@de./sdk 2.1.1 → 2.2.1

package/dist/allend/Agent/realtime.d.ts

@@ -1,24 +1,21 @@
 import type { OrderTrackingEvent } from '@de./types';
 import type { RTLocation, Message, Peer } from '../../types';
-import type { AccessOptions } from '../../types/access';
-import AccessManager from '../Access';
+import RealtimeSocket, { type RealtimeConnectOptions } from '../realtime-socket';
 export type AgentRealtimeContext = {
     wid: string;
     type: string;
     xcode: string;
 };
-export default class AgentRealtime extends AccessManager {
-    private nsp?;
-    private iosHost;
+export default class AgentRealtime extends RealtimeSocket {
     private agentId?;
-    constructor(access: AccessOptions);
-    connect(agentId: string): Promise<void>;
-    disconnect(): boolean;
+    protected get utype(): string;
     /**
-     * Join an order tracking room with a Join Room Token issued by
-     * GET /v1/tracking/:reference (role must match this socket's utype)
+     * @param options  `getToken` supplies a fresh access token per attempt. A
+     *                 rider's phone reconnects constantly and De.'s tokens are
+     *                 short-lived, so without it the socket comes back refused —
+     *                 or, worse, comes back connected and in none of its rooms.
      */
-    join(jrtoken: string): Promise<boolean>;
+    connect(agentId: string, options?: RealtimeConnectOptions): Promise<void>;
     sendLocation(location: RTLocation): this;
     sendMessage(message: Message): this;
     onOrderUpdate(fn: (event: OrderTrackingEvent) => void): this;

package/dist/allend/Agent/realtime.js

@@ -3,50 +3,18 @@ var __importDefault = (this && this.__importDefault) || function (mod) {
     return (mod && mod.__esModule) ? mod : { "default": mod };
 };
 Object.defineProperty(exports, "__esModule", { value: true });
-const socket_io_client_1 = __importDefault(require("socket.io-client"));
-const Access_1 = __importDefault(require("../Access"));
-const baseUrl_1 = require("../../baseUrl");
-class AgentRealtime extends Access_1.default {
-    constructor(access) {
-        var _a;
-        super(access, 'API');
-        // Socket.io is served by the same de.arch API server, so an explicit
-        // origin governs the socket exactly as it governs the requests — without
-        // this, a client pointed at a self-hosted De. still opened its socket
-        // against the environment table's host.
-        this.iosHost = ((_a = access.baseUrl) === null || _a === void 0 ? void 0 : _a.replace(/\/+$/, ''))
-            || (0, baseUrl_1.baseURL)('API', access.env || 'dev', access.devHostname);
-    }
-    connect(agentId) {
-        return new Promise((resolve, reject) => {
-            const auth = {
-                utype: 'agent',
-                id: agentId,
-                remoteOrigin: this.remoteOrigin,
-                accessToken: this.accessToken
-            };
-            this.agentId = agentId;
-            this.nsp = (0, socket_io_client_1.default)(this.iosHost, { auth });
-            this.nsp.on('connect', resolve);
-            this.nsp.on('connect_error', reject);
-        });
-    }
-    disconnect() {
-        var _a;
-        (_a = this.nsp) === null || _a === void 0 ? void 0 : _a.disconnect();
-        return true;
-    }
+const realtime_socket_1 = __importDefault(require("../realtime-socket"));
+class AgentRealtime extends realtime_socket_1.default {
+    get utype() { return 'agent'; }
     /**
-     * Join an order tracking room with a Join Room Token issued by
-     * GET /v1/tracking/:reference (role must match this socket's utype)
+     * @param options  `getToken` supplies a fresh access token per attempt. A
+     *                 rider's phone reconnects constantly and De.'s tokens are
+     *                 short-lived, so without it the socket comes back refused —
+     *                 or, worse, comes back connected and in none of its rooms.
      */
-    join(jrtoken) {
-        return new Promise((resolve, reject) => {
-            var _a;
-            (_a = this.nsp) === null || _a === void 0 ? void 0 : _a.emit('JOIN', jrtoken, (errmess) => {
-                errmess ? reject(new Error(errmess)) : resolve(true);
-            });
-        });
+    connect(agentId, options) {
+        this.agentId = agentId;
+        return this.open(agentId, options);
     }
     // ── Order room streams (after join) ─────────────────────────────────────
     sendLocation(location) {

package/dist/allend/Agent/realtime.js.map

@@ -1 +1 @@
-{"version":3,"file":"realtime.js","sourceRoot":"","sources":["../../../src/allend/Agent/realtime.ts"],"names":[],"mappings":";;;;;AAKA,wEAA6C;AAC7C,uDAAqC;AACrC,2CAAuC;AA2BvC,MAAqB,aAAc,SAAQ,gBAAa;IAKtD,YAAa,MAAqB;;QAChC,KAAK,CAAE,MAAM,EAAE,KAAK,CAAE,CAAA;QAEtB,qEAAqE;QACrE,yEAAyE;QACzE,sEAAsE;QACtE,wCAAwC;QACxC,IAAI,CAAC,OAAO,GAAG,CAAA,MAAA,MAAM,CAAC,OAAO,0CAAE,OAAO,CAAE,MAAM,EAAE,EAAE,CAAE;eACjC,IAAA,iBAAO,EAAC,KAAK,EAAE,MAAM,CAAC,GAAG,IAAI,KAAK,EAAE,MAAM,CAAC,WAAW,CAAE,CAAA;IAC7E,CAAC;IAED,OAAO,CAAE,OAAe;QACtB,OAAO,IAAI,OAAO,CAAE,CAAE,OAAO,EAAE,MAAM,EAAG,EAAE;YACxC,MAAM,IAAI,GAA0B;gBAClC,KAAK,EAAE,OAAO;gBACd,EAAE,EAAE,OAAO;gBACX,YAAY,EAAE,IAAI,CAAC,YAAsB;gBACzC,WAAW,EAAE,IAAI,CAAC,WAAqB;aACxC,CAAA;YAED,IAAI,CAAC,OAAO,GAAG,OAAO,CAAA;YACtB,IAAI,CAAC,GAAG,GAAG,IAAA,0BAAE,EAAE,IAAI,CAAC,OAAO,EAAE,EAAE,IAAI,EAAE,CAAE,CAAA;YACvC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,SAAS,EAAE,OAAO,CAAE,CAAA;YAChC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,eAAe,EAAE,MAAM,CAAE,CAAA;QACvC,CAAC,CAAE,CAAA;IACL,CAAC;IAED,UAAU;;QACR,MAAA,IAAI,CAAC,GAAG,0CAAE,UAAU,EAAE,CAAA;QACtB,OAAO,IAAI,CAAA;IACb,CAAC;IAED;;;OAGG;IACH,IAAI,CAAE,OAAe;QACnB,OAAO,IAAI,OAAO,CAAE,CAAE,OAAO,EAAE,MAAM,EAAG,EAAE;;YACxC,MAAA,IAAI,CAAC,GAAG,0CAAE,IAAI,CAAC,MAAM,EAAE,OAAO,EAAE,CAAE,OAAgB,EAAG,EAAE;gBACrD,OAAO,CAAC,CAAC,CAAC,MAAM,CAAE,IAAI,KAAK,CAAE,OAAO,CAAE,CAAE,CAAC,CAAC,CAAC,OAAO,CAAE,IAAI,CAAE,CAAA;YAC5D,CAAC,CAAE,CAAA;QACL,CAAC,CAAE,CAAA;IACL,CAAC;IAED,2EAA2E;IAE3E,YAAY,CAAE,QAAoB;;QAChC,MAAA,IAAI,CAAC,GAAG,0CAAE,IAAI,CAAC,iBAAiB,EAAE,QAAQ,CAAE,CAAA;QAC5C,OAAO,IAAI,CAAA;IACb,CAAC;IAED,WAAW,CAAE,OAAgB;;QAC3B,MAAA,IAAI,CAAC,GAAG,0CAAE,IAAI,CAAC,SAAS,EAAE,OAAO,CAAE,CAAA;QACnC,OAAO,IAAI,CAAA;IACb,CAAC;IAED,aAAa,CAAE,EAAyC;;QACtD,MAAA,IAAI,CAAC,GAAG,0CAAE,EAAE,CAAC,cAAc,EAAE,EAAE,CAAE,CAAA;QACjC,OAAO,IAAI,CAAA;IACb,CAAC;IAED,SAAS,CAAE,EAAgC;;QACzC,MAAA,IAAI,CAAC,GAAG,0CAAE,EAAE,CAAC,SAAS,EAAE,EAAE,CAAE,CAAA;QAC5B,OAAO,IAAI,CAAA;IACb,CAAC;IAED,WAAW,CAAE,EAA0B;;QACrC,MAAA,IAAI,CAAC,GAAG,0CAAE,EAAE,CAAC,WAAW,EAAE,EAAE,CAAE,CAAA;QAC9B,OAAO,IAAI,CAAA;IACb,CAAC;IAED,cAAc,CAAE,EAA0B;;QACxC,MAAA,IAAI,CAAC,GAAG,0CAAE,EAAE,CAAC,cAAc,EAAE,EAAE,CAAE,CAAA;QACjC,OAAO,IAAI,CAAA;IACb,CAAC;IAED,2EAA2E;IAE3E,gBAAgB,CAAE,OAA6B,EAAE,OAAe;;QAC9D,IAAI,CAAC,IAAI,CAAC,OAAO;YAAG,MAAM,IAAI,KAAK,CAAC,eAAe,CAAC,CAAA;QACpD,MAAA,IAAI,CAAC,GAAG,0CAAE,IAAI,CAAC,mBAAmB,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAE,CAAA;QACjF,OAAO,IAAI,CAAA;IACb,CAAC;IAED,iBAAiB,CAAE,OAA6B,EAAE,OAAe,EAAE,UAAmB;;QACpF,IAAI,CAAC,IAAI,CAAC,OAAO;YAAG,MAAM,IAAI,KAAK,CAAC,eAAe,CAAC,CAAA;QACpD,MAAA,IAAI,CAAC,GAAG,0CAAE,IAAI,CAAC,oBAAoB,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,UAAU,EAAE,CAAE,CAAA;QAC9F,OAAO,IAAI,CAAA;IACb,CAAC;IAED;;;;OAIG;IACH,cAAc,CAAE,OAA6B,EAAE,QAAoB,EAAE,MAAe;;QAClF,IAAI,CAAC,IAAI,CAAC,OAAO;YAAG,MAAM,IAAI,KAAK,CAAC,eAAe,CAAC,CAAA;QACpD,MAAA,IAAI,CAAC,GAAG,0CAAE,IAAI,CAAC,wBAAwB,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAE,CAAA;QAC/F,OAAO,IAAI,CAAA;IACb,CAAC;CACF;AAzGD,gCAyGC"}
+{"version":3,"file":"realtime.js","sourceRoot":"","sources":["../../../src/allend/Agent/realtime.ts"],"names":[],"mappings":";;;;;AAGA,yEAAgF;AA2BhF,MAAqB,aAAc,SAAQ,yBAAc;IAGvD,IAAc,KAAK,KAAa,OAAO,OAAO,CAAA,CAAC,CAAC;IAEhD;;;;;OAKG;IACH,OAAO,CAAE,OAAe,EAAE,OAAgC;QACxD,IAAI,CAAC,OAAO,GAAG,OAAO,CAAA;QACtB,OAAO,IAAI,CAAC,IAAI,CAAE,OAAO,EAAE,OAAO,CAAE,CAAA;IACtC,CAAC;IAED,2EAA2E;IAE3E,YAAY,CAAE,QAAoB;;QAChC,MAAA,IAAI,CAAC,GAAG,0CAAE,IAAI,CAAC,iBAAiB,EAAE,QAAQ,CAAE,CAAA;QAC5C,OAAO,IAAI,CAAA;IACb,CAAC;IAED,WAAW,CAAE,OAAgB;;QAC3B,MAAA,IAAI,CAAC,GAAG,0CAAE,IAAI,CAAC,SAAS,EAAE,OAAO,CAAE,CAAA;QACnC,OAAO,IAAI,CAAA;IACb,CAAC;IAED,aAAa,CAAE,EAAyC;;QACtD,MAAA,IAAI,CAAC,GAAG,0CAAE,EAAE,CAAC,cAAc,EAAE,EAAE,CAAE,CAAA;QACjC,OAAO,IAAI,CAAA;IACb,CAAC;IAED,SAAS,CAAE,EAAgC;;QACzC,MAAA,IAAI,CAAC,GAAG,0CAAE,EAAE,CAAC,SAAS,EAAE,EAAE,CAAE,CAAA;QAC5B,OAAO,IAAI,CAAA;IACb,CAAC;IAED,WAAW,CAAE,EAA0B;;QACrC,MAAA,IAAI,CAAC,GAAG,0CAAE,EAAE,CAAC,WAAW,EAAE,EAAE,CAAE,CAAA;QAC9B,OAAO,IAAI,CAAA;IACb,CAAC;IAED,cAAc,CAAE,EAA0B;;QACxC,MAAA,IAAI,CAAC,GAAG,0CAAE,EAAE,CAAC,cAAc,EAAE,EAAE,CAAE,CAAA;QACjC,OAAO,IAAI,CAAA;IACb,CAAC;IAED,2EAA2E;IAE3E,gBAAgB,CAAE,OAA6B,EAAE,OAAe;;QAC9D,IAAI,CAAC,IAAI,CAAC,OAAO;YAAG,MAAM,IAAI,KAAK,CAAC,eAAe,CAAC,CAAA;QACpD,MAAA,IAAI,CAAC,GAAG,0CAAE,IAAI,CAAC,mBAAmB,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAE,CAAA;QACjF,OAAO,IAAI,CAAA;IACb,CAAC;IAED,iBAAiB,CAAE,OAA6B,EAAE,OAAe,EAAE,UAAmB;;QACpF,IAAI,CAAC,IAAI,CAAC,OAAO;YAAG,MAAM,IAAI,KAAK,CAAC,eAAe,CAAC,CAAA;QACpD,MAAA,IAAI,CAAC,GAAG,0CAAE,IAAI,CAAC,oBAAoB,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,UAAU,EAAE,CAAE,CAAA;QAC9F,OAAO,IAAI,CAAA;IACb,CAAC;IAED;;;;OAIG;IACH,cAAc,CAAE,OAA6B,EAAE,QAAoB,EAAE,MAAe;;QAClF,IAAI,CAAC,IAAI,CAAC,OAAO;YAAG,MAAM,IAAI,KAAK,CAAC,eAAe,CAAC,CAAA;QACpD,MAAA,IAAI,CAAC,GAAG,0CAAE,IAAI,CAAC,wBAAwB,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAE,CAAA;QAC/F,OAAO,IAAI,CAAA;IACb,CAAC;CACF;AAxED,gCAwEC"}

package/dist/allend/Realtime/index.d.ts

@@ -1,13 +1,40 @@
-import type { Peer } from '../../types';
-import type { AccessOptions } from '../../types/access';
-import AccessManager from '../Access';
-export default class Realtime extends AccessManager {
-    private nsp?;
-    private iosHost;
-    constructor(access: AccessOptions);
-    connect(clientId: string): Promise<void>;
-    disconnect(): boolean;
-    join(jrtoken: string): Promise<boolean>;
+import type { OrderTrackingEvent } from '@de./types';
+import type { RTLocation, Message, Peer } from '../../types';
+import RealtimeSocket, { type RealtimeConnectOptions } from '../realtime-socket';
+/**
+ * Who this connection is, in De.'s vocabulary.
+ *
+ * A client is the party that engaged the provider — a CSP, a merchant, a
+ * branch. A customer is the person the delivery is handed to. They are not
+ * the same party and De. does not put them in the same room, so a customer
+ * app connecting as 'client' hears nothing addressed to customers and cannot
+ * redeem a customer's tracking token.
+ */
+export type RealtimeUserType = 'client' | 'customer' | 'vendor';
+export default class Realtime extends RealtimeSocket {
+    private as;
+    protected get utype(): string;
+    /**
+     * @param id       The uid the tracking session was issued for.
+     * @param utype    Must equal the `role` that session was issued with.
+     * @param options  `getToken` supplies a fresh access token per attempt —
+     *                 without it a reconnect after the token's short life is
+     *                 refused, and the app is left with an open socket that
+     *                 delivers nothing.
+     */
+    connect(id: string, utype?: RealtimeUserType, options?: RealtimeConnectOptions): Promise<void>;
+    /**
+     * The rider's position, as it moves.
+     *
+     * Rate-limited by De. to 10 per second per sender, so this is a stream and
+     * not a trickle: render from it directly rather than re-fetching anything.
+     */
+    onLocation(fn: (location: RTLocation) => void): this;
+    onRoute(fn: (route: any) => void): this;
+    onOrderUpdate(fn: (event: OrderTrackingEvent) => void): this;
+    onMessage(fn: (message: Message) => void): this;
+    sendMessage(message: Message): this;
+    onJoined(fn: (peer: Peer) => void): this;
     onLeft(fn: (peer: Peer) => void): this;
     onConnected(fn: (peer: Peer) => void): this;
     onDisconnected(fn: (peer: Peer) => void): this;

package/dist/allend/Realtime/index.js

@@ -3,44 +3,62 @@ var __importDefault = (this && this.__importDefault) || function (mod) {
     return (mod && mod.__esModule) ? mod : { "default": mod };
 };
 Object.defineProperty(exports, "__esModule", { value: true });
-const socket_io_client_1 = __importDefault(require("socket.io-client"));
-const Access_1 = __importDefault(require("../Access"));
-const baseUrl_1 = require("../../baseUrl");
-class Realtime extends Access_1.default {
-    constructor(access) {
-        var _a;
-        super(access, 'API');
-        // Socket server host
-        // An explicit origin governs the socket as it governs the requests.
-        this.iosHost = ((_a = access.baseUrl) === null || _a === void 0 ? void 0 : _a.replace(/\/+$/, ''))
-            || (0, baseUrl_1.baseURL)('RTS', access.env, access.devHostname);
-    }
-    connect(clientId) {
-        return new Promise((resolve, reject) => {
-            // Connect to main clients namespace
-            const auth = {
-                utype: 'client',
-                id: clientId,
-                remoteOrigin: (globalThis === null || globalThis === void 0 ? void 0 : globalThis.window) ? globalThis.origin : this.remoteOrigin,
-                accessToken: this.accessToken
-            };
-            this.nsp = (0, socket_io_client_1.default)(this.iosHost, { auth });
-            this.nsp.on('connect', resolve);
-            this.nsp.on('connect_error', reject);
-        });
-    }
-    disconnect() {
-        var _a;
-        (_a = this.nsp) === null || _a === void 0 ? void 0 : _a.disconnect();
-        return true;
-    }
-    join(jrtoken) {
-        return new Promise((resolve, reject) => {
-            var _a;
-            (_a = this.nsp) === null || _a === void 0 ? void 0 : _a.emit('JOIN', jrtoken, (errmess) => {
-                errmess ? reject(new Error(errmess)) : resolve(true);
-            });
-        });
+const realtime_socket_1 = __importDefault(require("../realtime-socket"));
+class Realtime extends realtime_socket_1.default {
+    constructor() {
+        super(...arguments);
+        this.as = 'client';
+    }
+    get utype() { return this.as; }
+    /**
+     * @param id       The uid the tracking session was issued for.
+     * @param utype    Must equal the `role` that session was issued with.
+     * @param options  `getToken` supplies a fresh access token per attempt —
+     *                 without it a reconnect after the token's short life is
+     *                 refused, and the app is left with an open socket that
+     *                 delivers nothing.
+     */
+    connect(id, utype = 'client', options) {
+        this.as = utype;
+        return this.open(id, options);
+    }
+    // ── Order room streams (after join) ─────────────────────────────────────
+    /**
+     * The rider's position, as it moves.
+     *
+     * Rate-limited by De. to 10 per second per sender, so this is a stream and
+     * not a trickle: render from it directly rather than re-fetching anything.
+     */
+    onLocation(fn) {
+        var _a;
+        (_a = this.nsp) === null || _a === void 0 ? void 0 : _a.on('LOCATION-CHANGE', fn);
+        return this;
+    }
+    onRoute(fn) {
+        var _a;
+        (_a = this.nsp) === null || _a === void 0 ? void 0 : _a.on('ROUTE-CHANGE', fn);
+        return this;
+    }
+    onOrderUpdate(fn) {
+        var _a;
+        (_a = this.nsp) === null || _a === void 0 ? void 0 : _a.on('ORDER_UPDATE', fn);
+        return this;
+    }
+    onMessage(fn) {
+        var _a;
+        (_a = this.nsp) === null || _a === void 0 ? void 0 : _a.on('MESSAGE', fn);
+        return this;
+    }
+    sendMessage(message) {
+        var _a;
+        (_a = this.nsp) === null || _a === void 0 ? void 0 : _a.emit('MESSAGE', message);
+        return this;
+    }
+    // ── Presence ────────────────────────────────────────────────────────────
+    onJoined(fn) {
+        var _a;
+        (_a = this.nsp) === null || _a === void 0 ? void 0 : _a.on('JOINED', fn);
+        return this;
     }
     onLeft(fn) {
         var _a;

package/dist/allend/Realtime/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/allend/Realtime/index.ts"],"names":[],"mappings":";;;;;AAIA,wEAA6C;AAC7C,uDAAqC;AACrC,2CAAuC;AAEvC,MAAqB,QAAS,SAAQ,gBAAa;IAIjD,YAAa,MAAqB;;QAChC,KAAK,CAAE,MAAM,EAAE,KAAK,CAAE,CAAA;QACtB,qBAAqB;QACrB,oEAAoE;QACpE,IAAI,CAAC,OAAO,GAAG,CAAA,MAAA,MAAM,CAAC,OAAO,0CAAE,OAAO,CAAE,MAAM,EAAE,EAAE,CAAE;eACjC,IAAA,iBAAO,EAAC,KAAK,EAAE,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,WAAW,CAAE,CAAA;IACpE,CAAC;IAED,OAAO,CAAE,QAAgB;QACvB,OAAO,IAAI,OAAO,CAAE,CAAE,OAAO,EAAE,MAAM,EAAG,EAAE;YACxC,oCAAoC;YACpC,MAAM,IAAI,GAA0B;gBAClC,KAAK,EAAE,QAAQ;gBACf,EAAE,EAAE,QAAQ;gBACZ,YAAY,EAAE,CAAA,UAAU,aAAV,UAAU,uBAAV,UAAU,CAAE,MAAM,EAAC,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,YAAsB;gBAClF,WAAW,EAAE,IAAI,CAAC,WAAqB;aACxC,CAAA;YAED,IAAI,CAAC,GAAG,GAAG,IAAA,0BAAE,EAAE,IAAI,CAAC,OAAO,EAAE,EAAE,IAAI,EAAE,CAAE,CAAA;YACvC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,SAAS,EAAE,OAAO,CAAE,CAAA;YAChC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,eAAe,EAAE,MAAM,CAAE,CAAA;QACvC,CAAC,CAAE,CAAA;IACL,CAAC;IACD,UAAU;;QACR,MAAA,IAAI,CAAC,GAAG,0CAAE,UAAU,EAAE,CAAA;QACtB,OAAO,IAAI,CAAA;IACb,CAAC;IACD,IAAI,CAAE,OAAe;QACnB,OAAO,IAAI,OAAO,CAAE,CAAE,OAAO,EAAE,MAAM,EAAG,EAAE;;YACxC,MAAA,IAAI,CAAC,GAAG,0CAAE,IAAI,CAAC,MAAM,EAAE,OAAO,EAAE,CAAE,OAAgB,EAAG,EAAE;gBACrD,OAAO,CAAC,CAAC,CAAC,MAAM,CAAE,IAAI,KAAK,CAAE,OAAO,CAAE,CAAE,CAAC,CAAC,CAAC,OAAO,CAAE,IAAI,CAAE,CAAA;YAC5D,CAAC,CAAE,CAAA;QACL,CAAC,CAAE,CAAA;IACL,CAAC;IAED,MAAM,CAAE,EAA0B;;QAChC,MAAA,IAAI,CAAC,GAAG,0CAAE,EAAE,CAAC,MAAM,EAAE,EAAE,CAAE,CAAA;QACzB,OAAO,IAAI,CAAA;IACb,CAAC;IACD,WAAW,CAAE,EAA0B;;QACrC,MAAA,IAAI,CAAC,GAAG,0CAAE,EAAE,CAAC,WAAW,EAAE,EAAE,CAAE,CAAA;QAC9B,OAAO,IAAI,CAAA;IACb,CAAC;IACD,cAAc,CAAE,EAA0B;;QACxC,MAAA,IAAI,CAAC,GAAG,0CAAE,EAAE,CAAC,cAAc,EAAE,EAAE,CAAE,CAAA;QACjC,OAAO,IAAI,CAAA;IACb,CAAC;CAkBF;AApED,2BAoEC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/allend/Realtime/index.ts"],"names":[],"mappings":";;;;;AAGA,yEAAgF;AAoChF,MAAqB,QAAS,SAAQ,yBAAc;IAApD;;QACU,OAAE,GAAqB,QAAQ,CAAA;IAoEzC,CAAC;IAlEC,IAAc,KAAK,KAAa,OAAO,IAAI,CAAC,EAAE,CAAA,CAAC,CAAC;IAEhD;;;;;;;OAOG;IACH,OAAO,CAAE,EAAU,EAAE,QAA0B,QAAQ,EAAE,OAAgC;QACvF,IAAI,CAAC,EAAE,GAAG,KAAK,CAAA;QACf,OAAO,IAAI,CAAC,IAAI,CAAE,EAAE,EAAE,OAAO,CAAE,CAAA;IACjC,CAAC;IAED,2EAA2E;IAE3E;;;;;OAKG;IACH,UAAU,CAAE,EAAoC;;QAC9C,MAAA,IAAI,CAAC,GAAG,0CAAE,EAAE,CAAC,iBAAiB,EAAE,EAAE,CAAE,CAAA;QACpC,OAAO,IAAI,CAAA;IACb,CAAC;IAED,OAAO,CAAE,EAA0B;;QACjC,MAAA,IAAI,CAAC,GAAG,0CAAE,EAAE,CAAC,cAAc,EAAE,EAAE,CAAE,CAAA;QACjC,OAAO,IAAI,CAAA;IACb,CAAC;IAED,aAAa,CAAE,EAAyC;;QACtD,MAAA,IAAI,CAAC,GAAG,0CAAE,EAAE,CAAC,cAAc,EAAE,EAAE,CAAE,CAAA;QACjC,OAAO,IAAI,CAAA;IACb,CAAC;IAED,SAAS,CAAE,EAAgC;;QACzC,MAAA,IAAI,CAAC,GAAG,0CAAE,EAAE,CAAC,SAAS,EAAE,EAAE,CAAE,CAAA;QAC5B,OAAO,IAAI,CAAA;IACb,CAAC;IAED,WAAW,CAAE,OAAgB;;QAC3B,MAAA,IAAI,CAAC,GAAG,0CAAE,IAAI,CAAC,SAAS,EAAE,OAAO,CAAE,CAAA;QACnC,OAAO,IAAI,CAAA;IACb,CAAC;IAED,2EAA2E;IAE3E,QAAQ,CAAE,EAA0B;;QAClC,MAAA,IAAI,CAAC,GAAG,0CAAE,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAE,CAAA;QAC3B,OAAO,IAAI,CAAA;IACb,CAAC;IACD,MAAM,CAAE,EAA0B;;QAChC,MAAA,IAAI,CAAC,GAAG,0CAAE,EAAE,CAAC,MAAM,EAAE,EAAE,CAAE,CAAA;QACzB,OAAO,IAAI,CAAA;IACb,CAAC;IACD,WAAW,CAAE,EAA0B;;QACrC,MAAA,IAAI,CAAC,GAAG,0CAAE,EAAE,CAAC,WAAW,EAAE,EAAE,CAAE,CAAA;QAC9B,OAAO,IAAI,CAAA;IACb,CAAC;IACD,cAAc,CAAE,EAA0B;;QACxC,MAAA,IAAI,CAAC,GAAG,0CAAE,EAAE,CAAC,cAAc,EAAE,EAAE,CAAE,CAAA;QACjC,OAAO,IAAI,CAAA;IACb,CAAC;CACF;AArED,2BAqEC"}

package/dist/allend/realtime-socket.d.ts

@@ -0,0 +1,61 @@
+import type { AccessOptions } from '../types/access';
+import { Socket } from 'socket.io-client';
+import AccessManager from './Access';
+export type RealtimeConnectOptions = {
+    /**
+     * A fresh access token for each connection attempt.
+     *
+     * An app holds tokens it was given rather than credentials it can mint, so
+     * this is usually "ask my backend for a new tracking session". Omitted, the
+     * token this client was constructed with is used on every attempt, which is
+     * correct only for a process that rotates it in place.
+     */
+    getToken?: () => string | Promise<string>;
+};
+export default abstract class RealtimeSocket extends AccessManager {
+    protected nsp?: Socket;
+    protected iosHost: string;
+    protected id?: string;
+    /**
+     * Every room this socket asked to be in, by the token that got it there.
+     *
+     * Kept so a reconnect can restore them. A JRT outlives an ordinary blip, so
+     * replaying it is right; when one has expired the rejoin fails and
+     * `onRejoinError` is how the app learns to ask for a new session rather than
+     * sitting on a silent connection.
+     */
+    private rooms;
+    private rejoinError?;
+    constructor(access: AccessOptions);
+    /** The `utype` this client connects as. Must match the JRT's `role`. */
+    protected abstract get utype(): string;
+    protected open(id: string, options?: RealtimeConnectOptions): Promise<void>;
+    /** Re-enter every room this socket was in before the connection dropped. */
+    private restore;
+    /**
+     * Enter an order room with a Join Room Token from
+     * `GET /v1/tracking/:reference?role=…`.
+     */
+    join(jrtoken: string): Promise<boolean>;
+    /** Stop replaying a room — the order is closed, or the app navigated away. */
+    leave(jrtoken: string): void;
+    /**
+     * A room could not be re-entered after a reconnect.
+     *
+     * Almost always an expired JRT. The app's answer is to ask its backend for a
+     * fresh tracking session and `join` again — and, since it is reconnecting,
+     * to `replay` from the `since` that came with it.
+     */
+    onRejoinError(fn: (error: Error) => void): this;
+    /** Fires on every reconnect, which is where a client should replay its gap. */
+    onReconnect(fn: () => void): this;
+    disconnect(): boolean;
+    /**
+     * Ask for everything a room emitted while this socket was away.
+     *
+     * `since` is the timestamp the tracking session came back with, or that of
+     * the last event actually seen. Reconnecting without it leaves a hole
+     * exactly as long as the outage.
+     */
+    replay(reference: string, since: number): this;
+}

package/dist/allend/realtime-socket.js

@@ -0,0 +1,122 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+const socket_io_client_1 = __importDefault(require("socket.io-client"));
+const Access_1 = __importDefault(require("./Access"));
+const baseUrl_1 = require("../baseUrl");
+class RealtimeSocket extends Access_1.default {
+    constructor(access) {
+        var _a;
+        super(access, 'API');
+        /**
+         * Every room this socket asked to be in, by the token that got it there.
+         *
+         * Kept so a reconnect can restore them. A JRT outlives an ordinary blip, so
+         * replaying it is right; when one has expired the rejoin fails and
+         * `onRejoinError` is how the app learns to ask for a new session rather than
+         * sitting on a silent connection.
+         */
+        this.rooms = new Set();
+        // Socket.io is served by the same de.arch API server, so an explicit
+        // origin governs the socket exactly as it governs the requests.
+        this.iosHost = ((_a = access.baseUrl) === null || _a === void 0 ? void 0 : _a.replace(/\/+$/, ''))
+            || (0, baseUrl_1.baseURL)('API', access.env || 'dev', access.devHostname);
+    }
+    open(id, options = {}) {
+        this.id = id;
+        return new Promise((resolve, reject) => {
+            const credentials = async () => ({
+                utype: this.utype,
+                id,
+                remoteOrigin: (globalThis === null || globalThis === void 0 ? void 0 : globalThis.window) ? globalThis.origin : this.remoteOrigin,
+                accessToken: options.getToken ? await options.getToken() : this.accessToken
+            });
+            this.nsp = (0, socket_io_client_1.default)(this.iosHost, {
+                // The function form — re-evaluated before every attempt, which is the
+                // whole point. The object form is read once, at construction.
+                auth: (cb) => {
+                    credentials()
+                        .then(cb)
+                        // A token the app could not fetch is still an attempt: let De.
+                        // refuse it and surface a connect_error, rather than hanging.
+                        .catch(() => cb({ utype: this.utype, id }));
+                }
+            });
+            this.nsp.on('connect', () => {
+                this.restore();
+                resolve();
+            });
+            this.nsp.on('connect_error', reject);
+        });
+    }
+    /** Re-enter every room this socket was in before the connection dropped. */
+    restore() {
+        var _a;
+        for (const jrtoken of this.rooms)
+            (_a = this.nsp) === null || _a === void 0 ? void 0 : _a.emit('JOIN', jrtoken, (errmess) => {
+                var _a;
+                if (!errmess)
+                    return;
+                this.rooms.delete(jrtoken);
+                (_a = this.rejoinError) === null || _a === void 0 ? void 0 : _a.call(this, new Error(errmess));
+            });
+    }
+    /**
+     * Enter an order room with a Join Room Token from
+     * `GET /v1/tracking/:reference?role=…`.
+     */
+    join(jrtoken) {
+        return new Promise((resolve, reject) => {
+            var _a;
+            (_a = this.nsp) === null || _a === void 0 ? void 0 : _a.emit('JOIN', jrtoken, (errmess) => {
+                if (errmess)
+                    return reject(new Error(errmess));
+                this.rooms.add(jrtoken);
+                resolve(true);
+            });
+        });
+    }
+    /** Stop replaying a room — the order is closed, or the app navigated away. */
+    leave(jrtoken) {
+        this.rooms.delete(jrtoken);
+    }
+    /**
+     * A room could not be re-entered after a reconnect.
+     *
+     * Almost always an expired JRT. The app's answer is to ask its backend for a
+     * fresh tracking session and `join` again — and, since it is reconnecting,
+     * to `replay` from the `since` that came with it.
+     */
+    onRejoinError(fn) {
+        this.rejoinError = fn;
+        return this;
+    }
+    /** Fires on every reconnect, which is where a client should replay its gap. */
+    onReconnect(fn) {
+        var _a;
+        (_a = this.nsp) === null || _a === void 0 ? void 0 : _a.io.on('reconnect', fn);
+        return this;
+    }
+    disconnect() {
+        var _a;
+        this.rooms.clear();
+        (_a = this.nsp) === null || _a === void 0 ? void 0 : _a.disconnect();
+        return true;
+    }
+    /**
+     * Ask for everything a room emitted while this socket was away.
+     *
+     * `since` is the timestamp the tracking session came back with, or that of
+     * the last event actually seen. Reconnecting without it leaves a hole
+     * exactly as long as the outage.
+     */
+    replay(reference, since) {
+        var _a;
+        (_a = this.nsp) === null || _a === void 0 ? void 0 : _a.emit('REPLAY', { room: `order:${reference}`, since });
+        return this;
+    }
+}
+exports.default = RealtimeSocket;
+//# sourceMappingURL=realtime-socket.js.map

package/dist/allend/realtime-socket.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"realtime-socket.js","sourceRoot":"","sources":["../../src/allend/realtime-socket.ts"],"names":[],"mappings":";;;;;AAGA,wEAA6C;AAC7C,sDAAoC;AACpC,wCAAoC;AAwCpC,MAA8B,cAAe,SAAQ,gBAAa;IAgBhE,YAAa,MAAqB;;QAChC,KAAK,CAAE,MAAM,EAAE,KAAK,CAAE,CAAA;QAZxB;;;;;;;WAOG;QACK,UAAK,GAAG,IAAI,GAAG,EAAU,CAAA;QAM/B,qEAAqE;QACrE,gEAAgE;QAChE,IAAI,CAAC,OAAO,GAAG,CAAA,MAAA,MAAM,CAAC,OAAO,0CAAE,OAAO,CAAE,MAAM,EAAE,EAAE,CAAE;eACjC,IAAA,iBAAO,EAAC,KAAK,EAAE,MAAM,CAAC,GAAG,IAAI,KAAK,EAAE,MAAM,CAAC,WAAW,CAAE,CAAA;IAC7E,CAAC;IAKS,IAAI,CAAE,EAAU,EAAE,UAAkC,EAAE;QAC9D,IAAI,CAAC,EAAE,GAAG,EAAE,CAAA;QAEZ,OAAO,IAAI,OAAO,CAAE,CAAE,OAAO,EAAE,MAAM,EAAG,EAAE;YACxC,MAAM,WAAW,GAAG,KAAK,IAAoC,EAAE,CAAC,CAAC;gBAC/D,KAAK,EAAS,IAAI,CAAC,KAAK;gBACxB,EAAE;gBACF,YAAY,EAAE,CAAA,UAAU,aAAV,UAAU,uBAAV,UAAU,CAAE,MAAM,EAAC,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,YAAsB;gBAClF,WAAW,EAAG,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,WAAqB;aACvF,CAAC,CAAA;YAEF,IAAI,CAAC,GAAG,GAAG,IAAA,0BAAE,EAAE,IAAI,CAAC,OAAO,EAAE;gBAC3B,sEAAsE;gBACtE,8DAA8D;gBAC9D,IAAI,EAAE,CAAE,EAAyB,EAAG,EAAE;oBACpC,WAAW,EAAE;yBACV,IAAI,CAAE,EAAE,CAAE;wBACX,+DAA+D;wBAC/D,8DAA8D;yBAC7D,KAAK,CAAE,GAAG,EAAE,CAAC,EAAE,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,EAAE,EAAE,CAAC,CAAE,CAAA;gBACjD,CAAC;aACF,CAAC,CAAA;YAEF,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE;gBAC1B,IAAI,CAAC,OAAO,EAAE,CAAA;gBACd,OAAO,EAAE,CAAA;YACX,CAAC,CAAC,CAAA;YACF,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,eAAe,EAAE,MAAM,CAAE,CAAA;QACvC,CAAC,CAAC,CAAA;IACJ,CAAC;IAED,4EAA4E;IACpE,OAAO;;QACb,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,KAAK;YAC9B,MAAA,IAAI,CAAC,GAAG,0CAAE,IAAI,CAAC,MAAM,EAAE,OAAO,EAAE,CAAE,OAAgB,EAAG,EAAE;;gBACrD,IAAI,CAAC,OAAO;oBAAG,OAAM;gBAErB,IAAI,CAAC,KAAK,CAAC,MAAM,CAAE,OAAO,CAAE,CAAA;gBAC5B,MAAA,IAAI,CAAC,WAAW,qDAAI,IAAI,KAAK,CAAE,OAAO,CAAE,CAAE,CAAA;YAC5C,CAAC,CAAC,CAAA;IACN,CAAC;IAED;;;OAGG;IACH,IAAI,CAAE,OAAe;QACnB,OAAO,IAAI,OAAO,CAAE,CAAE,OAAO,EAAE,MAAM,EAAG,EAAE;;YACxC,MAAA,IAAI,CAAC,GAAG,0CAAE,IAAI,CAAC,MAAM,EAAE,OAAO,EAAE,CAAE,OAAgB,EAAG,EAAE;gBACrD,IAAI,OAAO;oBAAG,OAAO,MAAM,CAAE,IAAI,KAAK,CAAE,OAAO,CAAE,CAAE,CAAA;gBAEnD,IAAI,CAAC,KAAK,CAAC,GAAG,CAAE,OAAO,CAAE,CAAA;gBACzB,OAAO,CAAE,IAAI,CAAE,CAAA;YACjB,CAAC,CAAC,CAAA;QACJ,CAAC,CAAC,CAAA;IACJ,CAAC;IAED,8EAA8E;IAC9E,KAAK,CAAE,OAAe;QACpB,IAAI,CAAC,KAAK,CAAC,MAAM,CAAE,OAAO,CAAE,CAAA;IAC9B,CAAC;IAED;;;;;;OAMG;IACH,aAAa,CAAE,EAA4B;QACzC,IAAI,CAAC,WAAW,GAAG,EAAE,CAAA;QACrB,OAAO,IAAI,CAAA;IACb,CAAC;IAED,+EAA+E;IAC/E,WAAW,CAAE,EAAc;;QACzB,MAAA,IAAI,CAAC,GAAG,0CAAE,EAAE,CAAC,EAAE,CAAC,WAAW,EAAE,EAAE,CAAE,CAAA;QACjC,OAAO,IAAI,CAAA;IACb,CAAC;IAED,UAAU;;QACR,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAA;QAClB,MAAA,IAAI,CAAC,GAAG,0CAAE,UAAU,EAAE,CAAA;QACtB,OAAO,IAAI,CAAA;IACb,CAAC;IAED;;;;;;OAMG;IACH,MAAM,CAAE,SAAiB,EAAE,KAAa;;QACtC,MAAA,IAAI,CAAC,GAAG,0CAAE,IAAI,CAAC,QAAQ,EAAE,EAAE,IAAI,EAAE,SAAS,SAAS,EAAE,EAAE,KAAK,EAAE,CAAC,CAAA;QAC/D,OAAO,IAAI,CAAA;IACb,CAAC;CACF;AA7HD,iCA6HC"}

package/dist/backend/Auth.d.ts

@@ -14,7 +14,20 @@ export type AuthConfig = {
      * credentials are. Omit it for pure machine-to-machine access.
      */
     uid?: string;
+    /**
+     * Rotate the token ahead of expiry.
+     *
+     * Off by default, which is the trap: a long-lived process that forgets it
+     * works perfectly until the first expiry and then fails every call until
+     * it is restarted. Anything holding a token for longer than one request
+     * wants this on.
+     */
     autorefresh?: boolean;
+    /**
+     * Minutes between rotations. Defaults to 3.75 — set it below the De.
+     * deployment's `API_ACCESS_TOKEN_EXPIRY` when that is not the default 4.
+     */
+    rotateAfterMins?: number;
     onNewToken?: (token: string) => void;
     /** Host to substitute for `localhost` in `dev` (Eg. a native emulator) */
     devHostname?: string;
@@ -29,6 +42,7 @@ export default class Auth {
     private remoteOrigin?;
     private refreshTimer?;
     private autorefresh?;
+    private rotateAfterMins;
     private onNewToken?;
     private baseURL;
     private isRotating;

package/dist/backend/Auth.js

@@ -1,7 +1,18 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 const baseUrl_1 = require("../baseUrl");
-const ACCESS_TOKEN_EXPIRY = 3.75; // in 3 minutes 45 seconds
+/**
+ * When to rotate, in minutes.
+ *
+ * De.'s own default token life is four minutes, so this beats it by fifteen
+ * seconds. It is a default and not a constant because the server's life is
+ * configurable — `API_ACCESS_TOKEN_EXPIRY` — and these two numbers are
+ * otherwise free to drift apart in the direction that breaks: a deployment
+ * that shortens the token to two minutes leaves every client rotating a
+ * credential that expired ninety seconds ago, and every call in between is
+ * answered 401 with nothing to say why.
+ */
+const ACCESS_TOKEN_EXPIRY = 3.75;
 class Auth {
     constructor(config) {
         this.isRotating = false;
@@ -22,6 +33,9 @@ class Auth {
         this.version = config.version || 1;
         this.baseURL = (0, baseUrl_1.baseURL)('API', this.env, config.devHostname);
         this.autorefresh = config.autorefresh || false;
+        this.rotateAfterMins = config.rotateAfterMins && config.rotateAfterMins > 0
+            ? config.rotateAfterMins
+            : ACCESS_TOKEN_EXPIRY;
         this.onNewToken = config.onNewToken;
     }
     async request({ url, ...options }) {
@@ -57,7 +71,7 @@ class Auth {
         if (!this.autorefresh)
             return;
         this.clearRotation();
-        this.refreshTimer = setTimeout(() => this.rotateToken(), ACCESS_TOKEN_EXPIRY * 60 * 1000);
+        this.refreshTimer = setTimeout(() => this.rotateToken(), this.rotateAfterMins * 60 * 1000);
     }
     /**
      * Clear rotation timer

package/dist/backend/Auth.js.map

@@ -1 +1 @@
-{"version":3,"file":"Auth.js","sourceRoot":"","sources":["../../src/backend/Auth.ts"],"names":[],"mappings":";;AAAA,wCAAoC;AAGpC,MAAM,mBAAmB,GAAG,IAAI,CAAA,CAAC,0BAA0B;AAwC3D,MAAqB,IAAI;IAevB,YAAa,MAAkB;QAHvB,eAAU,GAAY,KAAK,CAAA;QAIjC,IAAI,CAAC,MAAM;YAAW,MAAM,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAA;QAC9F,IAAI,CAAC,MAAM,CAAC,OAAO;YAAG,MAAM,IAAI,KAAK,CAAC,wDAAwD,CAAC,CAAA;QAC/F,IAAI,CAAC,MAAM,CAAC,GAAG;YAAO,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAA;QAC3F,IAAI,CAAC,MAAM,CAAC,MAAM;YAAI,MAAM,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAA;QAE9F,IAAI,CAAC,OAAO,GAAQ,MAAM,CAAC,OAAO,CAAA;QAClC,IAAI,CAAC,GAAG,GAAY,MAAM,CAAC,GAAG,CAAA;QAC9B,IAAI,CAAC,GAAG,GAAY,MAAM,CAAC,GAAG,CAAA;QAC9B,IAAI,CAAC,MAAM,GAAS,MAAM,CAAC,MAAM,CAAA;QACjC,IAAI,CAAC,YAAY,GAAG,MAAM,CAAC,YAAY,CAAA;QACvC,IAAI,CAAC,GAAG,GAAY,MAAM,CAAC,GAAG,IAAI,KAAK,CAAA;QACvC,IAAI,CAAC,OAAO,GAAQ,MAAM,CAAC,OAAO,IAAI,CAAC,CAAA;QACvC,IAAI,CAAC,OAAO,GAAQ,IAAA,iBAAO,EAAC,KAAK,EAAE,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC,WAAW,CAAE,CAAA;QACjE,IAAI,CAAC,WAAW,GAAI,MAAM,CAAC,WAAW,IAAI,KAAK,CAAA;QAC/C,IAAI,CAAC,UAAU,GAAK,MAAM,CAAC,UAAU,CAAA;IACvC,CAAC;IAEO,KAAK,CAAC,OAAO,CAAI,EAAE,GAAG,EAAE,GAAG,OAAO,EAAsB;QAC9D,MAAM,UAAU,GAAQ;YACtB,MAAM,EAAE,KAAK;YACb,OAAO,EAAE;gBACP,QAAQ,EAAE,IAAI,CAAC,YAAY;gBAC3B,eAAe,EAAE,aAAa,IAAI,CAAC,OAAO,IAAI;aAC/C;SACF,CAAA;QAED,IAAI,IAAI,CAAC,WAAW;YAClB,UAAU,CAAC,OAAO,CAAC,aAAa,GAAG,UAAU,IAAI,CAAC,WAAW,EAAE,CAAA;QAEjE,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;YACjB,UAAU,CAAC,OAAO,CAAC,cAAc,CAAC,GAAG,kBAAkB,CAAA;YACvD,IAAI,OAAO,OAAO,CAAC,IAAI,KAAK,QAAQ;gBAClC,OAAO,CAAC,IAAI,GAAG,IAAI,CAAC,SAAS,CAAE,OAAO,CAAC,IAAI,CAAE,CAAA;QACjD,CAAC;QAED,OAAO,GAAG,EAAE,GAAG,UAAU,EAAE,GAAG,OAAO,EAAE,CAAA;QAEvC,IAAI,CAAC,KAAK,CAAC,cAAc,EAAE,GAAG,IAAI,CAAC,OAAO,KAAK,IAAI,CAAC,OAAO,IAAI,GAAG,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,EAAE,EAAE,OAAO,CAAE,CAAA;QAClG,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,IAAI,CAAC,OAAO,KAAK,IAAI,CAAC,OAAO,IAAI,GAAG,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,EAAE,EAAE,OAAO,CAAE,CAAA;QAEpG,OAAO,MAAM,QAAQ,CAAC,IAAI,EAAO,CAAA;IACnC,CAAC;IAEO,KAAK,CAAE,GAAG,IAAW;QAC3B,IAAI,CAAC,GAAG,KAAK,KAAK,IAAI,OAAO,CAAC,KAAK,CAAC,QAAQ,EAAE,GAAG,IAAI,CAAE,CAAA;IACzD,CAAC;IACO,KAAK,CAAE,GAAG,IAAW;QAC3B,OAAO,CAAC,KAAK,CAAC,QAAQ,EAAE,GAAG,IAAI,CAAE,CAAA;IACnC,CAAC;IAED;;OAEG;IACK,gBAAgB;QACtB,IAAI,CAAC,IAAI,CAAC,WAAW;YAAG,OAAM;QAE9B,IAAI,CAAC,aAAa,EAAE,CAAA;QACpB,IAAI,CAAC,YAAY,GAAG,UAAU,CAAE,GAAG,EAAE,CAAC,IAAI,CAAC,WAAW,EAAE,EAAE,mBAAmB,GAAG,EAAE,GAAG,IAAI,CAAE,CAAA;IAC7F,CAAC;IAED;;OAEG;IACK,aAAa;QACnB,IAAI,CAAC,IAAI,CAAC,YAAY;YAAG,OAAM;QAE/B,YAAY,CAAE,IAAI,CAAC,YAAY,CAAE,CAAA;QACjC,IAAI,CAAC,YAAY,GAAG,SAAS,CAAA;IAC/B,CAAC;IAED,KAAK,CAAC,QAAQ;QACZ,MACA,OAAO,GAAuB;YAC5B,GAAG,EAAE,eAAe;YACpB,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,YAAY,EAAE,IAAI,CAAC,YAAY,EAAE,GAAG,CAAE,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAE,EAAE;SAC/I,EACD,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,MAAM,IAAI,CAAC,OAAO,CAAgB,OAAO,CAAE,CAAA;QACtE,IAAI,KAAK;YAAG,MAAM,IAAI,KAAK,CAAE,OAAO,CAAE,CAAA;QAEtC,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,KAAK,CAAA;QAC7B,IAAI,CAAC,gBAAgB,EAAE,CAAA,CAAC,wBAAwB;QAEhD,OAAO,IAAI,CAAC,KAAK,CAAA;IACnB,CAAC;IAED,KAAK,CAAC,WAAW;QACf,uCAAuC;QACvC,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;YACpB,IAAI,CAAC,KAAK,CAAC,8CAA8C,CAAC,CAAA;YAC1D,OAAO,IAAI,CAAC,WAAY,CAAA;QAC1B,CAAC;QAED,IAAI,CAAC,IAAI,CAAC,WAAW;YACnB,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAA;QAE1C,IAAI,CAAC,UAAU,GAAG,IAAI,CAAA;QAEtB,IAAI,CAAC;YACH,MACA,OAAO,GAAuB;gBAC5B,GAAG,EAAE,sBAAsB;gBAC3B,MAAM,EAAE,OAAO;gBACf,IAAI,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE;aAC9B,EACD,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,MAAM,IAAI,CAAC,OAAO,CAAgB,OAAO,CAAE,CAAA;YACtE,IAAI,KAAK;gBAAG,MAAM,IAAI,KAAK,CAAE,OAAO,CAAE,CAAA;YAEtC,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,KAAK,CAAA;YAE7B,2BAA2B;YAC3B,IAAI,OAAO,IAAI,CAAC,UAAU,KAAK,UAAU;gBACvC,IAAI,CAAC;oBAAC,IAAI,CAAC,UAAU,CAAE,IAAI,CAAC,KAAK,CAAE,CAAA;gBAAC,CAAC;gBACrC,OAAO,aAAa,EAAE,CAAC;oBAAC,IAAI,CAAC,KAAK,CAAC,sCAAsC,EAAE,aAAa,CAAC,CAAA;gBAAC,CAAC;YAE7F,yBAAyB;YACzB,IAAI,CAAC,gBAAgB,EAAE,CAAA;YAEvB,IAAI,CAAC,KAAK,CAAC,4BAA4B,CAAC,CAAA;YACxC,OAAO,IAAI,CAAC,KAAK,CAAA;QACnB,CAAC;QACD,OAAO,KAAU,EAAE,CAAC;YAClB,IAAI,CAAC,KAAK,CAAC,8BAA8B,EAAE,KAAK,CAAC,OAAO,CAAC,CAAA;YAEzD,IAAI,CAAC;gBACH,kCAAkC;gBAClC,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,QAAQ,EAAE,CAAA;gBACtC,IAAI,CAAC,KAAK,CAAC,kCAAkC,CAAC,CAAA;gBAE9C,2CAA2C;gBAC3C,IAAI,IAAI,CAAC,UAAU;oBACjB,IAAI,CAAC;wBAAC,IAAI,CAAC,UAAU,CAAE,QAAQ,CAAE,CAAA;oBAAC,CAAC;oBACnC,OAAO,aAAa,EAAE,CAAC;wBAAC,IAAI,CAAC,KAAK,CAAC,+BAA+B,EAAE,aAAa,CAAC,CAAA;oBAAC,CAAC;gBAEtF,OAAO,QAAQ,CAAA;YACjB,CAAC;YACD,OAAO,aAAkB,EAAE,CAAC;gBAC1B,IAAI,CAAC,KAAK,CAAC,oCAAoC,EAAE,aAAa,CAAC,OAAO,CAAC,CAAA;gBACvE,MAAM,aAAa,CAAA;YACrB,CAAC;QACH,CAAC;gBACO,CAAC;YAAC,IAAI,CAAC,UAAU,GAAG,KAAK,CAAA;QAAC,CAAC;IACrC,CAAC;IAED;;OAEG;IACH,eAAe;QACb,IAAI,CAAC,KAAK,CAAC,uBAAuB,CAAC,CAAA;QAEnC,IAAI,CAAC,aAAa,EAAE,CAAA;QACpB,IAAI,CAAC,WAAW,GAAG,KAAK,CAAA;IAC1B,CAAC;IAED;;OAEG;IACH,gBAAgB;QACd,IAAI,CAAC,KAAK,CAAC,uBAAuB,CAAC,CAAA;QAEnC,IAAI,CAAC,WAAW,GAAG,IAAI,CAAA;QACvB,IAAI,CAAC,gBAAgB,EAAE,CAAA;IACzB,CAAC;IAED;;OAEG;IACH,OAAO;QACL,IAAI,CAAC,KAAK,CAAC,0BAA0B,CAAC,CAAA;QACtC,IAAI,CAAC,eAAe,EAAE,CAAA;QAEtB,IAAI,CAAC,WAAW,GAAG,SAAS,CAAA;QAC5B,IAAI,CAAC,UAAU,GAAG,SAAS,CAAA;IAC7B,CAAC;CACF;AA9LD,uBA8LC"}
+{"version":3,"file":"Auth.js","sourceRoot":"","sources":["../../src/backend/Auth.ts"],"names":[],"mappings":";;AAAA,wCAAoC;AAGpC;;;;;;;;;;GAUG;AACH,MAAM,mBAAmB,GAAG,IAAI,CAAA;AAqDhC,MAAqB,IAAI;IAgBvB,YAAa,MAAkB;QAHvB,eAAU,GAAY,KAAK,CAAA;QAIjC,IAAI,CAAC,MAAM;YAAW,MAAM,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAA;QAC9F,IAAI,CAAC,MAAM,CAAC,OAAO;YAAG,MAAM,IAAI,KAAK,CAAC,wDAAwD,CAAC,CAAA;QAC/F,IAAI,CAAC,MAAM,CAAC,GAAG;YAAO,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAA;QAC3F,IAAI,CAAC,MAAM,CAAC,MAAM;YAAI,MAAM,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAA;QAE9F,IAAI,CAAC,OAAO,GAAQ,MAAM,CAAC,OAAO,CAAA;QAClC,IAAI,CAAC,GAAG,GAAY,MAAM,CAAC,GAAG,CAAA;QAC9B,IAAI,CAAC,GAAG,GAAY,MAAM,CAAC,GAAG,CAAA;QAC9B,IAAI,CAAC,MAAM,GAAS,MAAM,CAAC,MAAM,CAAA;QACjC,IAAI,CAAC,YAAY,GAAG,MAAM,CAAC,YAAY,CAAA;QACvC,IAAI,CAAC,GAAG,GAAY,MAAM,CAAC,GAAG,IAAI,KAAK,CAAA;QACvC,IAAI,CAAC,OAAO,GAAQ,MAAM,CAAC,OAAO,IAAI,CAAC,CAAA;QACvC,IAAI,CAAC,OAAO,GAAQ,IAAA,iBAAO,EAAC,KAAK,EAAE,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC,WAAW,CAAE,CAAA;QACjE,IAAI,CAAC,WAAW,GAAI,MAAM,CAAC,WAAW,IAAI,KAAK,CAAA;QAC/C,IAAI,CAAC,eAAe,GAAG,MAAM,CAAC,eAAe,IAAI,MAAM,CAAC,eAAe,GAAG,CAAC;YACjD,CAAC,CAAC,MAAM,CAAC,eAAe;YACxB,CAAC,CAAC,mBAAmB,CAAA;QAC/C,IAAI,CAAC,UAAU,GAAK,MAAM,CAAC,UAAU,CAAA;IACvC,CAAC;IAEO,KAAK,CAAC,OAAO,CAAI,EAAE,GAAG,EAAE,GAAG,OAAO,EAAsB;QAC9D,MAAM,UAAU,GAAQ;YACtB,MAAM,EAAE,KAAK;YACb,OAAO,EAAE;gBACP,QAAQ,EAAE,IAAI,CAAC,YAAY;gBAC3B,eAAe,EAAE,aAAa,IAAI,CAAC,OAAO,IAAI;aAC/C;SACF,CAAA;QAED,IAAI,IAAI,CAAC,WAAW;YAClB,UAAU,CAAC,OAAO,CAAC,aAAa,GAAG,UAAU,IAAI,CAAC,WAAW,EAAE,CAAA;QAEjE,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;YACjB,UAAU,CAAC,OAAO,CAAC,cAAc,CAAC,GAAG,kBAAkB,CAAA;YACvD,IAAI,OAAO,OAAO,CAAC,IAAI,KAAK,QAAQ;gBAClC,OAAO,CAAC,IAAI,GAAG,IAAI,CAAC,SAAS,CAAE,OAAO,CAAC,IAAI,CAAE,CAAA;QACjD,CAAC;QAED,OAAO,GAAG,EAAE,GAAG,UAAU,EAAE,GAAG,OAAO,EAAE,CAAA;QAEvC,IAAI,CAAC,KAAK,CAAC,cAAc,EAAE,GAAG,IAAI,CAAC,OAAO,KAAK,IAAI,CAAC,OAAO,IAAI,GAAG,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,EAAE,EAAE,OAAO,CAAE,CAAA;QAClG,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,IAAI,CAAC,OAAO,KAAK,IAAI,CAAC,OAAO,IAAI,GAAG,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,EAAE,EAAE,OAAO,CAAE,CAAA;QAEpG,OAAO,MAAM,QAAQ,CAAC,IAAI,EAAO,CAAA;IACnC,CAAC;IAEO,KAAK,CAAE,GAAG,IAAW;QAC3B,IAAI,CAAC,GAAG,KAAK,KAAK,IAAI,OAAO,CAAC,KAAK,CAAC,QAAQ,EAAE,GAAG,IAAI,CAAE,CAAA;IACzD,CAAC;IACO,KAAK,CAAE,GAAG,IAAW;QAC3B,OAAO,CAAC,KAAK,CAAC,QAAQ,EAAE,GAAG,IAAI,CAAE,CAAA;IACnC,CAAC;IAED;;OAEG;IACK,gBAAgB;QACtB,IAAI,CAAC,IAAI,CAAC,WAAW;YAAG,OAAM;QAE9B,IAAI,CAAC,aAAa,EAAE,CAAA;QACpB,IAAI,CAAC,YAAY,GAAG,UAAU,CAAE,GAAG,EAAE,CAAC,IAAI,CAAC,WAAW,EAAE,EAAE,IAAI,CAAC,eAAe,GAAG,EAAE,GAAG,IAAI,CAAE,CAAA;IAC9F,CAAC;IAED;;OAEG;IACK,aAAa;QACnB,IAAI,CAAC,IAAI,CAAC,YAAY;YAAG,OAAM;QAE/B,YAAY,CAAE,IAAI,CAAC,YAAY,CAAE,CAAA;QACjC,IAAI,CAAC,YAAY,GAAG,SAAS,CAAA;IAC/B,CAAC;IAED,KAAK,CAAC,QAAQ;QACZ,MACA,OAAO,GAAuB;YAC5B,GAAG,EAAE,eAAe;YACpB,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,YAAY,EAAE,IAAI,CAAC,YAAY,EAAE,GAAG,CAAE,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAE,EAAE;SAC/I,EACD,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,MAAM,IAAI,CAAC,OAAO,CAAgB,OAAO,CAAE,CAAA;QACtE,IAAI,KAAK;YAAG,MAAM,IAAI,KAAK,CAAE,OAAO,CAAE,CAAA;QAEtC,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,KAAK,CAAA;QAC7B,IAAI,CAAC,gBAAgB,EAAE,CAAA,CAAC,wBAAwB;QAEhD,OAAO,IAAI,CAAC,KAAK,CAAA;IACnB,CAAC;IAED,KAAK,CAAC,WAAW;QACf,uCAAuC;QACvC,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;YACpB,IAAI,CAAC,KAAK,CAAC,8CAA8C,CAAC,CAAA;YAC1D,OAAO,IAAI,CAAC,WAAY,CAAA;QAC1B,CAAC;QAED,IAAI,CAAC,IAAI,CAAC,WAAW;YACnB,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAA;QAE1C,IAAI,CAAC,UAAU,GAAG,IAAI,CAAA;QAEtB,IAAI,CAAC;YACH,MACA,OAAO,GAAuB;gBAC5B,GAAG,EAAE,sBAAsB;gBAC3B,MAAM,EAAE,OAAO;gBACf,IAAI,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE;aAC9B,EACD,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,MAAM,IAAI,CAAC,OAAO,CAAgB,OAAO,CAAE,CAAA;YACtE,IAAI,KAAK;gBAAG,MAAM,IAAI,KAAK,CAAE,OAAO,CAAE,CAAA;YAEtC,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,KAAK,CAAA;YAE7B,2BAA2B;YAC3B,IAAI,OAAO,IAAI,CAAC,UAAU,KAAK,UAAU;gBACvC,IAAI,CAAC;oBAAC,IAAI,CAAC,UAAU,CAAE,IAAI,CAAC,KAAK,CAAE,CAAA;gBAAC,CAAC;gBACrC,OAAO,aAAa,EAAE,CAAC;oBAAC,IAAI,CAAC,KAAK,CAAC,sCAAsC,EAAE,aAAa,CAAC,CAAA;gBAAC,CAAC;YAE7F,yBAAyB;YACzB,IAAI,CAAC,gBAAgB,EAAE,CAAA;YAEvB,IAAI,CAAC,KAAK,CAAC,4BAA4B,CAAC,CAAA;YACxC,OAAO,IAAI,CAAC,KAAK,CAAA;QACnB,CAAC;QACD,OAAO,KAAU,EAAE,CAAC;YAClB,IAAI,CAAC,KAAK,CAAC,8BAA8B,EAAE,KAAK,CAAC,OAAO,CAAC,CAAA;YAEzD,IAAI,CAAC;gBACH,kCAAkC;gBAClC,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,QAAQ,EAAE,CAAA;gBACtC,IAAI,CAAC,KAAK,CAAC,kCAAkC,CAAC,CAAA;gBAE9C,2CAA2C;gBAC3C,IAAI,IAAI,CAAC,UAAU;oBACjB,IAAI,CAAC;wBAAC,IAAI,CAAC,UAAU,CAAE,QAAQ,CAAE,CAAA;oBAAC,CAAC;oBACnC,OAAO,aAAa,EAAE,CAAC;wBAAC,IAAI,CAAC,KAAK,CAAC,+BAA+B,EAAE,aAAa,CAAC,CAAA;oBAAC,CAAC;gBAEtF,OAAO,QAAQ,CAAA;YACjB,CAAC;YACD,OAAO,aAAkB,EAAE,CAAC;gBAC1B,IAAI,CAAC,KAAK,CAAC,oCAAoC,EAAE,aAAa,CAAC,OAAO,CAAC,CAAA;gBACvE,MAAM,aAAa,CAAA;YACrB,CAAC;QACH,CAAC;gBACO,CAAC;YAAC,IAAI,CAAC,UAAU,GAAG,KAAK,CAAA;QAAC,CAAC;IACrC,CAAC;IAED;;OAEG;IACH,eAAe;QACb,IAAI,CAAC,KAAK,CAAC,uBAAuB,CAAC,CAAA;QAEnC,IAAI,CAAC,aAAa,EAAE,CAAA;QACpB,IAAI,CAAC,WAAW,GAAG,KAAK,CAAA;IAC1B,CAAC;IAED;;OAEG;IACH,gBAAgB;QACd,IAAI,CAAC,KAAK,CAAC,uBAAuB,CAAC,CAAA;QAEnC,IAAI,CAAC,WAAW,GAAG,IAAI,CAAA;QACvB,IAAI,CAAC,gBAAgB,EAAE,CAAA;IACzB,CAAC;IAED;;OAEG;IACH,OAAO;QACL,IAAI,CAAC,KAAK,CAAC,0BAA0B,CAAC,CAAA;QACtC,IAAI,CAAC,eAAe,EAAE,CAAA;QAEtB,IAAI,CAAC,WAAW,GAAG,SAAS,CAAA;QAC5B,IAAI,CAAC,UAAU,GAAG,SAAS,CAAA;IAC7B,CAAC;CACF;AAlMD,uBAkMC"}

package/dist/core.d.ts

@@ -1,5 +1,7 @@
 export { default as Auth } from './backend/Auth';
 export type { AuthConfig } from './backend/Auth';
+export type { RealtimeConnectOptions } from './allend/realtime-socket';
+export type { RealtimeUserType } from './allend/Realtime';
 export { default as OTPAuth } from './allend/OTPAuth';
 export { default as Tracking } from './allend/Tracking';
 export type { TrackingConfig } from './allend/Tracking';

package/dist/core.js.map

@@ -1 +1 @@
-{"version":3,"file":"core.js","sourceRoot":"","sources":["../src/core.ts"],"names":[],"mappings":";AAAA,iFAAiF;AACjF,EAAE;AACF,4EAA4E;AAC5E,EAAE;AACF,6EAA6E;AAC7E,4EAA4E;AAC5E,8EAA8E;AAC9E,0EAA0E;AAC1E,0EAA0E;AAC1E,WAAW;AACX,EAAE;AACF,0BAA0B;AAC1B,EAAE;AACF,mEAAmE;AACnE,sEAAsE;AACtE,EAAE;AACF,gFAAgF;;;;;;AAEhF,iFAAiF;AAEjF,yDAAyD;AACzD,uCAAgD;AAAvC,6GAAA,OAAO,OAAQ;AAGxB,yCAAyC;AACzC,4CAAqD;AAA5C,mHAAA,OAAO,OAAW;AAE3B,0CAA0C;AAC1C,8CAAuD;AAA9C,qHAAA,OAAO,OAAY;AAG5B,gDAAyD;AAAhD,uHAAA,OAAO,OAAa;AAG7B,oCAA6C;AAApC,2GAAA,OAAO,OAAO;AAGvB,oCAA6C;AAApC,2GAAA,OAAO,OAAO;AAGvB,oCAA6C;AAApC,2GAAA,OAAO,OAAO;AAGvB,qEAAqE;AACrE,wCAA+E;AAAtE,+GAAA,OAAO,OAAS;AAAE,0GAAA,OAAO,OAAqB;AAGvD,gDAAyD;AAAhD,uHAAA,OAAO,OAAa;AAG7B,4CAA4C;AAC5C,8CAAuD;AAA9C,qHAAA,OAAO,OAAY;AAE5B,sBAAsB;AACtB,gDAAyD;AAAhD,uHAAA,OAAO,OAAa;AAG7B,YAAY;AACZ,iCAA0C;AAAjC,+GAAA,OAAO,OAAS;AAEzB,iCAA6C;AAApC,kHAAA,OAAO,OAAY;AAC5B,uCAAqC;AAA5B,oGAAA,QAAQ,OAAA;AAEjB,iFAAiF;AACjF,8EAA8E;AAC9E,kBAAkB;AAClB,EAAE;AACF,0EAA0E;AAC1E,+EAA+E;AAC/E,sDAAsD;AACtD,gDAAyD;AAAhD,uHAAA,OAAO,OAAa;AAG7B,8CAAuD;AAA9C,qHAAA,OAAO,OAAY;AAG5B,wCAAiD;AAAxC,+GAAA,OAAO,OAAS;AAIzB,4CAAqD;AAA5C,mHAAA,OAAO,OAAW;AAG3B,gDAAyD;AAAhD,uHAAA,OAAO,OAAa;AAe7B,iFAAiF;AAEjF,0DAAsC;AACtC,+DAAwC;AACxC,mEAA0C;AAC1C,iEAAyC;AACzC,qEAA8C;AAC9C,uDAAoC;AACpC,uDAAoC;AACpC,uDAAoC;AACpC,2DAAsC;AACtC,mEAA0C;AAC1C,mEAA0C;AAC1C,iEAAyC;AACzC,oDAA+B;AAC/B,mEAA0C;AAC1C,iEAAyC;AACzC,2DAAsC;AACtC,+DAAwC;AACxC,mEAA0C;AAC1C,uEAAiD;AACjD,iEAAyC;AAEzC,qEAAqE;AACrE,MAAM,OAAO,GAAG,EAAE,MAAM,EAAN,gBAAM,EAAE,KAAK,EAAL,kBAAK,EAAE,CAAA;AACxB,0BAAO;AAEH,QAAA,IAAI,GAAG;IACnB,IAAI,EAAJ,cAAI;IACJ,OAAO,EAAP,iBAAO;IACP,SAAS,EAAT,mBAAS;IACT,QAAQ,EAAR,kBAAQ;IACR,GAAG,EAAH,iBAAG;IACH,GAAG,EAAH,aAAG;IACH,GAAG,EAAH,aAAG;IACH,GAAG,EAAH,aAAG;IACH,KAAK,EAAL,eAAK;IACL,SAAS,EAAT,mBAAS;IACT,SAAS,EAAT,mBAAS;IACT,QAAQ,EAAR,kBAAQ;IACR,KAAK,EAAL,eAAK;IACL,OAAO;IACP,SAAS,EAAT,mBAAS;IACT,QAAQ,EAAR,kBAAQ;IACR,KAAK,EAAL,eAAK;IACL,OAAO,EAAP,iBAAO;IACP,SAAS,EAAT,mBAAS;CACT,CAAA"}
+{"version":3,"file":"core.js","sourceRoot":"","sources":["../src/core.ts"],"names":[],"mappings":";AAAA,iFAAiF;AACjF,EAAE;AACF,4EAA4E;AAC5E,EAAE;AACF,6EAA6E;AAC7E,4EAA4E;AAC5E,8EAA8E;AAC9E,0EAA0E;AAC1E,0EAA0E;AAC1E,WAAW;AACX,EAAE;AACF,0BAA0B;AAC1B,EAAE;AACF,mEAAmE;AACnE,sEAAsE;AACtE,EAAE;AACF,gFAAgF;;;;;;AAEhF,iFAAiF;AAEjF,yDAAyD;AACzD,uCAAgD;AAAvC,6GAAA,OAAO,OAAQ;AAOxB,yCAAyC;AACzC,4CAAqD;AAA5C,mHAAA,OAAO,OAAW;AAE3B,0CAA0C;AAC1C,8CAAuD;AAA9C,qHAAA,OAAO,OAAY;AAG5B,gDAAyD;AAAhD,uHAAA,OAAO,OAAa;AAG7B,oCAA6C;AAApC,2GAAA,OAAO,OAAO;AAGvB,oCAA6C;AAApC,2GAAA,OAAO,OAAO;AAGvB,oCAA6C;AAApC,2GAAA,OAAO,OAAO;AAGvB,qEAAqE;AACrE,wCAA+E;AAAtE,+GAAA,OAAO,OAAS;AAAE,0GAAA,OAAO,OAAqB;AAGvD,gDAAyD;AAAhD,uHAAA,OAAO,OAAa;AAG7B,4CAA4C;AAC5C,8CAAuD;AAA9C,qHAAA,OAAO,OAAY;AAE5B,sBAAsB;AACtB,gDAAyD;AAAhD,uHAAA,OAAO,OAAa;AAG7B,YAAY;AACZ,iCAA0C;AAAjC,+GAAA,OAAO,OAAS;AAEzB,iCAA6C;AAApC,kHAAA,OAAO,OAAY;AAC5B,uCAAqC;AAA5B,oGAAA,QAAQ,OAAA;AAEjB,iFAAiF;AACjF,8EAA8E;AAC9E,kBAAkB;AAClB,EAAE;AACF,0EAA0E;AAC1E,+EAA+E;AAC/E,sDAAsD;AACtD,gDAAyD;AAAhD,uHAAA,OAAO,OAAa;AAG7B,8CAAuD;AAA9C,qHAAA,OAAO,OAAY;AAG5B,wCAAiD;AAAxC,+GAAA,OAAO,OAAS;AAIzB,4CAAqD;AAA5C,mHAAA,OAAO,OAAW;AAG3B,gDAAyD;AAAhD,uHAAA,OAAO,OAAa;AAe7B,iFAAiF;AAEjF,0DAAsC;AACtC,+DAAwC;AACxC,mEAA0C;AAC1C,iEAAyC;AACzC,qEAA8C;AAC9C,uDAAoC;AACpC,uDAAoC;AACpC,uDAAoC;AACpC,2DAAsC;AACtC,mEAA0C;AAC1C,mEAA0C;AAC1C,iEAAyC;AACzC,oDAA+B;AAC/B,mEAA0C;AAC1C,iEAAyC;AACzC,2DAAsC;AACtC,+DAAwC;AACxC,mEAA0C;AAC1C,uEAAiD;AACjD,iEAAyC;AAEzC,qEAAqE;AACrE,MAAM,OAAO,GAAG,EAAE,MAAM,EAAN,gBAAM,EAAE,KAAK,EAAL,kBAAK,EAAE,CAAA;AACxB,0BAAO;AAEH,QAAA,IAAI,GAAG;IACnB,IAAI,EAAJ,cAAI;IACJ,OAAO,EAAP,iBAAO;IACP,SAAS,EAAT,mBAAS;IACT,QAAQ,EAAR,kBAAQ;IACR,GAAG,EAAH,iBAAG;IACH,GAAG,EAAH,aAAG;IACH,GAAG,EAAH,aAAG;IACH,GAAG,EAAH,aAAG;IACH,KAAK,EAAL,eAAK;IACL,SAAS,EAAT,mBAAS;IACT,SAAS,EAAT,mBAAS;IACT,QAAQ,EAAR,kBAAQ;IACR,KAAK,EAAL,eAAK;IACL,OAAO;IACP,SAAS,EAAT,mBAAS;IACT,QAAQ,EAAR,kBAAQ;IACR,KAAK,EAAL,eAAK;IACL,OAAO,EAAP,iBAAO;IACP,SAAS,EAAT,mBAAS;CACT,CAAA"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@de./sdk",
-  "version": "2.1.1",
+  "version": "2.2.1",
   "description": "Complete SDK pack for MSI (Map Service Interface), IoTClient and DClient services — web, server and React Native",
   "main": "./dist/index.js",
   "types": "./dist/index.d.ts",
@@ -41,7 +41,7 @@
     "test:event": "npm run build:tsc && jest test/event.test.js"
   },
   "dependencies": {
-    "@de./types": "^2.1.0",
+    "@de./types": "^2.2.0",
     "events": "^3.3.0",
     "iframe.io": "^1.3.0",
     "node-fetch": "2.6.1",

package/src/allend/Agent/realtime.ts

@@ -1,11 +1,7 @@
 import type { OrderTrackingEvent } from '@de./types'
 import type { RTLocation, Message, Peer } from '../../types'
-import type { SocketAuthCredentials } from '../../types/auth'
-import type { AccessOptions } from '../../types/access'
 
-import io, { Socket } from 'socket.io-client'
-import AccessManager from '../Access'
-import { baseURL } from '../../baseUrl'
+import RealtimeSocket, { type RealtimeConnectOptions } from '../realtime-socket'
 
 // ─── Agent Realtime ───────────────────────────────────────────────────────────
 //
@@ -32,53 +28,20 @@ export type AgentRealtimeContext = {
   xcode: string
 }
 
-export default class AgentRealtime extends AccessManager {
-  private nsp?: Socket
-  private iosHost: string
+export default class AgentRealtime extends RealtimeSocket {
   private agentId?: string
 
-  constructor( access: AccessOptions ){
-    super( access, 'API' )
-
-    // Socket.io is served by the same de.arch API server, so an explicit
-    // origin governs the socket exactly as it governs the requests — without
-    // this, a client pointed at a self-hosted De. still opened its socket
-    // against the environment table's host.
-    this.iosHost = access.baseUrl?.replace( /\/+$/, '' )
-                    || baseURL('API', access.env || 'dev', access.devHostname )
-  }
-
-  connect( agentId: string ): Promise<void> {
-    return new Promise( ( resolve, reject ) => {
-      const auth: SocketAuthCredentials = {
-        utype: 'agent',
-        id: agentId,
-        remoteOrigin: this.remoteOrigin as string,
-        accessToken: this.accessToken as string
-      }
-
-      this.agentId = agentId
-      this.nsp = io( this.iosHost, { auth } )
-      this.nsp.on('connect', resolve )
-      this.nsp.on('connect_error', reject )
-    } )
-  }
-
-  disconnect(){
-    this.nsp?.disconnect()
-    return true
-  }
+  protected get utype(): string { return 'agent' }
 
   /**
-   * Join an order tracking room with a Join Room Token issued by
-   * GET /v1/tracking/:reference (role must match this socket's utype)
+   * @param options  `getToken` supplies a fresh access token per attempt. A
+   *                 rider's phone reconnects constantly and De.'s tokens are
+   *                 short-lived, so without it the socket comes back refused —
+   *                 or, worse, comes back connected and in none of its rooms.
    */
-  join( jrtoken: string ): Promise<boolean> {
-    return new Promise( ( resolve, reject ) => {
-      this.nsp?.emit('JOIN', jrtoken, ( errmess?: string ) => {
-        errmess ? reject( new Error( errmess ) ) : resolve( true )
-      } )
-    } )
+  connect( agentId: string, options?: RealtimeConnectOptions ): Promise<void> {
+    this.agentId = agentId
+    return this.open( agentId, options )
   }
 
   // ── Order room streams (after join) ─────────────────────────────────────

package/src/allend/Realtime/index.ts

@@ -1,50 +1,99 @@
-import type { RTLocation , Message, Peer } from '../../types'
-import type { SocketAuthCredentials } from '../../types/auth'
-import type { AccessOptions } from '../../types/access'
+import type { OrderTrackingEvent } from '@de./types'
+import type { RTLocation, Message, Peer } from '../../types'
 
-import io, { Socket } from 'socket.io-client'
-import AccessManager from '../Access'
-import { baseURL } from '../../baseUrl'
+import RealtimeSocket, { type RealtimeConnectOptions } from '../realtime-socket'
 
-export default class Realtime extends AccessManager {
-  private nsp?: Socket
-  private iosHost: string
+// ─── Realtime ─────────────────────────────────────────────────────────────────
+//
+// The non-agent side of an order room: the person waiting for the delivery,
+// the merchant who dispatched it, or a platform's own client connection.
+//
+// The flow is two steps and they are not interchangeable:
+//
+//   connect( id, utype )   opens the socket. `id` is the uid the tracking
+//                          session was minted for, and `utype` must match the
+//                          `role` it was minted with.
+//   join( jrtoken )        enters the order's room.
+//
+// De. checks the second against the first — the JRT's seal is `role:uid`, and
+// JOIN compares it to the connection's own `utype:id`. Connecting as one
+// person and presenting another's token is refused, and so is connecting as
+// 'client' with a token minted for role 'customer', which is what this client
+// used to do unconditionally.
+//
+// Distinct from `AgentRealtime` (allend/Agent/realtime), which is the rider's
+// socket and carries the consolidation response channel as well.
+//
+// ─────────────────────────────────────────────────────────────────────────────
 
-  constructor( access: AccessOptions ){
-    super( access, 'API' )
-    // Socket server host
-    // An explicit origin governs the socket as it governs the requests.
-    this.iosHost = access.baseUrl?.replace( /\/+$/, '' )
-                    || baseURL('RTS', access.env, access.devHostname )
+/**
+ * Who this connection is, in De.'s vocabulary.
+ *
+ * A client is the party that engaged the provider — a CSP, a merchant, a
+ * branch. A customer is the person the delivery is handed to. They are not
+ * the same party and De. does not put them in the same room, so a customer
+ * app connecting as 'client' hears nothing addressed to customers and cannot
+ * redeem a customer's tracking token.
+ */
+export type RealtimeUserType = 'client' | 'customer' | 'vendor'
+
+export default class Realtime extends RealtimeSocket {
+  private as: RealtimeUserType = 'client'
+
+  protected get utype(): string { return this.as }
+
+  /**
+   * @param id       The uid the tracking session was issued for.
+   * @param utype    Must equal the `role` that session was issued with.
+   * @param options  `getToken` supplies a fresh access token per attempt —
+   *                 without it a reconnect after the token's short life is
+   *                 refused, and the app is left with an open socket that
+   *                 delivers nothing.
+   */
+  connect( id: string, utype: RealtimeUserType = 'client', options?: RealtimeConnectOptions ): Promise<void> {
+    this.as = utype
+    return this.open( id, options )
   }
 
-  connect( clientId: string ): Promise<void> {
-    return new Promise( ( resolve, reject ) => {
-      // Connect to main clients namespace
-      const auth: SocketAuthCredentials = {
-        utype: 'client',
-        id: clientId,
-        remoteOrigin: globalThis?.window ? globalThis.origin : this.remoteOrigin as string,
-        accessToken: this.accessToken as string
-      }
-      
-      this.nsp = io( this.iosHost, { auth } )
-      this.nsp.on('connect', resolve )
-      this.nsp.on('connect_error', reject )
-    } )
+  // ── Order room streams (after join) ─────────────────────────────────────
+
+  /**
+   * The rider's position, as it moves.
+   *
+   * Rate-limited by De. to 10 per second per sender, so this is a stream and
+   * not a trickle: render from it directly rather than re-fetching anything.
+   */
+  onLocation( fn: ( location: RTLocation ) => void ){
+    this.nsp?.on('LOCATION-CHANGE', fn )
+    return this
   }
-  disconnect(){
-    this.nsp?.disconnect()
-    return true
+
+  onRoute( fn: ( route: any ) => void ){
+    this.nsp?.on('ROUTE-CHANGE', fn )
+    return this
   }
-  join( jrtoken: string ): Promise<boolean> {
-    return new Promise( ( resolve, reject ) => {
-      this.nsp?.emit('JOIN', jrtoken, ( errmess?: string ) => {
-        errmess ? reject( new Error( errmess ) ) : resolve( true )
-      } )
-    } )
+
+  onOrderUpdate( fn: ( event: OrderTrackingEvent ) => void ){
+    this.nsp?.on('ORDER_UPDATE', fn )
+    return this
   }
 
+  onMessage( fn: ( message: Message ) => void ){
+    this.nsp?.on('MESSAGE', fn )
+    return this
+  }
+
+  sendMessage( message: Message ){
+    this.nsp?.emit('MESSAGE', message )
+    return this
+  }
+
+  // ── Presence ────────────────────────────────────────────────────────────
+
+  onJoined( fn: ( peer: Peer ) => void ){
+    this.nsp?.on('JOINED', fn )
+    return this
+  }
   onLeft( fn: ( peer: Peer ) => void ){
     this.nsp?.on('LEFT', fn )
     return this
@@ -57,21 +106,4 @@ export default class Realtime extends AccessManager {
     this.nsp?.on('DISCONNECTED', fn )
     return this
   }
-
-  // onRoute( fn: ( data: any ) => void ){
-  //   this.nsp?.on('ROUTE-CHANGE', fn )
-  //   return this
-  // }
-  // onStage( fn: ( data: OrderStage ) => void ){
-  //   this.nsp?.on('STAGE-CHANGE', fn )
-  //   return this
-  // }
-  // onLocation( fn: ( location: RTLocation  ) => void ){
-  //   this.nsp?.on('LOCATION-CHANGE', fn )
-  //   return this
-  // }
-  // onMessage( fn: ( payload: Message ) => void ){
-  //   this.nsp?.on('MESSAGE', fn )
-  //   return this
-  // }
-}
+}

package/src/allend/realtime-socket.ts

@@ -0,0 +1,171 @@
+import type { SocketAuthCredentials } from '../types/auth'
+import type { AccessOptions } from '../types/access'
+
+import io, { Socket } from 'socket.io-client'
+import AccessManager from './Access'
+import { baseURL } from '../baseUrl'
+
+// ─── RealtimeSocket ───────────────────────────────────────────────────────────
+//
+// What `Realtime` and `AgentRealtime` share: opening the connection, and
+// getting back into the rooms afterwards.
+//
+// Both used to hand socket.io a plain object for `auth` and call `join` once,
+// which works exactly until the first reconnect — and on a phone the first
+// reconnect is a lift doorway. Two things break there, both silently:
+//
+//   · The token. socket.io captures the auth literal once and replays it on
+//     every attempt. De.'s access tokens are short-lived, so the replayed one
+//     is stale precisely on the reconnect after an outage long enough to have
+//     crossed an expiry. De. refuses the handshake — and until 2026-09-08 that
+//     refusal took de.arch's whole process down with it.
+//
+//   · The rooms. Room membership is per-connection and De. does not restore
+//     it. A reconnected socket is connected to the server and in none of the
+//     rooms it was in, so it stays open, reports itself healthy, and delivers
+//     nothing. That is the worse of the two failures because nothing anywhere
+//     reports it.
+//
+// So `auth` is a function, evaluated per attempt, and every join is remembered
+// and replayed.
+//
+// ─────────────────────────────────────────────────────────────────────────────
+
+export type RealtimeConnectOptions = {
+  /**
+   * A fresh access token for each connection attempt.
+   *
+   * An app holds tokens it was given rather than credentials it can mint, so
+   * this is usually "ask my backend for a new tracking session". Omitted, the
+   * token this client was constructed with is used on every attempt, which is
+   * correct only for a process that rotates it in place.
+   */
+  getToken?: () => string | Promise<string>
+}
+
+export default abstract class RealtimeSocket extends AccessManager {
+  protected nsp?: Socket
+  protected iosHost: string
+  protected id?: string
+
+  /**
+   * Every room this socket asked to be in, by the token that got it there.
+   *
+   * Kept so a reconnect can restore them. A JRT outlives an ordinary blip, so
+   * replaying it is right; when one has expired the rejoin fails and
+   * `onRejoinError` is how the app learns to ask for a new session rather than
+   * sitting on a silent connection.
+   */
+  private rooms = new Set<string>()
+  private rejoinError?: ( error: Error ) => void
+
+  constructor( access: AccessOptions ){
+    super( access, 'API' )
+
+    // Socket.io is served by the same de.arch API server, so an explicit
+    // origin governs the socket exactly as it governs the requests.
+    this.iosHost = access.baseUrl?.replace( /\/+$/, '' )
+                    || baseURL('API', access.env || 'dev', access.devHostname )
+  }
+
+  /** The `utype` this client connects as. Must match the JRT's `role`. */
+  protected abstract get utype(): string
+
+  protected open( id: string, options: RealtimeConnectOptions = {} ): Promise<void> {
+    this.id = id
+
+    return new Promise( ( resolve, reject ) => {
+      const credentials = async (): Promise<SocketAuthCredentials> => ({
+        utype:        this.utype,
+        id,
+        remoteOrigin: globalThis?.window ? globalThis.origin : this.remoteOrigin as string,
+        accessToken:  options.getToken ? await options.getToken() : this.accessToken as string
+      })
+
+      this.nsp = io( this.iosHost, {
+        // The function form — re-evaluated before every attempt, which is the
+        // whole point. The object form is read once, at construction.
+        auth: ( cb: ( data: any ) => void ) => {
+          credentials()
+            .then( cb )
+            // A token the app could not fetch is still an attempt: let De.
+            // refuse it and surface a connect_error, rather than hanging.
+            .catch( () => cb({ utype: this.utype, id }) )
+        }
+      })
+
+      this.nsp.on('connect', () => {
+        this.restore()
+        resolve()
+      })
+      this.nsp.on('connect_error', reject )
+    })
+  }
+
+  /** Re-enter every room this socket was in before the connection dropped. */
+  private restore(): void {
+    for( const jrtoken of this.rooms )
+      this.nsp?.emit('JOIN', jrtoken, ( errmess?: string ) => {
+        if( !errmess ) return
+
+        this.rooms.delete( jrtoken )
+        this.rejoinError?.( new Error( errmess ) )
+      })
+  }
+
+  /**
+   * Enter an order room with a Join Room Token from
+   * `GET /v1/tracking/:reference?role=…`.
+   */
+  join( jrtoken: string ): Promise<boolean> {
+    return new Promise( ( resolve, reject ) => {
+      this.nsp?.emit('JOIN', jrtoken, ( errmess?: string ) => {
+        if( errmess ) return reject( new Error( errmess ) )
+
+        this.rooms.add( jrtoken )
+        resolve( true )
+      })
+    })
+  }
+
+  /** Stop replaying a room — the order is closed, or the app navigated away. */
+  leave( jrtoken: string ): void {
+    this.rooms.delete( jrtoken )
+  }
+
+  /**
+   * A room could not be re-entered after a reconnect.
+   *
+   * Almost always an expired JRT. The app's answer is to ask its backend for a
+   * fresh tracking session and `join` again — and, since it is reconnecting,
+   * to `replay` from the `since` that came with it.
+   */
+  onRejoinError( fn: ( error: Error ) => void ){
+    this.rejoinError = fn
+    return this
+  }
+
+  /** Fires on every reconnect, which is where a client should replay its gap. */
+  onReconnect( fn: () => void ){
+    this.nsp?.io.on('reconnect', fn )
+    return this
+  }
+
+  disconnect(){
+    this.rooms.clear()
+    this.nsp?.disconnect()
+    return true
+  }
+
+  /**
+   * Ask for everything a room emitted while this socket was away.
+   *
+   * `since` is the timestamp the tracking session came back with, or that of
+   * the last event actually seen. Reconnecting without it leaves a hole
+   * exactly as long as the outage.
+   */
+  replay( reference: string, since: number ){
+    this.nsp?.emit('REPLAY', { room: `order:${reference}`, since })
+    return this
+  }
+}

package/src/backend/Auth.ts

@@ -1,7 +1,18 @@
 import { baseURL } from '../baseUrl'
 import type { AuthRequestOptions } from '../types/auth'
 
-const ACCESS_TOKEN_EXPIRY = 3.75 // in 3 minutes 45 seconds
+/**
+ * When to rotate, in minutes.
+ *
+ * De.'s own default token life is four minutes, so this beats it by fifteen
+ * seconds. It is a default and not a constant because the server's life is
+ * configurable — `API_ACCESS_TOKEN_EXPIRY` — and these two numbers are
+ * otherwise free to drift apart in the direction that breaks: a deployment
+ * that shortens the token to two minutes leaves every client rotating a
+ * credential that expired ninety seconds ago, and every call in between is
+ * answered 401 with nothing to say why.
+ */
+const ACCESS_TOKEN_EXPIRY = 3.75
 
 // ─── Config ───────────────────────────────────────────────────────────────────
 //
@@ -27,7 +38,20 @@ export type AuthConfig = {
 	 * credentials are. Omit it for pure machine-to-machine access.
 	 */
 	uid?: string
+	/**
+	 * Rotate the token ahead of expiry.
+	 *
+	 * Off by default, which is the trap: a long-lived process that forgets it
+	 * works perfectly until the first expiry and then fails every call until
+	 * it is restarted. Anything holding a token for longer than one request
+	 * wants this on.
+	 */
 	autorefresh?: boolean
+	/**
+	 * Minutes between rotations. Defaults to 3.75 — set it below the De.
+	 * deployment's `API_ACCESS_TOKEN_EXPIRY` when that is not the default 4.
+	 */
+	rotateAfterMins?: number
 	onNewToken?: ( token: string ) => void
 	/** Host to substitute for `localhost` in `dev` (Eg. a native emulator) */
 	devHostname?: string
@@ -51,6 +75,7 @@ export default class Auth {
   private remoteOrigin?: string
   private refreshTimer?: NodeJS.Timeout
   private autorefresh?: boolean
+  private rotateAfterMins: number
   private onNewToken?: (token: string) => void
   private baseURL: string
   private isRotating: boolean = false
@@ -71,6 +96,9 @@ export default class Auth {
     this.version      = config.version || 1
     this.baseURL      = baseURL('API', this.env, config.devHostname )
     this.autorefresh  = config.autorefresh || false
+    this.rotateAfterMins = config.rotateAfterMins && config.rotateAfterMins > 0
+                              ? config.rotateAfterMins
+                              : ACCESS_TOKEN_EXPIRY
     this.onNewToken   = config.onNewToken
   }
 
@@ -114,7 +142,7 @@ export default class Auth {
     if( !this.autorefresh ) return
 
     this.clearRotation()
-    this.refreshTimer = setTimeout( () => this.rotateToken(), ACCESS_TOKEN_EXPIRY * 60 * 1000 )
+    this.refreshTimer = setTimeout( () => this.rotateToken(), this.rotateAfterMins * 60 * 1000 )
   }
 
   /**

package/src/core.ts

@@ -22,6 +22,10 @@
 export { default as Auth } from './backend/Auth'
 export type { AuthConfig } from './backend/Auth'
 
+// Order-room sockets — shared connect/rejoin behaviour
+export type { RealtimeConnectOptions } from './allend/realtime-socket'
+export type { RealtimeUserType } from './allend/Realtime'
+
 // Client-side OTP auth (de.auth service)
 export { default as OTPAuth } from './allend/OTPAuth'