@dainprotocol/service-sdk 1.2.0 → 1.2.2

package/dist/client/client-auth.d.ts

@@ -1,14 +1,44 @@
-interface DainClientAuthConfig {
-    jwt?: string;
+/**
+ * JWT Authentication Config (Users)
+ */
+export interface DainClientAuthConfigJWT {
+    /** JWT access token from DAIN ID OAuth */
+    jwt: string;
+    /** Smart Account ID (optional, will be extracted from JWT if not provided) */
     smartAccountId?: string;
+    /** Smart Account PDA on Solana (optional) */
+    smartAccountPDA?: string;
+    /** Webhook URL for async operations (optional) */
+    webhookUrl?: string;
+}
+/**
+ * Keypair Authentication Config (Services/Agents)
+ */
+export interface DainClientAuthConfigKeypair {
+    /** Base58 encoded private key */
     privateKeyBase58?: string;
+    /** Agent ID */
     agentId?: string;
+    /** Organization ID */
     orgId?: string;
+    /** API Key (alternative to privateKeyBase58/agentId/orgId) */
     apiKey?: string;
+    /** Smart Account PDA on Solana (optional) */
     smartAccountPDA?: string;
+    /** Webhook URL for async operations (optional) */
     webhookUrl?: string;
 }
+/**
+ * Union type for authentication config
+ */
+export type DainClientAuthConfig = DainClientAuthConfigJWT | DainClientAuthConfigKeypair;
+/**
+ * Unified DainClientAuth class
+ *
+ * Supports both JWT (users) and Keypair (services/agents) authentication
+ */
 export declare class DainClientAuth {
+    private authType;
     private jwt?;
     private smartAccountId?;
     private privateKey?;
@@ -17,35 +47,86 @@ export declare class DainClientAuth {
     private publicKey?;
     private smartAccountPDA?;
     private webhookUrl?;
-    private readonly authMethod;
     constructor(config: DainClientAuthConfig);
+    /**
+     * Decode JWT payload (without verification)
+     * @private
+     */
+    private decodeJWTPayload;
+    /**
+     * Parse API key into components
+     * @private
+     */
     private parseApiKey;
     /**
-     * Sign request for legacy authentication
-     * For JWT auth, returns empty values (not needed)
+     * Sign request
+     * - JWT mode: returns empty (no signing needed)
+     * - Keypair mode: signs with Ed25519
      */
     signRequest(method: string, path: string, body: string): Promise<{
         signature: string;
         timestamp: string;
     }>;
     /**
-     * Get headers for authentication
-     * Returns different headers based on auth method
+     * Get headers for HTTP requests
+     * - JWT mode: returns Authorization Bearer header
+     * - Keypair mode: returns signature headers
      */
     getHeaders(signature: string, timestamp: string): Record<string, string>;
+    /**
+     * Sign a message (keypair mode only)
+     */
     signMessage(message: string): string;
+    /**
+     * Verify a message signature (static method)
+     */
     static verifyMessage(message: string, signature: string, publicKey: Uint8Array): boolean;
+    /**
+     * Verify SSE event signature (keypair mode only)
+     */
     verifyEventSignature(data: string, signature: string, timestamp: string, publicKeyBase58: string): boolean;
-    getAuthMethod(): 'jwt' | 'legacy';
+    /**
+     * Check if using JWT authentication
+     */
+    isJWT(): boolean;
+    /**
+     * Get JWT token (JWT mode only)
+     */
     getJWT(): string | undefined;
+    /**
+     * Get smart account ID (JWT mode only)
+     */
     getSmartAccountId(): string | undefined;
+    /**
+     * Get agent ID (keypair mode only)
+     */
     getAgentId(): string | undefined;
+    /**
+     * Get org ID (keypair mode only)
+     */
     getOrgId(): string | undefined;
+    /**
+     * Get public key (keypair mode only)
+     */
     getPublicKey(): Uint8Array | undefined;
+    /**
+     * Get public key as base58 (keypair mode only)
+     */
     getPublicKeyBase58(): string | undefined;
+    /**
+     * Get smart account PDA
+     */
     getSmartAccountPDA(): string | undefined;
+    /**
+     * Get webhook URL
+     */
     getWebhookUrl(): string | undefined;
+    /**
+     * Serialize auth config
+     */
     serialize(): string;
+    /**
+     * Deserialize auth config
+     */
     static deserialize(serialized: string): DainClientAuth;
 }
-export {};

package/dist/client/client-auth.js

@@ -3,74 +3,100 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.DainClientAuth = void 0;
 const tslib_1 = require("tslib");
 //File: src/client/client-auth.ts
+/**
+ * Unified Authentication for DAIN Services
+ *
+ * Supports two authentication modes:
+ * 1. JWT (for end users) - NO orgId, NO agentId, NO keypair
+ * 2. Keypair (for services/agents) - uses orgId, agentId, Ed25519 keypair
+ */
 const ed25519_1 = require("@noble/curves/ed25519");
 const sha256_1 = require("@noble/hashes/sha256");
 const utils_1 = require("@noble/hashes/utils");
 const bs58_1 = tslib_1.__importDefault(require("bs58"));
+/**
+ * Type guard to check if config is JWT
+ */
+function isJWTConfig(config) {
+    return 'jwt' in config && typeof config.jwt === 'string';
+}
+/**
+ * Unified DainClientAuth class
+ *
+ * Supports both JWT (users) and Keypair (services/agents) authentication
+ */
 class DainClientAuth {
-    // JWT fields (user auth)
+    // Auth type
+    authType;
+    // JWT fields (users only)
     jwt;
     smartAccountId;
-    // Legacy fields (service auth)
+    // Keypair fields (services/agents only)
     privateKey;
     agentId;
     orgId;
     publicKey;
+    // Shared fields
     smartAccountPDA;
-    // Common
     webhookUrl;
-    authMethod;
     constructor(config) {
-        // Priority 1: JWT Authentication (Users from DAIN ID)
-        if (config.jwt) {
+        if (isJWTConfig(config)) {
+            // JWT Authentication (Users)
+            this.authType = 'jwt';
+            if (!config.jwt) {
+                throw new Error('JWT token is required for user authentication');
+            }
             this.jwt = config.jwt;
-            this.authMethod = 'jwt';
-            this.webhookUrl = config.webhookUrl;
-            // Extract smartAccountId from JWT if not provided
+            // Extract smartAccountId from config or decode from JWT
             if (config.smartAccountId) {
                 this.smartAccountId = config.smartAccountId;
             }
             else {
-                try {
-                    const payload = JSON.parse(Buffer.from(config.jwt.split('.')[1], 'base64').toString());
-                    this.smartAccountId = payload.smart_account_id || payload.sub;
-                    if (!this.smartAccountId) {
-                        throw new Error('JWT missing smart_account_id/sub claim');
-                    }
-                }
-                catch (error) {
-                    throw new Error(`Invalid JWT: ${error instanceof Error ? error.message : String(error)}`);
-                }
+                const payload = this.decodeJWTPayload(config.jwt);
+                this.smartAccountId = payload.smart_account_id || payload.sub;
             }
-            return;
-        }
-        // Priority 2: Legacy API Key (Services)
-        if (config.apiKey) {
-            const { privateKey, agentId, orgId, publicKey } = this.parseApiKey(config.apiKey);
-            this.privateKey = privateKey;
-            this.agentId = agentId;
-            this.orgId = orgId;
-            this.publicKey = publicKey;
-            this.webhookUrl = config.webhookUrl;
             this.smartAccountPDA = config.smartAccountPDA;
-            this.authMethod = 'legacy';
-            return;
-        }
-        // Priority 3: Legacy Keypair (Services)
-        if (config.privateKeyBase58 && config.agentId && config.orgId) {
-            this.privateKey = bs58_1.default.decode(config.privateKeyBase58);
-            this.agentId = config.agentId.replace('agent_', '');
-            this.orgId = config.orgId.replace('org_', '');
-            this.publicKey = ed25519_1.ed25519.getPublicKey(this.privateKey);
             this.webhookUrl = config.webhookUrl;
+        }
+        else {
+            // Keypair Authentication (Services/Agents)
+            this.authType = 'keypair';
+            if (config.apiKey) {
+                const { privateKey, agentId, orgId, publicKey } = this.parseApiKey(config.apiKey);
+                this.privateKey = privateKey;
+                this.agentId = agentId;
+                this.orgId = orgId;
+                this.publicKey = publicKey;
+            }
+            else if (config.privateKeyBase58 && config.agentId && config.orgId) {
+                this.privateKey = bs58_1.default.decode(config.privateKeyBase58);
+                this.agentId = config.agentId.replace('agent_', '');
+                this.orgId = config.orgId.replace('org_', '');
+                this.publicKey = ed25519_1.ed25519.getPublicKey(this.privateKey);
+            }
+            else {
+                throw new Error('Invalid configuration. Provide either jwt (for users) or apiKey/privateKeyBase58+agentId+orgId (for services/agents).');
+            }
             this.smartAccountPDA = config.smartAccountPDA;
-            this.authMethod = 'legacy';
-            return;
+            this.webhookUrl = config.webhookUrl;
         }
-        throw new Error('Invalid auth config. Provide either:\n' +
-            '  - jwt (for users)\n' +
-            '  - apiKey OR (privateKeyBase58 + agentId + orgId) (for services)');
     }
+    /**
+     * Decode JWT payload (without verification)
+     * @private
+     */
+    decodeJWTPayload(jwt) {
+        const parts = jwt.split('.');
+        if (parts.length !== 3) {
+            throw new Error('Invalid JWT format');
+        }
+        const payload = Buffer.from(parts[1], 'base64').toString('utf-8');
+        return JSON.parse(payload);
+    }
+    /**
+     * Parse API key into components
+     * @private
+     */
     parseApiKey(apiKey) {
         const parts = apiKey.split('_');
         if (parts.length !== 5 || parts[0] !== 'sk' || parts[1] !== 'agent') {
@@ -84,15 +110,16 @@ class DainClientAuth {
         return { privateKey, agentId, orgId, publicKey };
     }
     /**
-     * Sign request for legacy authentication
-     * For JWT auth, returns empty values (not needed)
+     * Sign request
+     * - JWT mode: returns empty (no signing needed)
+     * - Keypair mode: signs with Ed25519
      */
     async signRequest(method, path, body) {
-        if (this.authMethod === 'jwt') {
+        if (this.authType === 'jwt') {
             // JWT doesn't need request signing
             return { signature: '', timestamp: '' };
         }
-        // Legacy: Sign request
+        // Keypair signing for services/agents
         const timestamp = Date.now().toString();
         const message = `${method}:${path}:${timestamp}:${body}`;
         const messageHash = (0, sha256_1.sha256)(message);
@@ -100,44 +127,56 @@ class DainClientAuth {
         return { signature: (0, utils_1.bytesToHex)(signature), timestamp };
     }
     /**
-     * Get headers for authentication
-     * Returns different headers based on auth method
+     * Get headers for HTTP requests
+     * - JWT mode: returns Authorization Bearer header
+     * - Keypair mode: returns signature headers
      */
     getHeaders(signature, timestamp) {
-        if (this.authMethod === 'jwt') {
-            // JWT Authentication
-            const headers = {
+        const baseHeaders = {};
+        if (this.smartAccountPDA) {
+            baseHeaders["X-DAIN-SMART-ACCOUNT-PDA"] = this.smartAccountPDA;
+        }
+        if (this.webhookUrl) {
+            baseHeaders["X-DAIN-WEBHOOK-URL"] = this.webhookUrl;
+        }
+        if (this.authType === 'jwt') {
+            // JWT authentication headers
+            return {
+                ...baseHeaders,
                 "Authorization": `Bearer ${this.jwt}`,
-                "X-DAIN-SMART-ACCOUNT-ID": this.smartAccountId,
             };
-            if (this.webhookUrl) {
-                headers["X-DAIN-WEBHOOK-URL"] = this.webhookUrl;
-            }
-            return headers;
         }
-        // Legacy Authentication
+        // Keypair authentication headers
         return {
+            ...baseHeaders,
             "X-DAIN-SIGNATURE": signature,
             "X-DAIN-TIMESTAMP": timestamp,
             "X-DAIN-AGENT-ID": this.agentId,
             "X-DAIN-ORG-ID": this.orgId,
             "X-DAIN-ADDRESS": bs58_1.default.encode(this.publicKey),
-            "X-DAIN-SMART-ACCOUNT-PDA": this.smartAccountPDA || '',
-            "X-DAIN-WEBHOOK-URL": this.webhookUrl || '',
         };
     }
+    /**
+     * Sign a message (keypair mode only)
+     */
     signMessage(message) {
-        if (this.authMethod === 'jwt') {
-            throw new Error('JWT auth does not support message signing');
+        if (this.authType === 'jwt') {
+            throw new Error('signMessage not available in JWT mode');
         }
         const messageHash = (0, sha256_1.sha256)(message);
         const signature = ed25519_1.ed25519.sign(messageHash, this.privateKey);
         return (0, utils_1.bytesToHex)(signature);
     }
+    /**
+     * Verify a message signature (static method)
+     */
     static verifyMessage(message, signature, publicKey) {
         const messageHash = (0, sha256_1.sha256)(message);
         return ed25519_1.ed25519.verify(signature, messageHash, publicKey);
     }
+    /**
+     * Verify SSE event signature (keypair mode only)
+     */
     verifyEventSignature(data, signature, timestamp, publicKeyBase58) {
         try {
             const message = `${data}:${timestamp}`;
@@ -150,76 +189,124 @@ class DainClientAuth {
             return false;
         }
     }
-    // Getters
-    getAuthMethod() {
-        return this.authMethod;
+    // ===== Getter Methods =====
+    /**
+     * Check if using JWT authentication
+     */
+    isJWT() {
+        return this.authType === 'jwt';
     }
+    /**
+     * Get JWT token (JWT mode only)
+     */
     getJWT() {
         return this.jwt;
     }
+    /**
+     * Get smart account ID (JWT mode only)
+     */
     getSmartAccountId() {
         return this.smartAccountId;
     }
+    /**
+     * Get agent ID (keypair mode only)
+     */
     getAgentId() {
         return this.agentId;
     }
+    /**
+     * Get org ID (keypair mode only)
+     */
     getOrgId() {
         return this.orgId;
     }
+    /**
+     * Get public key (keypair mode only)
+     */
     getPublicKey() {
         return this.publicKey;
     }
+    /**
+     * Get public key as base58 (keypair mode only)
+     */
     getPublicKeyBase58() {
         return this.publicKey ? bs58_1.default.encode(this.publicKey) : undefined;
     }
+    /**
+     * Get smart account PDA
+     */
     getSmartAccountPDA() {
         return this.smartAccountPDA;
     }
+    /**
+     * Get webhook URL
+     */
     getWebhookUrl() {
         return this.webhookUrl;
     }
+    // ===== Serialization =====
+    /**
+     * Serialize auth config
+     */
     serialize() {
-        if (this.authMethod === 'jwt') {
+        if (this.authType === 'jwt') {
             const data = {
                 authMethod: 'jwt',
                 jwt: this.jwt,
                 smartAccountId: this.smartAccountId,
-                webhookUrl: this.webhookUrl,
+                smartAccountPDA: this.smartAccountPDA,
+                webhookUrl: this.webhookUrl
+            };
+            return Buffer.from(JSON.stringify(data)).toString('base64');
+        }
+        else {
+            const data = {
+                authMethod: 'keypair',
+                privateKey: Array.from(this.privateKey),
+                agentId: this.agentId,
+                orgId: this.orgId,
+                publicKey: Array.from(this.publicKey),
+                smartAccountPDA: this.smartAccountPDA,
+                webhookUrl: this.webhookUrl
             };
             return bs58_1.default.encode(Buffer.from(JSON.stringify(data)));
         }
-        const data = {
-            authMethod: 'legacy',
-            privateKey: Array.from(this.privateKey),
-            agentId: this.agentId,
-            orgId: this.orgId,
-            publicKey: Array.from(this.publicKey),
-            smartAccountPDA: this.smartAccountPDA,
-            webhookUrl: this.webhookUrl,
-        };
-        return bs58_1.default.encode(Buffer.from(JSON.stringify(data)));
     }
+    /**
+     * Deserialize auth config
+     */
     static deserialize(serialized) {
         try {
+            // Try JWT format first (base64)
+            try {
+                const data = JSON.parse(Buffer.from(serialized, 'base64').toString());
+                if (data.authMethod === 'jwt') {
+                    return new DainClientAuth({
+                        jwt: data.jwt,
+                        smartAccountId: data.smartAccountId,
+                        smartAccountPDA: data.smartAccountPDA,
+                        webhookUrl: data.webhookUrl
+                    });
+                }
+            }
+            catch {
+                // Not JWT format, try keypair
+            }
+            // Try keypair format (bs58)
             const data = JSON.parse(Buffer.from(bs58_1.default.decode(serialized)).toString());
-            if (data.authMethod === 'jwt') {
+            if (data.authMethod === 'keypair') {
                 return new DainClientAuth({
-                    jwt: data.jwt,
-                    smartAccountId: data.smartAccountId,
-                    webhookUrl: data.webhookUrl,
+                    privateKeyBase58: bs58_1.default.encode(new Uint8Array(data.privateKey)),
+                    agentId: data.agentId,
+                    orgId: data.orgId,
+                    smartAccountPDA: data.smartAccountPDA,
+                    webhookUrl: data.webhookUrl
                 });
             }
-            // Legacy or missing authMethod (backward compatibility)
-            return new DainClientAuth({
-                privateKeyBase58: bs58_1.default.encode(new Uint8Array(data.privateKey)),
-                agentId: data.agentId,
-                orgId: data.orgId,
-                smartAccountPDA: data.smartAccountPDA,
-                webhookUrl: data.webhookUrl,
-            });
+            throw new Error('Unknown auth method');
         }
         catch (error) {
-            throw new Error(`Failed to deserialize DainClientAuth: ${error.message}`);
+            throw new Error('Failed to deserialize DainClientAuth: ' + error.message);
         }
     }
 }

package/dist/client/client-auth.js.map

@@ -1 +1 @@
-{"version":3,"file":"client-auth.js","sourceRoot":"","sources":["../../src/client/client-auth.ts"],"names":[],"mappings":";;;;AAAA,iCAAiC;AACjC,mDAAgD;AAChD,iDAA8C;AAC9C,+CAAiD;AACjD,wDAAwB;AAkBxB,MAAa,cAAc;IACzB,yBAAyB;IACjB,GAAG,CAAU;IACb,cAAc,CAAU;IAEhC,+BAA+B;IACvB,UAAU,CAAc;IACxB,OAAO,CAAU;IACjB,KAAK,CAAU;IACf,SAAS,CAAc;IACvB,eAAe,CAAU;IAEjC,SAAS;IACD,UAAU,CAAU;IACX,UAAU,CAAmB;IAE9C,YAAY,MAA4B;QACtC,sDAAsD;QACtD,IAAI,MAAM,CAAC,GAAG,EAAE,CAAC;YACf,IAAI,CAAC,GAAG,GAAG,MAAM,CAAC,GAAG,CAAC;YACtB,IAAI,CAAC,UAAU,GAAG,KAAK,CAAC;YACxB,IAAI,CAAC,UAAU,GAAG,MAAM,CAAC,UAAU,CAAC;YAEpC,kDAAkD;YAClD,IAAI,MAAM,CAAC,cAAc,EAAE,CAAC;gBAC1B,IAAI,CAAC,cAAc,GAAG,MAAM,CAAC,cAAc,CAAC;YAC9C,CAAC;iBAAM,CAAC;gBACN,IAAI,CAAC;oBACH,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CACxB,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC,QAAQ,EAAE,CAC3D,CAAC;oBACF,IAAI,CAAC,cAAc,GAAG,OAAO,CAAC,gBAAgB,IAAI,OAAO,CAAC,GAAG,CAAC;oBAC9D,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,CAAC;wBACzB,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;oBAC5D,CAAC;gBACH,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,MAAM,IAAI,KAAK,CACb,gBAAgB,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CACzE,CAAC;gBACJ,CAAC;YACH,CAAC;YACD,OAAO;QACT,CAAC;QAED,wCAAwC;QACxC,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;YAClB,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,GAAG,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;YAClF,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;YAC7B,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;YACvB,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;YACnB,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;YAC3B,IAAI,CAAC,UAAU,GAAG,MAAM,CAAC,UAAU,CAAC;YACpC,IAAI,CAAC,eAAe,GAAG,MAAM,CAAC,eAAe,CAAC;YAC9C,IAAI,CAAC,UAAU,GAAG,QAAQ,CAAC;YAC3B,OAAO;QACT,CAAC;QAED,wCAAwC;QACxC,IAAI,MAAM,CAAC,gBAAgB,IAAI,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;YAC9D,IAAI,CAAC,UAAU,GAAG,cAAI,CAAC,MAAM,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC;YACvD,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;YACpD,IAAI,CAAC,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;YAC9C,IAAI,CAAC,SAAS,GAAG,iBAAO,CAAC,YAAY,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;YACvD,IAAI,CAAC,UAAU,GAAG,MAAM,CAAC,UAAU,CAAC;YACpC,IAAI,CAAC,eAAe,GAAG,MAAM,CAAC,eAAe,CAAC;YAC9C,IAAI,CAAC,UAAU,GAAG,QAAQ,CAAC;YAC3B,OAAO;QACT,CAAC;QAED,MAAM,IAAI,KAAK,CACb,wCAAwC;YACxC,uBAAuB;YACvB,mEAAmE,CACpE,CAAC;IACJ,CAAC;IAEO,WAAW,CAAC,MAAc;QAMhC,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAChC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,OAAO,EAAE,CAAC;YACpE,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC;QAC5C,CAAC;QAED,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QAC3C,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;QAC/C,MAAM,gBAAgB,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;QAElC,MAAM,UAAU,GAAG,cAAI,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAC9D,MAAM,SAAS,GAAG,cAAI,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAE1D,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC;IACnD,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,WAAW,CACf,MAAc,EACd,IAAY,EACZ,IAAY;QAEZ,IAAI,IAAI,CAAC,UAAU,KAAK,KAAK,EAAE,CAAC;YAC9B,mCAAmC;YACnC,OAAO,EAAE,SAAS,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC;QAC1C,CAAC;QAED,uBAAuB;QACvB,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC;QACxC,MAAM,OAAO,GAAG,GAAG,MAAM,IAAI,IAAI,IAAI,SAAS,IAAI,IAAI,EAAE,CAAC;QACzD,MAAM,WAAW,GAAG,IAAA,eAAM,EAAC,OAAO,CAAC,CAAC;QACpC,MAAM,SAAS,GAAG,iBAAO,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,UAAW,CAAC,CAAC;QAC9D,OAAO,EAAE,SAAS,EAAE,IAAA,kBAAU,EAAC,SAAS,CAAC,EAAE,SAAS,EAAE,CAAC;IACzD,CAAC;IAED;;;OAGG;IACH,UAAU,CAAC,SAAiB,EAAE,SAAiB;QAC7C,IAAI,IAAI,CAAC,UAAU,KAAK,KAAK,EAAE,CAAC;YAC9B,qBAAqB;YACrB,MAAM,OAAO,GAA2B;gBACtC,eAAe,EAAE,UAAU,IAAI,CAAC,GAAG,EAAE;gBACrC,yBAAyB,EAAE,IAAI,CAAC,cAAe;aAChD,CAAC;YACF,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;gBACpB,OAAO,CAAC,oBAAoB,CAAC,GAAG,IAAI,CAAC,UAAU,CAAC;YAClD,CAAC;YACD,OAAO,OAAO,CAAC;QACjB,CAAC;QAED,wBAAwB;QACxB,OAAO;YACL,kBAAkB,EAAE,SAAS;YAC7B,kBAAkB,EAAE,SAAS;YAC7B,iBAAiB,EAAE,IAAI,CAAC,OAAQ;YAChC,eAAe,EAAE,IAAI,CAAC,KAAM;YAC5B,gBAAgB,EAAE,cAAI,CAAC,MAAM,CAAC,IAAI,CAAC,SAAU,CAAC;YAC9C,0BAA0B,EAAE,IAAI,CAAC,eAAe,IAAI,EAAE;YACtD,oBAAoB,EAAE,IAAI,CAAC,UAAU,IAAI,EAAE;SAC5C,CAAC;IACJ,CAAC;IAED,WAAW,CAAC,OAAe;QACzB,IAAI,IAAI,CAAC,UAAU,KAAK,KAAK,EAAE,CAAC;YAC9B,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;QAC/D,CAAC;QACD,MAAM,WAAW,GAAG,IAAA,eAAM,EAAC,OAAO,CAAC,CAAC;QACpC,MAAM,SAAS,GAAG,iBAAO,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,UAAW,CAAC,CAAC;QAC9D,OAAO,IAAA,kBAAU,EAAC,SAAS,CAAC,CAAC;IAC/B,CAAC;IAED,MAAM,CAAC,aAAa,CAAC,OAAe,EAAE,SAAiB,EAAE,SAAqB;QAC5E,MAAM,WAAW,GAAG,IAAA,eAAM,EAAC,OAAO,CAAC,CAAC;QACpC,OAAO,iBAAO,CAAC,MAAM,CAAC,SAAS,EAAE,WAAW,EAAE,SAAS,CAAC,CAAC;IAC3D,CAAC;IAED,oBAAoB,CAClB,IAAY,EACZ,SAAiB,EACjB,SAAiB,EACjB,eAAuB;QAEvB,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,GAAG,IAAI,IAAI,SAAS,EAAE,CAAC;YACvC,MAAM,WAAW,GAAG,IAAA,eAAM,EAAC,OAAO,CAAC,CAAC;YACpC,MAAM,SAAS,GAAG,cAAI,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC;YAC/C,OAAO,iBAAO,CAAC,MAAM,CAAC,SAAS,EAAE,WAAW,EAAE,SAAS,CAAC,CAAC;QAC3D,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,KAAK,CAAC,kCAAkC,EAAE,KAAK,CAAC,CAAC;YACzD,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAED,UAAU;IACV,aAAa;QACX,OAAO,IAAI,CAAC,UAAU,CAAC;IACzB,CAAC;IAED,MAAM;QACJ,OAAO,IAAI,CAAC,GAAG,CAAC;IAClB,CAAC;IAED,iBAAiB;QACf,OAAO,IAAI,CAAC,cAAc,CAAC;IAC7B,CAAC;IAED,UAAU;QACR,OAAO,IAAI,CAAC,OAAO,CAAC;IACtB,CAAC;IAED,QAAQ;QACN,OAAO,IAAI,CAAC,KAAK,CAAC;IACpB,CAAC;IAED,YAAY;QACV,OAAO,IAAI,CAAC,SAAS,CAAC;IACxB,CAAC;IAED,kBAAkB;QAChB,OAAO,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,cAAI,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAClE,CAAC;IAED,kBAAkB;QAChB,OAAO,IAAI,CAAC,eAAe,CAAC;IAC9B,CAAC;IAED,aAAa;QACX,OAAO,IAAI,CAAC,UAAU,CAAC;IACzB,CAAC;IAED,SAAS;QACP,IAAI,IAAI,CAAC,UAAU,KAAK,KAAK,EAAE,CAAC;YAC9B,MAAM,IAAI,GAAG;gBACX,UAAU,EAAE,KAAK;gBACjB,GAAG,EAAE,IAAI,CAAC,GAAG;gBACb,cAAc,EAAE,IAAI,CAAC,cAAc;gBACnC,UAAU,EAAE,IAAI,CAAC,UAAU;aAC5B,CAAC;YACF,OAAO,cAAI,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACxD,CAAC;QAED,MAAM,IAAI,GAAG;YACX,UAAU,EAAE,QAAQ;YACpB,UAAU,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,UAAW,CAAC;YACxC,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,SAAS,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,SAAU,CAAC;YACtC,eAAe,EAAE,IAAI,CAAC,eAAe;YACrC,UAAU,EAAE,IAAI,CAAC,UAAU;SAC5B,CAAC;QACF,OAAO,cAAI,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACxD,CAAC;IAED,MAAM,CAAC,WAAW,CAAC,UAAkB;QACnC,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,cAAI,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC;YAEzE,IAAI,IAAI,CAAC,UAAU,KAAK,KAAK,EAAE,CAAC;gBAC9B,OAAO,IAAI,cAAc,CAAC;oBACxB,GAAG,EAAE,IAAI,CAAC,GAAG;oBACb,cAAc,EAAE,IAAI,CAAC,cAAc;oBACnC,UAAU,EAAE,IAAI,CAAC,UAAU;iBAC5B,CAAC,CAAC;YACL,CAAC;YAED,wDAAwD;YACxD,OAAO,IAAI,cAAc,CAAC;gBACxB,gBAAgB,EAAE,cAAI,CAAC,MAAM,CAAC,IAAI,UAAU,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;gBAC9D,OAAO,EAAE,IAAI,CAAC,OAAO;gBACrB,KAAK,EAAE,IAAI,CAAC,KAAK;gBACjB,eAAe,EAAE,IAAI,CAAC,eAAe;gBACrC,UAAU,EAAE,IAAI,CAAC,UAAU;aAC5B,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAU,EAAE,CAAC;YACpB,MAAM,IAAI,KAAK,CAAC,yCAAyC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;QAC5E,CAAC;IACH,CAAC;CACF;AAvQD,wCAuQC"}
+{"version":3,"file":"client-auth.js","sourceRoot":"","sources":["../../src/client/client-auth.ts"],"names":[],"mappings":";;;;AAAA,iCAAiC;AACjC;;;;;;GAMG;AACH,mDAAgD;AAChD,iDAA8C;AAC9C,+CAAiD;AACjD,wDAAwB;AA+CxB;;GAEG;AACH,SAAS,WAAW,CAAC,MAA4B;IAC/C,OAAO,KAAK,IAAI,MAAM,IAAI,OAAQ,MAAc,CAAC,GAAG,KAAK,QAAQ,CAAC;AACpE,CAAC;AAED;;;;GAIG;AACH,MAAa,cAAc;IACzB,YAAY;IACJ,QAAQ,CAAoB;IAEpC,0BAA0B;IAClB,GAAG,CAAU;IACb,cAAc,CAAU;IAEhC,wCAAwC;IAChC,UAAU,CAAc;IACxB,OAAO,CAAU;IACjB,KAAK,CAAU;IACf,SAAS,CAAc;IAE/B,gBAAgB;IACR,eAAe,CAAU;IACzB,UAAU,CAAU;IAE5B,YAAY,MAA4B;QACtC,IAAI,WAAW,CAAC,MAAM,CAAC,EAAE,CAAC;YACxB,6BAA6B;YAC7B,IAAI,CAAC,QAAQ,GAAG,KAAK,CAAC;YAEtB,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC;gBAChB,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;YACnE,CAAC;YAED,IAAI,CAAC,GAAG,GAAG,MAAM,CAAC,GAAG,CAAC;YAEtB,wDAAwD;YACxD,IAAI,MAAM,CAAC,cAAc,EAAE,CAAC;gBAC1B,IAAI,CAAC,cAAc,GAAG,MAAM,CAAC,cAAc,CAAC;YAC9C,CAAC;iBAAM,CAAC;gBACN,MAAM,OAAO,GAAG,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;gBAClD,IAAI,CAAC,cAAc,GAAG,OAAO,CAAC,gBAAgB,IAAI,OAAO,CAAC,GAAG,CAAC;YAChE,CAAC;YAED,IAAI,CAAC,eAAe,GAAG,MAAM,CAAC,eAAe,CAAC;YAC9C,IAAI,CAAC,UAAU,GAAG,MAAM,CAAC,UAAU,CAAC;QAEtC,CAAC;aAAM,CAAC;YACN,2CAA2C;YAC3C,IAAI,CAAC,QAAQ,GAAG,SAAS,CAAC;YAE1B,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;gBAClB,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,GAAG,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;gBAClF,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;gBAC7B,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;gBACvB,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;gBACnB,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;YAC7B,CAAC;iBAAM,IAAI,MAAM,CAAC,gBAAgB,IAAI,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;gBACrE,IAAI,CAAC,UAAU,GAAG,cAAI,CAAC,MAAM,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC;gBACvD,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;gBACpD,IAAI,CAAC,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;gBAC9C,IAAI,CAAC,SAAS,GAAG,iBAAO,CAAC,YAAY,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;YACzD,CAAC;iBAAM,CAAC;gBACN,MAAM,IAAI,KAAK,CAAC,uHAAuH,CAAC,CAAC;YAC3I,CAAC;YAED,IAAI,CAAC,eAAe,GAAG,MAAM,CAAC,eAAe,CAAC;YAC9C,IAAI,CAAC,UAAU,GAAG,MAAM,CAAC,UAAU,CAAC;QACtC,CAAC;IACH,CAAC;IAED;;;OAGG;IACK,gBAAgB,CAAC,GAAW;QAClC,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC7B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACvB,MAAM,IAAI,KAAK,CAAC,oBAAoB,CAAC,CAAC;QACxC,CAAC;QACD,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QAClE,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAC7B,CAAC;IAED;;;OAGG;IACK,WAAW,CAAC,MAAc;QAChC,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAChC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,OAAO,EAAE,CAAC;YACpE,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC;QAC5C,CAAC;QAED,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QAC3C,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;QAC/C,MAAM,gBAAgB,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;QAElC,MAAM,UAAU,GAAG,cAAI,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAC9D,MAAM,SAAS,GAAG,cAAI,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAE1D,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC;IACnD,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,WAAW,CACf,MAAc,EACd,IAAY,EACZ,IAAY;QAEZ,IAAI,IAAI,CAAC,QAAQ,KAAK,KAAK,EAAE,CAAC;YAC5B,mCAAmC;YACnC,OAAO,EAAE,SAAS,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC;QAC1C,CAAC;QAED,sCAAsC;QACtC,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC;QACxC,MAAM,OAAO,GAAG,GAAG,MAAM,IAAI,IAAI,IAAI,SAAS,IAAI,IAAI,EAAE,CAAC;QACzD,MAAM,WAAW,GAAG,IAAA,eAAM,EAAC,OAAO,CAAC,CAAC;QACpC,MAAM,SAAS,GAAG,iBAAO,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,UAAW,CAAC,CAAC;QAC9D,OAAO,EAAE,SAAS,EAAE,IAAA,kBAAU,EAAC,SAAS,CAAC,EAAE,SAAS,EAAE,CAAC;IACzD,CAAC;IAED;;;;OAIG;IACH,UAAU,CAAC,SAAiB,EAAE,SAAiB;QAC7C,MAAM,WAAW,GAA2B,EAAE,CAAC;QAE/C,IAAI,IAAI,CAAC,eAAe,EAAE,CAAC;YACzB,WAAW,CAAC,0BAA0B,CAAC,GAAG,IAAI,CAAC,eAAe,CAAC;QACjE,CAAC;QAED,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;YACpB,WAAW,CAAC,oBAAoB,CAAC,GAAG,IAAI,CAAC,UAAU,CAAC;QACtD,CAAC;QAED,IAAI,IAAI,CAAC,QAAQ,KAAK,KAAK,EAAE,CAAC;YAC5B,6BAA6B;YAC7B,OAAO;gBACL,GAAG,WAAW;gBACd,eAAe,EAAE,UAAU,IAAI,CAAC,GAAG,EAAE;aACtC,CAAC;QACJ,CAAC;QAED,iCAAiC;QACjC,OAAO;YACL,GAAG,WAAW;YACd,kBAAkB,EAAE,SAAS;YAC7B,kBAAkB,EAAE,SAAS;YAC7B,iBAAiB,EAAE,IAAI,CAAC,OAAQ;YAChC,eAAe,EAAE,IAAI,CAAC,KAAM;YAC5B,gBAAgB,EAAE,cAAI,CAAC,MAAM,CAAC,IAAI,CAAC,SAAU,CAAC;SAC/C,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,WAAW,CAAC,OAAe;QACzB,IAAI,IAAI,CAAC,QAAQ,KAAK,KAAK,EAAE,CAAC;YAC5B,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;QAC3D,CAAC;QACD,MAAM,WAAW,GAAG,IAAA,eAAM,EAAC,OAAO,CAAC,CAAC;QACpC,MAAM,SAAS,GAAG,iBAAO,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,UAAW,CAAC,CAAC;QAC9D,OAAO,IAAA,kBAAU,EAAC,SAAS,CAAC,CAAC;IAC/B,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,aAAa,CAAC,OAAe,EAAE,SAAiB,EAAE,SAAqB;QAC5E,MAAM,WAAW,GAAG,IAAA,eAAM,EAAC,OAAO,CAAC,CAAC;QACpC,OAAO,iBAAO,CAAC,MAAM,CAAC,SAAS,EAAE,WAAW,EAAE,SAAS,CAAC,CAAC;IAC3D,CAAC;IAED;;OAEG;IACH,oBAAoB,CAAC,IAAY,EAAE,SAAiB,EAAE,SAAiB,EAAE,eAAuB;QAC9F,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,GAAG,IAAI,IAAI,SAAS,EAAE,CAAC;YACvC,MAAM,WAAW,GAAG,IAAA,eAAM,EAAC,OAAO,CAAC,CAAC;YACpC,MAAM,SAAS,GAAG,cAAI,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC;YAC/C,OAAO,iBAAO,CAAC,MAAM,CAAC,SAAS,EAAE,WAAW,EAAE,SAAS,CAAC,CAAC;QAC3D,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,KAAK,CAAC,kCAAkC,EAAE,KAAK,CAAC,CAAC;YACzD,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAED,6BAA6B;IAE7B;;OAEG;IACH,KAAK;QACH,OAAO,IAAI,CAAC,QAAQ,KAAK,KAAK,CAAC;IACjC,CAAC;IAED;;OAEG;IACH,MAAM;QACJ,OAAO,IAAI,CAAC,GAAG,CAAC;IAClB,CAAC;IAED;;OAEG;IACH,iBAAiB;QACf,OAAO,IAAI,CAAC,cAAc,CAAC;IAC7B,CAAC;IAED;;OAEG;IACH,UAAU;QACR,OAAO,IAAI,CAAC,OAAO,CAAC;IACtB,CAAC;IAED;;OAEG;IACH,QAAQ;QACN,OAAO,IAAI,CAAC,KAAK,CAAC;IACpB,CAAC;IAED;;OAEG;IACH,YAAY;QACV,OAAO,IAAI,CAAC,SAAS,CAAC;IACxB,CAAC;IAED;;OAEG;IACH,kBAAkB;QAChB,OAAO,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,cAAI,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAClE,CAAC;IAED;;OAEG;IACH,kBAAkB;QAChB,OAAO,IAAI,CAAC,eAAe,CAAC;IAC9B,CAAC;IAED;;OAEG;IACH,aAAa;QACX,OAAO,IAAI,CAAC,UAAU,CAAC;IACzB,CAAC;IAED,4BAA4B;IAE5B;;OAEG;IACH,SAAS;QACP,IAAI,IAAI,CAAC,QAAQ,KAAK,KAAK,EAAE,CAAC;YAC5B,MAAM,IAAI,GAAG;gBACX,UAAU,EAAE,KAAK;gBACjB,GAAG,EAAE,IAAI,CAAC,GAAG;gBACb,cAAc,EAAE,IAAI,CAAC,cAAc;gBACnC,eAAe,EAAE,IAAI,CAAC,eAAe;gBACrC,UAAU,EAAE,IAAI,CAAC,UAAU;aAC5B,CAAC;YACF,OAAO,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QAC9D,CAAC;aAAM,CAAC;YACN,MAAM,IAAI,GAAG;gBACX,UAAU,EAAE,SAAS;gBACrB,UAAU,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,UAAW,CAAC;gBACxC,OAAO,EAAE,IAAI,CAAC,OAAO;gBACrB,KAAK,EAAE,IAAI,CAAC,KAAK;gBACjB,SAAS,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,SAAU,CAAC;gBACtC,eAAe,EAAE,IAAI,CAAC,eAAe;gBACrC,UAAU,EAAE,IAAI,CAAC,UAAU;aAC5B,CAAC;YACF,OAAO,cAAI,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACxD,CAAC;IACH,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,WAAW,CAAC,UAAkB;QACnC,IAAI,CAAC;YACH,gCAAgC;YAChC,IAAI,CAAC;gBACH,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC;gBACtE,IAAI,IAAI,CAAC,UAAU,KAAK,KAAK,EAAE,CAAC;oBAC9B,OAAO,IAAI,cAAc,CAAC;wBACxB,GAAG,EAAE,IAAI,CAAC,GAAG;wBACb,cAAc,EAAE,IAAI,CAAC,cAAc;wBACnC,eAAe,EAAE,IAAI,CAAC,eAAe;wBACrC,UAAU,EAAE,IAAI,CAAC,UAAU;qBAC5B,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,8BAA8B;YAChC,CAAC;YAED,4BAA4B;YAC5B,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,cAAI,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC;YACzE,IAAI,IAAI,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;gBAClC,OAAO,IAAI,cAAc,CAAC;oBACxB,gBAAgB,EAAE,cAAI,CAAC,MAAM,CAAC,IAAI,UAAU,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;oBAC9D,OAAO,EAAE,IAAI,CAAC,OAAO;oBACrB,KAAK,EAAE,IAAI,CAAC,KAAK;oBACjB,eAAe,EAAE,IAAI,CAAC,eAAe;oBACrC,UAAU,EAAE,IAAI,CAAC,UAAU;iBAC5B,CAAC,CAAC;YACL,CAAC;YAED,MAAM,IAAI,KAAK,CAAC,qBAAqB,CAAC,CAAC;QACzC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,KAAK,CAAC,wCAAwC,GAAI,KAAe,CAAC,OAAO,CAAC,CAAC;QACvF,CAAC;IACH,CAAC;CACF;AAjUD,wCAiUC"}

package/dist/client/index.js

@@ -2,6 +2,6 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 const tslib_1 = require("tslib");
 tslib_1.__exportStar(require("./client"), exports);
-tslib_1.__exportStar(require("./client-auth"), exports);
+tslib_1.__exportStar(require("./client-auth"), exports); // Unified auth: JWT (users) + Keypair (services/agents)
 tslib_1.__exportStar(require("./api-sdk"), exports);
 //# sourceMappingURL=index.js.map

package/dist/client/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/client/index.ts"],"names":[],"mappings":";;;AAAA,mDAAyB;AACzB,wDAA8B;AAC9B,oDAA0B"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/client/index.ts"],"names":[],"mappings":";;;AAAA,mDAAyB;AACzB,wDAA8B,CAAE,wDAAwD;AACxF,oDAA0B"}

package/dist/client/service-auth.d.ts

@@ -0,0 +1,61 @@
+/**
+ * Service/Agent Authentication - Legacy Keypair-based
+ *
+ * This class is for SERVICE and AGENT authentication using legacy keypair-based signatures.
+ * End users should NOT use this class - they must use DainUserAuth with JWT tokens.
+ */
+import { DainClientAuth } from './client-auth';
+export interface DainServiceAuthConfig {
+    /** Service API key (format: sk_agent_org_<orgId>_<agentId>_<keypair>) */
+    apiKey?: string;
+    /** OR provide individual components: */
+    /** Base58-encoded Ed25519 private key */
+    privateKeyBase58?: string;
+    /** Agent ID */
+    agentId?: string;
+    /** Organization ID */
+    orgId?: string;
+    /** Smart Account PDA on Solana (optional) */
+    smartAccountPDA?: string;
+    /** Webhook URL for async operations (optional) */
+    webhookUrl?: string;
+}
+/**
+ * DainServiceAuth - Legacy keypair-based authentication for services and agents
+ *
+ * @example
+ * ```typescript
+ * // Authenticate as a service with API key
+ * const serviceAuth = new DainServiceAuth({
+ *   apiKey: "sk_agent_org_123_agent_456_<base58key>"
+ * });
+ *
+ * // OR with individual components
+ * const serviceAuth = new DainServiceAuth({
+ *   privateKeyBase58: "49bhyNKM...",
+ *   agentId: "agent_456",
+ *   orgId: "org_123"
+ * });
+ * ```
+ */
+export declare class DainServiceAuth extends DainClientAuth {
+    constructor(config: DainServiceAuthConfig);
+    /**
+     * Get the service's agent ID
+     */
+    getServiceAgentId(): string;
+    /**
+     * Get the service's organization ID
+     */
+    getServiceOrgId(): string;
+    /**
+     * Override to prevent JWT methods
+     * @deprecated Not supported for service authentication
+     */
+    getSmartAccountId(): never;
+    /**
+     * Override to prevent JWT methods
+     * @deprecated Not supported for service authentication
+     */
+    getJWT(): never;
+}