@everfur/sdk 0.9.3 → 0.11.0

package/dist/{depth-C7RIscDR.d.ts → depth-DwS8HfHo.d.ts}

@@ -1,7 +1,7 @@
 import { E as EverfurResult } from './EverfurResult-ClPTS0P2.js';
 import { P as PetRef } from './ids-B2GAAifq.js';
-import { R as RequestFunnel } from './requestFunnel-Dhaj0yUq.js';
-import { A as AuthContext } from './identity-BTT6YtH5.js';
+import { R as RequestFunnel } from './requestFunnel-CybT6svX.js';
+import { A as AuthContext } from './identity-5Jc-BTMj.js';
 import { E as ErrorPolicyPort } from './ErrorPolicyPort-C3nNSS_j.js';
 import { d as RecordsRequestView, R as RecordDocumentMeta, a as RecordEntity } from './models-CnXY5LuO.js';
 import { E as EverfurError } from './EverfurError-DeBqRpQV.js';

package/dist/{depth-jbSWsweM.d.cts → depth-DxqHB-Xi.d.cts}

@@ -1,7 +1,7 @@
 import { E as EverfurResult } from './EverfurResult-COlXj1wq.cjs';
 import { P as PetRef } from './ids-B2GAAifq.cjs';
-import { R as RequestFunnel } from './requestFunnel-u8qnM5Ll.cjs';
-import { A as AuthContext } from './identity-ScajqjK5.cjs';
+import { R as RequestFunnel } from './requestFunnel-B8lodGM0.cjs';
+import { A as AuthContext } from './identity-VHQ_4xWJ.cjs';
 import { E as ErrorPolicyPort } from './ErrorPolicyPort-10s3HJCt.cjs';
 import { d as RecordsRequestView, R as RecordDocumentMeta, a as RecordEntity } from './models-A4A5S7AG.cjs';
 import { E as EverfurError } from './EverfurError-DeBqRpQV.cjs';

package/dist/{entitlementRepository-Ccc6K6wB.d.cts → entitlementRepository-Do9RzJ8e.d.cts}

@@ -1,6 +1,6 @@
 import { E as EverfurError } from './EverfurError-DeBqRpQV.cjs';
-import { R as RequestFunnel } from './requestFunnel-u8qnM5Ll.cjs';
-import { A as AuthContext } from './identity-ScajqjK5.cjs';
+import { R as RequestFunnel } from './requestFunnel-B8lodGM0.cjs';
+import { A as AuthContext } from './identity-VHQ_4xWJ.cjs';
 import { C as ClientBranding } from './branding-BCfwLj0h.cjs';
 import { E as EntitlementDecision } from './resolve-D4Ywz5OS.cjs';
 

package/dist/{entitlementRepository-D7Fc7OdG.d.ts → entitlementRepository-DosFNBqA.d.ts}

@@ -1,6 +1,6 @@
 import { E as EverfurError } from './EverfurError-DeBqRpQV.js';
-import { R as RequestFunnel } from './requestFunnel-Dhaj0yUq.js';
-import { A as AuthContext } from './identity-BTT6YtH5.js';
+import { R as RequestFunnel } from './requestFunnel-CybT6svX.js';
+import { A as AuthContext } from './identity-5Jc-BTMj.js';
 import { C as ClientBranding } from './branding-DJf4h12Q.js';
 import { E as EntitlementDecision } from './resolve-D4Ywz5OS.js';
 

package/dist/{identity-BTT6YtH5.d.ts → identity-5Jc-BTMj.d.ts}

@@ -1,6 +1,6 @@
 import { E as EverfurResult } from './EverfurResult-ClPTS0P2.js';
 import { U as UserRef } from './ids-B2GAAifq.js';
-import { T as TransportPort, d as EverfurRequest } from './config-DeUmccwl.js';
+import { T as TransportPort, d as EverfurRequest } from './config-Cp9Zo6xK.js';
 
 /**
  * A minted session token with the expiry the minter knows. `expiresAt` is what `mintPartnerSession` returns
@@ -26,6 +26,12 @@ interface IdentityProvider {
     hasToken(): boolean;
     /** Drop the cached bearer (user switch / logout) so a stale token is never sent post-switch. */
     clear(): void;
+    /**
+     * Called where a request settles terminal `authRejected` (a failed mint, or a 401 after the one re-mint), so
+     * the runtime can tell the partner the session died. Optional: an identity a caller builds itself, or the
+     * frozen one a sign-out hook holds, has none and reports nothing.
+     */
+    reportRejected?(): void;
 }
 /**
  * Memory-only identity. The token is NEVER written through KvPort or to disk (SPEC-00 4.3, identity.dart
@@ -34,7 +40,7 @@ interface IdentityProvider {
  * none); the runtime arms its proactive refresh from it. Scheduling lives there, not here, so this spine,
  * which every capability closure carries, stays small.
  */
-declare function createIdentityProvider(userRef: UserRef, getToken: TokenProvider, onMinted?: (expiresAtMs: number | null) => void): IdentityProvider;
+declare function createIdentityProvider(userRef: UserRef, getToken: TokenProvider, onMinted?: (expiresAtMs: number | null) => void, onRejected?: () => void): IdentityProvider;
 type DeviceAuth = {
     readonly mode: 'personalized';
     readonly token: string;

package/dist/{identity-ScajqjK5.d.cts → identity-VHQ_4xWJ.d.cts}

@@ -1,6 +1,6 @@
 import { E as EverfurResult } from './EverfurResult-COlXj1wq.cjs';
 import { U as UserRef } from './ids-B2GAAifq.cjs';
-import { T as TransportPort, d as EverfurRequest } from './config-C68HTCf4.cjs';
+import { T as TransportPort, d as EverfurRequest } from './config-DJHqL-U3.cjs';
 
 /**
  * A minted session token with the expiry the minter knows. `expiresAt` is what `mintPartnerSession` returns
@@ -26,6 +26,12 @@ interface IdentityProvider {
     hasToken(): boolean;
     /** Drop the cached bearer (user switch / logout) so a stale token is never sent post-switch. */
     clear(): void;
+    /**
+     * Called where a request settles terminal `authRejected` (a failed mint, or a 401 after the one re-mint), so
+     * the runtime can tell the partner the session died. Optional: an identity a caller builds itself, or the
+     * frozen one a sign-out hook holds, has none and reports nothing.
+     */
+    reportRejected?(): void;
 }
 /**
  * Memory-only identity. The token is NEVER written through KvPort or to disk (SPEC-00 4.3, identity.dart
@@ -34,7 +40,7 @@ interface IdentityProvider {
  * none); the runtime arms its proactive refresh from it. Scheduling lives there, not here, so this spine,
  * which every capability closure carries, stays small.
  */
-declare function createIdentityProvider(userRef: UserRef, getToken: TokenProvider, onMinted?: (expiresAtMs: number | null) => void): IdentityProvider;
+declare function createIdentityProvider(userRef: UserRef, getToken: TokenProvider, onMinted?: (expiresAtMs: number | null) => void, onRejected?: () => void): IdentityProvider;
 type DeviceAuth = {
     readonly mode: 'personalized';
     readonly token: string;