@mosano-product-framework/sdk 0.2.0

package/dist/identity/v0.d.ts

@@ -0,0 +1,594 @@
+import { MPFClient } from '../client/core/client.js';
+import type { ClientConfig, RequestOptions } from '../client/core/types.js';
+import type { OAuthStateStore } from '../auth/oauth-state.js';
+import type * as Types from './types.js';
+/**
+ * Configuration for the identity client.
+ */
+export interface AuthClientV0Config extends ClientConfig {
+    /**
+     * Optional store for the OAuth CSRF state. When provided,
+     * `getGoogleOAuthURL` persists the minted state automatically so it survives
+     * the redirect.
+     *
+     * Sending it back stays explicit — `GoogleOAuthCallbackRequest.state` is
+     * required — because a security parameter should not be injected invisibly.
+     */
+    oauthStateStore?: OAuthStateStore;
+}
+/**
+ * Auth API v0 client
+ *
+ * Provides methods for authentication, user management, sessions,
+ * password recovery, and multi-tenant operations.
+ */
+export declare class AuthClientV0 extends MPFClient {
+    /** Optional OAuth state store; see {@link AuthClientV0Config.oauthStateStore}. */
+    private readonly oauthStateStore?;
+    constructor(config: AuthClientV0Config);
+    /**
+     * Wraps request options with skipAuth: true for public endpoints
+     * that do not require authentication headers.
+     */
+    private publicOptions;
+    /**
+     * Register a new user with email and password
+     *
+     * Creates a new user account and returns access and refresh tokens.
+     *
+     * @param data - User registration data
+     * @param options - Optional request options
+     * @returns Access and refresh tokens
+     */
+    signUpEmailPassword(data: Types.CreateUserRequest, options?: RequestOptions): Promise<Types.AccessDataResponse>;
+    /**
+     * Login with email and password
+     *
+     * Authenticates a user and returns access and refresh tokens.
+     *
+     * @param data - Login credentials
+     * @param options - Optional request options
+     * @returns Access and refresh tokens
+     */
+    signInEmailPassword(data: Types.LoginRequest, options?: RequestOptions): Promise<Types.LoginResponse>;
+    /**
+     * Verify MFA code to complete login
+     *
+     * After a login attempt returns mfa_required, submit the TOTP code
+     * along with the MFA ticket to complete authentication.
+     *
+     * @param data - MFA ticket and TOTP code
+     * @param options - Optional request options
+     * @returns Access and refresh tokens
+     */
+    verifyMFA(data: Types.MFAVerifyRequest, options?: RequestOptions): Promise<Types.AccessDataResponse>;
+    /**
+     * Verify MFA setup to complete first-time enrollment and login
+     *
+     * After a login attempt returns mfa_setup_required, verify the TOTP
+     * setup by submitting a code from the authenticator app.
+     *
+     * @param data - MFA ticket and verification code
+     * @param options - Optional request options
+     * @returns Access and refresh tokens
+     */
+    verifyMFASetup(data: Types.MFASetupVerifyRequest, options?: RequestOptions): Promise<Types.AccessDataResponse>;
+    /**
+     * Send password recovery code to email
+     *
+     * Initiates the password recovery process by sending a verification code.
+     *
+     * @param data - Email address for recovery
+     * @param options - Optional request options
+     * @returns Success response
+     */
+    forgotPasswordWithEmail(data: Types.SendRecoveryCodeRequest, options?: RequestOptions): Promise<Types.SuccessResponse>;
+    /**
+     * Verify password recovery code
+     *
+     * Verifies the recovery code and returns a recovery token for password reset.
+     *
+     * @param data - Email and verification code
+     * @param options - Optional request options
+     * @returns Recovery token for password reset
+     */
+    verifyRecoveryCode(data: Types.VerifyRecoveryCodeRequest, options?: RequestOptions): Promise<Types.RecoveryTokenResponse>;
+    /**
+     * Reset password with recovery token
+     *
+     * Resets the user's password and returns new access and refresh tokens.
+     *
+     * @param data - Recovery token and new password
+     * @param options - Optional request options
+     * @returns Access and refresh tokens
+     */
+    resetPassword(data: Types.ResetPasswordRequest, options?: RequestOptions): Promise<Types.AccessDataResponse>;
+    /**
+     * Renew session with refresh token
+     *
+     * Exchanges a valid refresh token for new access and refresh tokens.
+     *
+     * Tenant is selected per request via the `X-MPF-Tenant` header, so a renewal
+     * neither takes nor changes a tenant.
+     *
+     * @param data - Refresh token
+     * @param options - Optional request options
+     * @returns Access and refresh tokens
+     */
+    renewSession(data: Types.RenewSessionRequest, options?: RequestOptions): Promise<Types.AccessDataResponse>;
+    /**
+     * Revoke session (logout)
+     *
+     * Revokes the session associated with the provided refresh token.
+     * Requires authentication.
+     *
+     * @param data - Refresh token to revoke
+     * @param options - Optional request options
+     * @returns Success response
+     */
+    revokeSession(data: Types.RevokeSessionRequest, options?: RequestOptions): Promise<Types.SuccessResponse>;
+    /**
+     * List pending invitations for the authenticated user
+     *
+     * Returns all pending invitations for the currently authenticated user.
+     * Requires authentication.
+     *
+     * @param options - Optional request options
+     * @returns Array of pending invitations
+     */
+    listMyInvitations(options?: RequestOptions): Promise<Types.PendingInvitationResponse[]>;
+    /**
+     * Preview an invitation (public, pre-auth).
+     *
+     * Returns the tenant, role, and inviter display name for the
+     * invitation-acceptance page. Email is intentionally omitted. Use this
+     * to render the accept page before the user signs in.
+     *
+     * @param token - Invitation token
+     * @param options - Optional request options
+     * @returns Public-safe invitation preview
+     */
+    previewInvitation(token: string, options?: RequestOptions): Promise<Types.InvitationPreviewResponse>;
+    /**
+     * Accept an invitation.
+     *
+     * Requires the user to be authenticated. The user's primary verified
+     * email must match the invitation. Creates the membership row.
+     *
+     * @param token - Invitation token
+     * @param options - Optional request options
+     * @returns Acceptance result (invitation + new membership)
+     */
+    acceptInvitation(token: string, options?: RequestOptions): Promise<Types.AcceptInvitationResponse>;
+    /**
+     * Revoke a pending invitation. Caller must be a manager of the tenant
+     * that issued the invitation.
+     *
+     * @param invitationId - Invitation ID (not the token)
+     * @param options - Optional request options
+     */
+    revokeInvitation(invitationId: string, options?: RequestOptions): Promise<Types.SuccessResponse>;
+    /**
+     * Health check endpoint
+     *
+     * Returns the health status of the service.
+     *
+     * @param options - Optional request options
+     * @returns Health status
+     */
+    healthCheck(options?: RequestOptions): Promise<Types.HealthResponse>;
+    /**
+     * Get current user profile
+     *
+     * Returns the authenticated user's profile information.
+     * Requires authentication.
+     *
+     * @param options - Optional request options
+     * @returns User profile
+     */
+    getMe(options?: RequestOptions): Promise<Types.UserProfileResponse>;
+    /**
+     * Update current user profile
+     *
+     * Updates the authenticated user's profile information.
+     * Requires authentication.
+     *
+     * @param data - Profile update data
+     * @param options - Optional request options
+     * @returns Updated user profile
+     */
+    updateMe(data: Types.UpdateProfileRequest, options?: RequestOptions): Promise<Types.SuccessResponse>;
+    /**
+     * List user emails
+     *
+     * Returns all email addresses associated with the authenticated user.
+     * Requires authentication.
+     *
+     * @param options - Optional request options
+     * @returns Array of email addresses
+     */
+    listEmails(options?: RequestOptions): Promise<Types.EmailResponse[]>;
+    /**
+     * Add a new email address
+     *
+     * Adds a new email address to the authenticated user's account.
+     * A verification code will be sent to the email.
+     * Requires authentication.
+     *
+     * @param data - Email address to add
+     * @param options - Optional request options
+     * @returns Added email information
+     */
+    addEmail(data: Types.AddEmailRequest, options?: RequestOptions): Promise<Types.EmailResponse>;
+    /**
+     * Verify an email address
+     *
+     * Verifies an email address using a verification code.
+     * Requires authentication.
+     *
+     * @param emailId - Email ID to verify
+     * @param data - Verification code
+     * @param options - Optional request options
+     * @returns Success response
+     */
+    verifyEmail(emailId: string, data: Types.VerifyContactRequest, options?: RequestOptions): Promise<Types.SuccessResponse>;
+    /**
+     * Delete an email address
+     *
+     * Removes an email address from the authenticated user's account.
+     * Cannot delete the primary email.
+     * Requires authentication.
+     *
+     * @param emailId - Email ID to delete
+     * @param options - Optional request options
+     * @returns Success response
+     */
+    deleteEmail(emailId: string, options?: RequestOptions): Promise<Types.SuccessResponse>;
+    /**
+     * Set email as primary
+     *
+     * Sets the specified email address as the primary email for the user.
+     * Email must be verified before it can be set as primary.
+     * Requires authentication.
+     *
+     * @param emailId - Email ID to set as primary
+     * @param options - Optional request options
+     * @returns Success response
+     */
+    setPrimaryEmail(emailId: string, options?: RequestOptions): Promise<Types.SuccessResponse>;
+    /**
+     * Send email verification code
+     *
+     * Sends a verification code to the authenticated user's primary email address.
+     * Use verifyEmail() to complete the verification.
+     * Requires authentication.
+     *
+     * @param options - Optional request options
+     * @returns Success response
+     */
+    sendEmailVerification(options?: RequestOptions): Promise<Types.SuccessResponse>;
+    /**
+     * List user phones
+     *
+     * Returns all phone numbers associated with the authenticated user.
+     * Requires authentication.
+     *
+     * @param options - Optional request options
+     * @returns Array of phone numbers
+     */
+    listPhones(options?: RequestOptions): Promise<Types.PhoneResponse[]>;
+    /**
+     * Add a new phone number
+     *
+     * Adds a new phone number to the authenticated user's account.
+     * A verification code will be sent to the phone.
+     * Requires authentication.
+     *
+     * @param data - Phone number to add (E.164 format)
+     * @param options - Optional request options
+     * @returns Added phone information
+     */
+    addPhone(data: Types.AddPhoneRequest, options?: RequestOptions): Promise<Types.PhoneResponse>;
+    /**
+     * Verify a phone number
+     *
+     * Verifies a phone number using a verification code.
+     * Requires authentication.
+     *
+     * @param phoneId - Phone ID to verify
+     * @param data - Verification code
+     * @param options - Optional request options
+     * @returns Success response
+     */
+    verifyPhone(phoneId: string, data: Types.VerifyContactRequest, options?: RequestOptions): Promise<Types.SuccessResponse>;
+    /**
+     * Delete a phone number
+     *
+     * Removes a phone number from the authenticated user's account.
+     * Cannot delete the primary phone.
+     * Requires authentication.
+     *
+     * @param phoneId - Phone ID to delete
+     * @param options - Optional request options
+     * @returns Success response
+     */
+    deletePhone(phoneId: string, options?: RequestOptions): Promise<Types.SuccessResponse>;
+    /**
+     * Set phone as primary
+     *
+     * Sets the specified phone number as the primary phone for the user.
+     * Phone must be verified before it can be set as primary.
+     * Requires authentication.
+     *
+     * @param phoneId - Phone ID to set as primary
+     * @param options - Optional request options
+     * @returns Success response
+     */
+    setPrimaryPhone(phoneId: string, options?: RequestOptions): Promise<Types.SuccessResponse>;
+    /**
+     * List user sessions
+     *
+     * Returns all active sessions for the authenticated user.
+     * Requires authentication.
+     *
+     * @param options - Optional request options
+     * @returns Array of sessions
+     */
+    listSessions(options?: RequestOptions): Promise<Types.SessionResponse[]>;
+    /**
+     * Delete a session
+     *
+     * Revokes a specific session for the authenticated user.
+     * Requires authentication.
+     *
+     * @param sessionId - Session ID to delete
+     * @param options - Optional request options
+     * @returns Success response
+     */
+    deleteSession(sessionId: string, options?: RequestOptions): Promise<Types.SuccessResponse>;
+    /**
+     * List authorized OAuth clients
+     *
+     * Returns all OAuth clients authorized by the authenticated user.
+     * Requires authentication.
+     *
+     * @param options - Optional request options
+     * @returns Array of OAuth clients
+     */
+    listClients(options?: RequestOptions): Promise<Types.ClientResponse[]>;
+    /**
+     * Revoke OAuth client authorization
+     *
+     * Revokes authorization for a specific OAuth client.
+     * Requires authentication.
+     *
+     * @param clientId - Client ID to revoke
+     * @param options - Optional request options
+     * @returns Success response
+     */
+    deleteClient(clientId: string, options?: RequestOptions): Promise<Types.SuccessResponse>;
+    /**
+     * Update password (authenticated)
+     *
+     * Updates the authenticated user's password.
+     * Requires authentication.
+     *
+     * @param data - Current and new password
+     * @param options - Optional request options
+     * @returns Success response
+     */
+    updatePassword(data: Types.UpdatePasswordRequest, options?: RequestOptions): Promise<Types.SuccessResponse>;
+    /**
+     * Create a new tenant
+     *
+     * Creates a new tenant organization. The authenticated user becomes the owner.
+     * Requires authentication.
+     *
+     * @param data - Tenant creation data
+     * @param options - Optional request options
+     * @returns Created tenant information
+     */
+    createTenant(data: Types.CreateTenantRequest, options?: RequestOptions): Promise<Types.TenantResponse>;
+    /**
+     * List current user's tenants
+     *
+     * Returns all tenants the authenticated user is a member of.
+     * Requires authentication.
+     *
+     * @param options - Optional request options
+     * @returns Array of tenant information
+     */
+    listMyTenants(options?: RequestOptions): Promise<Types.TenantResponse[]>;
+    /**
+     * List tenant members
+     *
+     * Returns all members of the specified tenant.
+     * Requires authentication and membership in the tenant.
+     *
+     * @param tenantId - Tenant ID
+     * @param options - Optional request options
+     * @returns Array of tenant members
+     */
+    listTenantMembers(tenantId: string, options?: RequestOptions): Promise<Types.MembershipResponse[]>;
+    /**
+     * Invite a member to tenant
+     *
+     * Sends an invitation to join the tenant. Requires authentication and
+     * owner/admin role on the tenant.
+     *
+     * @param tenantId - Target tenant ID
+     * @param data - Invitation data
+     * @param options - Optional request options
+     * @returns Invitation result, including a copyable accept_url
+     */
+    inviteTenantMember(tenantId: string, data: Types.InviteMemberRequest, options?: RequestOptions): Promise<Types.InvitationResponse>;
+    /**
+     * List pending invitations issued by the authenticated caller for a tenant.
+     *
+     * Returns only invitations whose `invited_by` matches the caller. Lets the
+     * caller copy the `accept_url` of an invite they previously sent (for
+     * example, to re-share if email delivery failed). Callers without a
+     * membership, and members who never issued an invite for this tenant,
+     * get an empty array.
+     *
+     * @param tenantId - Tenant ID
+     * @param options - Optional request options
+     * @returns Array of invitations issued by the caller
+     */
+    listTenantInvitationsIssuedByMe(tenantId: string, options?: RequestOptions): Promise<Types.IssuedInvitationResponse[]>;
+    /**
+     * Update member role
+     *
+     * Updates the role of a tenant member.
+     * Requires authentication and owner role in the tenant.
+     *
+     * @param tenantId - Tenant ID
+     * @param userId - User ID of the member
+     * @param data - New role
+     * @param options - Optional request options
+     * @returns Updated membership information
+     */
+    updateTenantMemberRole(tenantId: string, userId: string, data: Types.UpdateMemberRoleRequest, options?: RequestOptions): Promise<Types.MembershipResponse>;
+    /**
+     * Remove member from tenant
+     *
+     * Removes a member from the tenant.
+     * Cannot remove the last owner.
+     * Requires authentication and admin/owner role in the tenant.
+     *
+     * @param tenantId - Tenant ID
+     * @param userId - User ID of the member to remove
+     * @param options - Optional request options
+     * @returns Success response
+     */
+    removeTenantMember(tenantId: string, userId: string, options?: RequestOptions): Promise<Types.SuccessResponse>;
+    /**
+     * Setup TOTP two-factor authentication
+     *
+     * Initializes TOTP setup and returns the secret, QR code URL, and backup codes.
+     * The setup must be verified with verifyTOTP() before it becomes active.
+     * Requires authentication.
+     *
+     * @param options - Optional request options
+     * @returns TOTP setup data including secret and backup codes
+     */
+    setupTOTP(options?: RequestOptions): Promise<Types.TOTPSetupResponse>;
+    /**
+     * Verify TOTP setup
+     *
+     * Verifies a TOTP code to complete the 2FA setup process.
+     * After verification, TOTP will be required on future logins.
+     * Requires authentication.
+     *
+     * @param data - TOTP verification code
+     * @param options - Optional request options
+     * @returns Success response
+     */
+    verifyTOTP(data: Types.VerifyTOTPRequest, options?: RequestOptions): Promise<Types.SuccessResponse>;
+    /**
+     * Disable TOTP two-factor authentication
+     *
+     * Disables TOTP 2FA. Requires a valid TOTP code to confirm.
+     * Requires authentication.
+     *
+     * @param data - TOTP code to confirm disable
+     * @param options - Optional request options
+     * @returns Success response
+     */
+    disableTOTP(data: Types.DisableTOTPRequest, options?: RequestOptions): Promise<Types.SuccessResponse>;
+    /**
+     * Begin passkey login
+     *
+     * Starts the WebAuthn authentication process.
+     * Returns options to pass to navigator.credentials.get().
+     *
+     * @param options - Optional request options
+     * @returns WebAuthn request options
+     */
+    beginPasskeyLogin(options?: RequestOptions): Promise<Types.BeginPasskeyLoginResponse>;
+    /**
+     * Complete passkey login
+     *
+     * Completes the WebAuthn authentication and returns access tokens.
+     *
+     * @param data - WebAuthn assertion result from navigator.credentials.get()
+     * @param options - Optional request options
+     * @returns Access and refresh tokens
+     */
+    finishPasskeyLogin(data: Types.FinishPasskeyLoginRequest, options?: RequestOptions): Promise<Types.AccessDataResponse>;
+    /**
+     * Begin passkey registration
+     *
+     * Starts the WebAuthn registration process for the authenticated user.
+     * Returns options to pass to navigator.credentials.create().
+     * Requires authentication.
+     *
+     * @param options - Optional request options
+     * @returns WebAuthn creation options
+     */
+    beginPasskeyRegistration(options?: RequestOptions): Promise<Types.BeginPasskeyRegistrationResponse>;
+    /**
+     * Complete passkey registration
+     *
+     * Completes the WebAuthn registration with the attestation result.
+     * Requires authentication.
+     *
+     * @param data - WebAuthn attestation result and optional passkey name
+     * @param options - Optional request options
+     * @returns Success response
+     */
+    finishPasskeyRegistration(data: Types.FinishPasskeyRegistrationRequest, options?: RequestOptions): Promise<Types.PasskeyResponse>;
+    /**
+     * List registered passkeys
+     *
+     * Returns all passkeys registered by the authenticated user.
+     * Requires authentication.
+     *
+     * @param options - Optional request options
+     * @returns Array of passkey information
+     */
+    listPasskeys(options?: RequestOptions): Promise<Types.PasskeyResponse[]>;
+    /**
+     * Delete a passkey
+     *
+     * Removes a registered passkey from the authenticated user's account.
+     * If the user has TOTP 2FA enabled, a valid TOTP code must be provided.
+     * Requires authentication.
+     *
+     * @param passkeyId - Passkey ID to delete
+     * @param data - Optional request body with TOTP code for 2FA verification
+     * @param options - Optional request options
+     * @returns Success response
+     */
+    deletePasskey(passkeyId: string, data?: Types.DeletePasskeyRequest, options?: RequestOptions): Promise<Types.SuccessResponse>;
+    /**
+     * Get Google OAuth authorization URL and its CSRF state.
+     *
+     * Returns `{ url, state }`. Redirect the user to `url`, and keep `state` —
+     * `handleGoogleOAuthCallback` requires it. When the client was constructed
+     * with an `oauthStateStore`, the state is persisted here automatically.
+     *
+     * @param params - Query parameters including redirect_uri
+     * @param options - Optional request options
+     * @returns The authorization URL and the single-use state to round-trip
+     */
+    getGoogleOAuthURL(params: {
+        redirect_uri: string;
+    }, options?: RequestOptions): Promise<Types.GoogleOAuthURLResponse>;
+    /**
+     * Handle Google OAuth callback
+     *
+     * Exchanges the Google OAuth authorization code for access tokens.
+     * Creates a new user if one doesn't exist with the Google email.
+     *
+     * The `state` from `getGoogleOAuthURL` is **required**: the server validates
+     * it before exchanging the code, and rejects a mismatch, absence, expiry or
+     * reuse. See {@link Types.GoogleOAuthCallbackRequest.state}.
+     *
+     * @param data - OAuth callback data: code, redirect_uri and state
+     * @param options - Optional request options
+     * @returns Access and refresh tokens
+     * @throws {MPFValidationError} If `state` is missing or empty (client-side).
+     */
+    handleGoogleOAuthCallback(data: Types.GoogleOAuthCallbackRequest, options?: RequestOptions): Promise<Types.AccessDataResponse>;
+}

package/dist/index.d.ts

@@ -0,0 +1,50 @@
+/**
+ * MPF SDK — root barrel.
+ *
+ * The root exposes the four non-React modules as NAMESPACES rather than as flat
+ * re-exports, so that a name is always qualified by the layer it belongs to:
+ *
+ * ```ts
+ * import { client, auth, identity, storage } from '@mosano-product-framework/sdk';
+ *
+ * const api = identity.createAuthClient({ baseUrl });
+ * const selection = auth.createTenantSelection();
+ * if (err instanceof client.MPFAPIError) { ... }
+ * ```
+ *
+ * A default export with the same shape is provided for
+ * `import sdk from '@mosano-product-framework/sdk'`.
+ *
+ * ## What is deliberately NOT here
+ *
+ * **`react`.** Not even as a namespace. React is an OPTIONAL peer dependency; a
+ * static re-export from this file would put `react` in the module graph of every
+ * consumer, so merely importing the package would require React to be installed
+ * — breaking plain-Node consumers (this repo's own `e2e/` suite among them).
+ * Import from `@mosano-product-framework/sdk/react`.
+ *
+ * **`createGraphQLClient` / `createGraphQLWsTransport`.** Same reasoning for the
+ * optional `graphql-ws` peer: the `client` namespace below is the peer-free half
+ * of `./client`. Import from `@mosano-product-framework/sdk/client` for
+ * subscriptions.
+ *
+ * Both rules are enforced by `tests/module-boundaries.test.ts`.
+ *
+ * @packageDocumentation
+ */
+export * as client from './client/peer-free.js';
+export * as auth from './auth/index.js';
+export * as identity from './identity/index.js';
+export * as storage from './storage/index.js';
+import * as clientNs from './client/peer-free.js';
+import * as authNs from './auth/index.js';
+import * as identityNs from './identity/index.js';
+import * as storageNs from './storage/index.js';
+/** Same shape as the named namespace exports above. */
+declare const _default: {
+    client: typeof clientNs;
+    auth: typeof authNs;
+    identity: typeof identityNs;
+    storage: typeof storageNs;
+};
+export default _default;

package/dist/index.js

@@ -0,0 +1,24 @@
+import { peer_free_exports } from './chunk-GQJ3QQPH.js';
+export { peer_free_exports as client } from './chunk-GQJ3QQPH.js';
+import { auth_exports } from './chunk-GPWGOYCA.js';
+export { auth_exports as auth } from './chunk-GPWGOYCA.js';
+import { identity_exports } from './chunk-XAXFIIRT.js';
+export { identity_exports as identity } from './chunk-XAXFIIRT.js';
+import './chunk-K2ELAI2X.js';
+import { storage_exports } from './chunk-EXPYHNPV.js';
+export { storage_exports as storage } from './chunk-EXPYHNPV.js';
+import './chunk-LRM6JJ63.js';
+import './chunk-7WAV52EO.js';
+import './chunk-AJWM5MDZ.js';
+
+// src/index.ts
+var src_default = {
+  client: peer_free_exports,
+  auth: auth_exports,
+  identity: identity_exports,
+  storage: storage_exports
+};
+
+export { src_default as default };
+//# sourceMappingURL=index.js.map
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;AA8CA,IAAO,WAAA,GAAQ;AAAA,EACb,MAAA,EAAQ,iBAAA;AAAA,EACR,IAAA,EAAM,YAAA;AAAA,EACN,QAAA,EAAU,gBAAA;AAAA,EACV,OAAA,EAAS;AACX","file":"index.js","sourcesContent":["/**\n * MPF SDK — root barrel.\n *\n * The root exposes the four non-React modules as NAMESPACES rather than as flat\n * re-exports, so that a name is always qualified by the layer it belongs to:\n *\n * ```ts\n * import { client, auth, identity, storage } from '@mosano-product-framework/sdk';\n *\n * const api = identity.createAuthClient({ baseUrl });\n * const selection = auth.createTenantSelection();\n * if (err instanceof client.MPFAPIError) { ... }\n * ```\n *\n * A default export with the same shape is provided for\n * `import sdk from '@mosano-product-framework/sdk'`.\n *\n * ## What is deliberately NOT here\n *\n * **`react`.** Not even as a namespace. React is an OPTIONAL peer dependency; a\n * static re-export from this file would put `react` in the module graph of every\n * consumer, so merely importing the package would require React to be installed\n * — breaking plain-Node consumers (this repo's own `e2e/` suite among them).\n * Import from `@mosano-product-framework/sdk/react`.\n *\n * **`createGraphQLClient` / `createGraphQLWsTransport`.** Same reasoning for the\n * optional `graphql-ws` peer: the `client` namespace below is the peer-free half\n * of `./client`. Import from `@mosano-product-framework/sdk/client` for\n * subscriptions.\n *\n * Both rules are enforced by `tests/module-boundaries.test.ts`.\n *\n * @packageDocumentation\n */\n\nexport * as client from './client/peer-free.js';\nexport * as auth from './auth/index.js';\nexport * as identity from './identity/index.js';\nexport * as storage from './storage/index.js';\n\nimport * as clientNs from './client/peer-free.js';\nimport * as authNs from './auth/index.js';\nimport * as identityNs from './identity/index.js';\nimport * as storageNs from './storage/index.js';\n\n/** Same shape as the named namespace exports above. */\nexport default {\n  client: clientNs,\n  auth: authNs,\n  identity: identityNs,\n  storage: storageNs,\n};\n"]}