@commzy/sdk-react-native 0.1.0

package/README.md

@@ -0,0 +1,107 @@
+# @commzy/sdk-react-native
+
+Embeddable **React Native** SDK for [Commzy](https://commzy.ai) — add authenticated
+chat, presence, and realtime communication to your app. White-label, multi-tenant.
+
+> **Model (like Stripe):** your app never holds a secret. Your **backend** mints a
+> short-lived token for your already-authenticated user (using your secret key), and
+> the SDK consumes it. See the full [integration guide](https://docs.commzy.ai) for
+> the backend piece.
+
+## Install
+
+```bash
+npm install @commzy/sdk-react-native
+# peer: react-native >= 0.76
+```
+
+## Quick start
+
+```ts
+import { CommzyClient } from '@commzy/sdk-react-native';
+
+const client = new CommzyClient({
+  baseUrl: 'https://api.commzy.ai',
+  publishableKey: 'pk_live_…',            // safe to ship in the app
+  tokenProvider: async ({ deviceId }) => {
+    // Call YOUR backend, which mints a Commzy token with your secret key (sk_).
+    const res = await fetch('https://your-backend.com/commzy-token', {
+      method: 'POST',
+      headers: { 'Content-Type': 'application/json', Authorization: `Bearer ${yourSession}` },
+      body: JSON.stringify({ deviceId }),
+    });
+    const { token } = await res.json();
+    return token;                          // the Commzy access token
+  },
+});
+
+client.on('stateChange', (s) => console.log(s.status)); // connecting → authenticated → connected
+client.on('error', (e) => console.warn(e.code, e.message));
+
+await client.connect();
+
+const { orgId } = client.getState();
+const channels = await client.restRequest({ path: '/v1/channels', query: { orgId } });
+
+client.on('realtimeEvent', ({ name, payload }) => {
+  if (name === 'message:received') { /* render */ }
+});
+```
+
+## What the SDK handles for you
+
+- **Token lifecycle** — fetches tokens via your `tokenProvider`, **auto-renews** before
+  expiry, retries with backoff.
+- **Realtime** — connects the WebSocket with the token and reconnects with a fresh one.
+- **Device sessions** — generates a stable per-install `deviceId` so token renewals
+  reuse one session (multi-device supported).
+
+## API surface (this release)
+
+| Member | Purpose |
+|---|---|
+| `new CommzyClient(config)` | Create the client (see `CommzyClientConfig`). |
+| `connect()` | Authenticate + open the realtime session. |
+| `restRequest({ method?, path, query?, body? })` | Authenticated REST call. |
+| `signOut()` | Local teardown (drop token, close socket). |
+| `getState()` / `getDeviceId()` | Current `SessionSnapshot` / device id. |
+| `on(event, cb)` / `off(event, cb)` | `stateChange`, `error`, `realtimeEvent`. |
+| `destroy()` | Tear down and remove all listeners. |
+
+### Config
+
+```ts
+interface CommzyClientConfig {
+  baseUrl: string;
+  publishableKey: string;
+  tokenProvider: (p: { deviceId: string }) => Promise<string>;
+  storage?: StorageAdapter;        // persist deviceId (e.g. AsyncStorage); defaults to memory
+  deviceId?: string;               // override the generated device id
+  renewSkewSeconds?: number;       // renew this many seconds before expiry (default 60)
+}
+```
+
+### Persisting the device id (recommended)
+
+Provide a `StorageAdapter` so the device id survives restarts:
+
+```ts
+import AsyncStorage from '@react-native-async-storage/async-storage';
+
+const storage = {
+  getItem: (k: string) => AsyncStorage.getItem(k),
+  setItem: (k: string, v: string) => AsyncStorage.setItem(k, v),
+};
+new CommzyClient({ /* … */, storage });
+```
+
+## Security
+
+- Ship only the **publishable key** (`pk_`). The **secret key** (`sk_`) lives on your
+  backend and mints tokens there — never in the app.
+- The SDK never mints tokens; it only consumes what your `tokenProvider` returns.
+
+---
+
+Prebuilt UI components (`ChannelList`, `ChannelView`, …) and domain helpers are on the
+roadmap. Today the SDK is a headless authenticated session over REST + WebSocket.

package/dist/auth/TokenManager.d.ts

@@ -0,0 +1,49 @@
+import { type DecodedToken } from '../internal/jwt.js';
+import type { CommzyError, TokenProvider } from '../types.js';
+export interface TokenState {
+    token: string;
+    decoded: DecodedToken;
+}
+interface TokenManagerOptions {
+    tokenProvider: TokenProvider;
+    deviceId: string;
+    /** Seconds before exp to renew. */
+    renewSkewSeconds: number;
+    /** Called after every successful (re)issue, including renewals. */
+    onToken: (state: TokenState) => void;
+    /** Called when acquiring/renewing a token ultimately fails. */
+    onError: (error: CommzyError) => void;
+}
+/**
+ * Owns the access token lifecycle: fetches it from the vendor's tokenProvider,
+ * decodes it to learn its expiry, and proactively renews before it lapses. On
+ * provider failure it retries with exponential backoff. The SDK never mints — it
+ * only consumes what the provider returns.
+ */
+export declare class TokenManager {
+    private readonly opts;
+    private current;
+    private renewTimer;
+    private retryTimer;
+    private stopped;
+    private inflight;
+    constructor(options: TokenManagerOptions);
+    getToken(): TokenState | null;
+    /** Acquire the first token and arm renewal. Throws if the first fetch fails. */
+    start(): Promise<TokenState>;
+    /** Force an immediate renewal (e.g. after a 401). Coalesces concurrent calls. */
+    renewNow(): Promise<TokenState>;
+    /** Stop all timers and clear state. */
+    stop(): void;
+    private clearTimers;
+    /** Fetch a token from the provider, decode + validate it. Coalesces in-flight calls. */
+    private fetchToken;
+    /** Arm a timer to renew `renewSkewSeconds` before expiry (min 0). */
+    private scheduleRenewal;
+    /** Renew, retrying with exponential backoff on failure until stopped. */
+    private renewWithBackoff;
+    private error;
+    private asCommzyError;
+}
+export {};
+//# sourceMappingURL=TokenManager.d.ts.map

package/dist/auth/TokenManager.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"TokenManager.d.ts","sourceRoot":"","sources":["../../src/auth/TokenManager.ts"],"names":[],"mappings":"AAAA,OAAO,EAAe,KAAK,YAAY,EAAE,MAAM,oBAAoB,CAAC;AACpE,OAAO,KAAK,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAE9D,MAAM,WAAW,UAAU;IACzB,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,YAAY,CAAC;CACvB;AAED,UAAU,mBAAmB;IAC3B,aAAa,EAAE,aAAa,CAAC;IAC7B,QAAQ,EAAE,MAAM,CAAC;IACjB,mCAAmC;IACnC,gBAAgB,EAAE,MAAM,CAAC;IACzB,mEAAmE;IACnE,OAAO,EAAE,CAAC,KAAK,EAAE,UAAU,KAAK,IAAI,CAAC;IACrC,+DAA+D;IAC/D,OAAO,EAAE,CAAC,KAAK,EAAE,WAAW,KAAK,IAAI,CAAC;CACvC;AAKD;;;;;GAKG;AACH,qBAAa,YAAY;IACvB,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAsB;IAC3C,OAAO,CAAC,OAAO,CAA2B;IAC1C,OAAO,CAAC,UAAU,CAA8C;IAChE,OAAO,CAAC,UAAU,CAA8C;IAChE,OAAO,CAAC,OAAO,CAAS;IACxB,OAAO,CAAC,QAAQ,CAAoC;gBAExC,OAAO,EAAE,mBAAmB;IAIxC,QAAQ,IAAI,UAAU,GAAG,IAAI;IAI7B,gFAAgF;IAC1E,KAAK,IAAI,OAAO,CAAC,UAAU,CAAC;IAOlC,iFAAiF;IAC3E,QAAQ,IAAI,OAAO,CAAC,UAAU,CAAC;IAMrC,uCAAuC;IACvC,IAAI,IAAI,IAAI;IAOZ,OAAO,CAAC,WAAW;IAWnB,wFAAwF;IACxF,OAAO,CAAC,UAAU;IAyBlB,qEAAqE;IACrE,OAAO,CAAC,eAAe;IAWvB,yEAAyE;YAC3D,gBAAgB;IAgB9B,OAAO,CAAC,KAAK;IAOb,OAAO,CAAC,aAAa;CAUtB"}

package/dist/auth/TokenManager.js

@@ -0,0 +1,132 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.TokenManager = void 0;
+const jwt_js_1 = require("../internal/jwt.js");
+const MAX_BACKOFF_MS = 30_000;
+const BASE_BACKOFF_MS = 1_000;
+/**
+ * Owns the access token lifecycle: fetches it from the vendor's tokenProvider,
+ * decodes it to learn its expiry, and proactively renews before it lapses. On
+ * provider failure it retries with exponential backoff. The SDK never mints — it
+ * only consumes what the provider returns.
+ */
+class TokenManager {
+    opts;
+    current = null;
+    renewTimer = null;
+    retryTimer = null;
+    stopped = false;
+    inflight = null;
+    constructor(options) {
+        this.opts = options;
+    }
+    getToken() {
+        return this.current;
+    }
+    /** Acquire the first token and arm renewal. Throws if the first fetch fails. */
+    async start() {
+        this.stopped = false;
+        const state = await this.fetchToken();
+        this.scheduleRenewal(state.decoded.exp);
+        return state;
+    }
+    /** Force an immediate renewal (e.g. after a 401). Coalesces concurrent calls. */
+    async renewNow() {
+        const state = await this.fetchToken();
+        this.scheduleRenewal(state.decoded.exp);
+        return state;
+    }
+    /** Stop all timers and clear state. */
+    stop() {
+        this.stopped = true;
+        this.clearTimers();
+        this.current = null;
+        this.inflight = null;
+    }
+    clearTimers() {
+        if (this.renewTimer) {
+            clearTimeout(this.renewTimer);
+            this.renewTimer = null;
+        }
+        if (this.retryTimer) {
+            clearTimeout(this.retryTimer);
+            this.retryTimer = null;
+        }
+    }
+    /** Fetch a token from the provider, decode + validate it. Coalesces in-flight calls. */
+    fetchToken() {
+        if (this.inflight) {
+            return this.inflight;
+        }
+        this.inflight = (async () => {
+            let raw;
+            try {
+                raw = await this.opts.tokenProvider({ deviceId: this.opts.deviceId });
+            }
+            catch (cause) {
+                throw this.error('TOKEN_PROVIDER_FAILED', 'tokenProvider threw or rejected', cause);
+            }
+            const decoded = (0, jwt_js_1.decodeToken)(raw);
+            if (!decoded) {
+                throw this.error('TOKEN_INVALID', 'tokenProvider returned a malformed token');
+            }
+            const state = { token: raw, decoded };
+            this.current = state;
+            this.opts.onToken(state);
+            return state;
+        })().finally(() => {
+            this.inflight = null;
+        });
+        return this.inflight;
+    }
+    /** Arm a timer to renew `renewSkewSeconds` before expiry (min 0). */
+    scheduleRenewal(expUnixSeconds) {
+        this.clearTimers();
+        if (this.stopped)
+            return;
+        const nowMs = Date.now();
+        const renewAtMs = (expUnixSeconds - this.opts.renewSkewSeconds) * 1000;
+        const delay = Math.max(0, renewAtMs - nowMs);
+        this.renewTimer = setTimeout(() => {
+            void this.renewWithBackoff(0);
+        }, delay);
+    }
+    /** Renew, retrying with exponential backoff on failure until stopped. */
+    async renewWithBackoff(attempt) {
+        if (this.stopped)
+            return;
+        try {
+            const state = await this.fetchToken();
+            this.scheduleRenewal(state.decoded.exp);
+        }
+        catch (err) {
+            const commzyError = this.asCommzyError(err);
+            this.opts.onError(commzyError);
+            if (this.stopped)
+                return;
+            const backoff = Math.min(MAX_BACKOFF_MS, BASE_BACKOFF_MS * 2 ** attempt);
+            this.retryTimer = setTimeout(() => {
+                void this.renewWithBackoff(attempt + 1);
+            }, backoff);
+        }
+    }
+    error(code, message, cause) {
+        const err = new Error(message);
+        err.code = code;
+        if (cause !== undefined)
+            err.cause = cause;
+        return err;
+    }
+    asCommzyError(err) {
+        if (err && typeof err === 'object' && 'code' in err && 'message' in err) {
+            return err;
+        }
+        return {
+            code: 'TOKEN_PROVIDER_FAILED',
+            message: err instanceof Error ? err.message : 'Token renewal failed',
+            cause: err,
+        };
+    }
+}
+exports.TokenManager = TokenManager;
+//# sourceMappingURL=TokenManager.js.map

package/dist/auth/TokenManager.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"TokenManager.js","sourceRoot":"","sources":["../../src/auth/TokenManager.ts"],"names":[],"mappings":";;;AAAA,+CAAoE;AAmBpE,MAAM,cAAc,GAAG,MAAM,CAAC;AAC9B,MAAM,eAAe,GAAG,KAAK,CAAC;AAE9B;;;;;GAKG;AACH,MAAa,YAAY;IACN,IAAI,CAAsB;IACnC,OAAO,GAAsB,IAAI,CAAC;IAClC,UAAU,GAAyC,IAAI,CAAC;IACxD,UAAU,GAAyC,IAAI,CAAC;IACxD,OAAO,GAAG,KAAK,CAAC;IAChB,QAAQ,GAA+B,IAAI,CAAC;IAEpD,YAAY,OAA4B;QACtC,IAAI,CAAC,IAAI,GAAG,OAAO,CAAC;IACtB,CAAC;IAED,QAAQ;QACN,OAAO,IAAI,CAAC,OAAO,CAAC;IACtB,CAAC;IAED,gFAAgF;IAChF,KAAK,CAAC,KAAK;QACT,IAAI,CAAC,OAAO,GAAG,KAAK,CAAC;QACrB,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,UAAU,EAAE,CAAC;QACtC,IAAI,CAAC,eAAe,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACxC,OAAO,KAAK,CAAC;IACf,CAAC;IAED,iFAAiF;IACjF,KAAK,CAAC,QAAQ;QACZ,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,UAAU,EAAE,CAAC;QACtC,IAAI,CAAC,eAAe,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACxC,OAAO,KAAK,CAAC;IACf,CAAC;IAED,uCAAuC;IACvC,IAAI;QACF,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;QACpB,IAAI,CAAC,WAAW,EAAE,CAAC;QACnB,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;QACpB,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC;IACvB,CAAC;IAEO,WAAW;QACjB,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;YACpB,YAAY,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;YAC9B,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC;QACzB,CAAC;QACD,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;YACpB,YAAY,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;YAC9B,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC;QACzB,CAAC;IACH,CAAC;IAED,wFAAwF;IAChF,UAAU;QAChB,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YAClB,OAAO,IAAI,CAAC,QAAQ,CAAC;QACvB,CAAC;QACD,IAAI,CAAC,QAAQ,GAAG,CAAC,KAAK,IAAI,EAAE;YAC1B,IAAI,GAAW,CAAC;YAChB,IAAI,CAAC;gBACH,GAAG,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC;YACxE,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,IAAI,CAAC,KAAK,CAAC,uBAAuB,EAAE,iCAAiC,EAAE,KAAK,CAAC,CAAC;YACtF,CAAC;YACD,MAAM,OAAO,GAAG,IAAA,oBAAW,EAAC,GAAG,CAAC,CAAC;YACjC,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,MAAM,IAAI,CAAC,KAAK,CAAC,eAAe,EAAE,0CAA0C,CAAC,CAAC;YAChF,CAAC;YACD,MAAM,KAAK,GAAe,EAAE,KAAK,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC;YAClD,IAAI,CAAC,OAAO,GAAG,KAAK,CAAC;YACrB,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;YACzB,OAAO,KAAK,CAAC;QACf,CAAC,CAAC,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE;YAChB,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC;QACvB,CAAC,CAAC,CAAC;QACH,OAAO,IAAI,CAAC,QAAQ,CAAC;IACvB,CAAC;IAED,qEAAqE;IAC7D,eAAe,CAAC,cAAsB;QAC5C,IAAI,CAAC,WAAW,EAAE,CAAC;QACnB,IAAI,IAAI,CAAC,OAAO;YAAE,OAAO;QACzB,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACzB,MAAM,SAAS,GAAG,CAAC,cAAc,GAAG,IAAI,CAAC,IAAI,CAAC,gBAAgB,CAAC,GAAG,IAAI,CAAC;QACvE,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,SAAS,GAAG,KAAK,CAAC,CAAC;QAC7C,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC,GAAG,EAAE;YAChC,KAAK,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC;QAChC,CAAC,EAAE,KAAK,CAAC,CAAC;IACZ,CAAC;IAED,yEAAyE;IACjE,KAAK,CAAC,gBAAgB,CAAC,OAAe;QAC5C,IAAI,IAAI,CAAC,OAAO;YAAE,OAAO;QACzB,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,UAAU,EAAE,CAAC;YACtC,IAAI,CAAC,eAAe,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAC1C,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,WAAW,GAAG,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC;YAC5C,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;YAC/B,IAAI,IAAI,CAAC,OAAO;gBAAE,OAAO;YACzB,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,cAAc,EAAE,eAAe,GAAG,CAAC,IAAI,OAAO,CAAC,CAAC;YACzE,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC,GAAG,EAAE;gBAChC,KAAK,IAAI,CAAC,gBAAgB,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC;YAC1C,CAAC,EAAE,OAAO,CAAC,CAAC;QACd,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,IAAyB,EAAE,OAAe,EAAE,KAAe;QACvE,MAAM,GAAG,GAAG,IAAI,KAAK,CAAC,OAAO,CAAwB,CAAC;QACtD,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC;QAChB,IAAI,KAAK,KAAK,SAAS;YAAE,GAAG,CAAC,KAAK,GAAG,KAAK,CAAC;QAC3C,OAAO,GAAG,CAAC;IACb,CAAC;IAEO,aAAa,CAAC,GAAY;QAChC,IAAI,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,MAAM,IAAI,GAAG,IAAI,SAAS,IAAI,GAAG,EAAE,CAAC;YACxE,OAAO,GAAkB,CAAC;QAC5B,CAAC;QACD,OAAO;YACL,IAAI,EAAE,uBAAuB;YAC7B,OAAO,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,sBAAsB;YACpE,KAAK,EAAE,GAAG;SACX,CAAC;IACJ,CAAC;CACF;AA1HD,oCA0HC"}

package/dist/client/CommzyClient.d.ts

@@ -0,0 +1,57 @@
+import { type RestRequest } from '../transport/RestClient.js';
+import type { CommzyClientConfig, CommzyClientEvents, SessionSnapshot } from '../types.js';
+/**
+ * The Commzy mobile SDK entry point.
+ *
+ *   const client = new CommzyClient({ baseUrl, publishableKey, tokenProvider });
+ *   await client.connect();              // authenticate + open realtime
+ *   client.on('stateChange', s => ...);  // observe session lifecycle
+ *   const channels = await client.rest({ path: '/v1/channels', query: { orgId } });
+ *   client.signOut();                    // local teardown
+ *
+ * It is a CLIENT of the existing platform — it consumes tokens minted by the
+ * vendor's backend (never mints) and reuses the platform's REST + Socket.io.
+ */
+export declare class CommzyClient {
+    private readonly config;
+    private readonly storage;
+    private readonly emitter;
+    private tokenManager;
+    private realtime;
+    private rest;
+    private deviceId;
+    private snapshot;
+    constructor(config: CommzyClientConfig);
+    /** Current session snapshot. */
+    getState(): SessionSnapshot;
+    /** The resolved stable device id (available after connect). */
+    getDeviceId(): string | null;
+    on<K extends keyof CommzyClientEvents>(event: K, listener: CommzyClientEvents[K]): () => void;
+    off<K extends keyof CommzyClientEvents>(event: K, listener: CommzyClientEvents[K]): void;
+    /**
+     * Authenticate and open the live session: resolve deviceId → fetch a token via
+     * the provider → REST authenticated → open the realtime socket. Idempotent-ish:
+     * calling connect when already connected re-validates the token.
+     */
+    connect(): Promise<SessionSnapshot>;
+    /** Make an authenticated REST request against the Commzy API. */
+    restRequest<T>(req: RestRequest): Promise<T>;
+    /**
+     * Sign out — LOCAL teardown only. Drops the token, closes the socket, clears
+     * state. Per design, the vendor owns the user lifecycle, so this does NOT revoke
+     * the session server-side; the session expires on its own.
+     */
+    signOut(): void;
+    /** Tear down everything and remove all listeners. */
+    destroy(): void;
+    private handleToken;
+    private applyToken;
+    private handleRealtimeConnect;
+    private handleRealtimeDisconnect;
+    private handleError;
+    private setStatus;
+    private validateConfig;
+    private toError;
+    private makeError;
+}
+//# sourceMappingURL=CommzyClient.d.ts.map

package/dist/client/CommzyClient.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"CommzyClient.d.ts","sourceRoot":"","sources":["../../src/client/CommzyClient.ts"],"names":[],"mappings":"AAIA,OAAO,EAAc,KAAK,WAAW,EAAE,MAAM,4BAA4B,CAAC;AAC1E,OAAO,KAAK,EACV,kBAAkB,EAClB,kBAAkB,EAElB,eAAe,EAGhB,MAAM,aAAa,CAAC;AAIrB;;;;;;;;;;;GAWG;AACH,qBAAa,YAAY;IACvB,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAqB;IAC5C,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAiB;IACzC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAA0C;IAElE,OAAO,CAAC,YAAY,CAA6B;IACjD,OAAO,CAAC,QAAQ,CAA+B;IAC/C,OAAO,CAAC,IAAI,CAA2B;IACvC,OAAO,CAAC,QAAQ,CAAuB;IAEvC,OAAO,CAAC,QAAQ,CAMd;gBAEU,MAAM,EAAE,kBAAkB;IAQtC,gCAAgC;IAChC,QAAQ,IAAI,eAAe;IAI3B,+DAA+D;IAC/D,WAAW,IAAI,MAAM,GAAG,IAAI;IAI5B,EAAE,CAAC,CAAC,SAAS,MAAM,kBAAkB,EAAE,KAAK,EAAE,CAAC,EAAE,QAAQ,EAAE,kBAAkB,CAAC,CAAC,CAAC,GAAG,MAAM,IAAI;IAI7F,GAAG,CAAC,CAAC,SAAS,MAAM,kBAAkB,EAAE,KAAK,EAAE,CAAC,EAAE,QAAQ,EAAE,kBAAkB,CAAC,CAAC,CAAC,GAAG,IAAI;IAIxF;;;;OAIG;IACG,OAAO,IAAI,OAAO,CAAC,eAAe,CAAC;IA4CzC,iEAAiE;IAC3D,WAAW,CAAC,CAAC,EAAE,GAAG,EAAE,WAAW,GAAG,OAAO,CAAC,CAAC,CAAC;IAOlD;;;;OAIG;IACH,OAAO,IAAI,IAAI;IAgBf,qDAAqD;IACrD,OAAO,IAAI,IAAI;IAOf,OAAO,CAAC,WAAW;IAQnB,OAAO,CAAC,UAAU;IASlB,OAAO,CAAC,qBAAqB;IAK7B,OAAO,CAAC,wBAAwB;IAQhC,OAAO,CAAC,WAAW;IAWnB,OAAO,CAAC,SAAS;IASjB,OAAO,CAAC,cAAc;IAStB,OAAO,CAAC,OAAO;IAOf,OAAO,CAAC,SAAS;CAGlB"}

package/dist/client/CommzyClient.js

@@ -0,0 +1,195 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.CommzyClient = void 0;
+const TokenManager_js_1 = require("../auth/TokenManager.js");
+const deviceId_js_1 = require("../device/deviceId.js");
+const emitter_js_1 = require("../internal/emitter.js");
+const RealtimeClient_js_1 = require("../transport/RealtimeClient.js");
+const RestClient_js_1 = require("../transport/RestClient.js");
+const DEFAULT_RENEW_SKEW_SECONDS = 60;
+/**
+ * The Commzy mobile SDK entry point.
+ *
+ *   const client = new CommzyClient({ baseUrl, publishableKey, tokenProvider });
+ *   await client.connect();              // authenticate + open realtime
+ *   client.on('stateChange', s => ...);  // observe session lifecycle
+ *   const channels = await client.rest({ path: '/v1/channels', query: { orgId } });
+ *   client.signOut();                    // local teardown
+ *
+ * It is a CLIENT of the existing platform — it consumes tokens minted by the
+ * vendor's backend (never mints) and reuses the platform's REST + Socket.io.
+ */
+class CommzyClient {
+    config;
+    storage;
+    emitter = new emitter_js_1.TypedEmitter();
+    tokenManager = null;
+    realtime = null;
+    rest = null;
+    deviceId = null;
+    snapshot = {
+        status: 'idle',
+        userId: null,
+        orgId: null,
+        realtimeConnected: false,
+        error: null,
+    };
+    constructor(config) {
+        this.validateConfig(config);
+        this.config = config;
+        this.storage = config.storage ?? new deviceId_js_1.MemoryStorage();
+    }
+    // ── Public API ────────────────────────────────────────────────────────────
+    /** Current session snapshot. */
+    getState() {
+        return { ...this.snapshot };
+    }
+    /** The resolved stable device id (available after connect). */
+    getDeviceId() {
+        return this.deviceId;
+    }
+    on(event, listener) {
+        return this.emitter.on(event, listener);
+    }
+    off(event, listener) {
+        this.emitter.off(event, listener);
+    }
+    /**
+     * Authenticate and open the live session: resolve deviceId → fetch a token via
+     * the provider → REST authenticated → open the realtime socket. Idempotent-ish:
+     * calling connect when already connected re-validates the token.
+     */
+    async connect() {
+        this.setStatus('connecting');
+        try {
+            this.deviceId = await (0, deviceId_js_1.resolveDeviceId)(this.storage, this.config.deviceId);
+            this.tokenManager = new TokenManager_js_1.TokenManager({
+                tokenProvider: this.config.tokenProvider,
+                deviceId: this.deviceId,
+                renewSkewSeconds: this.config.renewSkewSeconds ?? DEFAULT_RENEW_SKEW_SECONDS,
+                onToken: (state) => this.handleToken(state),
+                onError: (error) => this.handleError(error),
+            });
+            const tokenState = await this.tokenManager.start();
+            this.rest = new RestClient_js_1.RestClient({
+                baseUrl: this.config.baseUrl,
+                getToken: () => this.tokenManager?.getToken()?.token ?? null,
+                refreshToken: async () => (await this.tokenManager.renewNow()).token,
+            });
+            // Token is valid → REST is usable now.
+            this.applyToken(tokenState);
+            this.setStatus('authenticated');
+            // Bring up realtime; 'connected' is reached on the socket's connect event.
+            this.realtime = new RealtimeClient_js_1.RealtimeClient({
+                baseUrl: this.config.baseUrl,
+                getToken: () => this.tokenManager?.getToken()?.token ?? null,
+                onConnect: () => this.handleRealtimeConnect(),
+                onDisconnect: () => this.handleRealtimeDisconnect(),
+                onError: (error) => this.emitter.emit('error', error),
+                onEvent: (name, payload) => this.emitter.emit('realtimeEvent', { name, payload }),
+            });
+            this.realtime.connect();
+            return this.getState();
+        }
+        catch (err) {
+            const error = this.toError(err);
+            this.handleError(error, 'error');
+            throw error;
+        }
+    }
+    /** Make an authenticated REST request against the Commzy API. */
+    async restRequest(req) {
+        if (!this.rest) {
+            throw this.makeError('NOT_CONNECTED', 'Call connect() before making requests');
+        }
+        return this.rest.request(req);
+    }
+    /**
+     * Sign out — LOCAL teardown only. Drops the token, closes the socket, clears
+     * state. Per design, the vendor owns the user lifecycle, so this does NOT revoke
+     * the session server-side; the session expires on its own.
+     */
+    signOut() {
+        this.tokenManager?.stop();
+        this.realtime?.disconnect();
+        this.tokenManager = null;
+        this.realtime = null;
+        this.rest = null;
+        this.snapshot = {
+            status: 'disconnected',
+            userId: null,
+            orgId: null,
+            realtimeConnected: false,
+            error: null,
+        };
+        this.emitter.emit('stateChange', this.getState());
+    }
+    /** Tear down everything and remove all listeners. */
+    destroy() {
+        this.signOut();
+        this.emitter.removeAll();
+    }
+    // ── Internals ───────────────────────────────────────────────────────────────
+    handleToken(state) {
+        this.applyToken(state);
+        // A renewal arriving while live should refresh the socket's handshake token.
+        if (this.realtime && this.snapshot.status !== 'connecting') {
+            this.realtime.updateAuthAndReconnect();
+        }
+    }
+    applyToken(state) {
+        this.snapshot = {
+            ...this.snapshot,
+            userId: state.decoded.sub,
+            orgId: state.decoded.orgId,
+            error: null,
+        };
+    }
+    handleRealtimeConnect() {
+        this.snapshot = { ...this.snapshot, realtimeConnected: true };
+        this.setStatus('connected');
+    }
+    handleRealtimeDisconnect() {
+        this.snapshot = { ...this.snapshot, realtimeConnected: false };
+        // Drop back to 'authenticated' (REST still works) while the socket retries.
+        if (this.snapshot.status === 'connected') {
+            this.setStatus('authenticated');
+        }
+    }
+    handleError(error, status) {
+        this.snapshot = { ...this.snapshot, error };
+        this.emitter.emit('error', error);
+        if (status) {
+            this.setStatus(status);
+        }
+        else {
+            // Persistent token failure → session is effectively expired.
+            this.setStatus('expired');
+        }
+    }
+    setStatus(status) {
+        if (this.snapshot.status === status) {
+            this.snapshot = { ...this.snapshot };
+        }
+        else {
+            this.snapshot = { ...this.snapshot, status };
+        }
+        this.emitter.emit('stateChange', this.getState());
+    }
+    validateConfig(config) {
+        if (!config.baseUrl || !config.publishableKey || typeof config.tokenProvider !== 'function') {
+            throw this.makeError('CONFIG_INVALID', 'CommzyClient requires baseUrl, publishableKey, and a tokenProvider');
+        }
+    }
+    toError(err) {
+        if (err && typeof err === 'object' && 'code' in err && 'message' in err) {
+            return err;
+        }
+        return this.makeError('TRANSPORT_FAILED', err instanceof Error ? err.message : 'Unknown error', err);
+    }
+    makeError(code, message, cause) {
+        return cause === undefined ? { code, message } : { code, message, cause };
+    }
+}
+exports.CommzyClient = CommzyClient;
+//# sourceMappingURL=CommzyClient.js.map

package/dist/client/CommzyClient.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"CommzyClient.js","sourceRoot":"","sources":["../../src/client/CommzyClient.ts"],"names":[],"mappings":";;;AAAA,6DAAwE;AACxE,uDAAuE;AACvE,uDAAsD;AACtD,sEAAgE;AAChE,8DAA0E;AAU1E,MAAM,0BAA0B,GAAG,EAAE,CAAC;AAEtC;;;;;;;;;;;GAWG;AACH,MAAa,YAAY;IACN,MAAM,CAAqB;IAC3B,OAAO,CAAiB;IACxB,OAAO,GAAG,IAAI,yBAAY,EAAsB,CAAC;IAE1D,YAAY,GAAwB,IAAI,CAAC;IACzC,QAAQ,GAA0B,IAAI,CAAC;IACvC,IAAI,GAAsB,IAAI,CAAC;IAC/B,QAAQ,GAAkB,IAAI,CAAC;IAE/B,QAAQ,GAAoB;QAClC,MAAM,EAAE,MAAM;QACd,MAAM,EAAE,IAAI;QACZ,KAAK,EAAE,IAAI;QACX,iBAAiB,EAAE,KAAK;QACxB,KAAK,EAAE,IAAI;KACZ,CAAC;IAEF,YAAY,MAA0B;QACpC,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC;QAC5B,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC,OAAO,IAAI,IAAI,2BAAa,EAAE,CAAC;IACvD,CAAC;IAED,6EAA6E;IAE7E,gCAAgC;IAChC,QAAQ;QACN,OAAO,EAAE,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC;IAC9B,CAAC;IAED,+DAA+D;IAC/D,WAAW;QACT,OAAO,IAAI,CAAC,QAAQ,CAAC;IACvB,CAAC;IAED,EAAE,CAAqC,KAAQ,EAAE,QAA+B;QAC9E,OAAO,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;IAC1C,CAAC;IAED,GAAG,CAAqC,KAAQ,EAAE,QAA+B;QAC/E,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;IACpC,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,OAAO;QACX,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC;QAC7B,IAAI,CAAC;YACH,IAAI,CAAC,QAAQ,GAAG,MAAM,IAAA,6BAAe,EAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;YAE1E,IAAI,CAAC,YAAY,GAAG,IAAI,8BAAY,CAAC;gBACnC,aAAa,EAAE,IAAI,CAAC,MAAM,CAAC,aAAa;gBACxC,QAAQ,EAAE,IAAI,CAAC,QAAQ;gBACvB,gBAAgB,EAAE,IAAI,CAAC,MAAM,CAAC,gBAAgB,IAAI,0BAA0B;gBAC5E,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC;gBAC3C,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC;aAC5C,CAAC,CAAC;YAEH,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE,CAAC;YAEnD,IAAI,CAAC,IAAI,GAAG,IAAI,0BAAU,CAAC;gBACzB,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO;gBAC5B,QAAQ,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,YAAY,EAAE,QAAQ,EAAE,EAAE,KAAK,IAAI,IAAI;gBAC5D,YAAY,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,MAAM,IAAI,CAAC,YAAa,CAAC,QAAQ,EAAE,CAAC,CAAC,KAAK;aACtE,CAAC,CAAC;YAEH,uCAAuC;YACvC,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC;YAC5B,IAAI,CAAC,SAAS,CAAC,eAAe,CAAC,CAAC;YAEhC,2EAA2E;YAC3E,IAAI,CAAC,QAAQ,GAAG,IAAI,kCAAc,CAAC;gBACjC,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO;gBAC5B,QAAQ,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,YAAY,EAAE,QAAQ,EAAE,EAAE,KAAK,IAAI,IAAI;gBAC5D,SAAS,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,qBAAqB,EAAE;gBAC7C,YAAY,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,wBAAwB,EAAE;gBACnD,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC;gBACrD,OAAO,EAAE,CAAC,IAAI,EAAE,OAAO,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,eAAe,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;aAClF,CAAC,CAAC;YACH,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC;YAExB,OAAO,IAAI,CAAC,QAAQ,EAAE,CAAC;QACzB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;YAChC,IAAI,CAAC,WAAW,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;YACjC,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAED,iEAAiE;IACjE,KAAK,CAAC,WAAW,CAAI,GAAgB;QACnC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;YACf,MAAM,IAAI,CAAC,SAAS,CAAC,eAAe,EAAE,uCAAuC,CAAC,CAAC;QACjF,CAAC;QACD,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO,CAAI,GAAG,CAAC,CAAC;IACnC,CAAC;IAED;;;;OAIG;IACH,OAAO;QACL,IAAI,CAAC,YAAY,EAAE,IAAI,EAAE,CAAC;QAC1B,IAAI,CAAC,QAAQ,EAAE,UAAU,EAAE,CAAC;QAC5B,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC;QACzB,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC;QACrB,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,QAAQ,GAAG;YACd,MAAM,EAAE,cAAc;YACtB,MAAM,EAAE,IAAI;YACZ,KAAK,EAAE,IAAI;YACX,iBAAiB,EAAE,KAAK;YACxB,KAAK,EAAE,IAAI;SACZ,CAAC;QACF,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,aAAa,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC;IACpD,CAAC;IAED,qDAAqD;IACrD,OAAO;QACL,IAAI,CAAC,OAAO,EAAE,CAAC;QACf,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC;IAC3B,CAAC;IAED,+EAA+E;IAEvE,WAAW,CAAC,KAAiB;QACnC,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;QACvB,6EAA6E;QAC7E,IAAI,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,KAAK,YAAY,EAAE,CAAC;YAC3D,IAAI,CAAC,QAAQ,CAAC,sBAAsB,EAAE,CAAC;QACzC,CAAC;IACH,CAAC;IAEO,UAAU,CAAC,KAAiB;QAClC,IAAI,CAAC,QAAQ,GAAG;YACd,GAAG,IAAI,CAAC,QAAQ;YAChB,MAAM,EAAE,KAAK,CAAC,OAAO,CAAC,GAAG;YACzB,KAAK,EAAE,KAAK,CAAC,OAAO,CAAC,KAAK;YAC1B,KAAK,EAAE,IAAI;SACZ,CAAC;IACJ,CAAC;IAEO,qBAAqB;QAC3B,IAAI,CAAC,QAAQ,GAAG,EAAE,GAAG,IAAI,CAAC,QAAQ,EAAE,iBAAiB,EAAE,IAAI,EAAE,CAAC;QAC9D,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC;IAC9B,CAAC;IAEO,wBAAwB;QAC9B,IAAI,CAAC,QAAQ,GAAG,EAAE,GAAG,IAAI,CAAC,QAAQ,EAAE,iBAAiB,EAAE,KAAK,EAAE,CAAC;QAC/D,4EAA4E;QAC5E,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,KAAK,WAAW,EAAE,CAAC;YACzC,IAAI,CAAC,SAAS,CAAC,eAAe,CAAC,CAAC;QAClC,CAAC;IACH,CAAC;IAEO,WAAW,CAAC,KAAkB,EAAE,MAAsB;QAC5D,IAAI,CAAC,QAAQ,GAAG,EAAE,GAAG,IAAI,CAAC,QAAQ,EAAE,KAAK,EAAE,CAAC;QAC5C,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QAClC,IAAI,MAAM,EAAE,CAAC;YACX,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;QACzB,CAAC;aAAM,CAAC;YACN,6DAA6D;YAC7D,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;QAC5B,CAAC;IACH,CAAC;IAEO,SAAS,CAAC,MAAqB;QACrC,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;YACpC,IAAI,CAAC,QAAQ,GAAG,EAAE,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC;QACvC,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,QAAQ,GAAG,EAAE,GAAG,IAAI,CAAC,QAAQ,EAAE,MAAM,EAAE,CAAC;QAC/C,CAAC;QACD,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,aAAa,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC;IACpD,CAAC;IAEO,cAAc,CAAC,MAA0B;QAC/C,IAAI,CAAC,MAAM,CAAC,OAAO,IAAI,CAAC,MAAM,CAAC,cAAc,IAAI,OAAO,MAAM,CAAC,aAAa,KAAK,UAAU,EAAE,CAAC;YAC5F,MAAM,IAAI,CAAC,SAAS,CAClB,gBAAgB,EAChB,oEAAoE,CACrE,CAAC;QACJ,CAAC;IACH,CAAC;IAEO,OAAO,CAAC,GAAY;QAC1B,IAAI,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,MAAM,IAAI,GAAG,IAAI,SAAS,IAAI,GAAG,EAAE,CAAC;YACxE,OAAO,GAAkB,CAAC;QAC5B,CAAC;QACD,OAAO,IAAI,CAAC,SAAS,CAAC,kBAAkB,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,EAAE,GAAG,CAAC,CAAC;IACvG,CAAC;IAEO,SAAS,CAAC,IAAyB,EAAE,OAAe,EAAE,KAAe;QAC3E,OAAO,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IAC5E,CAAC;CACF;AAvMD,oCAuMC"}

package/dist/device/deviceId.d.ts

@@ -0,0 +1,19 @@
+import type { StorageAdapter } from '../types.js';
+/** In-memory fallback storage — id is not persisted across app restarts. */
+export declare class MemoryStorage implements StorageAdapter {
+    private readonly map;
+    getItem(key: string): Promise<string | null>;
+    setItem(key: string, value: string): Promise<void>;
+}
+/**
+ * Resolve a stable per-install device id. Order of precedence:
+ * 1. An explicit override (vendor-supplied).
+ * 2. A previously persisted id from storage.
+ * 3. A freshly generated id, persisted for next time.
+ *
+ * The id is the key that lets same-device token re-mints collapse onto one
+ * server session (preventing orphan-session accumulation) while different devices
+ * keep their own session.
+ */
+export declare function resolveDeviceId(storage: StorageAdapter, override?: string): Promise<string>;
+//# sourceMappingURL=deviceId.d.ts.map

package/dist/device/deviceId.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"deviceId.d.ts","sourceRoot":"","sources":["../../src/device/deviceId.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAIlD,4EAA4E;AAC5E,qBAAa,aAAc,YAAW,cAAc;IAClD,OAAO,CAAC,QAAQ,CAAC,GAAG,CAA6B;IAEjD,OAAO,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;IAI5C,OAAO,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;CAInD;AA2BD;;;;;;;;;GASG;AACH,wBAAsB,eAAe,CACnC,OAAO,EAAE,cAAc,EACvB,QAAQ,CAAC,EAAE,MAAM,GAChB,OAAO,CAAC,MAAM,CAAC,CAWjB"}

package/dist/device/deviceId.js

@@ -0,0 +1,65 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.MemoryStorage = void 0;
+exports.resolveDeviceId = resolveDeviceId;
+const DEVICE_ID_KEY = 'commzy.sdk.deviceId';
+/** In-memory fallback storage — id is not persisted across app restarts. */
+class MemoryStorage {
+    map = new Map();
+    getItem(key) {
+        return Promise.resolve(this.map.get(key) ?? null);
+    }
+    setItem(key, value) {
+        this.map.set(key, value);
+        return Promise.resolve();
+    }
+}
+exports.MemoryStorage = MemoryStorage;
+/**
+ * RFC4122-ish v4 uuid. Uses crypto.randomUUID / getRandomValues when available
+ * (RN, modern browsers, Node), falling back to Math.random only if neither
+ * exists — good enough for a per-install identifier.
+ */
+function generateId() {
+    const cryptoObj = globalThis.crypto;
+    if (cryptoObj?.randomUUID) {
+        return cryptoObj.randomUUID();
+    }
+    const bytes = new Uint8Array(16);
+    if (cryptoObj?.getRandomValues) {
+        cryptoObj.getRandomValues(bytes);
+    }
+    else {
+        for (let i = 0; i < 16; i += 1) {
+            bytes[i] = Math.floor(Math.random() * 256);
+        }
+    }
+    // Set version (4) and variant bits.
+    bytes[6] = ((bytes[6] ?? 0) & 0x0f) | 0x40;
+    bytes[8] = ((bytes[8] ?? 0) & 0x3f) | 0x80;
+    const hex = Array.from(bytes, (b) => b.toString(16).padStart(2, '0')).join('');
+    return `${hex.slice(0, 8)}-${hex.slice(8, 12)}-${hex.slice(12, 16)}-${hex.slice(16, 20)}-${hex.slice(20)}`;
+}
+/**
+ * Resolve a stable per-install device id. Order of precedence:
+ * 1. An explicit override (vendor-supplied).
+ * 2. A previously persisted id from storage.
+ * 3. A freshly generated id, persisted for next time.
+ *
+ * The id is the key that lets same-device token re-mints collapse onto one
+ * server session (preventing orphan-session accumulation) while different devices
+ * keep their own session.
+ */
+async function resolveDeviceId(storage, override) {
+    if (override && override.trim().length > 0) {
+        return override.trim();
+    }
+    const existing = await storage.getItem(DEVICE_ID_KEY);
+    if (existing && existing.length > 0) {
+        return existing;
+    }
+    const fresh = generateId();
+    await storage.setItem(DEVICE_ID_KEY, fresh);
+    return fresh;
+}
+//# sourceMappingURL=deviceId.js.map

package/dist/device/deviceId.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"deviceId.js","sourceRoot":"","sources":["../../src/device/deviceId.ts"],"names":[],"mappings":";;;AAqDA,0CAcC;AAjED,MAAM,aAAa,GAAG,qBAAqB,CAAC;AAE5C,4EAA4E;AAC5E,MAAa,aAAa;IACP,GAAG,GAAG,IAAI,GAAG,EAAkB,CAAC;IAEjD,OAAO,CAAC,GAAW;QACjB,OAAO,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,CAAC;IACpD,CAAC;IAED,OAAO,CAAC,GAAW,EAAE,KAAa;QAChC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QACzB,OAAO,OAAO,CAAC,OAAO,EAAE,CAAC;IAC3B,CAAC;CACF;AAXD,sCAWC;AAED;;;;GAIG;AACH,SAAS,UAAU;IACjB,MAAM,SAAS,GAAI,UAAkC,CAAC,MAAM,CAAC;IAC7D,IAAI,SAAS,EAAE,UAAU,EAAE,CAAC;QAC1B,OAAO,SAAS,CAAC,UAAU,EAAE,CAAC;IAChC,CAAC;IACD,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC;IACjC,IAAI,SAAS,EAAE,eAAe,EAAE,CAAC;QAC/B,SAAS,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC;IACnC,CAAC;SAAM,CAAC;QACN,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;YAC/B,KAAK,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,GAAG,CAAC,CAAC;QAC7C,CAAC;IACH,CAAC;IACD,oCAAoC;IACpC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC;IAC3C,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC;IAC3C,MAAM,GAAG,GAAG,KAAK,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC/E,OAAO,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,GAAG,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,CAAC,IAAI,GAAG,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,CAAC,IAAI,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE,CAAC;AAC7G,CAAC;AAED;;;;;;;;;GASG;AACI,KAAK,UAAU,eAAe,CACnC,OAAuB,EACvB,QAAiB;IAEjB,IAAI,QAAQ,IAAI,QAAQ,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC3C,OAAO,QAAQ,CAAC,IAAI,EAAE,CAAC;IACzB,CAAC;IACD,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;IACtD,IAAI,QAAQ,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACpC,OAAO,QAAQ,CAAC;IAClB,CAAC;IACD,MAAM,KAAK,GAAG,UAAU,EAAE,CAAC;IAC3B,MAAM,OAAO,CAAC,OAAO,CAAC,aAAa,EAAE,KAAK,CAAC,CAAC;IAC5C,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,5 @@
+export { CommzyClient } from './client/CommzyClient.js';
+export { MemoryStorage } from './device/deviceId.js';
+export type { CommzyClientConfig, CommzyClientEvents, CommzyError, SessionSnapshot, SessionStatus, StorageAdapter, TokenProvider, } from './types.js';
+export type { RestRequest } from './transport/RestClient.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAC;AACxD,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAErD,YAAY,EACV,kBAAkB,EAClB,kBAAkB,EAClB,WAAW,EACX,eAAe,EACf,aAAa,EACb,cAAc,EACd,aAAa,GACd,MAAM,YAAY,CAAC;AAEpB,YAAY,EAAE,WAAW,EAAE,MAAM,2BAA2B,CAAC"}

package/dist/index.js

@@ -0,0 +1,12 @@
+"use strict";
+// @commzy/sdk-react-native — public API
+//
+// Headless authenticated-session slice. UI components and domain helpers
+// (channels/messages/presence) build on this in later milestones.
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.MemoryStorage = exports.CommzyClient = void 0;
+var CommzyClient_js_1 = require("./client/CommzyClient.js");
+Object.defineProperty(exports, "CommzyClient", { enumerable: true, get: function () { return CommzyClient_js_1.CommzyClient; } });
+var deviceId_js_1 = require("./device/deviceId.js");
+Object.defineProperty(exports, "MemoryStorage", { enumerable: true, get: function () { return deviceId_js_1.MemoryStorage; } });
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AAAA,wCAAwC;AACxC,EAAE;AACF,yEAAyE;AACzE,kEAAkE;;;AAElE,4DAAwD;AAA/C,+GAAA,YAAY,OAAA;AACrB,oDAAqD;AAA5C,4GAAA,aAAa,OAAA"}

package/dist/internal/emitter.d.ts

@@ -0,0 +1,13 @@
+/**
+ * Minimal typed event emitter — no Node `events` dependency, so it runs in React
+ * Native, browsers, and Node alike. Listeners for an event share a Set; emit is
+ * defensively wrapped so one throwing listener can't break the others.
+ */
+export declare class TypedEmitter<TEvents extends Record<string, (...args: never[]) => void>> {
+    private readonly listeners;
+    on<K extends keyof TEvents>(event: K, listener: TEvents[K]): () => void;
+    off<K extends keyof TEvents>(event: K, listener: TEvents[K]): void;
+    emit<K extends keyof TEvents>(event: K, ...args: Parameters<TEvents[K]>): void;
+    removeAll(): void;
+}
+//# sourceMappingURL=emitter.d.ts.map

package/dist/internal/emitter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"emitter.d.ts","sourceRoot":"","sources":["../../src/internal/emitter.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,qBAAa,YAAY,CAAC,OAAO,SAAS,MAAM,CAAC,MAAM,EAAE,CAAC,GAAG,IAAI,EAAE,KAAK,EAAE,KAAK,IAAI,CAAC;IAClF,OAAO,CAAC,QAAQ,CAAC,SAAS,CAA6D;IAEvF,EAAE,CAAC,CAAC,SAAS,MAAM,OAAO,EAAE,KAAK,EAAE,CAAC,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC,GAAG,MAAM,IAAI;IAUvE,GAAG,CAAC,CAAC,SAAS,MAAM,OAAO,EAAE,KAAK,EAAE,CAAC,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC,GAAG,IAAI;IAIlE,IAAI,CAAC,CAAC,SAAS,MAAM,OAAO,EAAE,KAAK,EAAE,CAAC,EAAE,GAAG,IAAI,EAAE,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI;IAY9E,SAAS,IAAI,IAAI;CAGlB"}

package/dist/internal/emitter.js

@@ -0,0 +1,41 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.TypedEmitter = void 0;
+/**
+ * Minimal typed event emitter — no Node `events` dependency, so it runs in React
+ * Native, browsers, and Node alike. Listeners for an event share a Set; emit is
+ * defensively wrapped so one throwing listener can't break the others.
+ */
+class TypedEmitter {
+    listeners = new Map();
+    on(event, listener) {
+        let set = this.listeners.get(event);
+        if (!set) {
+            set = new Set();
+            this.listeners.set(event, set);
+        }
+        set.add(listener);
+        return () => this.off(event, listener);
+    }
+    off(event, listener) {
+        this.listeners.get(event)?.delete(listener);
+    }
+    emit(event, ...args) {
+        const set = this.listeners.get(event);
+        if (!set)
+            return;
+        for (const listener of [...set]) {
+            try {
+                listener(...args);
+            }
+            catch {
+                // A misbehaving host listener must not break SDK internals.
+            }
+        }
+    }
+    removeAll() {
+        this.listeners.clear();
+    }
+}
+exports.TypedEmitter = TypedEmitter;
+//# sourceMappingURL=emitter.js.map

package/dist/internal/emitter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"emitter.js","sourceRoot":"","sources":["../../src/internal/emitter.ts"],"names":[],"mappings":";;;AAAA;;;;GAIG;AACH,MAAa,YAAY;IACN,SAAS,GAAG,IAAI,GAAG,EAAkD,CAAC;IAEvF,EAAE,CAA0B,KAAQ,EAAE,QAAoB;QACxD,IAAI,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACpC,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,GAAG,GAAG,IAAI,GAAG,EAAE,CAAC;YAChB,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QACjC,CAAC;QACD,GAAG,CAAC,GAAG,CAAC,QAAsC,CAAC,CAAC;QAChD,OAAO,GAAG,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;IACzC,CAAC;IAED,GAAG,CAA0B,KAAQ,EAAE,QAAoB;QACzD,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC,QAAsC,CAAC,CAAC;IAC5E,CAAC;IAED,IAAI,CAA0B,KAAQ,EAAE,GAAG,IAA4B;QACrE,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACtC,IAAI,CAAC,GAAG;YAAE,OAAO;QACjB,KAAK,MAAM,QAAQ,IAAI,CAAC,GAAG,GAAG,CAAC,EAAE,CAAC;YAChC,IAAI,CAAC;gBACF,QAAmD,CAAC,GAAG,IAAI,CAAC,CAAC;YAChE,CAAC;YAAC,MAAM,CAAC;gBACP,4DAA4D;YAC9D,CAAC;QACH,CAAC;IACH,CAAC;IAED,SAAS;QACP,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,CAAC;IACzB,CAAC;CACF;AAhCD,oCAgCC"}

package/dist/internal/jwt.d.ts

@@ -0,0 +1,19 @@
+/**
+ * Client-side JWT decoding. We do NOT verify the signature here — that is the
+ * server's responsibility on every request. The SDK only reads claims to know the
+ * user/org and when to renew the token before it expires.
+ */
+export interface DecodedToken {
+    /** User id. */
+    sub: string;
+    /** Tenant the token is scoped to (present on SDK-minted tokens). */
+    orgId: string | null;
+    /** Expiry, unix seconds. */
+    exp: number;
+}
+/**
+ * Decode a JWT and extract the claims the SDK needs. Returns null if the token is
+ * malformed (caller treats that as an invalid token).
+ */
+export declare function decodeToken(token: string): DecodedToken | null;
+//# sourceMappingURL=jwt.d.ts.map

package/dist/internal/jwt.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"jwt.d.ts","sourceRoot":"","sources":["../../src/internal/jwt.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,MAAM,WAAW,YAAY;IAC3B,eAAe;IACf,GAAG,EAAE,MAAM,CAAC;IACZ,oEAAoE;IACpE,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,4BAA4B;IAC5B,GAAG,EAAE,MAAM,CAAC;CACb;AAsCD;;;GAGG;AACH,wBAAgB,WAAW,CAAC,KAAK,EAAE,MAAM,GAAG,YAAY,GAAG,IAAI,CAsB9D"}

package/dist/internal/jwt.js

@@ -0,0 +1,64 @@
+"use strict";
+/**
+ * Client-side JWT decoding. We do NOT verify the signature here — that is the
+ * server's responsibility on every request. The SDK only reads claims to know the
+ * user/org and when to renew the token before it expires.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.decodeToken = decodeToken;
+/** Decode a base64url string to UTF-8 across RN / browser / Node. */
+function base64UrlDecode(input) {
+    const base64 = input.replace(/-/g, '+').replace(/_/g, '/');
+    const padded = base64.padEnd(base64.length + ((4 - (base64.length % 4)) % 4), '=');
+    // Node / RN with global Buffer.
+    const maybeBuffer = globalThis
+        .Buffer;
+    if (maybeBuffer) {
+        return maybeBuffer.from(padded, 'base64').toString('utf-8');
+    }
+    // Browser / RN with atob.
+    const maybeAtob = globalThis.atob;
+    if (maybeAtob) {
+        const binary = maybeAtob(padded);
+        let result = '';
+        for (let i = 0; i < binary.length; i += 1) {
+            result += String.fromCharCode(binary.charCodeAt(i));
+        }
+        // Best-effort UTF-8 reconstruction.
+        try {
+            return decodeURIComponent(result
+                .split('')
+                .map((c) => `%${`00${c.charCodeAt(0).toString(16)}`.slice(-2)}`)
+                .join(''));
+        }
+        catch {
+            return result;
+        }
+    }
+    throw new Error('No base64 decoder available in this environment');
+}
+/**
+ * Decode a JWT and extract the claims the SDK needs. Returns null if the token is
+ * malformed (caller treats that as an invalid token).
+ */
+function decodeToken(token) {
+    const parts = token.split('.');
+    if (parts.length !== 3 || !parts[1]) {
+        return null;
+    }
+    try {
+        const payload = JSON.parse(base64UrlDecode(parts[1]));
+        if (typeof payload.sub !== 'string' || typeof payload.exp !== 'number') {
+            return null;
+        }
+        return {
+            sub: payload.sub,
+            orgId: typeof payload.orgId === 'string' ? payload.orgId : null,
+            exp: payload.exp,
+        };
+    }
+    catch {
+        return null;
+    }
+}
+//# sourceMappingURL=jwt.js.map

package/dist/internal/jwt.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"jwt.js","sourceRoot":"","sources":["../../src/internal/jwt.ts"],"names":[],"mappings":";AAAA;;;;GAIG;;AAmDH,kCAsBC;AA9DD,qEAAqE;AACrE,SAAS,eAAe,CAAC,KAAa;IACpC,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IAC3D,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IAEnF,gCAAgC;IAChC,MAAM,WAAW,GAAI,UAA2F;SAC7G,MAAM,CAAC;IACV,IAAI,WAAW,EAAE,CAAC;QAChB,OAAO,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;IAC9D,CAAC;IAED,0BAA0B;IAC1B,MAAM,SAAS,GAAI,UAA+C,CAAC,IAAI,CAAC;IACxE,IAAI,SAAS,EAAE,CAAC;QACd,MAAM,MAAM,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC;QACjC,IAAI,MAAM,GAAG,EAAE,CAAC;QAChB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;YAC1C,MAAM,IAAI,MAAM,CAAC,YAAY,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC;QACtD,CAAC;QACD,oCAAoC;QACpC,IAAI,CAAC;YACH,OAAO,kBAAkB,CACvB,MAAM;iBACH,KAAK,CAAC,EAAE,CAAC;iBACT,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,KAAK,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;iBAC/D,IAAI,CAAC,EAAE,CAAC,CACZ,CAAC;QACJ,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,MAAM,CAAC;QAChB,CAAC;IACH,CAAC;IAED,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;AACrE,CAAC;AAED;;;GAGG;AACH,SAAgB,WAAW,CAAC,KAAa;IACvC,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC/B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;QACpC,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAInD,CAAC;QACF,IAAI,OAAO,OAAO,CAAC,GAAG,KAAK,QAAQ,IAAI,OAAO,OAAO,CAAC,GAAG,KAAK,QAAQ,EAAE,CAAC;YACvE,OAAO,IAAI,CAAC;QACd,CAAC;QACD,OAAO;YACL,GAAG,EAAE,OAAO,CAAC,GAAG;YAChB,KAAK,EAAE,OAAO,OAAO,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI;YAC/D,GAAG,EAAE,OAAO,CAAC,GAAG;SACjB,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC"}

package/dist/transport/RealtimeClient.d.ts

@@ -0,0 +1,29 @@
+import type { CommzyError } from '../types.js';
+export interface RealtimeClientOptions {
+    baseUrl: string;
+    /** Current bearer token for the handshake; read fresh on each (re)connect. */
+    getToken: () => string | null;
+    onConnect: () => void;
+    onDisconnect: (reason: string) => void;
+    onError: (error: CommzyError) => void;
+    /** Generic pass-through for server events the host app may want. */
+    onEvent: (name: string, payload: unknown) => void;
+}
+/**
+ * Realtime layer over the existing Commzy Socket.io gateway. The gateway
+ * authenticates a token-only handshake (`handshake.auth.token`) and joins the user
+ * to their org/channel rooms from OrgMember — so the SDK is purely a client; no
+ * server changes. On reconnect we re-read the token so a renewed token is used.
+ */
+export declare class RealtimeClient {
+    private readonly opts;
+    private socket;
+    constructor(options: RealtimeClientOptions);
+    get connected(): boolean;
+    connect(): void;
+    /** Apply the latest token and force a reconnect (e.g. right after a renewal). */
+    updateAuthAndReconnect(): void;
+    emit(event: string, payload: unknown): void;
+    disconnect(): void;
+}
+//# sourceMappingURL=RealtimeClient.d.ts.map

package/dist/transport/RealtimeClient.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"RealtimeClient.d.ts","sourceRoot":"","sources":["../../src/transport/RealtimeClient.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAE/C,MAAM,WAAW,qBAAqB;IACpC,OAAO,EAAE,MAAM,CAAC;IAChB,8EAA8E;IAC9E,QAAQ,EAAE,MAAM,MAAM,GAAG,IAAI,CAAC;IAC9B,SAAS,EAAE,MAAM,IAAI,CAAC;IACtB,YAAY,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,IAAI,CAAC;IACvC,OAAO,EAAE,CAAC,KAAK,EAAE,WAAW,KAAK,IAAI,CAAC;IACtC,oEAAoE;IACpE,OAAO,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,KAAK,IAAI,CAAC;CACnD;AAED;;;;;GAKG;AACH,qBAAa,cAAc;IACzB,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAwB;IAC7C,OAAO,CAAC,MAAM,CAAuB;gBAEzB,OAAO,EAAE,qBAAqB;IAI1C,IAAI,SAAS,IAAI,OAAO,CAEvB;IAED,OAAO,IAAI,IAAI;IAiCf,iFAAiF;IACjF,sBAAsB,IAAI,IAAI;IAa9B,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,GAAG,IAAI;IAI3C,UAAU,IAAI,IAAI;CAOnB"}

package/dist/transport/RealtimeClient.js

@@ -0,0 +1,72 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.RealtimeClient = void 0;
+const socket_io_client_1 = require("socket.io-client");
+/**
+ * Realtime layer over the existing Commzy Socket.io gateway. The gateway
+ * authenticates a token-only handshake (`handshake.auth.token`) and joins the user
+ * to their org/channel rooms from OrgMember — so the SDK is purely a client; no
+ * server changes. On reconnect we re-read the token so a renewed token is used.
+ */
+class RealtimeClient {
+    opts;
+    socket = null;
+    constructor(options) {
+        this.opts = options;
+    }
+    get connected() {
+        return this.socket?.connected ?? false;
+    }
+    connect() {
+        if (this.socket) {
+            this.updateAuthAndReconnect();
+            return;
+        }
+        const token = this.opts.getToken();
+        const socket = (0, socket_io_client_1.io)(this.opts.baseUrl.replace(/\/$/, ''), {
+            transports: ['websocket'],
+            auth: { token: token ?? '' },
+            reconnection: true,
+            reconnectionAttempts: Infinity,
+            reconnectionDelay: 1_000,
+            reconnectionDelayMax: 10_000,
+        });
+        socket.on('connect', () => this.opts.onConnect());
+        socket.on('disconnect', (reason) => this.opts.onDisconnect(reason));
+        socket.on('connect_error', (err) => this.opts.onError({ code: 'TRANSPORT_FAILED', message: err.message, cause: err }));
+        // Refresh the handshake token before each automatic reconnection attempt so a
+        // renewed token is always used.
+        socket.io.on('reconnect_attempt', () => {
+            socket.auth = { token: this.opts.getToken() ?? '' };
+        });
+        // Forward any server event to the host app via a catch-all listener.
+        socket.onAny((name, payload) => this.opts.onEvent(name, payload));
+        this.socket = socket;
+    }
+    /** Apply the latest token and force a reconnect (e.g. right after a renewal). */
+    updateAuthAndReconnect() {
+        if (!this.socket) {
+            this.connect();
+            return;
+        }
+        this.socket.auth = { token: this.opts.getToken() ?? '' };
+        if (this.socket.connected) {
+            this.socket.disconnect().connect();
+        }
+        else {
+            this.socket.connect();
+        }
+    }
+    emit(event, payload) {
+        this.socket?.emit(event, payload);
+    }
+    disconnect() {
+        if (this.socket) {
+            this.socket.removeAllListeners();
+            this.socket.disconnect();
+            this.socket = null;
+        }
+    }
+}
+exports.RealtimeClient = RealtimeClient;
+//# sourceMappingURL=RealtimeClient.js.map

package/dist/transport/RealtimeClient.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"RealtimeClient.js","sourceRoot":"","sources":["../../src/transport/RealtimeClient.ts"],"names":[],"mappings":";;;AAAA,uDAAmD;AAenD;;;;;GAKG;AACH,MAAa,cAAc;IACR,IAAI,CAAwB;IACrC,MAAM,GAAkB,IAAI,CAAC;IAErC,YAAY,OAA8B;QACxC,IAAI,CAAC,IAAI,GAAG,OAAO,CAAC;IACtB,CAAC;IAED,IAAI,SAAS;QACX,OAAO,IAAI,CAAC,MAAM,EAAE,SAAS,IAAI,KAAK,CAAC;IACzC,CAAC;IAED,OAAO;QACL,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YAChB,IAAI,CAAC,sBAAsB,EAAE,CAAC;YAC9B,OAAO;QACT,CAAC;QACD,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;QACnC,MAAM,MAAM,GAAG,IAAA,qBAAE,EAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,EAAE;YACtD,UAAU,EAAE,CAAC,WAAW,CAAC;YACzB,IAAI,EAAE,EAAE,KAAK,EAAE,KAAK,IAAI,EAAE,EAAE;YAC5B,YAAY,EAAE,IAAI;YAClB,oBAAoB,EAAE,QAAQ;YAC9B,iBAAiB,EAAE,KAAK;YACxB,oBAAoB,EAAE,MAAM;SAC7B,CAAC,CAAC;QAEH,MAAM,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC;QAClD,MAAM,CAAC,EAAE,CAAC,YAAY,EAAE,CAAC,MAAc,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC;QAC5E,MAAM,CAAC,EAAE,CAAC,eAAe,EAAE,CAAC,GAAU,EAAE,EAAE,CACxC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,kBAAkB,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAClF,CAAC;QAEF,8EAA8E;QAC9E,gCAAgC;QAChC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC,mBAAmB,EAAE,GAAG,EAAE;YACrC,MAAM,CAAC,IAAI,GAAG,EAAE,KAAK,EAAE,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,EAAE,EAAE,CAAC;QACtD,CAAC,CAAC,CAAC;QAEH,qEAAqE;QACrE,MAAM,CAAC,KAAK,CAAC,CAAC,IAAY,EAAE,OAAgB,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC;QAEnF,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACvB,CAAC;IAED,iFAAiF;IACjF,sBAAsB;QACpB,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;YACjB,IAAI,CAAC,OAAO,EAAE,CAAC;YACf,OAAO;QACT,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,IAAI,GAAG,EAAE,KAAK,EAAE,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,EAAE,EAAE,CAAC;QACzD,IAAI,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC;YAC1B,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC,OAAO,EAAE,CAAC;QACrC,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACxB,CAAC;IACH,CAAC;IAED,IAAI,CAAC,KAAa,EAAE,OAAgB;QAClC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IACpC,CAAC;IAED,UAAU;QACR,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YAChB,IAAI,CAAC,MAAM,CAAC,kBAAkB,EAAE,CAAC;YACjC,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC;YACzB,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;QACrB,CAAC;IACH,CAAC;CACF;AAtED,wCAsEC"}

package/dist/transport/RestClient.d.ts

@@ -0,0 +1,31 @@
+/** Supplies the current bearer token; lets the REST client always use the latest. */
+export type TokenAccessor = () => string | null;
+/** Triggers a token renewal and resolves with the fresh token (used on 401). */
+export type TokenRefresher = () => Promise<string>;
+export interface RestClientOptions {
+    baseUrl: string;
+    getToken: TokenAccessor;
+    refreshToken: TokenRefresher;
+}
+export interface RestRequest {
+    method?: 'GET' | 'POST' | 'PATCH' | 'DELETE';
+    path: string;
+    query?: Record<string, string | number | undefined>;
+    body?: unknown;
+}
+/**
+ * Thin authenticated REST client over the existing Commzy API. Adds the bearer
+ * token, unwraps the platform's `{ success, data }` envelope, and on a 401 makes
+ * ONE renewal attempt (via the TokenManager) before retrying — so a token that
+ * lapsed between renewals doesn't surface as a hard failure.
+ */
+export declare class RestClient {
+    private readonly opts;
+    constructor(options: RestClientOptions);
+    request<T>(req: RestRequest): Promise<T>;
+    private send;
+    private buildUrl;
+    private parse;
+    private httpError;
+}
+//# sourceMappingURL=RestClient.d.ts.map

package/dist/transport/RestClient.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"RestClient.d.ts","sourceRoot":"","sources":["../../src/transport/RestClient.ts"],"names":[],"mappings":"AAEA,qFAAqF;AACrF,MAAM,MAAM,aAAa,GAAG,MAAM,MAAM,GAAG,IAAI,CAAC;AAEhD,gFAAgF;AAChF,MAAM,MAAM,cAAc,GAAG,MAAM,OAAO,CAAC,MAAM,CAAC,CAAC;AAEnD,MAAM,WAAW,iBAAiB;IAChC,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,aAAa,CAAC;IACxB,YAAY,EAAE,cAAc,CAAC;CAC9B;AAED,MAAM,WAAW,WAAW;IAC1B,MAAM,CAAC,EAAE,KAAK,GAAG,MAAM,GAAG,OAAO,GAAG,QAAQ,CAAC;IAC7C,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAAC,CAAC;IACpD,IAAI,CAAC,EAAE,OAAO,CAAC;CAChB;AAED;;;;;GAKG;AACH,qBAAa,UAAU;IACrB,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAoB;gBAE7B,OAAO,EAAE,iBAAiB;IAIhC,OAAO,CAAC,CAAC,EAAE,GAAG,EAAE,WAAW,GAAG,OAAO,CAAC,CAAC,CAAC;IAW9C,OAAO,CAAC,IAAI;IAaZ,OAAO,CAAC,QAAQ;YAaF,KAAK;IAiBnB,OAAO,CAAC,SAAS;CAOlB"}

package/dist/transport/RestClient.js

@@ -0,0 +1,74 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.RestClient = void 0;
+/**
+ * Thin authenticated REST client over the existing Commzy API. Adds the bearer
+ * token, unwraps the platform's `{ success, data }` envelope, and on a 401 makes
+ * ONE renewal attempt (via the TokenManager) before retrying — so a token that
+ * lapsed between renewals doesn't surface as a hard failure.
+ */
+class RestClient {
+    opts;
+    constructor(options) {
+        this.opts = options;
+    }
+    async request(req) {
+        const res = await this.send(req, this.opts.getToken());
+        if (res.status === 401) {
+            // Token may have lapsed — renew once and retry.
+            const fresh = await this.opts.refreshToken();
+            const retry = await this.send(req, fresh);
+            return this.parse(retry);
+        }
+        return this.parse(res);
+    }
+    send(req, token) {
+        const url = this.buildUrl(req.path, req.query);
+        const headers = { 'Content-Type': 'application/json' };
+        if (token) {
+            headers['Authorization'] = `Bearer ${token}`;
+        }
+        const init = { method: req.method ?? 'GET', headers };
+        if (req.body !== undefined) {
+            init.body = JSON.stringify(req.body);
+        }
+        return fetch(url, init);
+    }
+    buildUrl(path, query) {
+        const base = this.opts.baseUrl.replace(/\/$/, '');
+        const url = new URL(`${base}${path}`);
+        if (query) {
+            for (const [key, value] of Object.entries(query)) {
+                if (value !== undefined) {
+                    url.searchParams.set(key, String(value));
+                }
+            }
+        }
+        return url.toString();
+    }
+    async parse(res) {
+        let json;
+        try {
+            json = await res.json();
+        }
+        catch {
+            json = undefined;
+        }
+        if (!res.ok) {
+            throw this.httpError(res.status, json);
+        }
+        // Unwrap the platform's { success, data } envelope when present.
+        if (json && typeof json === 'object' && 'data' in json) {
+            return json.data;
+        }
+        return json;
+    }
+    httpError(status, body) {
+        const message = body && typeof body === 'object' && 'message' in body
+            ? String(body.message)
+            : `Request failed with status ${status}`;
+        return { code: 'TRANSPORT_FAILED', message, cause: { status, body } };
+    }
+}
+exports.RestClient = RestClient;
+//# sourceMappingURL=RestClient.js.map

package/dist/transport/RestClient.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"RestClient.js","sourceRoot":"","sources":["../../src/transport/RestClient.ts"],"names":[],"mappings":";;;AAqBA;;;;;GAKG;AACH,MAAa,UAAU;IACJ,IAAI,CAAoB;IAEzC,YAAY,OAA0B;QACpC,IAAI,CAAC,IAAI,GAAG,OAAO,CAAC;IACtB,CAAC;IAED,KAAK,CAAC,OAAO,CAAI,GAAgB;QAC/B,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC;QACvD,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;YACvB,gDAAgD;YAChD,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC;YAC7C,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;YAC1C,OAAO,IAAI,CAAC,KAAK,CAAI,KAAK,CAAC,CAAC;QAC9B,CAAC;QACD,OAAO,IAAI,CAAC,KAAK,CAAI,GAAG,CAAC,CAAC;IAC5B,CAAC;IAEO,IAAI,CAAC,GAAgB,EAAE,KAAoB;QACjD,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC;QAC/C,MAAM,OAAO,GAA2B,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC;QAC/E,IAAI,KAAK,EAAE,CAAC;YACV,OAAO,CAAC,eAAe,CAAC,GAAG,UAAU,KAAK,EAAE,CAAC;QAC/C,CAAC;QACD,MAAM,IAAI,GAAgB,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,IAAI,KAAK,EAAE,OAAO,EAAE,CAAC;QACnE,IAAI,GAAG,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YAC3B,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACvC,CAAC;QACD,OAAO,KAAK,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IAC1B,CAAC;IAEO,QAAQ,CAAC,IAAY,EAAE,KAA4B;QACzD,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QAClD,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI,EAAE,CAAC,CAAC;QACtC,IAAI,KAAK,EAAE,CAAC;YACV,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;gBACjD,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;oBACxB,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;gBAC3C,CAAC;YACH,CAAC;QACH,CAAC;QACD,OAAO,GAAG,CAAC,QAAQ,EAAE,CAAC;IACxB,CAAC;IAEO,KAAK,CAAC,KAAK,CAAI,GAAa;QAClC,IAAI,IAAa,CAAC;QAClB,IAAI,CAAC;YACH,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;QAC1B,CAAC;QAAC,MAAM,CAAC;YACP,IAAI,GAAG,SAAS,CAAC;QACnB,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YACZ,MAAM,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QACzC,CAAC;QACD,iEAAiE;QACjE,IAAI,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,MAAM,IAAK,IAAgC,EAAE,CAAC;YACpF,OAAQ,IAAoB,CAAC,IAAI,CAAC;QACpC,CAAC;QACD,OAAO,IAAS,CAAC;IACnB,CAAC;IAEO,SAAS,CAAC,MAAc,EAAE,IAAa;QAC7C,MAAM,OAAO,GACX,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,SAAS,IAAK,IAAgC;YAChF,CAAC,CAAC,MAAM,CAAE,IAA6B,CAAC,OAAO,CAAC;YAChD,CAAC,CAAC,8BAA8B,MAAM,EAAE,CAAC;QAC7C,OAAO,EAAE,IAAI,EAAE,kBAAkB,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,CAAC;IACxE,CAAC;CACF;AApED,gCAoEC"}

package/dist/types.d.ts

@@ -0,0 +1,88 @@
+/**
+ * Public types for @commzy/sdk-react-native.
+ *
+ * The SDK is a CLIENT of the existing Commzy platform. It never mints tokens
+ * (that is the vendor backend's job via sk_); it consumes tokens supplied by a
+ * tokenProvider and manages the authenticated session. See
+ * docs/architecture/sdk-platform-architecture.md.
+ */
+/**
+ * Function the SDK calls whenever it needs a fresh access token. The vendor
+ * implements this to fetch a token from THEIR backend (which mints it from Commzy
+ * with the secret key). Called on connect, before expiry, and on reconnect.
+ *
+ * `deviceId` is the SDK's stable per-install id — the vendor should forward it to
+ * their backend so re-mints from the same device collapse onto one session.
+ */
+export type TokenProvider = (params: {
+    deviceId: string;
+}) => Promise<string>;
+/**
+ * Pluggable key/value storage for the stable device id. RN apps inject an
+ * AsyncStorage-backed adapter; tests/Node inject memory or file. If omitted, the
+ * SDK falls back to an in-memory store (id is not persisted across restarts).
+ */
+export interface StorageAdapter {
+    getItem(key: string): Promise<string | null>;
+    setItem(key: string, value: string): Promise<void>;
+}
+/** Configuration passed to `new CommzyClient(config)`. */
+export interface CommzyClientConfig {
+    /** Commzy API base URL, e.g. https://api.commzy.ai. Used for REST + WebSocket. */
+    baseUrl: string;
+    /**
+     * The app's publishable key (pk_live_…). Identifies the app/environment and
+     * will drive white-label branding later. It does NOT authenticate users — the
+     * tokenProvider does. Safe to ship in the app binary.
+     */
+    publishableKey: string;
+    /** Supplies fresh access tokens from the vendor's backend. */
+    tokenProvider: TokenProvider;
+    /** Optional persistent storage for the device id (defaults to in-memory). */
+    storage?: StorageAdapter;
+    /**
+     * Override the stable device id instead of letting the SDK generate one. Use
+     * when the vendor already has a stable per-install identifier.
+     */
+    deviceId?: string;
+    /**
+     * Seconds before token expiry to trigger a proactive renewal. Default 60.
+     */
+    renewSkewSeconds?: number;
+}
+/** The session lifecycle states the host app can observe. */
+export type SessionStatus = 'idle' | 'connecting' | 'authenticated' | 'connected' | 'expired' | 'error' | 'disconnected';
+/** A snapshot of the current session, returned by `client.getState()`. */
+export interface SessionSnapshot {
+    status: SessionStatus;
+    /** The authenticated user id (JWT `sub`), once known. */
+    userId: string | null;
+    /** The org the session is scoped to (JWT `orgId`), once known. */
+    orgId: string | null;
+    /** Whether the realtime socket is currently connected. */
+    realtimeConnected: boolean;
+    /** The last error, if status is 'error'. */
+    error: CommzyError | null;
+}
+/** Normalized SDK error surfaced to the host app. */
+export interface CommzyError {
+    code: 'TOKEN_PROVIDER_FAILED' | 'TOKEN_INVALID' | 'TRANSPORT_FAILED' | 'NOT_CONNECTED' | 'CONFIG_INVALID';
+    message: string;
+    /** The underlying cause, if any. */
+    cause?: unknown;
+}
+/** Events emitted by the client (event-emitter API). */
+export interface CommzyClientEvents {
+    /** Fired whenever the session status changes. */
+    stateChange: (snapshot: SessionSnapshot) => void;
+    /** Fired on errors (also reflected in state when terminal). */
+    error: (error: CommzyError) => void;
+    /** Fired for each realtime event received over the socket. */
+    realtimeEvent: (event: {
+        name: string;
+        payload: unknown;
+    }) => void;
+    /** Index signature so the typed emitter can constrain on this shape. */
+    [event: string]: (...args: never[]) => void;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH;;;;;;;GAOG;AACH,MAAM,MAAM,aAAa,GAAG,CAAC,MAAM,EAAE;IAAE,QAAQ,EAAE,MAAM,CAAA;CAAE,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;AAE9E;;;;GAIG;AACH,MAAM,WAAW,cAAc;IAC7B,OAAO,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IAC7C,OAAO,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACpD;AAED,0DAA0D;AAC1D,MAAM,WAAW,kBAAkB;IACjC,kFAAkF;IAClF,OAAO,EAAE,MAAM,CAAC;IAChB;;;;OAIG;IACH,cAAc,EAAE,MAAM,CAAC;IACvB,8DAA8D;IAC9D,aAAa,EAAE,aAAa,CAAC;IAC7B,6EAA6E;IAC7E,OAAO,CAAC,EAAE,cAAc,CAAC;IACzB;;;OAGG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB;;OAEG;IACH,gBAAgB,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED,6DAA6D;AAC7D,MAAM,MAAM,aAAa,GACrB,MAAM,GACN,YAAY,GACZ,eAAe,GACf,WAAW,GACX,SAAS,GACT,OAAO,GACP,cAAc,CAAC;AAEnB,0EAA0E;AAC1E,MAAM,WAAW,eAAe;IAC9B,MAAM,EAAE,aAAa,CAAC;IACtB,yDAAyD;IACzD,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,kEAAkE;IAClE,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,0DAA0D;IAC1D,iBAAiB,EAAE,OAAO,CAAC;IAC3B,4CAA4C;IAC5C,KAAK,EAAE,WAAW,GAAG,IAAI,CAAC;CAC3B;AAED,qDAAqD;AACrD,MAAM,WAAW,WAAW;IAC1B,IAAI,EACA,uBAAuB,GACvB,eAAe,GACf,kBAAkB,GAClB,eAAe,GACf,gBAAgB,CAAC;IACrB,OAAO,EAAE,MAAM,CAAC;IAChB,oCAAoC;IACpC,KAAK,CAAC,EAAE,OAAO,CAAC;CACjB;AAED,wDAAwD;AACxD,MAAM,WAAW,kBAAkB;IACjC,iDAAiD;IACjD,WAAW,EAAE,CAAC,QAAQ,EAAE,eAAe,KAAK,IAAI,CAAC;IACjD,+DAA+D;IAC/D,KAAK,EAAE,CAAC,KAAK,EAAE,WAAW,KAAK,IAAI,CAAC;IACpC,8DAA8D;IAC9D,aAAa,EAAE,CAAC,KAAK,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,OAAO,CAAA;KAAE,KAAK,IAAI,CAAC;IACnE,wEAAwE;IACxE,CAAC,KAAK,EAAE,MAAM,GAAG,CAAC,GAAG,IAAI,EAAE,KAAK,EAAE,KAAK,IAAI,CAAC;CAC7C"}

package/dist/types.js

@@ -0,0 +1,11 @@
+"use strict";
+/**
+ * Public types for @commzy/sdk-react-native.
+ *
+ * The SDK is a CLIENT of the existing Commzy platform. It never mints tokens
+ * (that is the vendor backend's job via sk_); it consumes tokens supplied by a
+ * tokenProvider and manages the authenticated session. See
+ * docs/architecture/sdk-platform-architecture.md.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=types.js.map

package/dist/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":";AAAA;;;;;;;GAOG"}

package/package.json

@@ -0,0 +1,61 @@
+{
+  "name": "@commzy/sdk-react-native",
+  "version": "0.1.0",
+  "description": "Commzy embeddable mobile SDK for React Native — authenticated session, chat, presence (white-label).",
+  "keywords": [
+    "commzy",
+    "chat",
+    "messaging",
+    "react-native",
+    "sdk",
+    "websocket",
+    "cpaas"
+  ],
+  "license": "UNLICENSED",
+  "author": "QSS Technosoft",
+  "repository": {
+    "type": "git",
+    "url": "https://gitlab.com/commzy/commzy.git",
+    "directory": "packages/sdk-react-native"
+  },
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "import": "./dist/index.js",
+      "types": "./dist/index.d.ts"
+    }
+  },
+  "sideEffects": false,
+  "files": [
+    "dist",
+    "README.md"
+  ],
+  "publishConfig": {
+    "access": "public"
+  },
+  "scripts": {
+    "build": "tsc -p tsconfig.json",
+    "dev": "tsc -p tsconfig.json --watch",
+    "lint": "eslint src/",
+    "typecheck": "tsc --noEmit",
+    "clean": "rm -rf dist *.tsbuildinfo",
+    "prepack": "pnpm run clean && pnpm run build"
+  },
+  "dependencies": {
+    "socket.io-client": "^4.8.3"
+  },
+  "peerDependencies": {
+    "react-native": ">=0.76.0"
+  },
+  "peerDependenciesMeta": {
+    "react-native": {
+      "optional": true
+    }
+  },
+  "devDependencies": {
+    "@commzy/config": "workspace:*",
+    "@commzy/shared": "workspace:*",
+    "typescript": "^5.7.3"
+  }
+}