@lucern/sdk 0.2.0-alpha.13 → 0.2.0-alpha.3

package/dist/audience/index.js

@@ -1,110 +0,0 @@
-// src/audience/index.ts
-var AUDIENCE_CLASS_RANK = {
-  public: 0,
-  restricted_external: 1,
-  internal: 2
-};
-function normalizeKey(key) {
-  return (key ?? "").trim().toLowerCase().replace(/[^a-z0-9:_-]+/g, "_").replace(/_+/g, "_").replace(/^_+|_+$/g, "");
-}
-function normalizeAudienceKey(key) {
-  return normalizeKey(key);
-}
-function normalizeAudienceMode(mode) {
-  if (mode === "public" || mode === "lp" || mode === "internal") {
-    return mode;
-  }
-  return "internal";
-}
-function classFromAudienceMode(mode) {
-  if (mode === "public") {
-    return "public";
-  }
-  if (mode === "lp") {
-    return "restricted_external";
-  }
-  return "internal";
-}
-function modeFromAudienceClass(audienceClass) {
-  if (audienceClass === "public") {
-    return "public";
-  }
-  if (audienceClass === "restricted_external") {
-    return "lp";
-  }
-  return "internal";
-}
-function classFromAudienceKey(audienceKey, fallback = "internal") {
-  const key = normalizeKey(audienceKey);
-  if (!key) {
-    return fallback;
-  }
-  if (key === "internal") {
-    return "internal";
-  }
-  if (key === "public") {
-    return "public";
-  }
-  if (key === "lp" || key === "external" || key === "client" || key === "partner" || key === "portfolio" || key === "network" || key === "restricted_external") {
-    return "restricted_external";
-  }
-  return fallback;
-}
-function resolveAudience(args) {
-  const fallbackMode = normalizeAudienceMode(args?.audienceMode);
-  const fallbackKey = normalizeKey(args?.audienceKey) || fallbackMode;
-  const fallbackClass = args?.audienceClass ?? classFromAudienceKey(fallbackKey);
-  return {
-    audienceKey: fallbackKey,
-    audienceClass: fallbackClass,
-    audienceMode: modeFromAudienceClass(fallbackClass)
-  };
-}
-function canViewAudienceLabel(viewerAudience, resourceAudienceLabel) {
-  const viewerClass = classFromAudienceKey(viewerAudience, "public");
-  const resourceClass = classFromAudienceKey(resourceAudienceLabel, "internal");
-  return canAudienceClassAccess(viewerClass, resourceClass);
-}
-function canAudienceClassAccess(viewerClass, resourceClass) {
-  return AUDIENCE_CLASS_RANK[viewerClass] >= AUDIENCE_CLASS_RANK[resourceClass];
-}
-function deriveAllowedAudienceClasses(visibility) {
-  if (visibility === "public") {
-    return ["internal", "restricted_external", "public"];
-  }
-  if (visibility === "firm" || visibility === "external") {
-    return ["internal", "restricted_external"];
-  }
-  return ["internal"];
-}
-function unique(items) {
-  return [...new Set(items)];
-}
-function intersect(left, right) {
-  const rightSet = new Set(right);
-  return left.filter((entry) => rightSet.has(entry));
-}
-function intersectAudienceScopes(visibilityScope, principalScope) {
-  const allowedAudienceClasses = intersect(
-    visibilityScope.allowedAudienceClasses,
-    principalScope.allowedAudienceClasses
-  );
-  const allowedAudienceKeys = intersect(
-    visibilityScope.allowedAudienceKeys.map(
-      (entry) => normalizeAudienceKey(entry)
-    ),
-    principalScope.allowedAudienceKeys.map((entry) => normalizeAudienceKey(entry))
-  ).filter(Boolean);
-  const mergedClasses = unique(allowedAudienceClasses);
-  return {
-    allowedAudienceClasses: mergedClasses,
-    allowedAudienceKeys: unique(allowedAudienceKeys),
-    allowedAudienceModes: unique(
-      mergedClasses.map((audienceClass) => modeFromAudienceClass(audienceClass))
-    )
-  };
-}
-
-export { AUDIENCE_CLASS_RANK, canAudienceClassAccess, canViewAudienceLabel, classFromAudienceKey, classFromAudienceMode, deriveAllowedAudienceClasses, intersectAudienceScopes, modeFromAudienceClass, normalizeAudienceKey, normalizeAudienceMode, resolveAudience };
-//# sourceMappingURL=index.js.map
-//# sourceMappingURL=index.js.map

package/dist/audience/index.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../../src/audience/index.ts"],"names":[],"mappings":";AAyBO,IAAM,mBAAA,GAAqD;AAAA,EAChE,MAAA,EAAQ,CAAA;AAAA,EACR,mBAAA,EAAqB,CAAA;AAAA,EACrB,QAAA,EAAU;AACZ;AAEA,SAAS,aAAa,GAAA,EAAwC;AAC5D,EAAA,OAAA,CAAQ,OAAO,EAAA,EACZ,IAAA,EAAK,CACL,WAAA,GACA,OAAA,CAAQ,gBAAA,EAAkB,GAAG,CAAA,CAC7B,QAAQ,KAAA,EAAO,GAAG,CAAA,CAClB,OAAA,CAAQ,YAAY,EAAE,CAAA;AAC3B;AAEO,SAAS,qBAAqB,GAAA,EAAwC;AAC3E,EAAA,OAAO,aAAa,GAAG,CAAA;AACzB;AAEO,SAAS,sBACd,IAAA,EACc;AACd,EAAA,IAAI,IAAA,KAAS,QAAA,IAAY,IAAA,KAAS,IAAA,IAAQ,SAAS,UAAA,EAAY;AAC7D,IAAA,OAAO,IAAA;AAAA,EACT;AACA,EAAA,OAAO,UAAA;AACT;AAEO,SAAS,sBAAsB,IAAA,EAAmC;AACvE,EAAA,IAAI,SAAS,QAAA,EAAU;AACrB,IAAA,OAAO,QAAA;AAAA,EACT;AACA,EAAA,IAAI,SAAS,IAAA,EAAM;AACjB,IAAA,OAAO,qBAAA;AAAA,EACT;AACA,EAAA,OAAO,UAAA;AACT;AAEO,SAAS,sBACd,aAAA,EACc;AACd,EAAA,IAAI,kBAAkB,QAAA,EAAU;AAC9B,IAAA,OAAO,QAAA;AAAA,EACT;AACA,EAAA,IAAI,kBAAkB,qBAAA,EAAuB;AAC3C,IAAA,OAAO,IAAA;AAAA,EACT;AACA,EAAA,OAAO,UAAA;AACT;AAEO,SAAS,oBAAA,CACd,WAAA,EACA,QAAA,GAA0B,UAAA,EACX;AACf,EAAA,MAAM,GAAA,GAAM,aAAa,WAAW,CAAA;AACpC,EAAA,IAAI,CAAC,GAAA,EAAK;AACR,IAAA,OAAO,QAAA;AAAA,EACT;AACA,EAAA,IAAI,QAAQ,UAAA,EAAY;AACtB,IAAA,OAAO,UAAA;AAAA,EACT;AACA,EAAA,IAAI,QAAQ,QAAA,EAAU;AACpB,IAAA,OAAO,QAAA;AAAA,EACT;AACA,EAAA,IACE,GAAA,KAAQ,IAAA,IACR,GAAA,KAAQ,UAAA,IACR,GAAA,KAAQ,QAAA,IACR,GAAA,KAAQ,SAAA,IACR,GAAA,KAAQ,WAAA,IACR,GAAA,KAAQ,SAAA,IACR,QAAQ,qBAAA,EACR;AACA,IAAA,OAAO,qBAAA;AAAA,EACT;AACA,EAAA,OAAO,QAAA;AACT;AAEO,SAAS,gBAAgB,IAAA,EAIX;AACnB,EAAA,MAAM,YAAA,GAAe,qBAAA,CAAsB,IAAA,EAAM,YAAY,CAAA;AAC7D,EAAA,MAAM,WAAA,GAAc,YAAA,CAAa,IAAA,EAAM,WAAW,CAAA,IAAK,YAAA;AACvD,EAAA,MAAM,aAAA,GACJ,IAAA,EAAM,aAAA,IAAiB,oBAAA,CAAqB,WAAW,CAAA;AAEzD,EAAA,OAAO;AAAA,IACL,WAAA,EAAa,WAAA;AAAA,IACb,aAAA,EAAe,aAAA;AAAA,IACf,YAAA,EAAc,sBAAsB,aAAa;AAAA,GACnD;AACF;AAEO,SAAS,oBAAA,CACd,gBACA,qBAAA,EACS;AACT,EAAA,MAAM,WAAA,GAAc,oBAAA,CAAqB,cAAA,EAAgB,QAAQ,CAAA;AACjE,EAAA,MAAM,aAAA,GAAgB,oBAAA,CAAqB,qBAAA,EAAuB,UAAU,CAAA;AAC5E,EAAA,OAAO,sBAAA,CAAuB,aAAa,aAAa,CAAA;AAC1D;AAEO,SAAS,sBAAA,CACd,aACA,aAAA,EACS;AACT,EAAA,OAAO,mBAAA,CAAoB,WAAW,CAAA,IAAK,mBAAA,CAAoB,aAAa,CAAA;AAC9E;AAEO,SAAS,6BACd,UAAA,EACiB;AACjB,EAAA,IAAI,eAAe,QAAA,EAAU;AAC3B,IAAA,OAAO,CAAC,UAAA,EAAY,qBAAA,EAAuB,QAAQ,CAAA;AAAA,EACrD;AACA,EAAA,IAAI,UAAA,KAAe,MAAA,IAAU,UAAA,KAAe,UAAA,EAAY;AACtD,IAAA,OAAO,CAAC,YAAY,qBAAqB,CAAA;AAAA,EAC3C;AACA,EAAA,OAAO,CAAC,UAAU,CAAA;AACpB;AAEA,SAAS,OAAU,KAAA,EAAiB;AAClC,EAAA,OAAO,CAAC,GAAG,IAAI,GAAA,CAAI,KAAK,CAAC,CAAA;AAC3B;AAEA,SAAS,SAAA,CAAa,MAAW,KAAA,EAAiB;AAChD,EAAA,MAAM,QAAA,GAAW,IAAI,GAAA,CAAI,KAAK,CAAA;AAC9B,EAAA,OAAO,KAAK,MAAA,CAAO,CAAC,UAAU,QAAA,CAAS,GAAA,CAAI,KAAK,CAAC,CAAA;AACnD;AAEO,SAAS,uBAAA,CACd,iBACA,cAAA,EACsB;AACtB,EAAA,MAAM,sBAAA,GAAyB,SAAA;AAAA,IAC7B,eAAA,CAAgB,sBAAA;AAAA,IAChB,cAAA,CAAe;AAAA,GACjB;AACA,EAAA,MAAM,mBAAA,GAAsB,SAAA;AAAA,IAC1B,gBAAgB,mBAAA,CAAoB,GAAA;AAAA,MAAI,CAAC,KAAA,KACvC,oBAAA,CAAqB,KAAK;AAAA,KAC5B;AAAA,IACA,eAAe,mBAAA,CAAoB,GAAA,CAAI,CAAC,KAAA,KAAU,oBAAA,CAAqB,KAAK,CAAC;AAAA,GAC/E,CAAE,OAAO,OAAO,CAAA;AAChB,EAAA,MAAM,aAAA,GAAgB,OAAO,sBAAsB,CAAA;AACnD,EAAA,OAAO;AAAA,IACL,sBAAA,EAAwB,aAAA;AAAA,IACxB,mBAAA,EAAqB,OAAO,mBAAmB,CAAA;AAAA,IAC/C,oBAAA,EAAsB,MAAA;AAAA,MACpB,cAAc,GAAA,CAAI,CAAC,aAAA,KAAkB,qBAAA,CAAsB,aAAa,CAAC;AAAA;AAC3E,GACF;AACF","file":"index.js","sourcesContent":["export type AudienceMode = \"internal\" | \"lp\" | \"public\";\nexport type AudienceClass = \"internal\" | \"restricted_external\" | \"public\";\n\nexport type ResolvedAudience = {\n  audienceKey: string;\n  audienceClass: AudienceClass;\n  audienceMode: AudienceMode;\n};\n\nexport type AllowedAudienceScope = {\n  allowedAudienceClasses: AudienceClass[];\n  allowedAudienceKeys: string[];\n  allowedAudienceModes: AudienceMode[];\n};\n\nexport type PrincipalAudienceScope = {\n  mode: \"legacy_open\" | \"grant_enforced\" | \"admin_override\";\n  grantModelEnabled: boolean;\n  grantedAudienceKeys: string[];\n  grantedAudienceClasses: AudienceClass[];\n  allowedAudienceKeys: string[];\n  allowedAudienceClasses: AudienceClass[];\n  allowedAudienceModes: AudienceMode[];\n};\n\nexport const AUDIENCE_CLASS_RANK: Record<AudienceClass, number> = {\n  public: 0,\n  restricted_external: 1,\n  internal: 2,\n};\n\nfunction normalizeKey(key: string | undefined | null): string {\n  return (key ?? \"\")\n    .trim()\n    .toLowerCase()\n    .replace(/[^a-z0-9:_-]+/g, \"_\")\n    .replace(/_+/g, \"_\")\n    .replace(/^_+|_+$/g, \"\");\n}\n\nexport function normalizeAudienceKey(key: string | undefined | null): string {\n  return normalizeKey(key);\n}\n\nexport function normalizeAudienceMode(\n  mode: string | undefined | null\n): AudienceMode {\n  if (mode === \"public\" || mode === \"lp\" || mode === \"internal\") {\n    return mode;\n  }\n  return \"internal\";\n}\n\nexport function classFromAudienceMode(mode: AudienceMode): AudienceClass {\n  if (mode === \"public\") {\n    return \"public\";\n  }\n  if (mode === \"lp\") {\n    return \"restricted_external\";\n  }\n  return \"internal\";\n}\n\nexport function modeFromAudienceClass(\n  audienceClass: AudienceClass\n): AudienceMode {\n  if (audienceClass === \"public\") {\n    return \"public\";\n  }\n  if (audienceClass === \"restricted_external\") {\n    return \"lp\";\n  }\n  return \"internal\";\n}\n\nexport function classFromAudienceKey(\n  audienceKey: string | undefined | null,\n  fallback: AudienceClass = \"internal\"\n): AudienceClass {\n  const key = normalizeKey(audienceKey);\n  if (!key) {\n    return fallback;\n  }\n  if (key === \"internal\") {\n    return \"internal\";\n  }\n  if (key === \"public\") {\n    return \"public\";\n  }\n  if (\n    key === \"lp\" ||\n    key === \"external\" ||\n    key === \"client\" ||\n    key === \"partner\" ||\n    key === \"portfolio\" ||\n    key === \"network\" ||\n    key === \"restricted_external\"\n  ) {\n    return \"restricted_external\";\n  }\n  return fallback;\n}\n\nexport function resolveAudience(args?: {\n  audienceMode?: string | null;\n  audienceKey?: string | null;\n  audienceClass?: AudienceClass | null;\n}): ResolvedAudience {\n  const fallbackMode = normalizeAudienceMode(args?.audienceMode);\n  const fallbackKey = normalizeKey(args?.audienceKey) || fallbackMode;\n  const fallbackClass =\n    args?.audienceClass ?? classFromAudienceKey(fallbackKey);\n\n  return {\n    audienceKey: fallbackKey,\n    audienceClass: fallbackClass,\n    audienceMode: modeFromAudienceClass(fallbackClass),\n  };\n}\n\nexport function canViewAudienceLabel(\n  viewerAudience: string,\n  resourceAudienceLabel: string | undefined | null\n): boolean {\n  const viewerClass = classFromAudienceKey(viewerAudience, \"public\");\n  const resourceClass = classFromAudienceKey(resourceAudienceLabel, \"internal\");\n  return canAudienceClassAccess(viewerClass, resourceClass);\n}\n\nexport function canAudienceClassAccess(\n  viewerClass: AudienceClass,\n  resourceClass: AudienceClass\n): boolean {\n  return AUDIENCE_CLASS_RANK[viewerClass] >= AUDIENCE_CLASS_RANK[resourceClass];\n}\n\nexport function deriveAllowedAudienceClasses(\n  visibility: string | undefined | null\n): AudienceClass[] {\n  if (visibility === \"public\") {\n    return [\"internal\", \"restricted_external\", \"public\"];\n  }\n  if (visibility === \"firm\" || visibility === \"external\") {\n    return [\"internal\", \"restricted_external\"];\n  }\n  return [\"internal\"];\n}\n\nfunction unique<T>(items: T[]): T[] {\n  return [...new Set(items)];\n}\n\nfunction intersect<T>(left: T[], right: T[]): T[] {\n  const rightSet = new Set(right);\n  return left.filter((entry) => rightSet.has(entry));\n}\n\nexport function intersectAudienceScopes(\n  visibilityScope: AllowedAudienceScope,\n  principalScope: PrincipalAudienceScope\n): AllowedAudienceScope {\n  const allowedAudienceClasses = intersect(\n    visibilityScope.allowedAudienceClasses,\n    principalScope.allowedAudienceClasses\n  );\n  const allowedAudienceKeys = intersect(\n    visibilityScope.allowedAudienceKeys.map((entry) =>\n      normalizeAudienceKey(entry)\n    ),\n    principalScope.allowedAudienceKeys.map((entry) => normalizeAudienceKey(entry))\n  ).filter(Boolean);\n  const mergedClasses = unique(allowedAudienceClasses);\n  return {\n    allowedAudienceClasses: mergedClasses,\n    allowedAudienceKeys: unique(allowedAudienceKeys),\n    allowedAudienceModes: unique(\n      mergedClasses.map((audienceClass) => modeFromAudienceClass(audienceClass))\n    ),\n  };\n}\n"]}

package/dist/audiencesClient.js

@@ -1,472 +0,0 @@
-// src/coreClient.ts
-var LucernApiError = class extends Error {
-  code;
-  status;
-  invariant;
-  suggestion;
-  details;
-  requestId;
-  correlationId;
-  policyTraceId;
-  constructor(args) {
-    super(args.message);
-    this.name = "LucernApiError";
-    this.code = args.code;
-    this.status = args.status;
-    this.invariant = args.invariant;
-    this.suggestion = args.suggestion;
-    this.details = args.details;
-    this.requestId = args.requestId;
-    this.correlationId = args.correlationId;
-    this.policyTraceId = args.policyTraceId;
-  }
-};
-function toQueryString(scope) {
-  const params = new URLSearchParams();
-  if (scope.tenantId) {
-    params.set("tenantId", scope.tenantId);
-  }
-  if (scope.workspaceId) {
-    params.set("workspaceId", scope.workspaceId);
-  }
-  for (const [key, value] of Object.entries(scope)) {
-    if (key === "tenantId" || key === "workspaceId") {
-      continue;
-    }
-    if (value === void 0) {
-      continue;
-    }
-    params.set(key, String(value));
-  }
-  const serialized = params.toString();
-  return serialized.length > 0 ? `?${serialized}` : "";
-}
-function fillRandomBytes(length) {
-  const bytes = new Uint8Array(length);
-  if (typeof globalThis.crypto?.getRandomValues === "function") {
-    globalThis.crypto.getRandomValues(bytes);
-    return bytes;
-  }
-  for (let index = 0; index < length; index += 1) {
-    bytes[index] = Math.floor(Math.random() * 256);
-  }
-  return bytes;
-}
-function generatePortableRequestId() {
-  if (typeof globalThis.crypto?.randomUUID === "function") {
-    return globalThis.crypto.randomUUID();
-  }
-  const bytes = fillRandomBytes(16);
-  bytes[6] = bytes[6] & 15 | 64;
-  bytes[8] = bytes[8] & 63 | 128;
-  const hex = Array.from(bytes, (value) => value.toString(16).padStart(2, "0"));
-  return `${hex.slice(0, 4).join("")}-${hex.slice(4, 6).join("")}-${hex.slice(
-    6,
-    8
-  ).join("")}-${hex.slice(8, 10).join("")}-${hex.slice(10).join("")}`;
-}
-function randomIdempotencyKey() {
-  return generatePortableRequestId();
-}
-function isRetryableStatus(status) {
-  return status >= 500 || status === 408 || status === 429;
-}
-function fallbackErrorCode(status) {
-  if (status === 401) {
-    return "AUTHENTICATION_REQUIRED";
-  }
-  if (status === 403) {
-    return "FORBIDDEN";
-  }
-  if (status === 404) {
-    return "NOT_FOUND";
-  }
-  if (status === 408) {
-    return "UPSTREAM_ERROR";
-  }
-  if (status === 409) {
-    return "CONFLICT";
-  }
-  if (status === 429) {
-    return "RATE_LIMIT_EXCEEDED";
-  }
-  if (status >= 500) {
-    return "UPSTREAM_ERROR";
-  }
-  return "INTERNAL_ERROR";
-}
-function delay(ms) {
-  return new Promise((resolve) => setTimeout(resolve, ms));
-}
-function parseRetryAfterMs(value) {
-  if (!value) {
-    return null;
-  }
-  const trimmed = value.trim();
-  if (!trimmed) {
-    return null;
-  }
-  const numeric = Number(trimmed);
-  if (Number.isFinite(numeric)) {
-    return Math.max(0, Math.round(numeric * 1e3));
-  }
-  const parsedDate = Date.parse(trimmed);
-  if (Number.isFinite(parsedDate)) {
-    return Math.max(0, parsedDate - Date.now());
-  }
-  return null;
-}
-function computeRetryDelayMs(args) {
-  const baseDelay = args.status === 429 ? Math.max(
-    args.retryAfterMs ?? 0,
-    Math.min(1e3 * 2 ** args.attempt, 1e4)
-  ) : Math.min(1e3 * 2 ** args.attempt, 4e3);
-  if (args.status !== 429) {
-    return baseDelay;
-  }
-  const jitterWindow = Math.max(250, Math.round(baseDelay * 0.25));
-  return baseDelay + Math.round(Math.random() * jitterWindow);
-}
-function timeoutError(timeoutMs) {
-  const error = new Error(`Request timed out after ${timeoutMs}ms`);
-  error.name = "AbortError";
-  return error;
-}
-function readPolicySummaryFromDetails(details) {
-  if (!details || typeof details !== "object" || Array.isArray(details)) {
-    return null;
-  }
-  const directSummary = details.summary;
-  if (typeof directSummary === "string" && directSummary.trim().length > 0) {
-    return directSummary.trim();
-  }
-  const policy = details.policy;
-  if (!policy || typeof policy !== "object" || Array.isArray(policy)) {
-    return null;
-  }
-  const explanation = policy.explanation;
-  if (!explanation || typeof explanation !== "object" || Array.isArray(explanation)) {
-    return null;
-  }
-  const nestedSummary = explanation.summary;
-  if (typeof nestedSummary === "string" && nestedSummary.trim().length > 0) {
-    return nestedSummary.trim();
-  }
-  return null;
-}
-function createGatewayRequestClient(config = {}) {
-  const fetchImpl = config.fetchImpl ?? fetch;
-  const baseUrl = config.baseUrl?.replace(/\/+$/, "") ?? "";
-  const maxRetries = config.maxRetries ?? 2;
-  const requestIdFactory = config.requestIdFactory ?? (() => generatePortableRequestId());
-  async function resolveAuthHeaders() {
-    if (!config.getAuthHeaders) {
-      return {};
-    }
-    return await config.getAuthHeaders();
-  }
-  async function fetchWithTimeout(url, init, timeoutMs) {
-    const controller = new AbortController();
-    const timer = setTimeout(() => controller.abort(), timeoutMs);
-    try {
-      return await fetchImpl(url, { ...init, signal: controller.signal });
-    } catch (error) {
-      if (controller.signal.aborted) {
-        throw timeoutError(timeoutMs);
-      }
-      throw error;
-    } finally {
-      clearTimeout(timer);
-    }
-  }
-  async function parsePayload(response) {
-    const text = await response.text();
-    if (!text) {
-      return null;
-    }
-    try {
-      return JSON.parse(text);
-    } catch {
-      return null;
-    }
-  }
-  function resolveTimeoutMs(method, requestTimeoutMs) {
-    if (typeof requestTimeoutMs === "number") {
-      return requestTimeoutMs;
-    }
-    const methodTimeoutMs = config.timeoutMsByMethod?.[method];
-    if (typeof methodTimeoutMs === "number") {
-      return methodTimeoutMs;
-    }
-    return config.timeoutMs ?? 15e3;
-  }
-  function buildApiError(args) {
-    const failure = args.failure;
-    const legacyError = failure && typeof failure.error === "object" && failure.error !== null ? failure.error : failure?.legacyError;
-    const correlationId = failure?.correlationId ?? args.response.headers.get("x-lucern-correlation-id")?.trim() ?? args.requestId;
-    const policyTraceId = failure?.policyTraceId ?? args.response.headers.get("x-lucern-policy-trace-id")?.trim() ?? null;
-    const details = failure?.details ?? legacyError?.details;
-    const policySummary = readPolicySummaryFromDetails(details);
-    return new LucernApiError({
-      code: failure?.code ?? legacyError?.code ?? fallbackErrorCode(args.response.status),
-      message: policySummary ?? (typeof failure?.error === "string" ? failure.error : legacyError?.message ?? (args.response.ok ? "Platform API returned an invalid success payload." : "Platform API request failed.")),
-      status: args.response.status,
-      invariant: failure?.invariant,
-      suggestion: failure?.suggestion,
-      details,
-      requestId: args.requestId,
-      correlationId,
-      policyTraceId
-    });
-  }
-  async function request(args) {
-    const authHeaders = await resolveAuthHeaders();
-    const method = args.method ?? "GET";
-    const timeoutMs = resolveTimeoutMs(method, args.timeoutMs);
-    const headers = new Headers({
-      "content-type": "application/json",
-      ...authHeaders
-    });
-    if (args.idempotencyKey) {
-      headers.set("idempotency-key", args.idempotencyKey);
-    }
-    const requestId = headers.get("x-correlation-id")?.trim() || headers.get("x-request-id")?.trim() || args.requestId || requestIdFactory();
-    if (!headers.has("x-correlation-id") && !headers.has("x-request-id")) {
-      headers.set("x-correlation-id", requestId);
-    }
-    const url = `${baseUrl}${args.path}`;
-    const serializedBody = args.body ? JSON.stringify(args.body) : void 0;
-    const init = {
-      method,
-      headers,
-      body: serializedBody
-    };
-    let lastError;
-    for (let attempt = 0; attempt <= maxRetries; attempt++) {
-      const hookRequestContext = {
-        requestId,
-        attempt,
-        maxRetries,
-        method,
-        path: args.path,
-        url,
-        headers: new Headers(headers),
-        body: serializedBody,
-        timeoutMs
-      };
-      await config.onRequest?.(hookRequestContext);
-      const startedAt = Date.now();
-      try {
-        const response = await fetchWithTimeout(url, init, timeoutMs);
-        const responseClone = response.clone();
-        const payload = await parsePayload(response);
-        const retryAfterMs = parseRetryAfterMs(
-          response.headers.get("Retry-After")
-        );
-        if (!response.ok || !payload?.success) {
-          const failure = payload && !payload.success ? payload : null;
-          const apiError = buildApiError({
-            requestId,
-            response,
-            failure
-          });
-          const willRetry = attempt < maxRetries && isRetryableStatus(response.status);
-          await config.onResponse?.({
-            ...hookRequestContext,
-            durationMs: Date.now() - startedAt,
-            status: response.status,
-            response: responseClone,
-            error: apiError,
-            correlationId: apiError.correlationId ?? requestId,
-            policyTraceId: apiError.policyTraceId ?? null,
-            retryAfterMs,
-            willRetry
-          });
-          if (willRetry) {
-            lastError = apiError;
-            await delay(
-              computeRetryDelayMs({
-                attempt,
-                status: response.status,
-                retryAfterMs
-              })
-            );
-            continue;
-          }
-          throw apiError;
-        }
-        const successPayload = payload;
-        await config.onResponse?.({
-          ...hookRequestContext,
-          durationMs: Date.now() - startedAt,
-          status: response.status,
-          response: responseClone,
-          correlationId: successPayload.correlationId ?? response.headers.get("x-lucern-correlation-id")?.trim() ?? requestId,
-          policyTraceId: successPayload.policyTraceId ?? response.headers.get("x-lucern-policy-trace-id")?.trim() ?? null,
-          idempotentReplay: successPayload.idempotentReplay,
-          retryAfterMs,
-          willRetry: false
-        });
-        return successPayload;
-      } catch (fetchError) {
-        if (fetchError instanceof LucernApiError) {
-          throw fetchError;
-        }
-        const willRetry = attempt < maxRetries;
-        await config.onResponse?.({
-          ...hookRequestContext,
-          durationMs: Date.now() - startedAt,
-          error: fetchError,
-          correlationId: requestId,
-          policyTraceId: null,
-          willRetry
-        });
-        lastError = fetchError;
-        if (willRetry) {
-          await delay(computeRetryDelayMs({ attempt }));
-        }
-      }
-    }
-    throw lastError instanceof Error ? lastError : new Error("Platform API request failed after retries.");
-  }
-  return {
-    request
-  };
-}
-
-// src/sdkSurface.ts
-function createListResult(items, legacyKey) {
-  const result = {
-    items,
-    total: items.length
-  };
-  if (legacyKey) {
-    result[legacyKey] = items;
-  }
-  return result;
-}
-function mapGatewayData(response, mapper) {
-  return {
-    ...response,
-    data: mapper(response.data)
-  };
-}
-
-// src/audiencesClient.ts
-function createAudiencesClient(config = {}) {
-  const gateway = createGatewayRequestClient(config);
-  return {
-    /**
-     * List audience registry entries.
-     */
-    async listRegistry(query = {}) {
-      return gateway.request({
-        path: `/api/platform/v1/audiences/registry${toQueryString({
-          ...query,
-          effective: typeof query.effective === "boolean" ? query.effective ? "true" : "false" : void 0,
-          status: query.status
-        })}`
-      }).then(
-        (response) => mapGatewayData(
-          response,
-          (data) => createListResult(
-            Array.isArray(data) ? data : [],
-            "registryEntries"
-          )
-        )
-      );
-    },
-    /**
-     * @deprecated Use listRegistry.
-     */
-    async getRegistry(query = {}) {
-      return this.listRegistry(query);
-    },
-    /**
-     * Create an audience registry entry.
-     */
-    async createRegistryEntry(input, idempotencyKey) {
-      return gateway.request({
-        path: "/api/platform/v1/audiences/registry",
-        method: "POST",
-        body: input,
-        idempotencyKey: idempotencyKey ?? randomIdempotencyKey()
-      });
-    },
-    /**
-     * Update an audience registry entry.
-     */
-    async updateRegistryEntry(input, idempotencyKey) {
-      return this.createRegistryEntry(input, idempotencyKey);
-    },
-    /**
-     * @deprecated Use createRegistryEntry or updateRegistryEntry.
-     */
-    async upsertRegistry(input, idempotencyKey) {
-      return this.createRegistryEntry(input, idempotencyKey);
-    },
-    /**
-     * List audience grants.
-     */
-    async listGrants(query = {}) {
-      return gateway.request({
-        path: `/api/platform/v1/audiences/grants${toQueryString({
-          ...query,
-          audienceKey: query.audienceKey,
-          principalId: query.principalId,
-          groupId: query.groupId,
-          status: query.status
-        })}`
-      }).then(
-        (response) => mapGatewayData(
-          response,
-          (data) => createListResult(Array.isArray(data) ? data : [], "grants")
-        )
-      );
-    },
-    /**
-     * @deprecated Use listGrants.
-     */
-    async getGrants(query = {}) {
-      return this.listGrants(query);
-    },
-    /**
-     * Create an audience grant.
-     */
-    async createGrant(input, idempotencyKey) {
-      return gateway.request({
-        path: "/api/platform/v1/audiences/grants",
-        method: "POST",
-        body: input,
-        idempotencyKey: idempotencyKey ?? randomIdempotencyKey()
-      });
-    },
-    /**
-     * @deprecated Use createGrant.
-     */
-    async grant(input, idempotencyKey) {
-      return this.createGrant(input, idempotencyKey);
-    },
-    /**
-     * Delete an audience grant by revoking it.
-     */
-    async deleteGrant(input, idempotencyKey) {
-      return gateway.request({
-        path: "/api/platform/v1/audiences/grants/revoke",
-        method: "POST",
-        body: input,
-        idempotencyKey: idempotencyKey ?? randomIdempotencyKey()
-      });
-    },
-    /**
-     * @deprecated Use deleteGrant.
-     */
-    async revokeGrant(input, idempotencyKey) {
-      return this.deleteGrant(input, idempotencyKey);
-    }
-  };
-}
-
-export { createAudiencesClient };
-//# sourceMappingURL=audiencesClient.js.map
-//# sourceMappingURL=audiencesClient.js.map