@de./sdk 2.0.0 → 2.1.1

package/dist/allend/OTPAuth/index.d.ts

@@ -1,13 +1,17 @@
+import type { SigninBody, CreateAccountBody } from '@de./types';
 import type { AccessOptions, UserSession } from '../../types/access';
 import AccessManager from '../Access';
 import { type Res } from '../../utils';
-export type SigninBody = {
-    phone: string;
-    /** Device fingerprint — an object or its JSON string. */
-    device: string | Record<string, any>;
-    /** ISO 3166-1 alpha-2. */
-    country?: string;
-};
+/**
+ * Request bodies come from `@de./types`, which is what de.auth validates
+ * against — these were hand-declared here, and said `country?: string` where
+ * de.auth wants the Country OBJECT. Its schema is additionalProperties:false,
+ * so a caller trusting the SDK's type was answered `body/country must be
+ * object`. Nothing caught it because this client could not be constructed at
+ * all: AccessManager demanded a workspace context and a bearer token, which
+ * sign-in is what produces.
+ */
+export type { SigninBody, CreateAccountBody, VerificationBody, Country } from '@de./types';
 export type SigninResult = {
     /** What the caller must do next — verification, or account creation first. */
     next: string;
@@ -19,16 +23,6 @@ export type SigninResult = {
      */
     testVCode?: number;
 };
-export type CreateAccountBody = {
-    phone: string;
-    agreeTerms: boolean | string;
-    firstName?: string;
-    lastName?: string;
-    photo?: string;
-    type?: string;
-    country?: string;
-    newsletters?: boolean | string;
-};
 export type VerifyResult = {
     ctoken?: string;
     deviceId?: string;
@@ -51,7 +45,7 @@ export default class OTPAuth extends AccessManager {
     resendSms(body: {
         phone: string;
     }): Promise<Res<void>>;
-    /** GET, with the scope in the querystring — not a POST. */
+    /** A state change, so a POST — it was a GET, which is cacheable. */
     signout(querystring?: {
         allDevices?: boolean | string;
     }): Promise<Res<void>>;

package/dist/allend/OTPAuth/index.js

@@ -7,29 +7,39 @@ const Access_1 = __importDefault(require("../Access"));
 const utils_1 = require("../../utils");
 class OTPAuth extends Access_1.default {
     constructor(access) {
-        super(access, 'ASI');
+        /**
+         * de.auth admits an agent that does not start with `De.service` only if
+         * the request carries an Authorization header — and the whole point of
+         * this client is the flow that has no token yet. The SDK's default
+         * platform is `proxy`, so every sign-in through it was answered 412
+         * before reaching a handler.
+         *
+         * `service` is the platform this client is for; a caller that knows
+         * better can still say so.
+         */
+        super({ ...access, platform: access.platform || 'service' }, 'ASI');
     }
     // ── Sign-in ───────────────────────────────────────────────────────────────
     /** Step 1 — sends the code. */
     async signin(body) {
         if (!body.phone)
             throw new Error('<phone> argument required');
-        return this.request({ url: '/signin', method: 'POST', body });
+        return this.request({ url: '/auth/otp/send', method: 'POST', body });
     }
     /** Step 2 — exchanges the code for a session. */
     async verify(body) {
-        return this.request({ url: '/verification', method: 'POST', body });
+        return this.request({ url: '/auth/otp/verify', method: 'POST', body });
     }
     /** Step 1a — for a phone de.auth has never seen. */
     async setAccount(body) {
-        return this.request({ url: '/set-account', method: 'POST', body });
+        return this.request({ url: '/auth/account/create', method: 'POST', body });
     }
     async resendSms(body) {
-        return this.request({ url: '/resend/sms', method: 'POST', body });
+        return this.request({ url: '/auth/otp/resend', method: 'POST', body });
     }
-    /** GET, with the scope in the querystring — not a POST. */
+    /** A state change, so a POST — it was a GET, which is cacheable. */
     async signout(querystring) {
-        return this.request({ url: `/signout${(0, utils_1.qs)(querystring)}`, method: 'GET' });
+        return this.request({ url: `/auth/session/revoke${(0, utils_1.qs)(querystring)}`, method: 'POST' });
     }
     // ── The signed-in person ──────────────────────────────────────────────────
     /**

package/dist/allend/OTPAuth/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/allend/OTPAuth/index.ts"],"names":[],"mappings":";;;;;AACA,uDAAqC;AACrC,uCAA0C;AAuD1C,MAAqB,OAAQ,SAAQ,gBAAa;IACjD,YAAa,MAAqB;QACjC,KAAK,CAAE,MAAM,EAAE,KAAK,CAAE,CAAA;IACvB,CAAC;IAED,6EAA6E;IAE7E,+BAA+B;IAC/B,KAAK,CAAC,MAAM,CAAE,IAAgB;QAC7B,IAAI,CAAC,IAAI,CAAC,KAAK;YAAG,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAA;QAE9D,OAAO,IAAI,CAAC,OAAO,CAAoB,EAAE,GAAG,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAA;IACjF,CAAC;IAED,iDAAiD;IACjD,KAAK,CAAC,MAAM,CAAE,IAAwD;QACrE,OAAO,IAAI,CAAC,OAAO,CAAoB,EAAE,GAAG,EAAE,eAAe,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAA;IACvF,CAAC;IAED,oDAAoD;IACpD,KAAK,CAAC,UAAU,CAAE,IAAuB;QACxC,OAAO,IAAI,CAAC,OAAO,CAAwB,EAAE,GAAG,EAAE,cAAc,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAA;IAC1F,CAAC;IAED,KAAK,CAAC,SAAS,CAAE,IAAuB;QACvC,OAAO,IAAI,CAAC,OAAO,CAAY,EAAE,GAAG,EAAE,aAAa,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAA;IAC7E,CAAC;IAED,2DAA2D;IAC3D,KAAK,CAAC,OAAO,CAAE,WAA+C;QAC7D,OAAO,IAAI,CAAC,OAAO,CAAY,EAAE,GAAG,EAAE,WAAW,IAAA,UAAE,EAAE,WAAW,CAAE,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAA;IACvF,CAAC;IAED,6EAA6E;IAE7E;;;;;;OAMG;IACH,KAAK,CAAC,MAAM,CAAE,OAAoB,EAAE,KAAK,GAAG,iCAAiC;QAC5E,OAAO,IAAI,CAAC,OAAO,CAAuB;YACzC,GAAG,EAAE,eAAe,IAAA,UAAE,EAAC,EAAE,KAAK,EAAE,CAAC,EAAE;YACnC,MAAM,EAAE,KAAK;YACb,OAAO,EAAE;gBACR,eAAe,EAAG,OAAO,CAAC,KAAK;gBAC/B,gBAAgB,EAAE,OAAO,CAAC,MAAM;aAChC;SACD,CAAC,CAAA;IACH,CAAC;IAED,KAAK,CAAC,QAAQ,CAAE,WAA+B;QAC9C,OAAO,IAAI,CAAC,OAAO,CAAqB,EAAE,GAAG,EAAE,QAAQ,IAAA,UAAE,EAAE,WAAW,CAAE,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAA;IAC7F,CAAC;IAED,KAAK,CAAC,MAAM,CAAE,WAAgC;QAC7C,OAAO,IAAI,CAAC,OAAO,CAAW,EAAE,GAAG,EAAE,eAAe,IAAA,UAAE,EAAE,WAAW,CAAE,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAA;IAC1F,CAAC;IAED,KAAK,CAAC,aAAa,CAAE,IAAyB;QAC7C,OAAO,IAAI,CAAC,OAAO,CAAW,EAAE,GAAG,EAAE,eAAe,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAA;IAC/E,CAAC;IAED,KAAK,CAAC,cAAc,CAAE,IAAyB;QAC9C,OAAO,IAAI,CAAC,OAAO,CAAW,EAAE,GAAG,EAAE,gBAAgB,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAA;IAChF,CAAC;IAED,KAAK,CAAC,MAAM,CAAE,IAAyB;QACtC,OAAO,IAAI,CAAC,OAAO,CAAY,EAAE,GAAG,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAA;IACzE,CAAC;CACD;AAxED,0BAwEC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/allend/OTPAuth/index.ts"],"names":[],"mappings":";;;;;AAEA,uDAAqC;AACrC,uCAA0C;AAoD1C,MAAqB,OAAQ,SAAQ,gBAAa;IACjD,YAAa,MAAqB;QACjC;;;;;;;;;WASG;QACH,KAAK,CAAC,EAAE,GAAG,MAAM,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,IAAI,SAAS,EAAE,EAAE,KAAK,CAAE,CAAA;IACrE,CAAC;IAED,6EAA6E;IAE7E,+BAA+B;IAC/B,KAAK,CAAC,MAAM,CAAE,IAAgB;QAC7B,IAAI,CAAC,IAAI,CAAC,KAAK;YAAG,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAA;QAE9D,OAAO,IAAI,CAAC,OAAO,CAAoB,EAAE,GAAG,EAAE,gBAAgB,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAA;IACxF,CAAC;IAED,iDAAiD;IACjD,KAAK,CAAC,MAAM,CAAE,IAAwD;QACrE,OAAO,IAAI,CAAC,OAAO,CAAoB,EAAE,GAAG,EAAE,kBAAkB,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAA;IAC1F,CAAC;IAED,oDAAoD;IACpD,KAAK,CAAC,UAAU,CAAE,IAAuB;QACxC,OAAO,IAAI,CAAC,OAAO,CAAwB,EAAE,GAAG,EAAE,sBAAsB,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAA;IAClG,CAAC;IAED,KAAK,CAAC,SAAS,CAAE,IAAuB;QACvC,OAAO,IAAI,CAAC,OAAO,CAAY,EAAE,GAAG,EAAE,kBAAkB,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAA;IAClF,CAAC;IAED,oEAAoE;IACpE,KAAK,CAAC,OAAO,CAAE,WAA+C;QAC7D,OAAO,IAAI,CAAC,OAAO,CAAY,EAAE,GAAG,EAAE,uBAAuB,IAAA,UAAE,EAAE,WAAW,CAAE,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAA;IACpG,CAAC;IAED,6EAA6E;IAE7E;;;;;;OAMG;IACH,KAAK,CAAC,MAAM,CAAE,OAAoB,EAAE,KAAK,GAAG,iCAAiC;QAC5E,OAAO,IAAI,CAAC,OAAO,CAAuB;YACzC,GAAG,EAAE,eAAe,IAAA,UAAE,EAAC,EAAE,KAAK,EAAE,CAAC,EAAE;YACnC,MAAM,EAAE,KAAK;YACb,OAAO,EAAE;gBACR,eAAe,EAAG,OAAO,CAAC,KAAK;gBAC/B,gBAAgB,EAAE,OAAO,CAAC,MAAM;aAChC;SACD,CAAC,CAAA;IACH,CAAC;IAED,KAAK,CAAC,QAAQ,CAAE,WAA+B;QAC9C,OAAO,IAAI,CAAC,OAAO,CAAqB,EAAE,GAAG,EAAE,QAAQ,IAAA,UAAE,EAAE,WAAW,CAAE,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAA;IAC7F,CAAC;IAED,KAAK,CAAC,MAAM,CAAE,WAAgC;QAC7C,OAAO,IAAI,CAAC,OAAO,CAAW,EAAE,GAAG,EAAE,eAAe,IAAA,UAAE,EAAE,WAAW,CAAE,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAA;IAC1F,CAAC;IAED,KAAK,CAAC,aAAa,CAAE,IAAyB;QAC7C,OAAO,IAAI,CAAC,OAAO,CAAW,EAAE,GAAG,EAAE,eAAe,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAA;IAC/E,CAAC;IAED,KAAK,CAAC,cAAc,CAAE,IAAyB;QAC9C,OAAO,IAAI,CAAC,OAAO,CAAW,EAAE,GAAG,EAAE,gBAAgB,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAA;IAChF,CAAC;IAED,KAAK,CAAC,MAAM,CAAE,IAAyB;QACtC,OAAO,IAAI,CAAC,OAAO,CAAY,EAAE,GAAG,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAA;IACzE,CAAC;CACD;AAlFD,0BAkFC"}

package/dist/baseUrl.d.ts

@@ -38,11 +38,9 @@ export declare const API_SERVER_BASEURL: {
  * It is not reachable through the API host: de.arch serves no `/workspace`
  * routes, so a client pointed there gets 404 for the whole surface.
  *
- * The staging and production hosts follow the naming of the other services
- * (auth.dedot.io, iot.dedot.io). Confirm them against the deployment before
- * relying on them, and pass `baseUrl` to address a host that differs — which
- * is also what a self-hosted De. needs, and what a dev machine running
- * de.workspace on a port other than 22200 needs.
+ * Pass `baseUrl` to address a host that differs — what a self-hosted De.
+ * needs, and what a dev machine running de.workspace on a port other than
+ * 22200 needs.
  */
 export declare const WSP_SERVER_BASEURL: {
     dev: string;

package/dist/baseUrl.js

@@ -43,11 +43,9 @@ exports.API_SERVER_BASEURL = {
  * It is not reachable through the API host: de.arch serves no `/workspace`
  * routes, so a client pointed there gets 404 for the whole surface.
  *
- * The staging and production hosts follow the naming of the other services
- * (auth.dedot.io, iot.dedot.io). Confirm them against the deployment before
- * relying on them, and pass `baseUrl` to address a host that differs — which
- * is also what a self-hosted De. needs, and what a dev machine running
- * de.workspace on a port other than 22200 needs.
+ * Pass `baseUrl` to address a host that differs — what a self-hosted De.
+ * needs, and what a dev machine running de.workspace on a port other than
+ * 22200 needs.
  */
 exports.WSP_SERVER_BASEURL = {
     dev: `http://localhost:${DEV_PORTS.WSP}`,

package/dist/baseUrl.js.map

@@ -1 +1 @@
-{"version":3,"file":"baseUrl.js","sourceRoot":"","sources":["../src/baseUrl.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;GAWG;;;AAoEH,0BAOC;AAzED,MAAM,SAAS,GAAG;IACjB,GAAG,EAAE,KAAK;IACV,GAAG,EAAE,KAAK;IACV,GAAG,EAAE,KAAK;IACV,GAAG,EAAE,KAAK;IACV,GAAG,EAAE,KAAK;CACV,CAAA;AAEY,QAAA,kBAAkB,GAAG;IACjC,GAAG,EAAM,oBAAoB,SAAS,CAAC,GAAG,EAAE;IAC5C,OAAO,EAAE,+BAA+B;IACxC,IAAI,EAAK,uBAAuB;CAChC,CAAA;AACD,kBAAkB;AACL,QAAA,kBAAkB,GAAG;IACjC,GAAG,EAAM,oBAAoB,SAAS,CAAC,GAAG,EAAE;IAC5C,OAAO,EAAE,8BAA8B;IACvC,IAAI,EAAK,sBAAsB;CAC/B,CAAA;AACY,QAAA,kBAAkB,GAAG;IACjC,GAAG,EAAM,oBAAoB,SAAS,CAAC,GAAG,EAAE;IAC5C,OAAO,EAAE,8BAA8B;IACvC,IAAI,EAAK,sBAAsB;CAC/B,CAAA;AACD;;;;;;;;;;;GAWG;AACU,QAAA,kBAAkB,GAAG;IACjC,GAAG,EAAM,oBAAoB,SAAS,CAAC,GAAG,EAAE;IAC5C,OAAO,EAAE,oCAAoC;IAC7C,IAAI,EAAK,4BAA4B;CACrC,CAAA;AACY,QAAA,kBAAkB,GAAG;IACjC,GAAG,EAAM,oBAAoB,SAAS,CAAC,GAAG,EAAE;IAC5C,OAAO,EAAE,8BAA8B;IACvC,IAAI,EAAK,sBAAsB;CAC/B,CAAA;AAKD,MAAM,QAAQ,GAAG;IAChB,GAAG,EAAE,0BAAkB;IACvB,GAAG,EAAE,0BAAkB;IACvB,GAAG,EAAE,0BAAkB;IACvB,GAAG,EAAE,0BAAkB;IACvB,GAAG,EAAE,0BAAkB;CACvB,CAAA;AAED;;;;;;;GAOG;AACH,SAAgB,OAAO,CAAE,MAAkB,EAAE,MAAiB,KAAK,EAAE,WAAoB;IACxF,MAAM,GAAG,GAAG,QAAQ,CAAE,MAAM,CAAE,CAAE,GAAG,CAAE,CAAA;IAErC,6EAA6E;IAC7E,OAAO,GAAG,KAAK,KAAK,IAAI,WAAW;QAC/B,CAAC,CAAC,UAAU,WAAW,IAAI,SAAS,CAAE,MAAM,CAAE,EAAE;QAChD,CAAC,CAAC,GAAG,CAAA;AACV,CAAC"}
+{"version":3,"file":"baseUrl.js","sourceRoot":"","sources":["../src/baseUrl.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;GAWG;;;AAkEH,0BAOC;AAvED,MAAM,SAAS,GAAG;IACjB,GAAG,EAAE,KAAK;IACV,GAAG,EAAE,KAAK;IACV,GAAG,EAAE,KAAK;IACV,GAAG,EAAE,KAAK;IACV,GAAG,EAAE,KAAK;CACV,CAAA;AAEY,QAAA,kBAAkB,GAAG;IACjC,GAAG,EAAM,oBAAoB,SAAS,CAAC,GAAG,EAAE;IAC5C,OAAO,EAAE,+BAA+B;IACxC,IAAI,EAAK,uBAAuB;CAChC,CAAA;AACD,kBAAkB;AACL,QAAA,kBAAkB,GAAG;IACjC,GAAG,EAAM,oBAAoB,SAAS,CAAC,GAAG,EAAE;IAC5C,OAAO,EAAE,8BAA8B;IACvC,IAAI,EAAK,sBAAsB;CAC/B,CAAA;AACY,QAAA,kBAAkB,GAAG;IACjC,GAAG,EAAM,oBAAoB,SAAS,CAAC,GAAG,EAAE;IAC5C,OAAO,EAAE,8BAA8B;IACvC,IAAI,EAAK,sBAAsB;CAC/B,CAAA;AACD;;;;;;;;;GASG;AACU,QAAA,kBAAkB,GAAG;IACjC,GAAG,EAAM,oBAAoB,SAAS,CAAC,GAAG,EAAE;IAC5C,OAAO,EAAE,oCAAoC;IAC7C,IAAI,EAAK,4BAA4B;CACrC,CAAA;AACY,QAAA,kBAAkB,GAAG;IACjC,GAAG,EAAM,oBAAoB,SAAS,CAAC,GAAG,EAAE;IAC5C,OAAO,EAAE,8BAA8B;IACvC,IAAI,EAAK,sBAAsB;CAC/B,CAAA;AAKD,MAAM,QAAQ,GAAG;IAChB,GAAG,EAAE,0BAAkB;IACvB,GAAG,EAAE,0BAAkB;IACvB,GAAG,EAAE,0BAAkB;IACvB,GAAG,EAAE,0BAAkB;IACvB,GAAG,EAAE,0BAAkB;CACvB,CAAA;AAED;;;;;;;GAOG;AACH,SAAgB,OAAO,CAAE,MAAkB,EAAE,MAAiB,KAAK,EAAE,WAAoB;IACxF,MAAM,GAAG,GAAG,QAAQ,CAAE,MAAM,CAAE,CAAE,GAAG,CAAE,CAAA;IAErC,6EAA6E;IAC7E,OAAO,GAAG,KAAK,KAAK,IAAI,WAAW;QAC/B,CAAC,CAAC,UAAU,WAAW,IAAI,SAAS,CAAE,MAAM,CAAE,EAAE;QAChD,CAAC,CAAC,GAAG,CAAA;AACV,CAAC"}

package/dist/core.d.ts

@@ -20,6 +20,7 @@ export { default as Workflows } from './allend/Workflows';
 export type { WorkflowsConfig } from './allend/Workflows';
 export { default as Utils } from './utils';
 export { default as APIError } from './error';
+export { statusOf } from './response';
 export { default as IoTClient } from './allend/IoTClient';
 export type { IoTClientOptions } from './allend/IoTClient';
 export { default as Customer } from './allend/Customer';

package/dist/core.js

@@ -20,7 +20,7 @@ var __importDefault = (this && this.__importDefault) || function (mod) {
     return (mod && mod.__esModule) ? mod : { "default": mod };
 };
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.core = exports.DClient = exports.Utilities = exports.Queries = exports.Agent = exports.Customer = exports.IoTClient = exports.APIError = exports.Utils = exports.Workflows = exports.Realtime = exports.Workspace = exports.IoTBackendRecords = exports.IoTSP = exports.DEV = exports.CSP = exports.LSP = exports.Pipelines = exports.Tracking = exports.OTPAuth = exports.Auth = void 0;
+exports.core = exports.DClient = exports.Utilities = exports.Queries = exports.Agent = exports.Customer = exports.IoTClient = exports.statusOf = exports.APIError = exports.Utils = exports.Workflows = exports.Realtime = exports.Workspace = exports.IoTBackendRecords = exports.IoTSP = exports.DEV = exports.CSP = exports.LSP = exports.Pipelines = exports.Tracking = exports.OTPAuth = exports.Auth = void 0;
 // ── Named exports (preferred — tree-shakeable) ────────────────────────────────
 // Server-side auth: connector credentials → access token
 var Auth_1 = require("./backend/Auth");
@@ -56,6 +56,8 @@ var utils_1 = require("./utils");
 Object.defineProperty(exports, "Utils", { enumerable: true, get: function () { return __importDefault(utils_1).default; } });
 var error_1 = require("./error");
 Object.defineProperty(exports, "APIError", { enumerable: true, get: function () { return __importDefault(error_1).default; } });
+var response_1 = require("./response");
+Object.defineProperty(exports, "statusOf", { enumerable: true, get: function () { return response_1.statusOf; } });
 // ── Client layer (allend) ─────────────────────────────────────────────────────
 // DClient ({ Client, Event }), the IoT socket client, and the customer/agent/
 // query surfaces.

package/dist/core.js.map

@@ -1 +1 @@
-{"version":3,"file":"core.js","sourceRoot":"","sources":["../src/core.ts"],"names":[],"mappings":";AAAA,iFAAiF;AACjF,EAAE;AACF,4EAA4E;AAC5E,EAAE;AACF,6EAA6E;AAC7E,4EAA4E;AAC5E,8EAA8E;AAC9E,0EAA0E;AAC1E,0EAA0E;AAC1E,WAAW;AACX,EAAE;AACF,0BAA0B;AAC1B,EAAE;AACF,mEAAmE;AACnE,sEAAsE;AACtE,EAAE;AACF,gFAAgF;;;;;;AAEhF,iFAAiF;AAEjF,yDAAyD;AACzD,uCAAgD;AAAvC,6GAAA,OAAO,OAAQ;AAGxB,yCAAyC;AACzC,4CAAqD;AAA5C,mHAAA,OAAO,OAAW;AAE3B,0CAA0C;AAC1C,8CAAuD;AAA9C,qHAAA,OAAO,OAAY;AAG5B,gDAAyD;AAAhD,uHAAA,OAAO,OAAa;AAG7B,oCAA6C;AAApC,2GAAA,OAAO,OAAO;AAGvB,oCAA6C;AAApC,2GAAA,OAAO,OAAO;AAGvB,oCAA6C;AAApC,2GAAA,OAAO,OAAO;AAGvB,qEAAqE;AACrE,wCAA+E;AAAtE,+GAAA,OAAO,OAAS;AAAE,0GAAA,OAAO,OAAqB;AAGvD,gDAAyD;AAAhD,uHAAA,OAAO,OAAa;AAG7B,4CAA4C;AAC5C,8CAAuD;AAA9C,qHAAA,OAAO,OAAY;AAE5B,sBAAsB;AACtB,gDAAyD;AAAhD,uHAAA,OAAO,OAAa;AAG7B,YAAY;AACZ,iCAA0C;AAAjC,+GAAA,OAAO,OAAS;AAEzB,iCAA6C;AAApC,kHAAA,OAAO,OAAY;AAE5B,iFAAiF;AACjF,8EAA8E;AAC9E,kBAAkB;AAClB,EAAE;AACF,0EAA0E;AAC1E,+EAA+E;AAC/E,sDAAsD;AACtD,gDAAyD;AAAhD,uHAAA,OAAO,OAAa;AAG7B,8CAAuD;AAA9C,qHAAA,OAAO,OAAY;AAG5B,wCAAiD;AAAxC,+GAAA,OAAO,OAAS;AAIzB,4CAAqD;AAA5C,mHAAA,OAAO,OAAW;AAG3B,gDAAyD;AAAhD,uHAAA,OAAO,OAAa;AAe7B,iFAAiF;AAEjF,0DAAsC;AACtC,+DAAwC;AACxC,mEAA0C;AAC1C,iEAAyC;AACzC,qEAA8C;AAC9C,uDAAoC;AACpC,uDAAoC;AACpC,uDAAoC;AACpC,2DAAsC;AACtC,mEAA0C;AAC1C,mEAA0C;AAC1C,iEAAyC;AACzC,oDAA+B;AAC/B,mEAA0C;AAC1C,iEAAyC;AACzC,2DAAsC;AACtC,+DAAwC;AACxC,mEAA0C;AAC1C,uEAAiD;AACjD,iEAAyC;AAEzC,qEAAqE;AACrE,MAAM,OAAO,GAAG,EAAE,MAAM,EAAN,gBAAM,EAAE,KAAK,EAAL,kBAAK,EAAE,CAAA;AACxB,0BAAO;AAEH,QAAA,IAAI,GAAG;IACnB,IAAI,EAAJ,cAAI;IACJ,OAAO,EAAP,iBAAO;IACP,SAAS,EAAT,mBAAS;IACT,QAAQ,EAAR,kBAAQ;IACR,GAAG,EAAH,iBAAG;IACH,GAAG,EAAH,aAAG;IACH,GAAG,EAAH,aAAG;IACH,GAAG,EAAH,aAAG;IACH,KAAK,EAAL,eAAK;IACL,SAAS,EAAT,mBAAS;IACT,SAAS,EAAT,mBAAS;IACT,QAAQ,EAAR,kBAAQ;IACR,KAAK,EAAL,eAAK;IACL,OAAO;IACP,SAAS,EAAT,mBAAS;IACT,QAAQ,EAAR,kBAAQ;IACR,KAAK,EAAL,eAAK;IACL,OAAO,EAAP,iBAAO;IACP,SAAS,EAAT,mBAAS;CACT,CAAA"}
+{"version":3,"file":"core.js","sourceRoot":"","sources":["../src/core.ts"],"names":[],"mappings":";AAAA,iFAAiF;AACjF,EAAE;AACF,4EAA4E;AAC5E,EAAE;AACF,6EAA6E;AAC7E,4EAA4E;AAC5E,8EAA8E;AAC9E,0EAA0E;AAC1E,0EAA0E;AAC1E,WAAW;AACX,EAAE;AACF,0BAA0B;AAC1B,EAAE;AACF,mEAAmE;AACnE,sEAAsE;AACtE,EAAE;AACF,gFAAgF;;;;;;AAEhF,iFAAiF;AAEjF,yDAAyD;AACzD,uCAAgD;AAAvC,6GAAA,OAAO,OAAQ;AAGxB,yCAAyC;AACzC,4CAAqD;AAA5C,mHAAA,OAAO,OAAW;AAE3B,0CAA0C;AAC1C,8CAAuD;AAA9C,qHAAA,OAAO,OAAY;AAG5B,gDAAyD;AAAhD,uHAAA,OAAO,OAAa;AAG7B,oCAA6C;AAApC,2GAAA,OAAO,OAAO;AAGvB,oCAA6C;AAApC,2GAAA,OAAO,OAAO;AAGvB,oCAA6C;AAApC,2GAAA,OAAO,OAAO;AAGvB,qEAAqE;AACrE,wCAA+E;AAAtE,+GAAA,OAAO,OAAS;AAAE,0GAAA,OAAO,OAAqB;AAGvD,gDAAyD;AAAhD,uHAAA,OAAO,OAAa;AAG7B,4CAA4C;AAC5C,8CAAuD;AAA9C,qHAAA,OAAO,OAAY;AAE5B,sBAAsB;AACtB,gDAAyD;AAAhD,uHAAA,OAAO,OAAa;AAG7B,YAAY;AACZ,iCAA0C;AAAjC,+GAAA,OAAO,OAAS;AAEzB,iCAA6C;AAApC,kHAAA,OAAO,OAAY;AAC5B,uCAAqC;AAA5B,oGAAA,QAAQ,OAAA;AAEjB,iFAAiF;AACjF,8EAA8E;AAC9E,kBAAkB;AAClB,EAAE;AACF,0EAA0E;AAC1E,+EAA+E;AAC/E,sDAAsD;AACtD,gDAAyD;AAAhD,uHAAA,OAAO,OAAa;AAG7B,8CAAuD;AAA9C,qHAAA,OAAO,OAAY;AAG5B,wCAAiD;AAAxC,+GAAA,OAAO,OAAS;AAIzB,4CAAqD;AAA5C,mHAAA,OAAO,OAAW;AAG3B,gDAAyD;AAAhD,uHAAA,OAAO,OAAa;AAe7B,iFAAiF;AAEjF,0DAAsC;AACtC,+DAAwC;AACxC,mEAA0C;AAC1C,iEAAyC;AACzC,qEAA8C;AAC9C,uDAAoC;AACpC,uDAAoC;AACpC,uDAAoC;AACpC,2DAAsC;AACtC,mEAA0C;AAC1C,mEAA0C;AAC1C,iEAAyC;AACzC,oDAA+B;AAC/B,mEAA0C;AAC1C,iEAAyC;AACzC,2DAAsC;AACtC,+DAAwC;AACxC,mEAA0C;AAC1C,uEAAiD;AACjD,iEAAyC;AAEzC,qEAAqE;AACrE,MAAM,OAAO,GAAG,EAAE,MAAM,EAAN,gBAAM,EAAE,KAAK,EAAL,kBAAK,EAAE,CAAA;AACxB,0BAAO;AAEH,QAAA,IAAI,GAAG;IACnB,IAAI,EAAJ,cAAI;IACJ,OAAO,EAAP,iBAAO;IACP,SAAS,EAAT,mBAAS;IACT,QAAQ,EAAR,kBAAQ;IACR,GAAG,EAAH,iBAAG;IACH,GAAG,EAAH,aAAG;IACH,GAAG,EAAH,aAAG;IACH,GAAG,EAAH,aAAG;IACH,KAAK,EAAL,eAAK;IACL,SAAS,EAAT,mBAAS;IACT,SAAS,EAAT,mBAAS;IACT,QAAQ,EAAR,kBAAQ;IACR,KAAK,EAAL,eAAK;IACL,OAAO;IACP,SAAS,EAAT,mBAAS;IACT,QAAQ,EAAR,kBAAQ;IACR,KAAK,EAAL,eAAK;IACL,OAAO,EAAP,iBAAO;IACP,SAAS,EAAT,mBAAS;CACT,CAAA"}

package/dist/response.d.ts

@@ -0,0 +1,9 @@
+/** Record the status for a parsed response body. Called by the transport. */
+export declare const rememberStatus: (body: unknown, status: number) => void;
+/**
+ * The HTTP status the given envelope arrived with.
+ *
+ * `undefined` when the object did not come from this SDK's transport, or when
+ * the call threw instead of returning — `APIError` carries its own `status`.
+ */
+export declare const statusOf: (envelope: unknown) => number | undefined;

package/dist/response.js

@@ -0,0 +1,42 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.statusOf = exports.rememberStatus = void 0;
+/**
+ * The HTTP status a returned envelope arrived with.
+ *
+ * Clients return De.'s `{ error, status, message, data }` envelope, which is
+ * what makes `status` — the precise refusal code — reachable. It carries no
+ * HTTP status, and for most callers that is right: the envelope says more than
+ * a number can.
+ *
+ * A proxy is the exception. It answers its own client with an HTTP status, and
+ * mapping every De. refusal onto a generic 400 loses the distinction between
+ * "no such order" and "you may not do that" for whoever is downstream.
+ *
+ * So the status is kept beside the response rather than inside it: the type
+ * stays exactly the envelope, and a caller that needs the number asks for it,
+ * keyed on the object it was given. Keying on identity rather than on a
+ * mutable field is what makes it safe under concurrency — two calls in flight
+ * cannot read each other's status.
+ *
+ * ```ts
+ * const answer = await lsp.orders.get( reference )
+ * if( answer.error ) throw new HTTPException( statusOf( answer ) ?? 400, ... )
+ * ```
+ */
+const statuses = new WeakMap();
+/** Record the status for a parsed response body. Called by the transport. */
+const rememberStatus = (body, status) => {
+    if (body && typeof body === 'object')
+        statuses.set(body, status);
+};
+exports.rememberStatus = rememberStatus;
+/**
+ * The HTTP status the given envelope arrived with.
+ *
+ * `undefined` when the object did not come from this SDK's transport, or when
+ * the call threw instead of returning — `APIError` carries its own `status`.
+ */
+const statusOf = (envelope) => envelope && typeof envelope === 'object' ? statuses.get(envelope) : undefined;
+exports.statusOf = statusOf;
+//# sourceMappingURL=response.js.map

package/dist/response.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"response.js","sourceRoot":"","sources":["../src/response.ts"],"names":[],"mappings":";;;AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,MAAM,QAAQ,GAAG,IAAI,OAAO,EAAkB,CAAA;AAE9C,6EAA6E;AACtE,MAAM,cAAc,GAAG,CAAE,IAAa,EAAE,MAAc,EAAS,EAAE;IACvE,IAAI,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ;QAAG,QAAQ,CAAC,GAAG,CAAE,IAAc,EAAE,MAAM,CAAE,CAAA;AAC9E,CAAC,CAAA;AAFY,QAAA,cAAc,kBAE1B;AAED;;;;;GAKG;AACI,MAAM,QAAQ,GAAG,CAAE,QAAiB,EAAuB,EAAE,CACnE,QAAQ,IAAI,OAAO,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAE,QAAkB,CAAE,CAAC,CAAC,CAAC,SAAS,CAAA;AAD7E,QAAA,QAAQ,YACqE"}

package/dist/utils/index.d.ts

@@ -23,6 +23,20 @@ export type Res<T = any> = {
  * property fails that test outright.
  */
 export type Data<T> = 'data' extends keyof T ? T['data'] : undefined;
+/**
+ * Serialize a querystring for a De. route.
+ *
+ * Array values are appended as repeated keys — `state=A&state=B` — which is
+ * what Fastify's query parser turns back into an array. `String( value )` on
+ * an array produces `A,B`, a single comma-joined string, and the route answers
+ * `querystring/state must be array`: the schema is right, the request never
+ * matched it. Every array parameter the SDK sent was malformed this way, the
+ * same shape of fault as the coordinates object that once serialized to
+ * `[object Object]`.
+ *
+ * @param params - Query parameters; null and undefined values are dropped
+ * @return - `?a=1&b=2`, or an empty string when there is nothing to send
+ */
 export declare const qs: (params?: Record<string, any>) => string;
 declare const _default: {
     Stream: typeof Stream;

package/dist/utils/index.js

@@ -5,13 +5,33 @@ var __importDefault = (this && this.__importDefault) || function (mod) {
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.qs = void 0;
 const stream_1 = __importDefault(require("./stream"));
+/**
+ * Serialize a querystring for a De. route.
+ *
+ * Array values are appended as repeated keys — `state=A&state=B` — which is
+ * what Fastify's query parser turns back into an array. `String( value )` on
+ * an array produces `A,B`, a single comma-joined string, and the route answers
+ * `querystring/state must be array`: the schema is right, the request never
+ * matched it. Every array parameter the SDK sent was malformed this way, the
+ * same shape of fault as the coordinates object that once serialized to
+ * `[object Object]`.
+ *
+ * @param params - Query parameters; null and undefined values are dropped
+ * @return - `?a=1&b=2`, or an empty string when there is nothing to send
+ */
 const qs = (params) => {
     if (!params)
         return '';
-    const q = new URLSearchParams(Object.fromEntries(Object.entries(params)
-        .filter(([, v]) => v != null)
-        .map(([k, v]) => [k, String(v)]))).toString();
-    return q ? `?${q}` : '';
+    const q = new URLSearchParams();
+    for (const [key, value] of Object.entries(params)) {
+        if (value === null || value === undefined)
+            continue;
+        Array.isArray(value)
+            ? value.forEach(each => each !== null && each !== undefined && q.append(key, String(each)))
+            : q.append(key, String(value));
+    }
+    const query = q.toString();
+    return query ? `?${query}` : '';
 };
 exports.qs = qs;
 exports.default = { Stream: stream_1.default };

package/dist/utils/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/utils/index.ts"],"names":[],"mappings":";;;;;;AACA,sDAA6B;AAsBtB,MAAM,EAAE,GAAG,CAAE,MAA4B,EAAW,EAAE;IAC3D,IAAI,CAAC,MAAM;QAAG,OAAO,EAAE,CAAA;IACvB,MAAM,CAAC,GAAG,IAAI,eAAe,CAC3B,MAAM,CAAC,WAAW,CAChB,MAAM,CAAC,OAAO,CAAE,MAAM,CAAE;SACjB,MAAM,CAAE,CAAE,CAAC,EAAE,CAAC,CAAC,EAAG,EAAE,CAAC,CAAC,IAAI,IAAI,CAAE;SAChC,GAAG,CAAE,CAAE,CAAC,CAAC,EAAE,CAAC,CAAC,EAAG,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,CAAE,CAAC,CAAE,CAAC,CAAE,CAC7C,CACF,CAAC,QAAQ,EAAE,CAAA;IACZ,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAA;AACzB,CAAC,CAAA;AAVY,QAAA,EAAE,MAUd;AAED,kBAAe,EAAE,MAAM,EAAN,gBAAM,EAAE,CAAA"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/utils/index.ts"],"names":[],"mappings":";;;;;;AACA,sDAA6B;AAsB7B;;;;;;;;;;;;;GAaG;AACI,MAAM,EAAE,GAAG,CAAE,MAA4B,EAAW,EAAE;IAC3D,IAAI,CAAC,MAAM;QAAG,OAAO,EAAE,CAAA;IAEvB,MAAM,CAAC,GAAG,IAAI,eAAe,EAAE,CAAA;IAE/B,KAAK,MAAM,CAAE,GAAG,EAAE,KAAK,CAAE,IAAI,MAAM,CAAC,OAAO,CAAE,MAAM,CAAE,EAAE,CAAC;QACtD,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,SAAS;YAAG,SAAQ;QAEpD,KAAK,CAAC,OAAO,CAAE,KAAK,CAAE;YACpB,CAAC,CAAC,KAAK,CAAC,OAAO,CAAE,IAAI,CAAC,EAAE,CAAC,IAAI,KAAK,IAAI,IAAI,IAAI,KAAK,SAAS,IAAI,CAAC,CAAC,MAAM,CAAE,GAAG,EAAE,MAAM,CAAE,IAAI,CAAE,CAAE,CAAE;YACjG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAE,GAAG,EAAE,MAAM,CAAE,KAAK,CAAE,CAAE,CAAA;IACtC,CAAC;IAED,MAAM,KAAK,GAAG,CAAC,CAAC,QAAQ,EAAE,CAAA;IAC1B,OAAO,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAA;AACjC,CAAC,CAAA;AAfY,QAAA,EAAE,MAed;AAED,kBAAe,EAAE,MAAM,EAAN,gBAAM,EAAE,CAAA"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@de./sdk",
-  "version": "2.0.0",
+  "version": "2.1.1",
   "description": "Complete SDK pack for MSI (Map Service Interface), IoTClient and DClient services — web, server and React Native",
   "main": "./dist/index.js",
   "types": "./dist/index.d.ts",
@@ -41,12 +41,12 @@
     "test:event": "npm run build:tsc && jest test/event.test.js"
   },
   "dependencies": {
-    "@de./types": "^2.0.0",
+    "@de./types": "^2.1.0",
     "events": "^3.3.0",
-    "iframe.io": "^1.1.0",
+    "iframe.io": "^1.3.0",
     "node-fetch": "2.6.1",
     "socket.io-client": "^4.6.1",
-    "webview.io": "^1.1.0"
+    "webview.io": "^1.2.0"
   },
   "peerDependencies": {
     "react": ">=16.8.0",
@@ -54,9 +54,15 @@
     "react-native-webview": ">=11.0.0"
   },
   "peerDependenciesMeta": {
-    "react": { "optional": true },
-    "react-native": { "optional": true },
-    "react-native-webview": { "optional": true }
+    "react": {
+      "optional": true
+    },
+    "react-native": {
+      "optional": true
+    },
+    "react-native-webview": {
+      "optional": true
+    }
   },
   "devDependencies": {
     "@babel/core": "^7.26.0",

package/src/allend/Access.ts

@@ -2,6 +2,7 @@ import type { AccessOptions, UserSession } from '../types/access'
 import type { HTTPRequestOptions } from '../types'
 import { baseURL } from '../baseUrl'
 import APIError from '../error'
+import { rememberStatus } from '../response'
 
 /**
  * Which service the client addresses.
@@ -55,10 +56,26 @@ export default class AccessManager {
 
   constructor( options: AccessOptions, atype: AccessType ){
     if( !options ) throw new Error('Undefined Access Configuration')
-    if( !options.context ) throw new Error('Undefined Context Reference. Check https://doc.dedot.io/sdk/auth')
-    if( !options.accessToken ) throw new Error('Undefined Access Token. Check https://doc.dedot.io/sdk/auth')
-    
-    this.context = options.context
+
+    /**
+     * A workspace context and a bearer token identify a CALLER to de.arch, and
+     * every API client needs both. de.auth answers a different question — who
+     * the PERSON is — and the sign-in flow is what produces a session in the
+     * first place: at `POST /auth/otp/send` there is no workspace to name and
+     * no token to bear.
+     *
+     * Requiring them of every access type meant `OTPAuth` threw in its own
+     * constructor and could never be used for the one thing it exists to do.
+     * That is why de.simulation's bootstrap and Hot's `getUser` both talk to
+     * de.auth over raw fetch, and why nothing ever caught that this client
+     * addressed `/v1/auth/otp` — a route de.auth has never served.
+     */
+    if( atype !== 'ASI' ){
+      if( !options.context ) throw new Error('Undefined Context Reference. Check https://doc.dedot.io/sdk/auth')
+      if( !options.accessToken ) throw new Error('Undefined Access Token. Check https://doc.dedot.io/sdk/auth')
+    }
+
+    this.context = options.context || ''
     this.atype = atype
     this.version = options.version || 1
     this.platform = options.platform || 'proxy'
@@ -168,6 +185,8 @@ export default class AccessManager {
      * look like a workspace being told no, which is precisely the bug that
      * hid `/LSP/invitation/agent` behind a plausible-looking failure.
      */
+    rememberStatus( body, response.status )
+
     if( typeof body?.error !== 'boolean' )
       throw new APIError(
         body?.message || `${options.method} ${url} — ${response.status} ${response.statusText || 'not a De. response'}`,

package/src/allend/LSP/agents.ts

@@ -5,7 +5,10 @@ import type {
 	LSPAgentUpdateValidation,
 	LSPAgentAssignVehicleValidation,
 	LSPAgentUnassignVehicleValidation,
-	LSPAgentRemoveValidation
+	LSPAgentRemoveValidation,
+	LSPAgentEnrolValidation,
+	LSPAgentEnrolmentRetrieveValidation,
+	LSPAgentEnrolmentUpdateValidation
 } from '@de./types/aux/agents'
 import type {
 	LSPConsolidationScheduleValidation,
@@ -22,6 +25,48 @@ import { qs, type Http, type Res, type Data } from '../../utils'
 export default class LSPAgents {
 	constructor( private http: Http ){}
 
+	// ── Self-enrolment ──────────────────────────────────────────────────────
+	//
+	// The invitation flow needs an operator to name each agent, which is right
+	// when a provider picks riders one at a time and wrong for a platform that
+	// already runs its own verification. Enrolment keeps what invitation was
+	// buying — the agent lands in this provider's context, and the provider
+	// agreed to take them — but takes the agreement from a standing policy
+	// instead of a per-person act.
+
+	/** The provider's standing enrolment policy. Operator-scoped. */
+	async enrolmentPolicy(): Promise<LSPAgentEnrolmentRetrieveValidation['response']> {
+		return await this.http.request<LSPAgentEnrolmentRetrieveValidation['response']>({
+			url: '/lsp/agents/enrolment',
+			method: 'GET'
+		})
+	}
+
+	/** Set it. Off unless `enabled` says otherwise. Operator-scoped. */
+	async setEnrolmentPolicy( body: LSPAgentEnrolmentUpdateValidation['body'] ): Promise<LSPAgentEnrolmentUpdateValidation['response']> {
+		return await this.http.request<LSPAgentEnrolmentUpdateValidation['response']>({
+			url: '/lsp/agents/enrolment',
+			method: 'PUT',
+			body
+		})
+	}
+
+	/**
+	 * Join this provider as an agent.
+	 *
+	 * Authorized as the person joining — the uid on the token — so a platform
+	 * enrols on someone's behalf by minting for them, exactly as it would to
+	 * redeem an invitation. `status`, `grade` and the zone come from the
+	 * provider's policy, not from the body.
+	 */
+	async enrol( body: LSPAgentEnrolValidation['body'] ): Promise<LSPAgentEnrolValidation['response']> {
+		return await this.http.request<LSPAgentEnrolValidation['response']>({
+			url: '/lsp/agents/enrolment',
+			method: 'POST',
+			body
+		})
+	}
+
 	async list( querystring?: LSPAgentListValidation['querystring'] ): Promise<LSPAgentListValidation['response']> {
 		return await this.http.request<LSPAgentListValidation['response']>({
 			url: `/lsp/agents${qs( querystring )}`,

package/src/allend/MSI/Handles.ts

@@ -46,13 +46,21 @@ export default class Handles extends EventEmitter {
   /**
    * Create new stream through which user's current location
    * details will be pushed to the API level.
-   * 
-   * @param usertype - (Default: `client`) Type of user at the current location
+   *
+   * This took a `usertype` of `client | agent` and sent it as the payload of
+   * `pin:current:location`. The gateway's handler takes an acknowledgement in
+   * that position and its `geolocator.pin()` takes no arguments at all, so the
+   * value was bound to `callback`, failed the `typeof … == 'function'` test and
+   * was discarded — `myLocation('agent')` and `myLocation('client')` did the
+   * same thing. `Controls.pinCurrentLocation()` emits the same event correctly,
+   * with only the ack. Removed rather than kept as decoration; distinguishing
+   * the marker by user type is a gateway feature that does not exist yet.
+   *
    * @return - Readable stream
    */
-  myLocation( usertype?: 'client' | 'agent' ){
+  myLocation(){
     if( !this.chn ) return
-    this.chn?.emit('pin:current:location', usertype || 'client' )
+    this.chn?.emit('pin:current:location')
 
     const stream = new Stream()
 

package/src/allend/MSI/index.ts

@@ -217,6 +217,26 @@ export default class MSI extends EventEmitter {
    */
   isReady(){ return this.chn && this.isConnected }
 
+  /**
+   * Tear the gateway down.
+   *
+   * Every `load()` adds a `message` listener to the window and an iframe to
+   * the page, and neither went away: a single-page host that mounts a map on
+   * a route accumulated one of each per visit, all of them still parsing
+   * traffic from the gateway. The React Native entry already unwinds this on
+   * unmount; the web entry had no way to.
+   */
+  destroy(){
+    this.chn?.disconnect()
+    this.chn = undefined
+    this.isConnected = false
+
+    const container = document.getElementById( this.element )
+    if( container ) container.innerHTML = ''
+
+    this.removeAllListeners()
+  }
+
   /**
    * Extend the kit's functionalities
    *