAAK,WAAW,KAAgB,OAAO;AAC9D,QAAI,SAAS,UAAU,OAAO,SAAS,SAAS,KAAK;AACnD,aAAO,SAAS;AAAA,IAClB,OAAO;AACL,YAAM,IAAI,UAAU,QAAQ;AAAA,IAC9B;AAAA,EACF;AACF;;;AC1CO,IAAM,oBAAoB,CAAC,UAChC;AAGK,IAAM,eAAe,CAAC,UAC3B;AAGK,IAAM,gBAAgB,CAAC,UAC5B;AAGK,IAAM,cAAc,CAAC,UAA+B;AAGpD,IAAM,WAAW,CAAC,UAA4B;AAG9C,IAAM,eAAe,CAAC,UAC3B;;;ACAK,IAAM,kBAAkB;AACxB,IAAM,0BAA0B;AA0DvC,IAAM,qBAAN,MAAmD;AAAA,EAMjD,YAAqB,SAAuB;AAAvB;AAJrB;AAAA,SAAQ,eAAoD;AAK1D,SAAK,OAAO,IAAI;AAAA,MACd;AAAA,QACE,SAAS,QAAQ,WAAW;AAAA,QAC5B,aAAa;AAAA,MACf;AAAA,MACA,KAAK,iBAAiB,KAAK,IAAI;AAAA,IACjC;AAAA,EACF;AAAA,EAEA,MAAM,OAA2B;AAC/B,UAAM,KAAK,iBAAiB,IAAI;AAChC,WAAO,KAAK,aAAa;AAAA,EAC3B;AAAA,EAEA,MAAM,iBAAiB,SAAoD;AACzE,QAAI,CAAC,WAAW,KAAK,iBAAiB,OAAW,QAAO,KAAK;AAE7D,QAAI;AACF,YAAM,cAAc,MAAM,KAAK,QAAQ,eAAe;AACtD,WAAK,eAAe;AACpB,aAAO;AAAA,IACT,SAAS,GAAG;AACV,WAAK,eAAe;AACpB,aAAO;AAAA,IACT;AAAA,EACF;AAAA,EAEA,eAA0B;AACxB,QAAI,KAAK,iBAAiB,QAAW;AACnC,aAAO;AAAA,IACT;AACA,WAAO,KAAK,iBAAiB,OAAO,cAAc;AAAA,EACpD;AAAA,EAEA,MAAM,aAA4B;AAChC,UAAM,QAAQ,8BAA8B,EAAE;AAC9C,UAAM,eAAe,8BAA8B,EAAE;AAErD,UAAM,mBAAmB,MAAM,OAAO,YAAY;AAClD,UAAM,gBAAgB,uBAAuB,kBAAkB,KAAK;AAEpE,mBAAe,QAAQ,iBAAiB,KAAK;AAC7C,mBAAe,QAAQ,yBAAyB,YAAY;AAE5D,UAAM,SAAS,IAAI,gBAAgB;AAAA,MACjC,WAAW,KAAK,QAAQ;AAAA,MACxB,eAAe;AAAA,MACf,cAAc,KAAK,QAAQ;AAAA,MAC3B,gBAAgB;AAAA,MAChB,uBAAuB;AAAA,MACvB;AAAA,IACF,CAAC;AACD,UAAM,MAAM,GAAG,kBAAkB,IAAI,OAAO,SAAS,CAAC;AACtD,WAAO,SAAS,OAAO;AAAA,EACzB;AAAA,EAEA,gBAAmC;AACjC,UAAM,SAAS,IAAI,gBAAgB,OAAO,SAAS,MAAM;AAEzD,UAAM,aAAa,OAAO,IAAI,OAAO;AACrC,QAAI,CAAC,YAAY;AACf,aAAO,EAAE,MAAM,SAAS,QAAQ,gBAAgB;AAAA,IAClD;AACA,UAAM,cAAc,eAAe,QAAQ,eAAe;AAC1D,QAAI,gBAAgB,QAAQ,gBAAgB,YAAY;AACtD,aAAO,EAAE,MAAM,SAAS,QAAQ,gBAAgB;AAAA,IAClD;AAEA,UAAM,YAAY,OAAO,IAAI,MAAM;AACnC,QAAI,CAAC,WAAW;AACd,aAAO,EAAE,MAAM,SAAS,QAAQ,eAAe;AAAA,IACjD;AAEA,UAAM,oBAAoB,eAAe,QAAQ,uBAAuB;AACxE,QAAI,CAAC,mBAAmB;AACtB,aAAO,EAAE,MAAM,SAAS,QAAQ,wBAAwB;AAAA,IAC1D;AAEA,WAAO;AAAA,MACL,MAAM;AAAA,MACN,MAAM,kBAAkB,SAAS;AAAA,MACjC,cAAc,aAAa,iBAAiB;AAAA,IAC9C;AAAA,EACF;AAAA,EAEA,SAAe;AACb,SAAK,eAAe;AAAA,EACtB;AACF;AAEO,SAAS,qBAAqB,QAAsC;AACzE,SAAO,IAAI,mBAAmB,MAAM;AACtC;;;AC3KO,IAAM,oBAAoB,CAAC,UAAkB;AAO7C,IAAM,eAAe;AAAA,EAC1B,SAAS,CAAC,QAAuC;AAC/C,UAAM,YAAY,IAAI,KAAK,KAAK,IAAI,IAAI,IAAI,aAAa,GAAI;AAC7D,WAAO;AAAA,MACL,aAAa;AAAA,QACX,OAAO,IAAI;AAAA,QACX;AAAA,MACF;AAAA,MACA,GAAI,IAAI,iBAAiB,QAAQ,IAAI,kBAAkB,KACnD,EAAE,cAAc,kBAAkB,IAAI,aAAa,EAAE,IACrD;AAAA,IACN;AAAA,EACF;AACF;;;ACzBO,IAAM,SAAS,CAAC,UAAkB;AAElC,IAAM,YAAY,CAAC,UAAkB;AAOrC,IAAM,OAAO;AAAA,EAClB,SAAS,CAAC,SAAwB;AAAA,IAChC,IAAI,OAAO,IAAI,EAAE;AAAA,IACjB,OAAO,UAAU,IAAI,KAAK;AAAA,EAC5B;AACF;","names":["userAgent"]}
@@ -0,0 +1,22 @@
1
+ export { A as AuthState, C as ClientConfig, a as CoinListClient, O as OauthClientErrorReason, b as OauthClientResult, c as createCoinListClient } from '../../coinlist-client-BH_Cn_7u.cjs';
2
+ import { N as Newtype } from '../../oauth-session-g0OPJNKn.cjs';
3
+ export { A as AuthorizationCode, C as ClientId, a as ClientSecret, b as CodeChallenge, c as CodeVerifier, O as OAuthAccessToken, d as OAuthRefreshToken, e as OAuthSession, R as RedirectUri } from '../../oauth-session-g0OPJNKn.cjs';
4
+
5
+ type UserDto = {
6
+ id: string;
7
+ email: string;
8
+ };
9
+
10
+ type UserId = Newtype<string, 'UserId'>;
11
+ declare const UserId: (value: string) => UserId;
12
+ type UserEmail = Newtype<string, 'UserEmail'>;
13
+ declare const UserEmail: (value: string) => UserEmail;
14
+ type User = {
15
+ id: UserId;
16
+ email: UserEmail;
17
+ };
18
+ declare const User: {
19
+ fromDto: (dto: UserDto) => User;
20
+ };
21
+
22
+ export { User, UserEmail, UserId };