@machinemetrics/mm-react-tools 5.2.0-0 → 5.2.0

package/dist/Authorized.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"Authorized.d.ts","sourceRoot":"","sources":["../src/Authorized.tsx"],"names":[],"mappings":"AAgBA,QAAA,MAAM,IAAI,GAAI,eAAe,GAAG,4CA+B/B,CAAC;AAEF,eAAe,IAAI,CAAC"}
+{"version":3,"file":"Authorized.d.ts","sourceRoot":"","sources":["../src/Authorized.tsx"],"names":[],"mappings":"AAgBA,QAAA,MAAM,IAAI,GAAI,eAAe,GAAG,4CAmC/B,CAAC;AAEF,eAAe,IAAI,CAAC"}

package/dist/MMApolloLinkProvider.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"MMApolloLinkProvider.d.ts","sourceRoot":"","sources":["../src/MMApolloLinkProvider.tsx"],"names":[],"mappings":"AAqBA,QAAA,MAAM,oBAAoB,+CAyHzB,CAAC;AAEF,eAAe,oBAAoB,CAAC"}
+{"version":3,"file":"MMApolloLinkProvider.d.ts","sourceRoot":"","sources":["../src/MMApolloLinkProvider.tsx"],"names":[],"mappings":"AAsBA,QAAA,MAAM,oBAAoB,+CA8HzB,CAAC;AAEF,eAAe,oBAAoB,CAAC"}

package/dist/MMContext.d.ts

@@ -24,8 +24,17 @@ export interface MMUrls {
  */
 export type MMRequestOptions = RequestInit;
 /**
- * Authenticated fetch helper. Resolves with the parsed JSON response body.
- * Throws `Error('UNAUTHORIZED')` (and clears the access token) on a 401.
+ * Authenticated fetch helper. Sends the API JWT as bearer and resolves with
+ * the parsed JSON response body.
+ *
+ * A `401` on a `GET` mints a new JWT and replays once; a second `401` signs
+ * the user out and throws `Error('UNAUTHORIZED')`. A `401` on any other
+ * method throws `UNAUTHORIZED` without signing out. When no JWT can be
+ * minted, throws a `CredentialError` whose message and `code` are the
+ * server's error code (e.g. `jwt_bearer_not_allowed`) with the HTTP `status`,
+ * or `api_credential_unavailable` with status 0 when there is no server
+ * verdict. With no access token at all, throws `UNAUTHORIZED`.
+ *
  * Generic so consumers can write `request<MyType>(url)` as they do today.
  */
 export type MMRequest = <T = any>(url: string, options?: MMRequestOptions) => Promise<T>;
@@ -35,13 +44,21 @@ export type MMRequest = <T = any>(url: string, options?: MMRequestOptions) => Pr
 export interface MMContextValue {
     /** The OAuth client id passed to `MMProvider`. */
     clientId: string;
-    /** The credential for a purpose ('api' | 'graphql' | 'nats'). Read per-use; never cache it. */
+    /**
+     * The credential held for a purpose ('api' | 'graphql' | 'nats'), or null
+     * when none is held. The value is served as-is until it is replaced or
+     * cleared; read it per use rather than caching it.
+     */
     getCredential: (purpose: CredentialPurpose) => string | null;
     /** Subscribe to credential-store changes (for the reactive `useCredential`). */
     subscribeCredentials: (listener: () => void) => () => void;
     /** Scopes actually granted, if known. */
     grantedScope?: string | null;
-    /** True once a usable api credential is present. Not tied to a token. */
+    /**
+     * True once the first API JWT has landed, minted from the access token or
+     * pushed by a host. Stays true while the access token is held, even across
+     * a failed refresh; `logout` or a rejected token resets it to false.
+     */
     isAuthenticated: boolean;
     /** Redirects the browser to the MachineMetrics OAuth login page. */
     login: (opts?: Record<string, unknown>) => void;

package/dist/MMContext.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"MMContext.d.ts","sourceRoot":"","sources":["../src/MMContext.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,OAAO,CAAC;AAC1B,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AAE3D;;;;;;;;GAQG;AACH,MAAM,WAAW,MAAM;IACrB,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;IAChB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAAC;CACnC;AAED;;;GAGG;AACH,MAAM,MAAM,gBAAgB,GAAG,WAAW,CAAC;AAE3C;;;;GAIG;AACH,MAAM,MAAM,SAAS,GAAG,CAAC,CAAC,GAAG,GAAG,EAC9B,GAAG,EAAE,MAAM,EACX,OAAO,CAAC,EAAE,gBAAgB,KACvB,OAAO,CAAC,CAAC,CAAC,CAAC;AAEhB;;GAEG;AACH,MAAM,WAAW,cAAc;IAC7B,kDAAkD;IAClD,QAAQ,EAAE,MAAM,CAAC;IACjB,+FAA+F;IAC/F,aAAa,EAAE,CAAC,OAAO,EAAE,iBAAiB,KAAK,MAAM,GAAG,IAAI,CAAC;IAC7D,gFAAgF;IAChF,oBAAoB,EAAE,CAAC,QAAQ,EAAE,MAAM,IAAI,KAAK,MAAM,IAAI,CAAC;IAC3D,yCAAyC;IACzC,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,yEAAyE;IACzE,eAAe,EAAE,OAAO,CAAC;IACzB,oEAAoE;IACpE,KAAK,EAAE,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,CAAC;IAChD,yDAAyD;IACzD,MAAM,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;IAC5B,0DAA0D;IAC1D,OAAO,EAAE,SAAS,CAAC;IACnB,yDAAyD;IACzD,IAAI,EAAE,MAAM,CAAC;CACd;AAED;;;;GAIG;AACH,MAAM,MAAM,YAAY,GAAG,cAAc,CAAC;;AAE1C,wBAA0E"}
+{"version":3,"file":"MMContext.d.ts","sourceRoot":"","sources":["../src/MMContext.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,OAAO,CAAC;AAC1B,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AAE3D;;;;;;;;GAQG;AACH,MAAM,WAAW,MAAM;IACrB,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;IAChB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAAC;CACnC;AAED;;;GAGG;AACH,MAAM,MAAM,gBAAgB,GAAG,WAAW,CAAC;AAE3C;;;;;;;;;;;;;GAaG;AACH,MAAM,MAAM,SAAS,GAAG,CAAC,CAAC,GAAG,GAAG,EAC9B,GAAG,EAAE,MAAM,EACX,OAAO,CAAC,EAAE,gBAAgB,KACvB,OAAO,CAAC,CAAC,CAAC,CAAC;AAEhB;;GAEG;AACH,MAAM,WAAW,cAAc;IAC7B,kDAAkD;IAClD,QAAQ,EAAE,MAAM,CAAC;IACjB;;;;OAIG;IACH,aAAa,EAAE,CAAC,OAAO,EAAE,iBAAiB,KAAK,MAAM,GAAG,IAAI,CAAC;IAC7D,gFAAgF;IAChF,oBAAoB,EAAE,CAAC,QAAQ,EAAE,MAAM,IAAI,KAAK,MAAM,IAAI,CAAC;IAC3D,yCAAyC;IACzC,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B;;;;OAIG;IACH,eAAe,EAAE,OAAO,CAAC;IACzB,oEAAoE;IACpE,KAAK,EAAE,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,CAAC;IAChD,yDAAyD;IACzD,MAAM,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;IAC5B,0DAA0D;IAC1D,OAAO,EAAE,SAAS,CAAC;IACnB,yDAAyD;IACzD,IAAI,EAAE,MAAM,CAAC;CACd;AAED;;;;GAIG;AACH,MAAM,MAAM,YAAY,GAAG,cAAc,CAAC;;AAE1C,wBAA0E"}

package/dist/MMEmbeddedAppProvider.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"MMEmbeddedAppProvider.d.ts","sourceRoot":"","sources":["../src/MMEmbeddedAppProvider.tsx"],"names":[],"mappings":"AAqBA,eAAO,MAAM,yBAAyB,UAAmB,CAAC;AAK1D,QAAA,MAAM,qBAAqB,+CA+tB1B,CAAC;AAEF,eAAe,qBAAqB,CAAC"}
+{"version":3,"file":"MMEmbeddedAppProvider.d.ts","sourceRoot":"","sources":["../src/MMEmbeddedAppProvider.tsx"],"names":[],"mappings":"AAsBA,eAAO,MAAM,yBAAyB,UAAmB,CAAC;AAK1D,QAAA,MAAM,qBAAqB,+CAsvB1B,CAAC;AAEF,eAAe,qBAAqB,CAAC"}

package/dist/MMProvider.d.ts

@@ -14,7 +14,11 @@ export interface MMProviderProps {
      * `string` (e.g. from JSON config) is also accepted and validated at runtime.
      */
     releaseStage: MMReleaseStage | (string & {});
-    /** How often the GraphQL JWT is refreshed. Defaults to 4.5 minutes. */
+    /**
+     * How often the GraphQL JWT is refreshed. Defaults to 4.5 minutes. The API
+     * JWT refreshes from its own `exp` and falls back to this cadence only when
+     * `exp` cannot be read.
+     */
     refreshJwtIntervalMs?: number;
     /** Optional device identifier forwarded to the login page. */
     device?: string;

package/dist/MMProvider.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"MMProvider.d.ts","sourceRoot":"","sources":["../src/MMProvider.tsx"],"names":[],"mappings":"AAAA,OAAO,KAON,MAAM,OAAO,CAAC;AAyBf,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAG1C,MAAM,MAAM,cAAc,GACtB,YAAY,GACZ,UAAU,GACV,SAAS,GACT,aAAa,CAAC;AAsDlB,MAAM,WAAW,eAAe;IAC9B,uEAAuE;IACvE,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,KAAK,CAAC,SAAS,CAAC;IAC3B,2CAA2C;IAC3C,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,uBAAuB;IACvB,QAAQ,EAAE,MAAM,CAAC;IACjB;;;OAGG;IACH,YAAY,EAAE,cAAc,GAAG,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC;IAC7C,uEAAuE;IACvE,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,8DAA8D;IAC9D,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,4DAA4D;IAC5D,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,0DAA0D;IAC1D,IAAI,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;CACxB;AAED,QAAA,MAAM,UAAU,GAAI,0IAWjB,eAAe,4CAsYjB,CAAC;AAEF,eAAe,UAAU,CAAC"}
+{"version":3,"file":"MMProvider.d.ts","sourceRoot":"","sources":["../src/MMProvider.tsx"],"names":[],"mappings":"AAAA,OAAO,KAON,MAAM,OAAO,CAAC;AA8Bf,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAG1C,MAAM,MAAM,cAAc,GACtB,YAAY,GACZ,UAAU,GACV,SAAS,GACT,aAAa,CAAC;AAsDlB,MAAM,WAAW,eAAe;IAC9B,uEAAuE;IACvE,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,KAAK,CAAC,SAAS,CAAC;IAC3B,2CAA2C;IAC3C,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,uBAAuB;IACvB,QAAQ,EAAE,MAAM,CAAC;IACjB;;;OAGG;IACH,YAAY,EAAE,cAAc,GAAG,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC;IAC7C;;;;OAIG;IACH,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,8DAA8D;IAC9D,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,4DAA4D;IAC5D,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,0DAA0D;IAC1D,IAAI,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;CACxB;AAED,QAAA,MAAM,UAAU,GAAI,0IAWjB,eAAe,4CA4bjB,CAAC;AAEF,eAAe,UAAU,CAAC"}

package/dist/PrivateLayout.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"PrivateLayout.d.ts","sourceRoot":"","sources":["../src/PrivateLayout.tsx"],"names":[],"mappings":"AAgBA,QAAA,MAAM,aAAa,+CAmBlB,CAAC;AAEF,eAAe,aAAa,CAAC"}
+{"version":3,"file":"PrivateLayout.d.ts","sourceRoot":"","sources":["../src/PrivateLayout.tsx"],"names":[],"mappings":"AAiBA,QAAA,MAAM,aAAa,+CAsBlB,CAAC;AAEF,eAAe,aAAa,CAAC"}

package/dist/apiJwt.d.ts

@@ -1,34 +1,45 @@
-/** Headroom before `exp` at which a JWT is treated as stale. */
+/** Lead time before `exp` at which the next mint is scheduled. */
 export declare const JWT_EXPIRY_MARGIN_MS: number;
-/** How long a failed mint suppresses the next attempt. */
+/** Least remaining life a held JWT needs to be sent on a request. */
+export declare const JWT_IN_TRANSIT_MARGIN_MS: number;
+/** How long a transient mint failure suppresses the next attempt. */
 export declare const MINT_BACKOFF_MS: number;
 /** The `exp` claim in seconds, or null when the token cannot be parsed. */
 export declare const parseJwtExp: (token: unknown) => number | null;
-export declare const isJwtFresh: (token: unknown, now?: number) => token is string;
+export declare const isJwtFresh: (token: unknown, now?: number, marginMs?: number) => token is string;
+/** A refusal from `/user-token` that will repeat for the same access token. */
+export interface ApiJwtMintFailure {
+    status: number;
+    code: string;
+}
 export interface ApiJwtControllerOptions {
     getApiUrl: () => string;
     /** The private access token, or null when a mint must not run. */
     getAccessToken: () => string | null | undefined;
     /** Called when /user-token answers 401: the access token is no longer valid. */
     onAccessTokenRejected: () => void;
+    /** Called with the refusal when a mint is refused, and with null once it is forgotten. */
+    onMintFailure?: (failure: ApiJwtMintFailure | null) => void;
     read: () => string | null;
     write: (jwt: string | null) => void;
+    /** Refresh cadence used only when the minted JWT carries no readable `exp`. */
+    fallbackRefreshMs?: () => number;
     now?: () => number;
     fetchJson?: (url: string, options: RequestInit) => Promise<any>;
 }
 export interface ApiJwtController {
-    /** The cached JWT while fresh, else null. No side effects. */
+    /** The held JWT, minted or pushed, or null when none is held. No side effects. */
     current(): string | null;
-    /** Like `current()`, but a stale or missing JWT starts a mint in the background. */
-    peek(): string | null;
     /** Fetch a new JWT. Concurrent callers share one request; resolves null on failure or during backoff. */
     mint(): Promise<string | null>;
-    /** A fresh JWT, minting when needed. */
+    /** A JWT fit to send: the held one while it has life left, else a freshly minted one, else whatever is held. */
     fresh(): Promise<string | null>;
-    /** Forget the cached JWT without ending the session. */
+    /** Forget the held JWT and any recorded refusal without ending the session. */
     invalidate(): void;
-    /** Sign-out: forget the JWT, discard in-flight results, reset backoff. */
+    /** Sign-out: forget the JWT, discard in-flight results, cancel the schedule. */
     clear(): void;
+    /** The refusal blocking mints for the current access token, if any. */
+    failure(): ApiJwtMintFailure | null;
 }
-export declare const createApiJwtController: ({ getApiUrl, getAccessToken, onAccessTokenRejected, read, write, now, fetchJson, }: ApiJwtControllerOptions) => ApiJwtController;
+export declare const createApiJwtController: ({ getApiUrl, getAccessToken, onAccessTokenRejected, onMintFailure, read, write, fallbackRefreshMs, now, fetchJson, }: ApiJwtControllerOptions) => ApiJwtController;
 //# sourceMappingURL=apiJwt.d.ts.map

package/dist/apiJwt.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"apiJwt.d.ts","sourceRoot":"","sources":["../src/apiJwt.ts"],"names":[],"mappings":"AAEA,gEAAgE;AAChE,eAAO,MAAM,oBAAoB,QAAY,CAAC;AAE9C,0DAA0D;AAC1D,eAAO,MAAM,eAAe,QAAY,CAAC;AAQzC,2EAA2E;AAC3E,eAAO,MAAM,WAAW,GAAI,OAAO,OAAO,KAAG,MAAM,GAAG,IAcrD,CAAC;AAEF,eAAO,MAAM,UAAU,GACrB,OAAO,OAAO,EACd,MAAK,MAAmB,KACvB,KAAK,IAAI,MAGX,CAAC;AAEF,MAAM,WAAW,uBAAuB;IACtC,SAAS,EAAE,MAAM,MAAM,CAAC;IACxB,kEAAkE;IAClE,cAAc,EAAE,MAAM,MAAM,GAAG,IAAI,GAAG,SAAS,CAAC;IAChD,gFAAgF;IAChF,qBAAqB,EAAE,MAAM,IAAI,CAAC;IAClC,IAAI,EAAE,MAAM,MAAM,GAAG,IAAI,CAAC;IAC1B,KAAK,EAAE,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,KAAK,IAAI,CAAC;IACpC,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,WAAW,KAAK,OAAO,CAAC,GAAG,CAAC,CAAC;CACjE;AAED,MAAM,WAAW,gBAAgB;IAC/B,8DAA8D;IAC9D,OAAO,IAAI,MAAM,GAAG,IAAI,CAAC;IACzB,oFAAoF;IACpF,IAAI,IAAI,MAAM,GAAG,IAAI,CAAC;IACtB,yGAAyG;IACzG,IAAI,IAAI,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IAC/B,wCAAwC;IACxC,KAAK,IAAI,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IAChC,wDAAwD;IACxD,UAAU,IAAI,IAAI,CAAC;IACnB,0EAA0E;IAC1E,KAAK,IAAI,IAAI,CAAC;CACf;AAED,eAAO,MAAM,sBAAsB,GAAI,oFAQpC,uBAAuB,KAAG,gBA6F5B,CAAC"}
+{"version":3,"file":"apiJwt.d.ts","sourceRoot":"","sources":["../src/apiJwt.ts"],"names":[],"mappings":"AAGA,kEAAkE;AAClE,eAAO,MAAM,oBAAoB,QAAY,CAAC;AAE9C,qEAAqE;AACrE,eAAO,MAAM,wBAAwB,QAAW,CAAC;AAEjD,qEAAqE;AACrE,eAAO,MAAM,eAAe,QAAY,CAAC;AAUzC,2EAA2E;AAC3E,eAAO,MAAM,WAAW,GAAI,OAAO,OAAO,KAAG,MAAM,GAAG,IAcrD,CAAC;AAEF,eAAO,MAAM,UAAU,GACrB,OAAO,OAAO,EACd,MAAK,MAAmB,EACxB,WAAU,MAA6B,KACtC,KAAK,IAAI,MAGX,CAAC;AAEF,+EAA+E;AAC/E,MAAM,WAAW,iBAAiB;IAChC,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,uBAAuB;IACtC,SAAS,EAAE,MAAM,MAAM,CAAC;IACxB,kEAAkE;IAClE,cAAc,EAAE,MAAM,MAAM,GAAG,IAAI,GAAG,SAAS,CAAC;IAChD,gFAAgF;IAChF,qBAAqB,EAAE,MAAM,IAAI,CAAC;IAClC,0FAA0F;IAC1F,aAAa,CAAC,EAAE,CAAC,OAAO,EAAE,iBAAiB,GAAG,IAAI,KAAK,IAAI,CAAC;IAC5D,IAAI,EAAE,MAAM,MAAM,GAAG,IAAI,CAAC;IAC1B,KAAK,EAAE,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,KAAK,IAAI,CAAC;IACpC,+EAA+E;IAC/E,iBAAiB,CAAC,EAAE,MAAM,MAAM,CAAC;IACjC,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,WAAW,KAAK,OAAO,CAAC,GAAG,CAAC,CAAC;CACjE;AAED,MAAM,WAAW,gBAAgB;IAC/B,kFAAkF;IAClF,OAAO,IAAI,MAAM,GAAG,IAAI,CAAC;IACzB,yGAAyG;IACzG,IAAI,IAAI,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IAC/B,gHAAgH;IAChH,KAAK,IAAI,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IAChC,+EAA+E;IAC/E,UAAU,IAAI,IAAI,CAAC;IACnB,gFAAgF;IAChF,KAAK,IAAI,IAAI,CAAC;IACd,uEAAuE;IACvE,OAAO,IAAI,iBAAiB,GAAG,IAAI,CAAC;CACrC;AAUD,eAAO,MAAM,sBAAsB,GAAI,sHAUpC,uBAAuB,KAAG,gBAgK5B,CAAC"}

package/dist/credentialError.d.ts

@@ -0,0 +1,14 @@
+/**
+ * A credential could not be obtained. `message` and `code` carry the server's
+ * error code when it sent one, else a library code; `status` is the HTTP
+ * status of the refusal, or 0 when no server verdict exists.
+ */
+export declare class CredentialError extends Error {
+    code: string;
+    status: number;
+    constructor(code: string, status: number);
+}
+export declare const API_CREDENTIAL_UNAVAILABLE = "api_credential_unavailable";
+export declare const CREDENTIAL_TIMEOUT = "credential_timeout";
+export declare const UNAUTHORIZED = "UNAUTHORIZED";
+//# sourceMappingURL=credentialError.d.ts.map

package/dist/credentialError.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"credentialError.d.ts","sourceRoot":"","sources":["../src/credentialError.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,qBAAa,eAAgB,SAAQ,KAAK;IACxC,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;gBAEH,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM;CAMzC;AAED,eAAO,MAAM,0BAA0B,+BAA+B,CAAC;AACvE,eAAO,MAAM,kBAAkB,uBAAuB,CAAC;AACvD,eAAO,MAAM,YAAY,iBAAiB,CAAC"}

package/dist/credentialWait.d.ts

@@ -0,0 +1,12 @@
+/** How long a request waits for a credential that has not landed yet. */
+export declare const CREDENTIAL_WAIT_TIMEOUT_MS: number;
+export interface WaitForCredentialOptions {
+    read: () => string | null;
+    subscribe: (listener: () => void) => () => void;
+    /** Checked on each store change; true rejects the wait. */
+    isSignedOut?: () => boolean;
+    timeoutMs?: number;
+}
+/** Resolves with the credential as soon as the store holds one. */
+export declare const waitForCredential: ({ read, subscribe, isSignedOut, timeoutMs, }: WaitForCredentialOptions) => Promise<string>;
+//# sourceMappingURL=credentialWait.d.ts.map

package/dist/credentialWait.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"credentialWait.d.ts","sourceRoot":"","sources":["../src/credentialWait.ts"],"names":[],"mappings":"AAMA,yEAAyE;AACzE,eAAO,MAAM,0BAA0B,QAAY,CAAC;AAEpD,MAAM,WAAW,wBAAwB;IACvC,IAAI,EAAE,MAAM,MAAM,GAAG,IAAI,CAAC;IAC1B,SAAS,EAAE,CAAC,QAAQ,EAAE,MAAM,IAAI,KAAK,MAAM,IAAI,CAAC;IAChD,2DAA2D;IAC3D,WAAW,CAAC,EAAE,MAAM,OAAO,CAAC;IAC5B,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,mEAAmE;AACnE,eAAO,MAAM,iBAAiB,GAAI,8CAK/B,wBAAwB,KAAG,OAAO,CAAC,MAAM,CA2B3C,CAAC"}

package/dist/index.d.ts

@@ -2,8 +2,9 @@ import PrivateLayout from './PrivateLayout';
 import MMProvider from './MMProvider';
 import { useEventStream } from './eventStream';
 import Link from './Link';
+import { CredentialError } from './credentialError';
 import { useAsyncEffect, useAsyncInterval, useApiRequest, useProductionQuery, useDowntimeQuery, useMMAuth, useCredential, useMMTemplates, useQuantityStream, useSearchParamsState, _useMMApolloLinkContext, useMMAppParams, useMMAppCommands, useMMAppContext, useMMAppInfo, useMMAppSetting, useMMAppCustomInputOpen, useMMAppCustomInputSave, useMMAppCustomInputLabel, useMMAppSetClaims, useMMAppModalSave } from './hooks';
-export { _useMMApolloLinkContext, useMMAuth, useCredential, useMMAppParams, useMMAppCommands, useMMAppContext, useMMAppInfo, useMMAppSetting, useMMAppCustomInputOpen, useMMAppCustomInputSave, useMMAppCustomInputLabel, useMMAppSetClaims, useMMAppModalSave, useMMTemplates, PrivateLayout, useAsyncEffect, useAsyncInterval, useApiRequest, useProductionQuery, useDowntimeQuery, useQuantityStream, useSearchParamsState, MMProvider, Link, useEventStream, };
+export { _useMMApolloLinkContext, useMMAuth, useCredential, useMMAppParams, useMMAppCommands, useMMAppContext, useMMAppInfo, useMMAppSetting, useMMAppCustomInputOpen, useMMAppCustomInputSave, useMMAppCustomInputLabel, useMMAppSetClaims, useMMAppModalSave, useMMTemplates, PrivateLayout, useAsyncEffect, useAsyncInterval, useApiRequest, useProductionQuery, useDowntimeQuery, useQuantityStream, useSearchParamsState, MMProvider, Link, useEventStream, CredentialError, };
 export type { MMContextValue, MMAuthResult, MMUrls, MMRequest, MMRequestOptions, } from './MMContext';
 export type { MMProviderProps, MMReleaseStage } from './MMProvider';
 export type { UseApiRequestOptions, UseApiRequestResult } from './hooks';

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,aAAa,MAAM,iBAAiB,CAAC;AAC5C,OAAO,UAAU,MAAM,cAAc,CAAC;AACtC,OAAO,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAC/C,OAAO,IAAI,MAAM,QAAQ,CAAC;AAC1B,OAAO,EACL,cAAc,EACd,gBAAgB,EAChB,aAAa,EACb,kBAAkB,EAClB,gBAAgB,EAChB,SAAS,EACT,aAAa,EACb,cAAc,EACd,iBAAiB,EACjB,oBAAoB,EACpB,uBAAuB,EACvB,cAAc,EACd,gBAAgB,EAChB,eAAe,EACf,YAAY,EACZ,eAAe,EACf,uBAAuB,EACvB,uBAAuB,EACvB,wBAAwB,EACxB,iBAAiB,EACjB,iBAAiB,EAClB,MAAM,SAAS,CAAC;AAEjB,OAAO,EACL,uBAAuB,EACvB,SAAS,EACT,aAAa,EACb,cAAc,EACd,gBAAgB,EAChB,eAAe,EACf,YAAY,EACZ,eAAe,EACf,uBAAuB,EACvB,uBAAuB,EACvB,wBAAwB,EACxB,iBAAiB,EACjB,iBAAiB,EACjB,cAAc,EACd,aAAa,EACb,cAAc,EACd,gBAAgB,EAChB,aAAa,EACb,kBAAkB,EAClB,gBAAgB,EAChB,iBAAiB,EACjB,oBAAoB,EACpB,UAAU,EACV,IAAI,EACJ,cAAc,GACf,CAAC;AAEF,YAAY,EACV,cAAc,EACd,YAAY,EACZ,MAAM,EACN,SAAS,EACT,gBAAgB,GACjB,MAAM,aAAa,CAAC;AACrB,YAAY,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AACpE,YAAY,EAAE,oBAAoB,EAAE,mBAAmB,EAAE,MAAM,SAAS,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,aAAa,MAAM,iBAAiB,CAAC;AAC5C,OAAO,UAAU,MAAM,cAAc,CAAC;AACtC,OAAO,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAC/C,OAAO,IAAI,MAAM,QAAQ,CAAC;AAC1B,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AACpD,OAAO,EACL,cAAc,EACd,gBAAgB,EAChB,aAAa,EACb,kBAAkB,EAClB,gBAAgB,EAChB,SAAS,EACT,aAAa,EACb,cAAc,EACd,iBAAiB,EACjB,oBAAoB,EACpB,uBAAuB,EACvB,cAAc,EACd,gBAAgB,EAChB,eAAe,EACf,YAAY,EACZ,eAAe,EACf,uBAAuB,EACvB,uBAAuB,EACvB,wBAAwB,EACxB,iBAAiB,EACjB,iBAAiB,EAClB,MAAM,SAAS,CAAC;AAEjB,OAAO,EACL,uBAAuB,EACvB,SAAS,EACT,aAAa,EACb,cAAc,EACd,gBAAgB,EAChB,eAAe,EACf,YAAY,EACZ,eAAe,EACf,uBAAuB,EACvB,uBAAuB,EACvB,wBAAwB,EACxB,iBAAiB,EACjB,iBAAiB,EACjB,cAAc,EACd,aAAa,EACb,cAAc,EACd,gBAAgB,EAChB,aAAa,EACb,kBAAkB,EAClB,gBAAgB,EAChB,iBAAiB,EACjB,oBAAoB,EACpB,UAAU,EACV,IAAI,EACJ,cAAc,EACd,eAAe,GAChB,CAAC;AAEF,YAAY,EACV,cAAc,EACd,YAAY,EACZ,MAAM,EACN,SAAS,EACT,gBAAgB,GACjB,MAAM,aAAa,CAAC;AACrB,YAAY,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AACpE,YAAY,EAAE,oBAAoB,EAAE,mBAAmB,EAAE,MAAM,SAAS,CAAC"}