@meindesk/sdk 0.1.0

package/dist/index.d.ts

@@ -0,0 +1,303 @@
+interface User {
+    id: string;
+    email: string;
+    emailVerifiedAt?: string | null;
+    firstName?: string | null;
+    lastName?: string | null;
+    username?: string | null;
+    phoneNumber?: string | null;
+    imageUrl?: string | null;
+    status: string;
+    publicMetadata?: Record<string, unknown>;
+    unsafeMetadata?: Record<string, unknown>;
+    lastSignInAt?: string | null;
+    createdAt: string;
+    updatedAt: string;
+}
+interface Session {
+    id: string;
+    userId: string;
+    status: string;
+    expiresAt: string;
+    lastActiveAt: string;
+    createdAt: string;
+    ipAddress?: string | null;
+    userAgent?: string | null;
+    device?: string | null;
+    location?: string | null;
+}
+interface FormField {
+    name: string;
+    type: string;
+    label?: string;
+    placeholder?: string;
+    required?: boolean;
+    defaultValue?: string;
+    options?: Array<{
+        label: string;
+        value: string;
+    }>;
+    validation?: {
+        minLength?: number;
+        maxLength?: number;
+        pattern?: string;
+        message?: string;
+    };
+}
+interface FormSchema {
+    fields: FormField[];
+    submitLabel?: string;
+    title?: string;
+    description?: string;
+}
+interface AuthConfig {
+    applicationId?: string;
+    applicationName?: string;
+    environment?: string;
+    homeUrl?: string | null;
+    signInForm?: FormSchema | null;
+    signUpForm?: FormSchema | null;
+    forgotPasswordForm?: FormSchema | null;
+    resetPasswordForm?: FormSchema | null;
+    settings?: {
+        allowSignUp?: boolean;
+        requireEmailVerification?: boolean;
+        passwordMinLength?: number;
+        passwordEnabled?: boolean;
+        magicLinkEnabled?: boolean;
+        passkeysEnabled?: boolean;
+        phoneEnabled?: boolean;
+        mfaEnabled?: boolean;
+        [key: string]: unknown;
+    };
+    userProfile?: {
+        allowEditProfile?: boolean;
+        allowChangeEmail?: boolean;
+        allowChangePassword?: boolean;
+    };
+    providers?: Array<{
+        provider: string;
+        enabled: boolean;
+        scopes?: string[];
+        buttonLabel?: string | null;
+        position?: string | null;
+        sortOrder?: number | null;
+    }>;
+    /** Unified authentication experience config (shared with builder + SDK UI). */
+    experience?: Record<string, unknown> | null;
+    [key: string]: unknown;
+}
+interface AuthResult {
+    sessionToken: string;
+    user: User;
+    session: Session;
+    token?: string;
+    status?: "complete";
+}
+interface MfaRequiredResult {
+    status: "mfa_required";
+    mfaToken: string;
+}
+type SignInResult = AuthResult | MfaRequiredResult;
+interface SignUpData {
+    email: string;
+    password: string;
+    firstName?: string;
+    lastName?: string;
+    username?: string;
+    phoneNumber?: string;
+    unsafeMetadata?: Record<string, unknown>;
+    [key: string]: unknown;
+}
+interface SignInData {
+    email: string;
+    password: string;
+    [key: string]: unknown;
+}
+interface ConnectedIdentity {
+    id: string;
+    provider: string;
+    email: string | null;
+    connectedAt: string;
+}
+interface ActivityItem {
+    id: string;
+    type: string;
+    createdAt: string;
+    ipAddress: string | null;
+    userAgent: string | null;
+    metadata: Record<string, unknown>;
+}
+interface MeindeskClientOptions {
+    publishableKey: string;
+    apiUrl?: string;
+    secretKey?: string;
+}
+interface ApiSuccessResponse<T> {
+    success: true;
+    data: T;
+}
+interface ApiErrorBody {
+    code: string;
+    message: string;
+}
+interface ApiErrorResponse {
+    success: false;
+    error: ApiErrorBody;
+}
+type ApiResponse<T> = ApiSuccessResponse<T> | ApiErrorResponse;
+declare class MeindeskApiError extends Error {
+    readonly code: string;
+    readonly status: number;
+    constructor(code: string, message: string, status: number);
+}
+
+declare function getOrCreateDeviceId(): string | undefined;
+declare class MeindeskClient {
+    readonly publishableKey: string;
+    readonly apiUrl: string;
+    readonly secretKey?: string;
+    constructor(options: MeindeskClientOptions);
+    private buildHeaders;
+    private request;
+    getConfig(): Promise<AuthConfig>;
+    signUp(data: SignUpData): Promise<AuthResult>;
+    signIn(data: SignInData): Promise<SignInResult>;
+    verifyMfa(data: {
+        mfaToken: string;
+        code: string;
+    }): Promise<AuthResult>;
+    getMfaStatus(sessionToken: string): Promise<{
+        enabled: boolean;
+        verifiedAt: string | null;
+    }>;
+    startTotpEnrollment(sessionToken: string): Promise<{
+        secret: string;
+        uri: string;
+        recoveryCodes: string[];
+    }>;
+    confirmTotpEnrollment(sessionToken: string, code: string): Promise<{
+        enabled: boolean;
+    }>;
+    disableTotp(sessionToken: string, data: {
+        password?: string;
+        recoveryCode?: string;
+    }): Promise<{
+        enabled: boolean;
+    }>;
+    listIdentities(sessionToken: string): Promise<{
+        identities: ConnectedIdentity[];
+    }>;
+    unlinkIdentity(sessionToken: string, provider: string): Promise<{
+        unlinked: boolean;
+    }>;
+    listActivity(sessionToken: string, options?: {
+        limit?: number;
+    }): Promise<{
+        activity: ActivityItem[];
+    }>;
+    /** Navigate the browser to the OAuth start URL (top-level redirect). */
+    startOAuth(provider: string, options?: {
+        redirectUrl?: string;
+        purpose?: "sign_in" | "link";
+        sessionToken?: string;
+    }): void;
+    startOAuthLink(provider: string, options: {
+        redirectUrl: string;
+        sessionToken: string;
+    }): Promise<string>;
+    exchangeOAuthCode(code: string): Promise<AuthResult>;
+    signOut(sessionToken: string): Promise<{
+        success: boolean;
+    } | void>;
+    getSession(sessionToken?: string): Promise<{
+        session: Session | null;
+        user: User | null;
+        sessionToken?: string;
+    }>;
+    getUser(sessionToken: string): Promise<User>;
+    updateUser(sessionToken: string, data: {
+        firstName?: string | null;
+        lastName?: string | null;
+        username?: string | null;
+        phoneNumber?: string | null;
+        imageUrl?: string | null;
+    }): Promise<User>;
+    updateUserEmail(sessionToken: string, email: string): Promise<User>;
+    changePassword(sessionToken: string, data: {
+        currentPassword: string;
+        newPassword: string;
+    }): Promise<{
+        success: boolean;
+    }>;
+    listSessions(sessionToken: string): Promise<{
+        sessions: Array<Session & {
+            ipAddress?: string | null;
+            userAgent?: string | null;
+            device?: string | null;
+            location?: string | null;
+        }>;
+        currentSessionId: string;
+        total: number;
+    }>;
+    revokeSession(sessionToken: string, sessionId: string): Promise<{
+        revoked: boolean;
+    }>;
+    requestMagicLink(data: {
+        email: string;
+        redirectUrl?: string;
+    }): Promise<{
+        sent: boolean;
+    }>;
+    verifyMagicLink(token: string): Promise<AuthResult>;
+    forgotPassword(data: {
+        email: string;
+        redirectUrl?: string;
+    }): Promise<{
+        sent: boolean;
+    }>;
+    resetPassword(data: {
+        token: string;
+        password: string;
+    }): Promise<{
+        success: boolean;
+    }>;
+    verifyEmail(token: string): Promise<{
+        verified: boolean;
+    }>;
+}
+declare function createMeindeskClient(options: MeindeskClientOptions): MeindeskClient;
+
+declare const SESSION_COOKIE_NAME = "md_session";
+interface StorageAdapter {
+    getItem(key: string): string | null;
+    setItem(key: string, value: string): void;
+    removeItem(key: string): void;
+}
+/** In-memory key/value store (SSR-safe, no persistence). */
+declare function createMemoryStorage(): StorageAdapter;
+interface CookieOptions {
+    days?: number;
+    path?: string;
+    sameSite?: "lax" | "strict" | "none";
+    secure?: boolean;
+    domain?: string;
+}
+/** Read a cookie value by name from `document.cookie`. */
+declare function getCookie(name: string): string | null;
+/** Write a cookie via `document.cookie`. */
+declare function setCookie(name: string, value: string, options?: CookieOptions): void;
+/** Clear a cookie by expiring it. */
+declare function removeCookie(name: string, options?: Pick<CookieOptions, "path" | "domain">): void;
+declare function getSessionTokenFromCookie(): string | null;
+/**
+ * Persist session on the app origin for reload + Next middleware, and keep an
+ * in-memory mirror for same-tick Bearer auth. The API may also set an HttpOnly
+ * `md_session` on the API host for credentialed requests.
+ */
+declare function setSessionTokenCookie(token: string, options?: CookieOptions): void;
+declare function clearSessionTokenCookie(options?: Pick<CookieOptions, "path" | "domain">): void;
+/** Browser cookie-backed storage for non-secret prefs only. */
+declare function createCookieStorage(options?: CookieOptions): StorageAdapter;
+
+export { type ActivityItem, type ApiErrorBody, type ApiErrorResponse, type ApiResponse, type ApiSuccessResponse, type AuthConfig, type AuthResult, type ConnectedIdentity, type CookieOptions, type FormField, type FormSchema, MeindeskApiError, MeindeskClient, type MeindeskClientOptions, type MfaRequiredResult, SESSION_COOKIE_NAME, type Session, type SignInData, type SignInResult, type SignUpData, type StorageAdapter, type User, clearSessionTokenCookie, createCookieStorage, createMeindeskClient, createMemoryStorage, getCookie, getOrCreateDeviceId, getSessionTokenFromCookie, removeCookie, setCookie, setSessionTokenCookie };

package/dist/index.js

@@ -0,0 +1,496 @@
+// src/types.ts
+var MeindeskApiError = class extends Error {
+  code;
+  status;
+  constructor(code, message, status) {
+    super(message);
+    this.name = "MeindeskApiError";
+    this.code = code;
+    this.status = status;
+  }
+};
+
+// src/client.ts
+var DEVICE_ID_KEY = "meindesk_device_id";
+function readEnv(name) {
+  const proc = globalThis.process;
+  return proc?.env?.[name];
+}
+function resolveApiUrl(apiUrl) {
+  if (apiUrl) return apiUrl.replace(/\/$/, "");
+  const fromEnv = readEnv("NEXT_PUBLIC_API_URL");
+  return (fromEnv || "http://localhost:4000").replace(/\/$/, "");
+}
+function getOrCreateDeviceId() {
+  if (typeof window === "undefined" || !window.localStorage) return void 0;
+  try {
+    let id = window.localStorage.getItem(DEVICE_ID_KEY);
+    if (!id) {
+      id = typeof crypto !== "undefined" && "randomUUID" in crypto ? crypto.randomUUID() : `dev_${Math.random().toString(36).slice(2)}_${Date.now()}`;
+      window.localStorage.setItem(DEVICE_ID_KEY, id);
+    }
+    return id;
+  } catch {
+    return void 0;
+  }
+}
+var MeindeskClient = class {
+  publishableKey;
+  apiUrl;
+  secretKey;
+  constructor(options) {
+    if (!options.publishableKey) {
+      throw new Error("MeindeskClient requires a publishableKey");
+    }
+    this.publishableKey = options.publishableKey;
+    this.apiUrl = resolveApiUrl(options.apiUrl);
+    this.secretKey = options.secretKey;
+  }
+  buildHeaders(sessionToken) {
+    const headers = {
+      Accept: "application/json",
+      "Content-Type": "application/json",
+      "x-meindesk-publishable-key": this.publishableKey
+    };
+    if (this.secretKey && typeof window === "undefined") {
+      headers["x-meindesk-secret-key"] = this.secretKey;
+    }
+    if (sessionToken) {
+      headers.Authorization = `Bearer ${sessionToken}`;
+    }
+    const deviceId = getOrCreateDeviceId();
+    if (deviceId) {
+      headers["x-meindesk-device-id"] = deviceId;
+    }
+    return headers;
+  }
+  async request(path, init = {}) {
+    const { sessionToken, ...fetchInit } = init;
+    const url = `${this.apiUrl}${path.startsWith("/") ? path : `/${path}`}`;
+    const response = await fetch(url, {
+      ...fetchInit,
+      headers: {
+        ...this.buildHeaders(sessionToken),
+        ...fetchInit.headers
+      },
+      credentials: "include"
+    });
+    let body = null;
+    try {
+      body = await response.json();
+    } catch {
+      throw new MeindeskApiError(
+        "invalid_response",
+        `Request failed with status ${response.status}`,
+        response.status
+      );
+    }
+    if (!response.ok || !body || body.success !== true) {
+      const error = body && "error" in body && body.error ? body.error : { code: "request_failed", message: `Request failed (${response.status})` };
+      throw new MeindeskApiError(error.code, error.message, response.status);
+    }
+    return body.data;
+  }
+  async getConfig() {
+    const raw = await this.request("/v1/sdk/config", {
+      method: "GET"
+    });
+    return normalizeAuthConfig(raw);
+  }
+  async signUp(data) {
+    const raw = await this.request("/v1/sdk/sign-up", {
+      method: "POST",
+      body: JSON.stringify(data)
+    });
+    return normalizeAuthResult(raw);
+  }
+  async signIn(data) {
+    const raw = await this.request("/v1/sdk/sign-in", {
+      method: "POST",
+      body: JSON.stringify(data)
+    });
+    if (raw.status === "mfa_required" && typeof raw.mfaToken === "string") {
+      return { status: "mfa_required", mfaToken: raw.mfaToken };
+    }
+    return normalizeAuthResult(raw);
+  }
+  async verifyMfa(data) {
+    const raw = await this.request("/v1/sdk/mfa/verify", {
+      method: "POST",
+      body: JSON.stringify(data)
+    });
+    return normalizeAuthResult(raw);
+  }
+  async getMfaStatus(sessionToken) {
+    return this.request("/v1/sdk/mfa", { method: "GET", sessionToken });
+  }
+  async startTotpEnrollment(sessionToken) {
+    return this.request("/v1/sdk/mfa/totp/start", {
+      method: "POST",
+      sessionToken,
+      body: JSON.stringify({})
+    });
+  }
+  async confirmTotpEnrollment(sessionToken, code) {
+    return this.request("/v1/sdk/mfa/totp/confirm", {
+      method: "POST",
+      sessionToken,
+      body: JSON.stringify({ code })
+    });
+  }
+  async disableTotp(sessionToken, data) {
+    return this.request("/v1/sdk/mfa/totp/disable", {
+      method: "POST",
+      sessionToken,
+      body: JSON.stringify(data)
+    });
+  }
+  async listIdentities(sessionToken) {
+    return this.request("/v1/sdk/identities", {
+      method: "GET",
+      sessionToken
+    });
+  }
+  async unlinkIdentity(sessionToken, provider) {
+    return this.request(`/v1/sdk/identities/${encodeURIComponent(provider)}`, {
+      method: "DELETE",
+      sessionToken
+    });
+  }
+  async listActivity(sessionToken, options) {
+    const q = options?.limit != null ? `?limit=${encodeURIComponent(String(options.limit))}` : "";
+    return this.request(`/v1/sdk/activity${q}`, {
+      method: "GET",
+      sessionToken
+    });
+  }
+  /** Navigate the browser to the OAuth start URL (top-level redirect). */
+  startOAuth(provider, options) {
+    if (typeof window === "undefined") {
+      throw new Error("startOAuth can only be called in the browser");
+    }
+    const raw = options?.redirectUrl ?? `${window.location.origin}${window.location.pathname}`;
+    let redirectUrl = raw;
+    try {
+      redirectUrl = new URL(raw, window.location.origin).toString();
+    } catch {
+    }
+    const url = new URL(
+      `${this.apiUrl}/v1/sdk/oauth/${encodeURIComponent(provider)}/start`
+    );
+    url.searchParams.set("redirect_url", redirectUrl);
+    url.searchParams.set("publishable_key", this.publishableKey);
+    if (options?.purpose === "link") {
+      url.searchParams.set("purpose", "link");
+    }
+    getOrCreateDeviceId();
+    if (options?.purpose === "link" && options.sessionToken) {
+      void this.startOAuthLink(provider, {
+        redirectUrl,
+        sessionToken: options.sessionToken
+      }).then((authorizeUrl) => {
+        window.location.assign(authorizeUrl);
+      });
+      return;
+    }
+    window.location.assign(url.toString());
+  }
+  async startOAuthLink(provider, options) {
+    const data = await this.request(
+      `/v1/sdk/oauth/${encodeURIComponent(provider)}/start`,
+      {
+        method: "POST",
+        sessionToken: options.sessionToken,
+        body: JSON.stringify({
+          redirectUrl: options.redirectUrl,
+          purpose: "link"
+        })
+      }
+    );
+    return data.authorizeUrl;
+  }
+  async exchangeOAuthCode(code) {
+    const raw = await this.request(
+      "/v1/sdk/oauth/exchange",
+      {
+        method: "POST",
+        body: JSON.stringify({ code })
+      }
+    );
+    return normalizeAuthResult(raw);
+  }
+  async signOut(sessionToken) {
+    return this.request("/v1/sdk/sign-out", {
+      method: "POST",
+      sessionToken,
+      body: JSON.stringify({})
+    });
+  }
+  async getSession(sessionToken) {
+    return this.request("/v1/sdk/session", {
+      method: "GET",
+      ...sessionToken ? { sessionToken } : {}
+    });
+  }
+  async getUser(sessionToken) {
+    const data = await this.request("/v1/sdk/user", {
+      method: "GET",
+      sessionToken
+    });
+    if (data && typeof data === "object" && "user" in data) {
+      return data.user;
+    }
+    return data;
+  }
+  async updateUser(sessionToken, data) {
+    const res = await this.request("/v1/sdk/user", {
+      method: "PATCH",
+      sessionToken,
+      body: JSON.stringify(data)
+    });
+    return res.user;
+  }
+  async updateUserEmail(sessionToken, email) {
+    const res = await this.request("/v1/sdk/user/email", {
+      method: "PATCH",
+      sessionToken,
+      body: JSON.stringify({ email })
+    });
+    return res.user;
+  }
+  async changePassword(sessionToken, data) {
+    return this.request("/v1/sdk/user/password", {
+      method: "POST",
+      sessionToken,
+      body: JSON.stringify(data)
+    });
+  }
+  async listSessions(sessionToken) {
+    return this.request("/v1/sdk/sessions", {
+      method: "GET",
+      sessionToken
+    });
+  }
+  async revokeSession(sessionToken, sessionId) {
+    return this.request(`/v1/sdk/sessions/${sessionId}/revoke`, {
+      method: "POST",
+      sessionToken,
+      body: JSON.stringify({})
+    });
+  }
+  async requestMagicLink(data) {
+    return this.request("/v1/sdk/magic-link/request", {
+      method: "POST",
+      body: JSON.stringify(data)
+    });
+  }
+  async verifyMagicLink(token) {
+    const raw = await this.request(
+      "/v1/sdk/magic-link/verify",
+      {
+        method: "POST",
+        body: JSON.stringify({ token })
+      }
+    );
+    return normalizeAuthResult(raw);
+  }
+  async forgotPassword(data) {
+    return this.request("/v1/sdk/password/forgot", {
+      method: "POST",
+      body: JSON.stringify(data)
+    });
+  }
+  async resetPassword(data) {
+    return this.request("/v1/sdk/password/reset", {
+      method: "POST",
+      body: JSON.stringify(data)
+    });
+  }
+  async verifyEmail(token) {
+    return this.request("/v1/sdk/email/verify", {
+      method: "POST",
+      body: JSON.stringify({ token })
+    });
+  }
+};
+function createMeindeskClient(options) {
+  return new MeindeskClient(options);
+}
+function normalizeFormField(field) {
+  const name = String(field.name ?? field.id ?? "");
+  return {
+    name,
+    type: String(field.type ?? "text"),
+    label: field.label != null ? String(field.label) : void 0,
+    placeholder: field.placeholder != null ? String(field.placeholder) : void 0,
+    required: Boolean(field.required),
+    defaultValue: field.defaultValue != null ? String(field.defaultValue) : void 0,
+    options: Array.isArray(field.options) ? field.options : void 0,
+    validation: field.validation && typeof field.validation === "object" ? field.validation : field.minLength != null || field.maxLength != null ? {
+      minLength: field.minLength != null ? Number(field.minLength) : void 0,
+      maxLength: field.maxLength != null ? Number(field.maxLength) : void 0,
+      message: field.errorMessage != null ? String(field.errorMessage) : void 0
+    } : void 0
+  };
+}
+function normalizeFormSchema(schema) {
+  if (!schema || typeof schema !== "object") return null;
+  const s = schema;
+  const fields = Array.isArray(s.fields) ? s.fields.map((f) => normalizeFormField(f)) : [];
+  return {
+    fields,
+    title: s.title != null ? String(s.title) : void 0,
+    description: s.description != null ? String(s.description) : void 0,
+    submitLabel: s.submitLabel != null ? String(s.submitLabel) : void 0
+  };
+}
+function normalizeAuthConfig(raw) {
+  const application = raw.application && typeof raw.application === "object" ? raw.application : {};
+  const forms = Array.isArray(raw.forms) ? raw.forms : [];
+  const findForm = (type) => {
+    const match = forms.find(
+      (f) => f && typeof f === "object" && f.type === type
+    );
+    return normalizeFormSchema(match?.schema);
+  };
+  const settings = raw.settings && typeof raw.settings === "object" ? raw.settings : void 0;
+  return {
+    ...raw,
+    applicationId: application.id != null ? String(application.id) : void 0,
+    applicationName: application.name != null ? String(application.name) : void 0,
+    environment: application.environment != null ? String(application.environment) : void 0,
+    homeUrl: application.homeUrl != null ? String(application.homeUrl) : null,
+    signInForm: findForm("sign_in"),
+    signUpForm: findForm("sign_up"),
+    forgotPasswordForm: findForm("forgot_password"),
+    resetPasswordForm: findForm("reset_password"),
+    providers: Array.isArray(raw.providers) ? raw.providers : void 0,
+    experience: raw.experience && typeof raw.experience === "object" ? raw.experience : null,
+    userProfile: raw.userProfile && typeof raw.userProfile === "object" ? raw.userProfile : {
+      allowEditProfile: true,
+      allowChangeEmail: true,
+      allowChangePassword: true
+    },
+    settings: settings ? {
+      allowSignUp: true,
+      requireEmailVerification: Boolean(
+        settings.emailVerificationRequired
+      ),
+      passwordMinLength: settings.passwordMinLength != null ? Number(settings.passwordMinLength) : void 0,
+      ...settings
+    } : void 0
+  };
+}
+function normalizeAuthResult(raw) {
+  const sessionToken = String(raw.sessionToken ?? raw.token ?? "");
+  if (!sessionToken) {
+    throw new MeindeskApiError(
+      "invalid_response",
+      "Auth response missing session token",
+      500
+    );
+  }
+  return {
+    sessionToken,
+    user: raw.user,
+    session: raw.session
+  };
+}
+
+// src/storage.ts
+var SESSION_COOKIE_NAME = "md_session";
+var memorySessionToken = null;
+function createMemoryStorage() {
+  const store = /* @__PURE__ */ new Map();
+  return {
+    getItem(key) {
+      return store.has(key) ? store.get(key) ?? null : null;
+    },
+    setItem(key, value) {
+      store.set(key, value);
+    },
+    removeItem(key) {
+      store.delete(key);
+    }
+  };
+}
+function isBrowser() {
+  return typeof document !== "undefined";
+}
+function getCookie(name) {
+  if (!isBrowser()) return null;
+  const prefix = `${encodeURIComponent(name)}=`;
+  const parts = document.cookie.split("; ");
+  for (const part of parts) {
+    if (part.startsWith(prefix)) {
+      return decodeURIComponent(part.slice(prefix.length));
+    }
+  }
+  return null;
+}
+function setCookie(name, value, options = {}) {
+  if (!isBrowser()) return;
+  const {
+    days = 7,
+    path = "/",
+    sameSite = "lax",
+    secure = typeof location !== "undefined" && location.protocol === "https:",
+    domain
+  } = options;
+  const maxAge = Math.max(0, Math.floor(days * 24 * 60 * 60));
+  let cookie = `${encodeURIComponent(name)}=${encodeURIComponent(value)}; Path=${path}; Max-Age=${maxAge}; SameSite=${sameSite}`;
+  if (secure) cookie += "; Secure";
+  if (domain) cookie += `; Domain=${domain}`;
+  document.cookie = cookie;
+}
+function removeCookie(name, options = {}) {
+  if (!isBrowser()) return;
+  const { path = "/", domain } = options;
+  let cookie = `${encodeURIComponent(name)}=; Path=${path}; Max-Age=0; SameSite=lax`;
+  if (domain) cookie += `; Domain=${domain}`;
+  document.cookie = cookie;
+}
+function getSessionTokenFromCookie() {
+  if (memorySessionToken) return memorySessionToken;
+  return getCookie(SESSION_COOKIE_NAME);
+}
+function setSessionTokenCookie(token, options) {
+  memorySessionToken = token;
+  setCookie(SESSION_COOKIE_NAME, token, options);
+}
+function clearSessionTokenCookie(options) {
+  memorySessionToken = null;
+  removeCookie(SESSION_COOKIE_NAME, options);
+}
+function createCookieStorage(options = {}) {
+  return {
+    getItem(key) {
+      if (key === SESSION_COOKIE_NAME) return getSessionTokenFromCookie();
+      return getCookie(key);
+    },
+    setItem(key, value) {
+      if (key === SESSION_COOKIE_NAME) {
+        setSessionTokenCookie(value, options);
+        return;
+      }
+      setCookie(key, value, options);
+    },
+    removeItem(key) {
+      if (key === SESSION_COOKIE_NAME) {
+        clearSessionTokenCookie({
+          path: options.path,
+          domain: options.domain
+        });
+        return;
+      }
+      removeCookie(key, {
+        path: options.path,
+        domain: options.domain
+      });
+    }
+  };
+}
+
+export { MeindeskApiError, MeindeskClient, SESSION_COOKIE_NAME, clearSessionTokenCookie, createCookieStorage, createMeindeskClient, createMemoryStorage, getCookie, getOrCreateDeviceId, getSessionTokenFromCookie, removeCookie, setCookie, setSessionTokenCookie };
+//# sourceMappingURL=index.js.map
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/types.ts","../src/client.ts","../src/storage.ts"],"names":[],"mappings":";AAkKO,IAAM,gBAAA,GAAN,cAA+B,KAAA,CAAM;AAAA,EACjC,IAAA;AAAA,EACA,MAAA;AAAA,EAET,WAAA,CAAY,IAAA,EAAc,OAAA,EAAiB,MAAA,EAAgB;AACzD,IAAA,KAAA,CAAM,OAAO,CAAA;AACb,IAAA,IAAA,CAAK,IAAA,GAAO,kBAAA;AACZ,IAAA,IAAA,CAAK,IAAA,GAAO,IAAA;AACZ,IAAA,IAAA,CAAK,MAAA,GAAS,MAAA;AAAA,EAChB;AACF;;;AC3JA,IAAM,aAAA,GAAgB,oBAAA;AAEtB,SAAS,QAAQ,IAAA,EAAkC;AACjD,EAAA,MAAM,OAAQ,UAAA,CACX,OAAA;AACH,EAAA,OAAO,IAAA,EAAM,MAAM,IAAI,CAAA;AACzB;AAEA,SAAS,cAAc,MAAA,EAAyB;AAC9C,EAAA,IAAI,MAAA,EAAQ,OAAO,MAAA,CAAO,OAAA,CAAQ,OAAO,EAAE,CAAA;AAC3C,EAAA,MAAM,OAAA,GAAU,QAAQ,qBAAqB,CAAA;AAC7C,EAAA,OAAA,CAAQ,OAAA,IAAW,uBAAA,EAAyB,OAAA,CAAQ,KAAA,EAAO,EAAE,CAAA;AAC/D;AAEO,SAAS,mBAAA,GAA0C;AACxD,EAAA,IAAI,OAAO,MAAA,KAAW,WAAA,IAAe,CAAC,MAAA,CAAO,cAAc,OAAO,MAAA;AAClE,EAAA,IAAI;AACF,IAAA,IAAI,EAAA,GAAK,MAAA,CAAO,YAAA,CAAa,OAAA,CAAQ,aAAa,CAAA;AAClD,IAAA,IAAI,CAAC,EAAA,EAAI;AACP,MAAA,EAAA,GACE,OAAO,WAAW,WAAA,IAAe,YAAA,IAAgB,SAC7C,MAAA,CAAO,UAAA,KACP,CAAA,IAAA,EAAO,IAAA,CAAK,QAAO,CAAE,QAAA,CAAS,EAAE,CAAA,CAAE,KAAA,CAAM,CAAC,CAAC,CAAA,CAAA,EAAI,IAAA,CAAK,GAAA,EAAK,CAAA,CAAA;AAC9D,MAAA,MAAA,CAAO,YAAA,CAAa,OAAA,CAAQ,aAAA,EAAe,EAAE,CAAA;AAAA,IAC/C;AACA,IAAA,OAAO,EAAA;AAAA,EACT,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,MAAA;AAAA,EACT;AACF;AAEO,IAAM,iBAAN,MAAqB;AAAA,EACjB,cAAA;AAAA,EACA,MAAA;AAAA,EACA,SAAA;AAAA,EAET,YAAY,OAAA,EAAgC;AAC1C,IAAA,IAAI,CAAC,QAAQ,cAAA,EAAgB;AAC3B,MAAA,MAAM,IAAI,MAAM,0CAA0C,CAAA;AAAA,IAC5D;AAEA,IAAA,IAAA,CAAK,iBAAiB,OAAA,CAAQ,cAAA;AAC9B,IAAA,IAAA,CAAK,MAAA,GAAS,aAAA,CAAc,OAAA,CAAQ,MAAM,CAAA;AAC1C,IAAA,IAAA,CAAK,YAAY,OAAA,CAAQ,SAAA;AAAA,EAC3B;AAAA,EAEQ,aAAa,YAAA,EAAoC;AACvD,IAAA,MAAM,OAAA,GAAkC;AAAA,MACtC,MAAA,EAAQ,kBAAA;AAAA,MACR,cAAA,EAAgB,kBAAA;AAAA,MAChB,8BAA8B,IAAA,CAAK;AAAA,KACrC;AAEA,IAAA,IAAI,IAAA,CAAK,SAAA,IAAa,OAAO,MAAA,KAAW,WAAA,EAAa;AACnD,MAAA,OAAA,CAAQ,uBAAuB,IAAI,IAAA,CAAK,SAAA;AAAA,IAC1C;AAEA,IAAA,IAAI,YAAA,EAAc;AAChB,MAAA,OAAA,CAAQ,aAAA,GAAgB,UAAU,YAAY,CAAA,CAAA;AAAA,IAChD;AAEA,IAAA,MAAM,WAAW,mBAAA,EAAoB;AACrC,IAAA,IAAI,QAAA,EAAU;AACZ,MAAA,OAAA,CAAQ,sBAAsB,CAAA,GAAI,QAAA;AAAA,IACpC;AAEA,IAAA,OAAO,OAAA;AAAA,EACT;AAAA,EAEA,MAAc,OAAA,CACZ,IAAA,EACA,IAAA,GAAgD,EAAC,EACrC;AACZ,IAAA,MAAM,EAAE,YAAA,EAAc,GAAG,SAAA,EAAU,GAAI,IAAA;AACvC,IAAA,MAAM,GAAA,GAAM,CAAA,EAAG,IAAA,CAAK,MAAM,CAAA,EAAG,IAAA,CAAK,UAAA,CAAW,GAAG,CAAA,GAAI,IAAA,GAAO,CAAA,CAAA,EAAI,IAAI,CAAA,CAAE,CAAA,CAAA;AAErE,IAAA,MAAM,QAAA,GAAW,MAAM,KAAA,CAAM,GAAA,EAAK;AAAA,MAChC,GAAG,SAAA;AAAA,MACH,OAAA,EAAS;AAAA,QACP,GAAG,IAAA,CAAK,YAAA,CAAa,YAAY,CAAA;AAAA,QACjC,GAAI,SAAA,CAAU;AAAA,OAChB;AAAA,MACA,WAAA,EAAa;AAAA,KACd,CAAA;AAED,IAAA,IAAI,IAAA,GAA8B,IAAA;AAElC,IAAA,IAAI;AACF,MAAA,IAAA,GAAQ,MAAM,SAAS,IAAA,EAAK;AAAA,IAC9B,CAAA,CAAA,MAAQ;AACN,MAAA,MAAM,IAAI,gBAAA;AAAA,QACR,kBAAA;AAAA,QACA,CAAA,2BAAA,EAA8B,SAAS,MAAM,CAAA,CAAA;AAAA,QAC7C,QAAA,CAAS;AAAA,OACX;AAAA,IACF;AAEA,IAAA,IAAI,CAAC,QAAA,CAAS,EAAA,IAAM,CAAC,IAAA,IAAQ,IAAA,CAAK,YAAY,IAAA,EAAM;AAClD,MAAA,MAAM,KAAA,GACJ,IAAA,IAAQ,OAAA,IAAW,IAAA,IAAQ,KAAK,KAAA,GAC5B,IAAA,CAAK,KAAA,GACL,EAAE,MAAM,gBAAA,EAAkB,OAAA,EAAS,CAAA,gBAAA,EAAmB,QAAA,CAAS,MAAM,CAAA,CAAA,CAAA,EAAI;AAE/E,MAAA,MAAM,IAAI,gBAAA,CAAiB,KAAA,CAAM,MAAM,KAAA,CAAM,OAAA,EAAS,SAAS,MAAM,CAAA;AAAA,IACvE;AAEA,IAAA,OAAO,IAAA,CAAK,IAAA;AAAA,EACd;AAAA,EAEA,MAAM,SAAA,GAAiC;AACrC,IAAA,MAAM,GAAA,GAAM,MAAM,IAAA,CAAK,OAAA,CAAiC,gBAAA,EAAkB;AAAA,MACxE,MAAA,EAAQ;AAAA,KACT,CAAA;AACD,IAAA,OAAO,oBAAoB,GAAG,CAAA;AAAA,EAChC;AAAA,EAEA,MAAM,OAAO,IAAA,EAAuC;AAClD,IAAA,MAAM,GAAA,GAAM,MAAM,IAAA,CAAK,OAAA,CAAiC,iBAAA,EAAmB;AAAA,MACzE,MAAA,EAAQ,MAAA;AAAA,MACR,IAAA,EAAM,IAAA,CAAK,SAAA,CAAU,IAAI;AAAA,KAC1B,CAAA;AACD,IAAA,OAAO,oBAAoB,GAAG,CAAA;AAAA,EAChC;AAAA,EAEA,MAAM,OAAO,IAAA,EAAyC;AACpD,IAAA,MAAM,GAAA,GAAM,MAAM,IAAA,CAAK,OAAA,CAAiC,iBAAA,EAAmB;AAAA,MACzE,MAAA,EAAQ,MAAA;AAAA,MACR,IAAA,EAAM,IAAA,CAAK,SAAA,CAAU,IAAI;AAAA,KAC1B,CAAA;AACD,IAAA,IAAI,IAAI,MAAA,KAAW,cAAA,IAAkB,OAAO,GAAA,CAAI,aAAa,QAAA,EAAU;AACrE,MAAA,OAAO,EAAE,MAAA,EAAQ,cAAA,EAAgB,QAAA,EAAU,IAAI,QAAA,EAAS;AAAA,IAC1D;AACA,IAAA,OAAO,oBAAoB,GAAG,CAAA;AAAA,EAChC;AAAA,EAEA,MAAM,UAAU,IAAA,EAGQ;AACtB,IAAA,MAAM,GAAA,GAAM,MAAM,IAAA,CAAK,OAAA,CAAiC,oBAAA,EAAsB;AAAA,MAC5E,MAAA,EAAQ,MAAA;AAAA,MACR,IAAA,EAAM,IAAA,CAAK,SAAA,CAAU,IAAI;AAAA,KAC1B,CAAA;AACD,IAAA,OAAO,oBAAoB,GAAG,CAAA;AAAA,EAChC;AAAA,EAEA,MAAM,aAAa,YAAA,EAGhB;AACD,IAAA,OAAO,KAAK,OAAA,CAAQ,aAAA,EAAe,EAAE,MAAA,EAAQ,KAAA,EAAO,cAAc,CAAA;AAAA,EACpE;AAAA,EAEA,MAAM,oBAAoB,YAAA,EAIvB;AACD,IAAA,OAAO,IAAA,CAAK,QAAQ,wBAAA,EAA0B;AAAA,MAC5C,MAAA,EAAQ,MAAA;AAAA,MACR,YAAA;AAAA,MACA,IAAA,EAAM,IAAA,CAAK,SAAA,CAAU,EAAE;AAAA,KACxB,CAAA;AAAA,EACH;AAAA,EAEA,MAAM,qBAAA,CACJ,YAAA,EACA,IAAA,EAC+B;AAC/B,IAAA,OAAO,IAAA,CAAK,QAAQ,0BAAA,EAA4B;AAAA,MAC9C,MAAA,EAAQ,MAAA;AAAA,MACR,YAAA;AAAA,MACA,IAAA,EAAM,IAAA,CAAK,SAAA,CAAU,EAAE,MAAM;AAAA,KAC9B,CAAA;AAAA,EACH;AAAA,EAEA,MAAM,WAAA,CACJ,YAAA,EACA,IAAA,EAC+B;AAC/B,IAAA,OAAO,IAAA,CAAK,QAAQ,0BAAA,EAA4B;AAAA,MAC9C,MAAA,EAAQ,MAAA;AAAA,MACR,YAAA;AAAA,MACA,IAAA,EAAM,IAAA,CAAK,SAAA,CAAU,IAAI;AAAA,KAC1B,CAAA;AAAA,EACH;AAAA,EAEA,MAAM,eACJ,YAAA,EAC8C;AAC9C,IAAA,OAAO,IAAA,CAAK,QAAQ,oBAAA,EAAsB;AAAA,MACxC,MAAA,EAAQ,KAAA;AAAA,MACR;AAAA,KACD,CAAA;AAAA,EACH;AAAA,EAEA,MAAM,cAAA,CACJ,YAAA,EACA,QAAA,EACgC;AAChC,IAAA,OAAO,KAAK,OAAA,CAAQ,CAAA,mBAAA,EAAsB,kBAAA,CAAmB,QAAQ,CAAC,CAAA,CAAA,EAAI;AAAA,MACxE,MAAA,EAAQ,QAAA;AAAA,MACR;AAAA,KACD,CAAA;AAAA,EACH;AAAA,EAEA,MAAM,YAAA,CACJ,YAAA,EACA,OAAA,EACuC;AACvC,IAAA,MAAM,CAAA,GACJ,OAAA,EAAS,KAAA,IAAS,IAAA,GAAO,CAAA,OAAA,EAAU,kBAAA,CAAmB,MAAA,CAAO,OAAA,CAAQ,KAAK,CAAC,CAAC,CAAA,CAAA,GAAK,EAAA;AACnF,IAAA,OAAO,IAAA,CAAK,OAAA,CAAQ,CAAA,gBAAA,EAAmB,CAAC,CAAA,CAAA,EAAI;AAAA,MAC1C,MAAA,EAAQ,KAAA;AAAA,MACR;AAAA,KACD,CAAA;AAAA,EACH;AAAA;AAAA,EAGA,UAAA,CACE,UACA,OAAA,EACM;AACN,IAAA,IAAI,OAAO,WAAW,WAAA,EAAa;AACjC,MAAA,MAAM,IAAI,MAAM,8CAA8C,CAAA;AAAA,IAChE;AACA,IAAA,MAAM,GAAA,GACJ,OAAA,EAAS,WAAA,IACT,CAAA,EAAG,MAAA,CAAO,SAAS,MAAM,CAAA,EAAG,MAAA,CAAO,QAAA,CAAS,QAAQ,CAAA,CAAA;AACtD,IAAA,IAAI,WAAA,GAAc,GAAA;AAClB,IAAA,IAAI;AACF,MAAA,WAAA,GAAc,IAAI,GAAA,CAAI,GAAA,EAAK,OAAO,QAAA,CAAS,MAAM,EAAE,QAAA,EAAS;AAAA,IAC9D,CAAA,CAAA,MAAQ;AAAA,IAER;AACA,IAAA,MAAM,MAAM,IAAI,GAAA;AAAA,MACd,GAAG,IAAA,CAAK,MAAM,CAAA,cAAA,EAAiB,kBAAA,CAAmB,QAAQ,CAAC,CAAA,MAAA;AAAA,KAC7D;AACA,IAAA,GAAA,CAAI,YAAA,CAAa,GAAA,CAAI,cAAA,EAAgB,WAAW,CAAA;AAChD,IAAA,GAAA,CAAI,YAAA,CAAa,GAAA,CAAI,iBAAA,EAAmB,IAAA,CAAK,cAAc,CAAA;AAC3D,IAAA,IAAI,OAAA,EAAS,YAAY,MAAA,EAAQ;AAC/B,MAAA,GAAA,CAAI,YAAA,CAAa,GAAA,CAAI,SAAA,EAAW,MAAM,CAAA;AAAA,IACxC;AACA,IAAiB,mBAAA;AAKjB,IAAA,IAAI,OAAA,EAAS,OAAA,KAAY,MAAA,IAAU,OAAA,CAAQ,YAAA,EAAc;AACvD,MAAA,KAAK,IAAA,CAAK,eAAe,QAAA,EAAU;AAAA,QACjC,WAAA;AAAA,QACA,cAAc,OAAA,CAAQ;AAAA,OACvB,CAAA,CAAE,IAAA,CAAK,CAAC,YAAA,KAAiB;AACxB,QAAA,MAAA,CAAO,QAAA,CAAS,OAAO,YAAY,CAAA;AAAA,MACrC,CAAC,CAAA;AACD,MAAA;AAAA,IACF;AACA,IAAA,MAAA,CAAO,QAAA,CAAS,MAAA,CAAO,GAAA,CAAI,QAAA,EAAU,CAAA;AAAA,EACvC;AAAA,EAEA,MAAM,cAAA,CACJ,QAAA,EACA,OAAA,EACiB;AACjB,IAAA,MAAM,IAAA,GAAO,MAAM,IAAA,CAAK,OAAA;AAAA,MACtB,CAAA,cAAA,EAAiB,kBAAA,CAAmB,QAAQ,CAAC,CAAA,MAAA,CAAA;AAAA,MAC7C;AAAA,QACE,MAAA,EAAQ,MAAA;AAAA,QACR,cAAc,OAAA,CAAQ,YAAA;AAAA,QACtB,IAAA,EAAM,KAAK,SAAA,CAAU;AAAA,UACnB,aAAa,OAAA,CAAQ,WAAA;AAAA,UACrB,OAAA,EAAS;AAAA,SACV;AAAA;AACH,KACF;AACA,IAAA,OAAO,IAAA,CAAK,YAAA;AAAA,EACd;AAAA,EAEA,MAAM,kBAAkB,IAAA,EAAmC;AACzD,IAAA,MAAM,GAAA,GAAM,MAAM,IAAA,CAAK,OAAA;AAAA,MACrB,wBAAA;AAAA,MACA;AAAA,QACE,MAAA,EAAQ,MAAA;AAAA,QACR,IAAA,EAAM,IAAA,CAAK,SAAA,CAAU,EAAE,MAAM;AAAA;AAC/B,KACF;AACA,IAAA,OAAO,oBAAoB,GAAG,CAAA;AAAA,EAChC;AAAA,EAEA,MAAM,QAAQ,YAAA,EAA4D;AACxE,IAAA,OAAO,IAAA,CAAK,QAAqC,kBAAA,EAAoB;AAAA,MACnE,MAAA,EAAQ,MAAA;AAAA,MACR,YAAA;AAAA,MACA,IAAA,EAAM,IAAA,CAAK,SAAA,CAAU,EAAE;AAAA,KACxB,CAAA;AAAA,EACH;AAAA,EAEA,MAAM,WAAW,YAAA,EAId;AACD,IAAA,OAAO,IAAA,CAAK,QAIT,iBAAA,EAAmB;AAAA,MACpB,MAAA,EAAQ,KAAA;AAAA,MACR,GAAI,YAAA,GAAe,EAAE,YAAA,KAAiB;AAAC,KACxC,CAAA;AAAA,EACH;AAAA,EAEA,MAAM,QAAQ,YAAA,EAAqC;AACjD,IAAA,MAAM,IAAA,GAAO,MAAM,IAAA,CAAK,OAAA,CAA+B,cAAA,EAAgB;AAAA,MACrE,MAAA,EAAQ,KAAA;AAAA,MACR;AAAA,KACD,CAAA;AAED,IAAA,IAAI,IAAA,IAAQ,OAAO,IAAA,KAAS,QAAA,IAAY,UAAU,IAAA,EAAM;AACtD,MAAA,OAAO,IAAA,CAAK,IAAA;AAAA,IACd;AAEA,IAAA,OAAO,IAAA;AAAA,EACT;AAAA,EAEA,MAAM,UAAA,CACJ,YAAA,EACA,IAAA,EAOe;AACf,IAAA,MAAM,GAAA,GAAM,MAAM,IAAA,CAAK,OAAA,CAAwB,cAAA,EAAgB;AAAA,MAC7D,MAAA,EAAQ,OAAA;AAAA,MACR,YAAA;AAAA,MACA,IAAA,EAAM,IAAA,CAAK,SAAA,CAAU,IAAI;AAAA,KAC1B,CAAA;AACD,IAAA,OAAO,GAAA,CAAI,IAAA;AAAA,EACb;AAAA,EAEA,MAAM,eAAA,CACJ,YAAA,EACA,KAAA,EACe;AACf,IAAA,MAAM,GAAA,GAAM,MAAM,IAAA,CAAK,OAAA,CAAwB,oBAAA,EAAsB;AAAA,MACnE,MAAA,EAAQ,OAAA;AAAA,MACR,YAAA;AAAA,MACA,IAAA,EAAM,IAAA,CAAK,SAAA,CAAU,EAAE,OAAO;AAAA,KAC/B,CAAA;AACD,IAAA,OAAO,GAAA,CAAI,IAAA;AAAA,EACb;AAAA,EAEA,MAAM,cAAA,CACJ,YAAA,EACA,IAAA,EAC+B;AAC/B,IAAA,OAAO,IAAA,CAAK,QAAQ,uBAAA,EAAyB;AAAA,MAC3C,MAAA,EAAQ,MAAA;AAAA,MACR,YAAA;AAAA,MACA,IAAA,EAAM,IAAA,CAAK,SAAA,CAAU,IAAI;AAAA,KAC1B,CAAA;AAAA,EACH;AAAA,EAEA,MAAM,aAAa,YAAA,EAWhB;AACD,IAAA,OAAO,IAAA,CAAK,QAAQ,kBAAA,EAAoB;AAAA,MACtC,MAAA,EAAQ,KAAA;AAAA,MACR;AAAA,KACD,CAAA;AAAA,EACH;AAAA,EAEA,MAAM,aAAA,CACJ,YAAA,EACA,SAAA,EAC+B;AAC/B,IAAA,OAAO,IAAA,CAAK,OAAA,CAAQ,CAAA,iBAAA,EAAoB,SAAS,CAAA,OAAA,CAAA,EAAW;AAAA,MAC1D,MAAA,EAAQ,MAAA;AAAA,MACR,YAAA;AAAA,MACA,IAAA,EAAM,IAAA,CAAK,SAAA,CAAU,EAAE;AAAA,KACxB,CAAA;AAAA,EACH;AAAA,EAEA,MAAM,iBAAiB,IAAA,EAGQ;AAC7B,IAAA,OAAO,IAAA,CAAK,QAAQ,4BAAA,EAA8B;AAAA,MAChD,MAAA,EAAQ,MAAA;AAAA,MACR,IAAA,EAAM,IAAA,CAAK,SAAA,CAAU,IAAI;AAAA,KAC1B,CAAA;AAAA,EACH;AAAA,EAEA,MAAM,gBAAgB,KAAA,EAAoC;AACxD,IAAA,MAAM,GAAA,GAAM,MAAM,IAAA,CAAK,OAAA;AAAA,MACrB,2BAAA;AAAA,MACA;AAAA,QACE,MAAA,EAAQ,MAAA;AAAA,QACR,IAAA,EAAM,IAAA,CAAK,SAAA,CAAU,EAAE,OAAO;AAAA;AAChC,KACF;AACA,IAAA,OAAO,oBAAoB,GAAG,CAAA;AAAA,EAChC;AAAA,EAEA,MAAM,eAAe,IAAA,EAGU;AAC7B,IAAA,OAAO,IAAA,CAAK,QAAQ,yBAAA,EAA2B;AAAA,MAC7C,MAAA,EAAQ,MAAA;AAAA,MACR,IAAA,EAAM,IAAA,CAAK,SAAA,CAAU,IAAI;AAAA,KAC1B,CAAA;AAAA,EACH;AAAA,EAEA,MAAM,cAAc,IAAA,EAGc;AAChC,IAAA,OAAO,IAAA,CAAK,QAAQ,wBAAA,EAA0B;AAAA,MAC5C,MAAA,EAAQ,MAAA;AAAA,MACR,IAAA,EAAM,IAAA,CAAK,SAAA,CAAU,IAAI;AAAA,KAC1B,CAAA;AAAA,EACH;AAAA,EAEA,MAAM,YAAY,KAAA,EAA+C;AAC/D,IAAA,OAAO,IAAA,CAAK,QAAQ,sBAAA,EAAwB;AAAA,MAC1C,MAAA,EAAQ,MAAA;AAAA,MACR,IAAA,EAAM,IAAA,CAAK,SAAA,CAAU,EAAE,OAAO;AAAA,KAC/B,CAAA;AAAA,EACH;AACF;AAEO,SAAS,qBACd,OAAA,EACgB;AAChB,EAAA,OAAO,IAAI,eAAe,OAAO,CAAA;AACnC;AAEA,SAAS,mBAAmB,KAAA,EAA2C;AACrE,EAAA,MAAM,OAAO,MAAA,CAAO,KAAA,CAAM,IAAA,IAAQ,KAAA,CAAM,MAAM,EAAE,CAAA;AAChD,EAAA,OAAO;AAAA,IACL,IAAA;AAAA,IACA,IAAA,EAAM,MAAA,CAAO,KAAA,CAAM,IAAA,IAAQ,MAAM,CAAA;AAAA,IACjC,OAAO,KAAA,CAAM,KAAA,IAAS,OAAO,MAAA,CAAO,KAAA,CAAM,KAAK,CAAA,GAAI,MAAA;AAAA,IACnD,aAAa,KAAA,CAAM,WAAA,IAAe,OAAO,MAAA,CAAO,KAAA,CAAM,WAAW,CAAA,GAAI,MAAA;AAAA,IACrE,QAAA,EAAU,OAAA,CAAQ,KAAA,CAAM,QAAQ,CAAA;AAAA,IAChC,cAAc,KAAA,CAAM,YAAA,IAAgB,OAAO,MAAA,CAAO,KAAA,CAAM,YAAY,CAAA,GAAI,MAAA;AAAA,IACxE,SAAS,KAAA,CAAM,OAAA,CAAQ,MAAM,OAAO,CAAA,GAC/B,MAAM,OAAA,GACP,MAAA;AAAA,IACJ,UAAA,EACE,KAAA,CAAM,UAAA,IAAc,OAAO,MAAM,UAAA,KAAe,QAAA,GAC3C,KAAA,CAAM,UAAA,GACP,KAAA,CAAM,SAAA,IAAa,IAAA,IAAQ,KAAA,CAAM,aAAa,IAAA,GAC5C;AAAA,MACE,WACE,KAAA,CAAM,SAAA,IAAa,OAAO,MAAA,CAAO,KAAA,CAAM,SAAS,CAAA,GAAI,MAAA;AAAA,MACtD,WACE,KAAA,CAAM,SAAA,IAAa,OAAO,MAAA,CAAO,KAAA,CAAM,SAAS,CAAA,GAAI,MAAA;AAAA,MACtD,SACE,KAAA,CAAM,YAAA,IAAgB,OAClB,MAAA,CAAO,KAAA,CAAM,YAAY,CAAA,GACzB;AAAA,KACR,GACA;AAAA,GACV;AACF;AAEA,SAAS,oBAAoB,MAAA,EAAoC;AAC/D,EAAA,IAAI,CAAC,MAAA,IAAU,OAAO,MAAA,KAAW,UAAU,OAAO,IAAA;AAClD,EAAA,MAAM,CAAA,GAAI,MAAA;AACV,EAAA,MAAM,MAAA,GAAS,KAAA,CAAM,OAAA,CAAQ,CAAA,CAAE,MAAM,CAAA,GACjC,CAAA,CAAE,MAAA,CAAO,GAAA,CAAI,CAAC,CAAA,KAAM,kBAAA,CAAmB,CAA4B,CAAC,IACpE,EAAC;AACL,EAAA,OAAO;AAAA,IACL,MAAA;AAAA,IACA,OAAO,CAAA,CAAE,KAAA,IAAS,OAAO,MAAA,CAAO,CAAA,CAAE,KAAK,CAAA,GAAI,MAAA;AAAA,IAC3C,aAAa,CAAA,CAAE,WAAA,IAAe,OAAO,MAAA,CAAO,CAAA,CAAE,WAAW,CAAA,GAAI,MAAA;AAAA,IAC7D,aAAa,CAAA,CAAE,WAAA,IAAe,OAAO,MAAA,CAAO,CAAA,CAAE,WAAW,CAAA,GAAI;AAAA,GAC/D;AACF;AAEA,SAAS,oBAAoB,GAAA,EAA0C;AACrE,EAAA,MAAM,WAAA,GACJ,IAAI,WAAA,IAAe,OAAO,IAAI,WAAA,KAAgB,QAAA,GACzC,GAAA,CAAI,WAAA,GACL,EAAC;AACP,EAAA,MAAM,KAAA,GAAQ,MAAM,OAAA,CAAQ,GAAA,CAAI,KAAK,CAAA,GAAI,GAAA,CAAI,QAAQ,EAAC;AACtD,EAAA,MAAM,QAAA,GAAW,CAAC,IAAA,KAAiB;AACjC,IAAA,MAAM,QAAQ,KAAA,CAAM,IAAA;AAAA,MAClB,CAAC,CAAA,KAAM,CAAA,IAAK,OAAO,CAAA,KAAM,QAAA,IAAa,EAAwB,IAAA,KAAS;AAAA,KACzE;AACA,IAAA,OAAO,mBAAA,CAAoB,OAAO,MAAM,CAAA;AAAA,EAC1C,CAAA;AAEA,EAAA,MAAM,QAAA,GACJ,IAAI,QAAA,IAAY,OAAO,IAAI,QAAA,KAAa,QAAA,GACnC,IAAI,QAAA,GACL,MAAA;AAEN,EAAA,OAAO;AAAA,IACL,GAAG,GAAA;AAAA,IACH,eAAe,WAAA,CAAY,EAAA,IAAM,OAAO,MAAA,CAAO,WAAA,CAAY,EAAE,CAAA,GAAI,MAAA;AAAA,IACjE,iBACE,WAAA,CAAY,IAAA,IAAQ,OAAO,MAAA,CAAO,WAAA,CAAY,IAAI,CAAA,GAAI,MAAA;AAAA,IACxD,aACE,WAAA,CAAY,WAAA,IAAe,OACvB,MAAA,CAAO,WAAA,CAAY,WAAW,CAAA,GAC9B,MAAA;AAAA,IACN,SACE,WAAA,CAAY,OAAA,IAAW,OAAO,MAAA,CAAO,WAAA,CAAY,OAAO,CAAA,GAAI,IAAA;AAAA,IAC9D,UAAA,EAAY,SAAS,SAAS,CAAA;AAAA,IAC9B,UAAA,EAAY,SAAS,SAAS,CAAA;AAAA,IAC9B,kBAAA,EAAoB,SAAS,iBAAiB,CAAA;AAAA,IAC9C,iBAAA,EAAmB,SAAS,gBAAgB,CAAA;AAAA,IAC5C,WAAW,KAAA,CAAM,OAAA,CAAQ,IAAI,SAAS,CAAA,GACjC,IAAI,SAAA,GACL,MAAA;AAAA,IACJ,UAAA,EACE,IAAI,UAAA,IAAc,OAAO,IAAI,UAAA,KAAe,QAAA,GACvC,IAAI,UAAA,GACL,IAAA;AAAA,IACN,WAAA,EACE,IAAI,WAAA,IAAe,OAAO,IAAI,WAAA,KAAgB,QAAA,GACzC,IAAI,WAAA,GACL;AAAA,MACE,gBAAA,EAAkB,IAAA;AAAA,MAClB,gBAAA,EAAkB,IAAA;AAAA,MAClB,mBAAA,EAAqB;AAAA,KACvB;AAAA,IACN,UAAU,QAAA,GACN;AAAA,MACE,WAAA,EAAa,IAAA;AAAA,MACb,wBAAA,EAA0B,OAAA;AAAA,QACxB,QAAA,CAAS;AAAA,OACX;AAAA,MACA,mBACE,QAAA,CAAS,iBAAA,IAAqB,OAC1B,MAAA,CAAO,QAAA,CAAS,iBAAiB,CAAA,GACjC,MAAA;AAAA,MACN,GAAG;AAAA,KACL,GACA;AAAA,GACN;AACF;AAEA,SAAS,oBAAoB,GAAA,EAA0C;AACrE,EAAA,MAAM,eAAe,MAAA,CAAO,GAAA,CAAI,YAAA,IAAgB,GAAA,CAAI,SAAS,EAAE,CAAA;AAC/D,EAAA,IAAI,CAAC,YAAA,EAAc;AACjB,IAAA,MAAM,IAAI,gBAAA;AAAA,MACR,kBAAA;AAAA,MACA,qCAAA;AAAA,MACA;AAAA,KACF;AAAA,EACF;AAEA,EAAA,OAAO;AAAA,IACL,YAAA;AAAA,IACA,MAAM,GAAA,CAAI,IAAA;AAAA,IACV,SAAS,GAAA,CAAI;AAAA,GACf;AACF;;;AC9kBO,IAAM,mBAAA,GAAsB;AAGnC,IAAI,kBAAA,GAAoC,IAAA;AASjC,SAAS,mBAAA,GAAsC;AACpD,EAAA,MAAM,KAAA,uBAAY,GAAA,EAAoB;AAEtC,EAAA,OAAO;AAAA,IACL,QAAQ,GAAA,EAAa;AACnB,MAAA,OAAO,KAAA,CAAM,IAAI,GAAG,CAAA,GAAK,MAAM,GAAA,CAAI,GAAG,KAAK,IAAA,GAAQ,IAAA;AAAA,IACrD,CAAA;AAAA,IACA,OAAA,CAAQ,KAAa,KAAA,EAAe;AAClC,MAAA,KAAA,CAAM,GAAA,CAAI,KAAK,KAAK,CAAA;AAAA,IACtB,CAAA;AAAA,IACA,WAAW,GAAA,EAAa;AACtB,MAAA,KAAA,CAAM,OAAO,GAAG,CAAA;AAAA,IAClB;AAAA,GACF;AACF;AAUA,SAAS,SAAA,GAAqB;AAC5B,EAAA,OAAO,OAAO,QAAA,KAAa,WAAA;AAC7B;AAGO,SAAS,UAAU,IAAA,EAA6B;AACrD,EAAA,IAAI,CAAC,SAAA,EAAU,EAAG,OAAO,IAAA;AAEzB,EAAA,MAAM,MAAA,GAAS,CAAA,EAAG,kBAAA,CAAmB,IAAI,CAAC,CAAA,CAAA,CAAA;AAC1C,EAAA,MAAM,KAAA,GAAQ,QAAA,CAAS,MAAA,CAAO,KAAA,CAAM,IAAI,CAAA;AAExC,EAAA,KAAA,MAAW,QAAQ,KAAA,EAAO;AACxB,IAAA,IAAI,IAAA,CAAK,UAAA,CAAW,MAAM,CAAA,EAAG;AAC3B,MAAA,OAAO,kBAAA,CAAmB,IAAA,CAAK,KAAA,CAAM,MAAA,CAAO,MAAM,CAAC,CAAA;AAAA,IACrD;AAAA,EACF;AAEA,EAAA,OAAO,IAAA;AACT;AAGO,SAAS,SAAA,CACd,IAAA,EACA,KAAA,EACA,OAAA,GAAyB,EAAC,EACpB;AACN,EAAA,IAAI,CAAC,WAAU,EAAG;AAElB,EAAA,MAAM;AAAA,IACJ,IAAA,GAAO,CAAA;AAAA,IACP,IAAA,GAAO,GAAA;AAAA,IACP,QAAA,GAAW,KAAA;AAAA,IACX,MAAA,GAAS,OAAO,QAAA,KAAa,WAAA,IAAe,SAAS,QAAA,KAAa,QAAA;AAAA,IAClE;AAAA,GACF,GAAI,OAAA;AAEJ,EAAA,MAAM,MAAA,GAAS,IAAA,CAAK,GAAA,CAAI,CAAA,EAAG,IAAA,CAAK,MAAM,IAAA,GAAO,EAAA,GAAK,EAAA,GAAK,EAAE,CAAC,CAAA;AAC1D,EAAA,IAAI,MAAA,GAAS,CAAA,EAAG,kBAAA,CAAmB,IAAI,CAAC,CAAA,CAAA,EAAI,kBAAA,CAAmB,KAAK,CAAC,CAAA,OAAA,EAAU,IAAI,CAAA,UAAA,EAAa,MAAM,cAAc,QAAQ,CAAA,CAAA;AAE5H,EAAA,IAAI,QAAQ,MAAA,IAAU,UAAA;AACtB,EAAA,IAAI,MAAA,EAAQ,MAAA,IAAU,CAAA,SAAA,EAAY,MAAM,CAAA,CAAA;AAExC,EAAA,QAAA,CAAS,MAAA,GAAS,MAAA;AACpB;AAGO,SAAS,YAAA,CACd,IAAA,EACA,OAAA,GAAkD,EAAC,EAC7C;AACN,EAAA,IAAI,CAAC,WAAU,EAAG;AAElB,EAAA,MAAM,EAAE,IAAA,GAAO,GAAA,EAAK,MAAA,EAAO,GAAI,OAAA;AAC/B,EAAA,IAAI,SAAS,CAAA,EAAG,kBAAA,CAAmB,IAAI,CAAC,WAAW,IAAI,CAAA,yBAAA,CAAA;AACvD,EAAA,IAAI,MAAA,EAAQ,MAAA,IAAU,CAAA,SAAA,EAAY,MAAM,CAAA,CAAA;AACxC,EAAA,QAAA,CAAS,MAAA,GAAS,MAAA;AACpB;AAEO,SAAS,yBAAA,GAA2C;AACzD,EAAA,IAAI,oBAAoB,OAAO,kBAAA;AAC/B,EAAA,OAAO,UAAU,mBAAmB,CAAA;AACtC;AAOO,SAAS,qBAAA,CACd,OACA,OAAA,EACM;AACN,EAAA,kBAAA,GAAqB,KAAA;AACrB,EAAA,SAAA,CAAU,mBAAA,EAAqB,OAAO,OAAO,CAAA;AAC/C;AAEO,SAAS,wBACd,OAAA,EACM;AACN,EAAA,kBAAA,GAAqB,IAAA;AACrB,EAAA,YAAA,CAAa,qBAAqB,OAAO,CAAA;AAC3C;AAGO,SAAS,mBAAA,CACd,OAAA,GAAyB,EAAC,EACV;AAChB,EAAA,OAAO;AAAA,IACL,QAAQ,GAAA,EAAa;AACnB,MAAA,IAAI,GAAA,KAAQ,mBAAA,EAAqB,OAAO,yBAAA,EAA0B;AAClE,MAAA,OAAO,UAAU,GAAG,CAAA;AAAA,IACtB,CAAA;AAAA,IACA,OAAA,CAAQ,KAAa,KAAA,EAAe;AAClC,MAAA,IAAI,QAAQ,mBAAA,EAAqB;AAC/B,QAAA,qBAAA,CAAsB,OAAO,OAAO,CAAA;AACpC,QAAA;AAAA,MACF;AACA,MAAA,SAAA,CAAU,GAAA,EAAK,OAAO,OAAO,CAAA;AAAA,IAC/B,CAAA;AAAA,IACA,WAAW,GAAA,EAAa;AACtB,MAAA,IAAI,QAAQ,mBAAA,EAAqB;AAC/B,QAAA,uBAAA,CAAwB;AAAA,UACtB,MAAM,OAAA,CAAQ,IAAA;AAAA,UACd,QAAQ,OAAA,CAAQ;AAAA,SACjB,CAAA;AACD,QAAA;AAAA,MACF;AACA,MAAA,YAAA,CAAa,GAAA,EAAK;AAAA,QAChB,MAAM,OAAA,CAAQ,IAAA;AAAA,QACd,QAAQ,OAAA,CAAQ;AAAA,OACjB,CAAA;AAAA,IACH;AAAA,GACF;AACF","file":"index.js","sourcesContent":["export interface User {\n  id: string;\n  email: string;\n  emailVerifiedAt?: string | null;\n  firstName?: string | null;\n  lastName?: string | null;\n  username?: string | null;\n  phoneNumber?: string | null;\n  imageUrl?: string | null;\n  status: string;\n  publicMetadata?: Record<string, unknown>;\n  unsafeMetadata?: Record<string, unknown>;\n  lastSignInAt?: string | null;\n  createdAt: string;\n  updatedAt: string;\n}\n\nexport interface Session {\n  id: string;\n  userId: string;\n  status: string;\n  expiresAt: string;\n  lastActiveAt: string;\n  createdAt: string;\n  ipAddress?: string | null;\n  userAgent?: string | null;\n  device?: string | null;\n  location?: string | null;\n}\n\nexport interface FormField {\n  name: string;\n  type: string;\n  label?: string;\n  placeholder?: string;\n  required?: boolean;\n  defaultValue?: string;\n  options?: Array<{ label: string; value: string }>;\n  validation?: {\n    minLength?: number;\n    maxLength?: number;\n    pattern?: string;\n    message?: string;\n  };\n}\n\nexport interface FormSchema {\n  fields: FormField[];\n  submitLabel?: string;\n  title?: string;\n  description?: string;\n}\n\nexport interface AuthConfig {\n  applicationId?: string;\n  applicationName?: string;\n  environment?: string;\n  homeUrl?: string | null;\n  signInForm?: FormSchema | null;\n  signUpForm?: FormSchema | null;\n  forgotPasswordForm?: FormSchema | null;\n  resetPasswordForm?: FormSchema | null;\n  settings?: {\n    allowSignUp?: boolean;\n    requireEmailVerification?: boolean;\n    passwordMinLength?: number;\n    passwordEnabled?: boolean;\n    magicLinkEnabled?: boolean;\n    passkeysEnabled?: boolean;\n    phoneEnabled?: boolean;\n    mfaEnabled?: boolean;\n    [key: string]: unknown;\n  };\n  userProfile?: {\n    allowEditProfile?: boolean;\n    allowChangeEmail?: boolean;\n    allowChangePassword?: boolean;\n  };\n  providers?: Array<{\n    provider: string;\n    enabled: boolean;\n    scopes?: string[];\n    buttonLabel?: string | null;\n    position?: string | null;\n    sortOrder?: number | null;\n  }>;\n  /** Unified authentication experience config (shared with builder + SDK UI). */\n  experience?: Record<string, unknown> | null;\n  [key: string]: unknown;\n}\n\nexport interface AuthResult {\n  sessionToken: string;\n  user: User;\n  session: Session;\n  token?: string;\n  status?: \"complete\";\n}\n\nexport interface MfaRequiredResult {\n  status: \"mfa_required\";\n  mfaToken: string;\n}\n\nexport type SignInResult = AuthResult | MfaRequiredResult;\n\nexport interface SignUpData {\n  email: string;\n  password: string;\n  firstName?: string;\n  lastName?: string;\n  username?: string;\n  phoneNumber?: string;\n  unsafeMetadata?: Record<string, unknown>;\n  [key: string]: unknown;\n}\n\nexport interface SignInData {\n  email: string;\n  password: string;\n  [key: string]: unknown;\n}\n\nexport interface ConnectedIdentity {\n  id: string;\n  provider: string;\n  email: string | null;\n  connectedAt: string;\n}\n\nexport interface ActivityItem {\n  id: string;\n  type: string;\n  createdAt: string;\n  ipAddress: string | null;\n  userAgent: string | null;\n  metadata: Record<string, unknown>;\n}\n\nexport interface MeindeskClientOptions {\n  publishableKey: string;\n  apiUrl?: string;\n  secretKey?: string;\n}\n\nexport interface ApiSuccessResponse<T> {\n  success: true;\n  data: T;\n}\n\nexport interface ApiErrorBody {\n  code: string;\n  message: string;\n}\n\nexport interface ApiErrorResponse {\n  success: false;\n  error: ApiErrorBody;\n}\n\nexport type ApiResponse<T> = ApiSuccessResponse<T> | ApiErrorResponse;\n\nexport class MeindeskApiError extends Error {\n  readonly code: string;\n  readonly status: number;\n\n  constructor(code: string, message: string, status: number) {\n    super(message);\n    this.name = \"MeindeskApiError\";\n    this.code = code;\n    this.status = status;\n  }\n}\n","import type {\n  AuthConfig,\n  AuthResult,\n  FormField,\n  FormSchema,\n  MeindeskClientOptions,\n  Session,\n  SignInData,\n  SignInResult,\n  SignUpData,\n  User,\n  ApiResponse,\n  ConnectedIdentity,\n  ActivityItem,\n} from \"./types\";\nimport { MeindeskApiError } from \"./types\";\n\nconst DEVICE_ID_KEY = \"meindesk_device_id\";\n\nfunction readEnv(name: string): string | undefined {\n  const proc = (globalThis as { process?: { env?: Record<string, string | undefined> } })\n    .process;\n  return proc?.env?.[name];\n}\n\nfunction resolveApiUrl(apiUrl?: string): string {\n  if (apiUrl) return apiUrl.replace(/\\/$/, \"\");\n  const fromEnv = readEnv(\"NEXT_PUBLIC_API_URL\");\n  return (fromEnv || \"http://localhost:4000\").replace(/\\/$/, \"\");\n}\n\nexport function getOrCreateDeviceId(): string | undefined {\n  if (typeof window === \"undefined\" || !window.localStorage) return undefined;\n  try {\n    let id = window.localStorage.getItem(DEVICE_ID_KEY);\n    if (!id) {\n      id =\n        typeof crypto !== \"undefined\" && \"randomUUID\" in crypto\n          ? crypto.randomUUID()\n          : `dev_${Math.random().toString(36).slice(2)}_${Date.now()}`;\n      window.localStorage.setItem(DEVICE_ID_KEY, id);\n    }\n    return id;\n  } catch {\n    return undefined;\n  }\n}\n\nexport class MeindeskClient {\n  readonly publishableKey: string;\n  readonly apiUrl: string;\n  readonly secretKey?: string;\n\n  constructor(options: MeindeskClientOptions) {\n    if (!options.publishableKey) {\n      throw new Error(\"MeindeskClient requires a publishableKey\");\n    }\n\n    this.publishableKey = options.publishableKey;\n    this.apiUrl = resolveApiUrl(options.apiUrl);\n    this.secretKey = options.secretKey;\n  }\n\n  private buildHeaders(sessionToken?: string): HeadersInit {\n    const headers: Record<string, string> = {\n      Accept: \"application/json\",\n      \"Content-Type\": \"application/json\",\n      \"x-meindesk-publishable-key\": this.publishableKey,\n    };\n\n    if (this.secretKey && typeof window === \"undefined\") {\n      headers[\"x-meindesk-secret-key\"] = this.secretKey;\n    }\n\n    if (sessionToken) {\n      headers.Authorization = `Bearer ${sessionToken}`;\n    }\n\n    const deviceId = getOrCreateDeviceId();\n    if (deviceId) {\n      headers[\"x-meindesk-device-id\"] = deviceId;\n    }\n\n    return headers;\n  }\n\n  private async request<T>(\n    path: string,\n    init: RequestInit & { sessionToken?: string } = {},\n  ): Promise<T> {\n    const { sessionToken, ...fetchInit } = init;\n    const url = `${this.apiUrl}${path.startsWith(\"/\") ? path : `/${path}`}`;\n\n    const response = await fetch(url, {\n      ...fetchInit,\n      headers: {\n        ...this.buildHeaders(sessionToken),\n        ...(fetchInit.headers as Record<string, string> | undefined),\n      },\n      credentials: \"include\",\n    });\n\n    let body: ApiResponse<T> | null = null;\n\n    try {\n      body = (await response.json()) as ApiResponse<T>;\n    } catch {\n      throw new MeindeskApiError(\n        \"invalid_response\",\n        `Request failed with status ${response.status}`,\n        response.status,\n      );\n    }\n\n    if (!response.ok || !body || body.success !== true) {\n      const error =\n        body && \"error\" in body && body.error\n          ? body.error\n          : { code: \"request_failed\", message: `Request failed (${response.status})` };\n\n      throw new MeindeskApiError(error.code, error.message, response.status);\n    }\n\n    return body.data;\n  }\n\n  async getConfig(): Promise<AuthConfig> {\n    const raw = await this.request<Record<string, unknown>>(\"/v1/sdk/config\", {\n      method: \"GET\",\n    });\n    return normalizeAuthConfig(raw);\n  }\n\n  async signUp(data: SignUpData): Promise<AuthResult> {\n    const raw = await this.request<Record<string, unknown>>(\"/v1/sdk/sign-up\", {\n      method: \"POST\",\n      body: JSON.stringify(data),\n    });\n    return normalizeAuthResult(raw);\n  }\n\n  async signIn(data: SignInData): Promise<SignInResult> {\n    const raw = await this.request<Record<string, unknown>>(\"/v1/sdk/sign-in\", {\n      method: \"POST\",\n      body: JSON.stringify(data),\n    });\n    if (raw.status === \"mfa_required\" && typeof raw.mfaToken === \"string\") {\n      return { status: \"mfa_required\", mfaToken: raw.mfaToken };\n    }\n    return normalizeAuthResult(raw);\n  }\n\n  async verifyMfa(data: {\n    mfaToken: string;\n    code: string;\n  }): Promise<AuthResult> {\n    const raw = await this.request<Record<string, unknown>>(\"/v1/sdk/mfa/verify\", {\n      method: \"POST\",\n      body: JSON.stringify(data),\n    });\n    return normalizeAuthResult(raw);\n  }\n\n  async getMfaStatus(sessionToken: string): Promise<{\n    enabled: boolean;\n    verifiedAt: string | null;\n  }> {\n    return this.request(\"/v1/sdk/mfa\", { method: \"GET\", sessionToken });\n  }\n\n  async startTotpEnrollment(sessionToken: string): Promise<{\n    secret: string;\n    uri: string;\n    recoveryCodes: string[];\n  }> {\n    return this.request(\"/v1/sdk/mfa/totp/start\", {\n      method: \"POST\",\n      sessionToken,\n      body: JSON.stringify({}),\n    });\n  }\n\n  async confirmTotpEnrollment(\n    sessionToken: string,\n    code: string,\n  ): Promise<{ enabled: boolean }> {\n    return this.request(\"/v1/sdk/mfa/totp/confirm\", {\n      method: \"POST\",\n      sessionToken,\n      body: JSON.stringify({ code }),\n    });\n  }\n\n  async disableTotp(\n    sessionToken: string,\n    data: { password?: string; recoveryCode?: string },\n  ): Promise<{ enabled: boolean }> {\n    return this.request(\"/v1/sdk/mfa/totp/disable\", {\n      method: \"POST\",\n      sessionToken,\n      body: JSON.stringify(data),\n    });\n  }\n\n  async listIdentities(\n    sessionToken: string,\n  ): Promise<{ identities: ConnectedIdentity[] }> {\n    return this.request(\"/v1/sdk/identities\", {\n      method: \"GET\",\n      sessionToken,\n    });\n  }\n\n  async unlinkIdentity(\n    sessionToken: string,\n    provider: string,\n  ): Promise<{ unlinked: boolean }> {\n    return this.request(`/v1/sdk/identities/${encodeURIComponent(provider)}`, {\n      method: \"DELETE\",\n      sessionToken,\n    });\n  }\n\n  async listActivity(\n    sessionToken: string,\n    options?: { limit?: number },\n  ): Promise<{ activity: ActivityItem[] }> {\n    const q =\n      options?.limit != null ? `?limit=${encodeURIComponent(String(options.limit))}` : \"\";\n    return this.request(`/v1/sdk/activity${q}`, {\n      method: \"GET\",\n      sessionToken,\n    });\n  }\n\n  /** Navigate the browser to the OAuth start URL (top-level redirect). */\n  startOAuth(\n    provider: string,\n    options?: { redirectUrl?: string; purpose?: \"sign_in\" | \"link\"; sessionToken?: string },\n  ): void {\n    if (typeof window === \"undefined\") {\n      throw new Error(\"startOAuth can only be called in the browser\");\n    }\n    const raw =\n      options?.redirectUrl ??\n      `${window.location.origin}${window.location.pathname}`;\n    let redirectUrl = raw;\n    try {\n      redirectUrl = new URL(raw, window.location.origin).toString();\n    } catch {\n      // keep raw\n    }\n    const url = new URL(\n      `${this.apiUrl}/v1/sdk/oauth/${encodeURIComponent(provider)}/start`,\n    );\n    url.searchParams.set(\"redirect_url\", redirectUrl);\n    url.searchParams.set(\"publishable_key\", this.publishableKey);\n    if (options?.purpose === \"link\") {\n      url.searchParams.set(\"purpose\", \"link\");\n    }\n    const deviceId = getOrCreateDeviceId();\n    if (deviceId) {\n      // Cookie-less GET redirect cannot set custom headers; rely on stored state\n      // via POST start when linking from the Account modal.\n    }\n    if (options?.purpose === \"link\" && options.sessionToken) {\n      void this.startOAuthLink(provider, {\n        redirectUrl,\n        sessionToken: options.sessionToken,\n      }).then((authorizeUrl) => {\n        window.location.assign(authorizeUrl);\n      });\n      return;\n    }\n    window.location.assign(url.toString());\n  }\n\n  async startOAuthLink(\n    provider: string,\n    options: { redirectUrl: string; sessionToken: string },\n  ): Promise<string> {\n    const data = await this.request<{ authorizeUrl: string }>(\n      `/v1/sdk/oauth/${encodeURIComponent(provider)}/start`,\n      {\n        method: \"POST\",\n        sessionToken: options.sessionToken,\n        body: JSON.stringify({\n          redirectUrl: options.redirectUrl,\n          purpose: \"link\",\n        }),\n      },\n    );\n    return data.authorizeUrl;\n  }\n\n  async exchangeOAuthCode(code: string): Promise<AuthResult> {\n    const raw = await this.request<Record<string, unknown>>(\n      \"/v1/sdk/oauth/exchange\",\n      {\n        method: \"POST\",\n        body: JSON.stringify({ code }),\n      },\n    );\n    return normalizeAuthResult(raw);\n  }\n\n  async signOut(sessionToken: string): Promise<{ success: boolean } | void> {\n    return this.request<{ success: boolean } | void>(\"/v1/sdk/sign-out\", {\n      method: \"POST\",\n      sessionToken,\n      body: JSON.stringify({}),\n    });\n  }\n\n  async getSession(sessionToken?: string): Promise<{\n    session: Session | null;\n    user: User | null;\n    sessionToken?: string;\n  }> {\n    return this.request<{\n      session: Session | null;\n      user: User | null;\n      sessionToken?: string;\n    }>(\"/v1/sdk/session\", {\n      method: \"GET\",\n      ...(sessionToken ? { sessionToken } : {}),\n    });\n  }\n\n  async getUser(sessionToken: string): Promise<User> {\n    const data = await this.request<User | { user: User }>(\"/v1/sdk/user\", {\n      method: \"GET\",\n      sessionToken,\n    });\n\n    if (data && typeof data === \"object\" && \"user\" in data) {\n      return data.user;\n    }\n\n    return data as User;\n  }\n\n  async updateUser(\n    sessionToken: string,\n    data: {\n      firstName?: string | null;\n      lastName?: string | null;\n      username?: string | null;\n      phoneNumber?: string | null;\n      imageUrl?: string | null;\n    },\n  ): Promise<User> {\n    const res = await this.request<{ user: User }>(\"/v1/sdk/user\", {\n      method: \"PATCH\",\n      sessionToken,\n      body: JSON.stringify(data),\n    });\n    return res.user;\n  }\n\n  async updateUserEmail(\n    sessionToken: string,\n    email: string,\n  ): Promise<User> {\n    const res = await this.request<{ user: User }>(\"/v1/sdk/user/email\", {\n      method: \"PATCH\",\n      sessionToken,\n      body: JSON.stringify({ email }),\n    });\n    return res.user;\n  }\n\n  async changePassword(\n    sessionToken: string,\n    data: { currentPassword: string; newPassword: string },\n  ): Promise<{ success: boolean }> {\n    return this.request(\"/v1/sdk/user/password\", {\n      method: \"POST\",\n      sessionToken,\n      body: JSON.stringify(data),\n    });\n  }\n\n  async listSessions(sessionToken: string): Promise<{\n    sessions: Array<\n      Session & {\n        ipAddress?: string | null;\n        userAgent?: string | null;\n        device?: string | null;\n        location?: string | null;\n      }\n    >;\n    currentSessionId: string;\n    total: number;\n  }> {\n    return this.request(\"/v1/sdk/sessions\", {\n      method: \"GET\",\n      sessionToken,\n    });\n  }\n\n  async revokeSession(\n    sessionToken: string,\n    sessionId: string,\n  ): Promise<{ revoked: boolean }> {\n    return this.request(`/v1/sdk/sessions/${sessionId}/revoke`, {\n      method: \"POST\",\n      sessionToken,\n      body: JSON.stringify({}),\n    });\n  }\n\n  async requestMagicLink(data: {\n    email: string;\n    redirectUrl?: string;\n  }): Promise<{ sent: boolean }> {\n    return this.request(\"/v1/sdk/magic-link/request\", {\n      method: \"POST\",\n      body: JSON.stringify(data),\n    });\n  }\n\n  async verifyMagicLink(token: string): Promise<AuthResult> {\n    const raw = await this.request<Record<string, unknown>>(\n      \"/v1/sdk/magic-link/verify\",\n      {\n        method: \"POST\",\n        body: JSON.stringify({ token }),\n      },\n    );\n    return normalizeAuthResult(raw);\n  }\n\n  async forgotPassword(data: {\n    email: string;\n    redirectUrl?: string;\n  }): Promise<{ sent: boolean }> {\n    return this.request(\"/v1/sdk/password/forgot\", {\n      method: \"POST\",\n      body: JSON.stringify(data),\n    });\n  }\n\n  async resetPassword(data: {\n    token: string;\n    password: string;\n  }): Promise<{ success: boolean }> {\n    return this.request(\"/v1/sdk/password/reset\", {\n      method: \"POST\",\n      body: JSON.stringify(data),\n    });\n  }\n\n  async verifyEmail(token: string): Promise<{ verified: boolean }> {\n    return this.request(\"/v1/sdk/email/verify\", {\n      method: \"POST\",\n      body: JSON.stringify({ token }),\n    });\n  }\n}\n\nexport function createMeindeskClient(\n  options: MeindeskClientOptions,\n): MeindeskClient {\n  return new MeindeskClient(options);\n}\n\nfunction normalizeFormField(field: Record<string, unknown>): FormField {\n  const name = String(field.name ?? field.id ?? \"\");\n  return {\n    name,\n    type: String(field.type ?? \"text\"),\n    label: field.label != null ? String(field.label) : undefined,\n    placeholder: field.placeholder != null ? String(field.placeholder) : undefined,\n    required: Boolean(field.required),\n    defaultValue: field.defaultValue != null ? String(field.defaultValue) : undefined,\n    options: Array.isArray(field.options)\n      ? (field.options as FormField[\"options\"])\n      : undefined,\n    validation:\n      field.validation && typeof field.validation === \"object\"\n        ? (field.validation as FormField[\"validation\"])\n        : field.minLength != null || field.maxLength != null\n          ? {\n              minLength:\n                field.minLength != null ? Number(field.minLength) : undefined,\n              maxLength:\n                field.maxLength != null ? Number(field.maxLength) : undefined,\n              message:\n                field.errorMessage != null\n                  ? String(field.errorMessage)\n                  : undefined,\n            }\n          : undefined,\n  };\n}\n\nfunction normalizeFormSchema(schema: unknown): FormSchema | null {\n  if (!schema || typeof schema !== \"object\") return null;\n  const s = schema as Record<string, unknown>;\n  const fields = Array.isArray(s.fields)\n    ? s.fields.map((f) => normalizeFormField(f as Record<string, unknown>))\n    : [];\n  return {\n    fields,\n    title: s.title != null ? String(s.title) : undefined,\n    description: s.description != null ? String(s.description) : undefined,\n    submitLabel: s.submitLabel != null ? String(s.submitLabel) : undefined,\n  };\n}\n\nfunction normalizeAuthConfig(raw: Record<string, unknown>): AuthConfig {\n  const application =\n    raw.application && typeof raw.application === \"object\"\n      ? (raw.application as Record<string, unknown>)\n      : {};\n  const forms = Array.isArray(raw.forms) ? raw.forms : [];\n  const findForm = (type: string) => {\n    const match = forms.find(\n      (f) => f && typeof f === \"object\" && (f as { type?: string }).type === type,\n    ) as { schema?: unknown } | undefined;\n    return normalizeFormSchema(match?.schema);\n  };\n\n  const settings =\n    raw.settings && typeof raw.settings === \"object\"\n      ? (raw.settings as Record<string, unknown>)\n      : undefined;\n\n  return {\n    ...raw,\n    applicationId: application.id != null ? String(application.id) : undefined,\n    applicationName:\n      application.name != null ? String(application.name) : undefined,\n    environment:\n      application.environment != null\n        ? String(application.environment)\n        : undefined,\n    homeUrl:\n      application.homeUrl != null ? String(application.homeUrl) : null,\n    signInForm: findForm(\"sign_in\"),\n    signUpForm: findForm(\"sign_up\"),\n    forgotPasswordForm: findForm(\"forgot_password\"),\n    resetPasswordForm: findForm(\"reset_password\"),\n    providers: Array.isArray(raw.providers)\n      ? (raw.providers as AuthConfig[\"providers\"])\n      : undefined,\n    experience:\n      raw.experience && typeof raw.experience === \"object\"\n        ? (raw.experience as Record<string, unknown>)\n        : null,\n    userProfile:\n      raw.userProfile && typeof raw.userProfile === \"object\"\n        ? (raw.userProfile as AuthConfig[\"userProfile\"])\n        : {\n            allowEditProfile: true,\n            allowChangeEmail: true,\n            allowChangePassword: true,\n          },\n    settings: settings\n      ? {\n          allowSignUp: true,\n          requireEmailVerification: Boolean(\n            settings.emailVerificationRequired,\n          ),\n          passwordMinLength:\n            settings.passwordMinLength != null\n              ? Number(settings.passwordMinLength)\n              : undefined,\n          ...settings,\n        }\n      : undefined,\n  };\n}\n\nfunction normalizeAuthResult(raw: Record<string, unknown>): AuthResult {\n  const sessionToken = String(raw.sessionToken ?? raw.token ?? \"\");\n  if (!sessionToken) {\n    throw new MeindeskApiError(\n      \"invalid_response\",\n      \"Auth response missing session token\",\n      500,\n    );\n  }\n\n  return {\n    sessionToken,\n    user: raw.user as User,\n    session: raw.session as Session,\n  };\n}\n","export const SESSION_COOKIE_NAME = \"md_session\";\n\n/** In-memory mirror of the session token for same-tick Bearer auth. */\nlet memorySessionToken: string | null = null;\n\nexport interface StorageAdapter {\n  getItem(key: string): string | null;\n  setItem(key: string, value: string): void;\n  removeItem(key: string): void;\n}\n\n/** In-memory key/value store (SSR-safe, no persistence). */\nexport function createMemoryStorage(): StorageAdapter {\n  const store = new Map<string, string>();\n\n  return {\n    getItem(key: string) {\n      return store.has(key) ? (store.get(key) ?? null) : null;\n    },\n    setItem(key: string, value: string) {\n      store.set(key, value);\n    },\n    removeItem(key: string) {\n      store.delete(key);\n    },\n  };\n}\n\nexport interface CookieOptions {\n  days?: number;\n  path?: string;\n  sameSite?: \"lax\" | \"strict\" | \"none\";\n  secure?: boolean;\n  domain?: string;\n}\n\nfunction isBrowser(): boolean {\n  return typeof document !== \"undefined\";\n}\n\n/** Read a cookie value by name from `document.cookie`. */\nexport function getCookie(name: string): string | null {\n  if (!isBrowser()) return null;\n\n  const prefix = `${encodeURIComponent(name)}=`;\n  const parts = document.cookie.split(\"; \");\n\n  for (const part of parts) {\n    if (part.startsWith(prefix)) {\n      return decodeURIComponent(part.slice(prefix.length));\n    }\n  }\n\n  return null;\n}\n\n/** Write a cookie via `document.cookie`. */\nexport function setCookie(\n  name: string,\n  value: string,\n  options: CookieOptions = {},\n): void {\n  if (!isBrowser()) return;\n\n  const {\n    days = 7,\n    path = \"/\",\n    sameSite = \"lax\",\n    secure = typeof location !== \"undefined\" && location.protocol === \"https:\",\n    domain,\n  } = options;\n\n  const maxAge = Math.max(0, Math.floor(days * 24 * 60 * 60));\n  let cookie = `${encodeURIComponent(name)}=${encodeURIComponent(value)}; Path=${path}; Max-Age=${maxAge}; SameSite=${sameSite}`;\n\n  if (secure) cookie += \"; Secure\";\n  if (domain) cookie += `; Domain=${domain}`;\n\n  document.cookie = cookie;\n}\n\n/** Clear a cookie by expiring it. */\nexport function removeCookie(\n  name: string,\n  options: Pick<CookieOptions, \"path\" | \"domain\"> = {},\n): void {\n  if (!isBrowser()) return;\n\n  const { path = \"/\", domain } = options;\n  let cookie = `${encodeURIComponent(name)}=; Path=${path}; Max-Age=0; SameSite=lax`;\n  if (domain) cookie += `; Domain=${domain}`;\n  document.cookie = cookie;\n}\n\nexport function getSessionTokenFromCookie(): string | null {\n  if (memorySessionToken) return memorySessionToken;\n  return getCookie(SESSION_COOKIE_NAME);\n}\n\n/**\n * Persist session on the app origin for reload + Next middleware, and keep an\n * in-memory mirror for same-tick Bearer auth. The API may also set an HttpOnly\n * `md_session` on the API host for credentialed requests.\n */\nexport function setSessionTokenCookie(\n  token: string,\n  options?: CookieOptions,\n): void {\n  memorySessionToken = token;\n  setCookie(SESSION_COOKIE_NAME, token, options);\n}\n\nexport function clearSessionTokenCookie(\n  options?: Pick<CookieOptions, \"path\" | \"domain\">,\n): void {\n  memorySessionToken = null;\n  removeCookie(SESSION_COOKIE_NAME, options);\n}\n\n/** Browser cookie-backed storage for non-secret prefs only. */\nexport function createCookieStorage(\n  options: CookieOptions = {},\n): StorageAdapter {\n  return {\n    getItem(key: string) {\n      if (key === SESSION_COOKIE_NAME) return getSessionTokenFromCookie();\n      return getCookie(key);\n    },\n    setItem(key: string, value: string) {\n      if (key === SESSION_COOKIE_NAME) {\n        setSessionTokenCookie(value, options);\n        return;\n      }\n      setCookie(key, value, options);\n    },\n    removeItem(key: string) {\n      if (key === SESSION_COOKIE_NAME) {\n        clearSessionTokenCookie({\n          path: options.path,\n          domain: options.domain,\n        });\n        return;\n      }\n      removeCookie(key, {\n        path: options.path,\n        domain: options.domain,\n      });\n    },\n  };\n}\n"]}

package/package.json

@@ -0,0 +1,31 @@
+{
+  "name": "@meindesk/sdk",
+  "version": "0.1.0",
+  "description": "Meindesk Auth JavaScript/TypeScript SDK",
+  "license": "MIT",
+  "type": "module",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js",
+      "default": "./dist/index.js"
+    }
+  },
+  "files": [
+    "dist"
+  ],
+  "publishConfig": {
+    "access": "public"
+  },
+  "devDependencies": {
+    "@types/node": "^22.15.29",
+    "typescript": "^5.8.3",
+    "@meindesk/typescript-config": "0.0.0"
+  },
+  "scripts": {
+    "build": "tsup",
+    "lint": "tsc --noEmit"
+  },
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts"
+}