@doist/comms-sdk 2.0.1 → 3.0.0

package/dist/esm/utils/multipart-upload.js

@@ -1,3 +1,4 @@
+import { v4 as uuid } from 'uuid';
 import { fetchWithRetry } from '../transport/fetch-with-retry.js';
 /**
  * Determine a content-type from a filename extension. Falls back to
@@ -67,8 +68,7 @@ const MIME_BY_EXTENSION = {
 };
 /**
  * Normalise a supported {@link UploadFile} into a `Blob` plus a resolved file name and
- * content type, so uploads use the cross-platform global `FormData`/`Blob` body that
- * `undici` and browsers both accept natively.
+ * content type, ready to be encoded into the multipart body.
  */
 function toBlob(file, fileName, contentType) {
     if (file instanceof Blob) {
@@ -93,15 +93,72 @@ function toBlob(file, fileName, contentType) {
     }
     throw new Error('Unsupported file type for upload: expected a Blob or Uint8Array');
 }
+/**
+ * Escapes a value for use inside a quoted `Content-Disposition` parameter, where a raw
+ * quote would end the value early and a raw CR or LF would end the header. A lone CR
+ * needs escaping too, not just CRLF pairs.
+ *
+ * This is the same escaping the platform's own `FormData` encoder applies, so servers
+ * see exactly what they would from any browser.
+ */
+function escapeDispositionValue(value) {
+    return value.replace(/"/g, '%22').replace(/\r/g, '%0D').replace(/\n/g, '%0A');
+}
+/**
+ * Rejects a media type that could not be safely written into a part header.
+ *
+ * `contentType` is public caller input and reaches the header verbatim. A value
+ * carrying a CR or LF would end the header early and let the caller forge one
+ * of its own — `Blob` normalises the `type` it stores, but the supplied value
+ * is what gets interpolated. Reject rather than silently rewrite, so a caller
+ * passing something unusable finds out instead of having it altered.
+ */
+function assertHeaderSafeContentType(contentType) {
+    if (!/^[\x20-\x7e]*$/.test(contentType)) {
+        throw new Error('contentType must contain only printable ASCII characters, without CR or LF');
+    }
+}
+/**
+ * Encodes a `multipart/form-data` body as a `Blob`, together with the `Content-Type`
+ * that describes it.
+ *
+ * Deliberately avoids `FormData`. A `FormData` body is only encoded by the `fetch` that
+ * owns that `FormData` class — undici brands its own and checks it with a plain
+ * `instanceof` — and the SDK dispatches through undici's own `fetch` to keep the request
+ * client on the same undici as the dispatcher. A global `FormData` handed to it is
+ * stringified to the literal `"[object FormData]"`, so the upload silently carries no
+ * file. `Blob` has no such brand and works with whichever `fetch` sends the request,
+ * including a caller-supplied `customFetch`.
+ */
+function buildMultipartBody(args) {
+    const { blob, fileName, contentType, fields } = args;
+    assertHeaderSafeContentType(contentType);
+    const boundary = `----comms-sdk-${uuid()}`;
+    const parts = [
+        `--${boundary}\r\n` +
+            `Content-Disposition: form-data; name="file"; filename="${escapeDispositionValue(fileName)}"\r\n` +
+            `Content-Type: ${contentType}\r\n\r\n`,
+        blob,
+        '\r\n',
+    ];
+    for (const [key, value] of Object.entries(fields)) {
+        if (value !== undefined && value !== null) {
+            parts.push(`--${boundary}\r\n` +
+                `Content-Disposition: form-data; name="${escapeDispositionValue(key)}"\r\n\r\n` +
+                `${String(value)}\r\n`);
+        }
+    }
+    parts.push(`--${boundary}--\r\n`);
+    return { body: new Blob(parts), contentType: `multipart/form-data; boundary=${boundary}` };
+}
 /**
  * Upload a file using `multipart/form-data`.
  *
- * Builds the request body with the global `FormData`/`Blob` so it works unchanged in the
- * browser and in Node.js (via `undici`). The `file` part is sent alongside `file_name`,
+ * Encodes the request body as a `Blob` so it works unchanged in the browser and in
+ * Node.js, whichever `fetch` ends up sending it. The `file` part is sent alongside `file_name`,
  * `file_size`, and `underlying_type` fields (the canonical Comms upload shape); any
  * `additionalFields` are merged in and override the derived values. Authentication uses
- * `Authorization: Bearer`, matching every other Comms SDK client, and `Content-Type` is
- * intentionally left unset so the runtime adds the correct multipart boundary.
+ * `Authorization: Bearer`, matching every other Comms SDK client.
  *
  * The response is JSON-parsed and camel-cased by {@link fetchWithRetry}; callers validate
  * the returned shape with the appropriate schema.
@@ -115,15 +172,17 @@ export async function uploadMultipartFile(args) {
         underlying_type: resolvedType,
         ...additionalFields,
     };
-    const form = new FormData();
-    form.append('file', blob, resolvedFileName);
-    for (const [key, value] of Object.entries(fields)) {
-        if (value !== undefined && value !== null) {
-            form.append(key, String(value));
-        }
-    }
+    const multipart = buildMultipartBody({
+        blob,
+        fileName: resolvedFileName,
+        contentType: resolvedType,
+        fields,
+    });
     const headers = {
         Authorization: `Bearer ${authToken}`,
+        // The boundary is ours, so this has to be declared explicitly — `fetch`
+        // only fills it in for a `FormData` body.
+        'Content-Type': multipart.contentType,
     };
     if (requestId) {
         headers['X-Request-Id'] = requestId;
@@ -132,8 +191,7 @@ export async function uploadMultipartFile(args) {
     const response = await fetchWithRetry(url, {
         method: 'POST',
         headers,
-        body: form,
-        // Don't set Content-Type — the runtime adds the multipart boundary.
+        body: multipart.body,
         timeout: 30000,
     }, maxRetries, customFetch);
     return response.data;

package/dist/esm/utils/url-helpers.js

@@ -1,7 +1,34 @@
 /**
  * Helper functions for creating Comms permalinks (`https://comms.todoist.com/...`).
+ *
+ * Paths come from `@doist/sdk-kmp`, the shared implementation of Comms link
+ * routes, so they stay in step with the other Comms clients. The path builders
+ * are used rather than the URL builders so that `getFullCommsURL` can keep
+ * serving an arbitrary base URL.
  */
+import { commsChannelPath, commsConversationPath, commsInboxThreadCommentPath, commsInboxThreadPath, commsMessagePath, commsSavedThreadCommentPath, commsSavedThreadPath, commsThreadCommentPath, commsThreadPath, parseCommsLink, } from '@doist/sdk-kmp/comms';
 const COMMS_BASE_URL = 'https://comms.todoist.com';
+/**
+ * Builds a path, falling back to a locally built path when the link builder
+ * rejects one of the given ids. These helpers run while parsing API responses,
+ * so building a path must never fail the parse.
+ *
+ * Every error is caught, not just id rejection. The link builders expose no
+ * error type to narrow on, and a path is never important enough to fail a
+ * parse over, so any failure degrades to the locally built path.
+ *
+ * @param build Builds the path.
+ * @param fallback Builds the path without the shared link builder.
+ * @returns The built path, or the locally built path if an id was rejected.
+ */
+function buildPath(build, fallback) {
+    try {
+        return build();
+    }
+    catch {
+        return fallback();
+    }
+}
 /**
  * Builds a relative Comms URL based on the provided parameters
  * @param params - URL parameters including workspace, channel, conversation, thread, etc.
@@ -12,32 +39,33 @@ const COMMS_BASE_URL = 'https://comms.todoist.com';
  */
 export function getCommsURL(params) {
     const { workspaceId, channelId, conversationId, threadId, commentId, messageId, userId } = params;
-    let url = `/${workspaceId}/`;
+    const workspace = String(workspaceId);
     if (channelId) {
-        url += `ch/${channelId}/`;
+        if (threadId && commentId) {
+            return buildPath(() => commsThreadCommentPath(workspace, channelId, threadId, commentId), () => `/${workspace}/ch/${channelId}/t/${threadId}/c/${commentId}`);
+        }
         if (threadId) {
-            url += `t/${threadId}/`;
-            if (commentId) {
-                url += `c/${commentId}`;
-            }
+            return buildPath(() => commsThreadPath(workspace, channelId, threadId), () => `/${workspace}/ch/${channelId}/t/${threadId}/`);
         }
+        return buildPath(() => commsChannelPath(workspace, channelId), () => `/${workspace}/ch/${channelId}/`);
     }
-    else if (threadId) {
-        url += `inbox/t/${threadId}/`;
+    if (threadId) {
         if (commentId) {
-            url += `c/${commentId}`;
+            return buildPath(() => commsInboxThreadCommentPath(workspace, threadId, commentId), () => `/${workspace}/inbox/t/${threadId}/c/${commentId}`);
         }
+        return buildPath(() => commsInboxThreadPath(workspace, threadId), () => `/${workspace}/inbox/t/${threadId}/`);
     }
-    else if (conversationId) {
-        url += `msg/${conversationId}/`;
+    if (conversationId) {
         if (messageId) {
-            url += `m/${messageId}`;
+            return buildPath(() => commsMessagePath(workspace, conversationId, messageId), () => `/${workspace}/msg/${conversationId}/m/${messageId}`);
         }
+        return buildPath(() => commsConversationPath(workspace, conversationId), () => `/${workspace}/msg/${conversationId}/`);
     }
-    else if (userId) {
-        url += `people/u/${userId}`;
+    // The people view and the bare workspace root have no shared route.
+    if (userId) {
+        return `/${workspace}/people/u/${userId}`;
     }
-    return url;
+    return `/${workspace}/`;
 }
 /**
  * Builds a full Comms URL (with protocol and hostname) based on the provided parameters
@@ -92,7 +120,13 @@ export function getSavedThreadsRootURL(workspaceId) {
 }
 /** Returns the URL for a saved thread. */
 export function getSavedThreadURL(params) {
-    return `/${params.workspaceId}/saved/t/${params.threadId}`;
+    const workspace = String(params.workspaceId);
+    return buildPath(() => commsSavedThreadPath(workspace, params.threadId), () => `/${workspace}/saved/t/${params.threadId}`);
+}
+/** Returns the URL for a comment on a saved thread. */
+export function getSavedThreadCommentURL(params) {
+    const workspace = String(params.workspaceId);
+    return buildPath(() => commsSavedThreadCommentPath(workspace, params.threadId, params.commentId), () => `/${workspace}/saved/t/${params.threadId}/c/${params.commentId}`);
 }
 /** Returns the URL for the search root. */
 export function getSearchRootURL(workspaceId) {
@@ -112,3 +146,57 @@ export function getSettingsURL(params) {
 export function getTeamMembersRootURL(workspaceId) {
     return `/${workspaceId}/people/u`;
 }
+/** The kinds of Comms entity a URL can point at. */
+export const COMMS_LINK_TYPES = [
+    'channel',
+    'thread',
+    'thread_comment',
+    'inbox_thread',
+    'inbox_thread_comment',
+    'saved_thread',
+    'saved_thread_comment',
+    'conversation',
+    'message',
+];
+/**
+ * Maps the link parser's type names onto the types this SDK exposes. A name
+ * that is missing here is one this SDK does not know about, and is treated as
+ * an unrecognised URL rather than surfaced as a value outside the union.
+ */
+const LINK_TYPE_BY_PARSED_NAME = {
+    Channel: 'channel',
+    Thread: 'thread',
+    ThreadComment: 'thread_comment',
+    InboxThread: 'inbox_thread',
+    InboxThreadComment: 'inbox_thread_comment',
+    SavedThread: 'saved_thread',
+    SavedThreadComment: 'saved_thread_comment',
+    Conversation: 'conversation',
+    Message: 'message',
+};
+/**
+ * Parse a Comms URL into the entity it points at.
+ *
+ * @param url The URL to parse.
+ * @returns The entity the URL points at, or `null` if it is not a Comms URL.
+ */
+export function parseCommsURL(url) {
+    const link = parseCommsLink(url);
+    if (!link) {
+        return null;
+    }
+    const type = LINK_TYPE_BY_PARSED_NAME[link.type.name];
+    if (!type) {
+        return null;
+    }
+    return {
+        type,
+        workspaceId: link.workspaceId,
+        channelId: link.channelId ?? null,
+        threadId: link.threadId ?? null,
+        commentId: link.commentId ?? null,
+        conversationId: link.conversationId ?? null,
+        messageId: link.messageId ?? null,
+        isQuoteReference: link.isQuoteReference,
+    };
+}

package/dist/types/utils/multipart-upload.d.ts

@@ -44,12 +44,11 @@ export declare function getContentTypeFromFileName(fileName: string): string;
 /**
  * Upload a file using `multipart/form-data`.
  *
- * Builds the request body with the global `FormData`/`Blob` so it works unchanged in the
- * browser and in Node.js (via `undici`). The `file` part is sent alongside `file_name`,
+ * Encodes the request body as a `Blob` so it works unchanged in the browser and in
+ * Node.js, whichever `fetch` ends up sending it. The `file` part is sent alongside `file_name`,
  * `file_size`, and `underlying_type` fields (the canonical Comms upload shape); any
  * `additionalFields` are merged in and override the derived values. Authentication uses
- * `Authorization: Bearer`, matching every other Comms SDK client, and `Content-Type` is
- * intentionally left unset so the runtime adds the correct multipart boundary.
+ * `Authorization: Bearer`, matching every other Comms SDK client.
  *
  * The response is JSON-parsed and camel-cased by {@link fetchWithRetry}; callers validate
  * the returned shape with the appropriate schema.

package/dist/types/utils/url-helpers.d.ts

@@ -1,5 +1,10 @@
 /**
  * Helper functions for creating Comms permalinks (`https://comms.todoist.com/...`).
+ *
+ * Paths come from `@doist/sdk-kmp`, the shared implementation of Comms link
+ * routes, so they stay in step with the other Comms clients. The path builders
+ * are used rather than the URL builders so that `getFullCommsURL` can keep
+ * serving an arbitrary base URL.
  */
 export type CommsURLParams = {
     workspaceId: number;
@@ -72,6 +77,12 @@ export declare function getSavedThreadURL(params: {
     workspaceId: number;
     threadId: string;
 }): string;
+/** Returns the URL for a comment on a saved thread. */
+export declare function getSavedThreadCommentURL(params: {
+    workspaceId: number;
+    threadId: string;
+    commentId: string;
+}): string;
 /** Returns the URL for the search root. */
 export declare function getSearchRootURL(workspaceId: number): string;
 /** Returns the URL for a search with a query. */
@@ -86,3 +97,33 @@ export declare function getSettingsURL(params: {
 }): string;
 /** Returns the URL for the team members root. */
 export declare function getTeamMembersRootURL(workspaceId: number): string;
+/** The kinds of Comms entity a URL can point at. */
+export declare const COMMS_LINK_TYPES: readonly ["channel", "thread", "thread_comment", "inbox_thread", "inbox_thread_comment", "saved_thread", "saved_thread_comment", "conversation", "message"];
+/** The kind of Comms entity a URL points at. */
+export type CommsLinkType = (typeof COMMS_LINK_TYPES)[number];
+/** The entity a Comms URL points at. */
+export type CommsURLInfo = {
+    /** The kind of entity the URL points at. */
+    type: CommsLinkType;
+    /** The ID of the workspace the entity belongs to. */
+    workspaceId: string;
+    /** The ID of the channel, when the URL names one. */
+    channelId: string | null;
+    /** The ID of the thread, when the URL names one. */
+    threadId: string | null;
+    /** The ID of the comment, when the URL names one. */
+    commentId: string | null;
+    /** The ID of the conversation, when the URL names one. */
+    conversationId: string | null;
+    /** The ID of the message, when the URL names one. */
+    messageId: string | null;
+    /** Whether the URL points at a quoted reference rather than the entity itself. */
+    isQuoteReference: boolean;
+};
+/**
+ * Parse a Comms URL into the entity it points at.
+ *
+ * @param url The URL to parse.
+ * @returns The entity the URL points at, or `null` if it is not a Comms URL.
+ */
+export declare function parseCommsURL(url: string): CommsURLInfo | null;

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "@doist/comms-sdk",
-    "version": "2.0.1",
+    "version": "3.0.0",
     "description": "A TypeScript wrapper for the Comms REST API.",
     "author": "Doist developers",
     "homepage": "https://doist.github.io/comms-sdk-typescript/",
@@ -15,14 +15,11 @@
         "node": ">=24",
         "npm": ">=11"
     },
-    "main": "dist/cjs/index.js",
-    "module": "dist/esm/index.js",
     "types": "dist/types/index.d.ts",
     "exports": {
         ".": {
             "types": "./dist/types/index.d.ts",
-            "import": "./dist/esm/index.js",
-            "require": "./dist/cjs/index.js"
+            "default": "./dist/esm/index.js"
         }
     },
     "sideEffects": false,
@@ -31,22 +28,21 @@
         "test": "vitest run",
         "test:watch": "vitest",
         "test:coverage": "vitest run --coverage",
-        "build:cjs": "npx tsc -p tsconfig.cjs.json",
         "build:esm": "npx tsc -p tsconfig.esm.json",
         "build:fix-esm": "node scripts/fix-esm-imports.cjs",
         "build:fix-dts": "node scripts/fix-dts-imports.cjs",
-        "build:post": "echo '{\"type\":\"commonjs\"}' > dist/cjs/package.json",
-        "build": "npm-run-all clean build:cjs build:esm build:fix-esm build:fix-dts build:post",
+        "build": "npm-run-all clean build:esm build:fix-esm build:fix-dts",
         "type-check": "npx tsc --noEmit",
         "check": "oxlint src && oxfmt --check",
         "check:fix": "oxlint src --fix && oxfmt",
-        "attw": "attw --pack --ignore-rules fallback-condition false-esm",
+        "attw": "attw --pack --ignore-rules cjs-resolves-to-esm",
         "audit": "npm audit --audit-level=moderate",
         "integrity-checks": "npm-run-all clean check test build attw",
         "prepublishOnly": "npm run integrity-checks",
         "prepare": "npm run build"
     },
     "dependencies": {
+        "@doist/sdk-kmp": "0.2.3",
         "camelcase": "9.0.0",
         "ts-custom-error": "3.3.1",
         "undici": "7.29.0",
@@ -81,7 +77,6 @@
         "*.{ts,tsx,json,md,yml,yaml}": "oxfmt --no-error-on-unmatched-pattern"
     },
     "files": [
-        "dist/cjs/**/*",
         "dist/esm/**/*",
         "dist/types/**/*",
         "!dist/**/*.test.js",

package/dist/cjs/authentication.js

@@ -1,256 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.TOKEN_ENDPOINT_AUTH_METHODS = exports.COMMS_SCOPES = void 0;
-exports.getAuthStateParameter = getAuthStateParameter;
-exports.getAuthorizationUrl = getAuthorizationUrl;
-exports.getAuthToken = getAuthToken;
-exports.refreshAuthToken = refreshAuthToken;
-exports.revokeAuthToken = revokeAuthToken;
-exports.registerClient = registerClient;
-const uuid_1 = require("uuid");
-const http_client_1 = require("./transport/http-client");
-const errors_1 = require("./types/errors");
-/**
- * Default origin of the Comms authorization server.
- *
- * The authorization server for Comms is Todoist (`todoist.com`), not the
- * resource server (`comms.todoist.com`). Tokens are issued by Todoist and
- * accepted by the Comms API. Paths match Todoist's published
- * `/.well-known/oauth-authorization-server` metadata.
- */
-const DEFAULT_AUTH_BASE_URL = 'https://todoist.com';
-function getAuthBaseUrl(baseUrl) {
-    const base = baseUrl ?? DEFAULT_AUTH_BASE_URL;
-    return base.endsWith('/') ? base.slice(0, -1) : base;
-}
-/**
- * OAuth scopes for the Comms API.
- *
- * @remarks
- * Request only the scopes your application needs:
- *
- * **User Scopes:**
- * - `user:read` - Access user's personal settings
- * - `user:write` - Access and update user's personal settings
- *
- * **Workspace Scopes:**
- * - `workspaces:read` - Access teams the user is part of
- * - `workspaces:write` - Access and update teams the user is part of
- *
- * **Channel Scopes:**
- * - `channels:read` - Access channels
- * - `channels:write` - Access and update channels
- * - `channels:remove` - Access, update, and delete channels
- *
- * **Thread Scopes:**
- * - `threads:read` - Access threads
- * - `threads:write` - Access and update threads
- * - `threads:remove` - Access, update, and delete threads
- *
- * **Comment Scopes:**
- * - `comments:read` - Access comments
- * - `comments:write` - Access and update comments
- * - `comments:remove` - Access, update, and delete comments
- *
- * **Group Scopes:**
- * - `groups:read` - Access groups
- * - `groups:write` - Access and update groups
- * - `groups:remove` - Access, update, and delete groups
- *
- * **Message Scopes:**
- * - `messages:read` - Access messages
- * - `messages:write` - Access and update messages
- * - `messages:remove` - Access, update, and delete messages
- *
- * **Reaction Scopes:**
- * - `reactions:read` - Access reactions
- * - `reactions:write` - Access and update reactions
- * - `reactions:remove` - Access, update, and delete reactions
- *
- * **Search Scopes:**
- * - `search:read` - Search
- *
- * **Attachment Scopes:**
- * - `attachments:read` - Access attachments
- * - `attachments:write` - Access and update attachments
- *
- * **Notification Scopes:**
- * - `notifications:read` - Read user's notifications settings
- * - `notifications:write` - Read and update user's notifications settings
- */
-exports.COMMS_SCOPES = [
-    'user:read',
-    'user:write',
-    'workspaces:read',
-    'workspaces:write',
-    'channels:read',
-    'channels:write',
-    'channels:remove',
-    'threads:read',
-    'threads:write',
-    'threads:remove',
-    'comments:read',
-    'comments:write',
-    'comments:remove',
-    'groups:read',
-    'groups:write',
-    'groups:remove',
-    'messages:read',
-    'messages:write',
-    'messages:remove',
-    'reactions:read',
-    'reactions:write',
-    'reactions:remove',
-    'search:read',
-    'attachments:read',
-    'attachments:write',
-    'notifications:read',
-    'notifications:write',
-];
-/** Supported token endpoint authentication methods for dynamic client registration. */
-exports.TOKEN_ENDPOINT_AUTH_METHODS = [
-    'client_secret_post',
-    'client_secret_basic',
-    'none',
-];
-function getAuthStateParameter() {
-    return (0, uuid_1.v4)();
-}
-/**
- * Generates the authorization URL for the OAuth2 flow.
- *
- * The `clientId` can be either a traditional client ID string (e.g. from
- * {@link registerClient}) or an HTTPS URL pointing to a client metadata document,
- * as defined in {@link https://drafts.ietf.org/doc/draft-ietf-oauth-client-id-metadata-document/ RFC draft-ietf-oauth-client-id-metadata-document}.
- */
-function getAuthorizationUrl(clientId, scopes, state, redirectUri, baseUrl) {
-    if (!scopes?.length) {
-        throw new Error('At least one scope value is required.');
-    }
-    const authBaseUrl = `${getAuthBaseUrl(baseUrl)}/oauth`;
-    const scope = scopes.join(' ');
-    const params = new URLSearchParams({
-        client_id: clientId,
-        response_type: 'code',
-        scope,
-        state,
-    });
-    if (redirectUri) {
-        params.append('redirect_uri', redirectUri);
-    }
-    return `${authBaseUrl}/authorize?${params.toString()}`;
-}
-async function getAuthToken(args, options) {
-    const tokenUrl = `${getAuthBaseUrl(options?.baseUrl)}/oauth/access_token`;
-    const payload = {
-        clientId: args.clientId,
-        clientSecret: args.clientSecret,
-        code: args.code,
-        grantType: 'authorization_code',
-        ...(args.redirectUri && { redirectUri: args.redirectUri }),
-    };
-    const response = await (0, http_client_1.request)({
-        httpMethod: 'POST',
-        baseUri: tokenUrl,
-        relativePath: '',
-        payload,
-        customFetch: options?.customFetch,
-    });
-    if (!(0, http_client_1.isSuccess)(response) || !response.data?.accessToken) {
-        throw new errors_1.CommsRequestError('Authentication token exchange failed.', response.status, response.data);
-    }
-    return response.data;
-}
-/**
- * Exchanges a refresh token for a new access token using the OAuth2
- * `refresh_token` grant.
- *
- * @example
- * ```typescript
- * const { accessToken, refreshToken } = await refreshAuthToken({
- *   clientId: 'client-id',
- *   clientSecret: 'client-secret',
- *   refreshToken: storedRefreshToken,
- * })
- * ```
- *
- * @returns The refreshed token. The response may include a new `refreshToken`
- * (rotated by the server); persist it in place of the previous one when present.
- * @throws {@link CommsRequestError} If the refresh fails
- */
-async function refreshAuthToken(args, options) {
-    const tokenUrl = `${getAuthBaseUrl(options?.baseUrl)}/oauth/access_token`;
-    const payload = {
-        clientId: args.clientId,
-        clientSecret: args.clientSecret,
-        refreshToken: args.refreshToken,
-        grantType: 'refresh_token',
-    };
-    const response = await (0, http_client_1.request)({
-        httpMethod: 'POST',
-        baseUri: tokenUrl,
-        relativePath: '',
-        payload,
-        customFetch: options?.customFetch,
-    });
-    if (!(0, http_client_1.isSuccess)(response) || !response.data?.accessToken) {
-        throw new errors_1.CommsRequestError('Authentication token refresh failed.', response.status, response.data);
-    }
-    return response.data;
-}
-async function revokeAuthToken(args, options) {
-    const revokeUrl = `${getAuthBaseUrl(options?.baseUrl)}/api/v1/revoke`;
-    const response = await (0, http_client_1.request)({
-        httpMethod: 'POST',
-        baseUri: revokeUrl,
-        relativePath: '',
-        payload: {
-            clientId: args.clientId,
-            clientSecret: args.clientSecret,
-            token: args.accessToken,
-        },
-        customFetch: options?.customFetch,
-    });
-    return (0, http_client_1.isSuccess)(response);
-}
-/**
- * Registers a new OAuth client via Dynamic Client Registration (RFC 7591).
- *
- * @example
- * ```typescript
- * const client = await registerClient({
- *   redirectUris: ['https://example.com/callback'],
- *   clientName: 'My App',
- *   scope: ['user:read', 'channels:read'],
- * })
- * // Use client.clientId and client.clientSecret for OAuth flows
- * ```
- *
- * @returns The registered client details
- * @throws {@link CommsRequestError} If the registration fails
- * @see {@link https://datatracker.ietf.org/doc/html/rfc7591 RFC 7591}
- */
-async function registerClient(args, options) {
-    const registerUrl = `${getAuthBaseUrl(options?.baseUrl)}/oauth/register`;
-    const response = await (0, http_client_1.request)({
-        httpMethod: 'POST',
-        baseUri: registerUrl,
-        relativePath: '',
-        payload: { ...args, scope: args.scope?.join(' ') },
-        customFetch: options?.customFetch,
-    });
-    if (!(0, http_client_1.isSuccess)(response) || !response.data?.clientId) {
-        throw new errors_1.CommsRequestError('Dynamic client registration failed.', response.status, response.data);
-    }
-    const { clientIdIssuedAt, clientSecretExpiresAt, scope, ...rest } = response.data;
-    return {
-        ...rest,
-        scope: scope ? scope.split(' ') : undefined,
-        clientIdIssuedAt: clientIdIssuedAt !== undefined ? new Date(clientIdIssuedAt * 1000) : undefined,
-        clientSecretExpiresAt: clientSecretExpiresAt === undefined
-            ? undefined
-            : clientSecretExpiresAt === 0
-                ? null
-                : new Date(clientSecretExpiresAt * 1000),
-    };
-}