@corti/sdk 1.0.0-alpha.1 → 1.0.0-alpha.2

package/dist/esm/custom/CustomTranscribe.mjs

@@ -1,25 +0,0 @@
-var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
-    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
-    return new (P || (P = Promise))(function (resolve, reject) {
-        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
-        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
-        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
-        step((generator = generator.apply(thisArg, _arguments || [])).next());
-    });
-};
-import { TranscribeClient } from "../api/resources/transcribe/client/Client.mjs";
-import * as core from "../core/index.mjs";
-export class CustomTranscribe extends TranscribeClient {
-    connect(args) {
-        const _super = Object.create(null, {
-            connect: { get: () => super.connect }
-        });
-        return __awaiter(this, void 0, void 0, function* () {
-            var _a, _b, _c;
-            const tenantName = yield core.Supplier.get(this._options.tenantName);
-            const authRequest = yield ((_a = this._options.authProvider) === null || _a === void 0 ? void 0 : _a.getAuthRequest());
-            const token = (_c = (_b = authRequest === null || authRequest === void 0 ? void 0 : authRequest.headers.Authorization) !== null && _b !== void 0 ? _b : authRequest === null || authRequest === void 0 ? void 0 : authRequest.headers.authorization) !== null && _c !== void 0 ? _c : "";
-            return _super.connect.call(this, Object.assign(Object.assign({}, args), { tenantName, token }));
-        });
-    }
-}

package/dist/esm/custom/CustomTranscribeSocket.d.mts

@@ -1,15 +0,0 @@
-/**
- * Patch: file patches disability of auto-generating binary data methods for sending data to the socket
- */
-import { TranscribeSocket as FernTranscribeSocket } from "../api/resources/transcribe/client/Socket.mjs";
-export declare class TranscribeSocket extends FernTranscribeSocket {
-    sendAudio(message: ArrayBufferLike | Blob | ArrayBufferView | string): void;
-    /**
-     * Patch: have to repeat this method, because it is private in the base class
-     */
-    private __assertSocketIsOpen;
-    /**
-     * Patch: added ability to remove event handlers
-     */
-    off<T extends keyof FernTranscribeSocket.EventHandlers>(event: T, callback?: FernTranscribeSocket.EventHandlers[T]): void;
-}

package/dist/esm/custom/CustomTranscribeSocket.mjs

@@ -1,33 +0,0 @@
-/**
- * Patch: file patches disability of auto-generating binary data methods for sending data to the socket
- */
-import { TranscribeSocket as FernTranscribeSocket } from "../api/resources/transcribe/client/Socket.mjs";
-import * as core from "../core/index.mjs";
-export class TranscribeSocket extends FernTranscribeSocket {
-    sendAudio(message) {
-        if (typeof message === "string") {
-            return super.sendAudio(message);
-        }
-        this.__assertSocketIsOpen();
-        super.sendBinary(message);
-    }
-    /**
-     * Patch: have to repeat this method, because it is private in the base class
-     */
-    __assertSocketIsOpen() {
-        if (!this.socket) {
-            throw new Error("Socket is not connected.");
-        }
-        if (this.socket.readyState !== core.ReconnectingWebSocket.OPEN) {
-            throw new Error("Socket is not open.");
-        }
-    }
-    /**
-     * Patch: added ability to remove event handlers
-     */
-    off(event, callback) {
-        if (!callback || callback === this.eventHandlers[event]) {
-            delete this.eventHandlers[event];
-        }
-    }
-}

package/dist/esm/custom/OAuthAuthCodeAuthProvider.d.mts

@@ -1,23 +0,0 @@
-import type { OAuthAuthProvider } from "../auth/OAuthAuthProvider.mjs";
-import type { BaseClientOptions } from "../BaseClient.mjs";
-import * as core from "../core/index.mjs";
-export declare class OAuthAuthCodeAuthProvider implements core.AuthProvider {
-    private readonly options;
-    private readonly authClient;
-    private accessToken;
-    private expiresAt;
-    private refreshPromise;
-    private storedRefreshToken;
-    private refreshExpiresAt;
-    constructor(options: BaseClientOptions & OAuthAuthProvider.AuthCodeCredentials);
-    static canCreate(options?: Partial<OAuthAuthProvider.AuthCodeCredentials & BaseClientOptions>): options is BaseClientOptions & OAuthAuthProvider.AuthCodeCredentials;
-    private clientIdSupplier;
-    private clientSecretSupplier;
-    private codeSupplier;
-    private redirectUriSupplier;
-    getAuthRequest({ endpointMetadata, }?: {
-        endpointMetadata?: core.EndpointMetadata;
-    }): Promise<core.AuthRequest>;
-    private getToken;
-    private refresh;
-}

package/dist/esm/custom/OAuthAuthCodeAuthProvider.mjs

@@ -1,127 +0,0 @@
-var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
-    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
-    return new (P || (P = Promise))(function (resolve, reject) {
-        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
-        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
-        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
-        step((generator = generator.apply(thisArg, _arguments || [])).next());
-    });
-};
-import * as core from "../core/index.mjs";
-import * as errors from "../errors/index.mjs";
-import { CortiAuth } from "./CortiAuth.mjs";
-import { BUFFER_IN_MINUTES, CLIENT_ID_PARAM, CLIENT_ID_REQUIRED_ERROR_MESSAGE, CLIENT_SECRET_PARAM, CLIENT_SECRET_REQUIRED_ERROR_MESSAGE, CODE_PARAM, CODE_REQUIRED_ERROR_MESSAGE, getExpiresAt, REDIRECT_URI_PARAM, REDIRECT_URI_REQUIRED_ERROR_MESSAGE, } from "./utils/oauthAuthHelpers.mjs";
-export class OAuthAuthCodeAuthProvider {
-    constructor(options) {
-        this.options = options;
-        this.authClient = new CortiAuth(options);
-        this.expiresAt = new Date();
-    }
-    static canCreate(options) {
-        return ((options === null || options === void 0 ? void 0 : options[CLIENT_ID_PARAM]) != null &&
-            (options === null || options === void 0 ? void 0 : options[CLIENT_SECRET_PARAM]) != null &&
-            (options === null || options === void 0 ? void 0 : options[CODE_PARAM]) != null &&
-            (options === null || options === void 0 ? void 0 : options[REDIRECT_URI_PARAM]) != null);
-    }
-    clientIdSupplier() {
-        return __awaiter(this, arguments, void 0, function* ({ endpointMetadata, } = {}) {
-            const supplier = this.options[CLIENT_ID_PARAM];
-            if (supplier == null) {
-                throw new errors.CortiError({ message: CLIENT_ID_REQUIRED_ERROR_MESSAGE });
-            }
-            return core.EndpointSupplier.get(supplier, { endpointMetadata });
-        });
-    }
-    clientSecretSupplier() {
-        return __awaiter(this, arguments, void 0, function* ({ endpointMetadata, } = {}) {
-            const supplier = this.options[CLIENT_SECRET_PARAM];
-            if (supplier == null) {
-                throw new errors.CortiError({ message: CLIENT_SECRET_REQUIRED_ERROR_MESSAGE });
-            }
-            return core.EndpointSupplier.get(supplier, { endpointMetadata });
-        });
-    }
-    codeSupplier() {
-        return __awaiter(this, arguments, void 0, function* ({ endpointMetadata, } = {}) {
-            const supplier = this.options[CODE_PARAM];
-            if (supplier == null) {
-                throw new errors.CortiError({ message: CODE_REQUIRED_ERROR_MESSAGE });
-            }
-            return core.EndpointSupplier.get(supplier, { endpointMetadata });
-        });
-    }
-    redirectUriSupplier() {
-        return __awaiter(this, arguments, void 0, function* ({ endpointMetadata, } = {}) {
-            const supplier = this.options[REDIRECT_URI_PARAM];
-            if (supplier == null) {
-                throw new errors.CortiError({ message: REDIRECT_URI_REQUIRED_ERROR_MESSAGE });
-            }
-            return core.EndpointSupplier.get(supplier, { endpointMetadata });
-        });
-    }
-    getAuthRequest() {
-        return __awaiter(this, arguments, void 0, function* ({ endpointMetadata, } = {}) {
-            const token = yield this.getToken({ endpointMetadata });
-            return {
-                headers: {
-                    Authorization: `Bearer ${token}`,
-                },
-            };
-        });
-    }
-    getToken() {
-        return __awaiter(this, arguments, void 0, function* ({ endpointMetadata } = {}) {
-            if (this.accessToken && this.expiresAt > new Date()) {
-                return this.accessToken;
-            }
-            if (this.refreshPromise != null) {
-                return this.refreshPromise;
-            }
-            return this.refresh({ endpointMetadata });
-        });
-    }
-    refresh() {
-        return __awaiter(this, arguments, void 0, function* ({ endpointMetadata } = {}) {
-            this.refreshPromise = (() => __awaiter(this, void 0, void 0, function* () {
-                try {
-                    const clientId = yield this.clientIdSupplier({ endpointMetadata });
-                    const clientSecret = yield this.clientSecretSupplier({ endpointMetadata });
-                    let tokenResponse;
-                    if (clientId &&
-                        this.storedRefreshToken &&
-                        this.refreshExpiresAt &&
-                        this.refreshExpiresAt > new Date()) {
-                        tokenResponse = yield this.authClient.refreshToken({
-                            clientId,
-                            refreshToken: this.storedRefreshToken,
-                            clientSecret,
-                        });
-                    }
-                    else {
-                        const code = yield this.codeSupplier({ endpointMetadata });
-                        const redirectUri = yield this.redirectUriSupplier({ endpointMetadata });
-                        tokenResponse = yield this.authClient.getCodeFlowToken({
-                            clientId,
-                            clientSecret,
-                            code,
-                            redirectUri,
-                        });
-                    }
-                    this.accessToken = tokenResponse.accessToken;
-                    this.expiresAt = getExpiresAt(tokenResponse.expiresIn, BUFFER_IN_MINUTES);
-                    if (tokenResponse.refreshToken) {
-                        this.storedRefreshToken = tokenResponse.refreshToken;
-                        this.refreshExpiresAt = tokenResponse.refreshExpiresIn
-                            ? getExpiresAt(tokenResponse.refreshExpiresIn, BUFFER_IN_MINUTES)
-                            : undefined;
-                    }
-                    return this.accessToken;
-                }
-                finally {
-                    this.refreshPromise = undefined;
-                }
-            }))();
-            return this.refreshPromise;
-        });
-    }
-}

package/dist/esm/custom/OAuthAuthProvider.d.mts

@@ -1,99 +0,0 @@
-import type * as Corti from "../api/index.mjs";
-import type { BaseClientOptions } from "../BaseClient.mjs";
-import * as core from "../core/index.mjs";
-import { CLIENT_ID_PARAM, CLIENT_SECRET_PARAM, CODE_PARAM, CODE_VERIFIER_PARAM, PASSWORD_PARAM, REDIRECT_URI_PARAM, USERNAME_PARAM } from "./utils/oauthAuthHelpers.mjs";
-/** Patch: Re-export for consumers; implementation shared with OAuthRopcAuthProvider, OAuthAuthCodeAuthProvider and OAuthPkceAuthProvider. */
-export { BUFFER_IN_MINUTES, CLIENT_ID_PARAM, CLIENT_ID_REQUIRED_ERROR_MESSAGE, CLIENT_SECRET_PARAM, CLIENT_SECRET_REQUIRED_ERROR_MESSAGE, CODE_PARAM, CODE_VERIFIER_PARAM, getExpiresAt, PASSWORD_PARAM, PASSWORD_REQUIRED_ERROR_MESSAGE, REDIRECT_URI_PARAM, USERNAME_PARAM, USERNAME_REQUIRED_ERROR_MESSAGE, } from "./utils/oauthAuthHelpers.mjs";
-declare const TOKEN_PARAM: "token";
-export declare class OAuthAuthProvider implements core.AuthProvider {
-    private readonly options;
-    /**
-     * Patch: Use CortiAuth (real token endpoint) instead of AuthClient (fake-token).
-     */
-    private readonly authClient;
-    private accessToken;
-    private expiresAt;
-    private refreshPromise;
-    private storedRefreshToken;
-    private refreshExpiresAt;
-    constructor(options: OAuthAuthProvider.Options & OAuthAuthProvider.ClientCredentials);
-    static canCreate(options?: Partial<OAuthAuthProvider.ClientCredentials & BaseClientOptions>): boolean;
-    private clientIdSupplier;
-    private clientSecretSupplier;
-    getAuthRequest({ endpointMetadata, }?: {
-        endpointMetadata?: core.EndpointMetadata;
-    }): Promise<core.AuthRequest>;
-    private getToken;
-    private refresh;
-}
-export declare class OAuthTokenOverrideAuthProvider implements core.AuthProvider {
-    private readonly authClient;
-    private readonly _tokenSupplier;
-    private readonly _clientIdSupplier;
-    private readonly _refreshAccessToken;
-    private accessToken;
-    private expiresAt;
-    private storedRefreshToken;
-    private refreshExpiresAt;
-    private _seedPromise;
-    constructor(options: OAuthAuthProvider.TokenOverride & BaseClientOptions);
-    static canCreate(options?: Partial<OAuthAuthProvider.TokenOverride & BaseClientOptions>): options is OAuthAuthProvider.TokenOverride & BaseClientOptions;
-    getAuthRequest({ endpointMetadata, }?: {
-        endpointMetadata?: core.EndpointMetadata;
-    }): Promise<core.AuthRequest>;
-}
-export declare namespace OAuthAuthProvider {
-    const AUTH_SCHEME: "OAuth";
-    /** Patch: Message extended to mention ROPC (clientId, username, password). */
-    const AUTH_CONFIG_ERROR_MESSAGE: string;
-    type ClientCredentials = {
-        [CLIENT_ID_PARAM]: core.Supplier<string>;
-        [CLIENT_SECRET_PARAM]: core.Supplier<string>;
-    };
-    /**
-     * Patch: tokenType and expiresIn made optional — the provider only strictly needs accessToken.
-     * Mirrors AuthTokenResponse but relaxes the two required fields so custom refresh functions
-     * don't need to return fields the provider doesn't use.
-     */
-    type ExpectedTokenResponse = Omit<Corti.AuthTokenResponse, "tokenType" | "expiresIn"> & {
-        tokenType?: string;
-        expiresIn?: number;
-    };
-    /** Patch: Custom refresh function — sync or async, receives the last known refresh token. */
-    type RefreshAccessTokenFunction = (refreshToken?: string) => Promise<OAuthAuthProvider.ExpectedTokenResponse> | OAuthAuthProvider.ExpectedTokenResponse;
-    type TokenOverride = {
-        [TOKEN_PARAM]?: core.Supplier<string>;
-        /** Patch: Custom callback called to obtain/renew the access token. Takes priority over built-in clientId+refreshToken path. */
-        refreshAccessToken?: OAuthAuthProvider.RefreshAccessTokenFunction;
-        expiresIn?: number;
-        refreshToken?: string;
-        refreshExpiresIn?: number;
-        clientId?: core.Supplier<string>;
-        /** Patch: Pre-seeded token response from resolveClientOptions — avoids a second refreshAccessToken call on first API request. */
-        initialTokenResponse?: Promise<OAuthAuthProvider.ExpectedTokenResponse>;
-    };
-    /** Patch: ROPC grant credentials (clientId + username + password) */
-    type RopcCredentials = {
-        [CLIENT_ID_PARAM]: core.Supplier<string>;
-        [USERNAME_PARAM]: core.Supplier<string>;
-        [PASSWORD_PARAM]: core.Supplier<string>;
-    };
-    /** Patch: Authorization code credentials (clientId + clientSecret + code + redirectUri) */
-    type AuthCodeCredentials = {
-        [CLIENT_ID_PARAM]: core.Supplier<string>;
-        [CLIENT_SECRET_PARAM]: core.Supplier<string>;
-        [CODE_PARAM]: core.Supplier<string>;
-        [REDIRECT_URI_PARAM]: core.Supplier<string>;
-    };
-    /** Patch: PKCE credentials (clientId + code + redirectUri; no clientSecret) */
-    type PkceCredentials = {
-        [CLIENT_ID_PARAM]: core.Supplier<string>;
-        [CODE_PARAM]: core.Supplier<string>;
-        [REDIRECT_URI_PARAM]: core.Supplier<string>;
-        [CODE_VERIFIER_PARAM]?: core.Supplier<string>;
-    };
-    /** Patch: Include RopcCredentials, AuthCodeCredentials and PkceCredentials so CortiClient can use those auth flows. */
-    type AuthOptions = ClientCredentials | TokenOverride | RopcCredentials | AuthCodeCredentials | PkceCredentials;
-    type Options = BaseClientOptions & AuthOptions;
-    function createInstance(options: Options): core.AuthProvider;
-}

package/dist/esm/custom/OAuthAuthProvider.mjs

@@ -1,239 +0,0 @@
-// This file was auto-generated by Fern from our API Definition.
-var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
-    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
-    return new (P || (P = Promise))(function (resolve, reject) {
-        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
-        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
-        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
-        step((generator = generator.apply(thisArg, _arguments || [])).next());
-    });
-};
-import * as core from "../core/index.mjs";
-import { CortiAuth } from "./CortiAuth.mjs";
-import { OAuthAuthCodeAuthProvider } from "./OAuthAuthCodeAuthProvider.mjs";
-import { OAuthPkceAuthProvider } from "./OAuthPkceAuthProvider.mjs";
-import { OAuthRopcAuthProvider } from "./OAuthRopcAuthProvider.mjs";
-import { BUFFER_IN_MINUTES, CLIENT_ID_PARAM, CLIENT_ID_REQUIRED_ERROR_MESSAGE, CLIENT_SECRET_PARAM, CLIENT_SECRET_REQUIRED_ERROR_MESSAGE, CODE_PARAM, CODE_VERIFIER_PARAM, getExpiresAt, PASSWORD_PARAM, REDIRECT_URI_PARAM, USERNAME_PARAM, } from "./utils/oauthAuthHelpers.mjs";
-import * as errors from "../errors/index.mjs";
-/** Patch: Re-export for consumers; implementation shared with OAuthRopcAuthProvider, OAuthAuthCodeAuthProvider and OAuthPkceAuthProvider. */
-export { BUFFER_IN_MINUTES, CLIENT_ID_PARAM, CLIENT_ID_REQUIRED_ERROR_MESSAGE, CLIENT_SECRET_PARAM, CLIENT_SECRET_REQUIRED_ERROR_MESSAGE, CODE_PARAM, CODE_VERIFIER_PARAM, getExpiresAt, PASSWORD_PARAM, PASSWORD_REQUIRED_ERROR_MESSAGE, REDIRECT_URI_PARAM, USERNAME_PARAM, USERNAME_REQUIRED_ERROR_MESSAGE, } from "./utils/oauthAuthHelpers.mjs";
-const TOKEN_PARAM = "token";
-const TOKEN_PARAM_REQUIRED_ERROR_MESSAGE = `${TOKEN_PARAM} is required. Please provide it in options.`;
-export class OAuthAuthProvider {
-    constructor(options) {
-        this.options = options;
-        /**
-         * Patch: Use CortiAuth (real token endpoint) instead of AuthClient (fake-token).
-         */
-        this.authClient = new CortiAuth(options);
-        this.expiresAt = new Date();
-    }
-    static canCreate(options) {
-        return (options === null || options === void 0 ? void 0 : options[CLIENT_ID_PARAM]) != null && (options === null || options === void 0 ? void 0 : options[CLIENT_SECRET_PARAM]) != null;
-    }
-    clientIdSupplier() {
-        return __awaiter(this, arguments, void 0, function* ({ endpointMetadata, } = {}) {
-            const supplier = this.options[CLIENT_ID_PARAM];
-            if (supplier == null) {
-                throw new errors.CortiError({
-                    message: CLIENT_ID_REQUIRED_ERROR_MESSAGE,
-                });
-            }
-            return core.EndpointSupplier.get(supplier, { endpointMetadata });
-        });
-    }
-    clientSecretSupplier() {
-        return __awaiter(this, arguments, void 0, function* ({ endpointMetadata, } = {}) {
-            const supplier = this.options[CLIENT_SECRET_PARAM];
-            if (supplier == null) {
-                throw new errors.CortiError({
-                    message: CLIENT_SECRET_REQUIRED_ERROR_MESSAGE,
-                });
-            }
-            return core.EndpointSupplier.get(supplier, { endpointMetadata });
-        });
-    }
-    getAuthRequest() {
-        return __awaiter(this, arguments, void 0, function* ({ endpointMetadata, } = {}) {
-            const token = yield this.getToken({ endpointMetadata });
-            return {
-                headers: {
-                    Authorization: `Bearer ${token}`,
-                },
-            };
-        });
-    }
-    getToken() {
-        return __awaiter(this, arguments, void 0, function* ({ endpointMetadata } = {}) {
-            if (this.accessToken && this.expiresAt > new Date()) {
-                return this.accessToken;
-            }
-            // If a refresh is already in progress, return the existing promise
-            if (this.refreshPromise != null) {
-                return this.refreshPromise;
-            }
-            return this.refresh({ endpointMetadata });
-        });
-    }
-    refresh() {
-        return __awaiter(this, arguments, void 0, function* ({ endpointMetadata } = {}) {
-            this.refreshPromise = (() => __awaiter(this, void 0, void 0, function* () {
-                try {
-                    const clientId = yield this.clientIdSupplier({ endpointMetadata });
-                    const clientSecret = yield this.clientSecretSupplier({ endpointMetadata });
-                    const tokenResponse = clientId && this.storedRefreshToken && this.refreshExpiresAt && this.refreshExpiresAt > new Date()
-                        ? yield this.authClient.refreshToken({
-                            clientId,
-                            refreshToken: this.storedRefreshToken,
-                        })
-                        : yield this.authClient.getToken({ clientId, clientSecret });
-                    this.accessToken = tokenResponse.accessToken;
-                    this.expiresAt = getExpiresAt(tokenResponse.expiresIn, BUFFER_IN_MINUTES);
-                    if (tokenResponse.refreshToken) {
-                        this.storedRefreshToken = tokenResponse.refreshToken;
-                        this.refreshExpiresAt = tokenResponse.refreshExpiresIn
-                            ? getExpiresAt(tokenResponse.refreshExpiresIn, BUFFER_IN_MINUTES)
-                            : undefined;
-                    }
-                    return this.accessToken;
-                }
-                finally {
-                    this.refreshPromise = undefined;
-                }
-            }))();
-            return this.refreshPromise;
-        });
-    }
-}
-export class OAuthTokenOverrideAuthProvider {
-    constructor(options) {
-        this._tokenSupplier = options[TOKEN_PARAM];
-        this._clientIdSupplier = options.clientId;
-        // Patch: store custom refresh callback
-        this._refreshAccessToken = options.refreshAccessToken;
-        this.expiresAt = options.expiresIn ? getExpiresAt(options.expiresIn, BUFFER_IN_MINUTES) : undefined;
-        this.storedRefreshToken = options.refreshToken;
-        this.refreshExpiresAt = options.refreshExpiresIn
-            ? getExpiresAt(options.refreshExpiresIn, BUFFER_IN_MINUTES)
-            : undefined;
-        if (options.clientId && options.refreshToken) {
-            this.authClient = new CortiAuth(options);
-        }
-        // Patch: pre-seed token from discovery promise so getAuthRequest doesn't call refreshAccessToken again
-        if (options.initialTokenResponse) {
-            this._seedPromise = options.initialTokenResponse
-                .then((resp) => {
-                this.accessToken = resp.accessToken;
-                this.expiresAt = resp.expiresIn ? getExpiresAt(resp.expiresIn, BUFFER_IN_MINUTES) : undefined;
-                if (resp.refreshToken) {
-                    this.storedRefreshToken = resp.refreshToken;
-                    this.refreshExpiresAt = resp.refreshExpiresIn
-                        ? getExpiresAt(resp.refreshExpiresIn, BUFFER_IN_MINUTES)
-                        : undefined;
-                }
-            })
-                .finally(() => {
-                this._seedPromise = undefined;
-            });
-        }
-    }
-    static canCreate(options) {
-        // Patch: either token or refreshAccessToken is sufficient
-        return (options === null || options === void 0 ? void 0 : options[TOKEN_PARAM]) != null || (options === null || options === void 0 ? void 0 : options.refreshAccessToken) != null;
-    }
-    getAuthRequest() {
-        return __awaiter(this, arguments, void 0, function* ({ endpointMetadata, } = {}) {
-            // Patch: await seed promise so the initial token from resolveClientOptions is set before checking expiry
-            if (this._seedPromise) {
-                yield this._seedPromise;
-            }
-            const isExpiredOrAbsent = !this.accessToken || (this.expiresAt != null && this.expiresAt <= new Date());
-            // Patch: custom refreshAccessToken takes priority — call it when token is absent or expired
-            if (this._refreshAccessToken && isExpiredOrAbsent) {
-                const result = yield this._refreshAccessToken(this.storedRefreshToken);
-                this.accessToken = result.accessToken;
-                this.expiresAt = result.expiresIn ? getExpiresAt(result.expiresIn, BUFFER_IN_MINUTES) : undefined;
-                if (result.refreshToken) {
-                    this.storedRefreshToken = result.refreshToken;
-                    this.refreshExpiresAt = result.refreshExpiresIn
-                        ? getExpiresAt(result.refreshExpiresIn, BUFFER_IN_MINUTES)
-                        : undefined;
-                }
-                return { headers: { Authorization: `Bearer ${this.accessToken}` } };
-            }
-            // Built-in: if access token is expired and we have a valid SDK refresh token, use it
-            if (this.expiresAt != null &&
-                this.expiresAt <= new Date() &&
-                this._clientIdSupplier &&
-                this.storedRefreshToken &&
-                this.refreshExpiresAt &&
-                this.refreshExpiresAt > new Date() &&
-                this.authClient) {
-                const clientId = yield core.EndpointSupplier.get(this._clientIdSupplier, { endpointMetadata });
-                const tokenResponse = yield this.authClient.refreshToken({
-                    clientId,
-                    refreshToken: this.storedRefreshToken,
-                });
-                this.accessToken = tokenResponse.accessToken;
-                this.expiresAt = getExpiresAt(tokenResponse.expiresIn, BUFFER_IN_MINUTES);
-                if (tokenResponse.refreshToken) {
-                    this.storedRefreshToken = tokenResponse.refreshToken;
-                    this.refreshExpiresAt = tokenResponse.refreshExpiresIn
-                        ? getExpiresAt(tokenResponse.refreshExpiresIn, BUFFER_IN_MINUTES)
-                        : undefined;
-                }
-                return { headers: { Authorization: `Bearer ${this.accessToken}` } };
-            }
-            // Token not yet acquired — resolve from supplier (static token / initial value)
-            if (!this.accessToken) {
-                if (this._tokenSupplier == null) {
-                    throw new errors.CortiError({ message: TOKEN_PARAM_REQUIRED_ERROR_MESSAGE });
-                }
-                this.accessToken = yield core.EndpointSupplier.get(this._tokenSupplier, { endpointMetadata });
-            }
-            if (!this.accessToken) {
-                throw new errors.CortiError({ message: TOKEN_PARAM_REQUIRED_ERROR_MESSAGE });
-            }
-            return { headers: { Authorization: `Bearer ${this.accessToken}` } };
-        });
-    }
-}
-(function (OAuthAuthProvider) {
-    OAuthAuthProvider.AUTH_SCHEME = "OAuth";
-    /** Patch: Message extended to mention ROPC (clientId, username, password). */
-    OAuthAuthProvider.AUTH_CONFIG_ERROR_MESSAGE = `Insufficient options to create OAuthAuthProvider. Please provide '${CLIENT_ID_PARAM}' and '${CLIENT_SECRET_PARAM}', or ${TOKEN_PARAM}, or ROPC (${CLIENT_ID_PARAM}, username, password).`;
-    function createInstance(options) {
-        if (OAuthTokenOverrideAuthProvider.canCreate(options)) {
-            return new OAuthTokenOverrideAuthProvider(options);
-        }
-        /** Patch: ROPC provider before client credentials so ROPC auth is used when username+password provided. */
-        if (OAuthRopcAuthProvider.canCreate(options)) {
-            return new OAuthRopcAuthProvider(options);
-        }
-        /** Patch: PKCE provider before auth code — both have clientId+code+redirectUri, but PKCE has no clientSecret. */
-        if (OAuthPkceAuthProvider.canCreate(options)) {
-            return new OAuthPkceAuthProvider(options);
-        }
-        /** Patch: Auth code provider before client credentials — both have clientId+clientSecret, code+redirectUri distinguishes auth code. */
-        if (OAuthAuthCodeAuthProvider.canCreate(options)) {
-            return new OAuthAuthCodeAuthProvider(options);
-        }
-        if (OAuthAuthProvider.canCreate(options)) {
-            return new OAuthAuthProvider(options);
-        }
-        /** Patch: No credentials provided — proxy/passthrough mode; requests are sent without an Authorization header. */
-        const partialOptions = options;
-        const hasNoCredentials = partialOptions[CLIENT_ID_PARAM] == null &&
-            partialOptions[CLIENT_SECRET_PARAM] == null &&
-            partialOptions[TOKEN_PARAM] == null &&
-            partialOptions.refreshAccessToken == null &&
-            partialOptions[USERNAME_PARAM] == null;
-        if (hasNoCredentials) {
-            return new core.NoOpAuthProvider();
-        }
-        throw new errors.CortiError({
-            message: OAuthAuthProvider.AUTH_CONFIG_ERROR_MESSAGE,
-        });
-    }
-    OAuthAuthProvider.createInstance = createInstance;
-})(OAuthAuthProvider || (OAuthAuthProvider = {}));

package/dist/esm/custom/OAuthPkceAuthProvider.d.mts

@@ -1,23 +0,0 @@
-import type { OAuthAuthProvider } from "../auth/OAuthAuthProvider.mjs";
-import type { BaseClientOptions } from "../BaseClient.mjs";
-import * as core from "../core/index.mjs";
-export declare class OAuthPkceAuthProvider implements core.AuthProvider {
-    private readonly options;
-    private readonly authClient;
-    private accessToken;
-    private expiresAt;
-    private refreshPromise;
-    private storedRefreshToken;
-    private refreshExpiresAt;
-    constructor(options: BaseClientOptions & OAuthAuthProvider.PkceCredentials);
-    static canCreate(options?: Partial<OAuthAuthProvider.PkceCredentials & BaseClientOptions>): options is BaseClientOptions & OAuthAuthProvider.PkceCredentials;
-    private clientIdSupplier;
-    private codeSupplier;
-    private redirectUriSupplier;
-    private codeVerifierSupplier;
-    getAuthRequest({ endpointMetadata, }?: {
-        endpointMetadata?: core.EndpointMetadata;
-    }): Promise<core.AuthRequest>;
-    private getToken;
-    private refresh;
-}