@epcc-sdk/sdks-shopper 0.0.36 → 0.0.38

package/dist/auth/make-auth-fetch.cjs

@@ -0,0 +1,53 @@
+"use strict";
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+var make_auth_fetch_exports = {};
+__export(make_auth_fetch_exports, {
+  makeAuthFetch: () => makeAuthFetch
+});
+module.exports = __toCommonJS(make_auth_fetch_exports);
+function makeAuthFetch(auth, baseFetch, opts) {
+  const fetchFn = baseFetch || ((request) => globalThis.fetch(request));
+  return async (request) => {
+    const url = request.url;
+    if (opts?.isAuthRequest?.(url, {}) ?? url.includes("/oauth/")) {
+      return fetchFn(request);
+    }
+    const token = await auth.getValidAccessToken();
+    const h1 = new Headers(request.headers);
+    if (!h1.has("Authorization")) h1.set("Authorization", `Bearer ${token}`);
+    const authedRequest = new Request(request, { headers: h1 });
+    let res = await fetchFn(authedRequest);
+    if (res.status !== 401) return res;
+    try {
+      const fresh = await auth.refresh();
+      const h2 = new Headers(request.headers);
+      if (!h2.has("Authorization")) h2.set("Authorization", `Bearer ${fresh}`);
+      const retryRequest = new Request(request, { headers: h2 });
+      return fetchFn(retryRequest);
+    } catch {
+      auth.clear();
+      return res;
+    }
+  };
+}
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  makeAuthFetch
+});
+//# sourceMappingURL=make-auth-fetch.cjs.map

package/dist/auth/make-auth-fetch.cjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/auth/make-auth-fetch.ts"],"sourcesContent":["import type { Auth } from \"./kit\"\nimport { Config } from \"@hey-api/client-fetch\"\n\n/**\n * Wrap a base fetch (default: global fetch) with:\n *  - Authorization: Bearer <token> (unless caller already set it)\n *  - single forced re-auth + one retry on 401\n *  - optional skip for OAuth endpoints\n */\nexport function makeAuthFetch(\n  auth: Auth,\n  baseFetch?: Config[\"fetch\"],\n  opts?: { isAuthRequest?: (url: string, init: RequestInit) => boolean },\n): Config[\"fetch\"] {\n  // Default to global fetch if not provided\n  const fetchFn = baseFetch || ((request: Request) => globalThis.fetch(request))\n\n  return async (request: Request) => {\n    const url = request.url\n\n    // Never intercept OAuth calls (avoid loops)\n    if (opts?.isAuthRequest?.(url, {}) ?? url.includes(\"/oauth/\")) {\n      return fetchFn(request)\n    }\n\n    // Clone the request to modify headers\n    const token = await auth.getValidAccessToken()\n    const h1 = new Headers(request.headers)\n    if (!h1.has(\"Authorization\")) h1.set(\"Authorization\", `Bearer ${token}`)\n\n    const authedRequest = new Request(request, { headers: h1 })\n    let res = await fetchFn(authedRequest)\n\n    if (res.status !== 401) return res\n\n    // Retry once after forced re-auth\n    try {\n      const fresh = await auth.refresh()\n      const h2 = new Headers(request.headers)\n      if (!h2.has(\"Authorization\")) h2.set(\"Authorization\", `Bearer ${fresh}`)\n\n      const retryRequest = new Request(request, { headers: h2 })\n      return fetchFn(retryRequest)\n    } catch {\n      auth.clear()\n      return res // bubble the 401\n    }\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AASO,SAAS,cACd,MACA,WACA,MACiB;AAEjB,QAAM,UAAU,cAAc,CAAC,YAAqB,WAAW,MAAM,OAAO;AAE5E,SAAO,OAAO,YAAqB;AACjC,UAAM,MAAM,QAAQ;AAGpB,QAAI,MAAM,gBAAgB,KAAK,CAAC,CAAC,KAAK,IAAI,SAAS,SAAS,GAAG;AAC7D,aAAO,QAAQ,OAAO;AAAA,IACxB;AAGA,UAAM,QAAQ,MAAM,KAAK,oBAAoB;AAC7C,UAAM,KAAK,IAAI,QAAQ,QAAQ,OAAO;AACtC,QAAI,CAAC,GAAG,IAAI,eAAe,EAAG,IAAG,IAAI,iBAAiB,UAAU,KAAK,EAAE;AAEvE,UAAM,gBAAgB,IAAI,QAAQ,SAAS,EAAE,SAAS,GAAG,CAAC;AAC1D,QAAI,MAAM,MAAM,QAAQ,aAAa;AAErC,QAAI,IAAI,WAAW,IAAK,QAAO;AAG/B,QAAI;AACF,YAAM,QAAQ,MAAM,KAAK,QAAQ;AACjC,YAAM,KAAK,IAAI,QAAQ,QAAQ,OAAO;AACtC,UAAI,CAAC,GAAG,IAAI,eAAe,EAAG,IAAG,IAAI,iBAAiB,UAAU,KAAK,EAAE;AAEvE,YAAM,eAAe,IAAI,QAAQ,SAAS,EAAE,SAAS,GAAG,CAAC;AACzD,aAAO,QAAQ,YAAY;AAAA,IAC7B,QAAQ;AACN,WAAK,MAAM;AACX,aAAO;AAAA,IACT;AAAA,EACF;AACF;","names":[]}

package/dist/auth/make-auth-fetch.d.cts

@@ -0,0 +1,16 @@
+import { Auth } from './kit.cjs';
+import { Config } from '@hey-api/client-fetch';
+import './storage.cjs';
+import '../client/types.gen.cjs';
+
+/**
+ * Wrap a base fetch (default: global fetch) with:
+ *  - Authorization: Bearer <token> (unless caller already set it)
+ *  - single forced re-auth + one retry on 401
+ *  - optional skip for OAuth endpoints
+ */
+declare function makeAuthFetch(auth: Auth, baseFetch?: Config["fetch"], opts?: {
+    isAuthRequest?: (url: string, init: RequestInit) => boolean;
+}): Config["fetch"];
+
+export { makeAuthFetch };

package/dist/auth/make-auth-fetch.d.ts

@@ -0,0 +1,16 @@
+import { Auth } from './kit.js';
+import { Config } from '@hey-api/client-fetch';
+import './storage.js';
+import '../client/types.gen.js';
+
+/**
+ * Wrap a base fetch (default: global fetch) with:
+ *  - Authorization: Bearer <token> (unless caller already set it)
+ *  - single forced re-auth + one retry on 401
+ *  - optional skip for OAuth endpoints
+ */
+declare function makeAuthFetch(auth: Auth, baseFetch?: Config["fetch"], opts?: {
+    isAuthRequest?: (url: string, init: RequestInit) => boolean;
+}): Config["fetch"];
+
+export { makeAuthFetch };

package/dist/auth/make-auth-fetch.mjs

@@ -0,0 +1,29 @@
+function makeAuthFetch(auth, baseFetch, opts) {
+  const fetchFn = baseFetch || ((request) => globalThis.fetch(request));
+  return async (request) => {
+    const url = request.url;
+    if (opts?.isAuthRequest?.(url, {}) ?? url.includes("/oauth/")) {
+      return fetchFn(request);
+    }
+    const token = await auth.getValidAccessToken();
+    const h1 = new Headers(request.headers);
+    if (!h1.has("Authorization")) h1.set("Authorization", `Bearer ${token}`);
+    const authedRequest = new Request(request, { headers: h1 });
+    let res = await fetchFn(authedRequest);
+    if (res.status !== 401) return res;
+    try {
+      const fresh = await auth.refresh();
+      const h2 = new Headers(request.headers);
+      if (!h2.has("Authorization")) h2.set("Authorization", `Bearer ${fresh}`);
+      const retryRequest = new Request(request, { headers: h2 });
+      return fetchFn(retryRequest);
+    } catch {
+      auth.clear();
+      return res;
+    }
+  };
+}
+export {
+  makeAuthFetch
+};
+//# sourceMappingURL=make-auth-fetch.mjs.map

package/dist/auth/make-auth-fetch.mjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/auth/make-auth-fetch.ts"],"sourcesContent":["import type { Auth } from \"./kit\"\nimport { Config } from \"@hey-api/client-fetch\"\n\n/**\n * Wrap a base fetch (default: global fetch) with:\n *  - Authorization: Bearer <token> (unless caller already set it)\n *  - single forced re-auth + one retry on 401\n *  - optional skip for OAuth endpoints\n */\nexport function makeAuthFetch(\n  auth: Auth,\n  baseFetch?: Config[\"fetch\"],\n  opts?: { isAuthRequest?: (url: string, init: RequestInit) => boolean },\n): Config[\"fetch\"] {\n  // Default to global fetch if not provided\n  const fetchFn = baseFetch || ((request: Request) => globalThis.fetch(request))\n\n  return async (request: Request) => {\n    const url = request.url\n\n    // Never intercept OAuth calls (avoid loops)\n    if (opts?.isAuthRequest?.(url, {}) ?? url.includes(\"/oauth/\")) {\n      return fetchFn(request)\n    }\n\n    // Clone the request to modify headers\n    const token = await auth.getValidAccessToken()\n    const h1 = new Headers(request.headers)\n    if (!h1.has(\"Authorization\")) h1.set(\"Authorization\", `Bearer ${token}`)\n\n    const authedRequest = new Request(request, { headers: h1 })\n    let res = await fetchFn(authedRequest)\n\n    if (res.status !== 401) return res\n\n    // Retry once after forced re-auth\n    try {\n      const fresh = await auth.refresh()\n      const h2 = new Headers(request.headers)\n      if (!h2.has(\"Authorization\")) h2.set(\"Authorization\", `Bearer ${fresh}`)\n\n      const retryRequest = new Request(request, { headers: h2 })\n      return fetchFn(retryRequest)\n    } catch {\n      auth.clear()\n      return res // bubble the 401\n    }\n  }\n}\n"],"mappings":"AASO,SAAS,cACd,MACA,WACA,MACiB;AAEjB,QAAM,UAAU,cAAc,CAAC,YAAqB,WAAW,MAAM,OAAO;AAE5E,SAAO,OAAO,YAAqB;AACjC,UAAM,MAAM,QAAQ;AAGpB,QAAI,MAAM,gBAAgB,KAAK,CAAC,CAAC,KAAK,IAAI,SAAS,SAAS,GAAG;AAC7D,aAAO,QAAQ,OAAO;AAAA,IACxB;AAGA,UAAM,QAAQ,MAAM,KAAK,oBAAoB;AAC7C,UAAM,KAAK,IAAI,QAAQ,QAAQ,OAAO;AACtC,QAAI,CAAC,GAAG,IAAI,eAAe,EAAG,IAAG,IAAI,iBAAiB,UAAU,KAAK,EAAE;AAEvE,UAAM,gBAAgB,IAAI,QAAQ,SAAS,EAAE,SAAS,GAAG,CAAC;AAC1D,QAAI,MAAM,MAAM,QAAQ,aAAa;AAErC,QAAI,IAAI,WAAW,IAAK,QAAO;AAG/B,QAAI;AACF,YAAM,QAAQ,MAAM,KAAK,QAAQ;AACjC,YAAM,KAAK,IAAI,QAAQ,QAAQ,OAAO;AACtC,UAAI,CAAC,GAAG,IAAI,eAAe,EAAG,IAAG,IAAI,iBAAiB,UAAU,KAAK,EAAE;AAEvE,YAAM,eAAe,IAAI,QAAQ,SAAS,EAAE,SAAS,GAAG,CAAC;AACzD,aAAO,QAAQ,YAAY;AAAA,IAC7B,QAAQ;AACN,WAAK,MAAM;AACX,aAAO;AAAA,IACT;AAAA,EACF;AACF;","names":[]}

package/dist/auth/storage.cjs

@@ -0,0 +1,118 @@
+"use strict";
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+var storage_exports = {};
+__export(storage_exports, {
+  cookieAdapter: () => cookieAdapter,
+  localStorageAdapter: () => localStorageAdapter,
+  memoryAdapter: () => memoryAdapter
+});
+module.exports = __toCommonJS(storage_exports);
+var import_credentials = require('../constants/credentials.cjs');
+function localStorageAdapter(key = import_credentials.CREDENTIALS_STORAGE_KEY) {
+  const subs = /* @__PURE__ */ new Set();
+  const onStorage = (e) => {
+    if (e.key === key) subs.forEach((fn) => fn());
+  };
+  const safeGet = () => {
+    try {
+      if (typeof window === "undefined" || !("localStorage" in window))
+        return void 0;
+      return window.localStorage.getItem(key) ?? void 0;
+    } catch {
+      return void 0;
+    }
+  };
+  const safeSet = (t) => {
+    try {
+      if (typeof window === "undefined" || !("localStorage" in window)) return;
+      if (!t) window.localStorage.removeItem(key);
+      else window.localStorage.setItem(key, t);
+    } catch {
+    }
+  };
+  return {
+    get: safeGet,
+    set: safeSet,
+    subscribe(cb) {
+      subs.add(cb);
+      if (typeof window !== "undefined") {
+        window.addEventListener("storage", onStorage);
+      }
+      return () => {
+        subs.delete(cb);
+        if (!subs.size && typeof window !== "undefined") {
+          window.removeEventListener("storage", onStorage);
+        }
+      };
+    }
+  };
+}
+function cookieAdapter(options = {}) {
+  const { name = import_credentials.CREDENTIALS_STORAGE_KEY, ...attrs } = options;
+  const { path = "/", sameSite = "Lax" } = attrs;
+  const read = () => {
+    if (typeof document === "undefined") return void 0;
+    const raw = document.cookie.split("; ").find((c) => c.startsWith(name + "="));
+    if (!raw) return void 0;
+    try {
+      return decodeURIComponent(raw.split("=").slice(1).join("="));
+    } catch {
+      return raw.split("=").slice(1).join("=");
+    }
+  };
+  const write = (v) => {
+    if (typeof document === "undefined") return;
+    let s = `${name}=${encodeURIComponent(v)}; Path=${path}; SameSite=${sameSite}`;
+    if (attrs.domain) s += `; Domain=${attrs.domain}`;
+    if (attrs.secure) s += `; Secure`;
+    if (attrs.maxAge) s += `; Max-Age=${attrs.maxAge}`;
+    document.cookie = s;
+  };
+  const clear = () => {
+    if (typeof document === "undefined") return;
+    document.cookie = `${name}=; Max-Age=0; Path=${path}`;
+  };
+  return {
+    get: read,
+    set: (t) => t ? write(t) : clear()
+    // No reliable cookie change event across tabs; omit subscribe
+  };
+}
+function memoryAdapter(initial) {
+  let value = initial;
+  const subs = /* @__PURE__ */ new Set();
+  return {
+    get: () => value,
+    set: (t) => {
+      value = t;
+      subs.forEach((fn) => fn());
+    },
+    subscribe(cb) {
+      subs.add(cb);
+      return () => subs.delete(cb);
+    }
+  };
+}
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  cookieAdapter,
+  localStorageAdapter,
+  memoryAdapter
+});
+//# sourceMappingURL=storage.cjs.map

package/dist/auth/storage.cjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/auth/storage.ts"],"sourcesContent":["import { CREDENTIALS_STORAGE_KEY } from \"../constants/credentials\"\n\nexport interface StorageAdapter {\n  /** Return the current access token (string) or undefined if none. */\n  get(): string | undefined\n  /** Persist or remove the access token. */\n  set(token?: string): void\n  /** Optional: subscribe to external changes (e.g., other tabs). Returns an unsubscribe. */\n  subscribe?(cb: () => void): () => void\n}\n\n/** Safe localStorage adapter with cross-tab sync (via 'storage' event). */\nexport function localStorageAdapter(\n  key = CREDENTIALS_STORAGE_KEY,\n): StorageAdapter {\n  const subs = new Set<() => void>()\n\n  const onStorage = (e: StorageEvent) => {\n    if (e.key === key) subs.forEach((fn) => fn())\n  }\n\n  const safeGet = () => {\n    try {\n      if (typeof window === \"undefined\" || !(\"localStorage\" in window))\n        return undefined\n      return window.localStorage.getItem(key) ?? undefined\n    } catch {\n      return undefined\n    }\n  }\n\n  const safeSet = (t?: string) => {\n    try {\n      if (typeof window === \"undefined\" || !(\"localStorage\" in window)) return\n      if (!t) window.localStorage.removeItem(key)\n      else window.localStorage.setItem(key, t)\n    } catch {\n      /* no-op */\n    }\n  }\n\n  return {\n    get: safeGet,\n    set: safeSet,\n    subscribe(cb) {\n      subs.add(cb)\n      if (typeof window !== \"undefined\") {\n        window.addEventListener(\"storage\", onStorage)\n      }\n      return () => {\n        subs.delete(cb)\n        if (!subs.size && typeof window !== \"undefined\") {\n          window.removeEventListener(\"storage\", onStorage)\n        }\n      }\n    },\n  }\n}\n\n/** JS-readable cookie adapter (NOT httpOnly). For httpOnly cookies, keep access token here only. */\nexport function cookieAdapter(\n  options: {\n    name?: string\n    path?: string\n    domain?: string\n    sameSite?: \"Lax\" | \"Strict\" | \"None\"\n    secure?: boolean\n    maxAge?: number // seconds\n  } = {},\n): StorageAdapter {\n  const { name = CREDENTIALS_STORAGE_KEY, ...attrs } = options\n  const { path = \"/\", sameSite = \"Lax\" } = attrs\n  const read = () => {\n    if (typeof document === \"undefined\") return undefined\n    const raw = document.cookie\n      .split(\"; \")\n      .find((c) => c.startsWith(name + \"=\"))\n    if (!raw) return undefined\n    try {\n      return decodeURIComponent(raw.split(\"=\").slice(1).join(\"=\"))\n    } catch {\n      return raw.split(\"=\").slice(1).join(\"=\")\n    }\n  }\n\n  const write = (v: string) => {\n    if (typeof document === \"undefined\") return\n    let s =\n      `${name}=${encodeURIComponent(v)}; Path=${path}` +\n      `; SameSite=${sameSite}`\n    if (attrs.domain) s += `; Domain=${attrs.domain}`\n    if (attrs.secure) s += `; Secure`\n    if (attrs.maxAge) s += `; Max-Age=${attrs.maxAge}`\n    document.cookie = s\n  }\n\n  const clear = () => {\n    if (typeof document === \"undefined\") return\n    document.cookie = `${name}=; Max-Age=0; Path=${path}`\n  }\n\n  return {\n    get: read,\n    set: (t) => (t ? write(t) : clear()),\n    // No reliable cookie change event across tabs; omit subscribe\n  }\n}\n\n/** In-memory adapter (useful for SSR/tests). */\nexport function memoryAdapter(initial?: string): StorageAdapter {\n  let value = initial\n  const subs = new Set<() => void>()\n  return {\n    get: () => value,\n    set: (t) => {\n      value = t\n      subs.forEach((fn) => fn())\n    },\n    subscribe(cb) {\n      subs.add(cb)\n      return () => subs.delete(cb)\n    },\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,yBAAwC;AAYjC,SAAS,oBACd,MAAM,4CACU;AAChB,QAAM,OAAO,oBAAI,IAAgB;AAEjC,QAAM,YAAY,CAAC,MAAoB;AACrC,QAAI,EAAE,QAAQ,IAAK,MAAK,QAAQ,CAAC,OAAO,GAAG,CAAC;AAAA,EAC9C;AAEA,QAAM,UAAU,MAAM;AACpB,QAAI;AACF,UAAI,OAAO,WAAW,eAAe,EAAE,kBAAkB;AACvD,eAAO;AACT,aAAO,OAAO,aAAa,QAAQ,GAAG,KAAK;AAAA,IAC7C,QAAQ;AACN,aAAO;AAAA,IACT;AAAA,EACF;AAEA,QAAM,UAAU,CAAC,MAAe;AAC9B,QAAI;AACF,UAAI,OAAO,WAAW,eAAe,EAAE,kBAAkB,QAAS;AAClE,UAAI,CAAC,EAAG,QAAO,aAAa,WAAW,GAAG;AAAA,UACrC,QAAO,aAAa,QAAQ,KAAK,CAAC;AAAA,IACzC,QAAQ;AAAA,IAER;AAAA,EACF;AAEA,SAAO;AAAA,IACL,KAAK;AAAA,IACL,KAAK;AAAA,IACL,UAAU,IAAI;AACZ,WAAK,IAAI,EAAE;AACX,UAAI,OAAO,WAAW,aAAa;AACjC,eAAO,iBAAiB,WAAW,SAAS;AAAA,MAC9C;AACA,aAAO,MAAM;AACX,aAAK,OAAO,EAAE;AACd,YAAI,CAAC,KAAK,QAAQ,OAAO,WAAW,aAAa;AAC/C,iBAAO,oBAAoB,WAAW,SAAS;AAAA,QACjD;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACF;AAGO,SAAS,cACd,UAOI,CAAC,GACW;AAChB,QAAM,EAAE,OAAO,4CAAyB,GAAG,MAAM,IAAI;AACrD,QAAM,EAAE,OAAO,KAAK,WAAW,MAAM,IAAI;AACzC,QAAM,OAAO,MAAM;AACjB,QAAI,OAAO,aAAa,YAAa,QAAO;AAC5C,UAAM,MAAM,SAAS,OAClB,MAAM,IAAI,EACV,KAAK,CAAC,MAAM,EAAE,WAAW,OAAO,GAAG,CAAC;AACvC,QAAI,CAAC,IAAK,QAAO;AACjB,QAAI;AACF,aAAO,mBAAmB,IAAI,MAAM,GAAG,EAAE,MAAM,CAAC,EAAE,KAAK,GAAG,CAAC;AAAA,IAC7D,QAAQ;AACN,aAAO,IAAI,MAAM,GAAG,EAAE,MAAM,CAAC,EAAE,KAAK,GAAG;AAAA,IACzC;AAAA,EACF;AAEA,QAAM,QAAQ,CAAC,MAAc;AAC3B,QAAI,OAAO,aAAa,YAAa;AACrC,QAAI,IACF,GAAG,IAAI,IAAI,mBAAmB,CAAC,CAAC,UAAU,IAAI,cAChC,QAAQ;AACxB,QAAI,MAAM,OAAQ,MAAK,YAAY,MAAM,MAAM;AAC/C,QAAI,MAAM,OAAQ,MAAK;AACvB,QAAI,MAAM,OAAQ,MAAK,aAAa,MAAM,MAAM;AAChD,aAAS,SAAS;AAAA,EACpB;AAEA,QAAM,QAAQ,MAAM;AAClB,QAAI,OAAO,aAAa,YAAa;AACrC,aAAS,SAAS,GAAG,IAAI,sBAAsB,IAAI;AAAA,EACrD;AAEA,SAAO;AAAA,IACL,KAAK;AAAA,IACL,KAAK,CAAC,MAAO,IAAI,MAAM,CAAC,IAAI,MAAM;AAAA;AAAA,EAEpC;AACF;AAGO,SAAS,cAAc,SAAkC;AAC9D,MAAI,QAAQ;AACZ,QAAM,OAAO,oBAAI,IAAgB;AACjC,SAAO;AAAA,IACL,KAAK,MAAM;AAAA,IACX,KAAK,CAAC,MAAM;AACV,cAAQ;AACR,WAAK,QAAQ,CAAC,OAAO,GAAG,CAAC;AAAA,IAC3B;AAAA,IACA,UAAU,IAAI;AACZ,WAAK,IAAI,EAAE;AACX,aAAO,MAAM,KAAK,OAAO,EAAE;AAAA,IAC7B;AAAA,EACF;AACF;","names":[]}

package/dist/auth/storage.d.cts

@@ -0,0 +1,23 @@
+interface StorageAdapter {
+    /** Return the current access token (string) or undefined if none. */
+    get(): string | undefined;
+    /** Persist or remove the access token. */
+    set(token?: string): void;
+    /** Optional: subscribe to external changes (e.g., other tabs). Returns an unsubscribe. */
+    subscribe?(cb: () => void): () => void;
+}
+/** Safe localStorage adapter with cross-tab sync (via 'storage' event). */
+declare function localStorageAdapter(key?: string): StorageAdapter;
+/** JS-readable cookie adapter (NOT httpOnly). For httpOnly cookies, keep access token here only. */
+declare function cookieAdapter(options?: {
+    name?: string;
+    path?: string;
+    domain?: string;
+    sameSite?: "Lax" | "Strict" | "None";
+    secure?: boolean;
+    maxAge?: number;
+}): StorageAdapter;
+/** In-memory adapter (useful for SSR/tests). */
+declare function memoryAdapter(initial?: string): StorageAdapter;
+
+export { type StorageAdapter, cookieAdapter, localStorageAdapter, memoryAdapter };

package/dist/auth/storage.d.ts

@@ -0,0 +1,23 @@
+interface StorageAdapter {
+    /** Return the current access token (string) or undefined if none. */
+    get(): string | undefined;
+    /** Persist or remove the access token. */
+    set(token?: string): void;
+    /** Optional: subscribe to external changes (e.g., other tabs). Returns an unsubscribe. */
+    subscribe?(cb: () => void): () => void;
+}
+/** Safe localStorage adapter with cross-tab sync (via 'storage' event). */
+declare function localStorageAdapter(key?: string): StorageAdapter;
+/** JS-readable cookie adapter (NOT httpOnly). For httpOnly cookies, keep access token here only. */
+declare function cookieAdapter(options?: {
+    name?: string;
+    path?: string;
+    domain?: string;
+    sameSite?: "Lax" | "Strict" | "None";
+    secure?: boolean;
+    maxAge?: number;
+}): StorageAdapter;
+/** In-memory adapter (useful for SSR/tests). */
+declare function memoryAdapter(initial?: string): StorageAdapter;
+
+export { type StorageAdapter, cookieAdapter, localStorageAdapter, memoryAdapter };

package/dist/auth/storage.mjs

@@ -0,0 +1,92 @@
+import { CREDENTIALS_STORAGE_KEY } from "../constants/credentials.mjs";
+function localStorageAdapter(key = CREDENTIALS_STORAGE_KEY) {
+  const subs = /* @__PURE__ */ new Set();
+  const onStorage = (e) => {
+    if (e.key === key) subs.forEach((fn) => fn());
+  };
+  const safeGet = () => {
+    try {
+      if (typeof window === "undefined" || !("localStorage" in window))
+        return void 0;
+      return window.localStorage.getItem(key) ?? void 0;
+    } catch {
+      return void 0;
+    }
+  };
+  const safeSet = (t) => {
+    try {
+      if (typeof window === "undefined" || !("localStorage" in window)) return;
+      if (!t) window.localStorage.removeItem(key);
+      else window.localStorage.setItem(key, t);
+    } catch {
+    }
+  };
+  return {
+    get: safeGet,
+    set: safeSet,
+    subscribe(cb) {
+      subs.add(cb);
+      if (typeof window !== "undefined") {
+        window.addEventListener("storage", onStorage);
+      }
+      return () => {
+        subs.delete(cb);
+        if (!subs.size && typeof window !== "undefined") {
+          window.removeEventListener("storage", onStorage);
+        }
+      };
+    }
+  };
+}
+function cookieAdapter(options = {}) {
+  const { name = CREDENTIALS_STORAGE_KEY, ...attrs } = options;
+  const { path = "/", sameSite = "Lax" } = attrs;
+  const read = () => {
+    if (typeof document === "undefined") return void 0;
+    const raw = document.cookie.split("; ").find((c) => c.startsWith(name + "="));
+    if (!raw) return void 0;
+    try {
+      return decodeURIComponent(raw.split("=").slice(1).join("="));
+    } catch {
+      return raw.split("=").slice(1).join("=");
+    }
+  };
+  const write = (v) => {
+    if (typeof document === "undefined") return;
+    let s = `${name}=${encodeURIComponent(v)}; Path=${path}; SameSite=${sameSite}`;
+    if (attrs.domain) s += `; Domain=${attrs.domain}`;
+    if (attrs.secure) s += `; Secure`;
+    if (attrs.maxAge) s += `; Max-Age=${attrs.maxAge}`;
+    document.cookie = s;
+  };
+  const clear = () => {
+    if (typeof document === "undefined") return;
+    document.cookie = `${name}=; Max-Age=0; Path=${path}`;
+  };
+  return {
+    get: read,
+    set: (t) => t ? write(t) : clear()
+    // No reliable cookie change event across tabs; omit subscribe
+  };
+}
+function memoryAdapter(initial) {
+  let value = initial;
+  const subs = /* @__PURE__ */ new Set();
+  return {
+    get: () => value,
+    set: (t) => {
+      value = t;
+      subs.forEach((fn) => fn());
+    },
+    subscribe(cb) {
+      subs.add(cb);
+      return () => subs.delete(cb);
+    }
+  };
+}
+export {
+  cookieAdapter,
+  localStorageAdapter,
+  memoryAdapter
+};
+//# sourceMappingURL=storage.mjs.map

package/dist/auth/storage.mjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/auth/storage.ts"],"sourcesContent":["import { CREDENTIALS_STORAGE_KEY } from \"../constants/credentials\"\n\nexport interface StorageAdapter {\n  /** Return the current access token (string) or undefined if none. */\n  get(): string | undefined\n  /** Persist or remove the access token. */\n  set(token?: string): void\n  /** Optional: subscribe to external changes (e.g., other tabs). Returns an unsubscribe. */\n  subscribe?(cb: () => void): () => void\n}\n\n/** Safe localStorage adapter with cross-tab sync (via 'storage' event). */\nexport function localStorageAdapter(\n  key = CREDENTIALS_STORAGE_KEY,\n): StorageAdapter {\n  const subs = new Set<() => void>()\n\n  const onStorage = (e: StorageEvent) => {\n    if (e.key === key) subs.forEach((fn) => fn())\n  }\n\n  const safeGet = () => {\n    try {\n      if (typeof window === \"undefined\" || !(\"localStorage\" in window))\n        return undefined\n      return window.localStorage.getItem(key) ?? undefined\n    } catch {\n      return undefined\n    }\n  }\n\n  const safeSet = (t?: string) => {\n    try {\n      if (typeof window === \"undefined\" || !(\"localStorage\" in window)) return\n      if (!t) window.localStorage.removeItem(key)\n      else window.localStorage.setItem(key, t)\n    } catch {\n      /* no-op */\n    }\n  }\n\n  return {\n    get: safeGet,\n    set: safeSet,\n    subscribe(cb) {\n      subs.add(cb)\n      if (typeof window !== \"undefined\") {\n        window.addEventListener(\"storage\", onStorage)\n      }\n      return () => {\n        subs.delete(cb)\n        if (!subs.size && typeof window !== \"undefined\") {\n          window.removeEventListener(\"storage\", onStorage)\n        }\n      }\n    },\n  }\n}\n\n/** JS-readable cookie adapter (NOT httpOnly). For httpOnly cookies, keep access token here only. */\nexport function cookieAdapter(\n  options: {\n    name?: string\n    path?: string\n    domain?: string\n    sameSite?: \"Lax\" | \"Strict\" | \"None\"\n    secure?: boolean\n    maxAge?: number // seconds\n  } = {},\n): StorageAdapter {\n  const { name = CREDENTIALS_STORAGE_KEY, ...attrs } = options\n  const { path = \"/\", sameSite = \"Lax\" } = attrs\n  const read = () => {\n    if (typeof document === \"undefined\") return undefined\n    const raw = document.cookie\n      .split(\"; \")\n      .find((c) => c.startsWith(name + \"=\"))\n    if (!raw) return undefined\n    try {\n      return decodeURIComponent(raw.split(\"=\").slice(1).join(\"=\"))\n    } catch {\n      return raw.split(\"=\").slice(1).join(\"=\")\n    }\n  }\n\n  const write = (v: string) => {\n    if (typeof document === \"undefined\") return\n    let s =\n      `${name}=${encodeURIComponent(v)}; Path=${path}` +\n      `; SameSite=${sameSite}`\n    if (attrs.domain) s += `; Domain=${attrs.domain}`\n    if (attrs.secure) s += `; Secure`\n    if (attrs.maxAge) s += `; Max-Age=${attrs.maxAge}`\n    document.cookie = s\n  }\n\n  const clear = () => {\n    if (typeof document === \"undefined\") return\n    document.cookie = `${name}=; Max-Age=0; Path=${path}`\n  }\n\n  return {\n    get: read,\n    set: (t) => (t ? write(t) : clear()),\n    // No reliable cookie change event across tabs; omit subscribe\n  }\n}\n\n/** In-memory adapter (useful for SSR/tests). */\nexport function memoryAdapter(initial?: string): StorageAdapter {\n  let value = initial\n  const subs = new Set<() => void>()\n  return {\n    get: () => value,\n    set: (t) => {\n      value = t\n      subs.forEach((fn) => fn())\n    },\n    subscribe(cb) {\n      subs.add(cb)\n      return () => subs.delete(cb)\n    },\n  }\n}\n"],"mappings":"AAAA,SAAS,+BAA+B;AAYjC,SAAS,oBACd,MAAM,yBACU;AAChB,QAAM,OAAO,oBAAI,IAAgB;AAEjC,QAAM,YAAY,CAAC,MAAoB;AACrC,QAAI,EAAE,QAAQ,IAAK,MAAK,QAAQ,CAAC,OAAO,GAAG,CAAC;AAAA,EAC9C;AAEA,QAAM,UAAU,MAAM;AACpB,QAAI;AACF,UAAI,OAAO,WAAW,eAAe,EAAE,kBAAkB;AACvD,eAAO;AACT,aAAO,OAAO,aAAa,QAAQ,GAAG,KAAK;AAAA,IAC7C,QAAQ;AACN,aAAO;AAAA,IACT;AAAA,EACF;AAEA,QAAM,UAAU,CAAC,MAAe;AAC9B,QAAI;AACF,UAAI,OAAO,WAAW,eAAe,EAAE,kBAAkB,QAAS;AAClE,UAAI,CAAC,EAAG,QAAO,aAAa,WAAW,GAAG;AAAA,UACrC,QAAO,aAAa,QAAQ,KAAK,CAAC;AAAA,IACzC,QAAQ;AAAA,IAER;AAAA,EACF;AAEA,SAAO;AAAA,IACL,KAAK;AAAA,IACL,KAAK;AAAA,IACL,UAAU,IAAI;AACZ,WAAK,IAAI,EAAE;AACX,UAAI,OAAO,WAAW,aAAa;AACjC,eAAO,iBAAiB,WAAW,SAAS;AAAA,MAC9C;AACA,aAAO,MAAM;AACX,aAAK,OAAO,EAAE;AACd,YAAI,CAAC,KAAK,QAAQ,OAAO,WAAW,aAAa;AAC/C,iBAAO,oBAAoB,WAAW,SAAS;AAAA,QACjD;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACF;AAGO,SAAS,cACd,UAOI,CAAC,GACW;AAChB,QAAM,EAAE,OAAO,yBAAyB,GAAG,MAAM,IAAI;AACrD,QAAM,EAAE,OAAO,KAAK,WAAW,MAAM,IAAI;AACzC,QAAM,OAAO,MAAM;AACjB,QAAI,OAAO,aAAa,YAAa,QAAO;AAC5C,UAAM,MAAM,SAAS,OAClB,MAAM,IAAI,EACV,KAAK,CAAC,MAAM,EAAE,WAAW,OAAO,GAAG,CAAC;AACvC,QAAI,CAAC,IAAK,QAAO;AACjB,QAAI;AACF,aAAO,mBAAmB,IAAI,MAAM,GAAG,EAAE,MAAM,CAAC,EAAE,KAAK,GAAG,CAAC;AAAA,IAC7D,QAAQ;AACN,aAAO,IAAI,MAAM,GAAG,EAAE,MAAM,CAAC,EAAE,KAAK,GAAG;AAAA,IACzC;AAAA,EACF;AAEA,QAAM,QAAQ,CAAC,MAAc;AAC3B,QAAI,OAAO,aAAa,YAAa;AACrC,QAAI,IACF,GAAG,IAAI,IAAI,mBAAmB,CAAC,CAAC,UAAU,IAAI,cAChC,QAAQ;AACxB,QAAI,MAAM,OAAQ,MAAK,YAAY,MAAM,MAAM;AAC/C,QAAI,MAAM,OAAQ,MAAK;AACvB,QAAI,MAAM,OAAQ,MAAK,aAAa,MAAM,MAAM;AAChD,aAAS,SAAS;AAAA,EACpB;AAEA,QAAM,QAAQ,MAAM;AAClB,QAAI,OAAO,aAAa,YAAa;AACrC,aAAS,SAAS,GAAG,IAAI,sBAAsB,IAAI;AAAA,EACrD;AAEA,SAAO;AAAA,IACL,KAAK;AAAA,IACL,KAAK,CAAC,MAAO,IAAI,MAAM,CAAC,IAAI,MAAM;AAAA;AAAA,EAEpC;AACF;AAGO,SAAS,cAAc,SAAkC;AAC9D,MAAI,QAAQ;AACZ,QAAM,OAAO,oBAAI,IAAgB;AACjC,SAAO;AAAA,IACL,KAAK,MAAM;AAAA,IACX,KAAK,CAAC,MAAM;AACV,cAAQ;AACR,WAAK,QAAQ,CAAC,OAAO,GAAG,CAAC;AAAA,IAC3B;AAAA,IACA,UAAU,IAAI;AACZ,WAAK,IAAI,EAAE;AACX,aAAO,MAAM,KAAK,OAAO,EAAE;AAAA,IAC7B;AAAA,EACF;AACF;","names":[]}

package/dist/auth/token-providers.cjs

@@ -0,0 +1,82 @@
+"use strict";
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+var token_providers_exports = {};
+__export(token_providers_exports, {
+  makeImplicitTokenProviderCachedBare: () => makeImplicitTokenProviderCachedBare,
+  makeImplicitTokenProviderWithFreshSdk: () => makeImplicitTokenProviderWithFreshSdk
+});
+module.exports = __toCommonJS(token_providers_exports);
+var import_client_fetch = require("@hey-api/client-fetch");
+var import_sdk = require('../client/sdk.gen.cjs');
+function makeImplicitTokenProviderWithFreshSdk(opts) {
+  return async () => {
+    const bare = (0, import_client_fetch.createClient)({
+      baseUrl: opts.baseUrl,
+      fetch: opts.fetch,
+      headers: opts.headers
+    });
+    const resp = await (0, import_sdk.createAnAccessToken)({
+      client: bare,
+      body: { grant_type: "implicit", client_id: opts.clientId }
+    });
+    if (resp.error) {
+      throw new Error(
+        "makeImplicitTokenProviderWithFreshSdk: Failed to get access token"
+      );
+    }
+    const x = resp.data;
+    return {
+      access_token: x.access_token,
+      expires_in: x.expires_in ?? void 0,
+      expires: x.expires ?? void 0,
+      token_type: x.token_type ?? void 0
+    };
+  };
+}
+function makeImplicitTokenProviderCachedBare(opts) {
+  let bare = (0, import_client_fetch.createClient)({
+    baseUrl: opts.baseUrl,
+    fetch: opts.fetch,
+    headers: opts.headers
+  });
+  return async () => {
+    const resp = await (0, import_sdk.createAnAccessToken)({
+      client: bare,
+      body: { grant_type: "implicit", client_id: opts.clientId }
+    });
+    if (resp.error) {
+      throw new Error(
+        "makeImplicitTokenProviderCachedBare: Failed to get access token"
+      );
+    }
+    const x = resp.data;
+    return {
+      access_token: x.access_token,
+      expires_in: x.expires_in,
+      expires: x.expires,
+      token_type: x.token_type
+    };
+  };
+}
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  makeImplicitTokenProviderCachedBare,
+  makeImplicitTokenProviderWithFreshSdk
+});
+//# sourceMappingURL=token-providers.cjs.map

package/dist/auth/token-providers.cjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/auth/token-providers.ts"],"sourcesContent":["import type { TokenProvider } from \"./kit\"\nimport { type Config, createClient } from \"@hey-api/client-fetch\"\nimport { createAnAccessToken } from \"../client/sdk.gen\"\n\n/**\n * Fresh-instance implicit token provider.\n * Always constructs a new, BARE sdk client (no auth wrapper, no interceptors) and calls the OAuth op.\n * This is loop-proof because it never uses the authed client.\n */\nexport function makeImplicitTokenProviderWithFreshSdk(opts: {\n  baseUrl: string\n  clientId: string\n  fetch?: Config[\"fetch\"]\n  headers?: HeadersInit | Record<string, string>\n  // If your SDK needs any other createClient options, add them here and pass through.\n}): TokenProvider {\n  return async () => {\n    const bare = createClient({\n      baseUrl: opts.baseUrl,\n      fetch: opts.fetch,\n      headers: opts.headers,\n    })\n\n    const resp = await createAnAccessToken({\n      client: bare,\n      body: { grant_type: \"implicit\", client_id: opts.clientId },\n    })\n\n    if (resp.error) {\n      throw new Error(\n        \"makeImplicitTokenProviderWithFreshSdk: Failed to get access token\",\n      )\n    }\n\n    const x = resp.data\n\n    return {\n      access_token: x.access_token,\n      expires_in: x.expires_in ?? undefined,\n      expires: x.expires ?? undefined,\n      token_type: x.token_type ?? undefined,\n    }\n  }\n}\n\n/**\n * Cached bare instance (minor perf win, still loop-proof).\n * Reuses a single bare client for all OAuth calls.\n */\nexport function makeImplicitTokenProviderCachedBare(opts: {\n  baseUrl: string\n  clientId: string\n  fetch?: Config[\"fetch\"]\n  headers?: HeadersInit | Record<string, string>\n}): TokenProvider {\n  let bare = createClient({\n    baseUrl: opts.baseUrl,\n    fetch: opts.fetch,\n    headers: opts.headers,\n  })\n\n  return async () => {\n    const resp = await createAnAccessToken({\n      client: bare,\n      body: { grant_type: \"implicit\", client_id: opts.clientId },\n    })\n\n    if (resp.error) {\n      throw new Error(\n        \"makeImplicitTokenProviderCachedBare: Failed to get access token\",\n      )\n    }\n\n    const x = resp.data\n    return {\n      access_token: x.access_token,\n      expires_in: x.expires_in,\n      expires: x.expires,\n      token_type: x.token_type,\n    }\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AACA,0BAA0C;AAC1C,iBAAoC;AAO7B,SAAS,sCAAsC,MAMpC;AAChB,SAAO,YAAY;AACjB,UAAM,WAAO,kCAAa;AAAA,MACxB,SAAS,KAAK;AAAA,MACd,OAAO,KAAK;AAAA,MACZ,SAAS,KAAK;AAAA,IAChB,CAAC;AAED,UAAM,OAAO,UAAM,gCAAoB;AAAA,MACrC,QAAQ;AAAA,MACR,MAAM,EAAE,YAAY,YAAY,WAAW,KAAK,SAAS;AAAA,IAC3D,CAAC;AAED,QAAI,KAAK,OAAO;AACd,YAAM,IAAI;AAAA,QACR;AAAA,MACF;AAAA,IACF;AAEA,UAAM,IAAI,KAAK;AAEf,WAAO;AAAA,MACL,cAAc,EAAE;AAAA,MAChB,YAAY,EAAE,cAAc;AAAA,MAC5B,SAAS,EAAE,WAAW;AAAA,MACtB,YAAY,EAAE,cAAc;AAAA,IAC9B;AAAA,EACF;AACF;AAMO,SAAS,oCAAoC,MAKlC;AAChB,MAAI,WAAO,kCAAa;AAAA,IACtB,SAAS,KAAK;AAAA,IACd,OAAO,KAAK;AAAA,IACZ,SAAS,KAAK;AAAA,EAChB,CAAC;AAED,SAAO,YAAY;AACjB,UAAM,OAAO,UAAM,gCAAoB;AAAA,MACrC,QAAQ;AAAA,MACR,MAAM,EAAE,YAAY,YAAY,WAAW,KAAK,SAAS;AAAA,IAC3D,CAAC;AAED,QAAI,KAAK,OAAO;AACd,YAAM,IAAI;AAAA,QACR;AAAA,MACF;AAAA,IACF;AAEA,UAAM,IAAI,KAAK;AACf,WAAO;AAAA,MACL,cAAc,EAAE;AAAA,MAChB,YAAY,EAAE;AAAA,MACd,SAAS,EAAE;AAAA,MACX,YAAY,EAAE;AAAA,IAChB;AAAA,EACF;AACF;","names":[]}

package/dist/auth/token-providers.d.cts

@@ -0,0 +1,28 @@
+import { TokenProvider } from './kit.cjs';
+import { Config } from '@hey-api/client-fetch';
+import './storage.cjs';
+import '../client/types.gen.cjs';
+
+/**
+ * Fresh-instance implicit token provider.
+ * Always constructs a new, BARE sdk client (no auth wrapper, no interceptors) and calls the OAuth op.
+ * This is loop-proof because it never uses the authed client.
+ */
+declare function makeImplicitTokenProviderWithFreshSdk(opts: {
+    baseUrl: string;
+    clientId: string;
+    fetch?: Config["fetch"];
+    headers?: HeadersInit | Record<string, string>;
+}): TokenProvider;
+/**
+ * Cached bare instance (minor perf win, still loop-proof).
+ * Reuses a single bare client for all OAuth calls.
+ */
+declare function makeImplicitTokenProviderCachedBare(opts: {
+    baseUrl: string;
+    clientId: string;
+    fetch?: Config["fetch"];
+    headers?: HeadersInit | Record<string, string>;
+}): TokenProvider;
+
+export { makeImplicitTokenProviderCachedBare, makeImplicitTokenProviderWithFreshSdk };

package/dist/auth/token-providers.d.ts

@@ -0,0 +1,28 @@
+import { TokenProvider } from './kit.js';
+import { Config } from '@hey-api/client-fetch';
+import './storage.js';
+import '../client/types.gen.js';
+
+/**
+ * Fresh-instance implicit token provider.
+ * Always constructs a new, BARE sdk client (no auth wrapper, no interceptors) and calls the OAuth op.
+ * This is loop-proof because it never uses the authed client.
+ */
+declare function makeImplicitTokenProviderWithFreshSdk(opts: {
+    baseUrl: string;
+    clientId: string;
+    fetch?: Config["fetch"];
+    headers?: HeadersInit | Record<string, string>;
+}): TokenProvider;
+/**
+ * Cached bare instance (minor perf win, still loop-proof).
+ * Reuses a single bare client for all OAuth calls.
+ */
+declare function makeImplicitTokenProviderCachedBare(opts: {
+    baseUrl: string;
+    clientId: string;
+    fetch?: Config["fetch"];
+    headers?: HeadersInit | Record<string, string>;
+}): TokenProvider;
+
+export { makeImplicitTokenProviderCachedBare, makeImplicitTokenProviderWithFreshSdk };

package/dist/auth/token-providers.mjs

@@ -0,0 +1,57 @@
+import { createClient } from "@hey-api/client-fetch";
+import { createAnAccessToken } from "../client/sdk.gen.mjs";
+function makeImplicitTokenProviderWithFreshSdk(opts) {
+  return async () => {
+    const bare = createClient({
+      baseUrl: opts.baseUrl,
+      fetch: opts.fetch,
+      headers: opts.headers
+    });
+    const resp = await createAnAccessToken({
+      client: bare,
+      body: { grant_type: "implicit", client_id: opts.clientId }
+    });
+    if (resp.error) {
+      throw new Error(
+        "makeImplicitTokenProviderWithFreshSdk: Failed to get access token"
+      );
+    }
+    const x = resp.data;
+    return {
+      access_token: x.access_token,
+      expires_in: x.expires_in ?? void 0,
+      expires: x.expires ?? void 0,
+      token_type: x.token_type ?? void 0
+    };
+  };
+}
+function makeImplicitTokenProviderCachedBare(opts) {
+  let bare = createClient({
+    baseUrl: opts.baseUrl,
+    fetch: opts.fetch,
+    headers: opts.headers
+  });
+  return async () => {
+    const resp = await createAnAccessToken({
+      client: bare,
+      body: { grant_type: "implicit", client_id: opts.clientId }
+    });
+    if (resp.error) {
+      throw new Error(
+        "makeImplicitTokenProviderCachedBare: Failed to get access token"
+      );
+    }
+    const x = resp.data;
+    return {
+      access_token: x.access_token,
+      expires_in: x.expires_in,
+      expires: x.expires,
+      token_type: x.token_type
+    };
+  };
+}
+export {
+  makeImplicitTokenProviderCachedBare,
+  makeImplicitTokenProviderWithFreshSdk
+};
+//# sourceMappingURL=token-providers.mjs.map

package/dist/auth/token-providers.mjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/auth/token-providers.ts"],"sourcesContent":["import type { TokenProvider } from \"./kit\"\nimport { type Config, createClient } from \"@hey-api/client-fetch\"\nimport { createAnAccessToken } from \"../client/sdk.gen\"\n\n/**\n * Fresh-instance implicit token provider.\n * Always constructs a new, BARE sdk client (no auth wrapper, no interceptors) and calls the OAuth op.\n * This is loop-proof because it never uses the authed client.\n */\nexport function makeImplicitTokenProviderWithFreshSdk(opts: {\n  baseUrl: string\n  clientId: string\n  fetch?: Config[\"fetch\"]\n  headers?: HeadersInit | Record<string, string>\n  // If your SDK needs any other createClient options, add them here and pass through.\n}): TokenProvider {\n  return async () => {\n    const bare = createClient({\n      baseUrl: opts.baseUrl,\n      fetch: opts.fetch,\n      headers: opts.headers,\n    })\n\n    const resp = await createAnAccessToken({\n      client: bare,\n      body: { grant_type: \"implicit\", client_id: opts.clientId },\n    })\n\n    if (resp.error) {\n      throw new Error(\n        \"makeImplicitTokenProviderWithFreshSdk: Failed to get access token\",\n      )\n    }\n\n    const x = resp.data\n\n    return {\n      access_token: x.access_token,\n      expires_in: x.expires_in ?? undefined,\n      expires: x.expires ?? undefined,\n      token_type: x.token_type ?? undefined,\n    }\n  }\n}\n\n/**\n * Cached bare instance (minor perf win, still loop-proof).\n * Reuses a single bare client for all OAuth calls.\n */\nexport function makeImplicitTokenProviderCachedBare(opts: {\n  baseUrl: string\n  clientId: string\n  fetch?: Config[\"fetch\"]\n  headers?: HeadersInit | Record<string, string>\n}): TokenProvider {\n  let bare = createClient({\n    baseUrl: opts.baseUrl,\n    fetch: opts.fetch,\n    headers: opts.headers,\n  })\n\n  return async () => {\n    const resp = await createAnAccessToken({\n      client: bare,\n      body: { grant_type: \"implicit\", client_id: opts.clientId },\n    })\n\n    if (resp.error) {\n      throw new Error(\n        \"makeImplicitTokenProviderCachedBare: Failed to get access token\",\n      )\n    }\n\n    const x = resp.data\n    return {\n      access_token: x.access_token,\n      expires_in: x.expires_in,\n      expires: x.expires,\n      token_type: x.token_type,\n    }\n  }\n}\n"],"mappings":"AACA,SAAsB,oBAAoB;AAC1C,SAAS,2BAA2B;AAO7B,SAAS,sCAAsC,MAMpC;AAChB,SAAO,YAAY;AACjB,UAAM,OAAO,aAAa;AAAA,MACxB,SAAS,KAAK;AAAA,MACd,OAAO,KAAK;AAAA,MACZ,SAAS,KAAK;AAAA,IAChB,CAAC;AAED,UAAM,OAAO,MAAM,oBAAoB;AAAA,MACrC,QAAQ;AAAA,MACR,MAAM,EAAE,YAAY,YAAY,WAAW,KAAK,SAAS;AAAA,IAC3D,CAAC;AAED,QAAI,KAAK,OAAO;AACd,YAAM,IAAI;AAAA,QACR;AAAA,MACF;AAAA,IACF;AAEA,UAAM,IAAI,KAAK;AAEf,WAAO;AAAA,MACL,cAAc,EAAE;AAAA,MAChB,YAAY,EAAE,cAAc;AAAA,MAC5B,SAAS,EAAE,WAAW;AAAA,MACtB,YAAY,EAAE,cAAc;AAAA,IAC9B;AAAA,EACF;AACF;AAMO,SAAS,oCAAoC,MAKlC;AAChB,MAAI,OAAO,aAAa;AAAA,IACtB,SAAS,KAAK;AAAA,IACd,OAAO,KAAK;AAAA,IACZ,SAAS,KAAK;AAAA,EAChB,CAAC;AAED,SAAO,YAAY;AACjB,UAAM,OAAO,MAAM,oBAAoB;AAAA,MACrC,QAAQ;AAAA,MACR,MAAM,EAAE,YAAY,YAAY,WAAW,KAAK,SAAS;AAAA,IAC3D,CAAC;AAED,QAAI,KAAK,OAAO;AACd,YAAM,IAAI;AAAA,QACR;AAAA,MACF;AAAA,IACF;AAEA,UAAM,IAAI,KAAK;AACf,WAAO;AAAA,MACL,cAAc,EAAE;AAAA,MAChB,YAAY,EAAE;AAAA,MACd,SAAS,EAAE;AAAA,MACX,YAAY,EAAE;AAAA,IAChB;AAAA,EACF;AACF;","names":[]}