@kortix/sdk 0.12.7 → 0.13.0

package/dist/core/http/abort-error.js

@@ -0,0 +1,190 @@
+/**
+ * The one abort classifier. Every producer of an "this turn was aborted"
+ * error in this codebase — the SDK's own optimistic patch, the real opencode
+ * wire error, and a plain `AbortController`/`fetch` abort — ends up here.
+ *
+ * Before this file, FOUR divergent detectors existed across `apps/web` and
+ * this package: an identity read, a prose sniff with its own pattern lists, a
+ * duck-typed name/message check, and a loose `/abort/i` regex. They agreed
+ * often enough to hide the disagreements — e.g. `/abort/i` matches "aborted"
+ * as a substring of a transport-failure message ("upstream unreachable …
+ * The operation was aborted"), mislabeling a real failure as a user-initiated
+ * stop. `isAbortError` is the single, documented replacement.
+ *
+ * Producers (studied, not guessed):
+ * - `SyntheticAbortError` — the client-synthesized marker patched onto a
+ *   message when the user hits Stop, or when a runtime disposes mid-stream.
+ *   `{ name: "AbortError", data: { message: string } }`. See
+ *   `react/use-session-send.ts` (`applyOptimisticAbort`) and
+ *   `react/use-opencode-events/use-event-stream-refs.ts`
+ *   (`markSessionAbortedLocally`).
+ * - `MessageAbortedError` — the real opencode wire shape, one member of
+ *   `AssistantMessage['error']` (`@opencode-ai/sdk` `types.gen.d.ts`).
+ *   `{ name: "MessageAbortedError", data: { message: string } }`.
+ * - A `DOMException`/`Error`-shaped `AbortError` from a real
+ *   `AbortController`/`fetch` abort. `.name === "AbortError"`.
+ */
+/** Error names whose mere presence identifies an abort, no text sniff needed. */
+const ABORT_ERROR_NAMES = new Set(['AbortError', 'MessageAbortedError']);
+/**
+ * Phrases that mean a HUMAN stopped this, not that a connection died.
+ *
+ * Phrases, never bare words: "aborted" is a substring of transport-failure
+ * messages too ("The operation was aborted" is exactly how an aborted fetch
+ * against an unreachable upstream describes itself), so a substring alone is
+ * not evidence of intent.
+ */
+const ABORT_TEXT_PATTERNS = [
+    'operation was aborted',
+    'aborted by user',
+    'interrupted by user',
+    'cancelled by user',
+    'canceled by user',
+    'request was cancelled',
+    'request was canceled',
+    'aborterror',
+];
+/**
+ * Words that mean the TRANSPORT failed. Their presence disqualifies the text
+ * sniff outright, however abort-ish the rest of the prose reads.
+ */
+const TRANSPORT_FAILURE_TEXT_PATTERNS = [
+    'unreachable',
+    'upstream',
+    'econnreset',
+    'econnrefused',
+    'socket hang up',
+    'network',
+    'fetch failed',
+    'timed out',
+    'timeout',
+    'gateway',
+    '502',
+    '503',
+    '504',
+];
+/**
+ * LAST RESORT ONLY — a substring sniff over arbitrary error prose. Used
+ * internally by `isAbortError` when no `name` identity is available (a bare
+ * string caller) or when `name` doesn't match a known abort shape but the
+ * error's own nested text does (some producers carry an abort-ish message
+ * under an unrelated/unknown `name`).
+ */
+function looksLikeAbortText(text) {
+    const lower = text.toLowerCase();
+    if (TRANSPORT_FAILURE_TEXT_PATTERNS.some((p) => lower.includes(p)))
+        return false;
+    return ABORT_TEXT_PATTERNS.some((p) => lower.includes(p));
+}
+/** The text a structured error carries about itself — `data.message` (the
+ *  shape every producer above uses) or a bare top-level `message`. */
+function nestedErrorText(rec) {
+    const data = rec.data;
+    const dataMessage = data && typeof data === 'object' ? data.message : undefined;
+    if (typeof dataMessage === 'string')
+        return dataMessage;
+    return typeof rec.message === 'string' ? rec.message : undefined;
+}
+/**
+ * Was this error an abort — a user-initiated stop, or a client-synthesized
+ * stand-in for one — as opposed to a genuine failure?
+ *
+ * Identity first: a `name` matching a known abort shape (`AbortError`,
+ * `MessageAbortedError`) is always an abort, regardless of message text.
+ * Falls back to sniffing the error's own nested text only when identity
+ * doesn't resolve it — a plain string (the last-resort case: a caller that
+ * only has a formatted display message, not the original structured error),
+ * or a structured error whose `name` doesn't match but whose message reads
+ * as an abort anyway.
+ */
+export function isAbortError(error) {
+    if (typeof error === 'string')
+        return looksLikeAbortText(error);
+    if (!error || typeof error !== 'object')
+        return false;
+    const rec = error;
+    const name = rec.name;
+    if (typeof name === 'string' && ABORT_ERROR_NAMES.has(name))
+        return true;
+    const text = nestedErrorText(rec);
+    return typeof text === 'string' ? looksLikeAbortText(text) : false;
+}
+/**
+ * Every value a producer can stamp into `data.reason` on a
+ * `SyntheticAbortError` — the machine-readable WHY behind an abort, read by
+ * `abortErrorReason` below. Closed on purpose: a renderer branches on this
+ * value (`'user'` → show "Interrupted", anything else → show nothing), so a
+ * free-text reason would not fail loudly, it would just silently render
+ * wrong.
+ */
+export const ABORT_REASONS = [
+    /** `applyOptimisticAbort` (`react/use-session-send.ts`) — a real user Stop
+     *  click, patched instantly so the "Interrupted" row appears before the
+     *  SSE round-trip. */
+    'user',
+    /** `markSessionAbortedLocally` (`react/use-opencode-events/use-event-stream-refs.ts`),
+     *  invoked from the `server.instance.disposed` handler in `handle-event.ts`.
+     *  Pure infrastructure — OpenCode disposed and respawned mid-stream — for
+     *  EVERY non-idle session in the tab, not a user action. Must render
+     *  nothing: a respawn that recovers cleanly should not scar the transcript. */
+    'runtime-disposed',
+    /** NOT YET EMITTED — see `ABORT_REASONS_NOT_YET_EMITTED` below. */
+    'orphan-finalized',
+    /** NOT YET EMITTED — see `ABORT_REASONS_NOT_YET_EMITTED` below. */
+    'wake',
+];
+/**
+ * Members that NO code path writes today. Read this before reading a zero.
+ *
+ * `'orphan-finalized'` is reserved for the sandbox daemon's orphan-turn
+ * finalizer (`apps/kortix-sandbox-agent-server/src/main.ts`,
+ * `finalizeOrphanedTurn` / `abortOpencodeTurn`). That finalizer aborts through
+ * OpenCode's OWN `/session/{id}/abort` REST endpoint — a bare `POST` with no
+ * body — so the resulting `MessageAbortedError` is entirely opencode's wire
+ * shape. There is no hook to inject a client-chosen `data.reason` into it;
+ * doing so would mean forking opencode's abort response, which is worse than
+ * leaving it untagged. So a genuine wire abort (no synthetic patch involved)
+ * stays reason-less on purpose — see `abortErrorReason`'s doc comment.
+ *
+ * `'wake'` is reserved for a not-yet-built producer (a session woken from a
+ * park mid-turn) and is declared ahead of that work for the same reason
+ * `apps/api/src/projects/stop-reason.ts` pre-declares `idle_grace` /
+ * `boot_floor_expired`: a renderer branching on this union should see a
+ * closed set, not discover a new member via a runtime string it never typed.
+ */
+export const ABORT_REASONS_NOT_YET_EMITTED = [
+    'orphan-finalized',
+    'wake',
+];
+/**
+ * The machine-readable reason an abort happened, when the producer sent one
+ * (`data.reason`, e.g. `'runtime-disposed'`). Set by `applyOptimisticAbort`
+ * (`'user'`) and `markSessionAbortedLocally` (`'runtime-disposed'`). A real
+ * opencode wire `MessageAbortedError` — the daemon's own `/abort` call, see
+ * `ABORT_REASONS_NOT_YET_EMITTED` above — carries no `data.reason` and never
+ * will, so this returns `undefined` for it: that is a genuine, once-only
+ * cut turn, not a fabricated marker, and callers render it as "Interrupted"
+ * exactly like a `reason: 'user'` abort. Returns `undefined` when absent,
+ * never a guess.
+ *
+ * Validated against `ABORT_REASONS`, not merely typed as `string`: a
+ * renderer branches on this value (`'user'` → "Interrupted", anything else →
+ * nothing), so an unrecognized/typo'd string previously reached that branch
+ * unfiltered and silently suppressed the error UI. An unknown value now
+ * returns `undefined` — the same safe default as a reason-less real wire
+ * abort — instead of propagating an unvalidated string.
+ */
+export function abortErrorReason(error) {
+    if (!error || typeof error !== 'object')
+        return undefined;
+    const data = error.data;
+    if (!data || typeof data !== 'object')
+        return undefined;
+    const reason = data.reason;
+    if (typeof reason !== 'string' || !reason)
+        return undefined;
+    return ABORT_REASONS.includes(reason)
+        ? reason
+        : undefined;
+}
+//# sourceMappingURL=abort-error.js.map

package/dist/core/http/abort-error.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"abort-error.js","sourceRoot":"","sources":["../../../src/core/http/abort-error.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAEH,iFAAiF;AACjF,MAAM,iBAAiB,GAAG,IAAI,GAAG,CAAC,CAAC,YAAY,EAAE,qBAAqB,CAAC,CAAC,CAAC;AAEzE;;;;;;;GAOG;AACH,MAAM,mBAAmB,GAAG;IAC1B,uBAAuB;IACvB,iBAAiB;IACjB,qBAAqB;IACrB,mBAAmB;IACnB,kBAAkB;IAClB,uBAAuB;IACvB,sBAAsB;IACtB,YAAY;CACb,CAAC;AAEF;;;GAGG;AACH,MAAM,+BAA+B,GAAG;IACtC,aAAa;IACb,UAAU;IACV,YAAY;IACZ,cAAc;IACd,gBAAgB;IAChB,SAAS;IACT,cAAc;IACd,WAAW;IACX,SAAS;IACT,SAAS;IACT,KAAK;IACL,KAAK;IACL,KAAK;CACN,CAAC;AAEF;;;;;;GAMG;AACH,SAAS,kBAAkB,CAAC,IAAY;IACtC,MAAM,KAAK,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;IACjC,IAAI,+BAA+B,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IACjF,OAAO,mBAAmB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;AAC5D,CAAC;AAED;sEACsE;AACtE,SAAS,eAAe,CAAC,GAA4B;IACnD,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,CAAC;IACtB,MAAM,WAAW,GACf,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAE,IAAgC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;IAC3F,IAAI,OAAO,WAAW,KAAK,QAAQ;QAAE,OAAO,WAAW,CAAC;IACxD,OAAO,OAAO,GAAG,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;AACnE,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,YAAY,CAAC,KAAc;IACzC,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,kBAAkB,CAAC,KAAK,CAAC,CAAC;IAChE,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAEtD,MAAM,GAAG,GAAG,KAAgC,CAAC;IAC7C,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,CAAC;IACtB,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,iBAAiB,CAAC,GAAG,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IAEzE,MAAM,IAAI,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC;IAClC,OAAO,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,kBAAkB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;AACrE,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,aAAa,GAAG;IAC3B;;0BAEsB;IACtB,MAAM;IACN;;;;mFAI+E;IAC/E,kBAAkB;IAClB,mEAAmE;IACnE,kBAAkB;IAClB,mEAAmE;IACnE,MAAM;CACE,CAAC;AAIX;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,CAAC,MAAM,6BAA6B,GAAG;IAC3C,kBAAkB;IAClB,MAAM;CACmC,CAAC;AAE5C;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,UAAU,gBAAgB,CAAC,KAAc;IAC7C,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC;IAC1D,MAAM,IAAI,GAAI,KAAiC,CAAC,IAAI,CAAC;IACrD,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC;IACxD,MAAM,MAAM,GAAI,IAAgC,CAAC,MAAM,CAAC;IACxD,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,CAAC,MAAM;QAAE,OAAO,SAAS,CAAC;IAC5D,OAAQ,aAAmC,CAAC,QAAQ,CAAC,MAAM,CAAC;QAC1D,CAAC,CAAE,MAAsB;QACzB,CAAC,CAAC,SAAS,CAAC;AAChB,CAAC"}

package/dist/core/http/api-client.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"api-client.d.ts","sourceRoot":"","sources":["../../../src/core/http/api-client.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,QAAQ,EAAsD,MAAM,cAAc,CAAC;AAS5F,OAAO,EACL,QAAQ,EACR,SAAS,EACT,YAAY,EACZ,oBAAoB,EACpB,iBAAiB,EACjB,cAAc,EACd,uBAAuB,EACvB,qBAAqB,EACrB,sBAAsB,EACtB,kBAAkB,EAClB,KAAK,cAAc,EACnB,KAAK,cAAc,EACnB,KAAK,oBAAoB,GAC1B,MAAM,cAAc,CAAC;AAEtB,MAAM,WAAW,YAAY;IAC3B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB;AAED,MAAM,WAAW,gBAAgB;IAC/B,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,YAAY,CAAC,EAAE,YAAY,CAAC;IAC5B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB;;;;;;;;;;;;OAYG;IACH,KAAK,CAAC,EAAE,CAAC,KAAK,EAAE,WAAW,GAAG,GAAG,EAAE,IAAI,CAAC,EAAE,WAAW,KAAK,OAAO,CAAC,QAAQ,CAAC,CAAC;CAC7E;AAED,MAAM,WAAW,WAAW,CAAC,CAAC,GAAG,GAAG;IAClC,IAAI,CAAC,EAAE,CAAC,CAAC;IACT,KAAK,CAAC,EAAE,QAAQ,CAAC;IACjB,OAAO,EAAE,OAAO,CAAC;CAClB;AAED;;;;;;;GAOG;AACH,eAAO,MAAM,0BAA0B,0BAA0B,CAAC;AAElE;;;;;;;;;;;;;;GAcG;AACH,eAAO,MAAM,uBAAuB,uBAAuB,CAAC;AAE5D;;;;;;;;;;;;;;;;GAgBG;AACH,eAAO,MAAM,wBAAwB,wBAAwB,CAAC;AAuD9D,wBAAgB,cAAc,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,CAErD;AAED,wBAAgB,oBAAoB,IAAI,OAAO,CAE9C;AA0UD,eAAO,MAAM,cAAc;YACX,CAAC,iBACJ,MAAM,OAAO,CAAC;QAAE,IAAI,EAAE,CAAC,GAAG,IAAI,CAAC;QAAC,KAAK,EAAE,GAAG,CAAA;KAAE,CAAC,iBACvC,YAAY,GAC1B,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC;CAuC3B,CAAC;AAEF;;;;;;;;;;;;;;;;;;;GAmBG;AACH,iBAAe,UAAU,CACvB,QAAQ,EAAE,MAAM,EAChB,IAAI,EAAE,OAAO,EACb,OAAO,GAAE,gBAAqB,GAC7B,OAAO,CAAC,QAAQ,CAAC,CA0BnB;AAED,eAAO,MAAM,UAAU;UACf,CAAC,kBACK,MAAM,YACN,IAAI,CAAC,WAAW,GAAG,gBAAgB,EAAE,QAAQ,GAAG,MAAM,CAAC;WAG5D,CAAC,kBACI,MAAM,SACT,GAAG,YACA,IAAI,CAAC,WAAW,GAAG,gBAAgB,EAAE,QAAQ,CAAC;UAQpD,CAAC,kBACK,MAAM,SACT,GAAG,YACA,IAAI,CAAC,WAAW,GAAG,gBAAgB,EAAE,QAAQ,CAAC;YAQlD,CAAC,kBACG,MAAM,SACT,GAAG,YACA,IAAI,CAAC,WAAW,GAAG,gBAAgB,EAAE,QAAQ,CAAC;aAQjD,CAAC,kBACE,MAAM,YACN,IAAI,CAAC,WAAW,GAAG,gBAAgB,EAAE,QAAQ,GAAG,MAAM,CAAC;aAO1D,CAAC,kBACE,MAAM,YACN,QAAQ,YACR,IAAI,CAAC,WAAW,GAAG,gBAAgB,EAAE,QAAQ,GAAG,MAAM,CAAC;gBAcvD,CAAC,kBACD,MAAM,YACN,QAAQ,YACR,IAAI,CAAC,WAAW,GAAG,gBAAgB,EAAE,QAAQ,GAAG,MAAM,CAAC;;CAepE,CAAC"}
+{"version":3,"file":"api-client.d.ts","sourceRoot":"","sources":["../../../src/core/http/api-client.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,QAAQ,EAAsD,MAAM,cAAc,CAAC;AAU5F,OAAO,EACL,QAAQ,EACR,SAAS,EACT,YAAY,EACZ,oBAAoB,EACpB,iBAAiB,EACjB,cAAc,EACd,uBAAuB,EACvB,qBAAqB,EACrB,sBAAsB,EACtB,kBAAkB,EAClB,KAAK,cAAc,EACnB,KAAK,cAAc,EACnB,KAAK,oBAAoB,GAC1B,MAAM,cAAc,CAAC;AAEtB,MAAM,WAAW,YAAY;IAC3B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB;AAED,MAAM,WAAW,gBAAgB;IAC/B,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,YAAY,CAAC,EAAE,YAAY,CAAC;IAC5B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB;;;;;;;;;;;;OAYG;IACH,KAAK,CAAC,EAAE,CAAC,KAAK,EAAE,WAAW,GAAG,GAAG,EAAE,IAAI,CAAC,EAAE,WAAW,KAAK,OAAO,CAAC,QAAQ,CAAC,CAAC;CAC7E;AAED,MAAM,WAAW,WAAW,CAAC,CAAC,GAAG,GAAG;IAClC,IAAI,CAAC,EAAE,CAAC,CAAC;IACT,KAAK,CAAC,EAAE,QAAQ,CAAC;IACjB,OAAO,EAAE,OAAO,CAAC;CAClB;AAED;;;;;;;GAOG;AACH,eAAO,MAAM,0BAA0B,0BAA0B,CAAC;AAElE;;;;;;;;;;;;;;GAcG;AACH,eAAO,MAAM,uBAAuB,uBAAuB,CAAC;AAE5D;;;;;;;;;;;;;;;;GAgBG;AACH,eAAO,MAAM,wBAAwB,wBAAwB,CAAC;AAuD9D,wBAAgB,cAAc,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,CAErD;AAED,wBAAgB,oBAAoB,IAAI,OAAO,CAE9C;AA8VD,eAAO,MAAM,cAAc;YACX,CAAC,iBACJ,MAAM,OAAO,CAAC;QAAE,IAAI,EAAE,CAAC,GAAG,IAAI,CAAC;QAAC,KAAK,EAAE,GAAG,CAAA;KAAE,CAAC,iBACvC,YAAY,GAC1B,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC;CAuC3B,CAAC;AAEF;;;;;;;;;;;;;;;;;;;GAmBG;AACH,iBAAe,UAAU,CACvB,QAAQ,EAAE,MAAM,EAChB,IAAI,EAAE,OAAO,EACb,OAAO,GAAE,gBAAqB,GAC7B,OAAO,CAAC,QAAQ,CAAC,CA8BnB;AAED,eAAO,MAAM,UAAU;UACf,CAAC,kBACK,MAAM,YACN,IAAI,CAAC,WAAW,GAAG,gBAAgB,EAAE,QAAQ,GAAG,MAAM,CAAC;WAG5D,CAAC,kBACI,MAAM,SACT,GAAG,YACA,IAAI,CAAC,WAAW,GAAG,gBAAgB,EAAE,QAAQ,CAAC;UAQpD,CAAC,kBACK,MAAM,SACT,GAAG,YACA,IAAI,CAAC,WAAW,GAAG,gBAAgB,EAAE,QAAQ,CAAC;YAQlD,CAAC,kBACG,MAAM,SACT,GAAG,YACA,IAAI,CAAC,WAAW,GAAG,gBAAgB,EAAE,QAAQ,CAAC;aAQjD,CAAC,kBACE,MAAM,YACN,IAAI,CAAC,WAAW,GAAG,gBAAgB,EAAE,QAAQ,GAAG,MAAM,CAAC;aAO1D,CAAC,kBACE,MAAM,YACN,QAAQ,YACR,IAAI,CAAC,WAAW,GAAG,gBAAgB,EAAE,QAAQ,GAAG,MAAM,CAAC;gBAcvD,CAAC,kBACD,MAAM,YACN,QAAQ,YACR,IAAI,CAAC,WAAW,GAAG,gBAAgB,EAAE,QAAQ,GAAG,MAAM,CAAC;;CAepE,CAAC"}

package/dist/core/http/api-client.js

@@ -2,6 +2,7 @@ import { normalizeClientSource } from '../../platform/auth-core.js';
 import { getSupabaseAccessTokenWithRetry } from './auth.js';
 import { ApiError, AuthError, parseBillingError, RequestTooLargeError } from './api/errors.js';
 import { platformConfig } from './config.js';
+import { impersonationHeaders } from './impersonation.js';
 const getApiUrl = () => platformConfig().backendUrl || '';
 // Ported from web's error-handler. User-facing error handling is routed
 // through platformConfig().onError?.() instead of web's handleApiError.
@@ -130,6 +131,11 @@ async function makeRequest(url, options = {}) {
         if (adminBypassEnabled) {
             headers['x-kortix-admin-bypass'] = '1';
         }
+        // Act-as: while a platform admin holds a live grant, EVERY platform request
+        // from this tab carries it, exactly as the banner claims. Attached after the
+        // caller's own headers so a call site cannot accidentally drop it, and
+        // before `Authorization` because the server validates the pair together.
+        Object.assign(headers, impersonationHeaders(url));
         if (token) {
             headers['Authorization'] = `Bearer ${token}`;
         }
@@ -196,10 +202,19 @@ async function makeRequest(url, options = {}) {
             let errorData = null;
             try {
                 errorData = await response.json();
-                if (typeof errorData.reason === 'string') {
-                    errorMessage = errorData.reason;
-                }
-                else if (typeof errorData.message === 'string') {
+                // ORDER MATTERS, and `reason` is LAST on purpose.
+                //
+                // A Kortix error body pairs a machine slug with the sentence written for
+                // the user, e.g. the 409 from `POST /sessions/:id/restart`:
+                //   { error: "The original sandbox is unavailable. …",
+                //     code: "SESSION_RUNTIME_IDENTITY_UNAVAILABLE",
+                //     reason: "runtime_identity_unavailable" }
+                // `reason` used to be read first, so that customer saw the bare slug
+                // `runtime_identity_unavailable` as the card detail AND the toast.
+                // Not one `reason` value in the API is a sentence — they are all
+                // snake_case slugs — so preferring it could only ever downgrade the
+                // message. Branch on `code` (kept below); render the human field.
+                if (typeof errorData.message === 'string') {
                     errorMessage = errorData.message;
                 }
                 else if (errorData.error && typeof errorData.error === 'string') {
@@ -212,6 +227,11 @@ async function makeRequest(url, options = {}) {
                 else if (typeof errorData.detail?.message === 'string') {
                     errorMessage = errorData.detail.message;
                 }
+                else if (typeof errorData.reason === 'string') {
+                    // Last resort: a body with no prose at all still says something more
+                    // useful than `HTTP 409: Conflict`.
+                    errorMessage = errorData.reason;
+                }
             }
             catch { }
             const isRequestDeadline = isRequestDeadlineResponse(response.status, errorData, errorMessage);
@@ -447,6 +467,10 @@ async function postStream(endpoint, data, options = {}) {
         headers['X-Kortix-Client'] = clientSource;
     if (adminBypassEnabled)
         headers['x-kortix-admin-bypass'] = '1';
+    // Same act-as rule as makeRequest — a streamed POST is still a platform
+    // request, and an SSE stream opened without the header would silently read
+    // the OPERATOR's account while the banner named the customer's.
+    Object.assign(headers, impersonationHeaders(endpoint));
     if (token)
         headers['Authorization'] = `Bearer ${token}`;
     const controller = new AbortController();

package/dist/core/http/api-client.js.map

@@ -1 +1 @@
-{"version":3,"file":"api-client.js","sourceRoot":"","sources":["../../../src/core/http/api-client.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,qBAAqB,EAAE,MAAM,0BAA0B,CAAC;AACjE,OAAO,EAAE,+BAA+B,EAAE,MAAM,QAAQ,CAAC;AACzD,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,iBAAiB,EAAE,oBAAoB,EAAE,MAAM,cAAc,CAAC;AAC5F,OAAO,EAAE,cAAc,EAAE,MAAM,UAAU,CAAC;AAE1C,MAAM,SAAS,GAAG,GAAG,EAAE,CAAC,cAAc,EAAE,CAAC,UAAU,IAAI,EAAE,CAAC;AAE1D,wEAAwE;AACxE,wEAAwE;AACxE,wEAAwE;AACxE,oEAAoE;AACpE,OAAO,EACL,QAAQ,EACR,SAAS,EACT,YAAY,EACZ,oBAAoB,EACpB,iBAAiB,EACjB,cAAc,EACd,uBAAuB,EACvB,qBAAqB,EACrB,sBAAsB,EACtB,kBAAkB,GAInB,MAAM,cAAc,CAAC;AAkCtB;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAG,uBAAuB,CAAC;AAElE;;;;;;;;;;;;;;GAcG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG,oBAAoB,CAAC;AAE5D;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAG,qBAAqB,CAAC;AAE9D,MAAM,qBAAqB,GAAG,kBAAkB,CAAC;AACjD,MAAM,+BAA+B,GAAG,wDAAwD,CAAC;AAEjG,MAAM,yBAAyB,GAAG,CAChC,MAAc,EACd,SAAkB,EAClB,OAAe,EACN,EAAE;IACX,IAAI,MAAM,KAAK,GAAG;QAAE,OAAO,KAAK,CAAC;IACjC,MAAM,IAAI,GACR,OAAO,SAAS,KAAK,QAAQ,IAAI,SAAS,KAAK,IAAI,IAAI,MAAM,IAAI,SAAS;QACxE,CAAC,CAAE,SAAgC,CAAC,IAAI;QACxC,CAAC,CAAC,SAAS,CAAC;IAChB,OAAO,IAAI,KAAK,qBAAqB,IAAI,+BAA+B,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;AACzF,CAAC,CAAC;AAEF,MAAM,KAAK,GAAG,CAAC,EAAU,EAAiB,EAAE,CAAC,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC;AAE/F;;;;;;;;GAQG;AACH,MAAM,0BAA0B,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC;AAC5D,MAAM,wBAAwB,GAAG,CAAC,MAAc,EAAW,EAAE,CAC3D,0BAA0B,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;AAEzC;mFACmF;AACnF,MAAM,kBAAkB,GAAG,CAAC,MAAe,EAAW,EAAE;IACtD,MAAM,CAAC,GAAG,CAAC,MAAM,IAAI,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC;IAC1C,OAAO,CAAC,KAAK,KAAK,IAAI,CAAC,KAAK,MAAM,CAAC;AACrC,CAAC,CAAC;AAEF,MAAM,sBAAsB,GAAG,CAAC,CAAC;AAEjC,MAAM,YAAY,GAAG,CAAC,KAAc,EAAW,EAAE,CAC9C,KAAkC,EAAE,IAAI,KAAK,YAAY;IACzD,KAAkC,EAAE,IAAI,KAAK,aAAa;IAC3D,CAAC,KAAK,YAAY,KAAK,IAAI,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC;AAEhE,gFAAgF;AAChF,+EAA+E;AAC/E,4EAA4E;AAC5E,0EAA0E;AAC1E,+EAA+E;AAC/E,yDAAyD;AACzD,IAAI,kBAAkB,GAAG,KAAK,CAAC;AAE/B,MAAM,UAAU,cAAc,CAAC,OAAgB;IAC7C,kBAAkB,GAAG,OAAO,CAAC;AAC/B,CAAC;AAED,MAAM,UAAU,oBAAoB;IAClC,OAAO,kBAAkB,CAAC;AAC5B,CAAC;AAED,KAAK,UAAU,WAAW,CACxB,GAAW,EACX,UAA0C,EAAE;IAE5C,MAAM,EAAE,UAAU,GAAG,IAAI,EAAE,YAAY,EAAE,OAAO,GAAG,KAAK,EAAE,GAAG,YAAY,EAAE,GAAG,OAAO,CAAC;IAEtF,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;IACzC,IAAI,SAAS,GAA0B,IAAI,CAAC;IAC5C,IAAI,SAAS,GAAG,KAAK,CAAC;IACtB,oEAAoE;IACpE,2EAA2E;IAC3E,wDAAwD;IACxD,IAAI,UAAU,GAAG,KAAK,CAAC;IAEvB,IAAI,CAAC;QACH,SAAS,GAAG,UAAU,CAAC,GAAG,EAAE;YAC1B,IAAI,CAAC,SAAS,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;gBAC7C,SAAS,GAAG,IAAI,CAAC;gBACjB,UAAU,GAAG,IAAI,CAAC;gBAClB,UAAU,CAAC,KAAK,EAAE,CAAC;YACrB,CAAC;QACH,CAAC,EAAE,OAAO,CAAC,CAAC;QAEZ,MAAM,KAAK,GAAG,MAAM,+BAA+B,EAAE,CAAC;QAEtD,wFAAwF;QACxF,MAAM,UAAU,GAAG,YAAY,CAAC,IAAI,YAAY,QAAQ,CAAC;QACzD,MAAM,OAAO,GAA2B,EAAE,CAAC;QAE3C,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,OAAO,CAAC,cAAc,CAAC,GAAG,kBAAkB,CAAC;QAC/C,CAAC;QAED,2CAA2C;QAC3C,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,YAAY,CAAC,OAAiC,CAAC,CAAC;QAEvE,MAAM,YAAY,GAAG,qBAAqB,CAAC,cAAc,EAAE,CAAC,YAAY,CAAC,CAAC;QAC1E,MAAM,eAAe,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,IAAI,CAC/C,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,WAAW,EAAE,KAAK,iBAAiB,CACnD,CAAC;QACF,IAAI,YAAY,IAAI,CAAC,eAAe,EAAE,CAAC;YACrC,OAAO,CAAC,iBAAiB,CAAC,GAAG,YAAY,CAAC;QAC5C,CAAC;QAED,IAAI,kBAAkB,EAAE,CAAC;YACvB,OAAO,CAAC,uBAAuB,CAAC,GAAG,GAAG,CAAC;QACzC,CAAC;QAED,IAAI,KAAK,EAAE,CAAC;YACV,OAAO,CAAC,eAAe,CAAC,GAAG,UAAU,KAAK,EAAE,CAAC;QAC/C,CAAC;aAAM,CAAC;YACN,0DAA0D;YAC1D,4EAA4E;YAC5E,wEAAwE;YACxE,mDAAmD;YACnD,OAAO;gBACL,KAAK,EAAE,IAAI,SAAS,EAAE;gBACtB,OAAO,EAAE,KAAK;aACf,CAAC;QACJ,CAAC;QAED,uFAAuF;QACvF,2DAA2D;QAE3D,MAAM,aAAa,GAAG,kBAAkB,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;QAC9D,MAAM,WAAW,GAAG,aAAa,CAAC,CAAC,CAAC,sBAAsB,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACnE,IAAI,QAAmB,CAAC;QAExB,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,WAAW,EAAE,OAAO,EAAE,EAAE,CAAC;YACvD,IAAI,OAAO,GAAG,CAAC,EAAE,CAAC;gBAChB,MAAM,KAAK,CAAC,GAAG,GAAG,CAAC,IAAI,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC;YACxC,CAAC;YAED,MAAM,iBAAiB,GAAG,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,eAAe,EAAE,CAAC;YAC7E,IAAI,OAAO,GAAG,CAAC,EAAE,CAAC;gBAChB,SAAS,GAAG,UAAU,CAAC,GAAG,EAAE;oBAC1B,UAAU,GAAG,IAAI,CAAC;oBAClB,iBAAiB,CAAC,KAAK,EAAE,CAAC;gBAC5B,CAAC,EAAE,OAAO,CAAC,CAAC;YACd,CAAC;YAED,IAAI,CAAC;gBACH,MAAM,SAAS,GAAG,cAAc,EAAE,CAAC,KAAK,IAAI,KAAK,CAAC;gBAClD,QAAQ,GAAG,MAAM,SAAS,CAAC,GAAG,EAAE;oBAC9B,GAAG,YAAY;oBACf,OAAO;oBACP,MAAM,EAAE,iBAAiB,CAAC,MAAM;oBAChC,WAAW,EAAE,YAAY,CAAC,WAAW,IAAI,MAAM;iBAChD,CAAC,CAAC;YACL,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,SAAS,EAAE,CAAC;oBACd,YAAY,CAAC,SAAS,CAAC,CAAC;oBACxB,SAAS,GAAG,IAAI,CAAC;gBACnB,CAAC;gBACD,IAAI,YAAY,CAAC,KAAK,CAAC,IAAI,OAAO,KAAK,WAAW,GAAG,CAAC,EAAE,CAAC;oBACvD,MAAM,KAAK,CAAC;gBACd,CAAC;gBACD,SAAS;YACX,CAAC;YAED,IAAI,SAAS,EAAE,CAAC;gBACd,YAAY,CAAC,SAAS,CAAC,CAAC;gBACxB,SAAS,GAAG,IAAI,CAAC;YACnB,CAAC;YAED,MAAM,iBAAiB,GACrB,aAAa,IAAI,wBAAwB,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,OAAO,GAAG,WAAW,GAAG,CAAC,CAAC;YAC1F,IAAI,CAAC,iBAAiB,EAAE,CAAC;gBACvB,MAAM;YACR,CAAC;YAED,IAAI,CAAC;gBACH,MAAM,QAAQ,CAAC,WAAW,EAAE,CAAC;YAC/B,CAAC;YAAC,MAAM,CAAC,CAAA,CAAC;QACZ,CAAC;QAED,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,IAAI,YAAY,GAAG,QAAQ,QAAQ,CAAC,MAAM,KAAK,QAAQ,CAAC,UAAU,EAAE,CAAC;YACrE,IAAI,SAAS,GAAQ,IAAI,CAAC;YAE1B,IAAI,CAAC;gBACH,SAAS,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;gBAClC,IAAI,OAAO,SAAS,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;oBACzC,YAAY,GAAG,SAAS,CAAC,MAAM,CAAC;gBAClC,CAAC;qBAAM,IAAI,OAAO,SAAS,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;oBACjD,YAAY,GAAG,SAAS,CAAC,OAAO,CAAC;gBACnC,CAAC;qBAAM,IAAI,SAAS,CAAC,KAAK,IAAI,OAAO,SAAS,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;oBAClE,YAAY,GAAG,SAAS,CAAC,KAAK,CAAC;gBACjC,CAAC;qBAAM,IAAI,OAAO,SAAS,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;oBAChD,8CAA8C;oBAC9C,YAAY,GAAG,SAAS,CAAC,MAAM,CAAC;gBAClC,CAAC;qBAAM,IAAI,OAAO,SAAS,CAAC,MAAM,EAAE,OAAO,KAAK,QAAQ,EAAE,CAAC;oBACzD,YAAY,GAAG,SAAS,CAAC,MAAM,CAAC,OAAO,CAAC;gBAC1C,CAAC;YACH,CAAC;YAAC,MAAM,CAAC,CAAA,CAAC;YAEV,MAAM,iBAAiB,GAAG,yBAAyB,CAAC,QAAQ,CAAC,MAAM,EAAE,SAAS,EAAE,YAAY,CAAC,CAAC;YAC9F,IAAI,KAAK,GAAqB,IAAI,QAAQ,CAAC,YAAY,EAAE;gBACvD,MAAM,EAAE,QAAQ,CAAC,MAAM;gBACvB,QAAQ,EAAE,QAAQ;gBAClB,OAAO,EAAE,SAAS,IAAI,SAAS;gBAC/B,IAAI,EAAE,SAAS;gBACf,MAAM,EAAE,SAAS,EAAE,MAAM;gBACzB,IAAI,EAAE,iBAAiB;oBACrB,CAAC,CAAC,qBAAqB;oBACvB,CAAC,CAAC,SAAS,EAAE,IAAI;wBACf,SAAS,EAAE,UAAU;wBACrB,SAAS,EAAE,MAAM,EAAE,UAAU;wBAC7B,QAAQ,CAAC,MAAM,CAAC,QAAQ,EAAE;aAC/B,CAAC,CAAC;YAEH,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;gBAC5B,KAAK,GAAG,iBAAiB,CAAC,KAAK,CAAC,CAAC;YACnC,CAAC;YAED,mEAAmE;YACnE,uEAAuE;YACvE,yEAAyE;YACzE,yEAAyE;YACzE,IACE,QAAQ,CAAC,MAAM,KAAK,GAAG;gBACvB,SAAS,EAAE,IAAI,KAAK,sBAAsB;gBAC1C,OAAO,MAAM,KAAK,WAAW;gBAC7B,OAAO,MAAM,CAAC,aAAa,KAAK,UAAU,EAC1C,CAAC;gBACD,IAAI,CAAC;oBACH,MAAM,CAAC,aAAa,CAAC,IAAI,WAAW,CAAC,qBAAqB,CAAC,CAAC,CAAC;gBAC/D,CAAC;gBAAC,MAAM,CAAC;oBACP,4DAA4D;gBAC9D,CAAC;YACH,CAAC;YAED,oDAAoD;YACpD,2DAA2D;YAC3D,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;gBAC5B,KAAK,GAAG,IAAI,oBAAoB,CAAC,GAAG,EAAE;oBACpC,OAAO,EAAE,iCAAiC;oBAC1C,UAAU,EACR,4FAA4F;iBAC/F,CAAC,CAAC;YACL,CAAC;YAED,wEAAwE;YACxE,oEAAoE;YACpE,qEAAqE;YACrE,4DAA4D;YAC5D,wEAAwE;YACxE,qEAAqE;YACrE,iEAAiE;YACjE,sEAAsE;YACtE,kEAAkE;YAClE,yEAAyE;YACzE,4DAA4D;YAC5D,qEAAqE;YACrE,8DAA8D;YAC9D,wEAAwE;YACxE,sEAAsE;YACtE,kCAAkC;YAClC,MAAM,qBAAqB,GACzB,QAAQ,CAAC,MAAM,KAAK,GAAG,IAAI,SAAS,EAAE,IAAI,KAAK,0BAA0B,CAAC;YAE5E,qEAAqE;YACrE,sEAAsE;YACtE,0EAA0E;YAC1E,uEAAuE;YACvE,0EAA0E;YAC1E,sEAAsE;YACtE,yEAAyE;YACzE,yEAAyE;YACzE,yEAAyE;YACzE,qEAAqE;YACrE,wEAAwE;YACxE,sEAAsE;YACtE,wEAAwE;YACxE,oEAAoE;YACpE,MAAM,kBAAkB,GACtB,QAAQ,CAAC,MAAM,KAAK,GAAG,IAAI,SAAS,EAAE,IAAI,KAAK,uBAAuB,CAAC;YAEzE,yEAAyE;YACzE,0EAA0E;YAC1E,uEAAuE;YACvE,uEAAuE;YACvE,MAAM,mBAAmB,GACvB,QAAQ,CAAC,MAAM,KAAK,GAAG,IAAI,SAAS,EAAE,IAAI,KAAK,wBAAwB,CAAC;YAE1E,IACE,UAAU;gBACV,CAAC,qBAAqB;gBACtB,CAAC,kBAAkB;gBACnB,CAAC,mBAAmB;gBACpB,CAAC,iBAAiB,EAClB,CAAC;gBACD,cAAc,EAAE,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,YAAY,CAAC,CAAC;YAClD,CAAC;YAED,OAAO;gBACL,KAAK;gBACL,OAAO,EAAE,KAAK;aACf,CAAC;QACJ,CAAC;QAED,IAAI,IAAO,CAAC;QACZ,MAAM,WAAW,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;QAEzD,IAAI,WAAW,EAAE,QAAQ,CAAC,kBAAkB,CAAC,EAAE,CAAC;YAC9C,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;QAC/B,CAAC;aAAM,IAAI,WAAW,EAAE,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;YAC1C,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAM,CAAC;QACtC,CAAC;aAAM,CAAC;YACN,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAM,CAAC;QACtC,CAAC;QAED,OAAO;YACL,IAAI;YACJ,OAAO,EAAE,IAAI;SACd,CAAC;IACJ,CAAC;IAAC,OAAO,KAAU,EAAE,CAAC;QACpB,gCAAgC;QAChC,IAAI,SAAS,EAAE,CAAC;YACd,YAAY,CAAC,SAAS,CAAC,CAAC;YACxB,SAAS,GAAG,IAAI,CAAC;QACnB,CAAC;QAED,4DAA4D;QAC5D,MAAM,iBAAiB,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC;QAE9C,4DAA4D;QAC5D,IAAI,iBAAiB,EAAE,CAAC;YACtB,SAAS,GAAG,IAAI,CAAC;QACnB,CAAC;QAED,IAAI,QAAkB,CAAC;QAEvB,IAAI,iBAAiB,EAAE,CAAC;YACtB,uEAAuE;YACvE,kEAAkE;YAClE,kEAAkE;YAClE,+DAA+D;YAC/D,IAAI,CAAC,UAAU,EAAE,CAAC;gBAChB,OAAO;oBACL,KAAK,EAAE,IAAI,QAAQ,CAAC,iBAAiB,EAAE;wBACrC,IAAI,EAAE,YAAY;wBAClB,IAAI,EAAE,SAAS;qBAChB,CAAC;oBACF,OAAO,EAAE,KAAK;iBACf,CAAC;YACJ,CAAC;YAED,uEAAuE;YACvE,wDAAwD;YACxD,MAAM,QAAQ,GAAG,GAAG,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,EAAE,CAAC,IAAI,GAAG,CAAC;YACrD,QAAQ,GAAG,IAAI,QAAQ,CACrB,2BAA2B,IAAI,CAAC,KAAK,CAAC,OAAO,GAAG,IAAI,CAAC,MAAM,QAAQ,EAAE,EACrE;gBACE,IAAI,EAAE,SAAS;gBACf,GAAG;gBACH,QAAQ;gBACR,OAAO;aACR,CACF,CAAC;YAEF,uEAAuE;YACvE,2EAA2E;YAC3E,sEAAsE;QACxE,CAAC;aAAM,IAAI,KAAK,YAAY,KAAK,EAAE,CAAC;YAClC,QAAQ,GAAG,IAAI,QAAQ,CAAC,KAAK,CAAC,OAAO,EAAE;gBACrC,IAAI,EAAE,KAAK,CAAC,IAAI,IAAI,UAAU;gBAC9B,KAAK,EAAE,KAAK,CAAC,KAAK;aACnB,CAAC,CAAC;YAEH,IAAI,UAAU,EAAE,CAAC;gBACf,cAAc,EAAE,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC;YACrD,CAAC;QACH,CAAC;aAAM,CAAC;YACN,QAAQ,GAAG,IAAI,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;YAEvC,IAAI,UAAU,EAAE,CAAC;gBACf,cAAc,EAAE,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC;YACrD,CAAC;QACH,CAAC;QAED,OAAO;YACL,KAAK,EAAE,QAAQ;YACf,OAAO,EAAE,KAAK;SACf,CAAC;IACJ,CAAC;AACH,CAAC;AAED,MAAM,CAAC,MAAM,cAAc,GAAG;IAC5B,KAAK,CAAC,OAAO,CACX,OAAsD,EACtD,YAA2B;QAE3B,IAAI,CAAC;YACH,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,OAAO,EAAE,CAAC;YAExC,IAAI,KAAK,EAAE,CAAC;gBACV,MAAM,QAAQ,GAAa,IAAI,QAAQ,CAAC,KAAK,CAAC,OAAO,IAAI,gBAAgB,EAAE;oBACzE,IAAI,EAAE,KAAK,CAAC,IAAI;oBAChB,OAAO,EAAE,KAAK;iBACf,CAAC,CAAC;gBAEH,cAAc,EAAE,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC;gBAEnD,OAAO;oBACL,KAAK,EAAE,QAAQ;oBACf,OAAO,EAAE,KAAK;iBACf,CAAC;YACJ,CAAC;YAED,OAAO;gBACL,IAAI,EAAE,IAAS;gBACf,OAAO,EAAE,IAAI;aACd,CAAC;QACJ,CAAC;QAAC,OAAO,KAAU,EAAE,CAAC;YACpB,MAAM,QAAQ,GACZ,KAAK,YAAY,KAAK;gBACpB,CAAC,CAAC,IAAI,QAAQ,CAAC,KAAK,CAAC,OAAO,EAAE;oBAC1B,IAAI,EAAE,KAAK,CAAC,IAAI,IAAI,UAAU;oBAC9B,KAAK,EAAE,KAAK,CAAC,KAAK;iBACnB,CAAC;gBACJ,CAAC,CAAC,IAAI,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;YAElC,cAAc,EAAE,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC;YAEnD,OAAO;gBACL,KAAK,EAAE,QAAQ;gBACf,OAAO,EAAE,KAAK;aACf,CAAC;QACJ,CAAC;IACH,CAAC;CACF,CAAC;AAEF;;;;;;;;;;;;;;;;;;;GAmBG;AACH,KAAK,UAAU,UAAU,CACvB,QAAgB,EAChB,IAAa,EACb,UAA4B,EAAE;IAE9B,MAAM,EAAE,OAAO,GAAG,KAAK,EAAE,KAAK,EAAE,SAAS,GAAG,KAAK,EAAE,GAAG,OAAO,CAAC;IAC9D,MAAM,KAAK,GAAG,MAAM,+BAA+B,EAAE,CAAC;IAEtD,MAAM,OAAO,GAA2B;QACtC,MAAM,EAAE,mBAAmB;QAC3B,cAAc,EAAE,kBAAkB;KACnC,CAAC;IACF,MAAM,YAAY,GAAG,qBAAqB,CAAC,cAAc,EAAE,CAAC,YAAY,CAAC,CAAC;IAC1E,IAAI,YAAY;QAAE,OAAO,CAAC,iBAAiB,CAAC,GAAG,YAAY,CAAC;IAC5D,IAAI,kBAAkB;QAAE,OAAO,CAAC,uBAAuB,CAAC,GAAG,GAAG,CAAC;IAC/D,IAAI,KAAK;QAAE,OAAO,CAAC,eAAe,CAAC,GAAG,UAAU,KAAK,EAAE,CAAC;IAExD,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;IACzC,MAAM,SAAS,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,OAAO,CAAC,CAAC;IAChE,IAAI,CAAC;QACH,OAAO,MAAM,SAAS,CAAC,GAAG,SAAS,EAAE,GAAG,QAAQ,EAAE,EAAE;YAClD,MAAM,EAAE,MAAM;YACd,OAAO;YACP,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;YAC1B,MAAM,EAAE,UAAU,CAAC,MAAM;YACzB,WAAW,EAAE,MAAM;SACpB,CAAC,CAAC;IACL,CAAC;YAAS,CAAC;QACT,YAAY,CAAC,SAAS,CAAC,CAAC;IAC1B,CAAC;AACH,CAAC;AAED,MAAM,CAAC,MAAM,UAAU,GAAG;IACxB,GAAG,EAAE,CACH,QAAgB,EAChB,OAAiE,EACjE,EAAE,CAAC,WAAW,CAAI,GAAG,SAAS,EAAE,GAAG,QAAQ,EAAE,EAAE,EAAE,GAAG,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;IAE/E,IAAI,EAAE,CACJ,QAAgB,EAChB,IAAU,EACV,OAAwD,EACxD,EAAE,CACF,WAAW,CAAI,GAAG,SAAS,EAAE,GAAG,QAAQ,EAAE,EAAE;QAC1C,GAAG,OAAO;QACV,MAAM,EAAE,MAAM;QACd,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS;KAC9C,CAAC;IAEJ,GAAG,EAAE,CACH,QAAgB,EAChB,IAAU,EACV,OAAwD,EACxD,EAAE,CACF,WAAW,CAAI,GAAG,SAAS,EAAE,GAAG,QAAQ,EAAE,EAAE;QAC1C,GAAG,OAAO;QACV,MAAM,EAAE,KAAK;QACb,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS;KAC9C,CAAC;IAEJ,KAAK,EAAE,CACL,QAAgB,EAChB,IAAU,EACV,OAAwD,EACxD,EAAE,CACF,WAAW,CAAI,GAAG,SAAS,EAAE,GAAG,QAAQ,EAAE,EAAE;QAC1C,GAAG,OAAO;QACV,MAAM,EAAE,OAAO;QACf,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS;KAC9C,CAAC;IAEJ,MAAM,EAAE,CACN,QAAgB,EAChB,OAAiE,EACjE,EAAE,CACF,WAAW,CAAI,GAAG,SAAS,EAAE,GAAG,QAAQ,EAAE,EAAE;QAC1C,GAAG,OAAO;QACV,MAAM,EAAE,QAAQ;KACjB,CAAC;IAEJ,MAAM,EAAE,CACN,QAAgB,EAChB,QAAkB,EAClB,OAAiE,EACjE,EAAE;QACF,MAAM,EAAE,OAAO,EAAE,GAAG,WAAW,EAAE,GAAG,OAAO,IAAI,EAAE,CAAC;QAClD,MAAM,aAAa,GAAG,EAAE,GAAI,OAAkC,EAAE,CAAC;QACjE,OAAO,aAAa,CAAC,cAAc,CAAC,CAAC;QAErC,OAAO,WAAW,CAAI,GAAG,SAAS,EAAE,GAAG,QAAQ,EAAE,EAAE;YACjD,GAAG,WAAW;YACd,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,QAAQ;YACd,OAAO,EAAE,aAAa;SACvB,CAAC,CAAC;IACL,CAAC;IAED,SAAS,EAAE,CACT,QAAgB,EAChB,QAAkB,EAClB,OAAiE,EACjE,EAAE;QACF,MAAM,EAAE,OAAO,EAAE,GAAG,WAAW,EAAE,GAAG,OAAO,IAAI,EAAE,CAAC;QAClD,MAAM,aAAa,GAAG,EAAE,GAAI,OAAkC,EAAE,CAAC;QACjE,OAAO,aAAa,CAAC,cAAc,CAAC,CAAC;QAErC,OAAO,WAAW,CAAI,GAAG,SAAS,EAAE,GAAG,QAAQ,EAAE,EAAE;YACjD,GAAG,WAAW;YACd,MAAM,EAAE,KAAK;YACb,IAAI,EAAE,QAAQ;YACd,OAAO,EAAE,aAAa;SACvB,CAAC,CAAC;IACL,CAAC;IAED,UAAU;CACX,CAAC"}
+{"version":3,"file":"api-client.js","sourceRoot":"","sources":["../../../src/core/http/api-client.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,qBAAqB,EAAE,MAAM,0BAA0B,CAAC;AACjE,OAAO,EAAE,+BAA+B,EAAE,MAAM,QAAQ,CAAC;AACzD,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,iBAAiB,EAAE,oBAAoB,EAAE,MAAM,cAAc,CAAC;AAC5F,OAAO,EAAE,cAAc,EAAE,MAAM,UAAU,CAAC;AAC1C,OAAO,EAAE,oBAAoB,EAAE,MAAM,iBAAiB,CAAC;AAEvD,MAAM,SAAS,GAAG,GAAG,EAAE,CAAC,cAAc,EAAE,CAAC,UAAU,IAAI,EAAE,CAAC;AAE1D,wEAAwE;AACxE,wEAAwE;AACxE,wEAAwE;AACxE,oEAAoE;AACpE,OAAO,EACL,QAAQ,EACR,SAAS,EACT,YAAY,EACZ,oBAAoB,EACpB,iBAAiB,EACjB,cAAc,EACd,uBAAuB,EACvB,qBAAqB,EACrB,sBAAsB,EACtB,kBAAkB,GAInB,MAAM,cAAc,CAAC;AAkCtB;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAG,uBAAuB,CAAC;AAElE;;;;;;;;;;;;;;GAcG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG,oBAAoB,CAAC;AAE5D;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAG,qBAAqB,CAAC;AAE9D,MAAM,qBAAqB,GAAG,kBAAkB,CAAC;AACjD,MAAM,+BAA+B,GAAG,wDAAwD,CAAC;AAEjG,MAAM,yBAAyB,GAAG,CAChC,MAAc,EACd,SAAkB,EAClB,OAAe,EACN,EAAE;IACX,IAAI,MAAM,KAAK,GAAG;QAAE,OAAO,KAAK,CAAC;IACjC,MAAM,IAAI,GACR,OAAO,SAAS,KAAK,QAAQ,IAAI,SAAS,KAAK,IAAI,IAAI,MAAM,IAAI,SAAS;QACxE,CAAC,CAAE,SAAgC,CAAC,IAAI;QACxC,CAAC,CAAC,SAAS,CAAC;IAChB,OAAO,IAAI,KAAK,qBAAqB,IAAI,+BAA+B,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;AACzF,CAAC,CAAC;AAEF,MAAM,KAAK,GAAG,CAAC,EAAU,EAAiB,EAAE,CAAC,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC;AAE/F;;;;;;;;GAQG;AACH,MAAM,0BAA0B,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC;AAC5D,MAAM,wBAAwB,GAAG,CAAC,MAAc,EAAW,EAAE,CAC3D,0BAA0B,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;AAEzC;mFACmF;AACnF,MAAM,kBAAkB,GAAG,CAAC,MAAe,EAAW,EAAE;IACtD,MAAM,CAAC,GAAG,CAAC,MAAM,IAAI,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC;IAC1C,OAAO,CAAC,KAAK,KAAK,IAAI,CAAC,KAAK,MAAM,CAAC;AACrC,CAAC,CAAC;AAEF,MAAM,sBAAsB,GAAG,CAAC,CAAC;AAEjC,MAAM,YAAY,GAAG,CAAC,KAAc,EAAW,EAAE,CAC9C,KAAkC,EAAE,IAAI,KAAK,YAAY;IACzD,KAAkC,EAAE,IAAI,KAAK,aAAa;IAC3D,CAAC,KAAK,YAAY,KAAK,IAAI,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC;AAEhE,gFAAgF;AAChF,+EAA+E;AAC/E,4EAA4E;AAC5E,0EAA0E;AAC1E,+EAA+E;AAC/E,yDAAyD;AACzD,IAAI,kBAAkB,GAAG,KAAK,CAAC;AAE/B,MAAM,UAAU,cAAc,CAAC,OAAgB;IAC7C,kBAAkB,GAAG,OAAO,CAAC;AAC/B,CAAC;AAED,MAAM,UAAU,oBAAoB;IAClC,OAAO,kBAAkB,CAAC;AAC5B,CAAC;AAED,KAAK,UAAU,WAAW,CACxB,GAAW,EACX,UAA0C,EAAE;IAE5C,MAAM,EAAE,UAAU,GAAG,IAAI,EAAE,YAAY,EAAE,OAAO,GAAG,KAAK,EAAE,GAAG,YAAY,EAAE,GAAG,OAAO,CAAC;IAEtF,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;IACzC,IAAI,SAAS,GAA0B,IAAI,CAAC;IAC5C,IAAI,SAAS,GAAG,KAAK,CAAC;IACtB,oEAAoE;IACpE,2EAA2E;IAC3E,wDAAwD;IACxD,IAAI,UAAU,GAAG,KAAK,CAAC;IAEvB,IAAI,CAAC;QACH,SAAS,GAAG,UAAU,CAAC,GAAG,EAAE;YAC1B,IAAI,CAAC,SAAS,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;gBAC7C,SAAS,GAAG,IAAI,CAAC;gBACjB,UAAU,GAAG,IAAI,CAAC;gBAClB,UAAU,CAAC,KAAK,EAAE,CAAC;YACrB,CAAC;QACH,CAAC,EAAE,OAAO,CAAC,CAAC;QAEZ,MAAM,KAAK,GAAG,MAAM,+BAA+B,EAAE,CAAC;QAEtD,wFAAwF;QACxF,MAAM,UAAU,GAAG,YAAY,CAAC,IAAI,YAAY,QAAQ,CAAC;QACzD,MAAM,OAAO,GAA2B,EAAE,CAAC;QAE3C,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,OAAO,CAAC,cAAc,CAAC,GAAG,kBAAkB,CAAC;QAC/C,CAAC;QAED,2CAA2C;QAC3C,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,YAAY,CAAC,OAAiC,CAAC,CAAC;QAEvE,MAAM,YAAY,GAAG,qBAAqB,CAAC,cAAc,EAAE,CAAC,YAAY,CAAC,CAAC;QAC1E,MAAM,eAAe,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,IAAI,CAC/C,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,WAAW,EAAE,KAAK,iBAAiB,CACnD,CAAC;QACF,IAAI,YAAY,IAAI,CAAC,eAAe,EAAE,CAAC;YACrC,OAAO,CAAC,iBAAiB,CAAC,GAAG,YAAY,CAAC;QAC5C,CAAC;QAED,IAAI,kBAAkB,EAAE,CAAC;YACvB,OAAO,CAAC,uBAAuB,CAAC,GAAG,GAAG,CAAC;QACzC,CAAC;QAED,4EAA4E;QAC5E,6EAA6E;QAC7E,uEAAuE;QACvE,yEAAyE;QACzE,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,oBAAoB,CAAC,GAAG,CAAC,CAAC,CAAC;QAElD,IAAI,KAAK,EAAE,CAAC;YACV,OAAO,CAAC,eAAe,CAAC,GAAG,UAAU,KAAK,EAAE,CAAC;QAC/C,CAAC;aAAM,CAAC;YACN,0DAA0D;YAC1D,4EAA4E;YAC5E,wEAAwE;YACxE,mDAAmD;YACnD,OAAO;gBACL,KAAK,EAAE,IAAI,SAAS,EAAE;gBACtB,OAAO,EAAE,KAAK;aACf,CAAC;QACJ,CAAC;QAED,uFAAuF;QACvF,2DAA2D;QAE3D,MAAM,aAAa,GAAG,kBAAkB,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;QAC9D,MAAM,WAAW,GAAG,aAAa,CAAC,CAAC,CAAC,sBAAsB,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACnE,IAAI,QAAmB,CAAC;QAExB,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,WAAW,EAAE,OAAO,EAAE,EAAE,CAAC;YACvD,IAAI,OAAO,GAAG,CAAC,EAAE,CAAC;gBAChB,MAAM,KAAK,CAAC,GAAG,GAAG,CAAC,IAAI,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC;YACxC,CAAC;YAED,MAAM,iBAAiB,GAAG,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,eAAe,EAAE,CAAC;YAC7E,IAAI,OAAO,GAAG,CAAC,EAAE,CAAC;gBAChB,SAAS,GAAG,UAAU,CAAC,GAAG,EAAE;oBAC1B,UAAU,GAAG,IAAI,CAAC;oBAClB,iBAAiB,CAAC,KAAK,EAAE,CAAC;gBAC5B,CAAC,EAAE,OAAO,CAAC,CAAC;YACd,CAAC;YAED,IAAI,CAAC;gBACH,MAAM,SAAS,GAAG,cAAc,EAAE,CAAC,KAAK,IAAI,KAAK,CAAC;gBAClD,QAAQ,GAAG,MAAM,SAAS,CAAC,GAAG,EAAE;oBAC9B,GAAG,YAAY;oBACf,OAAO;oBACP,MAAM,EAAE,iBAAiB,CAAC,MAAM;oBAChC,WAAW,EAAE,YAAY,CAAC,WAAW,IAAI,MAAM;iBAChD,CAAC,CAAC;YACL,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,SAAS,EAAE,CAAC;oBACd,YAAY,CAAC,SAAS,CAAC,CAAC;oBACxB,SAAS,GAAG,IAAI,CAAC;gBACnB,CAAC;gBACD,IAAI,YAAY,CAAC,KAAK,CAAC,IAAI,OAAO,KAAK,WAAW,GAAG,CAAC,EAAE,CAAC;oBACvD,MAAM,KAAK,CAAC;gBACd,CAAC;gBACD,SAAS;YACX,CAAC;YAED,IAAI,SAAS,EAAE,CAAC;gBACd,YAAY,CAAC,SAAS,CAAC,CAAC;gBACxB,SAAS,GAAG,IAAI,CAAC;YACnB,CAAC;YAED,MAAM,iBAAiB,GACrB,aAAa,IAAI,wBAAwB,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,OAAO,GAAG,WAAW,GAAG,CAAC,CAAC;YAC1F,IAAI,CAAC,iBAAiB,EAAE,CAAC;gBACvB,MAAM;YACR,CAAC;YAED,IAAI,CAAC;gBACH,MAAM,QAAQ,CAAC,WAAW,EAAE,CAAC;YAC/B,CAAC;YAAC,MAAM,CAAC,CAAA,CAAC;QACZ,CAAC;QAED,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,IAAI,YAAY,GAAG,QAAQ,QAAQ,CAAC,MAAM,KAAK,QAAQ,CAAC,UAAU,EAAE,CAAC;YACrE,IAAI,SAAS,GAAQ,IAAI,CAAC;YAE1B,IAAI,CAAC;gBACH,SAAS,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;gBAClC,kDAAkD;gBAClD,EAAE;gBACF,yEAAyE;gBACzE,4DAA4D;gBAC5D,uDAAuD;gBACvD,oDAAoD;gBACpD,+CAA+C;gBAC/C,qEAAqE;gBACrE,mEAAmE;gBACnE,iEAAiE;gBACjE,oEAAoE;gBACpE,kEAAkE;gBAClE,IAAI,OAAO,SAAS,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;oBAC1C,YAAY,GAAG,SAAS,CAAC,OAAO,CAAC;gBACnC,CAAC;qBAAM,IAAI,SAAS,CAAC,KAAK,IAAI,OAAO,SAAS,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;oBAClE,YAAY,GAAG,SAAS,CAAC,KAAK,CAAC;gBACjC,CAAC;qBAAM,IAAI,OAAO,SAAS,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;oBAChD,8CAA8C;oBAC9C,YAAY,GAAG,SAAS,CAAC,MAAM,CAAC;gBAClC,CAAC;qBAAM,IAAI,OAAO,SAAS,CAAC,MAAM,EAAE,OAAO,KAAK,QAAQ,EAAE,CAAC;oBACzD,YAAY,GAAG,SAAS,CAAC,MAAM,CAAC,OAAO,CAAC;gBAC1C,CAAC;qBAAM,IAAI,OAAO,SAAS,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;oBAChD,qEAAqE;oBACrE,oCAAoC;oBACpC,YAAY,GAAG,SAAS,CAAC,MAAM,CAAC;gBAClC,CAAC;YACH,CAAC;YAAC,MAAM,CAAC,CAAA,CAAC;YAEV,MAAM,iBAAiB,GAAG,yBAAyB,CAAC,QAAQ,CAAC,MAAM,EAAE,SAAS,EAAE,YAAY,CAAC,CAAC;YAC9F,IAAI,KAAK,GAAqB,IAAI,QAAQ,CAAC,YAAY,EAAE;gBACvD,MAAM,EAAE,QAAQ,CAAC,MAAM;gBACvB,QAAQ,EAAE,QAAQ;gBAClB,OAAO,EAAE,SAAS,IAAI,SAAS;gBAC/B,IAAI,EAAE,SAAS;gBACf,MAAM,EAAE,SAAS,EAAE,MAAM;gBACzB,IAAI,EAAE,iBAAiB;oBACrB,CAAC,CAAC,qBAAqB;oBACvB,CAAC,CAAC,SAAS,EAAE,IAAI;wBACf,SAAS,EAAE,UAAU;wBACrB,SAAS,EAAE,MAAM,EAAE,UAAU;wBAC7B,QAAQ,CAAC,MAAM,CAAC,QAAQ,EAAE;aAC/B,CAAC,CAAC;YAEH,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;gBAC5B,KAAK,GAAG,iBAAiB,CAAC,KAAK,CAAC,CAAC;YACnC,CAAC;YAED,mEAAmE;YACnE,uEAAuE;YACvE,yEAAyE;YACzE,yEAAyE;YACzE,IACE,QAAQ,CAAC,MAAM,KAAK,GAAG;gBACvB,SAAS,EAAE,IAAI,KAAK,sBAAsB;gBAC1C,OAAO,MAAM,KAAK,WAAW;gBAC7B,OAAO,MAAM,CAAC,aAAa,KAAK,UAAU,EAC1C,CAAC;gBACD,IAAI,CAAC;oBACH,MAAM,CAAC,aAAa,CAAC,IAAI,WAAW,CAAC,qBAAqB,CAAC,CAAC,CAAC;gBAC/D,CAAC;gBAAC,MAAM,CAAC;oBACP,4DAA4D;gBAC9D,CAAC;YACH,CAAC;YAED,oDAAoD;YACpD,2DAA2D;YAC3D,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;gBAC5B,KAAK,GAAG,IAAI,oBAAoB,CAAC,GAAG,EAAE;oBACpC,OAAO,EAAE,iCAAiC;oBAC1C,UAAU,EACR,4FAA4F;iBAC/F,CAAC,CAAC;YACL,CAAC;YAED,wEAAwE;YACxE,oEAAoE;YACpE,qEAAqE;YACrE,4DAA4D;YAC5D,wEAAwE;YACxE,qEAAqE;YACrE,iEAAiE;YACjE,sEAAsE;YACtE,kEAAkE;YAClE,yEAAyE;YACzE,4DAA4D;YAC5D,qEAAqE;YACrE,8DAA8D;YAC9D,wEAAwE;YACxE,sEAAsE;YACtE,kCAAkC;YAClC,MAAM,qBAAqB,GACzB,QAAQ,CAAC,MAAM,KAAK,GAAG,IAAI,SAAS,EAAE,IAAI,KAAK,0BAA0B,CAAC;YAE5E,qEAAqE;YACrE,sEAAsE;YACtE,0EAA0E;YAC1E,uEAAuE;YACvE,0EAA0E;YAC1E,sEAAsE;YACtE,yEAAyE;YACzE,yEAAyE;YACzE,yEAAyE;YACzE,qEAAqE;YACrE,wEAAwE;YACxE,sEAAsE;YACtE,wEAAwE;YACxE,oEAAoE;YACpE,MAAM,kBAAkB,GACtB,QAAQ,CAAC,MAAM,KAAK,GAAG,IAAI,SAAS,EAAE,IAAI,KAAK,uBAAuB,CAAC;YAEzE,yEAAyE;YACzE,0EAA0E;YAC1E,uEAAuE;YACvE,uEAAuE;YACvE,MAAM,mBAAmB,GACvB,QAAQ,CAAC,MAAM,KAAK,GAAG,IAAI,SAAS,EAAE,IAAI,KAAK,wBAAwB,CAAC;YAE1E,IACE,UAAU;gBACV,CAAC,qBAAqB;gBACtB,CAAC,kBAAkB;gBACnB,CAAC,mBAAmB;gBACpB,CAAC,iBAAiB,EAClB,CAAC;gBACD,cAAc,EAAE,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,YAAY,CAAC,CAAC;YAClD,CAAC;YAED,OAAO;gBACL,KAAK;gBACL,OAAO,EAAE,KAAK;aACf,CAAC;QACJ,CAAC;QAED,IAAI,IAAO,CAAC;QACZ,MAAM,WAAW,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;QAEzD,IAAI,WAAW,EAAE,QAAQ,CAAC,kBAAkB,CAAC,EAAE,CAAC;YAC9C,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;QAC/B,CAAC;aAAM,IAAI,WAAW,EAAE,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;YAC1C,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAM,CAAC;QACtC,CAAC;aAAM,CAAC;YACN,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAM,CAAC;QACtC,CAAC;QAED,OAAO;YACL,IAAI;YACJ,OAAO,EAAE,IAAI;SACd,CAAC;IACJ,CAAC;IAAC,OAAO,KAAU,EAAE,CAAC;QACpB,gCAAgC;QAChC,IAAI,SAAS,EAAE,CAAC;YACd,YAAY,CAAC,SAAS,CAAC,CAAC;YACxB,SAAS,GAAG,IAAI,CAAC;QACnB,CAAC;QAED,4DAA4D;QAC5D,MAAM,iBAAiB,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC;QAE9C,4DAA4D;QAC5D,IAAI,iBAAiB,EAAE,CAAC;YACtB,SAAS,GAAG,IAAI,CAAC;QACnB,CAAC;QAED,IAAI,QAAkB,CAAC;QAEvB,IAAI,iBAAiB,EAAE,CAAC;YACtB,uEAAuE;YACvE,kEAAkE;YAClE,kEAAkE;YAClE,+DAA+D;YAC/D,IAAI,CAAC,UAAU,EAAE,CAAC;gBAChB,OAAO;oBACL,KAAK,EAAE,IAAI,QAAQ,CAAC,iBAAiB,EAAE;wBACrC,IAAI,EAAE,YAAY;wBAClB,IAAI,EAAE,SAAS;qBAChB,CAAC;oBACF,OAAO,EAAE,KAAK;iBACf,CAAC;YACJ,CAAC;YAED,uEAAuE;YACvE,wDAAwD;YACxD,MAAM,QAAQ,GAAG,GAAG,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,EAAE,CAAC,IAAI,GAAG,CAAC;YACrD,QAAQ,GAAG,IAAI,QAAQ,CACrB,2BAA2B,IAAI,CAAC,KAAK,CAAC,OAAO,GAAG,IAAI,CAAC,MAAM,QAAQ,EAAE,EACrE;gBACE,IAAI,EAAE,SAAS;gBACf,GAAG;gBACH,QAAQ;gBACR,OAAO;aACR,CACF,CAAC;YAEF,uEAAuE;YACvE,2EAA2E;YAC3E,sEAAsE;QACxE,CAAC;aAAM,IAAI,KAAK,YAAY,KAAK,EAAE,CAAC;YAClC,QAAQ,GAAG,IAAI,QAAQ,CAAC,KAAK,CAAC,OAAO,EAAE;gBACrC,IAAI,EAAE,KAAK,CAAC,IAAI,IAAI,UAAU;gBAC9B,KAAK,EAAE,KAAK,CAAC,KAAK;aACnB,CAAC,CAAC;YAEH,IAAI,UAAU,EAAE,CAAC;gBACf,cAAc,EAAE,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC;YACrD,CAAC;QACH,CAAC;aAAM,CAAC;YACN,QAAQ,GAAG,IAAI,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;YAEvC,IAAI,UAAU,EAAE,CAAC;gBACf,cAAc,EAAE,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC;YACrD,CAAC;QACH,CAAC;QAED,OAAO;YACL,KAAK,EAAE,QAAQ;YACf,OAAO,EAAE,KAAK;SACf,CAAC;IACJ,CAAC;AACH,CAAC;AAED,MAAM,CAAC,MAAM,cAAc,GAAG;IAC5B,KAAK,CAAC,OAAO,CACX,OAAsD,EACtD,YAA2B;QAE3B,IAAI,CAAC;YACH,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,OAAO,EAAE,CAAC;YAExC,IAAI,KAAK,EAAE,CAAC;gBACV,MAAM,QAAQ,GAAa,IAAI,QAAQ,CAAC,KAAK,CAAC,OAAO,IAAI,gBAAgB,EAAE;oBACzE,IAAI,EAAE,KAAK,CAAC,IAAI;oBAChB,OAAO,EAAE,KAAK;iBACf,CAAC,CAAC;gBAEH,cAAc,EAAE,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC;gBAEnD,OAAO;oBACL,KAAK,EAAE,QAAQ;oBACf,OAAO,EAAE,KAAK;iBACf,CAAC;YACJ,CAAC;YAED,OAAO;gBACL,IAAI,EAAE,IAAS;gBACf,OAAO,EAAE,IAAI;aACd,CAAC;QACJ,CAAC;QAAC,OAAO,KAAU,EAAE,CAAC;YACpB,MAAM,QAAQ,GACZ,KAAK,YAAY,KAAK;gBACpB,CAAC,CAAC,IAAI,QAAQ,CAAC,KAAK,CAAC,OAAO,EAAE;oBAC1B,IAAI,EAAE,KAAK,CAAC,IAAI,IAAI,UAAU;oBAC9B,KAAK,EAAE,KAAK,CAAC,KAAK;iBACnB,CAAC;gBACJ,CAAC,CAAC,IAAI,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;YAElC,cAAc,EAAE,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC;YAEnD,OAAO;gBACL,KAAK,EAAE,QAAQ;gBACf,OAAO,EAAE,KAAK;aACf,CAAC;QACJ,CAAC;IACH,CAAC;CACF,CAAC;AAEF;;;;;;;;;;;;;;;;;;;GAmBG;AACH,KAAK,UAAU,UAAU,CACvB,QAAgB,EAChB,IAAa,EACb,UAA4B,EAAE;IAE9B,MAAM,EAAE,OAAO,GAAG,KAAK,EAAE,KAAK,EAAE,SAAS,GAAG,KAAK,EAAE,GAAG,OAAO,CAAC;IAC9D,MAAM,KAAK,GAAG,MAAM,+BAA+B,EAAE,CAAC;IAEtD,MAAM,OAAO,GAA2B;QACtC,MAAM,EAAE,mBAAmB;QAC3B,cAAc,EAAE,kBAAkB;KACnC,CAAC;IACF,MAAM,YAAY,GAAG,qBAAqB,CAAC,cAAc,EAAE,CAAC,YAAY,CAAC,CAAC;IAC1E,IAAI,YAAY;QAAE,OAAO,CAAC,iBAAiB,CAAC,GAAG,YAAY,CAAC;IAC5D,IAAI,kBAAkB;QAAE,OAAO,CAAC,uBAAuB,CAAC,GAAG,GAAG,CAAC;IAC/D,wEAAwE;IACxE,2EAA2E;IAC3E,gEAAgE;IAChE,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,oBAAoB,CAAC,QAAQ,CAAC,CAAC,CAAC;IACvD,IAAI,KAAK;QAAE,OAAO,CAAC,eAAe,CAAC,GAAG,UAAU,KAAK,EAAE,CAAC;IAExD,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;IACzC,MAAM,SAAS,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,OAAO,CAAC,CAAC;IAChE,IAAI,CAAC;QACH,OAAO,MAAM,SAAS,CAAC,GAAG,SAAS,EAAE,GAAG,QAAQ,EAAE,EAAE;YAClD,MAAM,EAAE,MAAM;YACd,OAAO;YACP,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;YAC1B,MAAM,EAAE,UAAU,CAAC,MAAM;YACzB,WAAW,EAAE,MAAM;SACpB,CAAC,CAAC;IACL,CAAC;YAAS,CAAC;QACT,YAAY,CAAC,SAAS,CAAC,CAAC;IAC1B,CAAC;AACH,CAAC;AAED,MAAM,CAAC,MAAM,UAAU,GAAG;IACxB,GAAG,EAAE,CACH,QAAgB,EAChB,OAAiE,EACjE,EAAE,CAAC,WAAW,CAAI,GAAG,SAAS,EAAE,GAAG,QAAQ,EAAE,EAAE,EAAE,GAAG,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;IAE/E,IAAI,EAAE,CACJ,QAAgB,EAChB,IAAU,EACV,OAAwD,EACxD,EAAE,CACF,WAAW,CAAI,GAAG,SAAS,EAAE,GAAG,QAAQ,EAAE,EAAE;QAC1C,GAAG,OAAO;QACV,MAAM,EAAE,MAAM;QACd,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS;KAC9C,CAAC;IAEJ,GAAG,EAAE,CACH,QAAgB,EAChB,IAAU,EACV,OAAwD,EACxD,EAAE,CACF,WAAW,CAAI,GAAG,SAAS,EAAE,GAAG,QAAQ,EAAE,EAAE;QAC1C,GAAG,OAAO;QACV,MAAM,EAAE,KAAK;QACb,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS;KAC9C,CAAC;IAEJ,KAAK,EAAE,CACL,QAAgB,EAChB,IAAU,EACV,OAAwD,EACxD,EAAE,CACF,WAAW,CAAI,GAAG,SAAS,EAAE,GAAG,QAAQ,EAAE,EAAE;QAC1C,GAAG,OAAO;QACV,MAAM,EAAE,OAAO;QACf,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS;KAC9C,CAAC;IAEJ,MAAM,EAAE,CACN,QAAgB,EAChB,OAAiE,EACjE,EAAE,CACF,WAAW,CAAI,GAAG,SAAS,EAAE,GAAG,QAAQ,EAAE,EAAE;QAC1C,GAAG,OAAO;QACV,MAAM,EAAE,QAAQ;KACjB,CAAC;IAEJ,MAAM,EAAE,CACN,QAAgB,EAChB,QAAkB,EAClB,OAAiE,EACjE,EAAE;QACF,MAAM,EAAE,OAAO,EAAE,GAAG,WAAW,EAAE,GAAG,OAAO,IAAI,EAAE,CAAC;QAClD,MAAM,aAAa,GAAG,EAAE,GAAI,OAAkC,EAAE,CAAC;QACjE,OAAO,aAAa,CAAC,cAAc,CAAC,CAAC;QAErC,OAAO,WAAW,CAAI,GAAG,SAAS,EAAE,GAAG,QAAQ,EAAE,EAAE;YACjD,GAAG,WAAW;YACd,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,QAAQ;YACd,OAAO,EAAE,aAAa;SACvB,CAAC,CAAC;IACL,CAAC;IAED,SAAS,EAAE,CACT,QAAgB,EAChB,QAAkB,EAClB,OAAiE,EACjE,EAAE;QACF,MAAM,EAAE,OAAO,EAAE,GAAG,WAAW,EAAE,GAAG,OAAO,IAAI,EAAE,CAAC;QAClD,MAAM,aAAa,GAAG,EAAE,GAAI,OAAkC,EAAE,CAAC;QACjE,OAAO,aAAa,CAAC,cAAc,CAAC,CAAC;QAErC,OAAO,WAAW,CAAI,GAAG,SAAS,EAAE,GAAG,QAAQ,EAAE,EAAE;YACjD,GAAG,WAAW;YACd,MAAM,EAAE,KAAK;YACb,IAAI,EAAE,QAAQ;YACd,OAAO,EAAE,aAAa;SACvB,CAAC,CAAC;IACL,CAAC;IAED,UAAU;CACX,CAAC"}

package/dist/core/http/impersonation.d.ts

@@ -0,0 +1,58 @@
+/**
+ * Client half of platform-admin act-as impersonation.
+ *
+ * The client holds an ID, never a capability. `X-Kortix-Impersonate: <grantId>`
+ * is only meaningful next to the operator's own Supabase JWT, and the API
+ * re-validates ownership, expiry, revocation and the operator's CURRENT
+ * platform role on every request (see apps/api/src/shared/impersonation.ts).
+ * So nothing here is a security boundary — losing this value to another tab or
+ * another user grants them nothing. What this module owes the user is honesty:
+ * while a session is stored, EVERY request carries the header, and the app
+ * shell shows the banner that says so.
+ *
+ * Persisted in `sessionStorage`, not `localStorage`: acting as an account is
+ * per-tab and must not outlive the tab. `window`/`sessionStorage` are globals,
+ * not imports, so every access is guarded — the SDK core has to load in Node,
+ * a Worker, and React Native, where neither exists.
+ */
+/** The request header. Matches `IMPERSONATION_HEADER` in the API. */
+export declare const IMPERSONATION_HEADER = "X-Kortix-Impersonate";
+/** What the console stores after minting a grant. */
+export interface ImpersonationSession {
+    /** `impersonation_grants.id`. The only part sent to the server. */
+    grantId: string;
+    /** The account being acted as — what the banner names. */
+    accountId: string;
+    /** Display name, for the banner. Null when the account has none. */
+    accountName?: string | null;
+    /** ISO-8601 instant the grant dies. The server caps this at one hour. */
+    expiresAt: string;
+}
+/**
+ * A session with no parseable future expiry is NOT a session. Treating an
+ * unreadable date as "no expiry" would leave a banner up, and a header
+ * attached, forever after one corrupt write.
+ */
+export declare function isImpersonationSessionLive(session: ImpersonationSession | null | undefined, now?: number): boolean;
+/**
+ * The live session, or null. Reads through to `sessionStorage` once per JS
+ * context so a full page navigation (admin console → app shell) keeps acting
+ * as the account, then serves the in-memory mirror.
+ *
+ * An expired session is DROPPED here — the store never hands back a value the
+ * server would 403 — and dropping it notifies subscribers, so the banner
+ * disappears on its own when the hour is up.
+ */
+export declare function getImpersonationSession(): ImpersonationSession | null;
+export declare function setImpersonationSession(session: ImpersonationSession | null): void;
+export declare function clearImpersonationSession(): void;
+/** Subscribe to session changes (the banner's data source). Returns an unsubscribe. */
+export declare function subscribeToImpersonation(listener: () => void): () => void;
+export declare function shouldAttachImpersonation(url: string): boolean;
+/**
+ * Headers a platform request adds while acting as an account. `{}` when there
+ * is no live session, so the ordinary path allocates one empty object and
+ * touches nothing else.
+ */
+export declare function impersonationHeaders(url?: string): Record<string, string>;
+//# sourceMappingURL=impersonation.d.ts.map

package/dist/core/http/impersonation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"impersonation.d.ts","sourceRoot":"","sources":["../../../src/core/http/impersonation.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,qEAAqE;AACrE,eAAO,MAAM,oBAAoB,yBAAyB,CAAC;AAI3D,qDAAqD;AACrD,MAAM,WAAW,oBAAoB;IACnC,mEAAmE;IACnE,OAAO,EAAE,MAAM,CAAC;IAChB,0DAA0D;IAC1D,SAAS,EAAE,MAAM,CAAC;IAClB,oEAAoE;IACpE,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,yEAAyE;IACzE,SAAS,EAAE,MAAM,CAAC;CACnB;AAgBD;;;;GAIG;AACH,wBAAgB,0BAA0B,CACxC,OAAO,EAAE,oBAAoB,GAAG,IAAI,GAAG,SAAS,EAChD,GAAG,GAAE,MAAmB,GACvB,OAAO,CAIT;AA6BD;;;;;;;;GAQG;AACH,wBAAgB,uBAAuB,IAAI,oBAAoB,GAAG,IAAI,CAUrE;AAED,wBAAgB,uBAAuB,CAAC,OAAO,EAAE,oBAAoB,GAAG,IAAI,GAAG,IAAI,CAclF;AAED,wBAAgB,yBAAyB,IAAI,IAAI,CAUhD;AAED,uFAAuF;AACvF,wBAAgB,wBAAwB,CAAC,QAAQ,EAAE,MAAM,IAAI,GAAG,MAAM,IAAI,CAKzE;AAuBD,wBAAgB,yBAAyB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAU9D;AAED;;;;GAIG;AACH,wBAAgB,oBAAoB,CAAC,GAAG,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAIzE"}

package/dist/core/http/impersonation.js

@@ -0,0 +1,174 @@
+/**
+ * Client half of platform-admin act-as impersonation.
+ *
+ * The client holds an ID, never a capability. `X-Kortix-Impersonate: <grantId>`
+ * is only meaningful next to the operator's own Supabase JWT, and the API
+ * re-validates ownership, expiry, revocation and the operator's CURRENT
+ * platform role on every request (see apps/api/src/shared/impersonation.ts).
+ * So nothing here is a security boundary — losing this value to another tab or
+ * another user grants them nothing. What this module owes the user is honesty:
+ * while a session is stored, EVERY request carries the header, and the app
+ * shell shows the banner that says so.
+ *
+ * Persisted in `sessionStorage`, not `localStorage`: acting as an account is
+ * per-tab and must not outlive the tab. `window`/`sessionStorage` are globals,
+ * not imports, so every access is guarded — the SDK core has to load in Node,
+ * a Worker, and React Native, where neither exists.
+ */
+/** The request header. Matches `IMPERSONATION_HEADER` in the API. */
+export const IMPERSONATION_HEADER = 'X-Kortix-Impersonate';
+const STORAGE_KEY = 'kortix.impersonation';
+let current = null;
+let hydrated = false;
+const listeners = new Set();
+function storage() {
+    try {
+        if (typeof sessionStorage === 'undefined')
+            return null;
+        return sessionStorage;
+    }
+    catch {
+        // Access to storage throws outright in some privacy modes.
+        return null;
+    }
+}
+/**
+ * A session with no parseable future expiry is NOT a session. Treating an
+ * unreadable date as "no expiry" would leave a banner up, and a header
+ * attached, forever after one corrupt write.
+ */
+export function isImpersonationSessionLive(session, now = Date.now()) {
+    if (!session || !session.grantId || !session.accountId)
+        return false;
+    const expiry = Date.parse(session.expiresAt);
+    return Number.isFinite(expiry) && expiry > now;
+}
+function parse(raw) {
+    if (!raw)
+        return null;
+    try {
+        const parsed = JSON.parse(raw);
+        if (typeof parsed?.grantId !== 'string' || typeof parsed?.accountId !== 'string')
+            return null;
+        return {
+            grantId: parsed.grantId,
+            accountId: parsed.accountId,
+            accountName: typeof parsed.accountName === 'string' ? parsed.accountName : null,
+            expiresAt: typeof parsed.expiresAt === 'string' ? parsed.expiresAt : '',
+        };
+    }
+    catch {
+        return null;
+    }
+}
+function notify() {
+    for (const listener of listeners) {
+        try {
+            listener();
+        }
+        catch {
+            // A broken subscriber must not stop the others, and must never break the
+            // request that triggered the change.
+        }
+    }
+}
+/**
+ * The live session, or null. Reads through to `sessionStorage` once per JS
+ * context so a full page navigation (admin console → app shell) keeps acting
+ * as the account, then serves the in-memory mirror.
+ *
+ * An expired session is DROPPED here — the store never hands back a value the
+ * server would 403 — and dropping it notifies subscribers, so the banner
+ * disappears on its own when the hour is up.
+ */
+export function getImpersonationSession() {
+    if (!hydrated) {
+        hydrated = true;
+        current = parse(storage()?.getItem(STORAGE_KEY) ?? null);
+    }
+    if (current && !isImpersonationSessionLive(current)) {
+        clearImpersonationSession();
+        return null;
+    }
+    return current;
+}
+export function setImpersonationSession(session) {
+    hydrated = true;
+    if (!session) {
+        clearImpersonationSession();
+        return;
+    }
+    current = session;
+    try {
+        storage()?.setItem(STORAGE_KEY, JSON.stringify(session));
+    }
+    catch {
+        // Quota or privacy mode. The in-memory mirror still works for this tab's
+        // lifetime; only reload-survival is lost.
+    }
+    notify();
+}
+export function clearImpersonationSession() {
+    hydrated = true;
+    const had = current !== null;
+    current = null;
+    try {
+        storage()?.removeItem(STORAGE_KEY);
+    }
+    catch {
+        /* see setImpersonationSession */
+    }
+    if (had)
+        notify();
+}
+/** Subscribe to session changes (the banner's data source). Returns an unsubscribe. */
+export function subscribeToImpersonation(listener) {
+    listeners.add(listener);
+    return () => {
+        listeners.delete(listener);
+    };
+}
+/**
+ * The admin console is the ONE surface that is never impersonated.
+ *
+ * The server refuses an impersonated `/v1/admin/*` request outright — no
+ * nesting, no minting a second grant, no changing platform roles from inside a
+ * customer's context. The revoke route lives under that same prefix, so a
+ * client that attached the header everywhere would 403 its own Exit button and
+ * strand the operator until the grant expired.
+ *
+ * Skipping it here is UX, not a security decision: the server's denial is the
+ * control, and it still fires for any client that does send the header.
+ *
+ * Matched on `admin/` FOLLOWED BY one of the console's two sub-routers, not on
+ * the bare word: every admin route is `/admin/api/…` or `/admin/analytics/…`,
+ * while `/projects/admin/sessions` is an ordinary product path for a project
+ * that happens to be called "admin". Anchoring on the pair keeps a
+ * customer-controlled name from silently exempting itself, and keeps working
+ * when the backend URL carries a path prefix of its own.
+ */
+const ADMIN_CONSOLE_PATH_RE = /(^|\/)admin\/(api|analytics)(\/|$)/;
+export function shouldAttachImpersonation(url) {
+    let path = url;
+    if (/^https?:\/\//.test(url)) {
+        try {
+            path = new URL(url).pathname;
+        }
+        catch {
+            path = url;
+        }
+    }
+    return !ADMIN_CONSOLE_PATH_RE.test(path);
+}
+/**
+ * Headers a platform request adds while acting as an account. `{}` when there
+ * is no live session, so the ordinary path allocates one empty object and
+ * touches nothing else.
+ */
+export function impersonationHeaders(url) {
+    if (url !== undefined && !shouldAttachImpersonation(url))
+        return {};
+    const session = getImpersonationSession();
+    return session ? { [IMPERSONATION_HEADER]: session.grantId } : {};
+}
+//# sourceMappingURL=impersonation.js.map

package/dist/core/http/impersonation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"impersonation.js","sourceRoot":"","sources":["../../../src/core/http/impersonation.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,qEAAqE;AACrE,MAAM,CAAC,MAAM,oBAAoB,GAAG,sBAAsB,CAAC;AAE3D,MAAM,WAAW,GAAG,sBAAsB,CAAC;AAc3C,IAAI,OAAO,GAAgC,IAAI,CAAC;AAChD,IAAI,QAAQ,GAAG,KAAK,CAAC;AACrB,MAAM,SAAS,GAAG,IAAI,GAAG,EAAc,CAAC;AAExC,SAAS,OAAO;IACd,IAAI,CAAC;QACH,IAAI,OAAO,cAAc,KAAK,WAAW;YAAE,OAAO,IAAI,CAAC;QACvD,OAAO,cAAc,CAAC;IACxB,CAAC;IAAC,MAAM,CAAC;QACP,2DAA2D;QAC3D,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,0BAA0B,CACxC,OAAgD,EAChD,MAAc,IAAI,CAAC,GAAG,EAAE;IAExB,IAAI,CAAC,OAAO,IAAI,CAAC,OAAO,CAAC,OAAO,IAAI,CAAC,OAAO,CAAC,SAAS;QAAE,OAAO,KAAK,CAAC;IACrE,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IAC7C,OAAO,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,MAAM,GAAG,GAAG,CAAC;AACjD,CAAC;AAED,SAAS,KAAK,CAAC,GAAkB;IAC/B,IAAI,CAAC,GAAG;QAAE,OAAO,IAAI,CAAC;IACtB,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAkC,CAAC;QAChE,IAAI,OAAO,MAAM,EAAE,OAAO,KAAK,QAAQ,IAAI,OAAO,MAAM,EAAE,SAAS,KAAK,QAAQ;YAAE,OAAO,IAAI,CAAC;QAC9F,OAAO;YACL,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,WAAW,EAAE,OAAO,MAAM,CAAC,WAAW,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI;YAC/E,SAAS,EAAE,OAAO,MAAM,CAAC,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE;SACxE,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,MAAM;IACb,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE,CAAC;QACjC,IAAI,CAAC;YACH,QAAQ,EAAE,CAAC;QACb,CAAC;QAAC,MAAM,CAAC;YACP,yEAAyE;YACzE,qCAAqC;QACvC,CAAC;IACH,CAAC;AACH,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,uBAAuB;IACrC,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,QAAQ,GAAG,IAAI,CAAC;QAChB,OAAO,GAAG,KAAK,CAAC,OAAO,EAAE,EAAE,OAAO,CAAC,WAAW,CAAC,IAAI,IAAI,CAAC,CAAC;IAC3D,CAAC;IACD,IAAI,OAAO,IAAI,CAAC,0BAA0B,CAAC,OAAO,CAAC,EAAE,CAAC;QACpD,yBAAyB,EAAE,CAAC;QAC5B,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,UAAU,uBAAuB,CAAC,OAAoC;IAC1E,QAAQ,GAAG,IAAI,CAAC;IAChB,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,yBAAyB,EAAE,CAAC;QAC5B,OAAO;IACT,CAAC;IACD,OAAO,GAAG,OAAO,CAAC;IAClB,IAAI,CAAC;QACH,OAAO,EAAE,EAAE,OAAO,CAAC,WAAW,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC;IAC3D,CAAC;IAAC,MAAM,CAAC;QACP,yEAAyE;QACzE,0CAA0C;IAC5C,CAAC;IACD,MAAM,EAAE,CAAC;AACX,CAAC;AAED,MAAM,UAAU,yBAAyB;IACvC,QAAQ,GAAG,IAAI,CAAC;IAChB,MAAM,GAAG,GAAG,OAAO,KAAK,IAAI,CAAC;IAC7B,OAAO,GAAG,IAAI,CAAC;IACf,IAAI,CAAC;QACH,OAAO,EAAE,EAAE,UAAU,CAAC,WAAW,CAAC,CAAC;IACrC,CAAC;IAAC,MAAM,CAAC;QACP,iCAAiC;IACnC,CAAC;IACD,IAAI,GAAG;QAAE,MAAM,EAAE,CAAC;AACpB,CAAC;AAED,uFAAuF;AACvF,MAAM,UAAU,wBAAwB,CAAC,QAAoB;IAC3D,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IACxB,OAAO,GAAG,EAAE;QACV,SAAS,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IAC7B,CAAC,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,qBAAqB,GAAG,oCAAoC,CAAC;AAEnE,MAAM,UAAU,yBAAyB,CAAC,GAAW;IACnD,IAAI,IAAI,GAAG,GAAG,CAAC;IACf,IAAI,cAAc,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QAC7B,IAAI,CAAC;YACH,IAAI,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC;QAC/B,CAAC;QAAC,MAAM,CAAC;YACP,IAAI,GAAG,GAAG,CAAC;QACb,CAAC;IACH,CAAC;IACD,OAAO,CAAC,qBAAqB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC3C,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,oBAAoB,CAAC,GAAY;IAC/C,IAAI,GAAG,KAAK,SAAS,IAAI,CAAC,yBAAyB,CAAC,GAAG,CAAC;QAAE,OAAO,EAAE,CAAC;IACpE,MAAM,OAAO,GAAG,uBAAuB,EAAE,CAAC;IAC1C,OAAO,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,oBAAoB,CAAC,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;AACpE,CAAC"}

package/dist/core/rest/platform-client/github-app.d.ts

@@ -20,6 +20,12 @@ export interface GitHubAppStatus {
      *  'pat' = a personal/fine-grained access token, via `setGitHubAppPat` or
      *  `MANAGED_GIT_GITHUB_TOKEN`. 'none' = unconfigured. */
     source: 'db' | 'env' | 'pat' | 'none';
+    /** Whether the App's own OAuth client (client_id/client_secret) is set —
+     *  required for the account-linking "Continue with GitHub" identity proof
+     *  (apps/(auth)/github/setup). Independent of `configured`: the manifest
+     *  flow always sets both together, but `setGitHubAppFromExisting` can leave
+     *  this false if an operator pastes App creds without OAuth credentials. */
+    oauth_configured: boolean;
 }
 /** Whether a GitHub App is configured for this platform, and (if so) which one. */
 export declare function getGitHubAppStatus(): Promise<GitHubAppStatus>;
@@ -50,6 +56,13 @@ export interface GitHubAppExistingInput {
     /** The id of this App's installation on the target account/org. */
     installationId: string;
     slug?: string;
+    /** The App's own OAuth client id/secret (GitHub settings → General →
+     *  "Client secrets"). Optional — without these the App-JWT/installation
+     *  half still works, but the account-linking "Continue with GitHub"
+     *  identity proof stays unconfigured for this App until they're supplied
+     *  here or via KORTIX_GITHUB_APP_CLIENT_ID/SECRET. */
+    clientId?: string;
+    clientSecret?: string;
 }
 /**
  * "Paste an existing GitHub App" — an alternative to the manifest flow for an

package/dist/core/rest/platform-client/github-app.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"github-app.d.ts","sourceRoot":"","sources":["../../../../src/core/rest/platform-client/github-app.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAIH,MAAM,WAAW,eAAe;IAC9B,UAAU,EAAE,OAAO,CAAC;IACpB,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B;;;;6DAIyD;IACzD,MAAM,EAAE,IAAI,GAAG,KAAK,GAAG,KAAK,GAAG,MAAM,CAAC;CACvC;AAED,mFAAmF;AACnF,wBAAsB,kBAAkB,IAAI,OAAO,CAAC,eAAe,CAAC,CAOnE;AAED,MAAM,WAAW,2BAA2B;IAC1C,4FAA4F;IAC5F,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,sBAAsB;IACrC,0FAA0F;IAC1F,iBAAiB,EAAE,MAAM,CAAC;IAC1B,0FAA0F;IAC1F,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAClC,qGAAqG;IACrG,KAAK,EAAE,MAAM,CAAC;CACf;AAED;;;;;GAKG;AACH,wBAAsB,sBAAsB,CAC1C,KAAK,GAAE,2BAAgC,GACtC,OAAO,CAAC,sBAAsB,CAAC,CASjC;AAED,MAAM,WAAW,sBAAsB;IACrC,kEAAkE;IAClE,KAAK,EAAE,MAAM,CAAC;IACd,wFAAwF;IACxF,UAAU,EAAE,MAAM,CAAC;IACnB,mEAAmE;IACnE,cAAc,EAAE,MAAM,CAAC;IACvB,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED;;;;GAIG;AACH,wBAAsB,wBAAwB,CAC5C,KAAK,EAAE,sBAAsB,GAC5B,OAAO,CAAC;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC,CActC;AAED,MAAM,WAAW,iBAAiB;IAChC,oGAAoG;IACpG,KAAK,EAAE,MAAM,CAAC;IACd,0EAA0E;IAC1E,KAAK,EAAE,MAAM,CAAC;CACf;AAED;;;GAGG;AACH,wBAAsB,eAAe,CAAC,KAAK,EAAE,iBAAiB,GAAG,OAAO,CAAC;IAAE,EAAE,EAAE,IAAI,CAAA;CAAE,CAAC,CAOrF;AAED,mFAAmF;AACnF,wBAAsB,mBAAmB,IAAI,OAAO,CAAC;IAAE,EAAE,EAAE,IAAI,CAAA;CAAE,CAAC,CAOjE"}
+{"version":3,"file":"github-app.d.ts","sourceRoot":"","sources":["../../../../src/core/rest/platform-client/github-app.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAIH,MAAM,WAAW,eAAe;IAC9B,UAAU,EAAE,OAAO,CAAC;IACpB,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B;;;;6DAIyD;IACzD,MAAM,EAAE,IAAI,GAAG,KAAK,GAAG,KAAK,GAAG,MAAM,CAAC;IACtC;;;;gFAI4E;IAC5E,gBAAgB,EAAE,OAAO,CAAC;CAC3B;AAED,mFAAmF;AACnF,wBAAsB,kBAAkB,IAAI,OAAO,CAAC,eAAe,CAAC,CAOnE;AAED,MAAM,WAAW,2BAA2B;IAC1C,4FAA4F;IAC5F,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,sBAAsB;IACrC,0FAA0F;IAC1F,iBAAiB,EAAE,MAAM,CAAC;IAC1B,0FAA0F;IAC1F,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAClC,qGAAqG;IACrG,KAAK,EAAE,MAAM,CAAC;CACf;AAED;;;;;GAKG;AACH,wBAAsB,sBAAsB,CAC1C,KAAK,GAAE,2BAAgC,GACtC,OAAO,CAAC,sBAAsB,CAAC,CASjC;AAED,MAAM,WAAW,sBAAsB;IACrC,kEAAkE;IAClE,KAAK,EAAE,MAAM,CAAC;IACd,wFAAwF;IACxF,UAAU,EAAE,MAAM,CAAC;IACnB,mEAAmE;IACnE,cAAc,EAAE,MAAM,CAAC;IACvB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd;;;;0DAIsD;IACtD,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED;;;;GAIG;AACH,wBAAsB,wBAAwB,CAC5C,KAAK,EAAE,sBAAsB,GAC5B,OAAO,CAAC;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC,CAgBtC;AAED,MAAM,WAAW,iBAAiB;IAChC,oGAAoG;IACpG,KAAK,EAAE,MAAM,CAAC;IACd,0EAA0E;IAC1E,KAAK,EAAE,MAAM,CAAC;CACf;AAED;;;GAGG;AACH,wBAAsB,eAAe,CAAC,KAAK,EAAE,iBAAiB,GAAG,OAAO,CAAC;IAAE,EAAE,EAAE,IAAI,CAAA;CAAE,CAAC,CAOrF;AAED,mFAAmF;AACnF,wBAAsB,mBAAmB,IAAI,OAAO,CAAC;IAAE,EAAE,EAAE,IAAI,CAAA;CAAE,CAAC,CAOjE"}

package/dist/core/rest/platform-client/github-app.js

@@ -46,6 +46,8 @@ export async function setGitHubAppFromExisting(input) {
         private_key: input.privateKey,
         installation_id: input.installationId,
         slug: input.slug,
+        client_id: input.clientId,
+        client_secret: input.clientSecret,
     }, { showErrors: false });
     if (response.error)
         throw response.error;