@lifeready/core 5.0.1 → 5.0.2

package/bundles/lifeready-core.umd.js

@@ -344,193 +344,220 @@
     function handleApolloError(errors) {
         if (!errors || !errors.length)
             return;
-        var lrErrors = errors.map(function (x) { return ({
-            code: x.extensions && x.extensions.code,
-            source: x.extensions && x.extensions.source,
-            message: x.message,
-            debug: {
-                locations: x.locations,
-                path: x.path,
-            },
-        }); });
-        throw new (LrException.bind.apply(LrException, __spread([void 0], lrErrors)))();
+        var kcErrors = errors.map(function (x) {
+            return new KcError({
+                code: x.extensions && x.extensions.code,
+                source: x.extensions && x.extensions.source,
+                message: x.message,
+                debug: {
+                    locations: x.locations,
+                    path: x.path,
+                },
+            });
+        });
+        throw new (KcException.bind.apply(KcException, __spread([void 0], kcErrors)))();
     }
-    var LrError = /** @class */ (function () {
-        function LrError() {
-        }
-        return LrError;
+    var KcError = /** @class */ (function () {
+        function KcError(options) {
+            /**
+             * The _tag prevents being able to return an object when a class is required:
+             * ref: https://medium.com/decathlondevelopers/whats-the-problem-with-typescript-s-classes-2e60aaad3f6
+             * Example:
+             *   // This works because KcError is being treated as a type.
+             *   function test(): KcError {
+             *     return {message: "123"};
+             *   }
+             * With the private _tag property, the above will cause a compiler error because _tag property is missing
+             * from the returned object.
+             *
+             * The _type property also provides a type indicator when serialising the class to POJO.
+             */
+            this._type = 'KcError';
+            this.code = options.code;
+            this.source = options.source;
+            this.message = options.message;
+            this.debug = options.debug;
+        }
+        return KcError;
     }());
-    var LrException = /** @class */ (function () {
-        function LrException() {
+    var KcException = /** @class */ (function () {
+        /**
+         *
+         * @param errors Each argument is a KcError.
+         */
+        function KcException() {
             var errors = [];
             for (var _i = 0; _i < arguments.length; _i++) {
                 errors[_i] = arguments[_i];
             }
+            this._type = 'KcException';
             this.errors = errors;
         }
-        LrException.prototype.toString = function () {
+        KcException.prototype.toString = function () {
             return this.errors.map(function (t) { return JSON.stringify(t, null, 2); });
         };
-        return LrException;
+        return KcException;
     }());
-    (function (LrApiErrorCode) {
-        LrApiErrorCode["ARCHIVED_RESOURCE"] = "ARCHIVED_RESOURCE";
-        LrApiErrorCode["BAD_ARGUMENT"] = "BAD_ARGUMENT";
-        LrApiErrorCode["BAD_SIGNATURE"] = "BAD_SIGNATURE";
-        LrApiErrorCode["BAD_STATE"] = "BAD_STATE";
-        LrApiErrorCode["CHANGED_PERMISSIONS"] = "CHANGED_PERMISSIONS";
-        LrApiErrorCode["CONCURRENT_ACCESS"] = "CONCURRENT_ACCESS";
-        LrApiErrorCode["CONFIG_ERROR"] = "CONFIG_ERROR";
-        LrApiErrorCode["CYCLE_DETECTED"] = "CYCLE_DETECTED";
-        LrApiErrorCode["EXPIRED"] = "EXPIRED";
-        LrApiErrorCode["INVALID_TOKEN"] = "INVALID_TOKEN";
-        LrApiErrorCode["INTERNAL_ERROR"] = "INTERNAL_ERROR";
-        LrApiErrorCode["JSON_DECODE_ERROR"] = "JSON_DECODE_ERROR";
-        LrApiErrorCode["KEY_MISMATCH"] = "KEY_MISMATCH";
-        LrApiErrorCode["LIMIT_REACHED"] = "LIMIT_REACHED";
-        LrApiErrorCode["LOCKED"] = "LOCKED";
-        LrApiErrorCode["LOGIC_ERROR"] = "LOGIC_ERROR";
-        LrApiErrorCode["LR_DEBUG_ONLY"] = "LR_DEBUG_ONLY";
-        LrApiErrorCode["MIN_DELAY"] = "MIN_DELAY";
-        LrApiErrorCode["MISSING_FIELD"] = "MISSING_FIELD";
-        LrApiErrorCode["MISSING_FIELD_VALUE"] = "MISSING_FIELD_VALUE";
-        LrApiErrorCode["MISSING_QUERY_PARAM"] = "MISSING_QUERY_PARAM";
-        LrApiErrorCode["NOT_IMPLEMENTED"] = "NOT_IMPLEMENTED";
-        LrApiErrorCode["OBJECT_DOES_NOT_EXIST"] = "OBJECT_DOES_NOT_EXIST";
-        LrApiErrorCode["OBJECT_EXISTS"] = "OBJECT_EXISTS";
-        LrApiErrorCode["RANGE_ERROR"] = "RANGE_ERROR";
-        LrApiErrorCode["TRUSTED_PARTY_NOT_FOUND"] = "TRUSTED_PARTY_NOT_FOUND";
-        LrApiErrorCode["UNAUTHENTICATED_USER"] = "UNAUTHENTICATED_USER";
-        LrApiErrorCode["USER_NOT_FOUND"] = "USER_NOT_FOUND";
-        LrApiErrorCode["VERSION_MISMATCH"] = "VERSION_MISMATCH";
-        LrApiErrorCode["WRONG_PERMISSIONS"] = "WRONG_PERMISSIONS";
-    })(exports.LrApiErrorCode || (exports.LrApiErrorCode = {}));
-    (function (LrErrorCode) {
-        LrErrorCode["BadTimeSync"] = "LrBadTimeSync";
-        LrErrorCode["ReceiveClaimMismatch"] = "LrReceiveClaimMismatch";
-        LrErrorCode["BadState"] = "LrBadState";
-        LrErrorCode["BadSignature"] = "LrBadSignature";
-        LrErrorCode["Auth"] = "LrAuth";
-        LrErrorCode["BadArgument"] = "LrBadArgument";
-        LrErrorCode["SuspiciousException"] = "LrSuspiciousException";
-        LrErrorCode["NotFound"] = "LrNotFound";
-        LrErrorCode["BadLogic"] = "LrBadLogicException";
-        LrErrorCode["CodeMismatch"] = "LrCodeMismatchException";
-        LrErrorCode["ConcurrentAccess"] = "LrConcurrentAccessException";
-        LrErrorCode["BadRequest"] = "LrBadRequestException";
-        LrErrorCode["Encryption"] = "LrEncryptionGoBad";
-        LrErrorCode["Locked"] = "LrLockedException";
-    })(exports.LrErrorCode || (exports.LrErrorCode = {}));
-    var LrBadArgumentException = /** @class */ (function (_super) {
-        __extends(LrBadArgumentException, _super);
-        function LrBadArgumentException(message) {
-            return _super.call(this, { code: exports.LrErrorCode.BadArgument, message: message }) || this;
-        }
-        return LrBadArgumentException;
-    }(LrException));
-    var LrSuspiciousException = /** @class */ (function (_super) {
-        __extends(LrSuspiciousException, _super);
-        function LrSuspiciousException(message) {
-            return _super.call(this, { code: exports.LrErrorCode.BadArgument, message: message }) || this;
-        }
-        return LrSuspiciousException;
-    }(LrException));
-    var LrNotFoundException = /** @class */ (function (_super) {
-        __extends(LrNotFoundException, _super);
-        function LrNotFoundException(message) {
-            return _super.call(this, { code: exports.LrErrorCode.NotFound, message: message }) || this;
-        }
-        return LrNotFoundException;
-    }(LrException));
-    var LrBadLogicException = /** @class */ (function (_super) {
-        __extends(LrBadLogicException, _super);
-        function LrBadLogicException(message) {
-            return _super.call(this, { code: exports.LrErrorCode.BadLogic, message: message }) || this;
-        }
-        return LrBadLogicException;
-    }(LrException));
-    var LrCodeMismatchException = /** @class */ (function (_super) {
-        __extends(LrCodeMismatchException, _super);
-        function LrCodeMismatchException(message) {
-            return _super.call(this, { code: exports.LrErrorCode.CodeMismatch, message: message }) || this;
-        }
-        return LrCodeMismatchException;
-    }(LrException));
-    var LrConcurrentAccessException = /** @class */ (function (_super) {
-        __extends(LrConcurrentAccessException, _super);
-        function LrConcurrentAccessException(message) {
-            return _super.call(this, { code: exports.LrErrorCode.ConcurrentAccess, message: message }) || this;
-        }
-        return LrConcurrentAccessException;
-    }(LrException));
-    var LrLockedException = /** @class */ (function (_super) {
-        __extends(LrLockedException, _super);
-        function LrLockedException(message) {
-            return _super.call(this, { code: exports.LrErrorCode.Locked, message: message }) || this;
-        }
-        return LrLockedException;
-    }(LrException));
-    var LrBadRequestException = /** @class */ (function (_super) {
-        __extends(LrBadRequestException, _super);
-        function LrBadRequestException(message) {
-            return _super.call(this, { code: exports.LrErrorCode.BadRequest, message: message }) || this;
-        }
-        return LrBadRequestException;
-    }(LrException));
-    var LrAuthException = /** @class */ (function (_super) {
-        __extends(LrAuthException, _super);
-        function LrAuthException(message) {
-            return _super.call(this, { code: exports.LrErrorCode.Auth, message: message }) || this;
-        }
-        return LrAuthException;
-    }(LrException));
-    var LrEncryptionException = /** @class */ (function (_super) {
-        __extends(LrEncryptionException, _super);
-        function LrEncryptionException(message) {
-            return _super.call(this, { code: exports.LrErrorCode.Encryption, message: message }) || this;
-        }
-        return LrEncryptionException;
-    }(LrException));
-    var LrUnsupportedException = /** @class */ (function (_super) {
-        __extends(LrUnsupportedException, _super);
-        function LrUnsupportedException(message) {
-            return _super.call(this, {
-                code: 'LrUnsupportedException',
+    (function (KcErrorCode) {
+        // API errors
+        KcErrorCode["ARCHIVED_RESOURCE"] = "ARCHIVED_RESOURCE";
+        KcErrorCode["BAD_ARGUMENT"] = "BAD_ARGUMENT";
+        KcErrorCode["BAD_SIGNATURE"] = "BAD_SIGNATURE";
+        KcErrorCode["BAD_STATE"] = "BAD_STATE";
+        KcErrorCode["CHANGED_PERMISSIONS"] = "CHANGED_PERMISSIONS";
+        KcErrorCode["CONCURRENT_ACCESS"] = "CONCURRENT_ACCESS";
+        KcErrorCode["CONFIG_ERROR"] = "CONFIG_ERROR";
+        KcErrorCode["CYCLE_DETECTED"] = "CYCLE_DETECTED";
+        KcErrorCode["EXPIRED"] = "EXPIRED";
+        KcErrorCode["INVALID_TOKEN"] = "INVALID_TOKEN";
+        KcErrorCode["INTERNAL_ERROR"] = "INTERNAL_ERROR";
+        KcErrorCode["JSON_DECODE_ERROR"] = "JSON_DECODE_ERROR";
+        KcErrorCode["KEY_MISMATCH"] = "KEY_MISMATCH";
+        KcErrorCode["LIMIT_REACHED"] = "LIMIT_REACHED";
+        KcErrorCode["LOCKED"] = "LOCKED";
+        KcErrorCode["LOGIC_ERROR"] = "LOGIC_ERROR";
+        KcErrorCode["LR_DEBUG_ONLY"] = "LR_DEBUG_ONLY";
+        KcErrorCode["MIN_DELAY"] = "MIN_DELAY";
+        KcErrorCode["MISSING_FIELD"] = "MISSING_FIELD";
+        KcErrorCode["MISSING_FIELD_VALUE"] = "MISSING_FIELD_VALUE";
+        KcErrorCode["MISSING_QUERY_PARAM"] = "MISSING_QUERY_PARAM";
+        KcErrorCode["NOT_IMPLEMENTED"] = "NOT_IMPLEMENTED";
+        KcErrorCode["OBJECT_DOES_NOT_EXIST"] = "OBJECT_DOES_NOT_EXIST";
+        KcErrorCode["OBJECT_EXISTS"] = "OBJECT_EXISTS";
+        KcErrorCode["RANGE_ERROR"] = "RANGE_ERROR";
+        KcErrorCode["TRUSTED_PARTY_NOT_FOUND"] = "TRUSTED_PARTY_NOT_FOUND";
+        KcErrorCode["UNAUTHENTICATED_USER"] = "UNAUTHENTICATED_USER";
+        KcErrorCode["USER_NOT_FOUND"] = "USER_NOT_FOUND";
+        KcErrorCode["VERSION_MISMATCH"] = "VERSION_MISMATCH";
+        KcErrorCode["WRONG_PERMISSIONS"] = "WRONG_PERMISSIONS";
+        // KC client errors
+        KcErrorCode["AUTH"] = "AUTH";
+        KcErrorCode["BAD_LOGIC"] = "BAD_LOGIC";
+        KcErrorCode["BAD_REQUEST"] = "BAD_REQUEST";
+        KcErrorCode["BAD_TIME_SYNC"] = "BAD_TIME_SYNC";
+        KcErrorCode["CODE_MISMATCH"] = "CODE_MISMATCH";
+        KcErrorCode["ENCRYPTION"] = "ENCRYPTION";
+        KcErrorCode["NOT_FOUND"] = "NOT_FOUND";
+        KcErrorCode["SUSPICIOUS_OPERATION"] = "SUSPICIOUS_OPERATION";
+        KcErrorCode["UNSUPPORTED"] = "UNSUPPORTED";
+    })(exports.KcErrorCode || (exports.KcErrorCode = {}));
+    var KcAuthException = /** @class */ (function (_super) {
+        __extends(KcAuthException, _super);
+        function KcAuthException(message) {
+            return _super.call(this, new KcError({ code: exports.KcErrorCode.AUTH, message: message })) || this;
+        }
+        return KcAuthException;
+    }(KcException));
+    var KcBadArgumentException = /** @class */ (function (_super) {
+        __extends(KcBadArgumentException, _super);
+        function KcBadArgumentException(message) {
+            return _super.call(this, new KcError({ code: exports.KcErrorCode.BAD_ARGUMENT, message: message })) || this;
+        }
+        return KcBadArgumentException;
+    }(KcException));
+    var KcBadLogicException = /** @class */ (function (_super) {
+        __extends(KcBadLogicException, _super);
+        function KcBadLogicException(message) {
+            return _super.call(this, new KcError({ code: exports.KcErrorCode.BAD_LOGIC, message: message })) || this;
+        }
+        return KcBadLogicException;
+    }(KcException));
+    var KcBadRequestException = /** @class */ (function (_super) {
+        __extends(KcBadRequestException, _super);
+        function KcBadRequestException(message) {
+            return _super.call(this, new KcError({ code: exports.KcErrorCode.BAD_REQUEST, message: message })) || this;
+        }
+        return KcBadRequestException;
+    }(KcException));
+    var KcBadSignatureException = /** @class */ (function (_super) {
+        __extends(KcBadSignatureException, _super);
+        function KcBadSignatureException(message) {
+            return _super.call(this, new KcError({ code: exports.KcErrorCode.BAD_SIGNATURE, message: message })) || this;
+        }
+        return KcBadSignatureException;
+    }(KcException));
+    var KcBadStateException = /** @class */ (function (_super) {
+        __extends(KcBadStateException, _super);
+        function KcBadStateException(message) {
+            return _super.call(this, new KcError({
+                code: exports.KcErrorCode.BAD_STATE,
                 message: message,
-            }) || this;
-        }
-        return LrUnsupportedException;
-    }(LrException));
-    var LrExpiredCodeException = /** @class */ (function (_super) {
-        __extends(LrExpiredCodeException, _super);
-        function LrExpiredCodeException(message) {
-            return _super.call(this, {
-                code: 'LrExpiredCodeException',
+            })) || this;
+        }
+        return KcBadStateException;
+    }(KcException));
+    var KcBadTimeSyncException = /** @class */ (function (_super) {
+        __extends(KcBadTimeSyncException, _super);
+        function KcBadTimeSyncException(message) {
+            return _super.call(this, new KcError({
+                code: exports.KcErrorCode.BAD_TIME_SYNC,
                 message: message,
-            }) || this;
-        }
-        return LrExpiredCodeException;
-    }(LrException));
-    var LrExpiredException = /** @class */ (function (_super) {
-        __extends(LrExpiredException, _super);
-        function LrExpiredException(message) {
-            return _super.call(this, {
-                code: 'LrExpiredException',
+            })) || this;
+        }
+        return KcBadTimeSyncException;
+    }(KcException));
+    var KcCodeMismatchException = /** @class */ (function (_super) {
+        __extends(KcCodeMismatchException, _super);
+        function KcCodeMismatchException(message) {
+            return _super.call(this, new KcError({ code: exports.KcErrorCode.CODE_MISMATCH, message: message })) || this;
+        }
+        return KcCodeMismatchException;
+    }(KcException));
+    var KcConcurrentAccessException = /** @class */ (function (_super) {
+        __extends(KcConcurrentAccessException, _super);
+        function KcConcurrentAccessException(message) {
+            return _super.call(this, new KcError({ code: exports.KcErrorCode.CONCURRENT_ACCESS, message: message })) || this;
+        }
+        return KcConcurrentAccessException;
+    }(KcException));
+    var KcEncryptionException = /** @class */ (function (_super) {
+        __extends(KcEncryptionException, _super);
+        function KcEncryptionException(message) {
+            return _super.call(this, new KcError({ code: exports.KcErrorCode.ENCRYPTION, message: message })) || this;
+        }
+        return KcEncryptionException;
+    }(KcException));
+    var KcInternalErrorException = /** @class */ (function (_super) {
+        __extends(KcInternalErrorException, _super);
+        function KcInternalErrorException(message) {
+            return _super.call(this, new KcError({ code: exports.KcErrorCode.INTERNAL_ERROR, message: message })) || this;
+        }
+        return KcInternalErrorException;
+    }(KcException));
+    var KcLockedException = /** @class */ (function (_super) {
+        __extends(KcLockedException, _super);
+        function KcLockedException(message) {
+            return _super.call(this, new KcError({
+                code: exports.KcErrorCode.LOCKED,
                 message: message,
-            }) || this;
-        }
-        return LrExpiredException;
-    }(LrException));
-    var LrBadStateException = /** @class */ (function (_super) {
-        __extends(LrBadStateException, _super);
-        function LrBadStateException(message) {
-            return _super.call(this, {
-                code: 'LrBadStateException',
+            })) || this;
+        }
+        return KcLockedException;
+    }(KcException));
+    var KcNotFoundException = /** @class */ (function (_super) {
+        __extends(KcNotFoundException, _super);
+        function KcNotFoundException(message) {
+            return _super.call(this, new KcError({ code: exports.KcErrorCode.NOT_FOUND, message: message })) || this;
+        }
+        return KcNotFoundException;
+    }(KcException));
+    var KcSuspiciousOperationException = /** @class */ (function (_super) {
+        __extends(KcSuspiciousOperationException, _super);
+        function KcSuspiciousOperationException(message) {
+            return _super.call(this, new KcError({ code: exports.KcErrorCode.SUSPICIOUS_OPERATION, message: message })) || this;
+        }
+        return KcSuspiciousOperationException;
+    }(KcException));
+    var KcUnsupportedException = /** @class */ (function (_super) {
+        __extends(KcUnsupportedException, _super);
+        function KcUnsupportedException(message) {
+            return _super.call(this, new KcError({
+                code: exports.KcErrorCode.UNSUPPORTED,
                 message: message,
-            }) || this;
+            })) || this;
         }
-        return LrBadStateException;
-    }(LrException));
+        return KcUnsupportedException;
+    }(KcException));
 
     // promote everything to a promise.
     function promiseAllMayAsync(values) {
@@ -546,18 +573,18 @@
         }
     }
     function remap(obj, values) {
-        var e_1, _b;
+        var e_1, _a;
         var ret = {};
         try {
-            for (var _c = __values(Object.keys(obj).entries()), _d = _c.next(); !_d.done; _d = _c.next()) {
-                var _e = __read(_d.value, 2), i = _e[0], key = _e[1];
+            for (var _b = __values(Object.keys(obj).entries()), _c = _b.next(); !_c.done; _c = _b.next()) {
+                var _d = __read(_c.value, 2), i = _d[0], key = _d[1];
                 ret[key] = values[i];
             }
         }
         catch (e_1_1) { e_1 = { error: e_1_1 }; }
         finally {
             try {
-                if (_d && !_d.done && (_b = _c.return)) _b.call(_c);
+                if (_c && !_c.done && (_a = _b.return)) _a.call(_b);
             }
             finally { if (e_1) throw e_1.error; }
         }
@@ -567,8 +594,8 @@
     // callback can either return a Promise, or a value.
     // The Promise<any> type is redundant but it shows that it can return a promise
     callback) {
-        var values = promiseAllMayAsync(Object.entries(obj).map(function (_b) {
-            var _c = __read(_b, 2), key = _c[0], value = _c[1];
+        var values = promiseAllMayAsync(Object.entries(obj).map(function (_a) {
+            var _b = __read(_a, 2), key = _b[0], value = _b[1];
             return callback(value, key, obj);
         }));
         if (values.then) {
@@ -584,8 +611,8 @@
     // By default, it returns the value without any process, so you can use
     // this to simply wait for all promises in an object to resolve.
     callback) {
-        var values = Promise.all(Object.entries(obj).map(function (_b) {
-            var _c = __read(_b, 2), key = _c[0], value = _c[1];
+        var values = Promise.all(Object.entries(obj).map(function (_a) {
+            var _b = __read(_a, 2), key = _b[0], value = _b[1];
             return callback ? callback(value, key, obj) : value;
         }));
         return values.then(function (resolvedValues) { return remap(obj, resolvedValues); });
@@ -601,14 +628,14 @@
     function getAccessJwtToken(auth) {
         return __awaiter(this, void 0, void 0, function () {
             var error_1;
-            return __generator(this, function (_b) {
-                switch (_b.label) {
+            return __generator(this, function (_a) {
+                switch (_a.label) {
                     case 0:
-                        _b.trys.push([0, 2, , 3]);
+                        _a.trys.push([0, 2, , 3]);
                         return [4 /*yield*/, auth.currentSession()];
-                    case 1: return [2 /*return*/, (_b.sent()).getAccessToken().getJwtToken()];
+                    case 1: return [2 /*return*/, (_a.sent()).getAccessToken().getJwtToken()];
                     case 2:
-                        error_1 = _b.sent();
+                        error_1 = _a.sent();
                         // The error thrown by Cognito is of type string.
                         if (error_1 == 'No current user') {
                             return [2 /*return*/, ''];
@@ -619,24 +646,6 @@
             });
         });
     }
-    function httpOptions(auth, config) {
-        var _a;
-        return __awaiter(this, void 0, void 0, function () {
-            var token, debugUsername;
-            return __generator(this, function (_b) {
-                switch (_b.label) {
-                    case 0: return [4 /*yield*/, getAccessJwtToken(auth)];
-                    case 1:
-                        token = _b.sent();
-                        debugUsername = (_a = config.debug) === null || _a === void 0 ? void 0 : _a.username;
-                        return [2 /*return*/, {
-                                withCredentials: true,
-                                headers: Object.assign(Object.assign({}, (token && { authorization: "Bearer " + token })), (debugUsername && { 'x-kc-dev-user': debugUsername })),
-                            }];
-                }
-            });
-        });
-    }
 
     // Ref: https://stackoverflow.com/questions/59735280/angular-8-moment-error-cannot-call-a-namespace-moment
     var moment = moment___namespace;
@@ -686,10 +695,7 @@
                             serverTime = now + this.offsetMs;
                             diff = Math.abs(serverTime - verifyTime);
                             if (diff > this.MAX_DIFF_MSEC) {
-                                throw new LrException({
-                                    code: exports.LrErrorCode.BadTimeSync,
-                                    message: "Server time does not match independent source. ServerTime: " + serverTime + ", Cognito time: " + verifyTime,
-                                });
+                                throw new KcBadTimeSyncException("Server time does not match independent source. ServerTime: " + serverTime + ", Cognito time: " + verifyTime);
                             }
                             this.verified = true;
                             return [2 /*return*/];
@@ -983,10 +989,7 @@
                             return [3 /*break*/, 4];
                         case 3:
                             error_1 = _a.sent();
-                            throw new LrException({
-                                code: exports.LrErrorCode.BadSignature,
-                                message: "Bad signature: " + error_1,
-                            });
+                            throw new KcBadSignatureException("Bad signature: " + error_1);
                         case 4: return [2 /*return*/];
                     }
                 });
@@ -1022,7 +1025,7 @@
                 case 'ArrayBuffer':
                     return payload;
                 default:
-                    throw new LrBadArgumentException("Unknown payloadType: " + payloadType);
+                    throw new KcBadArgumentException("Unknown payloadType: " + payloadType);
             }
         };
         return EncryptionService;
@@ -1099,7 +1102,7 @@
         };
         KeyFactoryService.prototype.randomString = function (digits) {
             if (digits <= 0) {
-                throw new LrBadArgumentException('digits <= 0');
+                throw new KcBadArgumentException('digits <= 0');
             }
             var validChars = 'ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789';
             var array = new Uint32Array(digits);
@@ -1112,10 +1115,10 @@
         };
         KeyFactoryService.prototype.randomChoices = function (array, chooseN) {
             if (array.length <= 1) {
-                throw new LrBadArgumentException('array.length <= 0');
+                throw new KcBadArgumentException('array.length <= 0');
             }
             if (chooseN <= 0) {
-                throw new LrBadArgumentException('chooseN <= 0');
+                throw new KcBadArgumentException('chooseN <= 0');
             }
             var values = new Uint32Array(chooseN);
             this.kcCrypto.getRandomValues(values);
@@ -1267,7 +1270,7 @@
             return __awaiter(this, void 0, void 0, function () {
                 return __generator(this, function (_a) {
                     if (params.iterations < this.MIN_PASS_IDP_PBKDF_ITER) {
-                        throw new LrSuspiciousException("The number of PassIdp key derivation iterations sent from the server (" + params.iterations + ") is lower than the minimum (" + this.MIN_PASS_IDP_PBKDF_ITER + ")");
+                        throw new KcSuspiciousOperationException("The number of PassIdp key derivation iterations sent from the server (" + params.iterations + ") is lower than the minimum (" + this.MIN_PASS_IDP_PBKDF_ITER + ")");
                     }
                     return [2 /*return*/, this.deriveKey(params)];
                 });
@@ -1277,7 +1280,7 @@
             return __awaiter(this, void 0, void 0, function () {
                 return __generator(this, function (_a) {
                     if (params.iterations < this.MIN_PASS_KEY_PBKDF_ITER) {
-                        throw new LrSuspiciousException("The number of PassKey key derivation iterations sent from the server(" + params.iterations + ") is lower than the minimum(" + this.MIN_PASS_KEY_PBKDF_ITER + ")");
+                        throw new KcSuspiciousOperationException("The number of PassKey key derivation iterations sent from the server(" + params.iterations + ") is lower than the minimum(" + this.MIN_PASS_KEY_PBKDF_ITER + ")");
                     }
                     return [2 /*return*/, this.deriveKey(params)];
                 });
@@ -1287,7 +1290,7 @@
             return __awaiter(this, void 0, void 0, function () {
                 return __generator(this, function (_a) {
                     if (params.iterations < this.MIN_LBOP_KEY_PBKDF_ITER) {
-                        throw new LrSuspiciousException("The number of LbopKey key derivation iterations sent from the server(" + params.iterations + ") is lower than the minimum(" + this.MIN_LBOP_KEY_PBKDF_ITER + ")");
+                        throw new KcSuspiciousOperationException("The number of LbopKey key derivation iterations sent from the server(" + params.iterations + ") is lower than the minimum(" + this.MIN_LBOP_KEY_PBKDF_ITER + ")");
                     }
                     return [2 /*return*/, this.deriveKey(params)];
                 });
@@ -1373,7 +1376,25 @@
     // can possibly have different tokens with the same type (i.e. KcConfig). So it would not
     // be appropriate to use "KcConfig" as the token string.
     var KC_CONFIG = new i0.InjectionToken('KC_CONFIG');
-    var RETRY_ERROR_CODES = [exports.LrApiErrorCode.CONCURRENT_ACCESS];
+    var RETRY_ERROR_CODES = [exports.KcErrorCode.CONCURRENT_ACCESS];
+    function httpOptions(auth, config) {
+        var _a;
+        return __awaiter(this, void 0, void 0, function () {
+            var token, debugUsername;
+            return __generator(this, function (_b) {
+                switch (_b.label) {
+                    case 0: return [4 /*yield*/, getAccessJwtToken(auth)];
+                    case 1:
+                        token = _b.sent();
+                        debugUsername = (_a = config.debug) === null || _a === void 0 ? void 0 : _a.username;
+                        return [2 /*return*/, {
+                                withCredentials: true,
+                                headers: Object.assign(Object.assign({}, (token && { authorization: "Bearer " + token })), (debugUsername && { 'x-kc-dev-user': debugUsername })),
+                            }];
+                }
+            });
+        });
+    }
     var configureApollo = function (config, auth) {
         var defaultOptions = {
             watchQuery: {
@@ -1506,7 +1527,7 @@
                     console.warn('The cookie secure flag in persistService has been set to false, set it to true in production mode');
                 }
                 else {
-                    throw new LrBadArgumentException('Can not set PersistService cookie secure flag to false in production mode.');
+                    throw new KcBadArgumentException('Can not set PersistService cookie secure flag to false in production mode.');
                 }
             }
         };
@@ -1750,7 +1771,7 @@
                         case 1:
                             storedKey = _a.sent();
                             if (storedKey == null) {
-                                throw new LrNotFoundException("Can not find masterKey in persisted storage using name: " + this.STORE_MASTER_KEY);
+                                throw new KcNotFoundException("Can not find masterKey in persisted storage using name: " + this.STORE_MASTER_KEY);
                             }
                             return [4 /*yield*/, this.persistService.set({
                                     name: this.STORE_MASTER_KEY,
@@ -1783,10 +1804,10 @@
                         case 1:
                             storedKey = _b.sent();
                             if (!storedKey) {
-                                throw new LrNotFoundException('Could not find masterKey in persisted storage');
+                                throw new KcNotFoundException('Could not find masterKey in persisted storage');
                             }
                             if (storedKey.id !== masterKeyId) {
-                                throw new LrNotFoundException("masterKeyId " + storedKey.id + " in persisted storage does not match the one requested " + masterKeyId);
+                                throw new KcNotFoundException("masterKeyId " + storedKey.id + " in persisted storage does not match the one requested " + masterKeyId);
                             }
                             _a = storedKey;
                             return [4 /*yield*/, KeyFactoryService.asKey(storedKey.jwk)];
@@ -1871,12 +1892,10 @@
         KeyGraphService.prototype.getNode = function (id, type) {
             var node = this.graph.node(id);
             if (!node) {
-                throw new LrNotFoundException("Key graphs does not contain key id: " + id);
+                throw new KcNotFoundException("Key graphs does not contain key id: " + id);
             }
             if (node.type !== type) {
-                throw new LrException({
-                    message: "Key with id " + id + " is not of type " + type,
-                });
+                throw new KcBadStateException("Key with id " + id + " is not of type " + type);
             }
             return node.data;
         };
@@ -1983,10 +2002,10 @@
         };
         KeyGraphService.prototype.getPath = function (knownKeyId, keyId) {
             if (!knownKeyId || typeof knownKeyId !== 'string') {
-                throw new LrEncryptionException("Param knownKeyId wrong format: " + knownKeyId);
+                throw new KcEncryptionException("Param knownKeyId wrong format: " + knownKeyId);
             }
             if (!keyId || typeof keyId !== 'string') {
-                throw new LrEncryptionException("Param keyId wrong format: " + keyId);
+                throw new KcEncryptionException("Param keyId wrong format: " + keyId);
             }
             // => { A: { distance: 0 },
             //      B: { distance: 6, predecessor: 'C' },
@@ -2217,7 +2236,7 @@
             return __awaiter(this, void 0, void 0, function () {
                 return __generator(this, function (_a) {
                     if (!isSymmetricKey(key)) {
-                        throw new LrBadArgumentException('Only allowing wrapping of symmetric keys.');
+                        throw new KcBadArgumentException('Only allowing wrapping of symmetric keys.');
                     }
                     return [2 /*return*/, this.encryptToString(wrappingKey, key.toJSON(true))];
                 });
@@ -2320,7 +2339,7 @@
     function getAstOperation(astDocument, operation) {
         var operations = astDocument.definitions.filter(function (def) { return def.kind === 'OperationDefinition'; });
         if (operations.length > 1) {
-            throw new LrBadLogicException("There can be only one '" + operation + "' operation, instead there are " + operations.length);
+            throw new KcBadLogicException("There can be only one '" + operation + "' operation, instead there are " + operations.length);
         }
         return operations[0];
     }
@@ -2336,7 +2355,7 @@
     function getFragment(astDocument) {
         var fragments = getFragments(astDocument);
         if (fragments.length > 1) {
-            throw new LrBadArgumentException('GraphQL document can only contain one fragment.');
+            throw new KcBadArgumentException('GraphQL document can only contain one fragment.');
         }
         return fragments[0];
     }
@@ -2407,7 +2426,7 @@
             function run(original, args) {
                 var _this = this;
                 if (!this[ngZoneName]) {
-                    throw new LrBadLogicException("RunOutsideAngular decorator requires that " + target.name + " inject NgZone as " + ngZoneName);
+                    throw new KcBadLogicException("RunOutsideAngular decorator requires that " + target.name + " inject NgZone as " + ngZoneName);
                 }
                 // runOutsideAngular() synchronously runs the callback and returns the result.
                 var result = this[ngZoneName].runOutsideAngular(function () { return original.apply(_this, args); });
@@ -2588,7 +2607,7 @@
                             keyId = _b;
                             if (!keyId) {
                                 keyIdName = getKeyId ? 'key-id' : 'keyId or key.id';
-                                throw new LrBadLogicException("Query response does not contain " + keyIdName + " field: " + context.path.join('.'));
+                                throw new KcBadLogicException("Query response does not contain " + keyIdName + " field: " + context.path.join('.'));
                             }
                             return [2 /*return*/, this.keyGraph
                                     .decryptFromString(keyId, cipherField)
@@ -2685,7 +2704,7 @@
                                 ret = Object.assign({}, field);
                                 if (!field.assembly) return [3 /*break*/, 2];
                                 if (field.applied == null) {
-                                    throw new LrBadRequestException('If you request for field "assembly" in the TpPasswordResetNode, then you must also request the "applied" field');
+                                    throw new KcBadRequestException('If you request for field "assembly" in the TpPasswordResetNode, then you must also request the "applied" field');
                                 }
                                 _b = ret;
                                 return [4 /*yield*/, this.processTpAssemblyNode(field.assembly, field.applied)];
@@ -2991,7 +3010,7 @@
                 var _this = this;
                 return __generator(this, function (_a) {
                     if (field === null || field === void 0 ? void 0 : field.then) {
-                        throw new LrBadLogicException('processField() should not receive thenable.');
+                        throw new KcBadLogicException('processField() should not receive thenable.');
                     }
                     if (field == null) {
                         return [2 /*return*/, null];
@@ -3056,7 +3075,7 @@
         };
         QueryProcessorService.prototype.registerProcessor = function (name, processor) {
             if (this.processors[name]) {
-                throw new LrBadLogicException("Processor for field " + name + " already exists.");
+                throw new KcBadLogicException("Processor for field " + name + " already exists.");
             }
             this.processors[name] = processor;
         };
@@ -3167,7 +3186,7 @@
         });
         LrMutationBase.prototype.setExecuted = function () {
             if (this._executed) {
-                throw new LrBadStateException('Already executed');
+                throw new KcBadStateException('Already executed');
             }
             this._executed = true;
         };
@@ -3297,7 +3316,7 @@
             var ret = new Set();
             var addOrThrow = function (item) {
                 if (ret.has(item)) {
-                    throw new LrBadLogicException('Classes that are derived from LrMutationBase can not be used more than once in a merged mutation.');
+                    throw new KcBadLogicException('Classes that are derived from LrMutationBase can not be used more than once in a merged mutation.');
                 }
                 ret.add(item);
             };
@@ -3309,7 +3328,7 @@
                     lrMutation.descendants.forEach(function (t) { return addOrThrow(t); });
                 }
                 else {
-                    throw new LrUnsupportedException("LrMergeMutation can not handle class: " + lrMutation.constructor.name);
+                    throw new KcUnsupportedException("LrMergeMutation can not handle class: " + lrMutation.constructor.name);
                 }
             });
             return ret;
@@ -3528,10 +3547,10 @@
             return __awaiter(this, void 0, void 0, function () {
                 return __generator(this, function (_a) {
                     if (options === null || options === void 0 ? void 0 : options.variables) {
-                        throw new LrUnsupportedException('Unsupported field: "options.variables"');
+                        throw new KcUnsupportedException('Unsupported field: "options.variables"');
                     }
                     if (lrMutation.executed) {
-                        throw new LrBadStateException('LrMutation has already executed. LrMutation can only be used once in a lrMutate() call. Create new instances of LrMutation.');
+                        throw new KcBadStateException('LrMutation has already executed. LrMutation can only be used once in a lrMutate() call. Create new instances of LrMutation.');
                     }
                     lrMutation.setExecuted();
                     return [2 /*return*/, this.apolloMutate(Object.assign(Object.assign({}, options), lrMutation.lrMutationData))
@@ -3855,15 +3874,6 @@
         }
         return CognitoChallengeUser;
     }(Auth.CognitoUser));
-    (function (FeatureAction) {
-        // Just the one for now
-        FeatureAction["ACCESS"] = "access";
-    })(exports.FeatureAction || (exports.FeatureAction = {}));
-    var Features = /** @class */ (function () {
-        function Features() {
-        }
-        return Features;
-    }());
     var CurrentUser = /** @class */ (function () {
         function CurrentUser() {
         }
@@ -3905,7 +3915,7 @@
         }
         IdleService.prototype.assertInit = function () {
             if (!this.initCalled) {
-                throw new LrBadStateException('Call IdleService.init() first.');
+                throw new KcBadStateException('Call IdleService.init() first.');
             }
         };
         IdleService.prototype.init = function (params) {
@@ -3916,14 +3926,14 @@
                     switch (_a.label) {
                         case 0:
                             if (this.initCalled) {
-                                throw new LrBadStateException('IdleService.init() can only be called once. IdleService.start() calls init() with default values if init() has not been called yet.');
+                                throw new KcBadStateException('IdleService.init() can only be called once. IdleService.start() calls init() with default values if init() has not been called yet.');
                             }
                             this.initCalled = true;
                             // Defaults
                             params = Object.assign({ onTimeout: null, onKeepalive: null, idleSec: exports.Config.IDLE, timeoutSec: exports.Config.TIMEOUT, keepAliveIntervalSec: exports.Config.KEEP_ALIVE_INTERVAL }, params);
                             // If timeoutSec == 0 then the onTimeout() callback is never called.
                             if (params.timeoutSec < 0.01) {
-                                throw new LrBadArgumentException('Minimum value for IdleService.init({ timeoutSec }) is 0.01');
+                                throw new KcBadArgumentException('Minimum value for IdleService.init({ timeoutSec }) is 0.01');
                             }
                             this.onTimeout = params.onTimeout;
                             this.onKeepalive = params.onKeepalive;
@@ -4551,7 +4561,7 @@
                     switch (_b.label) {
                         case 0:
                             if (planPeriodEnd == null && planPeriodEndAfterSeconds == null) {
-                                throw new LrBadArgumentException('Must specify either "planPeriodEnd" or "planPeriodEndAfterSeconds"');
+                                throw new KcBadArgumentException('Must specify either "planPeriodEnd" or "planPeriodEndAfterSeconds"');
                             }
                             return [4 /*yield*/, this.lrApollo.mutate({
                                     mutation: CreateUserIssuedPlanMutation,
@@ -4706,6 +4716,15 @@
     var UpdateContactCardMutation$1 = gql__default['default'](templateObject_3$4 || (templateObject_3$4 = __makeTemplateObject(["\n  mutation UpdateContactCardMutation($input: UpdateContactCardInput!) {\n    updateContactCard(input: $input) {\n      contactCard {\n        id\n        key {\n          id\n        }\n        cipherData\n      }\n    }\n  }\n"], ["\n  mutation UpdateContactCardMutation($input: UpdateContactCardInput!) {\n    updateContactCard(input: $input) {\n      contactCard {\n        id\n        key {\n          id\n        }\n        cipherData\n      }\n    }\n  }\n"])));
     var templateObject_1$7, templateObject_2$5, templateObject_3$4;
 
+    (function (FeatureAction) {
+        // Just the one for now
+        FeatureAction["ACCESS"] = "access";
+    })(exports.FeatureAction || (exports.FeatureAction = {}));
+    var Features = /** @class */ (function () {
+        function Features() {
+        }
+        return Features;
+    }());
     var CurrentUserKey = /** @class */ (function () {
         function CurrentUserKey() {
         }
@@ -5266,7 +5285,7 @@
                             return [2 /*return*/, KeyFactoryService.asKey(prkJson)];
                         case 2:
                             error_1 = _a.sent();
-                            throw new LrAuthException('Wrong current password');
+                            throw new KcAuthException('Wrong current password');
                         case 3: return [2 /*return*/];
                     }
                 });
@@ -5669,7 +5688,7 @@
                                 if (assemblyKeyParams) {
                                     if (JSON.stringify(assemblyKeyParams) !==
                                         JSON.stringify(partial.assemblyKeyParams)) {
-                                        throw new LrBadStateException('The assembly key parameters are different between the approvals.');
+                                        throw new KcBadStateException('The assembly key parameters are different between the approvals.');
                                     }
                                 }
                                 else {
@@ -5775,7 +5794,7 @@
                 var _this = this;
                 return __generator(this, function (_c) {
                     if (slipSubAssemblies.length !== input.length) {
-                        throw new LrBadArgumentException('The slipSubAssemblies must be the same length as the input');
+                        throw new KcBadArgumentException('The slipSubAssemblies must be the same length as the input');
                     }
                     return [2 /*return*/, Promise.all(input.map(function (sa, saIndex) { return __awaiter(_this, void 0, void 0, function () {
                             var subjectCipherData, existingSa, createApprovers, updateApprovers, slipSubAssembly, _c;
@@ -5949,7 +5968,7 @@
                             if (createSubAssembliesInput.length === 0 &&
                                 updateSubAssembliesInput.length === 0 &&
                                 deleteSubAssembliesInput.length === 0) {
-                                throw new LrBadArgumentException('Must specify at least one of: [createSubAssemblies, updateSubAssemblies, deleteSubAssemblies]');
+                                throw new KcBadArgumentException('Must specify at least one of: [createSubAssemblies, updateSubAssemblies, deleteSubAssemblies]');
                             }
                             return [4 /*yield*/, this.keyService.getCurrentRootKey()];
                         case 1:
@@ -6104,7 +6123,7 @@
                     if (!tp.currentUserSharedKey.userSharedKey.mkSharedKey) {
                         var msg = "tp " + tp.other.username + " does not have mkSharedKey";
                         console.log(msg);
-                        throw new LrBadArgumentException(msg);
+                        throw new KcBadArgumentException(msg);
                     }
                 }
             }
@@ -6125,7 +6144,7 @@
                         case 0:
                             // Is there enough sub assemblies to meet quorum
                             if (subAssemblies.length < assemblyQuorum) {
-                                throw new LrBadArgumentException('Not enough sub assemblies to meet quorum');
+                                throw new KcBadArgumentException('Not enough sub assemblies to meet quorum');
                             }
                             slipAssembly = new Assembly(assemblyQuorum);
                             subAssemblies.forEach(function (sa, index) {
@@ -6226,7 +6245,7 @@
             this.logoutListeners = new Set();
             if (!i0.isDevMode()) {
                 if (this.config.debug != null) {
-                    throw new LrBadLogicException('In production mode, "config.debug" must be set to null');
+                    throw new KcBadRequestException('In production mode, "config.debug" must be set to null');
                 }
             }
         }
@@ -6352,7 +6371,7 @@
                         case 1:
                             passIdpApiResult = _b.sent();
                             if (passIdpApiResult.passwordChangeStatus === exports.PasswordChangeStatus.InProgress) {
-                                throw new LrConcurrentAccessException('A password change is in progress');
+                                throw new KcConcurrentAccessException('A password change is in progress');
                             }
                             if (!(passIdpApiResult.passwordChangeStatus === exports.PasswordChangeStatus.Recovery)) return [3 /*break*/, 8];
                             console.log('In recovery mode.');
@@ -6386,7 +6405,7 @@
                             error_2 = _b.sent();
                             // Just bubble up any other type of error.
                             throw error_2.code === 'NotAuthorizedException'
-                                ? new LrBadRequestException('The password change request was interrupted, please try to login with both your new and old password')
+                                ? new KcBadRequestException('The password change request was interrupted, please try to login with both your new and old password')
                                 : error_2;
                         case 8:
                             if (!passIdpApiResult.tpPasswordReset) return [3 /*break*/, 12];
@@ -6814,7 +6833,7 @@
                         case 1:
                             resetUser = _b.sent();
                             if (resetUser.state !== exports.TpClaimState.APPROVED) {
-                                throw new LrBadStateException('Password reset request has not been approved.');
+                                throw new KcBadStateException('Password reset request has not been approved.');
                             }
                             return [4 /*yield*/, this.recoverAssemblyKey(resetUser)];
                         case 2:
@@ -6904,9 +6923,7 @@
                         case 12:
                             user = _b.sent();
                             if (user.challengeName !== 'NEW_PASSWORD_REQUIRED') {
-                                throw new LrException({
-                                    message: 'Internal error. Expecting Cognito to have done a password reset after call to PreCompleteTpPasswordResetRequestMutation.',
-                                });
+                                throw new KcInternalErrorException('Expecting Cognito to have done a password reset after call to PreCompleteTpPasswordResetRequestMutation.');
                             }
                             return [4 /*yield*/, this.auth.completeNewPassword(user, newIdpPassword, {})];
                         case 13:
@@ -7040,7 +7057,7 @@
                         case 2:
                             defaultVaults = _b.sent();
                             if (defaultVaults.length > 1) {
-                                throw new LrBadStateException('There are more than one default vaults');
+                                throw new KcBadStateException('There are more than one default vaults');
                             }
                             return [2 /*return*/, defaultVaults[0] || null];
                     }
@@ -8759,7 +8776,7 @@
                             directoryKey = _d.sent();
                             options.parentDirectories = options.parentDirectories || [];
                             if (!options.asRootDirectory && !((_a = options.parentDirectories) === null || _a === void 0 ? void 0 : _a.length)) {
-                                throw new LrBadArgumentException('A new directory must be either a root directory or a sub-directory. So you must provide either parentDirectories and/or asRootDirectory parameter.');
+                                throw new KcBadArgumentException('A new directory must be either a root directory or a sub-directory. So you must provide either parentDirectories and/or asRootDirectory parameter.');
                             }
                             return [4 /*yield*/, Promise.all((_b = options.parentDirectories) === null || _b === void 0 ? void 0 : _b.map(function (t) { return _this.prepareParentDirectory(t, directoryKey); }))];
                         case 2:
@@ -9521,7 +9538,7 @@
                             plainInitiatorOneTimePbkCipher = _r.sent();
                             // Check the nonce match to ensure the responder was the one holding the OTK
                             if (plainInitiatorRootKeyCipher.nonce !== plainInitiatorOneTimePbkCipher.nonce) {
-                                throw new LrCodeMismatchException('The nonce returned by responder does not match with the one created by the initiator.');
+                                throw new KcCodeMismatchException('The nonce returned by responder does not match with the one created by the initiator.');
                             }
                             return [4 /*yield*/, this.keyService.getCurrentSigPxk()];
                         case 7:
@@ -10266,7 +10283,7 @@
                             // Check the nonce match to ensure the responder was the one holding the OTK
                             if (initiatorRootKeyCipherClearJson.nonce !==
                                 plainInitiatorOneTimePbkCipher.nonce) {
-                                throw new LrCodeMismatchException('The nonce returned by responder does not match with the one created by the initiator.');
+                                throw new KcCodeMismatchException('The nonce returned by responder does not match with the one created by the initiator.');
                             }
                             return [4 /*yield*/, this.keyService.getCurrentSigPxk()];
                         case 7:
@@ -10401,6 +10418,10 @@
         })
     ], exports.KeyExchange2Service);
 
+    var ERROR_SOURCE = 'LBOP';
+    (function (KcLbopErrorCode) {
+        KcLbopErrorCode["INVALID_PASSPHRASE"] = "INVALID_PASSPHRASE";
+    })(exports.KcLbopErrorCode || (exports.KcLbopErrorCode = {}));
     var CreateLbopQuery = gql__default['default'](templateObject_1$l || (templateObject_1$l = __makeTemplateObject(["\n  mutation CreateLbop($input: CreateLbopInput!) {\n    createLbop(input: $input) {\n      lbop {\n        id\n      }\n    }\n  }\n"], ["\n  mutation CreateLbop($input: CreateLbopInput!) {\n    createLbop(input: $input) {\n      lbop {\n        id\n      }\n    }\n  }\n"])));
     var DeleteLbopQuery = gql__default['default'](templateObject_2$i || (templateObject_2$i = __makeTemplateObject(["\n  mutation DeleteLbop($input: DeleteLbopInput!) {\n    deleteLbop(input: $input) {\n      id\n    }\n  }\n"], ["\n  mutation DeleteLbop($input: DeleteLbopInput!) {\n    deleteLbop(input: $input) {\n      id\n    }\n  }\n"])));
     var UpdateLbopQuery = gql__default['default'](templateObject_3$g || (templateObject_3$g = __makeTemplateObject(["\n  mutation UpdateLbop($input: UpdateLbopInput!) {\n    updateLbop(input: $input) {\n      lbop {\n        id\n      }\n    }\n  }\n"], ["\n  mutation UpdateLbop($input: UpdateLbopInput!) {\n    updateLbop(input: $input) {\n      lbop {\n        id\n      }\n    }\n  }\n"])));
@@ -10538,7 +10559,7 @@
                     switch (_f.label) {
                         case 0:
                             if (slip39.Slip39Helper.WORD_LIST.length !== 1024) {
-                                throw new LrBadLogicException('Slip39Helper.WORD_LIST.length != 1024');
+                                throw new KcBadLogicException('Slip39Helper.WORD_LIST.length != 1024');
                             }
                             return [4 /*yield*/, this.list()];
                         case 1:
@@ -10681,11 +10702,11 @@
                             }
                             finally { if (e_1) throw e_1.error; }
                             return [7 /*endfinally*/];
-                        case 13: throw new LrException({
-                            source: 'LBOP',
-                            code: 'INVALID_PASSPHRASE',
+                        case 13: throw new KcException(new KcError({
+                            source: ERROR_SOURCE,
+                            code: exports.KcLbopErrorCode.INVALID_PASSPHRASE,
                             message: 'Invalid passphrase.',
-                        });
+                        }));
                     }
                 });
             });
@@ -10789,9 +10810,7 @@
                         case 4:
                             user = _a.sent();
                             if (user.challengeName !== 'NEW_PASSWORD_REQUIRED') {
-                                throw new LrException({
-                                    message: 'Internal error. Expecting Cognito to have done a password reset.',
-                                });
+                                throw new KcInternalErrorException('Expecting Cognito to have done a password reset.');
                             }
                             return [4 /*yield*/, this.auth.completeNewPassword(user, this.passwordService.getPassIdpString(passKeyBundle.passIdp), {})];
                         case 5:
@@ -13193,10 +13212,10 @@
     var templateObject_1$s, templateObject_2$o;
 
     function throwClaimIdMismatch() {
-        throw new LrBadArgumentException('claimId does not match with the current claimId of the scenario');
+        throw new KcBadArgumentException('claimId does not match with the current claimId of the scenario');
     }
     function throwClaimNotApproved() {
-        throw new LrBadStateException('Scenario claim has not been approved');
+        throw new KcBadStateException('Scenario claim has not been approved');
     }
     exports.ScenarioService = /** @class */ (function (_super) {
         __extends(ScenarioService, _super);
@@ -14324,7 +14343,7 @@
         TpPasswordResetRequestService.prototype.activeRequestOrRaise = function (sharedReset) {
             var state = sharedReset.sharedRequest.claim.state;
             if (state !== exports.TpAssemblyState.CLAIMED) {
-                throw new LrBadStateException("Claim is already in " + state + " state.");
+                throw new KcBadStateException("Claim is already in " + state + " state.");
             }
         };
         TpPasswordResetRequestService.prototype.rejectRequest = function (sharedResetId) {
@@ -14452,7 +14471,7 @@
      */
     function clearLocalStorage(prefix) {
         if (!prefix) {
-            throw new LrBadArgumentException('You must specify a non empty prefix.');
+            throw new KcBadArgumentException('You must specify a non empty prefix.');
         }
         // Remove all persisted session variables
         Object.keys(localStorage).forEach(function (key) {
@@ -14878,7 +14897,7 @@
                         case 1:
                             userSharedKey = _a.sent();
                             if (userSharedKey.mkSharedKey) {
-                                throw new LrBadStateException('TP already has mkSharedKey');
+                                throw new KcBadStateException('TP already has mkSharedKey');
                             }
                             return [4 /*yield*/, this.keyService.getCurrentMasterKey()];
                         case 2:
@@ -14924,7 +14943,7 @@
                         case 1:
                             userSharedKey = _d.sent();
                             if (!userSharedKey.mkSharedKey) {
-                                throw new LrBadStateException('No access to the mkSharedKey so cannot reshare it with TP');
+                                throw new KcBadStateException('No access to the mkSharedKey so cannot reshare it with TP');
                             }
                             return [4 /*yield*/, this.keyGraph.getKey(userSharedKey.sharedKey.id)];
                         case 2:
@@ -15147,7 +15166,7 @@
                             code = _b.sent();
                             email = userInfo.attributes.email;
                             if (!email) {
-                                throw new LrBadArgumentException('No email associated with user.');
+                                throw new KcBadArgumentException('No email associated with user.');
                             }
                             return [2 /*return*/, {
                                     code: code,
@@ -15229,6 +15248,7 @@
     exports.DeleteLbopQuery = DeleteLbopQuery;
     exports.DeleteRecordMutation = DeleteRecordMutation;
     exports.DirectoryQuery = DirectoryQuery;
+    exports.ERROR_SOURCE = ERROR_SOURCE;
     exports.Features = Features;
     exports.FetchKeyGraphField = FetchKeyGraphField;
     exports.FileQuery = FileQuery;
@@ -15244,6 +15264,23 @@
     exports.IdleService = IdleService;
     exports.InitiateOtkMutation = InitiateOtkMutation;
     exports.KC_CONFIG = KC_CONFIG;
+    exports.KcAuthException = KcAuthException;
+    exports.KcBadArgumentException = KcBadArgumentException;
+    exports.KcBadLogicException = KcBadLogicException;
+    exports.KcBadRequestException = KcBadRequestException;
+    exports.KcBadSignatureException = KcBadSignatureException;
+    exports.KcBadStateException = KcBadStateException;
+    exports.KcBadTimeSyncException = KcBadTimeSyncException;
+    exports.KcCodeMismatchException = KcCodeMismatchException;
+    exports.KcConcurrentAccessException = KcConcurrentAccessException;
+    exports.KcEncryptionException = KcEncryptionException;
+    exports.KcError = KcError;
+    exports.KcException = KcException;
+    exports.KcInternalErrorException = KcInternalErrorException;
+    exports.KcLockedException = KcLockedException;
+    exports.KcNotFoundException = KcNotFoundException;
+    exports.KcSuspiciousOperationException = KcSuspiciousOperationException;
+    exports.KcUnsupportedException = KcUnsupportedException;
     exports.KeyExchangeFields = KeyExchangeFields;
     exports.KeyExchangeQuery = KeyExchangeQuery;
     exports.KeyExchangeService = KeyExchangeService;
@@ -15260,28 +15297,12 @@
     exports.LoginHistoryQuery = LoginHistoryQuery;
     exports.LoginResult = LoginResult;
     exports.LrApolloService = LrApolloService;
-    exports.LrAuthException = LrAuthException;
-    exports.LrBadArgumentException = LrBadArgumentException;
-    exports.LrBadLogicException = LrBadLogicException;
-    exports.LrBadRequestException = LrBadRequestException;
-    exports.LrBadStateException = LrBadStateException;
-    exports.LrCodeMismatchException = LrCodeMismatchException;
-    exports.LrConcurrentAccessException = LrConcurrentAccessException;
-    exports.LrEncryptionException = LrEncryptionException;
-    exports.LrError = LrError;
-    exports.LrException = LrException;
-    exports.LrExpiredCodeException = LrExpiredCodeException;
-    exports.LrExpiredException = LrExpiredException;
     exports.LrGraphQLService = exports.ɵf;
-    exports.LrLockedException = LrLockedException;
     exports.LrMergedMutation = LrMergedMutation;
     exports.LrMutation = LrMutation;
     exports.LrMutationBase = LrMutationBase;
-    exports.LrNotFoundException = LrNotFoundException;
     exports.LrRecord = LrRecord;
     exports.LrService = LrService;
-    exports.LrSuspiciousException = LrSuspiciousException;
-    exports.LrUnsupportedException = LrUnsupportedException;
     exports.MainContactCard = MainContactCard;
     exports.MainContactCardFields = MainContactCardFields;
     exports.MainContactCardPlainFields = MainContactCardPlainFields;
@@ -15351,6 +15372,7 @@
     exports.gqlTyped = gqlTyped;
     exports.handleApolloError = handleApolloError;
     exports.handleCognitoCallback = handleCognitoCallback;
+    exports.httpOptions = httpOptions;
     exports.initialiseAuth = initialiseAuth;
     exports.mapEdges = mapEdges;
     exports.mapUserPlans = mapUserPlans;