@eduware/oneroster 1.0.0

package/dist/esm/hooks/bearer.js

@@ -0,0 +1,55 @@
+/*
+ * Bearer Token Authentication Hook for OneRoster API
+ *
+ * This hook handles pre-authenticated Bearer tokens, such as those provided
+ * by ClassLink Proxy mode where the token is already obtained and doesn't
+ * require OAuth1 or OAuth2 token exchange.
+ */
+import { env } from '../lib/env.js';
+import { parse } from '../lib/schemas.js';
+import * as components from '../models/components/index.js';
+export class BearerHook {
+    async beforeRequest(hookCtx, request) {
+        // Check if Bearer auth type is being used
+        const security = await this.getSecurityConfig(hookCtx);
+        if (security?.authType !== 'bearer') {
+            // Skip - not using bearer auth
+            return request;
+        }
+        const bearerToken = await this.getBearerToken(hookCtx);
+        if (!bearerToken) {
+            return request;
+        }
+        request.headers.set('Authorization', `Bearer ${bearerToken}`);
+        return request;
+    }
+    async getBearerToken(hookCtx) {
+        const security = await this.getSecurityConfig(hookCtx);
+        if (!security) {
+            return null;
+        }
+        // Get bearer token from security config or environment variable
+        const bearerToken = security.bearerToken ?? env().ONEROSTER_BEARER_TOKEN ?? '';
+        if (!bearerToken) {
+            return null;
+        }
+        return bearerToken;
+    }
+    async getSecurityConfig(hookCtx) {
+        const source = hookCtx.securitySource;
+        if (!source) {
+            return null;
+        }
+        let security = source;
+        if (typeof source === 'function') {
+            security = await source();
+        }
+        try {
+            return parse(security, (val) => components.Security$outboundSchema.parse(val), 'unexpected security type');
+        }
+        catch {
+            return null;
+        }
+    }
+}
+//# sourceMappingURL=bearer.js.map

package/dist/esm/hooks/bearer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"bearer.js","sourceRoot":"","sources":["../../../src/hooks/bearer.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,GAAG,EAAE,MAAM,eAAe,CAAC;AACpC,OAAO,EAAE,KAAK,EAAE,MAAM,mBAAmB,CAAC;AAC1C,OAAO,KAAK,UAAU,MAAM,+BAA+B,CAAC;AAG5D,MAAM,OAAO,UAAU;IACnB,KAAK,CAAC,aAAa,CAAC,OAA6B,EAAE,OAAgB;QAC/D,0CAA0C;QAC1C,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,iBAAiB,CAAC,OAAO,CAAC,CAAC;QACvD,IAAI,QAAQ,EAAE,QAAQ,KAAK,QAAQ,EAAE,CAAC;YAClC,+BAA+B;YAC/B,OAAO,OAAO,CAAC;QACnB,CAAC;QAED,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC;QACvD,IAAI,CAAC,WAAW,EAAE,CAAC;YACf,OAAO,OAAO,CAAC;QACnB,CAAC;QAED,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,EAAE,UAAU,WAAW,EAAE,CAAC,CAAC;QAE9D,OAAO,OAAO,CAAC;IACnB,CAAC;IAEO,KAAK,CAAC,cAAc,CAAC,OAAoB;QAC7C,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,iBAAiB,CAAC,OAAO,CAAC,CAAC;QACvD,IAAI,CAAC,QAAQ,EAAE,CAAC;YACZ,OAAO,IAAI,CAAC;QAChB,CAAC;QAED,gEAAgE;QAChE,MAAM,WAAW,GAAG,QAAQ,CAAC,WAAW,IAAI,GAAG,EAAE,CAAC,sBAAsB,IAAI,EAAE,CAAC;QAE/E,IAAI,CAAC,WAAW,EAAE,CAAC;YACf,OAAO,IAAI,CAAC;QAChB,CAAC;QAED,OAAO,WAAW,CAAC;IACvB,CAAC;IAEO,KAAK,CAAC,iBAAiB,CAAC,OAAoB;QAChD,MAAM,MAAM,GAAG,OAAO,CAAC,cAAc,CAAC;QAEtC,IAAI,CAAC,MAAM,EAAE,CAAC;YACV,OAAO,IAAI,CAAC;QAChB,CAAC;QAED,IAAI,QAAQ,GAAG,MAAM,CAAC;QACtB,IAAI,OAAO,MAAM,KAAK,UAAU,EAAE,CAAC;YAC/B,QAAQ,GAAG,MAAM,MAAM,EAAE,CAAC;QAC9B,CAAC;QAED,IAAI,CAAC;YACD,OAAO,KAAK,CACR,QAAQ,EACR,CAAC,GAAG,EAAE,EAAE,CAAC,UAAU,CAAC,uBAAuB,CAAC,KAAK,CAAC,GAAG,CAAC,EACtD,0BAA0B,CAC7B,CAAC;QACN,CAAC;QAAC,MAAM,CAAC;YACL,OAAO,IAAI,CAAC;QAChB,CAAC;IACL,CAAC;CACJ"}

package/dist/esm/hooks/hooks.d.ts

@@ -0,0 +1,24 @@
+import { RequestInput } from '../lib/http.js';
+import { AfterErrorContext, AfterErrorHook, AfterSuccessContext, AfterSuccessHook, BeforeCreateRequestContext, BeforeCreateRequestHook, BeforeRequestContext, BeforeRequestHook, Hooks, SDKInitHook, SDKInitOptions } from './types.js';
+export declare class SDKHooks implements Hooks {
+    sdkInitHooks: SDKInitHook[];
+    beforeCreateRequestHooks: BeforeCreateRequestHook[];
+    beforeRequestHooks: BeforeRequestHook[];
+    afterSuccessHooks: AfterSuccessHook[];
+    afterErrorHooks: AfterErrorHook[];
+    constructor();
+    registerSDKInitHook(hook: SDKInitHook): void;
+    registerBeforeCreateRequestHook(hook: BeforeCreateRequestHook): void;
+    registerBeforeRequestHook(hook: BeforeRequestHook): void;
+    registerAfterSuccessHook(hook: AfterSuccessHook): void;
+    registerAfterErrorHook(hook: AfterErrorHook): void;
+    sdkInit(opts: SDKInitOptions): SDKInitOptions;
+    beforeCreateRequest(hookCtx: BeforeCreateRequestContext, input: RequestInput): RequestInput;
+    beforeRequest(hookCtx: BeforeRequestContext, request: Request): Promise<Request>;
+    afterSuccess(hookCtx: AfterSuccessContext, response: Response): Promise<Response>;
+    afterError(hookCtx: AfterErrorContext, response: Response | null, error: unknown): Promise<{
+        response: Response | null;
+        error: unknown;
+    }>;
+}
+//# sourceMappingURL=hooks.d.ts.map

package/dist/esm/hooks/hooks.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"hooks.d.ts","sourceRoot":"","sources":["../../../src/hooks/hooks.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAK9C,OAAO,EACH,iBAAiB,EACjB,cAAc,EACd,mBAAmB,EACnB,gBAAgB,EAChB,0BAA0B,EAC1B,uBAAuB,EACvB,oBAAoB,EACpB,iBAAiB,EAEjB,KAAK,EACL,WAAW,EACX,cAAc,EACjB,MAAM,YAAY,CAAC;AAGpB,qBAAa,QAAS,YAAW,KAAK;IAClC,YAAY,EAAE,WAAW,EAAE,CAAM;IACjC,wBAAwB,EAAE,uBAAuB,EAAE,CAAM;IACzD,kBAAkB,EAAE,iBAAiB,EAAE,CAAM;IAC7C,iBAAiB,EAAE,gBAAgB,EAAE,CAAM;IAC3C,eAAe,EAAE,cAAc,EAAE,CAAM;;IA+BvC,mBAAmB,CAAC,IAAI,EAAE,WAAW;IAIrC,+BAA+B,CAAC,IAAI,EAAE,uBAAuB;IAI7D,yBAAyB,CAAC,IAAI,EAAE,iBAAiB;IAIjD,wBAAwB,CAAC,IAAI,EAAE,gBAAgB;IAI/C,sBAAsB,CAAC,IAAI,EAAE,cAAc;IAI3C,OAAO,CAAC,IAAI,EAAE,cAAc,GAAG,cAAc;IAI7C,mBAAmB,CAAC,OAAO,EAAE,0BAA0B,EAAE,KAAK,EAAE,YAAY,GAAG,YAAY;IAUrF,aAAa,CAAC,OAAO,EAAE,oBAAoB,EAAE,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;IAUhF,YAAY,CAAC,OAAO,EAAE,mBAAmB,EAAE,QAAQ,EAAE,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC;IAUjF,UAAU,CACZ,OAAO,EAAE,iBAAiB,EAC1B,QAAQ,EAAE,QAAQ,GAAG,IAAI,EACzB,KAAK,EAAE,OAAO,GACf,OAAO,CAAC;QAAE,QAAQ,EAAE,QAAQ,GAAG,IAAI,CAAC;QAAC,KAAK,EAAE,OAAO,CAAA;KAAE,CAAC;CAY5D"}

package/dist/esm/hooks/hooks.js

@@ -0,0 +1,89 @@
+import { BearerHook } from './bearer.js';
+import { OAuth1Hook } from './oauth1.js';
+import { OAuth2Hook } from './oauth2.js';
+import { initHooks } from './registration.js';
+import { VersionPathHook } from './version-path.js';
+export class SDKHooks {
+    constructor() {
+        this.sdkInitHooks = [];
+        this.beforeCreateRequestHooks = [];
+        this.beforeRequestHooks = [];
+        this.afterSuccessHooks = [];
+        this.afterErrorHooks = [];
+        // VersionPathHook must run first to transform URLs before auth hooks add headers
+        const presetHooks = [
+            new VersionPathHook(),
+            new BearerHook(),
+            new OAuth1Hook(),
+            new OAuth2Hook(),
+        ];
+        for (const hook of presetHooks) {
+            if ('sdkInit' in hook) {
+                this.registerSDKInitHook(hook);
+            }
+            if ('beforeCreateRequest' in hook) {
+                this.registerBeforeCreateRequestHook(hook);
+            }
+            if ('beforeRequest' in hook) {
+                this.registerBeforeRequestHook(hook);
+            }
+            if ('afterSuccess' in hook) {
+                this.registerAfterSuccessHook(hook);
+            }
+            if ('afterError' in hook) {
+                this.registerAfterErrorHook(hook);
+            }
+        }
+        initHooks(this);
+    }
+    registerSDKInitHook(hook) {
+        this.sdkInitHooks.push(hook);
+    }
+    registerBeforeCreateRequestHook(hook) {
+        this.beforeCreateRequestHooks.push(hook);
+    }
+    registerBeforeRequestHook(hook) {
+        this.beforeRequestHooks.push(hook);
+    }
+    registerAfterSuccessHook(hook) {
+        this.afterSuccessHooks.push(hook);
+    }
+    registerAfterErrorHook(hook) {
+        this.afterErrorHooks.push(hook);
+    }
+    sdkInit(opts) {
+        return this.sdkInitHooks.reduce((opts, hook) => hook.sdkInit(opts), opts);
+    }
+    beforeCreateRequest(hookCtx, input) {
+        let inp = input;
+        for (const hook of this.beforeCreateRequestHooks) {
+            inp = hook.beforeCreateRequest(hookCtx, inp);
+        }
+        return inp;
+    }
+    async beforeRequest(hookCtx, request) {
+        let req = request;
+        for (const hook of this.beforeRequestHooks) {
+            req = await hook.beforeRequest(hookCtx, req);
+        }
+        return req;
+    }
+    async afterSuccess(hookCtx, response) {
+        let res = response;
+        for (const hook of this.afterSuccessHooks) {
+            res = await hook.afterSuccess(hookCtx, res);
+        }
+        return res;
+    }
+    async afterError(hookCtx, response, error) {
+        let res = response;
+        let err = error;
+        for (const hook of this.afterErrorHooks) {
+            const result = await hook.afterError(hookCtx, res, err);
+            res = result.response;
+            err = result.error;
+        }
+        return { response: res, error: err };
+    }
+}
+//# sourceMappingURL=hooks.js.map

package/dist/esm/hooks/hooks.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"hooks.js","sourceRoot":"","sources":["../../../src/hooks/hooks.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAC;AAe9C,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AAEpD,MAAM,OAAO,QAAQ;IAOjB;QANA,iBAAY,GAAkB,EAAE,CAAC;QACjC,6BAAwB,GAA8B,EAAE,CAAC;QACzD,uBAAkB,GAAwB,EAAE,CAAC;QAC7C,sBAAiB,GAAuB,EAAE,CAAC;QAC3C,oBAAe,GAAqB,EAAE,CAAC;QAGnC,iFAAiF;QACjF,MAAM,WAAW,GAAgB;YAC7B,IAAI,eAAe,EAAE;YACrB,IAAI,UAAU,EAAE;YAChB,IAAI,UAAU,EAAE;YAChB,IAAI,UAAU,EAAE;SACnB,CAAC;QAEF,KAAK,MAAM,IAAI,IAAI,WAAW,EAAE,CAAC;YAC7B,IAAI,SAAS,IAAI,IAAI,EAAE,CAAC;gBACpB,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,CAAC;YACnC,CAAC;YACD,IAAI,qBAAqB,IAAI,IAAI,EAAE,CAAC;gBAChC,IAAI,CAAC,+BAA+B,CAAC,IAAI,CAAC,CAAC;YAC/C,CAAC;YACD,IAAI,eAAe,IAAI,IAAI,EAAE,CAAC;gBAC1B,IAAI,CAAC,yBAAyB,CAAC,IAAI,CAAC,CAAC;YACzC,CAAC;YACD,IAAI,cAAc,IAAI,IAAI,EAAE,CAAC;gBACzB,IAAI,CAAC,wBAAwB,CAAC,IAAI,CAAC,CAAC;YACxC,CAAC;YACD,IAAI,YAAY,IAAI,IAAI,EAAE,CAAC;gBACvB,IAAI,CAAC,sBAAsB,CAAC,IAAI,CAAC,CAAC;YACtC,CAAC;QACL,CAAC;QACD,SAAS,CAAC,IAAI,CAAC,CAAC;IACpB,CAAC;IAED,mBAAmB,CAAC,IAAiB;QACjC,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACjC,CAAC;IAED,+BAA+B,CAAC,IAA6B;QACzD,IAAI,CAAC,wBAAwB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC7C,CAAC;IAED,yBAAyB,CAAC,IAAuB;QAC7C,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACvC,CAAC;IAED,wBAAwB,CAAC,IAAsB;QAC3C,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACtC,CAAC;IAED,sBAAsB,CAAC,IAAoB;QACvC,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACpC,CAAC;IAED,OAAO,CAAC,IAAoB;QACxB,OAAO,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC,CAAC;IAC9E,CAAC;IAED,mBAAmB,CAAC,OAAmC,EAAE,KAAmB;QACxE,IAAI,GAAG,GAAG,KAAK,CAAC;QAEhB,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,wBAAwB,EAAE,CAAC;YAC/C,GAAG,GAAG,IAAI,CAAC,mBAAmB,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;QACjD,CAAC;QAED,OAAO,GAAG,CAAC;IACf,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,OAA6B,EAAE,OAAgB;QAC/D,IAAI,GAAG,GAAG,OAAO,CAAC;QAElB,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,kBAAkB,EAAE,CAAC;YACzC,GAAG,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;QACjD,CAAC;QAED,OAAO,GAAG,CAAC;IACf,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,OAA4B,EAAE,QAAkB;QAC/D,IAAI,GAAG,GAAG,QAAQ,CAAC;QAEnB,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,iBAAiB,EAAE,CAAC;YACxC,GAAG,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;QAChD,CAAC;QAED,OAAO,GAAG,CAAC;IACf,CAAC;IAED,KAAK,CAAC,UAAU,CACZ,OAA0B,EAC1B,QAAyB,EACzB,KAAc;QAEd,IAAI,GAAG,GAAG,QAAQ,CAAC;QACnB,IAAI,GAAG,GAAG,KAAK,CAAC;QAEhB,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,eAAe,EAAE,CAAC;YACtC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;YACxD,GAAG,GAAG,MAAM,CAAC,QAAQ,CAAC;YACtB,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC;QACvB,CAAC;QAED,OAAO,EAAE,QAAQ,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC;IACzC,CAAC;CACJ"}

package/dist/esm/hooks/index.d.ts

@@ -0,0 +1,3 @@
+export * from './hooks.js';
+export * from './types.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/esm/hooks/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/hooks/index.ts"],"names":[],"mappings":"AAAA,cAAc,YAAY,CAAC;AAC3B,cAAc,YAAY,CAAC"}

package/dist/esm/hooks/index.js

@@ -0,0 +1,3 @@
+export * from './hooks.js';
+export * from './types.js';
+//# sourceMappingURL=index.js.map

package/dist/esm/hooks/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/hooks/index.ts"],"names":[],"mappings":"AAAA,cAAc,YAAY,CAAC;AAC3B,cAAc,YAAY,CAAC"}

package/dist/esm/hooks/oauth1.d.ts

@@ -0,0 +1,13 @@
+import { BeforeRequestContext, BeforeRequestHook } from './types.js';
+export declare class OAuth1Hook implements BeforeRequestHook {
+    beforeRequest(hookCtx: BeforeRequestContext, request: Request): Promise<Request>;
+    private generateOAuth1Header;
+    private createSignatureBaseString;
+    private generateSignature;
+    private generateNonce;
+    private percentEncode;
+    private getCredentials;
+    private getSecurityConfig;
+    private getOneRosterVersion;
+}
+//# sourceMappingURL=oauth1.d.ts.map

package/dist/esm/hooks/oauth1.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauth1.d.ts","sourceRoot":"","sources":["../../../src/hooks/oauth1.ts"],"names":[],"mappings":"AAeA,OAAO,EAAE,oBAAoB,EAAE,iBAAiB,EAAe,MAAM,YAAY,CAAC;AAOlF,qBAAa,UAAW,YAAW,iBAAiB;IAC1C,aAAa,CAAC,OAAO,EAAE,oBAAoB,EAAE,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;IA6BtF,OAAO,CAAC,oBAAoB;IAkD5B,OAAO,CAAC,yBAAyB;IAkBjC,OAAO,CAAC,iBAAiB;IAUzB,OAAO,CAAC,aAAa;IASrB,OAAO,CAAC,aAAa;YASP,cAAc;YAmBd,iBAAiB;IAuB/B,OAAO,CAAC,mBAAmB;CAQ9B"}

package/dist/esm/hooks/oauth1.js

@@ -0,0 +1,149 @@
+/*
+ * OAuth 1.0a Authentication Hook for OneRoster API
+ *
+ * IMPORTANT: OAuth 1.0a is only supported in OneRoster v1.1.
+ * OneRoster v1.2 requires OAuth 2.0 Bearer Tokens (Client Credentials Grant).
+ *
+ * Per IMS Global OneRoster 1.2 specification:
+ * "Use of OAuth 1.0a message signing has been removed. The use of OAuth 2.0
+ * Bearer Tokens (Client Credentials Grant) is required instead."
+ */
+import * as crypto from 'crypto';
+import { parse } from '../lib/schemas.js';
+import * as components from '../models/components/index.js';
+export class OAuth1Hook {
+    async beforeRequest(hookCtx, request) {
+        const credentials = await this.getCredentials(hookCtx);
+        if (!credentials) {
+            return request;
+        }
+        // Check if this is OAuth1 auth type
+        const security = await this.getSecurityConfig(hookCtx);
+        if (security?.authType !== 'oauth1') {
+            return request;
+        }
+        // Validate: OAuth1 is not supported in OneRoster v1.2
+        const version = this.getOneRosterVersion(hookCtx);
+        if (version === '1.2') {
+            throw new Error('OAuth 1.0a authentication is not supported in OneRoster v1.2. ' +
+                'Per IMS Global specification, OneRoster v1.2 requires OAuth 2.0 Bearer Tokens. ' +
+                'Please use authType: "oauth2" or remove oneRosterVersion to use the default (v1.2 with OAuth2).');
+        }
+        const authHeader = this.generateOAuth1Header(request.method, request.url, credentials);
+        request.headers.set('Authorization', authHeader);
+        return request;
+    }
+    generateOAuth1Header(method, url, credentials) {
+        const timestamp = Math.floor(Date.now() / 1000).toString();
+        const nonce = this.generateNonce();
+        const parsedUrl = new URL(url);
+        const baseUrl = `${parsedUrl.protocol}//${parsedUrl.host}${parsedUrl.pathname}`;
+        // Collect all parameters (OAuth + query string)
+        const params = {
+            oauth_callback: 'about:blank',
+            oauth_consumer_key: credentials.consumerKey,
+            oauth_nonce: nonce,
+            oauth_signature_method: 'HMAC-SHA256',
+            oauth_timestamp: timestamp,
+            oauth_version: '1.0',
+        };
+        // Add query parameters
+        for (const [key, value] of parsedUrl.searchParams) {
+            params[key] = value;
+        }
+        // Create signature base string
+        const signatureBaseString = this.createSignatureBaseString(method, baseUrl, params);
+        // Generate signature
+        const signature = this.generateSignature(signatureBaseString, credentials.consumerSecret);
+        // Build Authorization header
+        const oauthParams = {
+            oauth_callback: this.percentEncode('about:blank'),
+            oauth_consumer_key: credentials.consumerKey,
+            oauth_nonce: nonce,
+            oauth_signature: this.percentEncode(signature),
+            oauth_signature_method: 'HMAC-SHA256',
+            oauth_timestamp: timestamp,
+            oauth_version: '1.0',
+        };
+        const headerParts = Object.entries(oauthParams)
+            .map(([key, value]) => `${key}="${value}"`)
+            .join(', ');
+        return `OAuth ${headerParts}`;
+    }
+    createSignatureBaseString(method, baseUrl, params) {
+        // Sort parameters alphabetically
+        const sortedKeys = Object.keys(params).sort();
+        const paramString = sortedKeys
+            .map((key) => `${this.percentEncode(key)}=${this.percentEncode(params[key])}`)
+            .join('&');
+        return [
+            method.toUpperCase(),
+            this.percentEncode(baseUrl),
+            this.percentEncode(paramString),
+        ].join('&');
+    }
+    generateSignature(signatureBaseString, consumerSecret) {
+        // The signing key is consumerSecret + "&" (no token secret for client credentials)
+        const signingKey = `${this.percentEncode(consumerSecret)}&`;
+        // Use Node.js crypto module for HMAC-SHA256
+        const hmac = crypto.createHmac('sha256', signingKey);
+        hmac.update(signatureBaseString);
+        return hmac.digest('base64');
+    }
+    generateNonce() {
+        const chars = '0123456789ABCDEF';
+        let nonce = '';
+        for (let i = 0; i < 16; i++) {
+            nonce += chars[Math.floor(Math.random() * chars.length)];
+        }
+        return nonce;
+    }
+    percentEncode(str) {
+        return encodeURIComponent(str)
+            .replace(/!/g, '%21')
+            .replace(/\*/g, '%2A')
+            .replace(/'/g, '%27')
+            .replace(/\(/g, '%28')
+            .replace(/\)/g, '%29');
+    }
+    async getCredentials(hookCtx) {
+        const security = await this.getSecurityConfig(hookCtx);
+        if (!security) {
+            return null;
+        }
+        const consumerKey = security.clientID;
+        const consumerSecret = security.clientSecret;
+        if (!consumerKey || !consumerSecret) {
+            return null;
+        }
+        return {
+            consumerKey,
+            consumerSecret,
+        };
+    }
+    async getSecurityConfig(hookCtx) {
+        const source = hookCtx.securitySource;
+        if (!source) {
+            return null;
+        }
+        let security = source;
+        if (typeof source === 'function') {
+            security = await source();
+        }
+        try {
+            return parse(security, (val) => components.Security$outboundSchema.parse(val), 'unexpected security type');
+        }
+        catch {
+            return null;
+        }
+    }
+    getOneRosterVersion(hookCtx) {
+        // Access the version from SDK options
+        const options = hookCtx.options;
+        if (options && typeof options === 'object' && 'oneRosterVersion' in options) {
+            return options.oneRosterVersion;
+        }
+        return undefined;
+    }
+}
+//# sourceMappingURL=oauth1.js.map

package/dist/esm/hooks/oauth1.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauth1.js","sourceRoot":"","sources":["../../../src/hooks/oauth1.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,KAAK,MAAM,MAAM,QAAQ,CAAC;AAEjC,OAAO,EAAE,KAAK,EAAE,MAAM,mBAAmB,CAAC;AAC1C,OAAO,KAAK,UAAU,MAAM,+BAA+B,CAAC;AAQ5D,MAAM,OAAO,UAAU;IACnB,KAAK,CAAC,aAAa,CAAC,OAA6B,EAAE,OAAgB;QAC/D,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC;QACvD,IAAI,CAAC,WAAW,EAAE,CAAC;YACf,OAAO,OAAO,CAAC;QACnB,CAAC;QAED,oCAAoC;QACpC,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,iBAAiB,CAAC,OAAO,CAAC,CAAC;QACvD,IAAI,QAAQ,EAAE,QAAQ,KAAK,QAAQ,EAAE,CAAC;YAClC,OAAO,OAAO,CAAC;QACnB,CAAC;QAED,sDAAsD;QACtD,MAAM,OAAO,GAAG,IAAI,CAAC,mBAAmB,CAAC,OAAO,CAAC,CAAC;QAClD,IAAI,OAAO,KAAK,KAAK,EAAE,CAAC;YACpB,MAAM,IAAI,KAAK,CACX,gEAAgE;gBAC5D,iFAAiF;gBACjF,iGAAiG,CACxG,CAAC;QACN,CAAC;QAED,MAAM,UAAU,GAAG,IAAI,CAAC,oBAAoB,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC;QAEvF,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,EAAE,UAAU,CAAC,CAAC;QAEjD,OAAO,OAAO,CAAC;IACnB,CAAC;IAEO,oBAAoB,CACxB,MAAc,EACd,GAAW,EACX,WAA8B;QAE9B,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,QAAQ,EAAE,CAAC;QAC3D,MAAM,KAAK,GAAG,IAAI,CAAC,aAAa,EAAE,CAAC;QAEnC,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;QAC/B,MAAM,OAAO,GAAG,GAAG,SAAS,CAAC,QAAQ,KAAK,SAAS,CAAC,IAAI,GAAG,SAAS,CAAC,QAAQ,EAAE,CAAC;QAEhF,gDAAgD;QAChD,MAAM,MAAM,GAA2B;YACnC,cAAc,EAAE,aAAa;YAC7B,kBAAkB,EAAE,WAAW,CAAC,WAAW;YAC3C,WAAW,EAAE,KAAK;YAClB,sBAAsB,EAAE,aAAa;YACrC,eAAe,EAAE,SAAS;YAC1B,aAAa,EAAE,KAAK;SACvB,CAAC;QAEF,uBAAuB;QACvB,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,SAAS,CAAC,YAAY,EAAE,CAAC;YAChD,MAAM,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;QACxB,CAAC;QAED,+BAA+B;QAC/B,MAAM,mBAAmB,GAAG,IAAI,CAAC,yBAAyB,CAAC,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;QAEpF,qBAAqB;QACrB,MAAM,SAAS,GAAG,IAAI,CAAC,iBAAiB,CAAC,mBAAmB,EAAE,WAAW,CAAC,cAAc,CAAC,CAAC;QAE1F,6BAA6B;QAC7B,MAAM,WAAW,GAA2B;YACxC,cAAc,EAAE,IAAI,CAAC,aAAa,CAAC,aAAa,CAAC;YACjD,kBAAkB,EAAE,WAAW,CAAC,WAAW;YAC3C,WAAW,EAAE,KAAK;YAClB,eAAe,EAAE,IAAI,CAAC,aAAa,CAAC,SAAS,CAAC;YAC9C,sBAAsB,EAAE,aAAa;YACrC,eAAe,EAAE,SAAS;YAC1B,aAAa,EAAE,KAAK;SACvB,CAAC;QAEF,MAAM,WAAW,GAAG,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC;aAC1C,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,KAAK,KAAK,GAAG,CAAC;aAC1C,IAAI,CAAC,IAAI,CAAC,CAAC;QAEhB,OAAO,SAAS,WAAW,EAAE,CAAC;IAClC,CAAC;IAEO,yBAAyB,CAC7B,MAAc,EACd,OAAe,EACf,MAA8B;QAE9B,iCAAiC;QACjC,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;QAC9C,MAAM,WAAW,GAAG,UAAU;aACzB,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,GAAG,CAAE,CAAC,EAAE,CAAC;aAC9E,IAAI,CAAC,GAAG,CAAC,CAAC;QAEf,OAAO;YACH,MAAM,CAAC,WAAW,EAAE;YACpB,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC;YAC3B,IAAI,CAAC,aAAa,CAAC,WAAW,CAAC;SAClC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAChB,CAAC;IAEO,iBAAiB,CAAC,mBAA2B,EAAE,cAAsB;QACzE,mFAAmF;QACnF,MAAM,UAAU,GAAG,GAAG,IAAI,CAAC,aAAa,CAAC,cAAc,CAAC,GAAG,CAAC;QAE5D,4CAA4C;QAC5C,MAAM,IAAI,GAAG,MAAM,CAAC,UAAU,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;QACrD,IAAI,CAAC,MAAM,CAAC,mBAAmB,CAAC,CAAC;QACjC,OAAO,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IACjC,CAAC;IAEO,aAAa;QACjB,MAAM,KAAK,GAAG,kBAAkB,CAAC;QACjC,IAAI,KAAK,GAAG,EAAE,CAAC;QACf,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC;YAC1B,KAAK,IAAI,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC;QAC7D,CAAC;QACD,OAAO,KAAK,CAAC;IACjB,CAAC;IAEO,aAAa,CAAC,GAAW;QAC7B,OAAO,kBAAkB,CAAC,GAAG,CAAC;aACzB,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC;aACpB,OAAO,CAAC,KAAK,EAAE,KAAK,CAAC;aACrB,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC;aACpB,OAAO,CAAC,KAAK,EAAE,KAAK,CAAC;aACrB,OAAO,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IAC/B,CAAC;IAEO,KAAK,CAAC,cAAc,CAAC,OAAoB;QAC7C,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,iBAAiB,CAAC,OAAO,CAAC,CAAC;QACvD,IAAI,CAAC,QAAQ,EAAE,CAAC;YACZ,OAAO,IAAI,CAAC;QAChB,CAAC;QAED,MAAM,WAAW,GAAG,QAAQ,CAAC,QAAQ,CAAC;QACtC,MAAM,cAAc,GAAG,QAAQ,CAAC,YAAY,CAAC;QAE7C,IAAI,CAAC,WAAW,IAAI,CAAC,cAAc,EAAE,CAAC;YAClC,OAAO,IAAI,CAAC;QAChB,CAAC;QAED,OAAO;YACH,WAAW;YACX,cAAc;SACjB,CAAC;IACN,CAAC;IAEO,KAAK,CAAC,iBAAiB,CAAC,OAAoB;QAChD,MAAM,MAAM,GAAG,OAAO,CAAC,cAAc,CAAC;QAEtC,IAAI,CAAC,MAAM,EAAE,CAAC;YACV,OAAO,IAAI,CAAC;QAChB,CAAC;QAED,IAAI,QAAQ,GAAG,MAAM,CAAC;QACtB,IAAI,OAAO,MAAM,KAAK,UAAU,EAAE,CAAC;YAC/B,QAAQ,GAAG,MAAM,MAAM,EAAE,CAAC;QAC9B,CAAC;QAED,IAAI,CAAC;YACD,OAAO,KAAK,CACR,QAAQ,EACR,CAAC,GAAG,EAAE,EAAE,CAAC,UAAU,CAAC,uBAAuB,CAAC,KAAK,CAAC,GAAG,CAAC,EACtD,0BAA0B,CAC7B,CAAC;QACN,CAAC;QAAC,MAAM,CAAC;YACL,OAAO,IAAI,CAAC;QAChB,CAAC;IACL,CAAC;IAEO,mBAAmB,CAAC,OAAoB;QAC5C,sCAAsC;QACtC,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;QAChC,IAAI,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,kBAAkB,IAAI,OAAO,EAAE,CAAC;YAC1E,OAAQ,OAAyC,CAAC,gBAAgB,CAAC;QACvE,CAAC;QACD,OAAO,SAAS,CAAC;IACrB,CAAC;CACJ"}

package/dist/esm/hooks/oauth2.d.ts

@@ -0,0 +1,19 @@
+import { AfterErrorContext, AfterErrorHook, BeforeRequestContext, BeforeRequestHook, SDKInitHook, SDKInitOptions } from './types.js';
+export declare class OAuth2Hook implements SDKInitHook, BeforeRequestHook, AfterErrorHook {
+    private client?;
+    private sessions;
+    sdkInit(opts: SDKInitOptions): SDKInitOptions;
+    beforeRequest(hookCtx: BeforeRequestContext, request: Request): Promise<Request>;
+    afterError(hookCtx: AfterErrorContext, response: Response | null, error: unknown): Promise<{
+        response: Response | null;
+        error: unknown;
+    }>;
+    private doTokenRequest;
+    private getCredentials;
+    private getSecurityConfig;
+    private getSessionKey;
+    private hasRequiredScopes;
+    private getScopes;
+    private hasTokenExpired;
+}
+//# sourceMappingURL=oauth2.d.ts.map

package/dist/esm/hooks/oauth2.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauth2.d.ts","sourceRoot":"","sources":["../../../src/hooks/oauth2.ts"],"names":[],"mappings":"AASA,OAAO,EACH,iBAAiB,EACjB,cAAc,EACd,oBAAoB,EACpB,iBAAiB,EAEjB,WAAW,EACX,cAAc,EACjB,MAAM,YAAY,CAAC;AAepB,qBAAa,UAAW,YAAW,WAAW,EAAE,iBAAiB,EAAE,cAAc;IAC7E,OAAO,CAAC,MAAM,CAAC,CAAa;IAC5B,OAAO,CAAC,QAAQ,CAA+B;IAE/C,OAAO,CAAC,IAAI,EAAE,cAAc,GAAG,cAAc;IAMvC,aAAa,CAAC,OAAO,EAAE,oBAAoB,EAAE,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;IAwChF,UAAU,CACZ,OAAO,EAAE,iBAAiB,EAC1B,QAAQ,EAAE,QAAQ,GAAG,IAAI,EACzB,KAAK,EAAE,OAAO,GACf,OAAO,CAAC;QAAE,QAAQ,EAAE,QAAQ,GAAG,IAAI,CAAC;QAAC,KAAK,EAAE,OAAO,CAAA;KAAE,CAAC;YA8B3C,cAAc;YAuEd,cAAc;YAad,iBAAiB;IAuB/B,OAAO,CAAC,aAAa;IAKrB,OAAO,CAAC,iBAAiB;IAIzB,OAAO,CAAC,SAAS;IAIjB,OAAO,CAAC,eAAe;CAG1B"}

package/dist/esm/hooks/oauth2.js

@@ -0,0 +1,156 @@
+/*
+ * OAuth 2.0 Client Credentials Authentication Hook for OneRoster API
+ */
+import { stringToBase64 } from '../lib/base64.js';
+import { env } from '../lib/env.js';
+import { parse } from '../lib/schemas.js';
+import * as components from '../models/components/index.js';
+export class OAuth2Hook {
+    constructor() {
+        this.sessions = {};
+    }
+    sdkInit(opts) {
+        this.client = opts.client;
+        return opts;
+    }
+    async beforeRequest(hookCtx, request) {
+        if (!hookCtx.oAuth2Scopes) {
+            // OAuth2 not in use
+            return request;
+        }
+        // Check if OAuth1 is being used instead
+        const security = await this.getSecurityConfig(hookCtx);
+        if (security?.authType === 'oauth1') {
+            // Skip OAuth2 - OAuth1 hook will handle authentication
+            return request;
+        }
+        const credentials = await this.getCredentials(hookCtx);
+        if (!credentials || Object.values(credentials).some((v) => v === '')) {
+            return request;
+        }
+        const sessionKey = this.getSessionKey(credentials);
+        let session = this.sessions[sessionKey];
+        if (!session ||
+            !this.hasRequiredScopes(session.scopes, hookCtx.oAuth2Scopes) ||
+            this.hasTokenExpired(session.expiresAt)) {
+            session = await this.doTokenRequest(hookCtx, credentials, this.getScopes(hookCtx.oAuth2Scopes, session));
+            this.sessions[sessionKey] = session;
+        }
+        request.headers.set('Authorization', `Bearer ${session.token}`);
+        return request;
+    }
+    async afterError(hookCtx, response, error) {
+        if (!hookCtx.oAuth2Scopes) {
+            // OAuth2 not in use
+            return { response, error };
+        }
+        // Check if OAuth1 is being used instead
+        const security = await this.getSecurityConfig(hookCtx);
+        if (security?.authType === 'oauth1') {
+            // Skip OAuth2 - OAuth1 hook handles authentication
+            return { response, error };
+        }
+        if (error) {
+            return { response, error };
+        }
+        const credentials = await this.getCredentials(hookCtx);
+        if (!credentials || Object.values(credentials).some((v) => v === '')) {
+            return { response, error };
+        }
+        if (response && response?.status === 401) {
+            const sessionKey = this.getSessionKey(credentials);
+            delete this.sessions[sessionKey];
+        }
+        return { response, error };
+    }
+    async doTokenRequest(hookCtx, credentials, scopes) {
+        const formData = new URLSearchParams();
+        formData.append('grant_type', 'client_credentials');
+        const headers = {
+            'Content-Type': 'application/x-www-form-urlencoded',
+        };
+        formData.append('client_id', credentials.clientID);
+        formData.append('client_secret', credentials.clientSecret);
+        if (scopes.length > 0) {
+            formData.append('scope', scopes.join(' '));
+        }
+        if (!hookCtx.baseURL?.toString()) {
+            throw new Error('Assertion error: Base URL cannot be empty');
+        }
+        const tokenURL = new URL(credentials.tokenURL ?? '', hookCtx.baseURL);
+        const request = new Request(tokenURL, {
+            method: 'POST',
+            headers,
+            body: formData,
+        });
+        const res = await this.client?.request(request);
+        if (!res) {
+            throw new Error('Failed to fetch token: No response received');
+        }
+        if (res.status < 200 || res.status >= 300) {
+            const body = await res.text().catch(() => '');
+            throw new Error(`OAuth2 token request failed: Status ${res.status} ${res.statusText}. Body: ${body}`);
+        }
+        const data = await res.json();
+        if (!data || typeof data !== 'object') {
+            throw new Error('OAuth2 token response has unexpected format: expected JSON object');
+        }
+        if (data.token_type !== 'Bearer') {
+            throw new Error(`OAuth2 token response has unexpected token type: expected "Bearer", got "${data.token_type}"`);
+        }
+        let expiresAt;
+        if (data.expires_in) {
+            expiresAt = Date.now() + data.expires_in * 1000;
+        }
+        const sess = {
+            credentials,
+            token: data.access_token,
+            scopes,
+        };
+        if (expiresAt !== undefined) {
+            sess.expiresAt = expiresAt;
+        }
+        return sess;
+    }
+    async getCredentials(hookCtx) {
+        const security = await this.getSecurityConfig(hookCtx);
+        if (!security) {
+            return null;
+        }
+        return {
+            clientID: security.clientID ?? env().ONEROSTER_CLIENT_ID ?? '',
+            clientSecret: security.clientSecret ?? env().ONEROSTER_CLIENT_SECRET ?? '',
+            tokenURL: security.tokenURL ?? env().ONEROSTER_TOKEN_URL ?? '',
+        };
+    }
+    async getSecurityConfig(hookCtx) {
+        const source = hookCtx.securitySource;
+        if (!source) {
+            return null;
+        }
+        let security = source;
+        if (typeof source === 'function') {
+            security = await source();
+        }
+        try {
+            return parse(security, (val) => components.Security$outboundSchema.parse(val), 'unexpected security type');
+        }
+        catch {
+            return null;
+        }
+    }
+    getSessionKey(credentials) {
+        const key = `${credentials.clientID}:${credentials.clientSecret}`;
+        return stringToBase64(key);
+    }
+    hasRequiredScopes(scopes, requiredScopes) {
+        return requiredScopes.every((scope) => scopes.includes(scope));
+    }
+    getScopes(requiredScopes, sess) {
+        return [...new Set((sess?.scopes ?? []).concat(requiredScopes))];
+    }
+    hasTokenExpired(expiresAt) {
+        return !expiresAt || Date.now() + 60000 > expiresAt;
+    }
+}
+//# sourceMappingURL=oauth2.js.map

package/dist/esm/hooks/oauth2.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauth2.js","sourceRoot":"","sources":["../../../src/hooks/oauth2.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAClD,OAAO,EAAE,GAAG,EAAE,MAAM,eAAe,CAAC;AAEpC,OAAO,EAAE,KAAK,EAAE,MAAM,mBAAmB,CAAC;AAC1C,OAAO,KAAK,UAAU,MAAM,+BAA+B,CAAC;AAwB5D,MAAM,OAAO,UAAU;IAAvB;QAEY,aAAQ,GAA4B,EAAE,CAAC;IA6MnD,CAAC;IA3MG,OAAO,CAAC,IAAoB;QACxB,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;QAE1B,OAAO,IAAI,CAAC;IAChB,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,OAA6B,EAAE,OAAgB;QAC/D,IAAI,CAAC,OAAO,CAAC,YAAY,EAAE,CAAC;YACxB,oBAAoB;YACpB,OAAO,OAAO,CAAC;QACnB,CAAC;QAED,wCAAwC;QACxC,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,iBAAiB,CAAC,OAAO,CAAC,CAAC;QACvD,IAAI,QAAQ,EAAE,QAAQ,KAAK,QAAQ,EAAE,CAAC;YAClC,uDAAuD;YACvD,OAAO,OAAO,CAAC;QACnB,CAAC;QAED,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC;QACvD,IAAI,CAAC,WAAW,IAAI,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,EAAE,CAAC;YACnE,OAAO,OAAO,CAAC;QACnB,CAAC;QAED,MAAM,UAAU,GAAG,IAAI,CAAC,aAAa,CAAC,WAAW,CAAC,CAAC;QAEnD,IAAI,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;QACxC,IACI,CAAC,OAAO;YACR,CAAC,IAAI,CAAC,iBAAiB,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,YAAY,CAAC;YAC7D,IAAI,CAAC,eAAe,CAAC,OAAO,CAAC,SAAS,CAAC,EACzC,CAAC;YACC,OAAO,GAAG,MAAM,IAAI,CAAC,cAAc,CAC/B,OAAO,EACP,WAAW,EACX,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,YAAY,EAAE,OAAO,CAAC,CAChD,CAAC;YAEF,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,GAAG,OAAO,CAAC;QACxC,CAAC;QAED,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,EAAE,UAAU,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC;QAEhE,OAAO,OAAO,CAAC;IACnB,CAAC;IAED,KAAK,CAAC,UAAU,CACZ,OAA0B,EAC1B,QAAyB,EACzB,KAAc;QAEd,IAAI,CAAC,OAAO,CAAC,YAAY,EAAE,CAAC;YACxB,oBAAoB;YACpB,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;QAC/B,CAAC;QAED,wCAAwC;QACxC,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,iBAAiB,CAAC,OAAO,CAAC,CAAC;QACvD,IAAI,QAAQ,EAAE,QAAQ,KAAK,QAAQ,EAAE,CAAC;YAClC,mDAAmD;YACnD,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;QAC/B,CAAC;QAED,IAAI,KAAK,EAAE,CAAC;YACR,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;QAC/B,CAAC;QAED,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC;QACvD,IAAI,CAAC,WAAW,IAAI,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,EAAE,CAAC;YACnE,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;QAC/B,CAAC;QAED,IAAI,QAAQ,IAAI,QAAQ,EAAE,MAAM,KAAK,GAAG,EAAE,CAAC;YACvC,MAAM,UAAU,GAAG,IAAI,CAAC,aAAa,CAAC,WAAW,CAAC,CAAC;YACnD,OAAO,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;QACrC,CAAC;QAED,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;IAC/B,CAAC;IAEO,KAAK,CAAC,cAAc,CACxB,OAAoB,EACpB,WAAwB,EACxB,MAAgB;QAEhB,MAAM,QAAQ,GAAG,IAAI,eAAe,EAAE,CAAC;QACvC,QAAQ,CAAC,MAAM,CAAC,YAAY,EAAE,oBAAoB,CAAC,CAAC;QAEpD,MAAM,OAAO,GAA2B;YACpC,cAAc,EAAE,mCAAmC;SACtD,CAAC;QAEF,QAAQ,CAAC,MAAM,CAAC,WAAW,EAAE,WAAW,CAAC,QAAQ,CAAC,CAAC;QACnD,QAAQ,CAAC,MAAM,CAAC,eAAe,EAAE,WAAW,CAAC,YAAY,CAAC,CAAC;QAE3D,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACpB,QAAQ,CAAC,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;QAC/C,CAAC;QAED,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,QAAQ,EAAE,EAAE,CAAC;YAC/B,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;QACjE,CAAC;QACD,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,WAAW,CAAC,QAAQ,IAAI,EAAE,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;QAEtE,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC,QAAQ,EAAE;YAClC,MAAM,EAAE,MAAM;YACd,OAAO;YACP,IAAI,EAAE,QAAQ;SACjB,CAAC,CAAC;QAEH,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,MAAM,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;QAChD,IAAI,CAAC,GAAG,EAAE,CAAC;YACP,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;QACnE,CAAC;QAED,IAAI,GAAG,CAAC,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,MAAM,IAAI,GAAG,EAAE,CAAC;YACxC,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;YAC9C,MAAM,IAAI,KAAK,CACX,uCAAuC,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,UAAU,WAAW,IAAI,EAAE,CACvF,CAAC;QACN,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;QAC9B,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;YACpC,MAAM,IAAI,KAAK,CAAC,mEAAmE,CAAC,CAAC;QACzF,CAAC;QAED,IAAI,IAAI,CAAC,UAAU,KAAK,QAAQ,EAAE,CAAC;YAC/B,MAAM,IAAI,KAAK,CACX,4EAA4E,IAAI,CAAC,UAAU,GAAG,CACjG,CAAC;QACN,CAAC;QAED,IAAI,SAA6B,CAAC;QAClC,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;YAClB,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC;QACpD,CAAC;QAED,MAAM,IAAI,GAAY;YAClB,WAAW;YACX,KAAK,EAAE,IAAI,CAAC,YAAY;YACxB,MAAM;SACT,CAAC;QAEF,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;YAC1B,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;QAC/B,CAAC;QAED,OAAO,IAAI,CAAC;IAChB,CAAC;IAEO,KAAK,CAAC,cAAc,CAAC,OAAoB;QAC7C,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,iBAAiB,CAAC,OAAO,CAAC,CAAC;QACvD,IAAI,CAAC,QAAQ,EAAE,CAAC;YACZ,OAAO,IAAI,CAAC;QAChB,CAAC;QAED,OAAO;YACH,QAAQ,EAAE,QAAQ,CAAC,QAAQ,IAAI,GAAG,EAAE,CAAC,mBAAmB,IAAI,EAAE;YAC9D,YAAY,EAAE,QAAQ,CAAC,YAAY,IAAI,GAAG,EAAE,CAAC,uBAAuB,IAAI,EAAE;YAC1E,QAAQ,EAAE,QAAQ,CAAC,QAAQ,IAAI,GAAG,EAAE,CAAC,mBAAmB,IAAI,EAAE;SACjE,CAAC;IACN,CAAC;IAEO,KAAK,CAAC,iBAAiB,CAAC,OAAoB;QAChD,MAAM,MAAM,GAAG,OAAO,CAAC,cAAc,CAAC;QAEtC,IAAI,CAAC,MAAM,EAAE,CAAC;YACV,OAAO,IAAI,CAAC;QAChB,CAAC;QAED,IAAI,QAAQ,GAAG,MAAM,CAAC;QACtB,IAAI,OAAO,MAAM,KAAK,UAAU,EAAE,CAAC;YAC/B,QAAQ,GAAG,MAAM,MAAM,EAAE,CAAC;QAC9B,CAAC;QAED,IAAI,CAAC;YACD,OAAO,KAAK,CACR,QAAQ,EACR,CAAC,GAAG,EAAE,EAAE,CAAC,UAAU,CAAC,uBAAuB,CAAC,KAAK,CAAC,GAAG,CAAC,EACtD,0BAA0B,CAC7B,CAAC;QACN,CAAC;QAAC,MAAM,CAAC;YACL,OAAO,IAAI,CAAC;QAChB,CAAC;IACL,CAAC;IAEO,aAAa,CAAC,WAAwB;QAC1C,MAAM,GAAG,GAAG,GAAG,WAAW,CAAC,QAAQ,IAAI,WAAW,CAAC,YAAY,EAAE,CAAC;QAClE,OAAO,cAAc,CAAC,GAAG,CAAC,CAAC;IAC/B,CAAC;IAEO,iBAAiB,CAAC,MAAgB,EAAE,cAAwB;QAChE,OAAO,cAAc,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC;IACnE,CAAC;IAEO,SAAS,CAAC,cAAwB,EAAE,IAAc;QACtD,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,IAAI,EAAE,MAAM,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC;IACrE,CAAC;IAEO,eAAe,CAAC,SAAkB;QACtC,OAAO,CAAC,SAAS,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,GAAG,SAAS,CAAC;IACxD,CAAC;CACJ"}

package/dist/esm/hooks/registration.d.ts

@@ -0,0 +1,3 @@
+import { Hooks } from './types.js';
+export declare function initHooks(hooks: Hooks): void;
+//# sourceMappingURL=registration.d.ts.map

package/dist/esm/hooks/registration.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"registration.d.ts","sourceRoot":"","sources":["../../../src/hooks/registration.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,YAAY,CAAC;AASnC,wBAAgB,SAAS,CAAC,KAAK,EAAE,KAAK,QAIrC"}

package/dist/esm/hooks/registration.js

@@ -0,0 +1,12 @@
+/*
+ * This file is only ever generated once on the first generation and then is free to be modified.
+ * Any hooks you wish to add should be registered in the initHooks function. Feel free to define them
+ * in this file or in separate files in the hooks folder.
+ */
+// @ts-expect-error remove this line when you add your first hook and hooks is used
+export function initHooks(hooks) {
+    // Add hooks by calling hooks.register{ClientInit/BeforeCreateRequest/BeforeRequest/AfterSuccess/AfterError}Hook
+    // with an instance of a hook that implements that specific Hook interface
+    // Hooks are registered per SDK instance, and are valid for the lifetime of the SDK instance
+}
+//# sourceMappingURL=registration.js.map

package/dist/esm/hooks/registration.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"registration.js","sourceRoot":"","sources":["../../../src/hooks/registration.ts"],"names":[],"mappings":"AAEA;;;;GAIG;AAEH,mFAAmF;AACnF,MAAM,UAAU,SAAS,CAAC,KAAY;IAClC,gHAAgH;IAChH,0EAA0E;IAC1E,4FAA4F;AAChG,CAAC"}