@inboxlink/sdk 0.1.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Etienne Fokou
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,77 @@
+# `@inboxlink/sdk`
+
+Host-app HTTP client for [InboxLink](https://github.com/EtienneFokou-E18560/inboxlink).
+
+Gmail-first surface: Connect sessions, grant exchange, **list / get messages**, and **history sync**. Do **not** ship `INBOXLINK_API_SECRET` to browsers. This package does **not** add Microsoft Graph or IMAP client APIs.
+
+**Hosts never set `GOOGLE_*`.** Google OAuth lives on the InboxLink server (Production or your self-host). Your app only needs a redirect URI you control plus (optionally) an API secret when the server is in `multi` mode.
+
+## Install
+
+```bash
+# After a public npm release (maintainer runs the publish workflow):
+npm install @inboxlink/sdk
+
+# Until then — monorepo / git dependency:
+pnpm add @inboxlink/sdk --filter your-app
+# or: "file:../inboxlink/packages/sdk" / git+https://github.com/EtienneFokou-E18560/inboxlink.git
+```
+
+Until the first npm publish, consume the package from this repository via the pnpm workspace or a git dependency. See [docs/publishing.md](../../docs/publishing.md).
+
+## Quick start (Production, single mode)
+
+```ts
+import { InboxLink, InboxLinkApiError } from "@inboxlink/sdk";
+
+// baseUrl defaults to https://inboxlink-two.vercel.app
+// apiSecret omitted — Production currently runs INBOXLINK_MODE=single
+const il = new InboxLink();
+
+const session = await il.createConnectSession({
+  externalUserId: "user-1",
+  redirectUri: "http://127.0.0.1:9999/done", // your host callback, not Google
+});
+// Redirect the end user to session.connectUrl
+
+// On your redirect handler:
+const { grantId } = await il.completeConnect({ redirectUrl: request.url });
+const page = await il.messages.list(grantId, { limit: 20 });
+```
+
+### Local / multi-mode overrides
+
+```ts
+const il = new InboxLink({
+  baseUrl: process.env.INBOXLINK_BASE_URL ?? "http://localhost:8787",
+  apiSecret: process.env.INBOXLINK_API_SECRET, // required when server is multi
+});
+```
+
+## Client surface (v0.1, Gmail)
+
+| Area | Methods | HTTP |
+|------|---------|------|
+| Connect | `createConnectSession`, `completeConnect` | sessions + exchange |
+| Helpers | `parseConnectRedirect`, `connectUrlForToken`, `INBOXLINK_PRODUCTION_URL` | local |
+| Link | `link.createSession` | `POST /v1/link/sessions` |
+| Grants | `grants.exchange`, `grants.list`, `grants.revoke`, `grants.sync` | `/v1/grants…` |
+| Messages | `messages.list`, `messages.get`, `messages.iterate` | `/v1/grants/:id/messages…` |
+| Webhooks | `webhooks.verify` | local HMAC check |
+
+- `messages.list` → live Gmail list
+- `messages.get` → `{ message }` including optional attachment metadata (`id`, `filename`, `mimeType`, `size`) — not bytes
+- `grants.sync` → inline Gmail history sync (`bootstrap` / `incremental` / `full`)
+
+## Host env (few knobs)
+
+See [`examples/host-integration/host.env.example`](../../examples/host-integration/host.env.example). Do **not** copy server `.env.example` into a host app — that file includes Postgres, vault, and Google OAuth for **InboxLink operators**, not hosts.
+
+## Versioning
+
+- **0.x** — public API may still change; treat minors as potentially breaking for host apps.
+- Publish only via the manual GitHub Actions workflow (see [docs/publishing.md](../../docs/publishing.md)). No CI job publishes on every merge. **No live publish in this PR.**
+
+## License
+
+MIT — see [LICENSE](./LICENSE).

package/dist/index.d.ts

@@ -0,0 +1,177 @@
+/**
+ * @inboxlink/sdk — host-app client for the InboxLink HTTP API.
+ *
+ * SPDX-License-Identifier: MIT
+ * Copyright (c) 2026 Etienne Fokou
+ */
+import type { CreateLinkSessionInput, Grant, Message } from "@inboxlink/core";
+export type { CreateLinkSessionInput, EmailAddress, Grant, GrantStatus, Message, MessageAttachment, Provider, } from "@inboxlink/core";
+/** Documented Production origin. Used when `baseUrl` is omitted. */
+export declare const INBOXLINK_PRODUCTION_URL = "https://inboxlink-two.vercel.app";
+export type InboxLinkClientOptions = {
+    /**
+     * API origin. Defaults to {@link INBOXLINK_PRODUCTION_URL}.
+     * Override for local (`http://localhost:8787`) or self-hosted deployments.
+     */
+    baseUrl?: string;
+    /**
+     * Bearer secret (`INBOXLINK_API_SECRET`).
+     * Required only when the server runs `INBOXLINK_MODE=multi`.
+     * Omit for Production / `single` mode — the Authorization header is not sent.
+     */
+    apiSecret?: string;
+    fetch?: typeof fetch;
+};
+export type ListMessagesOptions = {
+    /** Page size. Server currently accepts 1–25 (default 20). */
+    limit?: number;
+    /** Opaque pagination cursor from a previous `nextCursor`. */
+    cursor?: string;
+};
+export type IterateMessagesOptions = {
+    /** Skip messages with `receivedAt` earlier than this ISO timestamp. */
+    since?: string;
+    limit?: number;
+};
+export type LinkSessionResult = {
+    linkToken: string;
+    connectUrl: string;
+    sessionId: string;
+    expiresAt?: string;
+};
+export type ListMessagesResult = {
+    messages: Message[];
+    nextCursor?: string;
+};
+export type SyncResult = {
+    grantId: string;
+    status: string;
+    mode: string;
+    historyId?: string;
+    upserted?: number;
+    deleted?: number;
+};
+export type SyncOptions = {
+    mode?: "full" | "bootstrap" | "incremental";
+};
+export type ConnectRedirectParams = {
+    /** One-time token for `grants.exchange` / `completeConnect`. */
+    publicToken: string;
+    /** Original link token (optional correlation). */
+    linkToken?: string;
+};
+/** HTTP error from the InboxLink API (non-2xx). */
+export declare class InboxLinkApiError extends Error {
+    readonly status: number;
+    readonly method: string;
+    readonly path: string;
+    readonly body: string;
+    /** Parsed `error` field when the body is JSON. */
+    readonly code?: string;
+    /** Parsed `detail` / guidance when the body is JSON. */
+    readonly detail?: string;
+    constructor(input: {
+        method: string;
+        path: string;
+        status: number;
+        body: string;
+        code?: string;
+        detail?: string;
+    });
+}
+/**
+ * Parse the host redirect URL (or query string) after Connect completes.
+ * Expects `public_token` (required) and optional `link_token`.
+ */
+export declare function parseConnectRedirect(input: string | URL | {
+    searchParams: URLSearchParams;
+}): ConnectRedirectParams;
+/** Build the hosted Connect page URL for a link token (same shape as session.connectUrl). */
+export declare function connectUrlForToken(linkToken: string, baseUrl?: string): string;
+export declare class InboxLink {
+    readonly link: LinkApi;
+    readonly grants: GrantsApi;
+    readonly messages: MessagesApi;
+    readonly webhooks: WebhooksApi;
+    /** Resolved API origin (after defaults). */
+    readonly baseUrl: string;
+    constructor(options?: InboxLinkClientOptions);
+    /**
+     * High-level Connect entry: create a session and return `connectUrl` for the browser.
+     * Same as `link.createSession` — prefer this name in host apps.
+     */
+    createConnectSession(input: CreateLinkSessionInput): Promise<LinkSessionResult>;
+    /**
+     * Finish Connect: exchange a one-time `public_token` (or a full redirect URL) for `grantId`.
+     * Call from your host redirect/BFF handler — never from a browser that holds an API secret.
+     */
+    completeConnect(input: {
+        publicToken: string;
+    } | {
+        redirectUrl: string;
+    }): Promise<{
+        grantId: string;
+    }>;
+}
+declare class HttpClient {
+    private readonly fetchImpl;
+    private readonly baseUrl;
+    private readonly apiSecret?;
+    constructor(options: {
+        baseUrl: string;
+        apiSecret?: string;
+        fetch?: typeof fetch;
+    });
+    request<T>(method: string, path: string, body?: Record<string, unknown>): Promise<T>;
+}
+declare class LinkApi {
+    private readonly http;
+    constructor(http: HttpClient);
+    /** Create a Connect session for an end user. */
+    createSession(input: CreateLinkSessionInput): Promise<LinkSessionResult>;
+}
+declare class GrantsApi {
+    private readonly http;
+    constructor(http: HttpClient);
+    /** Exchange a one-time public token from Connect for a durable grant id. */
+    exchange(input: {
+        publicToken: string;
+    }): Promise<{
+        grantId: string;
+    }>;
+    list(externalUserId: string): Promise<{
+        grants: Grant[];
+    }>;
+    revoke(grantId: string): Promise<void>;
+    /** Run history sync (bootstrap / incremental / full). Maps to `POST /v1/grants/:grantId/sync`. */
+    sync(grantId: string, opts?: SyncOptions): Promise<SyncResult>;
+}
+declare class MessagesApi {
+    private readonly http;
+    constructor(http: HttpClient);
+    /**
+     * List normalized messages for a grant.
+     * Maps to `GET /v1/grants/:grantId/messages`.
+     */
+    list(grantId: string, opts?: ListMessagesOptions): Promise<ListMessagesResult>;
+    /**
+     * Fetch a single message by id (InboxLink `msg_…` or provider Gmail id).
+     * Maps to `GET /v1/grants/:grantId/messages/:messageId`.
+     * Response includes optional attachment metadata (id, filename, mimeType, size) — not bytes.
+     */
+    get(grantId: string, messageId: string): Promise<{
+        message: Message;
+    }>;
+    /** Walk list pages until exhausted (or filtered by `since`). */
+    iterate(grantId: string, opts?: IterateMessagesOptions): AsyncGenerator<Message>;
+}
+declare class WebhooksApi {
+    /** Verify `sha256=<hex>` HMAC signatures (constant-time). */
+    verify(input: {
+        payload: string;
+        signatureHeader: string;
+        secret: string;
+    }): boolean;
+}
+export { InboxLink as default };
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAGH,OAAO,KAAK,EAAE,sBAAsB,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,iBAAiB,CAAC;AAE9E,YAAY,EACV,sBAAsB,EACtB,YAAY,EACZ,KAAK,EACL,WAAW,EACX,OAAO,EACP,iBAAiB,EACjB,QAAQ,GACT,MAAM,iBAAiB,CAAC;AAEzB,oEAAoE;AACpE,eAAO,MAAM,wBAAwB,qCAAqC,CAAC;AAE3E,MAAM,MAAM,sBAAsB,GAAG;IACnC;;;OAGG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB;;;;OAIG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,KAAK,CAAC,EAAE,OAAO,KAAK,CAAC;CACtB,CAAC;AAEF,MAAM,MAAM,mBAAmB,GAAG;IAChC,6DAA6D;IAC7D,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,6DAA6D;IAC7D,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB,CAAC;AAEF,MAAM,MAAM,sBAAsB,GAAG;IACnC,uEAAuE;IACvE,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB,CAAC;AAEF,MAAM,MAAM,iBAAiB,GAAG;IAC9B,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB,CAAC;AAEF,MAAM,MAAM,kBAAkB,GAAG;IAC/B,QAAQ,EAAE,OAAO,EAAE,CAAC;IACpB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB,CAAC;AAEF,MAAM,MAAM,UAAU,GAAG;IACvB,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB,CAAC;AAEF,MAAM,MAAM,WAAW,GAAG;IACxB,IAAI,CAAC,EAAE,MAAM,GAAG,WAAW,GAAG,aAAa,CAAC;CAC7C,CAAC;AAEF,MAAM,MAAM,qBAAqB,GAAG;IAClC,gEAAgE;IAChE,WAAW,EAAE,MAAM,CAAC;IACpB,kDAAkD;IAClD,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB,CAAC;AAEF,mDAAmD;AACnD,qBAAa,iBAAkB,SAAQ,KAAK;IAC1C,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,kDAAkD;IAClD,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,wDAAwD;IACxD,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;gBAEb,KAAK,EAAE;QACjB,MAAM,EAAE,MAAM,CAAC;QACf,IAAI,EAAE,MAAM,CAAC;QACb,MAAM,EAAE,MAAM,CAAC;QACf,IAAI,EAAE,MAAM,CAAC;QACb,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,MAAM,CAAC,EAAE,MAAM,CAAC;KACjB;CAYF;AAED;;;GAGG;AACH,wBAAgB,oBAAoB,CAClC,KAAK,EAAE,MAAM,GAAG,GAAG,GAAG;IAAE,YAAY,EAAE,eAAe,CAAA;CAAE,GACtD,qBAAqB,CAgCvB;AAED,6FAA6F;AAC7F,wBAAgB,kBAAkB,CAChC,SAAS,EAAE,MAAM,EACjB,OAAO,GAAE,MAAiC,GACzC,MAAM,CAOR;AAED,qBAAa,SAAS;IACpB,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;IACvB,QAAQ,CAAC,MAAM,EAAE,SAAS,CAAC;IAC3B,QAAQ,CAAC,QAAQ,EAAE,WAAW,CAAC;IAC/B,QAAQ,CAAC,QAAQ,EAAE,WAAW,CAAC;IAC/B,4CAA4C;IAC5C,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;gBAEb,OAAO,GAAE,sBAA2B;IAkBhD;;;OAGG;IACH,oBAAoB,CAAC,KAAK,EAAE,sBAAsB,GAAG,OAAO,CAAC,iBAAiB,CAAC;IAI/E;;;OAGG;IACH,eAAe,CACb,KAAK,EAAE;QAAE,WAAW,EAAE,MAAM,CAAA;KAAE,GAAG;QAAE,WAAW,EAAE,MAAM,CAAA;KAAE,GACvD,OAAO,CAAC;QAAE,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;CAOhC;AAED,cAAM,UAAU;IACd,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAe;IACzC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAS;IACjC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAS;gBAExB,OAAO,EAAE;QACnB,OAAO,EAAE,MAAM,CAAC;QAChB,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,KAAK,CAAC,EAAE,OAAO,KAAK,CAAC;KACtB;IAMK,OAAO,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC;CA+B3F;AAED,cAAM,OAAO;IACC,OAAO,CAAC,QAAQ,CAAC,IAAI;gBAAJ,IAAI,EAAE,UAAU;IAE7C,gDAAgD;IAChD,aAAa,CAAC,KAAK,EAAE,sBAAsB,GAAG,OAAO,CAAC,iBAAiB,CAAC;CAezE;AAED,cAAM,SAAS;IACD,OAAO,CAAC,QAAQ,CAAC,IAAI;gBAAJ,IAAI,EAAE,UAAU;IAE7C,4EAA4E;IAC5E,QAAQ,CAAC,KAAK,EAAE;QAAE,WAAW,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC;QAAE,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;IAStE,IAAI,CAAC,cAAc,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,MAAM,EAAE,KAAK,EAAE,CAAA;KAAE,CAAC;IAO1D,MAAM,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAItC,kGAAkG;IAClG,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,UAAU,CAAC;CAK/D;AAED,cAAM,WAAW;IACH,OAAO,CAAC,QAAQ,CAAC,IAAI;gBAAJ,IAAI,EAAE,UAAU;IAE7C;;;OAGG;IACH,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,mBAAmB,GAAG,OAAO,CAAC,kBAAkB,CAAC;IAW9E;;;;OAIG;IACH,GAAG,CAAC,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,OAAO,EAAE,OAAO,CAAA;KAAE,CAAC;IAOtE,gEAAgE;IACzD,OAAO,CACZ,OAAO,EAAE,MAAM,EACf,IAAI,CAAC,EAAE,sBAAsB,GAC5B,cAAc,CAAC,OAAO,CAAC;CAY3B;AAED,cAAM,WAAW;IACf,6DAA6D;IAC7D,MAAM,CAAC,KAAK,EAAE;QACZ,OAAO,EAAE,MAAM,CAAC;QAChB,eAAe,EAAE,MAAM,CAAC;QACxB,MAAM,EAAE,MAAM,CAAC;KAChB,GAAG,OAAO;CAWZ;AA2BD,OAAO,EAAE,SAAS,IAAI,OAAO,EAAE,CAAC"}

package/dist/index.js

@@ -0,0 +1,279 @@
+/**
+ * @inboxlink/sdk — host-app client for the InboxLink HTTP API.
+ *
+ * SPDX-License-Identifier: MIT
+ * Copyright (c) 2026 Etienne Fokou
+ */
+import { createHmac, timingSafeEqual } from "node:crypto";
+/** Documented Production origin. Used when `baseUrl` is omitted. */
+export const INBOXLINK_PRODUCTION_URL = "https://inboxlink-two.vercel.app";
+/** HTTP error from the InboxLink API (non-2xx). */
+export class InboxLinkApiError extends Error {
+    status;
+    method;
+    path;
+    body;
+    /** Parsed `error` field when the body is JSON. */
+    code;
+    /** Parsed `detail` / guidance when the body is JSON. */
+    detail;
+    constructor(input) {
+        const hint = input.detail ?? input.code;
+        const suffix = hint ? ` — ${hint}` : `: ${input.body.slice(0, 300)}`;
+        super(`InboxLink ${input.method} ${input.path} → ${input.status}${suffix}`);
+        this.name = "InboxLinkApiError";
+        this.method = input.method;
+        this.path = input.path;
+        this.status = input.status;
+        this.body = input.body;
+        this.code = input.code;
+        this.detail = input.detail;
+    }
+}
+/**
+ * Parse the host redirect URL (or query string) after Connect completes.
+ * Expects `public_token` (required) and optional `link_token`.
+ */
+export function parseConnectRedirect(input) {
+    let params;
+    if (typeof input === "string") {
+        const trimmed = input.trim();
+        if (!trimmed) {
+            throw new Error("parseConnectRedirect: empty input. Pass the full redirect URL or a query string containing public_token.");
+        }
+        try {
+            params = trimmed.includes("://")
+                ? new URL(trimmed).searchParams
+                : new URLSearchParams(trimmed.startsWith("?") ? trimmed.slice(1) : trimmed);
+        }
+        catch {
+            throw new Error("parseConnectRedirect: could not parse URL. Pass the full redirect URL your host received after Connect.");
+        }
+    }
+    else if (input instanceof URL) {
+        params = input.searchParams;
+    }
+    else {
+        params = input.searchParams;
+    }
+    const publicToken = params.get("public_token")?.trim() || undefined;
+    if (!publicToken) {
+        throw new Error("parseConnectRedirect: missing public_token. Connect may have failed (InboxLink shows an error page instead of redirecting), or the user landed on the wrong route.");
+    }
+    const linkToken = params.get("link_token")?.trim() || undefined;
+    return { publicToken, linkToken };
+}
+/** Build the hosted Connect page URL for a link token (same shape as session.connectUrl). */
+export function connectUrlForToken(linkToken, baseUrl = INBOXLINK_PRODUCTION_URL) {
+    const token = linkToken.trim();
+    if (!token) {
+        throw new Error("connectUrlForToken: linkToken is required");
+    }
+    const origin = ensureNoTrailingSlash(baseUrl || INBOXLINK_PRODUCTION_URL);
+    return `${origin}/v1/connect/${encodeURIComponent(token)}`;
+}
+export class InboxLink {
+    link;
+    grants;
+    messages;
+    webhooks;
+    /** Resolved API origin (after defaults). */
+    baseUrl;
+    constructor(options = {}) {
+        const baseUrl = ensureNoTrailingSlash(options.baseUrl?.trim() || INBOXLINK_PRODUCTION_URL);
+        if (!baseUrl) {
+            throw new Error("InboxLink: baseUrl is empty. Pass baseUrl or rely on the Production default.");
+        }
+        this.baseUrl = baseUrl;
+        const apiSecret = options.apiSecret?.trim() || undefined;
+        const http = new HttpClient({ baseUrl, apiSecret, fetch: options.fetch });
+        this.link = new LinkApi(http);
+        this.grants = new GrantsApi(http);
+        this.messages = new MessagesApi(http);
+        this.webhooks = new WebhooksApi();
+    }
+    /**
+     * High-level Connect entry: create a session and return `connectUrl` for the browser.
+     * Same as `link.createSession` — prefer this name in host apps.
+     */
+    createConnectSession(input) {
+        return this.link.createSession(input);
+    }
+    /**
+     * Finish Connect: exchange a one-time `public_token` (or a full redirect URL) for `grantId`.
+     * Call from your host redirect/BFF handler — never from a browser that holds an API secret.
+     */
+    completeConnect(input) {
+        const publicToken = "publicToken" in input && input.publicToken
+            ? input.publicToken
+            : parseConnectRedirect(input.redirectUrl).publicToken;
+        return this.grants.exchange({ publicToken });
+    }
+}
+class HttpClient {
+    fetchImpl;
+    baseUrl;
+    apiSecret;
+    constructor(options) {
+        this.baseUrl = options.baseUrl;
+        this.apiSecret = options.apiSecret;
+        this.fetchImpl = options.fetch ?? fetch;
+    }
+    async request(method, path, body) {
+        const url = new URL(path, ensureTrailingSlash(this.baseUrl));
+        const headers = {
+            "content-type": "application/json",
+            accept: "application/json",
+        };
+        if (this.apiSecret) {
+            headers.authorization = `Bearer ${this.apiSecret}`;
+        }
+        const res = await this.fetchImpl(url, {
+            method,
+            headers,
+            body: body ? JSON.stringify(body) : undefined,
+        });
+        if (!res.ok) {
+            const text = await res.text();
+            const parsed = tryParseErrorBody(text);
+            throw new InboxLinkApiError({
+                method,
+                path,
+                status: res.status,
+                body: text,
+                code: parsed?.code,
+                detail: parsed?.detail,
+            });
+        }
+        if (res.status === 204) {
+            return undefined;
+        }
+        return (await res.json());
+    }
+}
+class LinkApi {
+    http;
+    constructor(http) {
+        this.http = http;
+    }
+    /** Create a Connect session for an end user. */
+    createSession(input) {
+        if (!input.externalUserId?.trim()) {
+            throw new Error("link.createSession: externalUserId is required");
+        }
+        if (!input.redirectUri?.trim()) {
+            throw new Error("link.createSession: redirectUri is required (your host callback URL that receives public_token — not the Google OAuth redirect).");
+        }
+        return this.http.request("POST", "v1/link/sessions", {
+            externalUserId: input.externalUserId,
+            redirectUri: input.redirectUri,
+            products: input.products ?? ["messages"],
+        });
+    }
+}
+class GrantsApi {
+    http;
+    constructor(http) {
+        this.http = http;
+    }
+    /** Exchange a one-time public token from Connect for a durable grant id. */
+    exchange(input) {
+        if (!input.publicToken?.trim()) {
+            throw new Error("grants.exchange: publicToken is required. Read it from the Connect redirect query (?public_token=…) via parseConnectRedirect or completeConnect.");
+        }
+        return this.http.request("POST", "v1/grants/exchange", input);
+    }
+    list(externalUserId) {
+        return this.http.request("GET", `v1/grants?externalUserId=${encodeURIComponent(externalUserId)}`);
+    }
+    revoke(grantId) {
+        return this.http.request("DELETE", `v1/grants/${encodeURIComponent(grantId)}`);
+    }
+    /** Run history sync (bootstrap / incremental / full). Maps to `POST /v1/grants/:grantId/sync`. */
+    sync(grantId, opts) {
+        const body = opts?.mode && opts.mode !== "incremental" ? { mode: opts.mode } : undefined;
+        return this.http.request("POST", `v1/grants/${encodeURIComponent(grantId)}/sync`, body);
+    }
+}
+class MessagesApi {
+    http;
+    constructor(http) {
+        this.http = http;
+    }
+    /**
+     * List normalized messages for a grant.
+     * Maps to `GET /v1/grants/:grantId/messages`.
+     */
+    list(grantId, opts) {
+        const q = new URLSearchParams();
+        if (opts?.limit !== undefined)
+            q.set("limit", String(opts.limit));
+        if (opts?.cursor)
+            q.set("cursor", opts.cursor);
+        const qs = q.toString();
+        return this.http.request("GET", `v1/grants/${encodeURIComponent(grantId)}/messages${qs ? `?${qs}` : ""}`);
+    }
+    /**
+     * Fetch a single message by id (InboxLink `msg_…` or provider Gmail id).
+     * Maps to `GET /v1/grants/:grantId/messages/:messageId`.
+     * Response includes optional attachment metadata (id, filename, mimeType, size) — not bytes.
+     */
+    get(grantId, messageId) {
+        return this.http.request("GET", `v1/grants/${encodeURIComponent(grantId)}/messages/${encodeURIComponent(messageId)}`);
+    }
+    /** Walk list pages until exhausted (or filtered by `since`). */
+    async *iterate(grantId, opts) {
+        let cursor;
+        for (;;) {
+            const page = await this.list(grantId, { limit: opts?.limit ?? 20, cursor });
+            for (const msg of page.messages) {
+                if (opts?.since && msg.receivedAt < opts.since)
+                    continue;
+                yield msg;
+            }
+            if (!page.nextCursor)
+                break;
+            cursor = page.nextCursor;
+        }
+    }
+}
+class WebhooksApi {
+    /** Verify `sha256=<hex>` HMAC signatures (constant-time). */
+    verify(input) {
+        const expected = createHmac("sha256", input.secret).update(input.payload).digest("hex");
+        const provided = input.signatureHeader.replace(/^sha256=/i, "").trim();
+        try {
+            const a = Buffer.from(expected, "hex");
+            const b = Buffer.from(provided, "hex");
+            return a.length === b.length && timingSafeEqual(a, b);
+        }
+        catch {
+            return false;
+        }
+    }
+}
+function ensureTrailingSlash(base) {
+    return base.endsWith("/") ? base : `${base}/`;
+}
+function ensureNoTrailingSlash(base) {
+    return base.replace(/\/+$/, "");
+}
+function tryParseErrorBody(text) {
+    try {
+        const json = JSON.parse(text);
+        const code = typeof json.error === "string" ? json.error : undefined;
+        const detail = typeof json.detail === "string"
+            ? json.detail
+            : typeof json.message === "string"
+                ? json.message
+                : undefined;
+        if (code || detail)
+            return { code, detail };
+    }
+    catch {
+        // non-JSON body
+    }
+    return undefined;
+}
+export { InboxLink as default };
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAa1D,oEAAoE;AACpE,MAAM,CAAC,MAAM,wBAAwB,GAAG,kCAAkC,CAAC;AA8D3E,mDAAmD;AACnD,MAAM,OAAO,iBAAkB,SAAQ,KAAK;IACjC,MAAM,CAAS;IACf,MAAM,CAAS;IACf,IAAI,CAAS;IACb,IAAI,CAAS;IACtB,kDAAkD;IACzC,IAAI,CAAU;IACvB,wDAAwD;IAC/C,MAAM,CAAU;IAEzB,YAAY,KAOX;QACC,MAAM,IAAI,GAAG,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,IAAI,CAAC;QACxC,MAAM,MAAM,GAAG,IAAI,CAAC,CAAC,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC;QACrE,KAAK,CAAC,aAAa,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,IAAI,MAAM,KAAK,CAAC,MAAM,GAAG,MAAM,EAAE,CAAC,CAAC;QAC5E,IAAI,CAAC,IAAI,GAAG,mBAAmB,CAAC;QAChC,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC;QAC3B,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC;QACvB,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC;QAC3B,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC;QACvB,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC;QACvB,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC;IAC7B,CAAC;CACF;AAED;;;GAGG;AACH,MAAM,UAAU,oBAAoB,CAClC,KAAuD;IAEvD,IAAI,MAAuB,CAAC;IAC5B,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;QAC7B,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,IAAI,KAAK,CACb,0GAA0G,CAC3G,CAAC;QACJ,CAAC;QACD,IAAI,CAAC;YACH,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC;gBAC9B,CAAC,CAAC,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC,YAAY;gBAC/B,CAAC,CAAC,IAAI,eAAe,CAAC,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;QAChF,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,KAAK,CACb,yGAAyG,CAC1G,CAAC;QACJ,CAAC;IACH,CAAC;SAAM,IAAI,KAAK,YAAY,GAAG,EAAE,CAAC;QAChC,MAAM,GAAG,KAAK,CAAC,YAAY,CAAC;IAC9B,CAAC;SAAM,CAAC;QACN,MAAM,GAAG,KAAK,CAAC,YAAY,CAAC;IAC9B,CAAC;IAED,MAAM,WAAW,GAAG,MAAM,CAAC,GAAG,CAAC,cAAc,CAAC,EAAE,IAAI,EAAE,IAAI,SAAS,CAAC;IACpE,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,MAAM,IAAI,KAAK,CACb,oKAAoK,CACrK,CAAC;IACJ,CAAC;IACD,MAAM,SAAS,GAAG,MAAM,CAAC,GAAG,CAAC,YAAY,CAAC,EAAE,IAAI,EAAE,IAAI,SAAS,CAAC;IAChE,OAAO,EAAE,WAAW,EAAE,SAAS,EAAE,CAAC;AACpC,CAAC;AAED,6FAA6F;AAC7F,MAAM,UAAU,kBAAkB,CAChC,SAAiB,EACjB,UAAkB,wBAAwB;IAE1C,MAAM,KAAK,GAAG,SAAS,CAAC,IAAI,EAAE,CAAC;IAC/B,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;IAC/D,CAAC;IACD,MAAM,MAAM,GAAG,qBAAqB,CAAC,OAAO,IAAI,wBAAwB,CAAC,CAAC;IAC1E,OAAO,GAAG,MAAM,eAAe,kBAAkB,CAAC,KAAK,CAAC,EAAE,CAAC;AAC7D,CAAC;AAED,MAAM,OAAO,SAAS;IACX,IAAI,CAAU;IACd,MAAM,CAAY;IAClB,QAAQ,CAAc;IACtB,QAAQ,CAAc;IAC/B,4CAA4C;IACnC,OAAO,CAAS;IAEzB,YAAY,UAAkC,EAAE;QAC9C,MAAM,OAAO,GAAG,qBAAqB,CACnC,OAAO,CAAC,OAAO,EAAE,IAAI,EAAE,IAAI,wBAAwB,CACpD,CAAC;QACF,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,IAAI,KAAK,CACb,8EAA8E,CAC/E,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QACvB,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,EAAE,IAAI,EAAE,IAAI,SAAS,CAAC;QACzD,MAAM,IAAI,GAAG,IAAI,UAAU,CAAC,EAAE,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC;QAC1E,IAAI,CAAC,IAAI,GAAG,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;QAC9B,IAAI,CAAC,MAAM,GAAG,IAAI,SAAS,CAAC,IAAI,CAAC,CAAC;QAClC,IAAI,CAAC,QAAQ,GAAG,IAAI,WAAW,CAAC,IAAI,CAAC,CAAC;QACtC,IAAI,CAAC,QAAQ,GAAG,IAAI,WAAW,EAAE,CAAC;IACpC,CAAC;IAED;;;OAGG;IACH,oBAAoB,CAAC,KAA6B;QAChD,OAAO,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;IACxC,CAAC;IAED;;;OAGG;IACH,eAAe,CACb,KAAwD;QAExD,MAAM,WAAW,GACf,aAAa,IAAI,KAAK,IAAI,KAAK,CAAC,WAAW;YACzC,CAAC,CAAC,KAAK,CAAC,WAAW;YACnB,CAAC,CAAC,oBAAoB,CAAE,KAAiC,CAAC,WAAW,CAAC,CAAC,WAAW,CAAC;QACvF,OAAO,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC;IAC/C,CAAC;CACF;AAED,MAAM,UAAU;IACG,SAAS,CAAe;IACxB,OAAO,CAAS;IAChB,SAAS,CAAU;IAEpC,YAAY,OAIX;QACC,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;QAC/B,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,SAAS,CAAC;QACnC,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,KAAK,IAAI,KAAK,CAAC;IAC1C,CAAC;IAED,KAAK,CAAC,OAAO,CAAI,MAAc,EAAE,IAAY,EAAE,IAA8B;QAC3E,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,IAAI,EAAE,mBAAmB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;QAC7D,MAAM,OAAO,GAA2B;YACtC,cAAc,EAAE,kBAAkB;YAClC,MAAM,EAAE,kBAAkB;SAC3B,CAAC;QACF,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;YACnB,OAAO,CAAC,aAAa,GAAG,UAAU,IAAI,CAAC,SAAS,EAAE,CAAC;QACrD,CAAC;QACD,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE;YACpC,MAAM;YACN,OAAO;YACP,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS;SAC9C,CAAC,CAAC;QACH,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YACZ,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;YAC9B,MAAM,MAAM,GAAG,iBAAiB,CAAC,IAAI,CAAC,CAAC;YACvC,MAAM,IAAI,iBAAiB,CAAC;gBAC1B,MAAM;gBACN,IAAI;gBACJ,MAAM,EAAE,GAAG,CAAC,MAAM;gBAClB,IAAI,EAAE,IAAI;gBACV,IAAI,EAAE,MAAM,EAAE,IAAI;gBAClB,MAAM,EAAE,MAAM,EAAE,MAAM;aACvB,CAAC,CAAC;QACL,CAAC;QACD,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;YACvB,OAAO,SAAc,CAAC;QACxB,CAAC;QACD,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAM,CAAC;IACjC,CAAC;CACF;AAED,MAAM,OAAO;IACkB;IAA7B,YAA6B,IAAgB;QAAhB,SAAI,GAAJ,IAAI,CAAY;IAAG,CAAC;IAEjD,gDAAgD;IAChD,aAAa,CAAC,KAA6B;QACzC,IAAI,CAAC,KAAK,CAAC,cAAc,EAAE,IAAI,EAAE,EAAE,CAAC;YAClC,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;QACpE,CAAC;QACD,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,IAAI,EAAE,EAAE,CAAC;YAC/B,MAAM,IAAI,KAAK,CACb,kIAAkI,CACnI,CAAC;QACJ,CAAC;QACD,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,kBAAkB,EAAE;YACnD,cAAc,EAAE,KAAK,CAAC,cAAc;YACpC,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,QAAQ,EAAE,KAAK,CAAC,QAAQ,IAAI,CAAC,UAAU,CAAC;SACzC,CAAC,CAAC;IACL,CAAC;CACF;AAED,MAAM,SAAS;IACgB;IAA7B,YAA6B,IAAgB;QAAhB,SAAI,GAAJ,IAAI,CAAY;IAAG,CAAC;IAEjD,4EAA4E;IAC5E,QAAQ,CAAC,KAA8B;QACrC,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,IAAI,EAAE,EAAE,CAAC;YAC/B,MAAM,IAAI,KAAK,CACb,kJAAkJ,CACnJ,CAAC;QACJ,CAAC;QACD,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,oBAAoB,EAAE,KAAK,CAAC,CAAC;IAChE,CAAC;IAED,IAAI,CAAC,cAAsB;QACzB,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO,CACtB,KAAK,EACL,4BAA4B,kBAAkB,CAAC,cAAc,CAAC,EAAE,CACjE,CAAC;IACJ,CAAC;IAED,MAAM,CAAC,OAAe;QACpB,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,aAAa,kBAAkB,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IACjF,CAAC;IAED,kGAAkG;IAClG,IAAI,CAAC,OAAe,EAAE,IAAkB;QACtC,MAAM,IAAI,GACR,IAAI,EAAE,IAAI,IAAI,IAAI,CAAC,IAAI,KAAK,aAAa,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;QAC9E,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,aAAa,kBAAkB,CAAC,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IAC1F,CAAC;CACF;AAED,MAAM,WAAW;IACc;IAA7B,YAA6B,IAAgB;QAAhB,SAAI,GAAJ,IAAI,CAAY;IAAG,CAAC;IAEjD;;;OAGG;IACH,IAAI,CAAC,OAAe,EAAE,IAA0B;QAC9C,MAAM,CAAC,GAAG,IAAI,eAAe,EAAE,CAAC;QAChC,IAAI,IAAI,EAAE,KAAK,KAAK,SAAS;YAAE,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;QAClE,IAAI,IAAI,EAAE,MAAM;YAAE,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;QAC/C,MAAM,EAAE,GAAG,CAAC,CAAC,QAAQ,EAAE,CAAC;QACxB,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO,CACtB,KAAK,EACL,aAAa,kBAAkB,CAAC,OAAO,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CACzE,CAAC;IACJ,CAAC;IAED;;;;OAIG;IACH,GAAG,CAAC,OAAe,EAAE,SAAiB;QACpC,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO,CACtB,KAAK,EACL,aAAa,kBAAkB,CAAC,OAAO,CAAC,aAAa,kBAAkB,CAAC,SAAS,CAAC,EAAE,CACrF,CAAC;IACJ,CAAC;IAED,gEAAgE;IAChE,KAAK,CAAC,CAAC,OAAO,CACZ,OAAe,EACf,IAA6B;QAE7B,IAAI,MAA0B,CAAC;QAC/B,SAAS,CAAC;YACR,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,IAAI,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;YAC5E,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;gBAChC,IAAI,IAAI,EAAE,KAAK,IAAI,GAAG,CAAC,UAAU,GAAG,IAAI,CAAC,KAAK;oBAAE,SAAS;gBACzD,MAAM,GAAG,CAAC;YACZ,CAAC;YACD,IAAI,CAAC,IAAI,CAAC,UAAU;gBAAE,MAAM;YAC5B,MAAM,GAAG,IAAI,CAAC,UAAU,CAAC;QAC3B,CAAC;IACH,CAAC;CACF;AAED,MAAM,WAAW;IACf,6DAA6D;IAC7D,MAAM,CAAC,KAIN;QACC,MAAM,QAAQ,GAAG,UAAU,CAAC,QAAQ,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACxF,MAAM,QAAQ,GAAG,KAAK,CAAC,eAAe,CAAC,OAAO,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QACvE,IAAI,CAAC;YACH,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;YACvC,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;YACvC,OAAO,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,MAAM,IAAI,eAAe,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QACxD,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;CACF;AAED,SAAS,mBAAmB,CAAC,IAAY;IACvC,OAAO,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,IAAI,GAAG,CAAC;AAChD,CAAC;AAED,SAAS,qBAAqB,CAAC,IAAY;IACzC,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;AAClC,CAAC;AAED,SAAS,iBAAiB,CAAC,IAAY;IACrC,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAA6D,CAAC;QAC1F,MAAM,IAAI,GAAG,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;QACrE,MAAM,MAAM,GACV,OAAO,IAAI,CAAC,MAAM,KAAK,QAAQ;YAC7B,CAAC,CAAC,IAAI,CAAC,MAAM;YACb,CAAC,CAAC,OAAO,IAAI,CAAC,OAAO,KAAK,QAAQ;gBAChC,CAAC,CAAC,IAAI,CAAC,OAAO;gBACd,CAAC,CAAC,SAAS,CAAC;QAClB,IAAI,IAAI,IAAI,MAAM;YAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;IAC9C,CAAC;IAAC,MAAM,CAAC;QACP,gBAAgB;IAClB,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,OAAO,EAAE,SAAS,IAAI,OAAO,EAAE,CAAC"}

package/package.json

@@ -0,0 +1,56 @@
+{
+  "name": "@inboxlink/sdk",
+  "version": "0.1.0",
+  "description": "Host-app client for InboxLink HTTP API",
+  "license": "MIT",
+  "type": "module",
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js",
+      "default": "./dist/index.js"
+    }
+  },
+  "files": [
+    "dist",
+    "LICENSE",
+    "README.md"
+  ],
+  "dependencies": {
+    "@inboxlink/core": "0.1.0"
+  },
+  "devDependencies": {
+    "tsx": "^4.19.3"
+  },
+  "publishConfig": {
+    "access": "public"
+  },
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/EtienneFokou-E18560/inboxlink.git",
+    "directory": "packages/sdk"
+  },
+  "bugs": {
+    "url": "https://github.com/EtienneFokou-E18560/inboxlink/issues"
+  },
+  "homepage": "https://github.com/EtienneFokou-E18560/inboxlink/tree/main/packages/sdk#readme",
+  "keywords": [
+    "inboxlink",
+    "email",
+    "oauth",
+    "sdk",
+    "client"
+  ],
+  "sideEffects": false,
+  "engines": {
+    "node": ">=22"
+  },
+  "scripts": {
+    "build": "tsc -b tsconfig.json",
+    "typecheck": "tsc -b tsconfig.json",
+    "lint": "tsc -b tsconfig.json",
+    "test": "node --import tsx --test src/client.test.ts"
+  }
+}