@intlayer/api 9.5.10 → 9.5.12

package/dist/cjs/cms/createAuthManager.cjs

@@ -6,6 +6,40 @@ let defu = require("defu");
 
 //#region src/cms/createAuthManager.ts
 const ONE_MINUTE_MS = 6e4;
+/**
+* Process-wide token states, keyed by backend URL and credentials. Build
+* steps and watch rebuilds each create their own manager; sharing the state
+* lets them reuse one token instead of awaiting a new exchange every time.
+*/
+const accessTokenStates = /* @__PURE__ */ new Map();
+/** Clears every cached access token, forcing the next call to re-authenticate. */
+const clearAccessTokenCache = () => {
+	accessTokenStates.clear();
+};
+/** Returns the shared token state for the given credentials, creating it if missing. */
+const getAccessTokenState = (editorConfig) => {
+	const stateKey = [
+		editorConfig?.backendURL,
+		editorConfig?.clientId,
+		editorConfig?.clientSecret
+	].join("\0");
+	let accessTokenState = accessTokenStates.get(stateKey);
+	if (!accessTokenState) {
+		accessTokenState = {};
+		accessTokenStates.set(stateKey, accessTokenState);
+	}
+	return accessTokenState;
+};
+/** HTTP statuses meaning the access token was rejected. */
+const AUTHENTICATION_ERROR_STATUSES = /* @__PURE__ */ new Set([401, 403]);
+/**
+* Whether a failed call may succeed with a fresh token: an auth rejection, or
+* an error without HTTP status. A `404` or `500` would fail again regardless.
+*/
+const isAuthenticationError = (error) => {
+	const status = error?.status;
+	return typeof status !== "number" || AUTHENTICATION_ERROR_STATUSES.has(status);
+};
 /** Whether the current runtime is a browser rather than a server. */
 const isBrowser = () => typeof window !== "undefined";
 /**
@@ -26,8 +60,8 @@ const getExpiryTimestamp = (token) => {
 * Creates an instance-scoped {@link AuthManager} handling the OAuth2
 * `client_credentials` flow (or a pre-issued CLI session token).
 *
-* Unlike a global token cache, each manager keeps its own token state, so
-* independent SDK instances never interfere with one another.
+* Managers built with the same backend URL and credentials share one token
+* state, so a process never exchanges credentials more than needed.
 *
 * @param intlayerConfig - Intlayer configuration carrying the `editor`
 * credentials. Defaults to the build-time configuration.
@@ -48,10 +82,9 @@ const createAuthManager = (intlayerConfig = { editor: _intlayer_config_built.edi
 		...fetcherOptions.headers ?? {},
 		Authorization: `Bearer ${sessionToken}`
 	};
-	let accessToken;
-	let expiryTimestamp;
-	let pendingRefresh;
+	const accessTokenState = getAccessTokenState(resolvedConfig?.editor);
 	const needsRefresh = () => {
+		const { accessToken, expiryTimestamp } = accessTokenState;
 		if (!accessToken) return true;
 		if (!expiryTimestamp) return false;
 		return Date.now() + ONE_MINUTE_MS >= expiryTimestamp;
@@ -59,19 +92,19 @@ const createAuthManager = (intlayerConfig = { editor: _intlayer_config_built.edi
 	const refreshToken = async () => {
 		const doRefresh = async () => {
 			const tokenData = (await require_getIntlayerAPI_oAuth.getOAuthAPI({}, resolvedConfig).getOAuth2AccessToken())?.data;
-			accessToken = tokenData?.accessToken;
-			expiryTimestamp = getExpiryTimestamp(tokenData);
+			accessTokenState.accessToken = tokenData?.accessToken;
+			accessTokenState.expiryTimestamp = getExpiryTimestamp(tokenData);
 		};
-		pendingRefresh ??= doRefresh().finally(() => {
-			pendingRefresh = void 0;
+		accessTokenState.pendingRefresh ??= doRefresh().finally(() => {
+			accessTokenState.pendingRefresh = void 0;
 		});
-		await pendingRefresh;
+		await accessTokenState.pendingRefresh;
 	};
 	const applyAuthHeader = () => {
-		if (!accessToken) return;
+		if (!accessTokenState.accessToken) return;
 		fetcherOptions.headers = {
 			...fetcherOptions.headers ?? {},
-			Authorization: `Bearer ${accessToken}`
+			Authorization: `Bearer ${accessTokenState.accessToken}`
 		};
 	};
 	const ensureAuth = async () => {
@@ -80,8 +113,8 @@ const createAuthManager = (intlayerConfig = { editor: _intlayer_config_built.edi
 		applyAuthHeader();
 	};
 	const reset = () => {
-		accessToken = void 0;
-		expiryTimestamp = void 0;
+		accessTokenState.accessToken = void 0;
+		accessTokenState.expiryTimestamp = void 0;
 	};
 	const withAuth = (method, skipAuth = !hasCredentials) => {
 		if (skipAuth && !sessionToken && isBrowser()) return async () => {
@@ -93,7 +126,7 @@ const createAuthManager = (intlayerConfig = { editor: _intlayer_config_built.edi
 			try {
 				return await method(...args);
 			} catch (error) {
-				if (sessionToken) throw error;
+				if (sessionToken || !isAuthenticationError(error)) throw error;
 				await refreshToken();
 				applyAuthHeader();
 				return await method(...args);
@@ -121,5 +154,6 @@ const createAuthManager = (intlayerConfig = { editor: _intlayer_config_built.edi
 };
 
 //#endregion
+exports.clearAccessTokenCache = clearAccessTokenCache;
 exports.createAuthManager = createAuthManager;
 //# sourceMappingURL=createAuthManager.cjs.map

package/dist/cjs/cms/createAuthManager.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"createAuthManager.cjs","names":["editor","getEditorClientSecret","getOAuthAPI"],"sources":["../../../src/cms/createAuthManager.ts"],"sourcesContent":["import { editor } from '@intlayer/config/built';\nimport { getEditorClientSecret } from '@intlayer/config/secrets';\nimport type { IntlayerConfig } from '@intlayer/types/config';\nimport { defu } from 'defu';\nimport type { FetcherOptions } from '../fetcher';\nimport { getOAuthAPI } from '../getIntlayerAPI/oAuth';\n\n/**\n * Shape of the various OAuth2 token payloads the backend may return. Only the\n * fields used to derive the expiration timestamp are described here.\n */\ntype OAuthTokenLike = {\n  accessToken?: string;\n  accessTokenExpiresAt?: string | Date;\n  expires_in?: number;\n  expiresIn?: number;\n  expiresAt?: string | Date;\n};\n\n/**\n * Any asynchronous API method exposed by a domain section\n * (e.g. `getDictionaries`, `pushDictionaries`).\n */\ntype AsyncMethod<Arguments extends unknown[], Result> = (\n  ...args: Arguments\n) => Promise<Result>;\n\n/**\n * A domain section factory: builds a plain object of async methods from shared\n * fetcher options and the Intlayer configuration.\n */\ntype SectionFactory<Section extends Record<string, unknown>> = (\n  fetcherOptions: FetcherOptions,\n  intlayerConfig: IntlayerConfig\n) => Section;\n\nconst ONE_MINUTE_MS = 60_000;\n\n/** Whether the current runtime is a browser rather than a server. */\nconst isBrowser = (): boolean => typeof window !== 'undefined';\n\n/**\n * Resolves the expiration timestamp (in ms since epoch) from an OAuth2\n * token-like payload, supporting both absolute dates and relative durations.\n */\nconst getExpiryTimestamp = (\n  token: OAuthTokenLike | undefined\n): number | undefined => {\n  if (!token) return undefined;\n\n  const dateLike = (token.accessTokenExpiresAt ?? token.expiresAt) as\n    | string\n    | Date\n    | undefined;\n\n  if (dateLike) {\n    const timestamp =\n      typeof dateLike === 'string'\n        ? Date.parse(dateLike)\n        : dateLike.getTime?.();\n    if (typeof timestamp === 'number' && Number.isFinite(timestamp)) {\n      return timestamp;\n    }\n  }\n\n  const seconds = token.expires_in ?? token.expiresIn;\n  if (typeof seconds === 'number' && Number.isFinite(seconds)) {\n    return Date.now() + seconds * 1000;\n  }\n\n  return undefined;\n};\n\n/**\n * Options accepted when creating an {@link AuthManager}.\n */\nexport type AuthManagerOptions = {\n  /**\n   * Base fetcher options merged into every request (e.g. custom headers).\n   */\n  baseFetcherOptions?: FetcherOptions;\n  /**\n   * A pre-issued CLI session token (prefixed with `clisession_`). When provided,\n   * it is used directly as the Bearer token and the OAuth2 `client_credentials`\n   * exchange is skipped entirely.\n   */\n  sessionToken?: string;\n};\n\n/**\n * Options accepted when binding a domain section to an {@link AuthManager}.\n */\nexport type BindSectionOptions = {\n  /**\n   * Forces auth injection on (`false`) or off (`true`). Defaults to enabled\n   * whenever credentials are available.\n   */\n  skipAuth?: boolean;\n};\n\n/**\n * Manages CMS authentication for a set of API calls.\n *\n * The manager owns a single mutable {@link FetcherOptions} object\n * (`fetcherOptions`). Domain factories bound through it share the same\n * reference, so refreshing the token in place transparently authenticates every\n * call — without rebuilding the API clients.\n */\nexport type AuthManager = {\n  /**\n   * Mutable fetcher options carrying the `Authorization` header. Bound sections\n   * share this reference so the injected token is reused everywhere.\n   */\n  fetcherOptions: FetcherOptions;\n  /**\n   * The resolved Intlayer configuration (merged with the build-time defaults).\n   */\n  intlayerConfig: IntlayerConfig;\n  /**\n   * `true` when credentials are available — either a session token or a\n   * `clientId`/`clientSecret` pair in the configuration.\n   */\n  hasCredentials: boolean;\n  /**\n   * Ensures a valid access token is available and applies it to\n   * `fetcherOptions`. Called automatically by {@link withAuth}.\n   */\n  ensureAuth: () => Promise<void>;\n  /**\n   * Forces a token refresh on the next call by clearing the cached token.\n   */\n  reset: () => void;\n  /**\n   * Wraps a single API method so it injects (and, on failure, refreshes) the\n   * access token on every invocation while preserving the method's signature.\n   */\n  withAuth: <Arguments extends unknown[], Result>(\n    method: AsyncMethod<Arguments, Result>,\n    skipAuth?: boolean\n  ) => AsyncMethod<Arguments, Result>;\n  /**\n   * Instantiates a domain factory with the managed fetcher options and config,\n   * returning a section whose every method authenticates automatically.\n   *\n   * @example\n   * ```ts\n   * const dictionary = authManager.bindSection(getDictionaryAPI);\n   * await dictionary.pushDictionaries(dictionaries);\n   * ```\n   */\n  bindSection: <Section extends Record<string, unknown>>(\n    factory: SectionFactory<Section>,\n    options?: BindSectionOptions\n  ) => Section;\n};\n\n/**\n * Creates an instance-scoped {@link AuthManager} handling the OAuth2\n * `client_credentials` flow (or a pre-issued CLI session token).\n *\n * Unlike a global token cache, each manager keeps its own token state, so\n * independent SDK instances never interfere with one another.\n *\n * @param intlayerConfig - Intlayer configuration carrying the `editor`\n * credentials. Defaults to the build-time configuration.\n * @param options - Optional session token and base fetcher options.\n */\nexport const createAuthManager = (\n  intlayerConfig: Pick<IntlayerConfig, 'editor'> = { editor },\n  options: AuthManagerOptions = {}\n): AuthManager => {\n  const { baseFetcherOptions = {}, sessionToken } = options;\n\n  // `editor` comes from the generated build-time configuration, which never\n  // carries `clientSecret` — it would be inlined into client bundles. The\n  // secret is supplied server-side by `@intlayer/config/secrets`, which\n  // resolves to an inert stub in the browser; `hasCredentials` then stays false\n  // there and the OAuth2 exchange never runs.\n  //\n  // Only consulted when the configuration declares a `clientId`, so a project\n  // that comments its credentials out stays uncredentialed even with the\n  // environment variables still defined.\n  const resolvedConfig = defu(intlayerConfig ?? {}, {\n    editor: {\n      ...editor,\n      clientSecret: editor?.clientId ? getEditorClientSecret() : undefined,\n    },\n  }) as IntlayerConfig;\n\n  // `credentials: 'omit'` prevents the browser from attaching session cookies;\n  // authentication is handled exclusively through the injected Bearer token.\n  // This is required because the backend only allows credentialed requests for\n  // whitelisted first-party origins.\n  const fetcherOptions: FetcherOptions = {\n    ...baseFetcherOptions,\n    credentials: 'omit',\n  };\n\n  const hasCredentials =\n    Boolean(sessionToken) ||\n    Boolean(\n      resolvedConfig?.editor?.clientId && resolvedConfig?.editor?.clientSecret\n    );\n\n  // A session token is used as-is and never expires within the SDK's concern,\n  // so inject it once up-front and skip the OAuth2 exchange.\n  if (sessionToken) {\n    fetcherOptions.headers = {\n      ...(fetcherOptions.headers ?? {}),\n      Authorization: `Bearer ${sessionToken}`,\n    } as HeadersInit;\n  }\n\n  let accessToken: string | undefined;\n  let expiryTimestamp: number | undefined;\n  let pendingRefresh: Promise<void> | undefined;\n\n  const needsRefresh = (): boolean => {\n    if (!accessToken) return true;\n    if (!expiryTimestamp) return false; // Unknown expiry: assume usable until failure.\n\n    // Refresh one minute before the actual expiry to avoid edge-of-expiry races.\n    return Date.now() + ONE_MINUTE_MS >= expiryTimestamp;\n  };\n\n  const refreshToken = async (): Promise<void> => {\n    const doRefresh = async (): Promise<void> => {\n      const oAuthAPI = getOAuthAPI({}, resolvedConfig);\n      const response = await oAuthAPI.getOAuth2AccessToken();\n      const tokenData = response?.data as OAuthTokenLike | undefined;\n\n      accessToken = tokenData?.accessToken;\n      expiryTimestamp = getExpiryTimestamp(tokenData);\n    };\n\n    // De-duplicate concurrent refreshes so a burst of calls triggers one fetch.\n    pendingRefresh ??= doRefresh().finally(() => {\n      pendingRefresh = undefined;\n    });\n\n    await pendingRefresh;\n  };\n\n  const applyAuthHeader = (): void => {\n    if (!accessToken) return;\n    fetcherOptions.headers = {\n      ...(fetcherOptions.headers ?? {}),\n      Authorization: `Bearer ${accessToken}`,\n    } as HeadersInit;\n  };\n\n  const ensureAuth = async (): Promise<void> => {\n    if (sessionToken) return; // Already injected; nothing to refresh.\n    if (needsRefresh()) {\n      await refreshToken();\n    }\n    applyAuthHeader();\n  };\n\n  const reset = (): void => {\n    accessToken = undefined;\n    expiryTimestamp = undefined;\n  };\n\n  const withAuth = <Arguments extends unknown[], Result>(\n    method: AsyncMethod<Arguments, Result>,\n    skipAuth = !hasCredentials\n  ): AsyncMethod<Arguments, Result> => {\n    // In a browser the project credentials are structurally unavailable, so an\n    // authenticated call would silently go out unauthenticated and come back\n    // 401. Fail with an actionable message instead: a browser must authenticate\n    // as the signed-in *user* (a session token, or the session cookie on a\n    // first-party origin), never as the project.\n    if (skipAuth && !sessionToken && isBrowser()) {\n      return async () => {\n        throw new Error(\n          'Intlayer CMS credentials are not available in the browser. ' +\n            '`clientSecret` is a server-side credential and is never bundled. ' +\n            'Call this from a server route, or pass a user session token: ' +\n            'createIntlayerCMS(config, { sessionToken }).'\n        );\n      };\n    }\n\n    if (skipAuth) return method;\n\n    return async (...args: Arguments): Promise<Result> => {\n      await ensureAuth();\n\n      try {\n        return await method(...args);\n      } catch (error) {\n        // The token may have been revoked or expired early: refresh once and\n        // retry before surfacing the error. A session token cannot be\n        // refreshed, so re-throw immediately in that case.\n        if (sessionToken) throw error;\n\n        await refreshToken();\n        applyAuthHeader();\n        return await method(...args);\n      }\n    };\n  };\n\n  const bindSection = <Section extends Record<string, unknown>>(\n    factory: SectionFactory<Section>,\n    bindOptions: BindSectionOptions = {}\n  ): Section => {\n    const section = factory(fetcherOptions, resolvedConfig);\n    const skipAuth = bindOptions.skipAuth ?? !hasCredentials;\n\n    return new Proxy(section, {\n      get(target, property, receiver) {\n        const value = Reflect.get(target, property, receiver);\n\n        if (typeof value !== 'function') return value;\n\n        return withAuth(\n          (value as AsyncMethod<unknown[], unknown>).bind(target),\n          skipAuth\n        );\n      },\n    });\n  };\n\n  return {\n    fetcherOptions,\n    intlayerConfig: resolvedConfig,\n    hasCredentials,\n    ensureAuth,\n    reset,\n    withAuth,\n    bindSection,\n  };\n};\n"],"mappings":";;;;;;;AAoCA,MAAM,gBAAgB;;AAGtB,MAAM,kBAA2B,OAAO,WAAW;;;;;AAMnD,MAAM,sBACJ,UACuB;CACvB,IAAI,CAAC,OAAO,OAAO;CAEnB,MAAM,WAAY,MAAM,wBAAwB,MAAM;CAKtD,IAAI,UAAU;EACZ,MAAM,YACJ,OAAO,aAAa,WAChB,KAAK,MAAM,QAAQ,IACnB,SAAS,UAAU;EACzB,IAAI,OAAO,cAAc,YAAY,OAAO,SAAS,SAAS,GAC5D,OAAO;CAEX;CAEA,MAAM,UAAU,MAAM,cAAc,MAAM;CAC1C,IAAI,OAAO,YAAY,YAAY,OAAO,SAAS,OAAO,GACxD,OAAO,KAAK,IAAI,IAAI,UAAU;AAIlC;;;;;;;;;;;;AAgGA,MAAa,qBACX,iBAAiD,EAAE,sCAAO,GAC1D,UAA8B,CAAC,MACf;CAChB,MAAM,EAAE,qBAAqB,CAAC,GAAG,iBAAiB;CAWlD,MAAM,qBAAiB,WAAK,kBAAkB,CAAC,GAAG,EAChD,QAAQ;EACN,GAAGA;EACH,cAAcA,+BAAQ,eAAWC,gDAAsB,IAAI;CAC7D,EACF,CAAC;CAMD,MAAM,iBAAiC;EACrC,GAAG;EACH,aAAa;CACf;CAEA,MAAM,iBACJ,QAAQ,YAAY,KACpB,QACE,gBAAgB,QAAQ,YAAY,gBAAgB,QAAQ,YAC9D;CAIF,IAAI,cACF,eAAe,UAAU;EACvB,GAAI,eAAe,WAAW,CAAC;EAC/B,eAAe,UAAU;CAC3B;CAGF,IAAI;CACJ,IAAI;CACJ,IAAI;CAEJ,MAAM,qBAA8B;EAClC,IAAI,CAAC,aAAa,OAAO;EACzB,IAAI,CAAC,iBAAiB,OAAO;EAG7B,OAAO,KAAK,IAAI,IAAI,iBAAiB;CACvC;CAEA,MAAM,eAAe,YAA2B;EAC9C,MAAM,YAAY,YAA2B;GAG3C,MAAM,aAAY,MAFDC,yCAAY,CAAC,GAAG,cACH,CAAC,CAAC,qBAAqB,EAC3B,EAAE;GAE5B,cAAc,WAAW;GACzB,kBAAkB,mBAAmB,SAAS;EAChD;EAGA,mBAAmB,UAAU,CAAC,CAAC,cAAc;GAC3C,iBAAiB;EACnB,CAAC;EAED,MAAM;CACR;CAEA,MAAM,wBAA8B;EAClC,IAAI,CAAC,aAAa;EAClB,eAAe,UAAU;GACvB,GAAI,eAAe,WAAW,CAAC;GAC/B,eAAe,UAAU;EAC3B;CACF;CAEA,MAAM,aAAa,YAA2B;EAC5C,IAAI,cAAc;EAClB,IAAI,aAAa,GACf,MAAM,aAAa;EAErB,gBAAgB;CAClB;CAEA,MAAM,cAAoB;EACxB,cAAc;EACd,kBAAkB;CACpB;CAEA,MAAM,YACJ,QACA,WAAW,CAAC,mBACuB;EAMnC,IAAI,YAAY,CAAC,gBAAgB,UAAU,GACzC,OAAO,YAAY;GACjB,MAAM,IAAI,MACR,uOAIF;EACF;EAGF,IAAI,UAAU,OAAO;EAErB,OAAO,OAAO,GAAG,SAAqC;GACpD,MAAM,WAAW;GAEjB,IAAI;IACF,OAAO,MAAM,OAAO,GAAG,IAAI;GAC7B,SAAS,OAAO;IAId,IAAI,cAAc,MAAM;IAExB,MAAM,aAAa;IACnB,gBAAgB;IAChB,OAAO,MAAM,OAAO,GAAG,IAAI;GAC7B;EACF;CACF;CAEA,MAAM,eACJ,SACA,cAAkC,CAAC,MACvB;EACZ,MAAM,UAAU,QAAQ,gBAAgB,cAAc;EACtD,MAAM,WAAW,YAAY,YAAY,CAAC;EAE1C,OAAO,IAAI,MAAM,SAAS,EACxB,IAAI,QAAQ,UAAU,UAAU;GAC9B,MAAM,QAAQ,QAAQ,IAAI,QAAQ,UAAU,QAAQ;GAEpD,IAAI,OAAO,UAAU,YAAY,OAAO;GAExC,OAAO,SACJ,MAA0C,KAAK,MAAM,GACtD,QACF;EACF,EACF,CAAC;CACH;CAEA,OAAO;EACL;EACA,gBAAgB;EAChB;EACA;EACA;EACA;EACA;CACF;AACF"}
+{"version":3,"file":"createAuthManager.cjs","names":["editor","getEditorClientSecret","getOAuthAPI"],"sources":["../../../src/cms/createAuthManager.ts"],"sourcesContent":["import { editor } from '@intlayer/config/built';\nimport { getEditorClientSecret } from '@intlayer/config/secrets';\nimport type { IntlayerConfig } from '@intlayer/types/config';\nimport { defu } from 'defu';\nimport type { FetcherOptions } from '../fetcher';\nimport { getOAuthAPI } from '../getIntlayerAPI/oAuth';\n\n/**\n * Shape of the various OAuth2 token payloads the backend may return. Only the\n * fields used to derive the expiration timestamp are described here.\n */\ntype OAuthTokenLike = {\n  accessToken?: string;\n  accessTokenExpiresAt?: string | Date;\n  expires_in?: number;\n  expiresIn?: number;\n  expiresAt?: string | Date;\n};\n\n/**\n * Any asynchronous API method exposed by a domain section\n * (e.g. `getDictionaries`, `pushDictionaries`).\n */\ntype AsyncMethod<Arguments extends unknown[], Result> = (\n  ...args: Arguments\n) => Promise<Result>;\n\n/**\n * A domain section factory: builds a plain object of async methods from shared\n * fetcher options and the Intlayer configuration.\n */\ntype SectionFactory<Section extends Record<string, unknown>> = (\n  fetcherOptions: FetcherOptions,\n  intlayerConfig: IntlayerConfig\n) => Section;\n\nconst ONE_MINUTE_MS = 60_000;\n\n/**\n * OAuth2 token state for one set of credentials, shared by every manager\n * built with them.\n */\ntype AccessTokenState = {\n  accessToken?: string;\n  expiryTimestamp?: number;\n  pendingRefresh?: Promise<void>;\n};\n\n/**\n * Process-wide token states, keyed by backend URL and credentials. Build\n * steps and watch rebuilds each create their own manager; sharing the state\n * lets them reuse one token instead of awaiting a new exchange every time.\n */\nconst accessTokenStates = new Map<string, AccessTokenState>();\n\n/** Clears every cached access token, forcing the next call to re-authenticate. */\nexport const clearAccessTokenCache = (): void => {\n  accessTokenStates.clear();\n};\n\n/** Returns the shared token state for the given credentials, creating it if missing. */\nconst getAccessTokenState = (\n  editorConfig: IntlayerConfig['editor'] | undefined\n): AccessTokenState => {\n  const stateKey = [\n    editorConfig?.backendURL,\n    editorConfig?.clientId,\n    editorConfig?.clientSecret,\n  ].join('\\0');\n\n  let accessTokenState = accessTokenStates.get(stateKey);\n\n  if (!accessTokenState) {\n    accessTokenState = {};\n    accessTokenStates.set(stateKey, accessTokenState);\n  }\n\n  return accessTokenState;\n};\n\n/** HTTP statuses meaning the access token was rejected. */\nconst AUTHENTICATION_ERROR_STATUSES = new Set([401, 403]);\n\n/**\n * Whether a failed call may succeed with a fresh token: an auth rejection, or\n * an error without HTTP status. A `404` or `500` would fail again regardless.\n */\nconst isAuthenticationError = (error: unknown): boolean => {\n  const status = (error as { status?: unknown } | undefined)?.status;\n\n  return (\n    typeof status !== 'number' || AUTHENTICATION_ERROR_STATUSES.has(status)\n  );\n};\n\n/** Whether the current runtime is a browser rather than a server. */\nconst isBrowser = (): boolean => typeof window !== 'undefined';\n\n/**\n * Resolves the expiration timestamp (in ms since epoch) from an OAuth2\n * token-like payload, supporting both absolute dates and relative durations.\n */\nconst getExpiryTimestamp = (\n  token: OAuthTokenLike | undefined\n): number | undefined => {\n  if (!token) return undefined;\n\n  const dateLike = (token.accessTokenExpiresAt ?? token.expiresAt) as\n    | string\n    | Date\n    | undefined;\n\n  if (dateLike) {\n    const timestamp =\n      typeof dateLike === 'string'\n        ? Date.parse(dateLike)\n        : dateLike.getTime?.();\n    if (typeof timestamp === 'number' && Number.isFinite(timestamp)) {\n      return timestamp;\n    }\n  }\n\n  const seconds = token.expires_in ?? token.expiresIn;\n  if (typeof seconds === 'number' && Number.isFinite(seconds)) {\n    return Date.now() + seconds * 1000;\n  }\n\n  return undefined;\n};\n\n/**\n * Options accepted when creating an {@link AuthManager}.\n */\nexport type AuthManagerOptions = {\n  /**\n   * Base fetcher options merged into every request (e.g. custom headers).\n   */\n  baseFetcherOptions?: FetcherOptions;\n  /**\n   * A pre-issued CLI session token (prefixed with `clisession_`). When provided,\n   * it is used directly as the Bearer token and the OAuth2 `client_credentials`\n   * exchange is skipped entirely.\n   */\n  sessionToken?: string;\n};\n\n/**\n * Options accepted when binding a domain section to an {@link AuthManager}.\n */\nexport type BindSectionOptions = {\n  /**\n   * Forces auth injection on (`false`) or off (`true`). Defaults to enabled\n   * whenever credentials are available.\n   */\n  skipAuth?: boolean;\n};\n\n/**\n * Manages CMS authentication for a set of API calls.\n *\n * The manager owns a single mutable {@link FetcherOptions} object\n * (`fetcherOptions`). Domain factories bound through it share the same\n * reference, so refreshing the token in place transparently authenticates every\n * call — without rebuilding the API clients.\n */\nexport type AuthManager = {\n  /**\n   * Mutable fetcher options carrying the `Authorization` header. Bound sections\n   * share this reference so the injected token is reused everywhere.\n   */\n  fetcherOptions: FetcherOptions;\n  /**\n   * The resolved Intlayer configuration (merged with the build-time defaults).\n   */\n  intlayerConfig: IntlayerConfig;\n  /**\n   * `true` when credentials are available — either a session token or a\n   * `clientId`/`clientSecret` pair in the configuration.\n   */\n  hasCredentials: boolean;\n  /**\n   * Ensures a valid access token is available and applies it to\n   * `fetcherOptions`. Called automatically by {@link withAuth}.\n   */\n  ensureAuth: () => Promise<void>;\n  /**\n   * Forces a token refresh on the next call by clearing the cached token.\n   */\n  reset: () => void;\n  /**\n   * Wraps a single API method so it injects (and, on failure, refreshes) the\n   * access token on every invocation while preserving the method's signature.\n   */\n  withAuth: <Arguments extends unknown[], Result>(\n    method: AsyncMethod<Arguments, Result>,\n    skipAuth?: boolean\n  ) => AsyncMethod<Arguments, Result>;\n  /**\n   * Instantiates a domain factory with the managed fetcher options and config,\n   * returning a section whose every method authenticates automatically.\n   *\n   * @example\n   * ```ts\n   * const dictionary = authManager.bindSection(getDictionaryAPI);\n   * await dictionary.pushDictionaries(dictionaries);\n   * ```\n   */\n  bindSection: <Section extends Record<string, unknown>>(\n    factory: SectionFactory<Section>,\n    options?: BindSectionOptions\n  ) => Section;\n};\n\n/**\n * Creates an instance-scoped {@link AuthManager} handling the OAuth2\n * `client_credentials` flow (or a pre-issued CLI session token).\n *\n * Managers built with the same backend URL and credentials share one token\n * state, so a process never exchanges credentials more than needed.\n *\n * @param intlayerConfig - Intlayer configuration carrying the `editor`\n * credentials. Defaults to the build-time configuration.\n * @param options - Optional session token and base fetcher options.\n */\nexport const createAuthManager = (\n  intlayerConfig: Pick<IntlayerConfig, 'editor'> = { editor },\n  options: AuthManagerOptions = {}\n): AuthManager => {\n  const { baseFetcherOptions = {}, sessionToken } = options;\n\n  // `editor` comes from the generated build-time configuration, which never\n  // carries `clientSecret` — it would be inlined into client bundles. The\n  // secret is supplied server-side by `@intlayer/config/secrets`, which\n  // resolves to an inert stub in the browser; `hasCredentials` then stays false\n  // there and the OAuth2 exchange never runs.\n  //\n  // Only consulted when the configuration declares a `clientId`, so a project\n  // that comments its credentials out stays uncredentialed even with the\n  // environment variables still defined.\n  const resolvedConfig = defu(intlayerConfig ?? {}, {\n    editor: {\n      ...editor,\n      clientSecret: editor?.clientId ? getEditorClientSecret() : undefined,\n    },\n  }) as IntlayerConfig;\n\n  // `credentials: 'omit'` prevents the browser from attaching session cookies;\n  // authentication is handled exclusively through the injected Bearer token.\n  // This is required because the backend only allows credentialed requests for\n  // whitelisted first-party origins.\n  const fetcherOptions: FetcherOptions = {\n    ...baseFetcherOptions,\n    credentials: 'omit',\n  };\n\n  const hasCredentials =\n    Boolean(sessionToken) ||\n    Boolean(\n      resolvedConfig?.editor?.clientId && resolvedConfig?.editor?.clientSecret\n    );\n\n  // A session token is used as-is and never expires within the SDK's concern,\n  // so inject it once up-front and skip the OAuth2 exchange.\n  if (sessionToken) {\n    fetcherOptions.headers = {\n      ...(fetcherOptions.headers ?? {}),\n      Authorization: `Bearer ${sessionToken}`,\n    } as HeadersInit;\n  }\n\n  const accessTokenState = getAccessTokenState(resolvedConfig?.editor);\n\n  const needsRefresh = (): boolean => {\n    const { accessToken, expiryTimestamp } = accessTokenState;\n\n    if (!accessToken) return true;\n    if (!expiryTimestamp) return false; // Unknown expiry: assume usable until failure.\n\n    // Refresh one minute before the actual expiry to avoid edge-of-expiry races.\n    return Date.now() + ONE_MINUTE_MS >= expiryTimestamp;\n  };\n\n  const refreshToken = async (): Promise<void> => {\n    const doRefresh = async (): Promise<void> => {\n      const oAuthAPI = getOAuthAPI({}, resolvedConfig);\n      const response = await oAuthAPI.getOAuth2AccessToken();\n      const tokenData = response?.data as OAuthTokenLike | undefined;\n\n      accessTokenState.accessToken = tokenData?.accessToken;\n      accessTokenState.expiryTimestamp = getExpiryTimestamp(tokenData);\n    };\n\n    // De-duplicate concurrent refreshes so a burst of calls triggers one fetch.\n    accessTokenState.pendingRefresh ??= doRefresh().finally(() => {\n      accessTokenState.pendingRefresh = undefined;\n    });\n\n    await accessTokenState.pendingRefresh;\n  };\n\n  const applyAuthHeader = (): void => {\n    if (!accessTokenState.accessToken) return;\n    fetcherOptions.headers = {\n      ...(fetcherOptions.headers ?? {}),\n      Authorization: `Bearer ${accessTokenState.accessToken}`,\n    } as HeadersInit;\n  };\n\n  const ensureAuth = async (): Promise<void> => {\n    if (sessionToken) return; // Already injected; nothing to refresh.\n    if (needsRefresh()) {\n      await refreshToken();\n    }\n    applyAuthHeader();\n  };\n\n  const reset = (): void => {\n    accessTokenState.accessToken = undefined;\n    accessTokenState.expiryTimestamp = undefined;\n  };\n\n  const withAuth = <Arguments extends unknown[], Result>(\n    method: AsyncMethod<Arguments, Result>,\n    skipAuth = !hasCredentials\n  ): AsyncMethod<Arguments, Result> => {\n    // In a browser the project credentials are structurally unavailable, so an\n    // authenticated call would silently go out unauthenticated and come back\n    // 401. Fail with an actionable message instead: a browser must authenticate\n    // as the signed-in *user* (a session token, or the session cookie on a\n    // first-party origin), never as the project.\n    if (skipAuth && !sessionToken && isBrowser()) {\n      return async () => {\n        throw new Error(\n          'Intlayer CMS credentials are not available in the browser. ' +\n            '`clientSecret` is a server-side credential and is never bundled. ' +\n            'Call this from a server route, or pass a user session token: ' +\n            'createIntlayerCMS(config, { sessionToken }).'\n        );\n      };\n    }\n\n    if (skipAuth) return method;\n\n    return async (...args: Arguments): Promise<Result> => {\n      await ensureAuth();\n\n      try {\n        return await method(...args);\n      } catch (error) {\n        // The token may have been revoked or expired early: refresh once and\n        // retry before surfacing the error. A session token cannot be\n        // refreshed, so re-throw immediately in that case.\n        if (sessionToken || !isAuthenticationError(error)) throw error;\n\n        await refreshToken();\n        applyAuthHeader();\n        return await method(...args);\n      }\n    };\n  };\n\n  const bindSection = <Section extends Record<string, unknown>>(\n    factory: SectionFactory<Section>,\n    bindOptions: BindSectionOptions = {}\n  ): Section => {\n    const section = factory(fetcherOptions, resolvedConfig);\n    const skipAuth = bindOptions.skipAuth ?? !hasCredentials;\n\n    return new Proxy(section, {\n      get(target, property, receiver) {\n        const value = Reflect.get(target, property, receiver);\n\n        if (typeof value !== 'function') return value;\n\n        return withAuth(\n          (value as AsyncMethod<unknown[], unknown>).bind(target),\n          skipAuth\n        );\n      },\n    });\n  };\n\n  return {\n    fetcherOptions,\n    intlayerConfig: resolvedConfig,\n    hasCredentials,\n    ensureAuth,\n    reset,\n    withAuth,\n    bindSection,\n  };\n};\n"],"mappings":";;;;;;;AAoCA,MAAM,gBAAgB;;;;;;AAiBtB,MAAM,oCAAoB,IAAI,IAA8B;;AAG5D,MAAa,8BAAoC;CAC/C,kBAAkB,MAAM;AAC1B;;AAGA,MAAM,uBACJ,iBACqB;CACrB,MAAM,WAAW;EACf,cAAc;EACd,cAAc;EACd,cAAc;CAChB,CAAC,CAAC,KAAK,IAAI;CAEX,IAAI,mBAAmB,kBAAkB,IAAI,QAAQ;CAErD,IAAI,CAAC,kBAAkB;EACrB,mBAAmB,CAAC;EACpB,kBAAkB,IAAI,UAAU,gBAAgB;CAClD;CAEA,OAAO;AACT;;AAGA,MAAM,gDAAgC,IAAI,IAAI,CAAC,KAAK,GAAG,CAAC;;;;;AAMxD,MAAM,yBAAyB,UAA4B;CACzD,MAAM,SAAU,OAA4C;CAE5D,OACE,OAAO,WAAW,YAAY,8BAA8B,IAAI,MAAM;AAE1E;;AAGA,MAAM,kBAA2B,OAAO,WAAW;;;;;AAMnD,MAAM,sBACJ,UACuB;CACvB,IAAI,CAAC,OAAO,OAAO;CAEnB,MAAM,WAAY,MAAM,wBAAwB,MAAM;CAKtD,IAAI,UAAU;EACZ,MAAM,YACJ,OAAO,aAAa,WAChB,KAAK,MAAM,QAAQ,IACnB,SAAS,UAAU;EACzB,IAAI,OAAO,cAAc,YAAY,OAAO,SAAS,SAAS,GAC5D,OAAO;CAEX;CAEA,MAAM,UAAU,MAAM,cAAc,MAAM;CAC1C,IAAI,OAAO,YAAY,YAAY,OAAO,SAAS,OAAO,GACxD,OAAO,KAAK,IAAI,IAAI,UAAU;AAIlC;;;;;;;;;;;;AAgGA,MAAa,qBACX,iBAAiD,EAAE,sCAAO,GAC1D,UAA8B,CAAC,MACf;CAChB,MAAM,EAAE,qBAAqB,CAAC,GAAG,iBAAiB;CAWlD,MAAM,qBAAiB,WAAK,kBAAkB,CAAC,GAAG,EAChD,QAAQ;EACN,GAAGA;EACH,cAAcA,+BAAQ,eAAWC,gDAAsB,IAAI;CAC7D,EACF,CAAC;CAMD,MAAM,iBAAiC;EACrC,GAAG;EACH,aAAa;CACf;CAEA,MAAM,iBACJ,QAAQ,YAAY,KACpB,QACE,gBAAgB,QAAQ,YAAY,gBAAgB,QAAQ,YAC9D;CAIF,IAAI,cACF,eAAe,UAAU;EACvB,GAAI,eAAe,WAAW,CAAC;EAC/B,eAAe,UAAU;CAC3B;CAGF,MAAM,mBAAmB,oBAAoB,gBAAgB,MAAM;CAEnE,MAAM,qBAA8B;EAClC,MAAM,EAAE,aAAa,oBAAoB;EAEzC,IAAI,CAAC,aAAa,OAAO;EACzB,IAAI,CAAC,iBAAiB,OAAO;EAG7B,OAAO,KAAK,IAAI,IAAI,iBAAiB;CACvC;CAEA,MAAM,eAAe,YAA2B;EAC9C,MAAM,YAAY,YAA2B;GAG3C,MAAM,aAAY,MAFDC,yCAAY,CAAC,GAAG,cACH,CAAC,CAAC,qBAAqB,EAC3B,EAAE;GAE5B,iBAAiB,cAAc,WAAW;GAC1C,iBAAiB,kBAAkB,mBAAmB,SAAS;EACjE;EAGA,iBAAiB,mBAAmB,UAAU,CAAC,CAAC,cAAc;GAC5D,iBAAiB,iBAAiB;EACpC,CAAC;EAED,MAAM,iBAAiB;CACzB;CAEA,MAAM,wBAA8B;EAClC,IAAI,CAAC,iBAAiB,aAAa;EACnC,eAAe,UAAU;GACvB,GAAI,eAAe,WAAW,CAAC;GAC/B,eAAe,UAAU,iBAAiB;EAC5C;CACF;CAEA,MAAM,aAAa,YAA2B;EAC5C,IAAI,cAAc;EAClB,IAAI,aAAa,GACf,MAAM,aAAa;EAErB,gBAAgB;CAClB;CAEA,MAAM,cAAoB;EACxB,iBAAiB,cAAc;EAC/B,iBAAiB,kBAAkB;CACrC;CAEA,MAAM,YACJ,QACA,WAAW,CAAC,mBACuB;EAMnC,IAAI,YAAY,CAAC,gBAAgB,UAAU,GACzC,OAAO,YAAY;GACjB,MAAM,IAAI,MACR,uOAIF;EACF;EAGF,IAAI,UAAU,OAAO;EAErB,OAAO,OAAO,GAAG,SAAqC;GACpD,MAAM,WAAW;GAEjB,IAAI;IACF,OAAO,MAAM,OAAO,GAAG,IAAI;GAC7B,SAAS,OAAO;IAId,IAAI,gBAAgB,CAAC,sBAAsB,KAAK,GAAG,MAAM;IAEzD,MAAM,aAAa;IACnB,gBAAgB;IAChB,OAAO,MAAM,OAAO,GAAG,IAAI;GAC7B;EACF;CACF;CAEA,MAAM,eACJ,SACA,cAAkC,CAAC,MACvB;EACZ,MAAM,UAAU,QAAQ,gBAAgB,cAAc;EACtD,MAAM,WAAW,YAAY,YAAY,CAAC;EAE1C,OAAO,IAAI,MAAM,SAAS,EACxB,IAAI,QAAQ,UAAU,UAAU;GAC9B,MAAM,QAAQ,QAAQ,IAAI,QAAQ,UAAU,QAAQ;GAEpD,IAAI,OAAO,UAAU,YAAY,OAAO;GAExC,OAAO,SACJ,MAA0C,KAAK,MAAM,GACtD,QACF;EACF,EACF,CAAC;CACH;CAEA,OAAO;EACL;EACA,gBAAgB;EAChB;EACA;EACA;EACA;EACA;CACF;AACF"}

package/dist/cjs/cms/index.cjs

@@ -2,6 +2,7 @@ Object.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });
 const require_cms_createAuthManager = require('./createAuthManager.cjs');
 const require_cms_createIntlayerCMS = require('./createIntlayerCMS.cjs');
 
+exports.clearAccessTokenCache = require_cms_createAuthManager.clearAccessTokenCache;
 exports.createAuthManager = require_cms_createAuthManager.createAuthManager;
 exports.createEndpoint = require_cms_createIntlayerCMS.createEndpoint;
 exports.createIntlayerCMS = require_cms_createIntlayerCMS.createIntlayerCMS;

package/dist/cjs/getIntlayerAPI/analytics.cjs

@@ -43,12 +43,22 @@ const getAnalyticsAPI = (authAPIOptions = {}, intlayerConfig) => {
 	* @returns The experiment result set.
 	*/
 	const getExperimentResults = async (experimentKey, otherOptions = {}) => await require_fetcher.fetcher(`${ANALYTICS_API_ROUTE}/experiments/${experimentKey}`, authAPIOptions, otherOptions, { method: "GET" });
+	/**
+	* Page metadata (title and meta description) for a given url.
+	* @param url - The page url to inspect.
+	* @returns Title and description of the page.
+	*/
+	const getPageMetadata = async (url, otherOptions = {}) => await require_fetcher.fetcher(`${ANALYTICS_API_ROUTE}/page-metadata`, authAPIOptions, otherOptions, {
+		method: "GET",
+		params: { url }
+	});
 	return {
 		sendEvents,
 		getOverview,
 		getAudience,
 		getContentStats,
-		getExperimentResults
+		getExperimentResults,
+		getPageMetadata
 	};
 };
 /**

package/dist/cjs/getIntlayerAPI/analytics.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"analytics.cjs","names":["editor","fetcher","createEndpoint"],"sources":["../../../src/getIntlayerAPI/analytics.ts"],"sourcesContent":["import type {\n  AudienceRange,\n  GetAnalyticsOverviewResult,\n  GetAudienceResult,\n  GetContentStatsResult,\n  GetExperimentResultsResult,\n  IngestAnalyticsBody,\n  IngestAnalyticsResult,\n} from '@intlayer/backend';\nimport { editor } from '@intlayer/config/built';\nimport type { IntlayerConfig } from '@intlayer/types/config';\nimport { createEndpoint } from '../cms/createIntlayerCMS';\nimport { type FetcherOptions, fetcher } from '../fetcher';\n\nexport const getAnalyticsAPI = (\n  authAPIOptions: FetcherOptions = {},\n  intlayerConfig?: IntlayerConfig\n) => {\n  const backendURL = intlayerConfig?.editor?.backendURL ?? editor.backendURL;\n\n  const ANALYTICS_API_ROUTE = `${backendURL}/api/analytics`;\n\n  /**\n   * Ingest a batch of analytics events. Public — attribution is by the\n   * project's `clientId` in the body.\n   * @param body - Session id, sdk version, and the collected events.\n   * @returns The number of accepted events.\n   */\n  const sendEvents = async (\n    body: IngestAnalyticsBody,\n    otherOptions: FetcherOptions = {}\n  ) =>\n    await fetcher<IngestAnalyticsResult>(\n      `${ANALYTICS_API_ROUTE}/events`,\n      authAPIOptions,\n      otherOptions,\n      {\n        method: 'POST',\n        body,\n      }\n    );\n\n  /**\n   * Page/locale totals for the authenticated project.\n   * @returns Views grouped by url and locale.\n   */\n  const getOverview = async (otherOptions: FetcherOptions = {}) =>\n    await fetcher<GetAnalyticsOverviewResult>(\n      `${ANALYTICS_API_ROUTE}/overview`,\n      authAPIOptions,\n      otherOptions,\n      { method: 'GET' }\n    );\n\n  /**\n   * Audience report: distinct visitors (today / 7d / window), page views, the\n   * evolution series, and locale + country breakdowns.\n   * @param range - Rolling window, either a named range (`1h`, `24h`, `7d`,\n   *   `30d`, `90d`, `6mo`, `1y`, `3y`) or a number of days (default 30).\n   * @returns The audience statistics.\n   */\n  const getAudience = async (\n    range: AudienceRange | number = 30,\n    otherOptions: FetcherOptions = {}\n  ) =>\n    await fetcher<GetAudienceResult>(\n      `${ANALYTICS_API_ROUTE}/audience`,\n      authAPIOptions,\n      otherOptions,\n      {\n        method: 'GET',\n        params: typeof range === 'number' ? { days: String(range) } : { range },\n      }\n    );\n\n  /**\n   * Per-content exposure totals — \"which content is actually shown\".\n   * @returns Exposures grouped by dictionary key, key path, and locale.\n   */\n  const getContentStats = async (otherOptions: FetcherOptions = {}) =>\n    await fetcher<GetContentStatsResult>(\n      `${ANALYTICS_API_ROUTE}/content-stats`,\n      authAPIOptions,\n      otherOptions,\n      { method: 'GET' }\n    );\n\n  /**\n   * A/B experiment results with per-variant conversion rates and significance.\n   * @param experimentKey - The experiment to evaluate.\n   * @returns The experiment result set.\n   */\n  const getExperimentResults = async (\n    experimentKey: string,\n    otherOptions: FetcherOptions = {}\n  ) =>\n    await fetcher<GetExperimentResultsResult>(\n      `${ANALYTICS_API_ROUTE}/experiments/${experimentKey}`,\n      authAPIOptions,\n      otherOptions,\n      { method: 'GET' }\n    );\n\n  return {\n    sendEvents,\n    getOverview,\n    getAudience,\n    getContentStats,\n    getExperimentResults,\n  };\n};\n\n/**\n * Authenticated `analytics` endpoint bound to an Intlayer CMS authenticator.\n *\n * Pass an authenticator created with `createIntlayerCMS`, or omit it to use\n * the build-time configuration (`@intlayer/config/built`).\n */\nexport const analyticsEndpoint = createEndpoint(getAnalyticsAPI);\n"],"mappings":";;;;;;AAcA,MAAa,mBACX,iBAAiC,CAAC,GAClC,mBACG;CAGH,MAAM,sBAAsB,GAFT,gBAAgB,QAAQ,cAAcA,8BAAO,WAEtB;;;;;;;CAQ1C,MAAM,aAAa,OACjB,MACA,eAA+B,CAAC,MAEhC,MAAMC,wBACJ,GAAG,oBAAoB,UACvB,gBACA,cACA;EACE,QAAQ;EACR;CACF,CACF;;;;;CAMF,MAAM,cAAc,OAAO,eAA+B,CAAC,MACzD,MAAMA,wBACJ,GAAG,oBAAoB,YACvB,gBACA,cACA,EAAE,QAAQ,MAAM,CAClB;;;;;;;;CASF,MAAM,cAAc,OAClB,QAAgC,IAChC,eAA+B,CAAC,MAEhC,MAAMA,wBACJ,GAAG,oBAAoB,YACvB,gBACA,cACA;EACE,QAAQ;EACR,QAAQ,OAAO,UAAU,WAAW,EAAE,MAAM,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM;CACxE,CACF;;;;;CAMF,MAAM,kBAAkB,OAAO,eAA+B,CAAC,MAC7D,MAAMA,wBACJ,GAAG,oBAAoB,iBACvB,gBACA,cACA,EAAE,QAAQ,MAAM,CAClB;;;;;;CAOF,MAAM,uBAAuB,OAC3B,eACA,eAA+B,CAAC,MAEhC,MAAMA,wBACJ,GAAG,oBAAoB,eAAe,iBACtC,gBACA,cACA,EAAE,QAAQ,MAAM,CAClB;CAEF,OAAO;EACL;EACA;EACA;EACA;EACA;CACF;AACF;;;;;;;AAQA,MAAa,oBAAoBC,6CAAe,eAAe"}
+{"version":3,"file":"analytics.cjs","names":["editor","fetcher","createEndpoint"],"sources":["../../../src/getIntlayerAPI/analytics.ts"],"sourcesContent":["import type {\n  AudienceRange,\n  GetAnalyticsOverviewResult,\n  GetAudienceResult,\n  GetContentStatsResult,\n  GetExperimentResultsResult,\n  GetPageMetadataResult,\n  IngestAnalyticsBody,\n  IngestAnalyticsResult,\n} from '@intlayer/backend';\nimport { editor } from '@intlayer/config/built';\nimport type { IntlayerConfig } from '@intlayer/types/config';\nimport { createEndpoint } from '../cms/createIntlayerCMS';\nimport { type FetcherOptions, fetcher } from '../fetcher';\n\nexport const getAnalyticsAPI = (\n  authAPIOptions: FetcherOptions = {},\n  intlayerConfig?: IntlayerConfig\n) => {\n  const backendURL = intlayerConfig?.editor?.backendURL ?? editor.backendURL;\n\n  const ANALYTICS_API_ROUTE = `${backendURL}/api/analytics`;\n\n  /**\n   * Ingest a batch of analytics events. Public — attribution is by the\n   * project's `clientId` in the body.\n   * @param body - Session id, sdk version, and the collected events.\n   * @returns The number of accepted events.\n   */\n  const sendEvents = async (\n    body: IngestAnalyticsBody,\n    otherOptions: FetcherOptions = {}\n  ) =>\n    await fetcher<IngestAnalyticsResult>(\n      `${ANALYTICS_API_ROUTE}/events`,\n      authAPIOptions,\n      otherOptions,\n      {\n        method: 'POST',\n        body,\n      }\n    );\n\n  /**\n   * Page/locale totals for the authenticated project.\n   * @returns Views grouped by url and locale.\n   */\n  const getOverview = async (otherOptions: FetcherOptions = {}) =>\n    await fetcher<GetAnalyticsOverviewResult>(\n      `${ANALYTICS_API_ROUTE}/overview`,\n      authAPIOptions,\n      otherOptions,\n      { method: 'GET' }\n    );\n\n  /**\n   * Audience report: distinct visitors (today / 7d / window), page views, the\n   * evolution series, and locale + country breakdowns.\n   * @param range - Rolling window, either a named range (`1h`, `24h`, `7d`,\n   *   `30d`, `90d`, `6mo`, `1y`, `3y`) or a number of days (default 30).\n   * @returns The audience statistics.\n   */\n  const getAudience = async (\n    range: AudienceRange | number = 30,\n    otherOptions: FetcherOptions = {}\n  ) =>\n    await fetcher<GetAudienceResult>(\n      `${ANALYTICS_API_ROUTE}/audience`,\n      authAPIOptions,\n      otherOptions,\n      {\n        method: 'GET',\n        params: typeof range === 'number' ? { days: String(range) } : { range },\n      }\n    );\n\n  /**\n   * Per-content exposure totals — \"which content is actually shown\".\n   * @returns Exposures grouped by dictionary key, key path, and locale.\n   */\n  const getContentStats = async (otherOptions: FetcherOptions = {}) =>\n    await fetcher<GetContentStatsResult>(\n      `${ANALYTICS_API_ROUTE}/content-stats`,\n      authAPIOptions,\n      otherOptions,\n      { method: 'GET' }\n    );\n\n  /**\n   * A/B experiment results with per-variant conversion rates and significance.\n   * @param experimentKey - The experiment to evaluate.\n   * @returns The experiment result set.\n   */\n  const getExperimentResults = async (\n    experimentKey: string,\n    otherOptions: FetcherOptions = {}\n  ) =>\n    await fetcher<GetExperimentResultsResult>(\n      `${ANALYTICS_API_ROUTE}/experiments/${experimentKey}`,\n      authAPIOptions,\n      otherOptions,\n      { method: 'GET' }\n    );\n\n  /**\n   * Page metadata (title and meta description) for a given url.\n   * @param url - The page url to inspect.\n   * @returns Title and description of the page.\n   */\n  const getPageMetadata = async (\n    url: string,\n    otherOptions: FetcherOptions = {}\n  ) =>\n    await fetcher<GetPageMetadataResult>(\n      `${ANALYTICS_API_ROUTE}/page-metadata`,\n      authAPIOptions,\n      otherOptions,\n      {\n        method: 'GET',\n        params: { url },\n      }\n    );\n\n  return {\n    sendEvents,\n    getOverview,\n    getAudience,\n    getContentStats,\n    getExperimentResults,\n    getPageMetadata,\n  };\n};\n\n/**\n * Authenticated `analytics` endpoint bound to an Intlayer CMS authenticator.\n *\n * Pass an authenticator created with `createIntlayerCMS`, or omit it to use\n * the build-time configuration (`@intlayer/config/built`).\n */\nexport const analyticsEndpoint = createEndpoint(getAnalyticsAPI);\n"],"mappings":";;;;;;AAeA,MAAa,mBACX,iBAAiC,CAAC,GAClC,mBACG;CAGH,MAAM,sBAAsB,GAFT,gBAAgB,QAAQ,cAAcA,8BAAO,WAEtB;;;;;;;CAQ1C,MAAM,aAAa,OACjB,MACA,eAA+B,CAAC,MAEhC,MAAMC,wBACJ,GAAG,oBAAoB,UACvB,gBACA,cACA;EACE,QAAQ;EACR;CACF,CACF;;;;;CAMF,MAAM,cAAc,OAAO,eAA+B,CAAC,MACzD,MAAMA,wBACJ,GAAG,oBAAoB,YACvB,gBACA,cACA,EAAE,QAAQ,MAAM,CAClB;;;;;;;;CASF,MAAM,cAAc,OAClB,QAAgC,IAChC,eAA+B,CAAC,MAEhC,MAAMA,wBACJ,GAAG,oBAAoB,YACvB,gBACA,cACA;EACE,QAAQ;EACR,QAAQ,OAAO,UAAU,WAAW,EAAE,MAAM,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM;CACxE,CACF;;;;;CAMF,MAAM,kBAAkB,OAAO,eAA+B,CAAC,MAC7D,MAAMA,wBACJ,GAAG,oBAAoB,iBACvB,gBACA,cACA,EAAE,QAAQ,MAAM,CAClB;;;;;;CAOF,MAAM,uBAAuB,OAC3B,eACA,eAA+B,CAAC,MAEhC,MAAMA,wBACJ,GAAG,oBAAoB,eAAe,iBACtC,gBACA,cACA,EAAE,QAAQ,MAAM,CAClB;;;;;;CAOF,MAAM,kBAAkB,OACtB,KACA,eAA+B,CAAC,MAEhC,MAAMA,wBACJ,GAAG,oBAAoB,iBACvB,gBACA,cACA;EACE,QAAQ;EACR,QAAQ,EAAE,IAAI;CAChB,CACF;CAEF,OAAO;EACL;EACA;EACA;EACA;EACA;EACA;CACF;AACF;;;;;;;AAQA,MAAa,oBAAoBC,6CAAe,eAAe"}

package/dist/cjs/getIntlayerAPI/audit.cjs

@@ -24,8 +24,9 @@ const getAuditAPI = (authAPIOptions = {}, intlayerConfig) => {
 	});
 	const scanUrl = async (body, otherOptions = {}) => {
 		if (!body?.url) return;
-		const { url, onMessage, onDone } = body;
+		const { url, refresh, onMessage, onDone } = body;
 		const params = new URLSearchParams({ url });
+		if (refresh) params.set("refresh", "true");
 		const endpoint = `${AUDIT_API_ROUTE}?${params.toString()}`;
 		const response = await fetch(endpoint, {
 			method: "GET",
@@ -82,7 +83,29 @@ const getAuditAPI = (authAPIOptions = {}, intlayerConfig) => {
 	const cancelRecursiveAudit = async (params, otherOptions = {}) => await require_fetcher.fetcher(`${AUDIT_API_ROUTE}/recursive/${params?.jobId}/cancel`, authAPIOptions, otherOptions, { method: "POST" });
 	const pauseRecursiveAudit = async (params, otherOptions = {}) => await require_fetcher.fetcher(`${AUDIT_API_ROUTE}/recursive/${params?.jobId}/pause`, authAPIOptions, otherOptions, { method: "POST" });
 	const resumeRecursiveAudit = async (params, otherOptions = {}) => await require_fetcher.fetcher(`${AUDIT_API_ROUTE}/recursive/${params?.jobId}/resume`, authAPIOptions, otherOptions, { method: "POST" });
+	/**
+	* Admin — number of scanned domains using each technology.
+	*/
+	const getTechnologyUsage = async (params, otherOptions = {}) => await require_fetcher.fetcher(`${AUDIT_API_ROUTE}/technologies`, authAPIOptions, otherOptions, {
+		method: "GET",
+		params
+	});
+	/**
+	* Admin — scanned hosts, most recently scanned first, filterable by
+	* technology.
+	*/
+	const getScannedHosts = async (params, otherOptions = {}) => await require_fetcher.fetcher(`${AUDIT_API_ROUTE}/hosts`, authAPIOptions, otherOptions, {
+		method: "GET",
+		params
+	});
+	/**
+	* Admin — a scanned host with its stored scans, newest first.
+	*/
+	const getScannedHost = async (params, otherOptions = {}) => await require_fetcher.fetcher(`${AUDIT_API_ROUTE}/hosts/${encodeURIComponent(params?.host ?? "")}`, authAPIOptions, otherOptions, { method: "GET" });
 	return {
+		getTechnologyUsage,
+		getScannedHosts,
+		getScannedHost,
 		discoverUrls,
 		scanUrl,
 		startRecursiveAudit,

package/dist/cjs/getIntlayerAPI/audit.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"audit.cjs","names":["editor","fetcher","createEndpoint"],"sources":["../../../src/getIntlayerAPI/audit.ts"],"sourcesContent":["import type {\n  AuditEvent,\n  GetRecursiveAuditStatusResult,\n  StartRecursiveAuditResult,\n} from '@intlayer/backend';\nimport { editor } from '@intlayer/config/built';\nimport type { IntlayerConfig } from '@intlayer/types/config';\nimport { createEndpoint } from '../cms/createIntlayerCMS';\nimport { type FetcherOptions, fetcher } from '../fetcher';\n\nexport type {\n  AuditEvent,\n  GetRecursiveAuditStatusResult,\n  StartRecursiveAuditResult,\n};\n\nexport type ScanUrlBody = {\n  url: string;\n  onMessage?: (event: AuditEvent) => void;\n  onDone?: () => void;\n};\n\nexport type DiscoverUrlsParams = {\n  url: string;\n};\n\nexport type DiscoverUrlsResult = {\n  urls: string[];\n};\n\nexport type StartRecursiveAuditBody = {\n  url: string;\n  urls?: string[];\n};\n\nexport type GetRecursiveAuditStatusParams = {\n  jobId: string;\n};\n\nexport type RecursiveAuditJobParams = {\n  jobId: string;\n};\n\nexport const getAuditAPI = (\n  authAPIOptions: FetcherOptions = {},\n  intlayerConfig?: IntlayerConfig\n) => {\n  const backendURL = intlayerConfig?.editor?.backendURL ?? editor.backendURL;\n\n  const AUDIT_API_ROUTE = `${backendURL}/api/scan`;\n\n  /**\n   * Streams a single-page SEO audit as Server-Sent Events.\n   *\n   * Usage:\n   * ```ts\n   * await audit.scanUrl({\n   *   url: 'https://example.com',\n   *   onMessage: (event) => console.log(event),\n   *   onDone: () => console.log('done'),\n   * });\n   * ```\n   */\n  const discoverUrls = async (\n    params?: DiscoverUrlsParams,\n    otherOptions: FetcherOptions = {}\n  ) =>\n    await fetcher<DiscoverUrlsResult>(\n      `${AUDIT_API_ROUTE}/recursive/discover`,\n      authAPIOptions,\n      otherOptions,\n      {\n        method: 'GET',\n        params,\n      }\n    );\n\n  const scanUrl = async (\n    body?: ScanUrlBody,\n    otherOptions: FetcherOptions = {}\n  ) => {\n    if (!body?.url) return;\n\n    const { url, onMessage, onDone } = body;\n\n    const params = new URLSearchParams({ url });\n    const endpoint = `${AUDIT_API_ROUTE}?${params.toString()}`;\n\n    const response = await fetch(endpoint, {\n      method: 'GET',\n      headers: {\n        Accept: 'text/event-stream',\n        ...authAPIOptions.headers,\n        ...otherOptions.headers,\n      },\n      credentials: 'include',\n      signal: otherOptions.signal,\n    });\n\n    if (!response.ok) {\n      let errorMessage = 'An error occurred';\n      try {\n        const errorData = await response.json();\n        errorMessage = JSON.stringify(errorData.error) ?? errorMessage;\n      } catch {\n        try {\n          const errorText = await response.text();\n          if (errorText) errorMessage = errorText;\n        } catch {\n          // ignore\n        }\n      }\n      throw new Error(errorMessage);\n    }\n\n    const reader = response.body?.getReader();\n    if (!reader) throw new Error('No reader available');\n\n    const decoder = new TextDecoder();\n    let buffer = '';\n\n    while (true) {\n      const { done, value } = await reader.read();\n\n      if (done) break;\n\n      buffer += decoder.decode(value, { stream: true });\n      const lines = buffer.split('\\n');\n      buffer = lines.pop() ?? '';\n\n      for (const line of lines) {\n        if (line.startsWith('data: ')) {\n          try {\n            const event = JSON.parse(line.slice(6)) as AuditEvent;\n            onMessage?.(event);\n          } catch {\n            // ignore malformed lines\n          }\n        }\n      }\n    }\n\n    onDone?.();\n  };\n\n  /**\n   * Starts a recursive audit job for the given URL.\n   */\n  const startRecursiveAudit = async (\n    body?: StartRecursiveAuditBody,\n    otherOptions: FetcherOptions = {}\n  ) =>\n    await fetcher<StartRecursiveAuditResult>(\n      `${AUDIT_API_ROUTE}/recursive/start`,\n      authAPIOptions,\n      otherOptions,\n      {\n        method: 'POST',\n        params: body?.url ? { url: body.url } : undefined,\n        body: body?.urls !== undefined ? { urls: body.urls as any } : undefined,\n      }\n    );\n\n  /**\n   * Gets the status of a recursive audit job.\n   */\n  const getRecursiveAuditStatus = async (\n    params?: GetRecursiveAuditStatusParams,\n    otherOptions: FetcherOptions = {}\n  ) =>\n    await fetcher<GetRecursiveAuditStatusResult>(\n      `${AUDIT_API_ROUTE}/recursive/${params?.jobId}`,\n      authAPIOptions,\n      otherOptions,\n      {\n        method: 'GET',\n      }\n    );\n\n  const cancelRecursiveAudit = async (\n    params?: RecursiveAuditJobParams,\n    otherOptions: FetcherOptions = {}\n  ) =>\n    await fetcher<{ success: boolean }>(\n      `${AUDIT_API_ROUTE}/recursive/${params?.jobId}/cancel`,\n      authAPIOptions,\n      otherOptions,\n      { method: 'POST' }\n    );\n\n  const pauseRecursiveAudit = async (\n    params?: RecursiveAuditJobParams,\n    otherOptions: FetcherOptions = {}\n  ) =>\n    await fetcher<{ success: boolean }>(\n      `${AUDIT_API_ROUTE}/recursive/${params?.jobId}/pause`,\n      authAPIOptions,\n      otherOptions,\n      { method: 'POST' }\n    );\n\n  const resumeRecursiveAudit = async (\n    params?: RecursiveAuditJobParams,\n    otherOptions: FetcherOptions = {}\n  ) =>\n    await fetcher<{ success: boolean }>(\n      `${AUDIT_API_ROUTE}/recursive/${params?.jobId}/resume`,\n      authAPIOptions,\n      otherOptions,\n      { method: 'POST' }\n    );\n\n  return {\n    discoverUrls,\n    scanUrl,\n    startRecursiveAudit,\n    getRecursiveAuditStatus,\n    cancelRecursiveAudit,\n    pauseRecursiveAudit,\n    resumeRecursiveAudit,\n  };\n};\n\n/**\n * Authenticated `audit` endpoint bound to an Intlayer CMS authenticator.\n *\n * Pass an authenticator created with `createIntlayerCMS`, or omit it to use\n * the build-time configuration (`@intlayer/config/built`).\n */\nexport const auditEndpoint = createEndpoint(getAuditAPI);\n"],"mappings":";;;;;;AA2CA,MAAa,eACX,iBAAiC,CAAC,GAClC,mBACG;CAGH,MAAM,kBAAkB,GAFL,gBAAgB,QAAQ,cAAcA,8BAAO,WAE1B;;;;;;;;;;;;;CActC,MAAM,eAAe,OACnB,QACA,eAA+B,CAAC,MAEhC,MAAMC,wBACJ,GAAG,gBAAgB,sBACnB,gBACA,cACA;EACE,QAAQ;EACR;CACF,CACF;CAEF,MAAM,UAAU,OACd,MACA,eAA+B,CAAC,MAC7B;EACH,IAAI,CAAC,MAAM,KAAK;EAEhB,MAAM,EAAE,KAAK,WAAW,WAAW;EAEnC,MAAM,SAAS,IAAI,gBAAgB,EAAE,IAAI,CAAC;EAC1C,MAAM,WAAW,GAAG,gBAAgB,GAAG,OAAO,SAAS;EAEvD,MAAM,WAAW,MAAM,MAAM,UAAU;GACrC,QAAQ;GACR,SAAS;IACP,QAAQ;IACR,GAAG,eAAe;IAClB,GAAG,aAAa;GAClB;GACA,aAAa;GACb,QAAQ,aAAa;EACvB,CAAC;EAED,IAAI,CAAC,SAAS,IAAI;GAChB,IAAI,eAAe;GACnB,IAAI;IACF,MAAM,YAAY,MAAM,SAAS,KAAK;IACtC,eAAe,KAAK,UAAU,UAAU,KAAK,KAAK;GACpD,QAAQ;IACN,IAAI;KACF,MAAM,YAAY,MAAM,SAAS,KAAK;KACtC,IAAI,WAAW,eAAe;IAChC,QAAQ,CAER;GACF;GACA,MAAM,IAAI,MAAM,YAAY;EAC9B;EAEA,MAAM,SAAS,SAAS,MAAM,UAAU;EACxC,IAAI,CAAC,QAAQ,MAAM,IAAI,MAAM,qBAAqB;EAElD,MAAM,UAAU,IAAI,YAAY;EAChC,IAAI,SAAS;EAEb,OAAO,MAAM;GACX,MAAM,EAAE,MAAM,UAAU,MAAM,OAAO,KAAK;GAE1C,IAAI,MAAM;GAEV,UAAU,QAAQ,OAAO,OAAO,EAAE,QAAQ,KAAK,CAAC;GAChD,MAAM,QAAQ,OAAO,MAAM,IAAI;GAC/B,SAAS,MAAM,IAAI,KAAK;GAExB,KAAK,MAAM,QAAQ,OACjB,IAAI,KAAK,WAAW,QAAQ,GAC1B,IAAI;IACF,MAAM,QAAQ,KAAK,MAAM,KAAK,MAAM,CAAC,CAAC;IACtC,YAAY,KAAK;GACnB,QAAQ,CAER;EAGN;EAEA,SAAS;CACX;;;;CAKA,MAAM,sBAAsB,OAC1B,MACA,eAA+B,CAAC,MAEhC,MAAMA,wBACJ,GAAG,gBAAgB,mBACnB,gBACA,cACA;EACE,QAAQ;EACR,QAAQ,MAAM,MAAM,EAAE,KAAK,KAAK,IAAI,IAAI;EACxC,MAAM,MAAM,SAAS,SAAY,EAAE,MAAM,KAAK,KAAY,IAAI;CAChE,CACF;;;;CAKF,MAAM,0BAA0B,OAC9B,QACA,eAA+B,CAAC,MAEhC,MAAMA,wBACJ,GAAG,gBAAgB,aAAa,QAAQ,SACxC,gBACA,cACA,EACE,QAAQ,MACV,CACF;CAEF,MAAM,uBAAuB,OAC3B,QACA,eAA+B,CAAC,MAEhC,MAAMA,wBACJ,GAAG,gBAAgB,aAAa,QAAQ,MAAM,UAC9C,gBACA,cACA,EAAE,QAAQ,OAAO,CACnB;CAEF,MAAM,sBAAsB,OAC1B,QACA,eAA+B,CAAC,MAEhC,MAAMA,wBACJ,GAAG,gBAAgB,aAAa,QAAQ,MAAM,SAC9C,gBACA,cACA,EAAE,QAAQ,OAAO,CACnB;CAEF,MAAM,uBAAuB,OAC3B,QACA,eAA+B,CAAC,MAEhC,MAAMA,wBACJ,GAAG,gBAAgB,aAAa,QAAQ,MAAM,UAC9C,gBACA,cACA,EAAE,QAAQ,OAAO,CACnB;CAEF,OAAO;EACL;EACA;EACA;EACA;EACA;EACA;EACA;CACF;AACF;;;;;;;AAQA,MAAa,gBAAgBC,6CAAe,WAAW"}
+{"version":3,"file":"audit.cjs","names":["editor","fetcher","createEndpoint"],"sources":["../../../src/getIntlayerAPI/audit.ts"],"sourcesContent":["import type {\n  AuditEvent,\n  GetRecursiveAuditStatusResult,\n  GetScannedHostParams,\n  GetScannedHostResult,\n  GetScannedHostsQuery,\n  GetScannedHostsResult,\n  GetTechnologyUsageQuery,\n  GetTechnologyUsageResult,\n  StartRecursiveAuditResult,\n} from '@intlayer/backend';\nimport { editor } from '@intlayer/config/built';\nimport type { IntlayerConfig } from '@intlayer/types/config';\nimport { createEndpoint } from '../cms/createIntlayerCMS';\nimport { type FetcherOptions, fetcher } from '../fetcher';\n\nexport type {\n  AuditEvent,\n  GetRecursiveAuditStatusResult,\n  GetScannedHostParams,\n  GetScannedHostResult,\n  GetScannedHostsQuery,\n  GetScannedHostsResult,\n  GetTechnologyUsageQuery,\n  GetTechnologyUsageResult,\n  StartRecursiveAuditResult,\n};\n\nexport type ScanUrlBody = {\n  url: string;\n  /**\n   * Force a new audit. Without it, a URL audited less than an hour ago is\n   * replayed from cache (its first event carries `cachedAt`).\n   */\n  refresh?: boolean;\n  onMessage?: (event: AuditEvent) => void;\n  onDone?: () => void;\n};\n\nexport type DiscoverUrlsParams = {\n  url: string;\n};\n\nexport type DiscoverUrlsResult = {\n  urls: string[];\n};\n\nexport type StartRecursiveAuditBody = {\n  url: string;\n  urls?: string[];\n};\n\nexport type GetRecursiveAuditStatusParams = {\n  jobId: string;\n};\n\nexport type RecursiveAuditJobParams = {\n  jobId: string;\n};\n\nexport const getAuditAPI = (\n  authAPIOptions: FetcherOptions = {},\n  intlayerConfig?: IntlayerConfig\n) => {\n  const backendURL = intlayerConfig?.editor?.backendURL ?? editor.backendURL;\n\n  const AUDIT_API_ROUTE = `${backendURL}/api/scan`;\n\n  /**\n   * Streams a single-page SEO audit as Server-Sent Events.\n   *\n   * Usage:\n   * ```ts\n   * await audit.scanUrl({\n   *   url: 'https://example.com',\n   *   onMessage: (event) => console.log(event),\n   *   onDone: () => console.log('done'),\n   * });\n   * ```\n   */\n  const discoverUrls = async (\n    params?: DiscoverUrlsParams,\n    otherOptions: FetcherOptions = {}\n  ) =>\n    await fetcher<DiscoverUrlsResult>(\n      `${AUDIT_API_ROUTE}/recursive/discover`,\n      authAPIOptions,\n      otherOptions,\n      {\n        method: 'GET',\n        params,\n      }\n    );\n\n  const scanUrl = async (\n    body?: ScanUrlBody,\n    otherOptions: FetcherOptions = {}\n  ) => {\n    if (!body?.url) return;\n\n    const { url, refresh, onMessage, onDone } = body;\n\n    const params = new URLSearchParams({ url });\n    if (refresh) params.set('refresh', 'true');\n    const endpoint = `${AUDIT_API_ROUTE}?${params.toString()}`;\n\n    const response = await fetch(endpoint, {\n      method: 'GET',\n      headers: {\n        Accept: 'text/event-stream',\n        ...authAPIOptions.headers,\n        ...otherOptions.headers,\n      },\n      credentials: 'include',\n      signal: otherOptions.signal,\n    });\n\n    if (!response.ok) {\n      let errorMessage = 'An error occurred';\n      try {\n        const errorData = await response.json();\n        errorMessage = JSON.stringify(errorData.error) ?? errorMessage;\n      } catch {\n        try {\n          const errorText = await response.text();\n          if (errorText) errorMessage = errorText;\n        } catch {\n          // ignore\n        }\n      }\n      throw new Error(errorMessage);\n    }\n\n    const reader = response.body?.getReader();\n    if (!reader) throw new Error('No reader available');\n\n    const decoder = new TextDecoder();\n    let buffer = '';\n\n    while (true) {\n      const { done, value } = await reader.read();\n\n      if (done) break;\n\n      buffer += decoder.decode(value, { stream: true });\n      const lines = buffer.split('\\n');\n      buffer = lines.pop() ?? '';\n\n      for (const line of lines) {\n        if (line.startsWith('data: ')) {\n          try {\n            const event = JSON.parse(line.slice(6)) as AuditEvent;\n            onMessage?.(event);\n          } catch {\n            // ignore malformed lines\n          }\n        }\n      }\n    }\n\n    onDone?.();\n  };\n\n  /**\n   * Starts a recursive audit job for the given URL.\n   */\n  const startRecursiveAudit = async (\n    body?: StartRecursiveAuditBody,\n    otherOptions: FetcherOptions = {}\n  ) =>\n    await fetcher<StartRecursiveAuditResult>(\n      `${AUDIT_API_ROUTE}/recursive/start`,\n      authAPIOptions,\n      otherOptions,\n      {\n        method: 'POST',\n        params: body?.url ? { url: body.url } : undefined,\n        body: body?.urls !== undefined ? { urls: body.urls as any } : undefined,\n      }\n    );\n\n  /**\n   * Gets the status of a recursive audit job.\n   */\n  const getRecursiveAuditStatus = async (\n    params?: GetRecursiveAuditStatusParams,\n    otherOptions: FetcherOptions = {}\n  ) =>\n    await fetcher<GetRecursiveAuditStatusResult>(\n      `${AUDIT_API_ROUTE}/recursive/${params?.jobId}`,\n      authAPIOptions,\n      otherOptions,\n      {\n        method: 'GET',\n      }\n    );\n\n  const cancelRecursiveAudit = async (\n    params?: RecursiveAuditJobParams,\n    otherOptions: FetcherOptions = {}\n  ) =>\n    await fetcher<{ success: boolean }>(\n      `${AUDIT_API_ROUTE}/recursive/${params?.jobId}/cancel`,\n      authAPIOptions,\n      otherOptions,\n      { method: 'POST' }\n    );\n\n  const pauseRecursiveAudit = async (\n    params?: RecursiveAuditJobParams,\n    otherOptions: FetcherOptions = {}\n  ) =>\n    await fetcher<{ success: boolean }>(\n      `${AUDIT_API_ROUTE}/recursive/${params?.jobId}/pause`,\n      authAPIOptions,\n      otherOptions,\n      { method: 'POST' }\n    );\n\n  const resumeRecursiveAudit = async (\n    params?: RecursiveAuditJobParams,\n    otherOptions: FetcherOptions = {}\n  ) =>\n    await fetcher<{ success: boolean }>(\n      `${AUDIT_API_ROUTE}/recursive/${params?.jobId}/resume`,\n      authAPIOptions,\n      otherOptions,\n      { method: 'POST' }\n    );\n\n  /**\n   * Admin — number of scanned domains using each technology.\n   */\n  const getTechnologyUsage = async (\n    params?: GetTechnologyUsageQuery,\n    otherOptions: FetcherOptions = {}\n  ) =>\n    await fetcher<GetTechnologyUsageResult>(\n      `${AUDIT_API_ROUTE}/technologies`,\n      authAPIOptions,\n      otherOptions,\n      { method: 'GET', params }\n    );\n\n  /**\n   * Admin — scanned hosts, most recently scanned first, filterable by\n   * technology.\n   */\n  const getScannedHosts = async (\n    params?: GetScannedHostsQuery,\n    otherOptions: FetcherOptions = {}\n  ) =>\n    await fetcher<GetScannedHostsResult>(\n      `${AUDIT_API_ROUTE}/hosts`,\n      authAPIOptions,\n      otherOptions,\n      { method: 'GET', params }\n    );\n\n  /**\n   * Admin — a scanned host with its stored scans, newest first.\n   */\n  const getScannedHost = async (\n    params?: GetScannedHostParams,\n    otherOptions: FetcherOptions = {}\n  ) =>\n    await fetcher<GetScannedHostResult>(\n      `${AUDIT_API_ROUTE}/hosts/${encodeURIComponent(params?.host ?? '')}`,\n      authAPIOptions,\n      otherOptions,\n      { method: 'GET' }\n    );\n\n  return {\n    getTechnologyUsage,\n    getScannedHosts,\n    getScannedHost,\n    discoverUrls,\n    scanUrl,\n    startRecursiveAudit,\n    getRecursiveAuditStatus,\n    cancelRecursiveAudit,\n    pauseRecursiveAudit,\n    resumeRecursiveAudit,\n  };\n};\n\n/**\n * Authenticated `audit` endpoint bound to an Intlayer CMS authenticator.\n *\n * Pass an authenticator created with `createIntlayerCMS`, or omit it to use\n * the build-time configuration (`@intlayer/config/built`).\n */\nexport const auditEndpoint = createEndpoint(getAuditAPI);\n"],"mappings":";;;;;;AA4DA,MAAa,eACX,iBAAiC,CAAC,GAClC,mBACG;CAGH,MAAM,kBAAkB,GAFL,gBAAgB,QAAQ,cAAcA,8BAAO,WAE1B;;;;;;;;;;;;;CActC,MAAM,eAAe,OACnB,QACA,eAA+B,CAAC,MAEhC,MAAMC,wBACJ,GAAG,gBAAgB,sBACnB,gBACA,cACA;EACE,QAAQ;EACR;CACF,CACF;CAEF,MAAM,UAAU,OACd,MACA,eAA+B,CAAC,MAC7B;EACH,IAAI,CAAC,MAAM,KAAK;EAEhB,MAAM,EAAE,KAAK,SAAS,WAAW,WAAW;EAE5C,MAAM,SAAS,IAAI,gBAAgB,EAAE,IAAI,CAAC;EAC1C,IAAI,SAAS,OAAO,IAAI,WAAW,MAAM;EACzC,MAAM,WAAW,GAAG,gBAAgB,GAAG,OAAO,SAAS;EAEvD,MAAM,WAAW,MAAM,MAAM,UAAU;GACrC,QAAQ;GACR,SAAS;IACP,QAAQ;IACR,GAAG,eAAe;IAClB,GAAG,aAAa;GAClB;GACA,aAAa;GACb,QAAQ,aAAa;EACvB,CAAC;EAED,IAAI,CAAC,SAAS,IAAI;GAChB,IAAI,eAAe;GACnB,IAAI;IACF,MAAM,YAAY,MAAM,SAAS,KAAK;IACtC,eAAe,KAAK,UAAU,UAAU,KAAK,KAAK;GACpD,QAAQ;IACN,IAAI;KACF,MAAM,YAAY,MAAM,SAAS,KAAK;KACtC,IAAI,WAAW,eAAe;IAChC,QAAQ,CAER;GACF;GACA,MAAM,IAAI,MAAM,YAAY;EAC9B;EAEA,MAAM,SAAS,SAAS,MAAM,UAAU;EACxC,IAAI,CAAC,QAAQ,MAAM,IAAI,MAAM,qBAAqB;EAElD,MAAM,UAAU,IAAI,YAAY;EAChC,IAAI,SAAS;EAEb,OAAO,MAAM;GACX,MAAM,EAAE,MAAM,UAAU,MAAM,OAAO,KAAK;GAE1C,IAAI,MAAM;GAEV,UAAU,QAAQ,OAAO,OAAO,EAAE,QAAQ,KAAK,CAAC;GAChD,MAAM,QAAQ,OAAO,MAAM,IAAI;GAC/B,SAAS,MAAM,IAAI,KAAK;GAExB,KAAK,MAAM,QAAQ,OACjB,IAAI,KAAK,WAAW,QAAQ,GAC1B,IAAI;IACF,MAAM,QAAQ,KAAK,MAAM,KAAK,MAAM,CAAC,CAAC;IACtC,YAAY,KAAK;GACnB,QAAQ,CAER;EAGN;EAEA,SAAS;CACX;;;;CAKA,MAAM,sBAAsB,OAC1B,MACA,eAA+B,CAAC,MAEhC,MAAMA,wBACJ,GAAG,gBAAgB,mBACnB,gBACA,cACA;EACE,QAAQ;EACR,QAAQ,MAAM,MAAM,EAAE,KAAK,KAAK,IAAI,IAAI;EACxC,MAAM,MAAM,SAAS,SAAY,EAAE,MAAM,KAAK,KAAY,IAAI;CAChE,CACF;;;;CAKF,MAAM,0BAA0B,OAC9B,QACA,eAA+B,CAAC,MAEhC,MAAMA,wBACJ,GAAG,gBAAgB,aAAa,QAAQ,SACxC,gBACA,cACA,EACE,QAAQ,MACV,CACF;CAEF,MAAM,uBAAuB,OAC3B,QACA,eAA+B,CAAC,MAEhC,MAAMA,wBACJ,GAAG,gBAAgB,aAAa,QAAQ,MAAM,UAC9C,gBACA,cACA,EAAE,QAAQ,OAAO,CACnB;CAEF,MAAM,sBAAsB,OAC1B,QACA,eAA+B,CAAC,MAEhC,MAAMA,wBACJ,GAAG,gBAAgB,aAAa,QAAQ,MAAM,SAC9C,gBACA,cACA,EAAE,QAAQ,OAAO,CACnB;CAEF,MAAM,uBAAuB,OAC3B,QACA,eAA+B,CAAC,MAEhC,MAAMA,wBACJ,GAAG,gBAAgB,aAAa,QAAQ,MAAM,UAC9C,gBACA,cACA,EAAE,QAAQ,OAAO,CACnB;;;;CAKF,MAAM,qBAAqB,OACzB,QACA,eAA+B,CAAC,MAEhC,MAAMA,wBACJ,GAAG,gBAAgB,gBACnB,gBACA,cACA;EAAE,QAAQ;EAAO;CAAO,CAC1B;;;;;CAMF,MAAM,kBAAkB,OACtB,QACA,eAA+B,CAAC,MAEhC,MAAMA,wBACJ,GAAG,gBAAgB,SACnB,gBACA,cACA;EAAE,QAAQ;EAAO;CAAO,CAC1B;;;;CAKF,MAAM,iBAAiB,OACrB,QACA,eAA+B,CAAC,MAEhC,MAAMA,wBACJ,GAAG,gBAAgB,SAAS,mBAAmB,QAAQ,QAAQ,EAAE,KACjE,gBACA,cACA,EAAE,QAAQ,MAAM,CAClB;CAEF,OAAO;EACL;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;CACF;AACF;;;;;;;AAQA,MAAa,gBAAgBC,6CAAe,WAAW"}

package/dist/cjs/index.cjs

@@ -37,6 +37,7 @@ exports.analyticsEndpoint = require_getIntlayerAPI_analytics.analyticsEndpoint;
 exports.assetEndpoint = require_getIntlayerAPI_asset.assetEndpoint;
 exports.auditEndpoint = require_getIntlayerAPI_audit.auditEndpoint;
 exports.bitbucketEndpoint = require_getIntlayerAPI_bitbucket.bitbucketEndpoint;
+exports.clearAccessTokenCache = require_cms_createAuthManager.clearAccessTokenCache;
 exports.createAuthManager = require_cms_createAuthManager.createAuthManager;
 exports.createEndpoint = require_cms_createIntlayerCMS.createEndpoint;
 exports.createIntlayerCMS = require_cms_createIntlayerCMS.createIntlayerCMS;

package/dist/esm/cms/createAuthManager.mjs

@@ -5,6 +5,40 @@ import { defu } from "defu";
 
 //#region src/cms/createAuthManager.ts
 const ONE_MINUTE_MS = 6e4;
+/**
+* Process-wide token states, keyed by backend URL and credentials. Build
+* steps and watch rebuilds each create their own manager; sharing the state
+* lets them reuse one token instead of awaiting a new exchange every time.
+*/
+const accessTokenStates = /* @__PURE__ */ new Map();
+/** Clears every cached access token, forcing the next call to re-authenticate. */
+const clearAccessTokenCache = () => {
+	accessTokenStates.clear();
+};
+/** Returns the shared token state for the given credentials, creating it if missing. */
+const getAccessTokenState = (editorConfig) => {
+	const stateKey = [
+		editorConfig?.backendURL,
+		editorConfig?.clientId,
+		editorConfig?.clientSecret
+	].join("\0");
+	let accessTokenState = accessTokenStates.get(stateKey);
+	if (!accessTokenState) {
+		accessTokenState = {};
+		accessTokenStates.set(stateKey, accessTokenState);
+	}
+	return accessTokenState;
+};
+/** HTTP statuses meaning the access token was rejected. */
+const AUTHENTICATION_ERROR_STATUSES = /* @__PURE__ */ new Set([401, 403]);
+/**
+* Whether a failed call may succeed with a fresh token: an auth rejection, or
+* an error without HTTP status. A `404` or `500` would fail again regardless.
+*/
+const isAuthenticationError = (error) => {
+	const status = error?.status;
+	return typeof status !== "number" || AUTHENTICATION_ERROR_STATUSES.has(status);
+};
 /** Whether the current runtime is a browser rather than a server. */
 const isBrowser = () => typeof window !== "undefined";
 /**
@@ -25,8 +59,8 @@ const getExpiryTimestamp = (token) => {
 * Creates an instance-scoped {@link AuthManager} handling the OAuth2
 * `client_credentials` flow (or a pre-issued CLI session token).
 *
-* Unlike a global token cache, each manager keeps its own token state, so
-* independent SDK instances never interfere with one another.
+* Managers built with the same backend URL and credentials share one token
+* state, so a process never exchanges credentials more than needed.
 *
 * @param intlayerConfig - Intlayer configuration carrying the `editor`
 * credentials. Defaults to the build-time configuration.
@@ -47,10 +81,9 @@ const createAuthManager = (intlayerConfig = { editor }, options = {}) => {
 		...fetcherOptions.headers ?? {},
 		Authorization: `Bearer ${sessionToken}`
 	};
-	let accessToken;
-	let expiryTimestamp;
-	let pendingRefresh;
+	const accessTokenState = getAccessTokenState(resolvedConfig?.editor);
 	const needsRefresh = () => {
+		const { accessToken, expiryTimestamp } = accessTokenState;
 		if (!accessToken) return true;
 		if (!expiryTimestamp) return false;
 		return Date.now() + ONE_MINUTE_MS >= expiryTimestamp;
@@ -58,19 +91,19 @@ const createAuthManager = (intlayerConfig = { editor }, options = {}) => {
 	const refreshToken = async () => {
 		const doRefresh = async () => {
 			const tokenData = (await getOAuthAPI({}, resolvedConfig).getOAuth2AccessToken())?.data;
-			accessToken = tokenData?.accessToken;
-			expiryTimestamp = getExpiryTimestamp(tokenData);
+			accessTokenState.accessToken = tokenData?.accessToken;
+			accessTokenState.expiryTimestamp = getExpiryTimestamp(tokenData);
 		};
-		pendingRefresh ??= doRefresh().finally(() => {
-			pendingRefresh = void 0;
+		accessTokenState.pendingRefresh ??= doRefresh().finally(() => {
+			accessTokenState.pendingRefresh = void 0;
 		});
-		await pendingRefresh;
+		await accessTokenState.pendingRefresh;
 	};
 	const applyAuthHeader = () => {
-		if (!accessToken) return;
+		if (!accessTokenState.accessToken) return;
 		fetcherOptions.headers = {
 			...fetcherOptions.headers ?? {},
-			Authorization: `Bearer ${accessToken}`
+			Authorization: `Bearer ${accessTokenState.accessToken}`
 		};
 	};
 	const ensureAuth = async () => {
@@ -79,8 +112,8 @@ const createAuthManager = (intlayerConfig = { editor }, options = {}) => {
 		applyAuthHeader();
 	};
 	const reset = () => {
-		accessToken = void 0;
-		expiryTimestamp = void 0;
+		accessTokenState.accessToken = void 0;
+		accessTokenState.expiryTimestamp = void 0;
 	};
 	const withAuth = (method, skipAuth = !hasCredentials) => {
 		if (skipAuth && !sessionToken && isBrowser()) return async () => {
@@ -92,7 +125,7 @@ const createAuthManager = (intlayerConfig = { editor }, options = {}) => {
 			try {
 				return await method(...args);
 			} catch (error) {
-				if (sessionToken) throw error;
+				if (sessionToken || !isAuthenticationError(error)) throw error;
 				await refreshToken();
 				applyAuthHeader();
 				return await method(...args);
@@ -120,5 +153,5 @@ const createAuthManager = (intlayerConfig = { editor }, options = {}) => {
 };
 
 //#endregion
-export { createAuthManager };
+export { clearAccessTokenCache, createAuthManager };
 //# sourceMappingURL=createAuthManager.mjs.map

package/dist/esm/cms/createAuthManager.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"createAuthManager.mjs","names":[],"sources":["../../../src/cms/createAuthManager.ts"],"sourcesContent":["import { editor } from '@intlayer/config/built';\nimport { getEditorClientSecret } from '@intlayer/config/secrets';\nimport type { IntlayerConfig } from '@intlayer/types/config';\nimport { defu } from 'defu';\nimport type { FetcherOptions } from '../fetcher';\nimport { getOAuthAPI } from '../getIntlayerAPI/oAuth';\n\n/**\n * Shape of the various OAuth2 token payloads the backend may return. Only the\n * fields used to derive the expiration timestamp are described here.\n */\ntype OAuthTokenLike = {\n  accessToken?: string;\n  accessTokenExpiresAt?: string | Date;\n  expires_in?: number;\n  expiresIn?: number;\n  expiresAt?: string | Date;\n};\n\n/**\n * Any asynchronous API method exposed by a domain section\n * (e.g. `getDictionaries`, `pushDictionaries`).\n */\ntype AsyncMethod<Arguments extends unknown[], Result> = (\n  ...args: Arguments\n) => Promise<Result>;\n\n/**\n * A domain section factory: builds a plain object of async methods from shared\n * fetcher options and the Intlayer configuration.\n */\ntype SectionFactory<Section extends Record<string, unknown>> = (\n  fetcherOptions: FetcherOptions,\n  intlayerConfig: IntlayerConfig\n) => Section;\n\nconst ONE_MINUTE_MS = 60_000;\n\n/** Whether the current runtime is a browser rather than a server. */\nconst isBrowser = (): boolean => typeof window !== 'undefined';\n\n/**\n * Resolves the expiration timestamp (in ms since epoch) from an OAuth2\n * token-like payload, supporting both absolute dates and relative durations.\n */\nconst getExpiryTimestamp = (\n  token: OAuthTokenLike | undefined\n): number | undefined => {\n  if (!token) return undefined;\n\n  const dateLike = (token.accessTokenExpiresAt ?? token.expiresAt) as\n    | string\n    | Date\n    | undefined;\n\n  if (dateLike) {\n    const timestamp =\n      typeof dateLike === 'string'\n        ? Date.parse(dateLike)\n        : dateLike.getTime?.();\n    if (typeof timestamp === 'number' && Number.isFinite(timestamp)) {\n      return timestamp;\n    }\n  }\n\n  const seconds = token.expires_in ?? token.expiresIn;\n  if (typeof seconds === 'number' && Number.isFinite(seconds)) {\n    return Date.now() + seconds * 1000;\n  }\n\n  return undefined;\n};\n\n/**\n * Options accepted when creating an {@link AuthManager}.\n */\nexport type AuthManagerOptions = {\n  /**\n   * Base fetcher options merged into every request (e.g. custom headers).\n   */\n  baseFetcherOptions?: FetcherOptions;\n  /**\n   * A pre-issued CLI session token (prefixed with `clisession_`). When provided,\n   * it is used directly as the Bearer token and the OAuth2 `client_credentials`\n   * exchange is skipped entirely.\n   */\n  sessionToken?: string;\n};\n\n/**\n * Options accepted when binding a domain section to an {@link AuthManager}.\n */\nexport type BindSectionOptions = {\n  /**\n   * Forces auth injection on (`false`) or off (`true`). Defaults to enabled\n   * whenever credentials are available.\n   */\n  skipAuth?: boolean;\n};\n\n/**\n * Manages CMS authentication for a set of API calls.\n *\n * The manager owns a single mutable {@link FetcherOptions} object\n * (`fetcherOptions`). Domain factories bound through it share the same\n * reference, so refreshing the token in place transparently authenticates every\n * call — without rebuilding the API clients.\n */\nexport type AuthManager = {\n  /**\n   * Mutable fetcher options carrying the `Authorization` header. Bound sections\n   * share this reference so the injected token is reused everywhere.\n   */\n  fetcherOptions: FetcherOptions;\n  /**\n   * The resolved Intlayer configuration (merged with the build-time defaults).\n   */\n  intlayerConfig: IntlayerConfig;\n  /**\n   * `true` when credentials are available — either a session token or a\n   * `clientId`/`clientSecret` pair in the configuration.\n   */\n  hasCredentials: boolean;\n  /**\n   * Ensures a valid access token is available and applies it to\n   * `fetcherOptions`. Called automatically by {@link withAuth}.\n   */\n  ensureAuth: () => Promise<void>;\n  /**\n   * Forces a token refresh on the next call by clearing the cached token.\n   */\n  reset: () => void;\n  /**\n   * Wraps a single API method so it injects (and, on failure, refreshes) the\n   * access token on every invocation while preserving the method's signature.\n   */\n  withAuth: <Arguments extends unknown[], Result>(\n    method: AsyncMethod<Arguments, Result>,\n    skipAuth?: boolean\n  ) => AsyncMethod<Arguments, Result>;\n  /**\n   * Instantiates a domain factory with the managed fetcher options and config,\n   * returning a section whose every method authenticates automatically.\n   *\n   * @example\n   * ```ts\n   * const dictionary = authManager.bindSection(getDictionaryAPI);\n   * await dictionary.pushDictionaries(dictionaries);\n   * ```\n   */\n  bindSection: <Section extends Record<string, unknown>>(\n    factory: SectionFactory<Section>,\n    options?: BindSectionOptions\n  ) => Section;\n};\n\n/**\n * Creates an instance-scoped {@link AuthManager} handling the OAuth2\n * `client_credentials` flow (or a pre-issued CLI session token).\n *\n * Unlike a global token cache, each manager keeps its own token state, so\n * independent SDK instances never interfere with one another.\n *\n * @param intlayerConfig - Intlayer configuration carrying the `editor`\n * credentials. Defaults to the build-time configuration.\n * @param options - Optional session token and base fetcher options.\n */\nexport const createAuthManager = (\n  intlayerConfig: Pick<IntlayerConfig, 'editor'> = { editor },\n  options: AuthManagerOptions = {}\n): AuthManager => {\n  const { baseFetcherOptions = {}, sessionToken } = options;\n\n  // `editor` comes from the generated build-time configuration, which never\n  // carries `clientSecret` — it would be inlined into client bundles. The\n  // secret is supplied server-side by `@intlayer/config/secrets`, which\n  // resolves to an inert stub in the browser; `hasCredentials` then stays false\n  // there and the OAuth2 exchange never runs.\n  //\n  // Only consulted when the configuration declares a `clientId`, so a project\n  // that comments its credentials out stays uncredentialed even with the\n  // environment variables still defined.\n  const resolvedConfig = defu(intlayerConfig ?? {}, {\n    editor: {\n      ...editor,\n      clientSecret: editor?.clientId ? getEditorClientSecret() : undefined,\n    },\n  }) as IntlayerConfig;\n\n  // `credentials: 'omit'` prevents the browser from attaching session cookies;\n  // authentication is handled exclusively through the injected Bearer token.\n  // This is required because the backend only allows credentialed requests for\n  // whitelisted first-party origins.\n  const fetcherOptions: FetcherOptions = {\n    ...baseFetcherOptions,\n    credentials: 'omit',\n  };\n\n  const hasCredentials =\n    Boolean(sessionToken) ||\n    Boolean(\n      resolvedConfig?.editor?.clientId && resolvedConfig?.editor?.clientSecret\n    );\n\n  // A session token is used as-is and never expires within the SDK's concern,\n  // so inject it once up-front and skip the OAuth2 exchange.\n  if (sessionToken) {\n    fetcherOptions.headers = {\n      ...(fetcherOptions.headers ?? {}),\n      Authorization: `Bearer ${sessionToken}`,\n    } as HeadersInit;\n  }\n\n  let accessToken: string | undefined;\n  let expiryTimestamp: number | undefined;\n  let pendingRefresh: Promise<void> | undefined;\n\n  const needsRefresh = (): boolean => {\n    if (!accessToken) return true;\n    if (!expiryTimestamp) return false; // Unknown expiry: assume usable until failure.\n\n    // Refresh one minute before the actual expiry to avoid edge-of-expiry races.\n    return Date.now() + ONE_MINUTE_MS >= expiryTimestamp;\n  };\n\n  const refreshToken = async (): Promise<void> => {\n    const doRefresh = async (): Promise<void> => {\n      const oAuthAPI = getOAuthAPI({}, resolvedConfig);\n      const response = await oAuthAPI.getOAuth2AccessToken();\n      const tokenData = response?.data as OAuthTokenLike | undefined;\n\n      accessToken = tokenData?.accessToken;\n      expiryTimestamp = getExpiryTimestamp(tokenData);\n    };\n\n    // De-duplicate concurrent refreshes so a burst of calls triggers one fetch.\n    pendingRefresh ??= doRefresh().finally(() => {\n      pendingRefresh = undefined;\n    });\n\n    await pendingRefresh;\n  };\n\n  const applyAuthHeader = (): void => {\n    if (!accessToken) return;\n    fetcherOptions.headers = {\n      ...(fetcherOptions.headers ?? {}),\n      Authorization: `Bearer ${accessToken}`,\n    } as HeadersInit;\n  };\n\n  const ensureAuth = async (): Promise<void> => {\n    if (sessionToken) return; // Already injected; nothing to refresh.\n    if (needsRefresh()) {\n      await refreshToken();\n    }\n    applyAuthHeader();\n  };\n\n  const reset = (): void => {\n    accessToken = undefined;\n    expiryTimestamp = undefined;\n  };\n\n  const withAuth = <Arguments extends unknown[], Result>(\n    method: AsyncMethod<Arguments, Result>,\n    skipAuth = !hasCredentials\n  ): AsyncMethod<Arguments, Result> => {\n    // In a browser the project credentials are structurally unavailable, so an\n    // authenticated call would silently go out unauthenticated and come back\n    // 401. Fail with an actionable message instead: a browser must authenticate\n    // as the signed-in *user* (a session token, or the session cookie on a\n    // first-party origin), never as the project.\n    if (skipAuth && !sessionToken && isBrowser()) {\n      return async () => {\n        throw new Error(\n          'Intlayer CMS credentials are not available in the browser. ' +\n            '`clientSecret` is a server-side credential and is never bundled. ' +\n            'Call this from a server route, or pass a user session token: ' +\n            'createIntlayerCMS(config, { sessionToken }).'\n        );\n      };\n    }\n\n    if (skipAuth) return method;\n\n    return async (...args: Arguments): Promise<Result> => {\n      await ensureAuth();\n\n      try {\n        return await method(...args);\n      } catch (error) {\n        // The token may have been revoked or expired early: refresh once and\n        // retry before surfacing the error. A session token cannot be\n        // refreshed, so re-throw immediately in that case.\n        if (sessionToken) throw error;\n\n        await refreshToken();\n        applyAuthHeader();\n        return await method(...args);\n      }\n    };\n  };\n\n  const bindSection = <Section extends Record<string, unknown>>(\n    factory: SectionFactory<Section>,\n    bindOptions: BindSectionOptions = {}\n  ): Section => {\n    const section = factory(fetcherOptions, resolvedConfig);\n    const skipAuth = bindOptions.skipAuth ?? !hasCredentials;\n\n    return new Proxy(section, {\n      get(target, property, receiver) {\n        const value = Reflect.get(target, property, receiver);\n\n        if (typeof value !== 'function') return value;\n\n        return withAuth(\n          (value as AsyncMethod<unknown[], unknown>).bind(target),\n          skipAuth\n        );\n      },\n    });\n  };\n\n  return {\n    fetcherOptions,\n    intlayerConfig: resolvedConfig,\n    hasCredentials,\n    ensureAuth,\n    reset,\n    withAuth,\n    bindSection,\n  };\n};\n"],"mappings":";;;;;;AAoCA,MAAM,gBAAgB;;AAGtB,MAAM,kBAA2B,OAAO,WAAW;;;;;AAMnD,MAAM,sBACJ,UACuB;CACvB,IAAI,CAAC,OAAO,OAAO;CAEnB,MAAM,WAAY,MAAM,wBAAwB,MAAM;CAKtD,IAAI,UAAU;EACZ,MAAM,YACJ,OAAO,aAAa,WAChB,KAAK,MAAM,QAAQ,IACnB,SAAS,UAAU;EACzB,IAAI,OAAO,cAAc,YAAY,OAAO,SAAS,SAAS,GAC5D,OAAO;CAEX;CAEA,MAAM,UAAU,MAAM,cAAc,MAAM;CAC1C,IAAI,OAAO,YAAY,YAAY,OAAO,SAAS,OAAO,GACxD,OAAO,KAAK,IAAI,IAAI,UAAU;AAIlC;;;;;;;;;;;;AAgGA,MAAa,qBACX,iBAAiD,EAAE,OAAO,GAC1D,UAA8B,CAAC,MACf;CAChB,MAAM,EAAE,qBAAqB,CAAC,GAAG,iBAAiB;CAWlD,MAAM,iBAAiB,KAAK,kBAAkB,CAAC,GAAG,EAChD,QAAQ;EACN,GAAG;EACH,cAAc,QAAQ,WAAW,sBAAsB,IAAI;CAC7D,EACF,CAAC;CAMD,MAAM,iBAAiC;EACrC,GAAG;EACH,aAAa;CACf;CAEA,MAAM,iBACJ,QAAQ,YAAY,KACpB,QACE,gBAAgB,QAAQ,YAAY,gBAAgB,QAAQ,YAC9D;CAIF,IAAI,cACF,eAAe,UAAU;EACvB,GAAI,eAAe,WAAW,CAAC;EAC/B,eAAe,UAAU;CAC3B;CAGF,IAAI;CACJ,IAAI;CACJ,IAAI;CAEJ,MAAM,qBAA8B;EAClC,IAAI,CAAC,aAAa,OAAO;EACzB,IAAI,CAAC,iBAAiB,OAAO;EAG7B,OAAO,KAAK,IAAI,IAAI,iBAAiB;CACvC;CAEA,MAAM,eAAe,YAA2B;EAC9C,MAAM,YAAY,YAA2B;GAG3C,MAAM,aAAY,MAFD,YAAY,CAAC,GAAG,cACH,CAAC,CAAC,qBAAqB,EAC3B,EAAE;GAE5B,cAAc,WAAW;GACzB,kBAAkB,mBAAmB,SAAS;EAChD;EAGA,mBAAmB,UAAU,CAAC,CAAC,cAAc;GAC3C,iBAAiB;EACnB,CAAC;EAED,MAAM;CACR;CAEA,MAAM,wBAA8B;EAClC,IAAI,CAAC,aAAa;EAClB,eAAe,UAAU;GACvB,GAAI,eAAe,WAAW,CAAC;GAC/B,eAAe,UAAU;EAC3B;CACF;CAEA,MAAM,aAAa,YAA2B;EAC5C,IAAI,cAAc;EAClB,IAAI,aAAa,GACf,MAAM,aAAa;EAErB,gBAAgB;CAClB;CAEA,MAAM,cAAoB;EACxB,cAAc;EACd,kBAAkB;CACpB;CAEA,MAAM,YACJ,QACA,WAAW,CAAC,mBACuB;EAMnC,IAAI,YAAY,CAAC,gBAAgB,UAAU,GACzC,OAAO,YAAY;GACjB,MAAM,IAAI,MACR,uOAIF;EACF;EAGF,IAAI,UAAU,OAAO;EAErB,OAAO,OAAO,GAAG,SAAqC;GACpD,MAAM,WAAW;GAEjB,IAAI;IACF,OAAO,MAAM,OAAO,GAAG,IAAI;GAC7B,SAAS,OAAO;IAId,IAAI,cAAc,MAAM;IAExB,MAAM,aAAa;IACnB,gBAAgB;IAChB,OAAO,MAAM,OAAO,GAAG,IAAI;GAC7B;EACF;CACF;CAEA,MAAM,eACJ,SACA,cAAkC,CAAC,MACvB;EACZ,MAAM,UAAU,QAAQ,gBAAgB,cAAc;EACtD,MAAM,WAAW,YAAY,YAAY,CAAC;EAE1C,OAAO,IAAI,MAAM,SAAS,EACxB,IAAI,QAAQ,UAAU,UAAU;GAC9B,MAAM,QAAQ,QAAQ,IAAI,QAAQ,UAAU,QAAQ;GAEpD,IAAI,OAAO,UAAU,YAAY,OAAO;GAExC,OAAO,SACJ,MAA0C,KAAK,MAAM,GACtD,QACF;EACF,EACF,CAAC;CACH;CAEA,OAAO;EACL;EACA,gBAAgB;EAChB;EACA;EACA;EACA;EACA;CACF;AACF"}
+{"version":3,"file":"createAuthManager.mjs","names":[],"sources":["../../../src/cms/createAuthManager.ts"],"sourcesContent":["import { editor } from '@intlayer/config/built';\nimport { getEditorClientSecret } from '@intlayer/config/secrets';\nimport type { IntlayerConfig } from '@intlayer/types/config';\nimport { defu } from 'defu';\nimport type { FetcherOptions } from '../fetcher';\nimport { getOAuthAPI } from '../getIntlayerAPI/oAuth';\n\n/**\n * Shape of the various OAuth2 token payloads the backend may return. Only the\n * fields used to derive the expiration timestamp are described here.\n */\ntype OAuthTokenLike = {\n  accessToken?: string;\n  accessTokenExpiresAt?: string | Date;\n  expires_in?: number;\n  expiresIn?: number;\n  expiresAt?: string | Date;\n};\n\n/**\n * Any asynchronous API method exposed by a domain section\n * (e.g. `getDictionaries`, `pushDictionaries`).\n */\ntype AsyncMethod<Arguments extends unknown[], Result> = (\n  ...args: Arguments\n) => Promise<Result>;\n\n/**\n * A domain section factory: builds a plain object of async methods from shared\n * fetcher options and the Intlayer configuration.\n */\ntype SectionFactory<Section extends Record<string, unknown>> = (\n  fetcherOptions: FetcherOptions,\n  intlayerConfig: IntlayerConfig\n) => Section;\n\nconst ONE_MINUTE_MS = 60_000;\n\n/**\n * OAuth2 token state for one set of credentials, shared by every manager\n * built with them.\n */\ntype AccessTokenState = {\n  accessToken?: string;\n  expiryTimestamp?: number;\n  pendingRefresh?: Promise<void>;\n};\n\n/**\n * Process-wide token states, keyed by backend URL and credentials. Build\n * steps and watch rebuilds each create their own manager; sharing the state\n * lets them reuse one token instead of awaiting a new exchange every time.\n */\nconst accessTokenStates = new Map<string, AccessTokenState>();\n\n/** Clears every cached access token, forcing the next call to re-authenticate. */\nexport const clearAccessTokenCache = (): void => {\n  accessTokenStates.clear();\n};\n\n/** Returns the shared token state for the given credentials, creating it if missing. */\nconst getAccessTokenState = (\n  editorConfig: IntlayerConfig['editor'] | undefined\n): AccessTokenState => {\n  const stateKey = [\n    editorConfig?.backendURL,\n    editorConfig?.clientId,\n    editorConfig?.clientSecret,\n  ].join('\\0');\n\n  let accessTokenState = accessTokenStates.get(stateKey);\n\n  if (!accessTokenState) {\n    accessTokenState = {};\n    accessTokenStates.set(stateKey, accessTokenState);\n  }\n\n  return accessTokenState;\n};\n\n/** HTTP statuses meaning the access token was rejected. */\nconst AUTHENTICATION_ERROR_STATUSES = new Set([401, 403]);\n\n/**\n * Whether a failed call may succeed with a fresh token: an auth rejection, or\n * an error without HTTP status. A `404` or `500` would fail again regardless.\n */\nconst isAuthenticationError = (error: unknown): boolean => {\n  const status = (error as { status?: unknown } | undefined)?.status;\n\n  return (\n    typeof status !== 'number' || AUTHENTICATION_ERROR_STATUSES.has(status)\n  );\n};\n\n/** Whether the current runtime is a browser rather than a server. */\nconst isBrowser = (): boolean => typeof window !== 'undefined';\n\n/**\n * Resolves the expiration timestamp (in ms since epoch) from an OAuth2\n * token-like payload, supporting both absolute dates and relative durations.\n */\nconst getExpiryTimestamp = (\n  token: OAuthTokenLike | undefined\n): number | undefined => {\n  if (!token) return undefined;\n\n  const dateLike = (token.accessTokenExpiresAt ?? token.expiresAt) as\n    | string\n    | Date\n    | undefined;\n\n  if (dateLike) {\n    const timestamp =\n      typeof dateLike === 'string'\n        ? Date.parse(dateLike)\n        : dateLike.getTime?.();\n    if (typeof timestamp === 'number' && Number.isFinite(timestamp)) {\n      return timestamp;\n    }\n  }\n\n  const seconds = token.expires_in ?? token.expiresIn;\n  if (typeof seconds === 'number' && Number.isFinite(seconds)) {\n    return Date.now() + seconds * 1000;\n  }\n\n  return undefined;\n};\n\n/**\n * Options accepted when creating an {@link AuthManager}.\n */\nexport type AuthManagerOptions = {\n  /**\n   * Base fetcher options merged into every request (e.g. custom headers).\n   */\n  baseFetcherOptions?: FetcherOptions;\n  /**\n   * A pre-issued CLI session token (prefixed with `clisession_`). When provided,\n   * it is used directly as the Bearer token and the OAuth2 `client_credentials`\n   * exchange is skipped entirely.\n   */\n  sessionToken?: string;\n};\n\n/**\n * Options accepted when binding a domain section to an {@link AuthManager}.\n */\nexport type BindSectionOptions = {\n  /**\n   * Forces auth injection on (`false`) or off (`true`). Defaults to enabled\n   * whenever credentials are available.\n   */\n  skipAuth?: boolean;\n};\n\n/**\n * Manages CMS authentication for a set of API calls.\n *\n * The manager owns a single mutable {@link FetcherOptions} object\n * (`fetcherOptions`). Domain factories bound through it share the same\n * reference, so refreshing the token in place transparently authenticates every\n * call — without rebuilding the API clients.\n */\nexport type AuthManager = {\n  /**\n   * Mutable fetcher options carrying the `Authorization` header. Bound sections\n   * share this reference so the injected token is reused everywhere.\n   */\n  fetcherOptions: FetcherOptions;\n  /**\n   * The resolved Intlayer configuration (merged with the build-time defaults).\n   */\n  intlayerConfig: IntlayerConfig;\n  /**\n   * `true` when credentials are available — either a session token or a\n   * `clientId`/`clientSecret` pair in the configuration.\n   */\n  hasCredentials: boolean;\n  /**\n   * Ensures a valid access token is available and applies it to\n   * `fetcherOptions`. Called automatically by {@link withAuth}.\n   */\n  ensureAuth: () => Promise<void>;\n  /**\n   * Forces a token refresh on the next call by clearing the cached token.\n   */\n  reset: () => void;\n  /**\n   * Wraps a single API method so it injects (and, on failure, refreshes) the\n   * access token on every invocation while preserving the method's signature.\n   */\n  withAuth: <Arguments extends unknown[], Result>(\n    method: AsyncMethod<Arguments, Result>,\n    skipAuth?: boolean\n  ) => AsyncMethod<Arguments, Result>;\n  /**\n   * Instantiates a domain factory with the managed fetcher options and config,\n   * returning a section whose every method authenticates automatically.\n   *\n   * @example\n   * ```ts\n   * const dictionary = authManager.bindSection(getDictionaryAPI);\n   * await dictionary.pushDictionaries(dictionaries);\n   * ```\n   */\n  bindSection: <Section extends Record<string, unknown>>(\n    factory: SectionFactory<Section>,\n    options?: BindSectionOptions\n  ) => Section;\n};\n\n/**\n * Creates an instance-scoped {@link AuthManager} handling the OAuth2\n * `client_credentials` flow (or a pre-issued CLI session token).\n *\n * Managers built with the same backend URL and credentials share one token\n * state, so a process never exchanges credentials more than needed.\n *\n * @param intlayerConfig - Intlayer configuration carrying the `editor`\n * credentials. Defaults to the build-time configuration.\n * @param options - Optional session token and base fetcher options.\n */\nexport const createAuthManager = (\n  intlayerConfig: Pick<IntlayerConfig, 'editor'> = { editor },\n  options: AuthManagerOptions = {}\n): AuthManager => {\n  const { baseFetcherOptions = {}, sessionToken } = options;\n\n  // `editor` comes from the generated build-time configuration, which never\n  // carries `clientSecret` — it would be inlined into client bundles. The\n  // secret is supplied server-side by `@intlayer/config/secrets`, which\n  // resolves to an inert stub in the browser; `hasCredentials` then stays false\n  // there and the OAuth2 exchange never runs.\n  //\n  // Only consulted when the configuration declares a `clientId`, so a project\n  // that comments its credentials out stays uncredentialed even with the\n  // environment variables still defined.\n  const resolvedConfig = defu(intlayerConfig ?? {}, {\n    editor: {\n      ...editor,\n      clientSecret: editor?.clientId ? getEditorClientSecret() : undefined,\n    },\n  }) as IntlayerConfig;\n\n  // `credentials: 'omit'` prevents the browser from attaching session cookies;\n  // authentication is handled exclusively through the injected Bearer token.\n  // This is required because the backend only allows credentialed requests for\n  // whitelisted first-party origins.\n  const fetcherOptions: FetcherOptions = {\n    ...baseFetcherOptions,\n    credentials: 'omit',\n  };\n\n  const hasCredentials =\n    Boolean(sessionToken) ||\n    Boolean(\n      resolvedConfig?.editor?.clientId && resolvedConfig?.editor?.clientSecret\n    );\n\n  // A session token is used as-is and never expires within the SDK's concern,\n  // so inject it once up-front and skip the OAuth2 exchange.\n  if (sessionToken) {\n    fetcherOptions.headers = {\n      ...(fetcherOptions.headers ?? {}),\n      Authorization: `Bearer ${sessionToken}`,\n    } as HeadersInit;\n  }\n\n  const accessTokenState = getAccessTokenState(resolvedConfig?.editor);\n\n  const needsRefresh = (): boolean => {\n    const { accessToken, expiryTimestamp } = accessTokenState;\n\n    if (!accessToken) return true;\n    if (!expiryTimestamp) return false; // Unknown expiry: assume usable until failure.\n\n    // Refresh one minute before the actual expiry to avoid edge-of-expiry races.\n    return Date.now() + ONE_MINUTE_MS >= expiryTimestamp;\n  };\n\n  const refreshToken = async (): Promise<void> => {\n    const doRefresh = async (): Promise<void> => {\n      const oAuthAPI = getOAuthAPI({}, resolvedConfig);\n      const response = await oAuthAPI.getOAuth2AccessToken();\n      const tokenData = response?.data as OAuthTokenLike | undefined;\n\n      accessTokenState.accessToken = tokenData?.accessToken;\n      accessTokenState.expiryTimestamp = getExpiryTimestamp(tokenData);\n    };\n\n    // De-duplicate concurrent refreshes so a burst of calls triggers one fetch.\n    accessTokenState.pendingRefresh ??= doRefresh().finally(() => {\n      accessTokenState.pendingRefresh = undefined;\n    });\n\n    await accessTokenState.pendingRefresh;\n  };\n\n  const applyAuthHeader = (): void => {\n    if (!accessTokenState.accessToken) return;\n    fetcherOptions.headers = {\n      ...(fetcherOptions.headers ?? {}),\n      Authorization: `Bearer ${accessTokenState.accessToken}`,\n    } as HeadersInit;\n  };\n\n  const ensureAuth = async (): Promise<void> => {\n    if (sessionToken) return; // Already injected; nothing to refresh.\n    if (needsRefresh()) {\n      await refreshToken();\n    }\n    applyAuthHeader();\n  };\n\n  const reset = (): void => {\n    accessTokenState.accessToken = undefined;\n    accessTokenState.expiryTimestamp = undefined;\n  };\n\n  const withAuth = <Arguments extends unknown[], Result>(\n    method: AsyncMethod<Arguments, Result>,\n    skipAuth = !hasCredentials\n  ): AsyncMethod<Arguments, Result> => {\n    // In a browser the project credentials are structurally unavailable, so an\n    // authenticated call would silently go out unauthenticated and come back\n    // 401. Fail with an actionable message instead: a browser must authenticate\n    // as the signed-in *user* (a session token, or the session cookie on a\n    // first-party origin), never as the project.\n    if (skipAuth && !sessionToken && isBrowser()) {\n      return async () => {\n        throw new Error(\n          'Intlayer CMS credentials are not available in the browser. ' +\n            '`clientSecret` is a server-side credential and is never bundled. ' +\n            'Call this from a server route, or pass a user session token: ' +\n            'createIntlayerCMS(config, { sessionToken }).'\n        );\n      };\n    }\n\n    if (skipAuth) return method;\n\n    return async (...args: Arguments): Promise<Result> => {\n      await ensureAuth();\n\n      try {\n        return await method(...args);\n      } catch (error) {\n        // The token may have been revoked or expired early: refresh once and\n        // retry before surfacing the error. A session token cannot be\n        // refreshed, so re-throw immediately in that case.\n        if (sessionToken || !isAuthenticationError(error)) throw error;\n\n        await refreshToken();\n        applyAuthHeader();\n        return await method(...args);\n      }\n    };\n  };\n\n  const bindSection = <Section extends Record<string, unknown>>(\n    factory: SectionFactory<Section>,\n    bindOptions: BindSectionOptions = {}\n  ): Section => {\n    const section = factory(fetcherOptions, resolvedConfig);\n    const skipAuth = bindOptions.skipAuth ?? !hasCredentials;\n\n    return new Proxy(section, {\n      get(target, property, receiver) {\n        const value = Reflect.get(target, property, receiver);\n\n        if (typeof value !== 'function') return value;\n\n        return withAuth(\n          (value as AsyncMethod<unknown[], unknown>).bind(target),\n          skipAuth\n        );\n      },\n    });\n  };\n\n  return {\n    fetcherOptions,\n    intlayerConfig: resolvedConfig,\n    hasCredentials,\n    ensureAuth,\n    reset,\n    withAuth,\n    bindSection,\n  };\n};\n"],"mappings":";;;;;;AAoCA,MAAM,gBAAgB;;;;;;AAiBtB,MAAM,oCAAoB,IAAI,IAA8B;;AAG5D,MAAa,8BAAoC;CAC/C,kBAAkB,MAAM;AAC1B;;AAGA,MAAM,uBACJ,iBACqB;CACrB,MAAM,WAAW;EACf,cAAc;EACd,cAAc;EACd,cAAc;CAChB,CAAC,CAAC,KAAK,IAAI;CAEX,IAAI,mBAAmB,kBAAkB,IAAI,QAAQ;CAErD,IAAI,CAAC,kBAAkB;EACrB,mBAAmB,CAAC;EACpB,kBAAkB,IAAI,UAAU,gBAAgB;CAClD;CAEA,OAAO;AACT;;AAGA,MAAM,gDAAgC,IAAI,IAAI,CAAC,KAAK,GAAG,CAAC;;;;;AAMxD,MAAM,yBAAyB,UAA4B;CACzD,MAAM,SAAU,OAA4C;CAE5D,OACE,OAAO,WAAW,YAAY,8BAA8B,IAAI,MAAM;AAE1E;;AAGA,MAAM,kBAA2B,OAAO,WAAW;;;;;AAMnD,MAAM,sBACJ,UACuB;CACvB,IAAI,CAAC,OAAO,OAAO;CAEnB,MAAM,WAAY,MAAM,wBAAwB,MAAM;CAKtD,IAAI,UAAU;EACZ,MAAM,YACJ,OAAO,aAAa,WAChB,KAAK,MAAM,QAAQ,IACnB,SAAS,UAAU;EACzB,IAAI,OAAO,cAAc,YAAY,OAAO,SAAS,SAAS,GAC5D,OAAO;CAEX;CAEA,MAAM,UAAU,MAAM,cAAc,MAAM;CAC1C,IAAI,OAAO,YAAY,YAAY,OAAO,SAAS,OAAO,GACxD,OAAO,KAAK,IAAI,IAAI,UAAU;AAIlC;;;;;;;;;;;;AAgGA,MAAa,qBACX,iBAAiD,EAAE,OAAO,GAC1D,UAA8B,CAAC,MACf;CAChB,MAAM,EAAE,qBAAqB,CAAC,GAAG,iBAAiB;CAWlD,MAAM,iBAAiB,KAAK,kBAAkB,CAAC,GAAG,EAChD,QAAQ;EACN,GAAG;EACH,cAAc,QAAQ,WAAW,sBAAsB,IAAI;CAC7D,EACF,CAAC;CAMD,MAAM,iBAAiC;EACrC,GAAG;EACH,aAAa;CACf;CAEA,MAAM,iBACJ,QAAQ,YAAY,KACpB,QACE,gBAAgB,QAAQ,YAAY,gBAAgB,QAAQ,YAC9D;CAIF,IAAI,cACF,eAAe,UAAU;EACvB,GAAI,eAAe,WAAW,CAAC;EAC/B,eAAe,UAAU;CAC3B;CAGF,MAAM,mBAAmB,oBAAoB,gBAAgB,MAAM;CAEnE,MAAM,qBAA8B;EAClC,MAAM,EAAE,aAAa,oBAAoB;EAEzC,IAAI,CAAC,aAAa,OAAO;EACzB,IAAI,CAAC,iBAAiB,OAAO;EAG7B,OAAO,KAAK,IAAI,IAAI,iBAAiB;CACvC;CAEA,MAAM,eAAe,YAA2B;EAC9C,MAAM,YAAY,YAA2B;GAG3C,MAAM,aAAY,MAFD,YAAY,CAAC,GAAG,cACH,CAAC,CAAC,qBAAqB,EAC3B,EAAE;GAE5B,iBAAiB,cAAc,WAAW;GAC1C,iBAAiB,kBAAkB,mBAAmB,SAAS;EACjE;EAGA,iBAAiB,mBAAmB,UAAU,CAAC,CAAC,cAAc;GAC5D,iBAAiB,iBAAiB;EACpC,CAAC;EAED,MAAM,iBAAiB;CACzB;CAEA,MAAM,wBAA8B;EAClC,IAAI,CAAC,iBAAiB,aAAa;EACnC,eAAe,UAAU;GACvB,GAAI,eAAe,WAAW,CAAC;GAC/B,eAAe,UAAU,iBAAiB;EAC5C;CACF;CAEA,MAAM,aAAa,YAA2B;EAC5C,IAAI,cAAc;EAClB,IAAI,aAAa,GACf,MAAM,aAAa;EAErB,gBAAgB;CAClB;CAEA,MAAM,cAAoB;EACxB,iBAAiB,cAAc;EAC/B,iBAAiB,kBAAkB;CACrC;CAEA,MAAM,YACJ,QACA,WAAW,CAAC,mBACuB;EAMnC,IAAI,YAAY,CAAC,gBAAgB,UAAU,GACzC,OAAO,YAAY;GACjB,MAAM,IAAI,MACR,uOAIF;EACF;EAGF,IAAI,UAAU,OAAO;EAErB,OAAO,OAAO,GAAG,SAAqC;GACpD,MAAM,WAAW;GAEjB,IAAI;IACF,OAAO,MAAM,OAAO,GAAG,IAAI;GAC7B,SAAS,OAAO;IAId,IAAI,gBAAgB,CAAC,sBAAsB,KAAK,GAAG,MAAM;IAEzD,MAAM,aAAa;IACnB,gBAAgB;IAChB,OAAO,MAAM,OAAO,GAAG,IAAI;GAC7B;EACF;CACF;CAEA,MAAM,eACJ,SACA,cAAkC,CAAC,MACvB;EACZ,MAAM,UAAU,QAAQ,gBAAgB,cAAc;EACtD,MAAM,WAAW,YAAY,YAAY,CAAC;EAE1C,OAAO,IAAI,MAAM,SAAS,EACxB,IAAI,QAAQ,UAAU,UAAU;GAC9B,MAAM,QAAQ,QAAQ,IAAI,QAAQ,UAAU,QAAQ;GAEpD,IAAI,OAAO,UAAU,YAAY,OAAO;GAExC,OAAO,SACJ,MAA0C,KAAK,MAAM,GACtD,QACF;EACF,EACF,CAAC;CACH;CAEA,OAAO;EACL;EACA,gBAAgB;EAChB;EACA;EACA;EACA;EACA;CACF;AACF"}

package/dist/esm/cms/index.mjs

@@ -1,4 +1,4 @@
-import { createAuthManager } from "./createAuthManager.mjs";
+import { clearAccessTokenCache, createAuthManager } from "./createAuthManager.mjs";
 import { createEndpoint, createIntlayerCMS } from "./createIntlayerCMS.mjs";
 
-export { createAuthManager, createEndpoint, createIntlayerCMS };
+export { clearAccessTokenCache, createAuthManager, createEndpoint, createIntlayerCMS };

package/dist/esm/getIntlayerAPI/analytics.mjs

@@ -42,12 +42,22 @@ const getAnalyticsAPI = (authAPIOptions = {}, intlayerConfig) => {
 	* @returns The experiment result set.
 	*/
 	const getExperimentResults = async (experimentKey, otherOptions = {}) => await fetcher(`${ANALYTICS_API_ROUTE}/experiments/${experimentKey}`, authAPIOptions, otherOptions, { method: "GET" });
+	/**
+	* Page metadata (title and meta description) for a given url.
+	* @param url - The page url to inspect.
+	* @returns Title and description of the page.
+	*/
+	const getPageMetadata = async (url, otherOptions = {}) => await fetcher(`${ANALYTICS_API_ROUTE}/page-metadata`, authAPIOptions, otherOptions, {
+		method: "GET",
+		params: { url }
+	});
 	return {
 		sendEvents,
 		getOverview,
 		getAudience,
 		getContentStats,
-		getExperimentResults
+		getExperimentResults,
+		getPageMetadata
 	};
 };
 /**

package/dist/esm/getIntlayerAPI/analytics.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"analytics.mjs","names":[],"sources":["../../../src/getIntlayerAPI/analytics.ts"],"sourcesContent":["import type {\n  AudienceRange,\n  GetAnalyticsOverviewResult,\n  GetAudienceResult,\n  GetContentStatsResult,\n  GetExperimentResultsResult,\n  IngestAnalyticsBody,\n  IngestAnalyticsResult,\n} from '@intlayer/backend';\nimport { editor } from '@intlayer/config/built';\nimport type { IntlayerConfig } from '@intlayer/types/config';\nimport { createEndpoint } from '../cms/createIntlayerCMS';\nimport { type FetcherOptions, fetcher } from '../fetcher';\n\nexport const getAnalyticsAPI = (\n  authAPIOptions: FetcherOptions = {},\n  intlayerConfig?: IntlayerConfig\n) => {\n  const backendURL = intlayerConfig?.editor?.backendURL ?? editor.backendURL;\n\n  const ANALYTICS_API_ROUTE = `${backendURL}/api/analytics`;\n\n  /**\n   * Ingest a batch of analytics events. Public — attribution is by the\n   * project's `clientId` in the body.\n   * @param body - Session id, sdk version, and the collected events.\n   * @returns The number of accepted events.\n   */\n  const sendEvents = async (\n    body: IngestAnalyticsBody,\n    otherOptions: FetcherOptions = {}\n  ) =>\n    await fetcher<IngestAnalyticsResult>(\n      `${ANALYTICS_API_ROUTE}/events`,\n      authAPIOptions,\n      otherOptions,\n      {\n        method: 'POST',\n        body,\n      }\n    );\n\n  /**\n   * Page/locale totals for the authenticated project.\n   * @returns Views grouped by url and locale.\n   */\n  const getOverview = async (otherOptions: FetcherOptions = {}) =>\n    await fetcher<GetAnalyticsOverviewResult>(\n      `${ANALYTICS_API_ROUTE}/overview`,\n      authAPIOptions,\n      otherOptions,\n      { method: 'GET' }\n    );\n\n  /**\n   * Audience report: distinct visitors (today / 7d / window), page views, the\n   * evolution series, and locale + country breakdowns.\n   * @param range - Rolling window, either a named range (`1h`, `24h`, `7d`,\n   *   `30d`, `90d`, `6mo`, `1y`, `3y`) or a number of days (default 30).\n   * @returns The audience statistics.\n   */\n  const getAudience = async (\n    range: AudienceRange | number = 30,\n    otherOptions: FetcherOptions = {}\n  ) =>\n    await fetcher<GetAudienceResult>(\n      `${ANALYTICS_API_ROUTE}/audience`,\n      authAPIOptions,\n      otherOptions,\n      {\n        method: 'GET',\n        params: typeof range === 'number' ? { days: String(range) } : { range },\n      }\n    );\n\n  /**\n   * Per-content exposure totals — \"which content is actually shown\".\n   * @returns Exposures grouped by dictionary key, key path, and locale.\n   */\n  const getContentStats = async (otherOptions: FetcherOptions = {}) =>\n    await fetcher<GetContentStatsResult>(\n      `${ANALYTICS_API_ROUTE}/content-stats`,\n      authAPIOptions,\n      otherOptions,\n      { method: 'GET' }\n    );\n\n  /**\n   * A/B experiment results with per-variant conversion rates and significance.\n   * @param experimentKey - The experiment to evaluate.\n   * @returns The experiment result set.\n   */\n  const getExperimentResults = async (\n    experimentKey: string,\n    otherOptions: FetcherOptions = {}\n  ) =>\n    await fetcher<GetExperimentResultsResult>(\n      `${ANALYTICS_API_ROUTE}/experiments/${experimentKey}`,\n      authAPIOptions,\n      otherOptions,\n      { method: 'GET' }\n    );\n\n  return {\n    sendEvents,\n    getOverview,\n    getAudience,\n    getContentStats,\n    getExperimentResults,\n  };\n};\n\n/**\n * Authenticated `analytics` endpoint bound to an Intlayer CMS authenticator.\n *\n * Pass an authenticator created with `createIntlayerCMS`, or omit it to use\n * the build-time configuration (`@intlayer/config/built`).\n */\nexport const analyticsEndpoint = createEndpoint(getAnalyticsAPI);\n"],"mappings":";;;;;AAcA,MAAa,mBACX,iBAAiC,CAAC,GAClC,mBACG;CAGH,MAAM,sBAAsB,GAFT,gBAAgB,QAAQ,cAAc,OAAO,WAEtB;;;;;;;CAQ1C,MAAM,aAAa,OACjB,MACA,eAA+B,CAAC,MAEhC,MAAM,QACJ,GAAG,oBAAoB,UACvB,gBACA,cACA;EACE,QAAQ;EACR;CACF,CACF;;;;;CAMF,MAAM,cAAc,OAAO,eAA+B,CAAC,MACzD,MAAM,QACJ,GAAG,oBAAoB,YACvB,gBACA,cACA,EAAE,QAAQ,MAAM,CAClB;;;;;;;;CASF,MAAM,cAAc,OAClB,QAAgC,IAChC,eAA+B,CAAC,MAEhC,MAAM,QACJ,GAAG,oBAAoB,YACvB,gBACA,cACA;EACE,QAAQ;EACR,QAAQ,OAAO,UAAU,WAAW,EAAE,MAAM,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM;CACxE,CACF;;;;;CAMF,MAAM,kBAAkB,OAAO,eAA+B,CAAC,MAC7D,MAAM,QACJ,GAAG,oBAAoB,iBACvB,gBACA,cACA,EAAE,QAAQ,MAAM,CAClB;;;;;;CAOF,MAAM,uBAAuB,OAC3B,eACA,eAA+B,CAAC,MAEhC,MAAM,QACJ,GAAG,oBAAoB,eAAe,iBACtC,gBACA,cACA,EAAE,QAAQ,MAAM,CAClB;CAEF,OAAO;EACL;EACA;EACA;EACA;EACA;CACF;AACF;;;;;;;AAQA,MAAa,oBAAoB,eAAe,eAAe"}
+{"version":3,"file":"analytics.mjs","names":[],"sources":["../../../src/getIntlayerAPI/analytics.ts"],"sourcesContent":["import type {\n  AudienceRange,\n  GetAnalyticsOverviewResult,\n  GetAudienceResult,\n  GetContentStatsResult,\n  GetExperimentResultsResult,\n  GetPageMetadataResult,\n  IngestAnalyticsBody,\n  IngestAnalyticsResult,\n} from '@intlayer/backend';\nimport { editor } from '@intlayer/config/built';\nimport type { IntlayerConfig } from '@intlayer/types/config';\nimport { createEndpoint } from '../cms/createIntlayerCMS';\nimport { type FetcherOptions, fetcher } from '../fetcher';\n\nexport const getAnalyticsAPI = (\n  authAPIOptions: FetcherOptions = {},\n  intlayerConfig?: IntlayerConfig\n) => {\n  const backendURL = intlayerConfig?.editor?.backendURL ?? editor.backendURL;\n\n  const ANALYTICS_API_ROUTE = `${backendURL}/api/analytics`;\n\n  /**\n   * Ingest a batch of analytics events. Public — attribution is by the\n   * project's `clientId` in the body.\n   * @param body - Session id, sdk version, and the collected events.\n   * @returns The number of accepted events.\n   */\n  const sendEvents = async (\n    body: IngestAnalyticsBody,\n    otherOptions: FetcherOptions = {}\n  ) =>\n    await fetcher<IngestAnalyticsResult>(\n      `${ANALYTICS_API_ROUTE}/events`,\n      authAPIOptions,\n      otherOptions,\n      {\n        method: 'POST',\n        body,\n      }\n    );\n\n  /**\n   * Page/locale totals for the authenticated project.\n   * @returns Views grouped by url and locale.\n   */\n  const getOverview = async (otherOptions: FetcherOptions = {}) =>\n    await fetcher<GetAnalyticsOverviewResult>(\n      `${ANALYTICS_API_ROUTE}/overview`,\n      authAPIOptions,\n      otherOptions,\n      { method: 'GET' }\n    );\n\n  /**\n   * Audience report: distinct visitors (today / 7d / window), page views, the\n   * evolution series, and locale + country breakdowns.\n   * @param range - Rolling window, either a named range (`1h`, `24h`, `7d`,\n   *   `30d`, `90d`, `6mo`, `1y`, `3y`) or a number of days (default 30).\n   * @returns The audience statistics.\n   */\n  const getAudience = async (\n    range: AudienceRange | number = 30,\n    otherOptions: FetcherOptions = {}\n  ) =>\n    await fetcher<GetAudienceResult>(\n      `${ANALYTICS_API_ROUTE}/audience`,\n      authAPIOptions,\n      otherOptions,\n      {\n        method: 'GET',\n        params: typeof range === 'number' ? { days: String(range) } : { range },\n      }\n    );\n\n  /**\n   * Per-content exposure totals — \"which content is actually shown\".\n   * @returns Exposures grouped by dictionary key, key path, and locale.\n   */\n  const getContentStats = async (otherOptions: FetcherOptions = {}) =>\n    await fetcher<GetContentStatsResult>(\n      `${ANALYTICS_API_ROUTE}/content-stats`,\n      authAPIOptions,\n      otherOptions,\n      { method: 'GET' }\n    );\n\n  /**\n   * A/B experiment results with per-variant conversion rates and significance.\n   * @param experimentKey - The experiment to evaluate.\n   * @returns The experiment result set.\n   */\n  const getExperimentResults = async (\n    experimentKey: string,\n    otherOptions: FetcherOptions = {}\n  ) =>\n    await fetcher<GetExperimentResultsResult>(\n      `${ANALYTICS_API_ROUTE}/experiments/${experimentKey}`,\n      authAPIOptions,\n      otherOptions,\n      { method: 'GET' }\n    );\n\n  /**\n   * Page metadata (title and meta description) for a given url.\n   * @param url - The page url to inspect.\n   * @returns Title and description of the page.\n   */\n  const getPageMetadata = async (\n    url: string,\n    otherOptions: FetcherOptions = {}\n  ) =>\n    await fetcher<GetPageMetadataResult>(\n      `${ANALYTICS_API_ROUTE}/page-metadata`,\n      authAPIOptions,\n      otherOptions,\n      {\n        method: 'GET',\n        params: { url },\n      }\n    );\n\n  return {\n    sendEvents,\n    getOverview,\n    getAudience,\n    getContentStats,\n    getExperimentResults,\n    getPageMetadata,\n  };\n};\n\n/**\n * Authenticated `analytics` endpoint bound to an Intlayer CMS authenticator.\n *\n * Pass an authenticator created with `createIntlayerCMS`, or omit it to use\n * the build-time configuration (`@intlayer/config/built`).\n */\nexport const analyticsEndpoint = createEndpoint(getAnalyticsAPI);\n"],"mappings":";;;;;AAeA,MAAa,mBACX,iBAAiC,CAAC,GAClC,mBACG;CAGH,MAAM,sBAAsB,GAFT,gBAAgB,QAAQ,cAAc,OAAO,WAEtB;;;;;;;CAQ1C,MAAM,aAAa,OACjB,MACA,eAA+B,CAAC,MAEhC,MAAM,QACJ,GAAG,oBAAoB,UACvB,gBACA,cACA;EACE,QAAQ;EACR;CACF,CACF;;;;;CAMF,MAAM,cAAc,OAAO,eAA+B,CAAC,MACzD,MAAM,QACJ,GAAG,oBAAoB,YACvB,gBACA,cACA,EAAE,QAAQ,MAAM,CAClB;;;;;;;;CASF,MAAM,cAAc,OAClB,QAAgC,IAChC,eAA+B,CAAC,MAEhC,MAAM,QACJ,GAAG,oBAAoB,YACvB,gBACA,cACA;EACE,QAAQ;EACR,QAAQ,OAAO,UAAU,WAAW,EAAE,MAAM,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM;CACxE,CACF;;;;;CAMF,MAAM,kBAAkB,OAAO,eAA+B,CAAC,MAC7D,MAAM,QACJ,GAAG,oBAAoB,iBACvB,gBACA,cACA,EAAE,QAAQ,MAAM,CAClB;;;;;;CAOF,MAAM,uBAAuB,OAC3B,eACA,eAA+B,CAAC,MAEhC,MAAM,QACJ,GAAG,oBAAoB,eAAe,iBACtC,gBACA,cACA,EAAE,QAAQ,MAAM,CAClB;;;;;;CAOF,MAAM,kBAAkB,OACtB,KACA,eAA+B,CAAC,MAEhC,MAAM,QACJ,GAAG,oBAAoB,iBACvB,gBACA,cACA;EACE,QAAQ;EACR,QAAQ,EAAE,IAAI;CAChB,CACF;CAEF,OAAO;EACL;EACA;EACA;EACA;EACA;EACA;CACF;AACF;;;;;;;AAQA,MAAa,oBAAoB,eAAe,eAAe"}

package/dist/esm/getIntlayerAPI/audit.mjs

@@ -23,8 +23,9 @@ const getAuditAPI = (authAPIOptions = {}, intlayerConfig) => {
 	});
 	const scanUrl = async (body, otherOptions = {}) => {
 		if (!body?.url) return;
-		const { url, onMessage, onDone } = body;
+		const { url, refresh, onMessage, onDone } = body;
 		const params = new URLSearchParams({ url });
+		if (refresh) params.set("refresh", "true");
 		const endpoint = `${AUDIT_API_ROUTE}?${params.toString()}`;
 		const response = await fetch(endpoint, {
 			method: "GET",
@@ -81,7 +82,29 @@ const getAuditAPI = (authAPIOptions = {}, intlayerConfig) => {
 	const cancelRecursiveAudit = async (params, otherOptions = {}) => await fetcher(`${AUDIT_API_ROUTE}/recursive/${params?.jobId}/cancel`, authAPIOptions, otherOptions, { method: "POST" });
 	const pauseRecursiveAudit = async (params, otherOptions = {}) => await fetcher(`${AUDIT_API_ROUTE}/recursive/${params?.jobId}/pause`, authAPIOptions, otherOptions, { method: "POST" });
 	const resumeRecursiveAudit = async (params, otherOptions = {}) => await fetcher(`${AUDIT_API_ROUTE}/recursive/${params?.jobId}/resume`, authAPIOptions, otherOptions, { method: "POST" });
+	/**
+	* Admin — number of scanned domains using each technology.
+	*/
+	const getTechnologyUsage = async (params, otherOptions = {}) => await fetcher(`${AUDIT_API_ROUTE}/technologies`, authAPIOptions, otherOptions, {
+		method: "GET",
+		params
+	});
+	/**
+	* Admin — scanned hosts, most recently scanned first, filterable by
+	* technology.
+	*/
+	const getScannedHosts = async (params, otherOptions = {}) => await fetcher(`${AUDIT_API_ROUTE}/hosts`, authAPIOptions, otherOptions, {
+		method: "GET",
+		params
+	});
+	/**
+	* Admin — a scanned host with its stored scans, newest first.
+	*/
+	const getScannedHost = async (params, otherOptions = {}) => await fetcher(`${AUDIT_API_ROUTE}/hosts/${encodeURIComponent(params?.host ?? "")}`, authAPIOptions, otherOptions, { method: "GET" });
 	return {
+		getTechnologyUsage,
+		getScannedHosts,
+		getScannedHost,
 		discoverUrls,
 		scanUrl,
 		startRecursiveAudit,

package/dist/esm/getIntlayerAPI/audit.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"audit.mjs","names":[],"sources":["../../../src/getIntlayerAPI/audit.ts"],"sourcesContent":["import type {\n  AuditEvent,\n  GetRecursiveAuditStatusResult,\n  StartRecursiveAuditResult,\n} from '@intlayer/backend';\nimport { editor } from '@intlayer/config/built';\nimport type { IntlayerConfig } from '@intlayer/types/config';\nimport { createEndpoint } from '../cms/createIntlayerCMS';\nimport { type FetcherOptions, fetcher } from '../fetcher';\n\nexport type {\n  AuditEvent,\n  GetRecursiveAuditStatusResult,\n  StartRecursiveAuditResult,\n};\n\nexport type ScanUrlBody = {\n  url: string;\n  onMessage?: (event: AuditEvent) => void;\n  onDone?: () => void;\n};\n\nexport type DiscoverUrlsParams = {\n  url: string;\n};\n\nexport type DiscoverUrlsResult = {\n  urls: string[];\n};\n\nexport type StartRecursiveAuditBody = {\n  url: string;\n  urls?: string[];\n};\n\nexport type GetRecursiveAuditStatusParams = {\n  jobId: string;\n};\n\nexport type RecursiveAuditJobParams = {\n  jobId: string;\n};\n\nexport const getAuditAPI = (\n  authAPIOptions: FetcherOptions = {},\n  intlayerConfig?: IntlayerConfig\n) => {\n  const backendURL = intlayerConfig?.editor?.backendURL ?? editor.backendURL;\n\n  const AUDIT_API_ROUTE = `${backendURL}/api/scan`;\n\n  /**\n   * Streams a single-page SEO audit as Server-Sent Events.\n   *\n   * Usage:\n   * ```ts\n   * await audit.scanUrl({\n   *   url: 'https://example.com',\n   *   onMessage: (event) => console.log(event),\n   *   onDone: () => console.log('done'),\n   * });\n   * ```\n   */\n  const discoverUrls = async (\n    params?: DiscoverUrlsParams,\n    otherOptions: FetcherOptions = {}\n  ) =>\n    await fetcher<DiscoverUrlsResult>(\n      `${AUDIT_API_ROUTE}/recursive/discover`,\n      authAPIOptions,\n      otherOptions,\n      {\n        method: 'GET',\n        params,\n      }\n    );\n\n  const scanUrl = async (\n    body?: ScanUrlBody,\n    otherOptions: FetcherOptions = {}\n  ) => {\n    if (!body?.url) return;\n\n    const { url, onMessage, onDone } = body;\n\n    const params = new URLSearchParams({ url });\n    const endpoint = `${AUDIT_API_ROUTE}?${params.toString()}`;\n\n    const response = await fetch(endpoint, {\n      method: 'GET',\n      headers: {\n        Accept: 'text/event-stream',\n        ...authAPIOptions.headers,\n        ...otherOptions.headers,\n      },\n      credentials: 'include',\n      signal: otherOptions.signal,\n    });\n\n    if (!response.ok) {\n      let errorMessage = 'An error occurred';\n      try {\n        const errorData = await response.json();\n        errorMessage = JSON.stringify(errorData.error) ?? errorMessage;\n      } catch {\n        try {\n          const errorText = await response.text();\n          if (errorText) errorMessage = errorText;\n        } catch {\n          // ignore\n        }\n      }\n      throw new Error(errorMessage);\n    }\n\n    const reader = response.body?.getReader();\n    if (!reader) throw new Error('No reader available');\n\n    const decoder = new TextDecoder();\n    let buffer = '';\n\n    while (true) {\n      const { done, value } = await reader.read();\n\n      if (done) break;\n\n      buffer += decoder.decode(value, { stream: true });\n      const lines = buffer.split('\\n');\n      buffer = lines.pop() ?? '';\n\n      for (const line of lines) {\n        if (line.startsWith('data: ')) {\n          try {\n            const event = JSON.parse(line.slice(6)) as AuditEvent;\n            onMessage?.(event);\n          } catch {\n            // ignore malformed lines\n          }\n        }\n      }\n    }\n\n    onDone?.();\n  };\n\n  /**\n   * Starts a recursive audit job for the given URL.\n   */\n  const startRecursiveAudit = async (\n    body?: StartRecursiveAuditBody,\n    otherOptions: FetcherOptions = {}\n  ) =>\n    await fetcher<StartRecursiveAuditResult>(\n      `${AUDIT_API_ROUTE}/recursive/start`,\n      authAPIOptions,\n      otherOptions,\n      {\n        method: 'POST',\n        params: body?.url ? { url: body.url } : undefined,\n        body: body?.urls !== undefined ? { urls: body.urls as any } : undefined,\n      }\n    );\n\n  /**\n   * Gets the status of a recursive audit job.\n   */\n  const getRecursiveAuditStatus = async (\n    params?: GetRecursiveAuditStatusParams,\n    otherOptions: FetcherOptions = {}\n  ) =>\n    await fetcher<GetRecursiveAuditStatusResult>(\n      `${AUDIT_API_ROUTE}/recursive/${params?.jobId}`,\n      authAPIOptions,\n      otherOptions,\n      {\n        method: 'GET',\n      }\n    );\n\n  const cancelRecursiveAudit = async (\n    params?: RecursiveAuditJobParams,\n    otherOptions: FetcherOptions = {}\n  ) =>\n    await fetcher<{ success: boolean }>(\n      `${AUDIT_API_ROUTE}/recursive/${params?.jobId}/cancel`,\n      authAPIOptions,\n      otherOptions,\n      { method: 'POST' }\n    );\n\n  const pauseRecursiveAudit = async (\n    params?: RecursiveAuditJobParams,\n    otherOptions: FetcherOptions = {}\n  ) =>\n    await fetcher<{ success: boolean }>(\n      `${AUDIT_API_ROUTE}/recursive/${params?.jobId}/pause`,\n      authAPIOptions,\n      otherOptions,\n      { method: 'POST' }\n    );\n\n  const resumeRecursiveAudit = async (\n    params?: RecursiveAuditJobParams,\n    otherOptions: FetcherOptions = {}\n  ) =>\n    await fetcher<{ success: boolean }>(\n      `${AUDIT_API_ROUTE}/recursive/${params?.jobId}/resume`,\n      authAPIOptions,\n      otherOptions,\n      { method: 'POST' }\n    );\n\n  return {\n    discoverUrls,\n    scanUrl,\n    startRecursiveAudit,\n    getRecursiveAuditStatus,\n    cancelRecursiveAudit,\n    pauseRecursiveAudit,\n    resumeRecursiveAudit,\n  };\n};\n\n/**\n * Authenticated `audit` endpoint bound to an Intlayer CMS authenticator.\n *\n * Pass an authenticator created with `createIntlayerCMS`, or omit it to use\n * the build-time configuration (`@intlayer/config/built`).\n */\nexport const auditEndpoint = createEndpoint(getAuditAPI);\n"],"mappings":";;;;;AA2CA,MAAa,eACX,iBAAiC,CAAC,GAClC,mBACG;CAGH,MAAM,kBAAkB,GAFL,gBAAgB,QAAQ,cAAc,OAAO,WAE1B;;;;;;;;;;;;;CActC,MAAM,eAAe,OACnB,QACA,eAA+B,CAAC,MAEhC,MAAM,QACJ,GAAG,gBAAgB,sBACnB,gBACA,cACA;EACE,QAAQ;EACR;CACF,CACF;CAEF,MAAM,UAAU,OACd,MACA,eAA+B,CAAC,MAC7B;EACH,IAAI,CAAC,MAAM,KAAK;EAEhB,MAAM,EAAE,KAAK,WAAW,WAAW;EAEnC,MAAM,SAAS,IAAI,gBAAgB,EAAE,IAAI,CAAC;EAC1C,MAAM,WAAW,GAAG,gBAAgB,GAAG,OAAO,SAAS;EAEvD,MAAM,WAAW,MAAM,MAAM,UAAU;GACrC,QAAQ;GACR,SAAS;IACP,QAAQ;IACR,GAAG,eAAe;IAClB,GAAG,aAAa;GAClB;GACA,aAAa;GACb,QAAQ,aAAa;EACvB,CAAC;EAED,IAAI,CAAC,SAAS,IAAI;GAChB,IAAI,eAAe;GACnB,IAAI;IACF,MAAM,YAAY,MAAM,SAAS,KAAK;IACtC,eAAe,KAAK,UAAU,UAAU,KAAK,KAAK;GACpD,QAAQ;IACN,IAAI;KACF,MAAM,YAAY,MAAM,SAAS,KAAK;KACtC,IAAI,WAAW,eAAe;IAChC,QAAQ,CAER;GACF;GACA,MAAM,IAAI,MAAM,YAAY;EAC9B;EAEA,MAAM,SAAS,SAAS,MAAM,UAAU;EACxC,IAAI,CAAC,QAAQ,MAAM,IAAI,MAAM,qBAAqB;EAElD,MAAM,UAAU,IAAI,YAAY;EAChC,IAAI,SAAS;EAEb,OAAO,MAAM;GACX,MAAM,EAAE,MAAM,UAAU,MAAM,OAAO,KAAK;GAE1C,IAAI,MAAM;GAEV,UAAU,QAAQ,OAAO,OAAO,EAAE,QAAQ,KAAK,CAAC;GAChD,MAAM,QAAQ,OAAO,MAAM,IAAI;GAC/B,SAAS,MAAM,IAAI,KAAK;GAExB,KAAK,MAAM,QAAQ,OACjB,IAAI,KAAK,WAAW,QAAQ,GAC1B,IAAI;IACF,MAAM,QAAQ,KAAK,MAAM,KAAK,MAAM,CAAC,CAAC;IACtC,YAAY,KAAK;GACnB,QAAQ,CAER;EAGN;EAEA,SAAS;CACX;;;;CAKA,MAAM,sBAAsB,OAC1B,MACA,eAA+B,CAAC,MAEhC,MAAM,QACJ,GAAG,gBAAgB,mBACnB,gBACA,cACA;EACE,QAAQ;EACR,QAAQ,MAAM,MAAM,EAAE,KAAK,KAAK,IAAI,IAAI;EACxC,MAAM,MAAM,SAAS,SAAY,EAAE,MAAM,KAAK,KAAY,IAAI;CAChE,CACF;;;;CAKF,MAAM,0BAA0B,OAC9B,QACA,eAA+B,CAAC,MAEhC,MAAM,QACJ,GAAG,gBAAgB,aAAa,QAAQ,SACxC,gBACA,cACA,EACE,QAAQ,MACV,CACF;CAEF,MAAM,uBAAuB,OAC3B,QACA,eAA+B,CAAC,MAEhC,MAAM,QACJ,GAAG,gBAAgB,aAAa,QAAQ,MAAM,UAC9C,gBACA,cACA,EAAE,QAAQ,OAAO,CACnB;CAEF,MAAM,sBAAsB,OAC1B,QACA,eAA+B,CAAC,MAEhC,MAAM,QACJ,GAAG,gBAAgB,aAAa,QAAQ,MAAM,SAC9C,gBACA,cACA,EAAE,QAAQ,OAAO,CACnB;CAEF,MAAM,uBAAuB,OAC3B,QACA,eAA+B,CAAC,MAEhC,MAAM,QACJ,GAAG,gBAAgB,aAAa,QAAQ,MAAM,UAC9C,gBACA,cACA,EAAE,QAAQ,OAAO,CACnB;CAEF,OAAO;EACL;EACA;EACA;EACA;EACA;EACA;EACA;CACF;AACF;;;;;;;AAQA,MAAa,gBAAgB,eAAe,WAAW"}
+{"version":3,"file":"audit.mjs","names":[],"sources":["../../../src/getIntlayerAPI/audit.ts"],"sourcesContent":["import type {\n  AuditEvent,\n  GetRecursiveAuditStatusResult,\n  GetScannedHostParams,\n  GetScannedHostResult,\n  GetScannedHostsQuery,\n  GetScannedHostsResult,\n  GetTechnologyUsageQuery,\n  GetTechnologyUsageResult,\n  StartRecursiveAuditResult,\n} from '@intlayer/backend';\nimport { editor } from '@intlayer/config/built';\nimport type { IntlayerConfig } from '@intlayer/types/config';\nimport { createEndpoint } from '../cms/createIntlayerCMS';\nimport { type FetcherOptions, fetcher } from '../fetcher';\n\nexport type {\n  AuditEvent,\n  GetRecursiveAuditStatusResult,\n  GetScannedHostParams,\n  GetScannedHostResult,\n  GetScannedHostsQuery,\n  GetScannedHostsResult,\n  GetTechnologyUsageQuery,\n  GetTechnologyUsageResult,\n  StartRecursiveAuditResult,\n};\n\nexport type ScanUrlBody = {\n  url: string;\n  /**\n   * Force a new audit. Without it, a URL audited less than an hour ago is\n   * replayed from cache (its first event carries `cachedAt`).\n   */\n  refresh?: boolean;\n  onMessage?: (event: AuditEvent) => void;\n  onDone?: () => void;\n};\n\nexport type DiscoverUrlsParams = {\n  url: string;\n};\n\nexport type DiscoverUrlsResult = {\n  urls: string[];\n};\n\nexport type StartRecursiveAuditBody = {\n  url: string;\n  urls?: string[];\n};\n\nexport type GetRecursiveAuditStatusParams = {\n  jobId: string;\n};\n\nexport type RecursiveAuditJobParams = {\n  jobId: string;\n};\n\nexport const getAuditAPI = (\n  authAPIOptions: FetcherOptions = {},\n  intlayerConfig?: IntlayerConfig\n) => {\n  const backendURL = intlayerConfig?.editor?.backendURL ?? editor.backendURL;\n\n  const AUDIT_API_ROUTE = `${backendURL}/api/scan`;\n\n  /**\n   * Streams a single-page SEO audit as Server-Sent Events.\n   *\n   * Usage:\n   * ```ts\n   * await audit.scanUrl({\n   *   url: 'https://example.com',\n   *   onMessage: (event) => console.log(event),\n   *   onDone: () => console.log('done'),\n   * });\n   * ```\n   */\n  const discoverUrls = async (\n    params?: DiscoverUrlsParams,\n    otherOptions: FetcherOptions = {}\n  ) =>\n    await fetcher<DiscoverUrlsResult>(\n      `${AUDIT_API_ROUTE}/recursive/discover`,\n      authAPIOptions,\n      otherOptions,\n      {\n        method: 'GET',\n        params,\n      }\n    );\n\n  const scanUrl = async (\n    body?: ScanUrlBody,\n    otherOptions: FetcherOptions = {}\n  ) => {\n    if (!body?.url) return;\n\n    const { url, refresh, onMessage, onDone } = body;\n\n    const params = new URLSearchParams({ url });\n    if (refresh) params.set('refresh', 'true');\n    const endpoint = `${AUDIT_API_ROUTE}?${params.toString()}`;\n\n    const response = await fetch(endpoint, {\n      method: 'GET',\n      headers: {\n        Accept: 'text/event-stream',\n        ...authAPIOptions.headers,\n        ...otherOptions.headers,\n      },\n      credentials: 'include',\n      signal: otherOptions.signal,\n    });\n\n    if (!response.ok) {\n      let errorMessage = 'An error occurred';\n      try {\n        const errorData = await response.json();\n        errorMessage = JSON.stringify(errorData.error) ?? errorMessage;\n      } catch {\n        try {\n          const errorText = await response.text();\n          if (errorText) errorMessage = errorText;\n        } catch {\n          // ignore\n        }\n      }\n      throw new Error(errorMessage);\n    }\n\n    const reader = response.body?.getReader();\n    if (!reader) throw new Error('No reader available');\n\n    const decoder = new TextDecoder();\n    let buffer = '';\n\n    while (true) {\n      const { done, value } = await reader.read();\n\n      if (done) break;\n\n      buffer += decoder.decode(value, { stream: true });\n      const lines = buffer.split('\\n');\n      buffer = lines.pop() ?? '';\n\n      for (const line of lines) {\n        if (line.startsWith('data: ')) {\n          try {\n            const event = JSON.parse(line.slice(6)) as AuditEvent;\n            onMessage?.(event);\n          } catch {\n            // ignore malformed lines\n          }\n        }\n      }\n    }\n\n    onDone?.();\n  };\n\n  /**\n   * Starts a recursive audit job for the given URL.\n   */\n  const startRecursiveAudit = async (\n    body?: StartRecursiveAuditBody,\n    otherOptions: FetcherOptions = {}\n  ) =>\n    await fetcher<StartRecursiveAuditResult>(\n      `${AUDIT_API_ROUTE}/recursive/start`,\n      authAPIOptions,\n      otherOptions,\n      {\n        method: 'POST',\n        params: body?.url ? { url: body.url } : undefined,\n        body: body?.urls !== undefined ? { urls: body.urls as any } : undefined,\n      }\n    );\n\n  /**\n   * Gets the status of a recursive audit job.\n   */\n  const getRecursiveAuditStatus = async (\n    params?: GetRecursiveAuditStatusParams,\n    otherOptions: FetcherOptions = {}\n  ) =>\n    await fetcher<GetRecursiveAuditStatusResult>(\n      `${AUDIT_API_ROUTE}/recursive/${params?.jobId}`,\n      authAPIOptions,\n      otherOptions,\n      {\n        method: 'GET',\n      }\n    );\n\n  const cancelRecursiveAudit = async (\n    params?: RecursiveAuditJobParams,\n    otherOptions: FetcherOptions = {}\n  ) =>\n    await fetcher<{ success: boolean }>(\n      `${AUDIT_API_ROUTE}/recursive/${params?.jobId}/cancel`,\n      authAPIOptions,\n      otherOptions,\n      { method: 'POST' }\n    );\n\n  const pauseRecursiveAudit = async (\n    params?: RecursiveAuditJobParams,\n    otherOptions: FetcherOptions = {}\n  ) =>\n    await fetcher<{ success: boolean }>(\n      `${AUDIT_API_ROUTE}/recursive/${params?.jobId}/pause`,\n      authAPIOptions,\n      otherOptions,\n      { method: 'POST' }\n    );\n\n  const resumeRecursiveAudit = async (\n    params?: RecursiveAuditJobParams,\n    otherOptions: FetcherOptions = {}\n  ) =>\n    await fetcher<{ success: boolean }>(\n      `${AUDIT_API_ROUTE}/recursive/${params?.jobId}/resume`,\n      authAPIOptions,\n      otherOptions,\n      { method: 'POST' }\n    );\n\n  /**\n   * Admin — number of scanned domains using each technology.\n   */\n  const getTechnologyUsage = async (\n    params?: GetTechnologyUsageQuery,\n    otherOptions: FetcherOptions = {}\n  ) =>\n    await fetcher<GetTechnologyUsageResult>(\n      `${AUDIT_API_ROUTE}/technologies`,\n      authAPIOptions,\n      otherOptions,\n      { method: 'GET', params }\n    );\n\n  /**\n   * Admin — scanned hosts, most recently scanned first, filterable by\n   * technology.\n   */\n  const getScannedHosts = async (\n    params?: GetScannedHostsQuery,\n    otherOptions: FetcherOptions = {}\n  ) =>\n    await fetcher<GetScannedHostsResult>(\n      `${AUDIT_API_ROUTE}/hosts`,\n      authAPIOptions,\n      otherOptions,\n      { method: 'GET', params }\n    );\n\n  /**\n   * Admin — a scanned host with its stored scans, newest first.\n   */\n  const getScannedHost = async (\n    params?: GetScannedHostParams,\n    otherOptions: FetcherOptions = {}\n  ) =>\n    await fetcher<GetScannedHostResult>(\n      `${AUDIT_API_ROUTE}/hosts/${encodeURIComponent(params?.host ?? '')}`,\n      authAPIOptions,\n      otherOptions,\n      { method: 'GET' }\n    );\n\n  return {\n    getTechnologyUsage,\n    getScannedHosts,\n    getScannedHost,\n    discoverUrls,\n    scanUrl,\n    startRecursiveAudit,\n    getRecursiveAuditStatus,\n    cancelRecursiveAudit,\n    pauseRecursiveAudit,\n    resumeRecursiveAudit,\n  };\n};\n\n/**\n * Authenticated `audit` endpoint bound to an Intlayer CMS authenticator.\n *\n * Pass an authenticator created with `createIntlayerCMS`, or omit it to use\n * the build-time configuration (`@intlayer/config/built`).\n */\nexport const auditEndpoint = createEndpoint(getAuditAPI);\n"],"mappings":";;;;;AA4DA,MAAa,eACX,iBAAiC,CAAC,GAClC,mBACG;CAGH,MAAM,kBAAkB,GAFL,gBAAgB,QAAQ,cAAc,OAAO,WAE1B;;;;;;;;;;;;;CActC,MAAM,eAAe,OACnB,QACA,eAA+B,CAAC,MAEhC,MAAM,QACJ,GAAG,gBAAgB,sBACnB,gBACA,cACA;EACE,QAAQ;EACR;CACF,CACF;CAEF,MAAM,UAAU,OACd,MACA,eAA+B,CAAC,MAC7B;EACH,IAAI,CAAC,MAAM,KAAK;EAEhB,MAAM,EAAE,KAAK,SAAS,WAAW,WAAW;EAE5C,MAAM,SAAS,IAAI,gBAAgB,EAAE,IAAI,CAAC;EAC1C,IAAI,SAAS,OAAO,IAAI,WAAW,MAAM;EACzC,MAAM,WAAW,GAAG,gBAAgB,GAAG,OAAO,SAAS;EAEvD,MAAM,WAAW,MAAM,MAAM,UAAU;GACrC,QAAQ;GACR,SAAS;IACP,QAAQ;IACR,GAAG,eAAe;IAClB,GAAG,aAAa;GAClB;GACA,aAAa;GACb,QAAQ,aAAa;EACvB,CAAC;EAED,IAAI,CAAC,SAAS,IAAI;GAChB,IAAI,eAAe;GACnB,IAAI;IACF,MAAM,YAAY,MAAM,SAAS,KAAK;IACtC,eAAe,KAAK,UAAU,UAAU,KAAK,KAAK;GACpD,QAAQ;IACN,IAAI;KACF,MAAM,YAAY,MAAM,SAAS,KAAK;KACtC,IAAI,WAAW,eAAe;IAChC,QAAQ,CAER;GACF;GACA,MAAM,IAAI,MAAM,YAAY;EAC9B;EAEA,MAAM,SAAS,SAAS,MAAM,UAAU;EACxC,IAAI,CAAC,QAAQ,MAAM,IAAI,MAAM,qBAAqB;EAElD,MAAM,UAAU,IAAI,YAAY;EAChC,IAAI,SAAS;EAEb,OAAO,MAAM;GACX,MAAM,EAAE,MAAM,UAAU,MAAM,OAAO,KAAK;GAE1C,IAAI,MAAM;GAEV,UAAU,QAAQ,OAAO,OAAO,EAAE,QAAQ,KAAK,CAAC;GAChD,MAAM,QAAQ,OAAO,MAAM,IAAI;GAC/B,SAAS,MAAM,IAAI,KAAK;GAExB,KAAK,MAAM,QAAQ,OACjB,IAAI,KAAK,WAAW,QAAQ,GAC1B,IAAI;IACF,MAAM,QAAQ,KAAK,MAAM,KAAK,MAAM,CAAC,CAAC;IACtC,YAAY,KAAK;GACnB,QAAQ,CAER;EAGN;EAEA,SAAS;CACX;;;;CAKA,MAAM,sBAAsB,OAC1B,MACA,eAA+B,CAAC,MAEhC,MAAM,QACJ,GAAG,gBAAgB,mBACnB,gBACA,cACA;EACE,QAAQ;EACR,QAAQ,MAAM,MAAM,EAAE,KAAK,KAAK,IAAI,IAAI;EACxC,MAAM,MAAM,SAAS,SAAY,EAAE,MAAM,KAAK,KAAY,IAAI;CAChE,CACF;;;;CAKF,MAAM,0BAA0B,OAC9B,QACA,eAA+B,CAAC,MAEhC,MAAM,QACJ,GAAG,gBAAgB,aAAa,QAAQ,SACxC,gBACA,cACA,EACE,QAAQ,MACV,CACF;CAEF,MAAM,uBAAuB,OAC3B,QACA,eAA+B,CAAC,MAEhC,MAAM,QACJ,GAAG,gBAAgB,aAAa,QAAQ,MAAM,UAC9C,gBACA,cACA,EAAE,QAAQ,OAAO,CACnB;CAEF,MAAM,sBAAsB,OAC1B,QACA,eAA+B,CAAC,MAEhC,MAAM,QACJ,GAAG,gBAAgB,aAAa,QAAQ,MAAM,SAC9C,gBACA,cACA,EAAE,QAAQ,OAAO,CACnB;CAEF,MAAM,uBAAuB,OAC3B,QACA,eAA+B,CAAC,MAEhC,MAAM,QACJ,GAAG,gBAAgB,aAAa,QAAQ,MAAM,UAC9C,gBACA,cACA,EAAE,QAAQ,OAAO,CACnB;;;;CAKF,MAAM,qBAAqB,OACzB,QACA,eAA+B,CAAC,MAEhC,MAAM,QACJ,GAAG,gBAAgB,gBACnB,gBACA,cACA;EAAE,QAAQ;EAAO;CAAO,CAC1B;;;;;CAMF,MAAM,kBAAkB,OACtB,QACA,eAA+B,CAAC,MAEhC,MAAM,QACJ,GAAG,gBAAgB,SACnB,gBACA,cACA;EAAE,QAAQ;EAAO;CAAO,CAC1B;;;;CAKF,MAAM,iBAAiB,OACrB,QACA,eAA+B,CAAC,MAEhC,MAAM,QACJ,GAAG,gBAAgB,SAAS,mBAAmB,QAAQ,QAAQ,EAAE,KACjE,gBACA,cACA,EAAE,QAAQ,MAAM,CAClB;CAEF,OAAO;EACL;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;CACF;AACF;;;;;;;AAQA,MAAa,gBAAgB,eAAe,WAAW"}

package/dist/esm/index.mjs

@@ -1,7 +1,7 @@
 import { BACKEND_INTERNAL_URL_ENVIRONMENT_VARIABLE, resolveInternalBackendUrl } from "./resolveInternalBackendUrl.mjs";
 import { FetcherError, fetcher, fetcherOptions } from "./fetcher.mjs";
 import { getOAuthAPI } from "./getIntlayerAPI/oAuth.mjs";
-import { createAuthManager } from "./cms/createAuthManager.mjs";
+import { clearAccessTokenCache, createAuthManager } from "./cms/createAuthManager.mjs";
 import { createEndpoint, createIntlayerCMS } from "./cms/createIntlayerCMS.mjs";
 import { aiEndpoint, getAiAPI } from "./getIntlayerAPI/ai.mjs";
 import { analyticsEndpoint, getAnalyticsAPI } from "./getIntlayerAPI/analytics.mjs";
@@ -29,4 +29,4 @@ import { fetchDistantDictionaries } from "./distantDictionary/fetchDistantDictio
 import { fetchDistantDictionary } from "./distantDictionary/fetchDistantDictionary.mjs";
 import { getIntlayerAPI } from "./getIntlayerAPI/index.mjs";
 
-export { BACKEND_INTERNAL_URL_ENVIRONMENT_VARIABLE, FetcherError, aiEndpoint, analyticsEndpoint, assetEndpoint, auditEndpoint, bitbucketEndpoint, createAuthManager, createEndpoint, createIntlayerCMS, dictionaryEndpoint, editorEndpoint, environmentEndpoint, fetchDistantDictionaries, fetchDistantDictionary, fetcher, fetcherOptions, getAiAPI, getAnalyticsAPI, getAssetAPI, getAuditAPI, getBitbucketAPI, getDictionaryAPI, getEditorAPI, getEnvironmentAPI, getGithubAPI, getGitlabAPI, getIntlayerAPI, getIntlayerAPIProxy, getNewsletterAPI, getOAuthAPI, getOrganizationAPI, getProjectAPI, getReviewerAPI, getSearchAPI, getShowcaseProjectAPI, getStatusAPI, getStripeAPI, getTagAPI, getTranslateAPI, getUserAPI, githubEndpoint, gitlabEndpoint, newsletterEndpoint, organizationEndpoint, projectEndpoint, resolveInternalBackendUrl, reviewerEndpoint, searchEndpoint, showcaseProjectEndpoint, statusEndpoint, stripeEndpoint, tagEndpoint, translateEndpoint, userEndpoint };
+export { BACKEND_INTERNAL_URL_ENVIRONMENT_VARIABLE, FetcherError, aiEndpoint, analyticsEndpoint, assetEndpoint, auditEndpoint, bitbucketEndpoint, clearAccessTokenCache, createAuthManager, createEndpoint, createIntlayerCMS, dictionaryEndpoint, editorEndpoint, environmentEndpoint, fetchDistantDictionaries, fetchDistantDictionary, fetcher, fetcherOptions, getAiAPI, getAnalyticsAPI, getAssetAPI, getAuditAPI, getBitbucketAPI, getDictionaryAPI, getEditorAPI, getEnvironmentAPI, getGithubAPI, getGitlabAPI, getIntlayerAPI, getIntlayerAPIProxy, getNewsletterAPI, getOAuthAPI, getOrganizationAPI, getProjectAPI, getReviewerAPI, getSearchAPI, getShowcaseProjectAPI, getStatusAPI, getStripeAPI, getTagAPI, getTranslateAPI, getUserAPI, githubEndpoint, gitlabEndpoint, newsletterEndpoint, organizationEndpoint, projectEndpoint, resolveInternalBackendUrl, reviewerEndpoint, searchEndpoint, showcaseProjectEndpoint, statusEndpoint, stripeEndpoint, tagEndpoint, translateEndpoint, userEndpoint };

package/dist/types/cms/createAuthManager.d.ts

@@ -11,6 +11,8 @@ type AsyncMethod<Arguments extends unknown[], Result> = (...args: Arguments) =>
  * fetcher options and the Intlayer configuration.
  */
 type SectionFactory<Section extends Record<string, unknown>> = (fetcherOptions: FetcherOptions, intlayerConfig: IntlayerConfig) => Section;
+/** Clears every cached access token, forcing the next call to re-authenticate. */
+export declare const clearAccessTokenCache: () => void;
 /**
  * Options accepted when creating an {@link AuthManager}.
  */
@@ -89,8 +91,8 @@ export type AuthManager = {
  * Creates an instance-scoped {@link AuthManager} handling the OAuth2
  * `client_credentials` flow (or a pre-issued CLI session token).
  *
- * Unlike a global token cache, each manager keeps its own token state, so
- * independent SDK instances never interfere with one another.
+ * Managers built with the same backend URL and credentials share one token
+ * state, so a process never exchanges credentials more than needed.
  *
  * @param intlayerConfig - Intlayer configuration carrying the `editor`
  * credentials. Defaults to the build-time configuration.

package/dist/types/cms/createAuthManager.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"createAuthManager.d.ts","names":[],"sources":["../../../src/cms/createAuthManager.ts"],"mappings":";;;;;;;KAuBK,YAAY,6BAA6B,cACzC,MAAM,cACN,QAAQ;;;;;KAMR,eAAe,gBAAgB,4BAClC,gBAAgB,gBAChB,gBAAgB,mBACb;;;;YA0CO;;;;EAIV,qBAAqB;;;;;;EAMrB;;;;;YAMU;;;;;EAKV;;;;;;;;;;YAWU;;;;;EAKV,gBAAgB;;;;EAIhB,gBAAgB;;;;;EAKhB;;;;;EAKA,kBAAkB;;;;EAIlB;;;;;EAKA,WAAW,6BAA6B,QACtC,QAAQ,YAAY,WAAW,SAC/B,uBACG,YAAY,WAAW;;;;;;;;;;;EAW5B,cAAc,gBAAgB,yBAC5B,SAAS,eAAe,UACxB,UAAU,uBACP;;;;;;;;;;;;;qBAcM,oBAAiB,iBACZ,KAAK,2BAAyB,UACrC,uBACR"}
+{"version":3,"file":"createAuthManager.d.ts","names":[],"sources":["../../../src/cms/createAuthManager.ts"],"mappings":";;;;;;;KAuBK,YAAY,6BAA6B,cACzC,MAAM,cACN,QAAQ;;;;;KAMR,eAAe,gBAAgB,4BAClC,gBAAgB,gBAChB,gBAAgB,mBACb;;qBAsBQ;;;;YA6ED;;;;EAIV,qBAAqB;;;;;;EAMrB;;;;;YAMU;;;;;EAKV;;;;;;;;;;YAWU;;;;;EAKV,gBAAgB;;;;EAIhB,gBAAgB;;;;;EAKhB;;;;;EAKA,kBAAkB;;;;EAIlB;;;;;EAKA,WAAW,6BAA6B,QACtC,QAAQ,YAAY,WAAW,SAC/B,uBACG,YAAY,WAAW;;;;;;;;;;;EAW5B,cAAc,gBAAgB,yBAC5B,SAAS,eAAe,UACxB,UAAU,uBACP;;;;;;;;;;;;;qBAcM,oBAAiB,iBACZ,KAAK,2BAAyB,UACrC,uBACR"}

package/dist/types/cms/index.d.ts

@@ -1,3 +1,3 @@
-import { AuthManager, AuthManagerOptions, BindSectionOptions, createAuthManager } from "./createAuthManager.js";
+import { AuthManager, AuthManagerOptions, BindSectionOptions, clearAccessTokenCache, createAuthManager } from "./createAuthManager.js";
 import { CMSEndpoint, IntlayerCMS, IntlayerCMSOptions, createEndpoint, createIntlayerCMS } from "./createIntlayerCMS.js";
-export { AuthManager, AuthManagerOptions, BindSectionOptions, CMSEndpoint, IntlayerCMS, IntlayerCMSOptions, createAuthManager, createEndpoint, createIntlayerCMS };
+export { AuthManager, AuthManagerOptions, BindSectionOptions, CMSEndpoint, IntlayerCMS, IntlayerCMSOptions, clearAccessTokenCache, createAuthManager, createEndpoint, createIntlayerCMS };

package/dist/types/getIntlayerAPI/analytics.d.ts

@@ -10,6 +10,7 @@ export declare const getAnalyticsAPI: (authAPIOptions?: FetcherOptions, intlayer
   getAudience: (range?: AudienceRange | number, otherOptions?: FetcherOptions) => Promise<GetAudienceResult>;
   getContentStats: (otherOptions?: FetcherOptions) => Promise<GetContentStatsResult>;
   getExperimentResults: (experimentKey: string, otherOptions?: FetcherOptions) => Promise<GetExperimentResultsResult>;
+  getPageMetadata: (url: string, otherOptions?: FetcherOptions) => Promise<GetPageMetadataResult>;
 };
 /**
  * Authenticated `analytics` endpoint bound to an Intlayer CMS authenticator.
@@ -23,6 +24,7 @@ export declare const analyticsEndpoint: CMSEndpoint<{
   getAudience: (range?: AudienceRange | number, otherOptions?: FetcherOptions) => Promise<GetAudienceResult>;
   getContentStats: (otherOptions?: FetcherOptions) => Promise<GetContentStatsResult>;
   getExperimentResults: (experimentKey: string, otherOptions?: FetcherOptions) => Promise<GetExperimentResultsResult>;
+  getPageMetadata: (url: string, otherOptions?: FetcherOptions) => Promise<GetPageMetadataResult>;
 }>;
 //#endregion
 //# sourceMappingURL=analytics.d.ts.map

package/dist/types/getIntlayerAPI/analytics.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"analytics.d.ts","names":[],"sources":["../../../src/getIntlayerAPI/analytics.ts"],"mappings":";;;;;;qBAca,kBAAe,iBACV,gBAAc,iBACb;EAaT,aAAA,MAAA,qBAAmB,eACX,mBAAc,QAAA;EAgBW,cAAA,eAAA,mBAAc,QAAA;EAgB9C,cAAA,QAAA,wBAAsB,eACf,mBAAc,QAAA;EAgBe,kBAAA,eAAA,mBAAc,QAAA;EAc1C,uBAAA,uBAAM,eACP,mBAAc,QAAA;;;;;;;;qBAwBnB,mBAxBmB;EAjEtB,aAAA,MAAA,qBAAmB,eACX,mBAAc,QAAA;EAgBW,cAAA,eAAA,mBAAc,QAAA;EAgB9C,cAAA,QAAA,wBAAsB,eACf,mBAAc,QAAA;EAgBe,kBAAA,eAAA,mBAAc,QAAA;EAc1C,uBAAA,uBAAM,eACP,mBAAc,QAAA"}
+{"version":3,"file":"analytics.d.ts","names":[],"sources":["../../../src/getIntlayerAPI/analytics.ts"],"mappings":";;;;;;qBAea,kBAAe,iBACV,gBAAc,iBACb;EAaT,aAAA,MAAA,qBAAmB,eACX,mBAAc,QAAA;EAgBW,cAAA,eAAA,mBAAc,QAAA;EAgB9C,cAAA,QAAA,wBAAsB,eACf,mBAAc,QAAA;EAgBe,kBAAA,eAAA,mBAAc,QAAA;EAc1C,uBAAA,uBAAM,eACP,mBAAc,QAAA;EAevB,kBAAA,aAAM,eACG,mBAAc,QAAA;;;;;;;;qBA4BnB,mBA5BmB;EAjFtB,aAAA,MAAA,qBAAmB,eACX,mBAAc,QAAA;EAgBW,cAAA,eAAA,mBAAc,QAAA;EAgB9C,cAAA,QAAA,wBAAsB,eACf,mBAAc,QAAA;EAgBe,kBAAA,eAAA,mBAAc,QAAA;EAc1C,uBAAA,uBAAM,eACP,mBAAc,QAAA;EAevB,kBAAA,aAAM,eACG,mBAAc,QAAA"}

package/dist/types/getIntlayerAPI/audit.d.ts

@@ -2,10 +2,15 @@ import { FetcherOptions } from "../fetcher.js";
 import { CMSEndpoint } from "../cms/createIntlayerCMS.js";
 import "../index.js";
 import { IntlayerConfig } from "@intlayer/types/config";
-import { AuditEvent, GetRecursiveAuditStatusResult, StartRecursiveAuditResult } from "@intlayer/backend";
+import { AuditEvent, GetRecursiveAuditStatusResult, GetScannedHostParams, GetScannedHostResult, GetScannedHostsQuery, GetScannedHostsResult, GetTechnologyUsageQuery, GetTechnologyUsageResult, StartRecursiveAuditResult } from "@intlayer/backend";
 //#region src/getIntlayerAPI/audit.d.ts
 export type ScanUrlBody = {
   url: string;
+  /**
+   * Force a new audit. Without it, a URL audited less than an hour ago is
+   * replayed from cache (its first event carries `cachedAt`).
+   */
+  refresh?: boolean;
   onMessage?: (event: AuditEvent) => void;
   onDone?: () => void;
 };
@@ -26,6 +31,9 @@ export type RecursiveAuditJobParams = {
   jobId: string;
 };
 export declare const getAuditAPI: (authAPIOptions?: FetcherOptions, intlayerConfig?: IntlayerConfig) => {
+  getTechnologyUsage: (params?: GetTechnologyUsageQuery, otherOptions?: FetcherOptions) => Promise<GetTechnologyUsageResult>;
+  getScannedHosts: (params?: GetScannedHostsQuery, otherOptions?: FetcherOptions) => Promise<GetScannedHostsResult>;
+  getScannedHost: (params?: GetScannedHostParams, otherOptions?: FetcherOptions) => Promise<GetScannedHostResult>;
   discoverUrls: (params?: DiscoverUrlsParams, otherOptions?: FetcherOptions) => Promise<DiscoverUrlsResult>;
   scanUrl: (body?: ScanUrlBody, otherOptions?: FetcherOptions) => Promise<void>;
   startRecursiveAudit: (body?: StartRecursiveAuditBody, otherOptions?: FetcherOptions) => Promise<StartRecursiveAuditResult>;
@@ -47,6 +55,9 @@ export declare const getAuditAPI: (authAPIOptions?: FetcherOptions, intlayerConf
  * the build-time configuration (`@intlayer/config/built`).
  */
 export declare const auditEndpoint: CMSEndpoint<{
+  getTechnologyUsage: (params?: GetTechnologyUsageQuery, otherOptions?: FetcherOptions) => Promise<GetTechnologyUsageResult>;
+  getScannedHosts: (params?: GetScannedHostsQuery, otherOptions?: FetcherOptions) => Promise<GetScannedHostsResult>;
+  getScannedHost: (params?: GetScannedHostParams, otherOptions?: FetcherOptions) => Promise<GetScannedHostResult>;
   discoverUrls: (params?: DiscoverUrlsParams, otherOptions?: FetcherOptions) => Promise<DiscoverUrlsResult>;
   scanUrl: (body?: ScanUrlBody, otherOptions?: FetcherOptions) => Promise<void>;
   startRecursiveAudit: (body?: StartRecursiveAuditBody, otherOptions?: FetcherOptions) => Promise<StartRecursiveAuditResult>;
@@ -62,5 +73,5 @@ export declare const auditEndpoint: CMSEndpoint<{
   }>;
 }>;
 //#endregion
-export type { AuditEvent, GetRecursiveAuditStatusResult, StartRecursiveAuditResult };
+export type { AuditEvent, GetRecursiveAuditStatusResult, GetScannedHostParams, GetScannedHostResult, GetScannedHostsQuery, GetScannedHostsResult, GetTechnologyUsageQuery, GetTechnologyUsageResult, StartRecursiveAuditResult };
 //# sourceMappingURL=audit.d.ts.map

package/dist/types/getIntlayerAPI/audit.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"audit.d.ts","names":[],"sources":["../../../src/getIntlayerAPI/audit.ts"],"mappings":";;;;;;YAgBY;EACV;EACA,aAAa,OAAO;EACpB;;YAGU;EACV;;YAGU;EACV;;YAGU;EACV;EACA;;YAGU;EACV;;YAGU;EACV;;qBAGW,cAAW,iBACN,gBAAc,iBACb;EAmBN,eAAA,SAAA,oBAAkB,eACb,mBAAc,QAAA;EAarB,UAAA,OAAA,aAAW,eACJ,mBAAc;EAsErB,sBAAA,OAAA,yBAAuB,eAChB,mBAAc,QAAA;EAiBnB,0BAAA,SAAA,+BAA6B,eACxB,mBAAc,QAAA;EAYnB,uBAAA,SAAA,yBAAuB,eAClB,mBAAc;IAEH;;EAQhB,sBAAA,SAAA,yBAAuB,eAClB,mBAAc;IAEH;;EAQhB,uBAAA,SAAA,yBAAuB,eAClB,mBAAc;IAEH;;;;;;;;;qBAwBhB,eA1BmB;EA3InB,eAAA,SAAA,oBAAkB,eACb,mBAAc,QAAA;EAarB,UAAA,OAAA,aAAW,eACJ,mBAAc;EAsErB,sBAAA,OAAA,yBAAuB,eAChB,mBAAc,QAAA;EAiBnB,0BAAA,SAAA,+BAA6B,eACxB,mBAAc,QAAA;EAYnB,uBAAA,SAAA,yBAAuB,eAClB,mBAAc;IAEH;;EAQhB,sBAAA,SAAA,yBAAuB,eAClB,mBAAc;IAEH;;EAQhB,uBAAA,SAAA,yBAAuB,eAClB,mBAAc;IAEH"}
+{"version":3,"file":"audit.d.ts","names":[],"sources":["../../../src/getIntlayerAPI/audit.ts"],"mappings":";;;;;;YA4BY;EACV;;;;;EAKA;EACA,aAAa,OAAO;EACpB;;YAGU;EACV;;YAGU;EACV;;YAGU;EACV;EACA;;YAGU;EACV;;YAGU;EACV;;qBAGW,cAAW,iBACN,gBAAc,iBACb;EA4KN,qBAAA,SAAA,yBAAuB,eAClB,mBAAc,QAAA;EAcnB,kBAAA,SAAA,sBAAoB,eACf,mBAAc,QAAA;EAanB,iBAAA,SAAA,sBAAoB,eACf,mBAAc,QAAA;EAvLnB,eAAA,SAAA,oBAAkB,eACb,mBAAc,QAAA;EAarB,UAAA,OAAA,aAAW,eACJ,mBAAc;EAuErB,sBAAA,OAAA,yBAAuB,eAChB,mBAAc,QAAA;EAiBnB,0BAAA,SAAA,+BAA6B,eACxB,mBAAc,QAAA;EAYnB,uBAAA,SAAA,yBAAuB,eAClB,mBAAc;IAEH;;EAQhB,sBAAA,SAAA,yBAAuB,eAClB,mBAAc;IAEH;;EAQhB,uBAAA,SAAA,yBAAuB,eAClB,mBAAc;IAEH;;;;;;;;;qBAsEhB,eAxEmB;EAanB,qBAAA,SAAA,yBAAuB,eAClB,mBAAc,QAAA;EAcnB,kBAAA,SAAA,sBAAoB,eACf,mBAAc,QAAA;EAanB,iBAAA,SAAA,sBAAoB,eACf,mBAAc,QAAA;EAvLnB,eAAA,SAAA,oBAAkB,eACb,mBAAc,QAAA;EAarB,UAAA,OAAA,aAAW,eACJ,mBAAc;EAuErB,sBAAA,OAAA,yBAAuB,eAChB,mBAAc,QAAA;EAiBnB,0BAAA,SAAA,+BAA6B,eACxB,mBAAc,QAAA;EAYnB,uBAAA,SAAA,yBAAuB,eAClB,mBAAc;IAEH;;EAQhB,sBAAA,SAAA,yBAAuB,eAClB,mBAAc;IAEH;;EAQhB,uBAAA,SAAA,yBAAuB,eAClB,mBAAc;IAEH"}

package/dist/types/index.d.ts

@@ -1,5 +1,5 @@
 import { FetcherError, FetcherOptions, fetcher, fetcherOptions } from "./fetcher.js";
-import { AuthManager, AuthManagerOptions, BindSectionOptions, createAuthManager } from "./cms/createAuthManager.js";
+import { AuthManager, AuthManagerOptions, BindSectionOptions, clearAccessTokenCache, createAuthManager } from "./cms/createAuthManager.js";
 import { CMSEndpoint, IntlayerCMS, IntlayerCMSOptions, createEndpoint, createIntlayerCMS } from "./cms/createIntlayerCMS.js";
 import "./cms/index.js";
 import { fetchDistantDictionaries } from "./distantDictionary/fetchDistantDictionaries.js";
@@ -7,7 +7,7 @@ import { fetchDistantDictionary } from "./distantDictionary/fetchDistantDictiona
 import "./distantDictionary/index.js";
 import { analyticsEndpoint, getAnalyticsAPI } from "./getIntlayerAPI/analytics.js";
 import { assetEndpoint, getAssetAPI } from "./getIntlayerAPI/asset.js";
-import { AuditEvent, DiscoverUrlsParams, DiscoverUrlsResult, GetRecursiveAuditStatusParams, GetRecursiveAuditStatusResult, RecursiveAuditJobParams, ScanUrlBody, StartRecursiveAuditBody, StartRecursiveAuditResult, auditEndpoint, getAuditAPI } from "./getIntlayerAPI/audit.js";
+import { AuditEvent, DiscoverUrlsParams, DiscoverUrlsResult, GetRecursiveAuditStatusParams, GetRecursiveAuditStatusResult, GetScannedHostParams, GetScannedHostResult, GetScannedHostsQuery, GetScannedHostsResult, GetTechnologyUsageQuery, GetTechnologyUsageResult, RecursiveAuditJobParams, ScanUrlBody, StartRecursiveAuditBody, StartRecursiveAuditResult, auditEndpoint, getAuditAPI } from "./getIntlayerAPI/audit.js";
 import { BitbucketAuthCallbackBody, BitbucketAuthCallbackResult, BitbucketCheckConfigBody, BitbucketCheckConfigResult, BitbucketGetAuthUrlResult, BitbucketGetConfigFileBody, BitbucketGetConfigFileResult, BitbucketListReposResult, BitbucketRepository, bitbucketEndpoint, getBitbucketAPI } from "./getIntlayerAPI/bitbucket.js";
 import { dictionaryEndpoint, getDictionaryAPI } from "./getIntlayerAPI/dictionary.js";
 import { editorEndpoint, getEditorAPI } from "./getIntlayerAPI/editor.js";
@@ -31,4 +31,4 @@ import { IntlayerAPIProxy, getIntlayerAPIProxy } from "./proxy.js";
 import { BACKEND_INTERNAL_URL_ENVIRONMENT_VARIABLE, resolveInternalBackendUrl } from "./resolveInternalBackendUrl.js";
 import { AIOptions } from "./types.js";
 import { AskDocQuestionBody, AskDocQuestionResult, AutocompleteBody, ChatBody, ChatResult, ClientAction, aiEndpoint, getAiAPI } from "./getIntlayerAPI/ai.js";
-export { type AIOptions, AskDocQuestionBody, type AskDocQuestionResult, type AuditEvent, AuthManager, AuthManagerOptions, AutocompleteBody, BACKEND_INTERNAL_URL_ENVIRONMENT_VARIABLE, BindSectionOptions, BitbucketAuthCallbackBody, BitbucketAuthCallbackResult, BitbucketCheckConfigBody, BitbucketCheckConfigResult, BitbucketGetAuthUrlResult, BitbucketGetConfigFileBody, BitbucketGetConfigFileResult, BitbucketListReposResult, BitbucketRepository, CMSEndpoint, ChatBody, type ChatResult, ClientAction, DiscoverUrlsParams, DiscoverUrlsResult, FetcherError, FetcherOptions, GetDemoSessionResult, GetRecursiveAuditStatusParams, type GetRecursiveAuditStatusResult, GitHubAuthCallbackBody, GitHubAuthCallbackResult, GitHubCheckConfigBody, GitHubCheckConfigResult, GitHubGetAuthUrlResult, GitHubGetConfigFileBody, GitHubGetConfigFileResult, GitHubGetTokenResult, GitHubListReposResult, GitHubRepository, GitLabAuthCallbackBody, GitLabAuthCallbackResult, GitLabCheckConfigBody, GitLabCheckConfigResult, GitLabGetAuthUrlResult, GitLabGetConfigFileBody, GitLabGetConfigFileResult, GitLabListProjectsResult, GitLabProject, IntlayerAPI, IntlayerAPIProxy, IntlayerCMS, IntlayerCMSOptions, OtherShowcaseProjectsQuery, RecursiveAuditJobParams, ScanUrlBody, ShowcaseProjectsQuery, StartRecursiveAuditBody, type StartRecursiveAuditResult, type TranslateDictionariesBody, type TranslateDictionariesResult, aiEndpoint, analyticsEndpoint, assetEndpoint, auditEndpoint, bitbucketEndpoint, createAuthManager, createEndpoint, createIntlayerCMS, dictionaryEndpoint, editorEndpoint, environmentEndpoint, fetchDistantDictionaries, fetchDistantDictionary, fetcher, fetcherOptions, getAiAPI, getAnalyticsAPI, getAssetAPI, getAuditAPI, getBitbucketAPI, getDictionaryAPI, getEditorAPI, getEnvironmentAPI, getGithubAPI, getGitlabAPI, getIntlayerAPI, getIntlayerAPIProxy, getNewsletterAPI, getOAuthAPI, getOrganizationAPI, getProjectAPI, getReviewerAPI, getSearchAPI, getShowcaseProjectAPI, getStatusAPI, getStripeAPI, getTagAPI, getTranslateAPI, getUserAPI, githubEndpoint, gitlabEndpoint, newsletterEndpoint, organizationEndpoint, projectEndpoint, resolveInternalBackendUrl, reviewerEndpoint, searchEndpoint, showcaseProjectEndpoint, statusEndpoint, stripeEndpoint, tagEndpoint, translateEndpoint, userEndpoint };
+export { type AIOptions, AskDocQuestionBody, type AskDocQuestionResult, type AuditEvent, AuthManager, AuthManagerOptions, AutocompleteBody, BACKEND_INTERNAL_URL_ENVIRONMENT_VARIABLE, BindSectionOptions, BitbucketAuthCallbackBody, BitbucketAuthCallbackResult, BitbucketCheckConfigBody, BitbucketCheckConfigResult, BitbucketGetAuthUrlResult, BitbucketGetConfigFileBody, BitbucketGetConfigFileResult, BitbucketListReposResult, BitbucketRepository, CMSEndpoint, ChatBody, type ChatResult, ClientAction, DiscoverUrlsParams, DiscoverUrlsResult, FetcherError, FetcherOptions, GetDemoSessionResult, GetRecursiveAuditStatusParams, type GetRecursiveAuditStatusResult, type GetScannedHostParams, type GetScannedHostResult, type GetScannedHostsQuery, type GetScannedHostsResult, type GetTechnologyUsageQuery, type GetTechnologyUsageResult, GitHubAuthCallbackBody, GitHubAuthCallbackResult, GitHubCheckConfigBody, GitHubCheckConfigResult, GitHubGetAuthUrlResult, GitHubGetConfigFileBody, GitHubGetConfigFileResult, GitHubGetTokenResult, GitHubListReposResult, GitHubRepository, GitLabAuthCallbackBody, GitLabAuthCallbackResult, GitLabCheckConfigBody, GitLabCheckConfigResult, GitLabGetAuthUrlResult, GitLabGetConfigFileBody, GitLabGetConfigFileResult, GitLabListProjectsResult, GitLabProject, IntlayerAPI, IntlayerAPIProxy, IntlayerCMS, IntlayerCMSOptions, OtherShowcaseProjectsQuery, RecursiveAuditJobParams, ScanUrlBody, ShowcaseProjectsQuery, StartRecursiveAuditBody, type StartRecursiveAuditResult, type TranslateDictionariesBody, type TranslateDictionariesResult, aiEndpoint, analyticsEndpoint, assetEndpoint, auditEndpoint, bitbucketEndpoint, clearAccessTokenCache, createAuthManager, createEndpoint, createIntlayerCMS, dictionaryEndpoint, editorEndpoint, environmentEndpoint, fetchDistantDictionaries, fetchDistantDictionary, fetcher, fetcherOptions, getAiAPI, getAnalyticsAPI, getAssetAPI, getAuditAPI, getBitbucketAPI, getDictionaryAPI, getEditorAPI, getEnvironmentAPI, getGithubAPI, getGitlabAPI, getIntlayerAPI, getIntlayerAPIProxy, getNewsletterAPI, getOAuthAPI, getOrganizationAPI, getProjectAPI, getReviewerAPI, getSearchAPI, getShowcaseProjectAPI, getStatusAPI, getStripeAPI, getTagAPI, getTranslateAPI, getUserAPI, githubEndpoint, gitlabEndpoint, newsletterEndpoint, organizationEndpoint, projectEndpoint, resolveInternalBackendUrl, reviewerEndpoint, searchEndpoint, showcaseProjectEndpoint, statusEndpoint, stripeEndpoint, tagEndpoint, translateEndpoint, userEndpoint };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@intlayer/api",
-  "version": "9.5.10",
+  "version": "9.5.12",
   "private": false,
   "description": "SDK for interacting with the Intlayer API, enabling content auditing, and managing organizations, projects, and users.",
   "keywords": [
@@ -265,8 +265,8 @@
     "typecheck": "tsc --noEmit --project tsconfig.types.json"
   },
   "dependencies": {
-    "@intlayer/config": "9.5.10",
-    "@intlayer/types": "9.5.10",
+    "@intlayer/config": "9.5.12",
+    "@intlayer/types": "9.5.12",
     "defu": "6.1.7"
   },
   "devDependencies": {