@nvisy/sdk 0.53.0 → 0.55.0

package/dist/index.js

@@ -1,63 +1,9 @@
-import { n as DEFAULTS, r as VERSION, t as errorMiddleware } from "./error-D_h2zq6T.js";
 import { n as NvisyError, t as NvisyApiError } from "./errors-ChRSBkhj.js";
-import { S as Account, _ as Capabilities, a as Status, b as Analytics, c as Providers, d as Notifications, f as Members, g as Connections, h as Detections, i as Syncs, l as Policies, m as Documents, n as Webhooks, o as Reviews, p as Invites, r as Threads, s as Redactions, t as Workspaces, u as Pipelines, v as Auth, x as Activities, y as ApiTokens } from "./services-DFJfjW1b.js";
-import createClient from "openapi-fetch";
+import { i as VERSION, n as resolveDefaults, r as DEFAULTS, t as createApiClient } from "./http-BRaKBzAA.js";
+import { C as Activities, S as Analytics, _ as Detections, a as Status, b as Auth, c as Providers, d as Notifications, f as Members, g as Documents, i as Syncs, l as Policies, n as Webhooks, o as Reviews, p as Invites, r as Threads, s as Redactions, t as Workspaces, u as Pipelines, v as Connections, w as Account, x as ApiTokens, y as Capabilities } from "./services-BMmcawiT.js";
 
-//#region src/middleware/logging.ts
-/**
-* Creates a logging middleware for debugging requests and responses.
-*
-* Logs request method, URL, response status, and timing to console.
-*/
-function createLoggingMiddleware() {
-	return {
-		async onRequest({ request }) {
-			request._startTime = performance.now();
-			return request;
-		},
-		async onResponse({ request, response }) {
-			const start = request._startTime ?? performance.now();
-			const duration = Math.round(performance.now() - start);
-			const url = new URL(request.url);
-			console.log(`[nvisy] ${request.method} ${url.pathname} ${response.status} (${duration}ms)`);
-			if (!response.ok) {
-				const cloned = response.clone();
-				try {
-					const body = await cloned.json();
-					console.error("[nvisy] Response:", JSON.stringify(body, null, 2));
-				} catch {
-					const text = await cloned.text();
-					if (text) console.error("[nvisy] Response:", text);
-				}
-			}
-			return response;
-		},
-		onError({ request, error }) {
-			const start = request._startTime ?? performance.now();
-			const duration = Math.round(performance.now() - start);
-			const url = new URL(request.url);
-			console.error(`[nvisy] ${request.method} ${url.pathname} ERROR (${duration}ms):`, error instanceof Error ? error.message : error);
-		}
-	};
-}
-
-//#endregion
 //#region src/client.ts
 /**
-* @fileoverview Main client for the Nvisy SDK.
-*
-* This module exports the {@link Nvisy} class, which is the primary entry point
-* for interacting with the Nvisy document processing API.
-*
-* @module client
-*
-* @example
-* ```typescript
-* const nvisy = new Nvisy({ apiToken: "your-api-token" });
-* const account = await nvisy.account.getAccount();
-* ```
-*/
-/**
 * Main client class for interacting with the Nvisy document processing API.
 *
 * @example
@@ -68,83 +14,44 @@ function createLoggingMiddleware() {
 * ```
 */
 var Nvisy = class Nvisy {
-	/**
-	* The resolved client configuration with defaults applied.
-	* @internal
-	*/
+	/** The config this client was built from (for {@link withApiToken}). @internal */
 	#config;
+	/** The resolved base URL. @internal */
+	#baseUrl;
 	/**
 	* The underlying openapi-fetch client instance.
 	* @internal
 	*/
 	#api;
 	/**
-	* Creates a new Nvisy client instance.
+	* Creates a new authenticated Nvisy client.
 	*
-	* Authenticate with an `apiToken` (bearer token) or, for a browser session
-	* started by the standalone `login` / `signup`, with `credentials: "include"`
-	* and no token.
+	* Authenticate with an `apiToken` (bearer) or `session: true` (the browser
+	* cookie session established by the guest client's login / signup). For the
+	* pre-auth surface (login / signup / OIDC start, auth capabilities, health),
+	* use {@link NvisyGuest} from `@nvisy/sdk/guest`.
 	*
-	* @param config - Configuration options; omit `apiToken` for a cookie session
+	* @param config - Configuration; provide either `apiToken` or `session: true`
 	* @throws {NvisyError} If an `apiToken` is provided but invalid
 	*
 	* @example
 	* ```typescript
-	* // API token
 	* const nvisy = new Nvisy({ apiToken: "your-api-token" });
-	*
-	* // Browser session
-	* const nvisy = new Nvisy({ credentials: "include" });
-	*
-	* const account = await nvisy.account.getAccount();
+	* // or, after a browser login:
+	* const nvisy = new Nvisy({ session: true });
 	* ```
 	*/
-	constructor(config = {}) {
-		this.#config = {
-			apiToken: this.#resolveApiToken(config.apiToken),
-			credentials: config.credentials,
-			baseUrl: config.baseUrl ?? DEFAULTS.BASE_URL,
-			headers: config.headers ?? {},
-			userAgent: config.userAgent ?? DEFAULTS.USER_AGENT,
-			withLogging: config.withLogging ?? false,
-			fetch: config.fetch
-		};
-		this.#api = this.#createApiClient();
-	}
-	/**
-	* Creates and configures the underlying openapi-fetch client.
-	*
-	* @returns A configured ApiClient instance
-	* @internal
-	*/
-	#createApiClient() {
-		const headers = {
-			"Content-Type": "application/json",
-			"User-Agent": this.#config.userAgent,
-			...this.#config.apiToken ? { Authorization: `Bearer ${this.#config.apiToken}` } : {},
-			...this.#config.headers
-		};
-		const api = createClient({
-			baseUrl: this.#config.baseUrl,
-			headers,
-			fetch: this.#config.fetch,
-			...this.#config.credentials ? { credentials: this.#config.credentials } : {}
+	constructor(config) {
+		this.#config = config;
+		const resolved = resolveDefaults(config);
+		this.#baseUrl = resolved.baseUrl;
+		const usesSession = config.session === true;
+		this.#api = createApiClient({
+			apiToken: usesSession ? void 0 : this.#validateApiToken(config.apiToken),
+			credentials: usesSession ? config.credentials ?? "include" : config.credentials,
+			fetch: config.fetch,
+			...resolved
 		});
-		if (this.#config.withLogging) api.use(createLoggingMiddleware());
-		api.use(errorMiddleware);
-		return api;
-	}
-	/**
-	* Resolves the configured API token: validated when present, or `undefined`
-	* for a browser-session client that authenticates with cookies instead.
-	*
-	* @param apiToken - The configured API token, if any
-	* @returns The trimmed, validated token, or `undefined` when none is given
-	* @throws {NvisyError} If a token is given but invalid
-	* @internal
-	*/
-	#resolveApiToken(apiToken) {
-		return apiToken === void 0 ? void 0 : this.#validateApiToken(apiToken);
 	}
 	/**
 	* Validates an API token format.
@@ -182,9 +89,15 @@ var Nvisy = class Nvisy {
 	* ```
 	*/
 	withApiToken(apiToken) {
+		const { baseUrl, headers, userAgent, credentials, withLogging, fetch } = this.#config;
 		return new Nvisy({
-			...this.#config,
-			apiToken
+			apiToken,
+			baseUrl,
+			headers,
+			userAgent,
+			credentials,
+			withLogging,
+			fetch
 		});
 	}
 	/**
@@ -193,7 +106,7 @@ var Nvisy = class Nvisy {
 	* @returns The configured base URL
 	*/
 	get baseUrl() {
-		return this.#config.baseUrl;
+		return this.#baseUrl;
 	}
 	/**
 	* The underlying openapi-fetch client for direct API access.
@@ -207,7 +120,8 @@ var Nvisy = class Nvisy {
 		return this.#api;
 	}
 	/**
-	* Service for authentication operations (login, signup, logout).
+	* Service for authenticated auth operations (logout, desktop token). Pre-auth
+	* sign-in lives on {@link NvisyGuest}.
 	*/
 	get auth() {
 		return new Auth(this.#api);

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","names":[],"sources":["../src/middleware/logging.ts","../src/client.ts"],"sourcesContent":["import type { Middleware } from \"openapi-fetch\";\n\n/**\n * Creates a logging middleware for debugging requests and responses.\n *\n * Logs request method, URL, response status, and timing to console.\n */\nexport function createLoggingMiddleware(): Middleware {\n\treturn {\n\t\tasync onRequest({ request }) {\n\t\t\tconst start = performance.now();\n\t\t\t(request as Request & { _startTime?: number })._startTime = start;\n\t\t\treturn request;\n\t\t},\n\n\t\tasync onResponse({ request, response }) {\n\t\t\tconst start =\n\t\t\t\t(request as Request & { _startTime?: number })._startTime ??\n\t\t\t\tperformance.now();\n\t\t\tconst duration = Math.round(performance.now() - start);\n\t\t\tconst url = new URL(request.url);\n\n\t\t\tconsole.log(\n\t\t\t\t`[nvisy] ${request.method} ${url.pathname} ${response.status} (${duration}ms)`,\n\t\t\t);\n\n\t\t\tif (!response.ok) {\n\t\t\t\tconst cloned = response.clone();\n\t\t\t\ttry {\n\t\t\t\t\tconst body = await cloned.json();\n\t\t\t\t\tconsole.error(\"[nvisy] Response:\", JSON.stringify(body, null, 2));\n\t\t\t\t} catch {\n\t\t\t\t\tconst text = await cloned.text();\n\t\t\t\t\tif (text) console.error(\"[nvisy] Response:\", text);\n\t\t\t\t}\n\t\t\t}\n\n\t\t\treturn response;\n\t\t},\n\n\t\tonError({ request, error }) {\n\t\t\tconst start =\n\t\t\t\t(request as Request & { _startTime?: number })._startTime ??\n\t\t\t\tperformance.now();\n\t\t\tconst duration = Math.round(performance.now() - start);\n\t\t\tconst url = new URL(request.url);\n\n\t\t\tconsole.error(\n\t\t\t\t`[nvisy] ${request.method} ${url.pathname} ERROR (${duration}ms):`,\n\t\t\t\terror instanceof Error ? error.message : error,\n\t\t\t);\n\t\t},\n\t};\n}\n","/**\n * @fileoverview Main client for the Nvisy SDK.\n *\n * This module exports the {@link Nvisy} class, which is the primary entry point\n * for interacting with the Nvisy document processing API.\n *\n * @module client\n *\n * @example\n * ```typescript\n * const nvisy = new Nvisy({ apiToken: \"your-api-token\" });\n * const account = await nvisy.account.getAccount();\n * ```\n */\n\nimport createClient, { type Client as OpenApiClient } from \"openapi-fetch\";\nimport { type ClientConfig, DEFAULTS } from \"@/config.js\";\nimport { NvisyError } from \"@/errors.js\";\nimport {\n\tcreateLoggingMiddleware,\n\terrorMiddleware,\n} from \"@/middleware/index.js\";\nimport type { paths } from \"@/schema/api.js\";\nimport {\n\tAccount,\n\tActivities,\n\tAnalytics,\n\tApiTokens,\n\tAuth,\n\tCapabilities,\n\tConnections,\n\tDetections,\n\tDocuments,\n\tInvites,\n\tMembers,\n\tNotifications,\n\tPipelines,\n\tPolicies,\n\tProviders,\n\tRedactions,\n\tReviews,\n\tStatus,\n\tSyncs,\n\tThreads,\n\tWebhooks,\n\tWorkspaces,\n} from \"@/services/index.js\";\n\n/**\n * Typed openapi-fetch client for the Nvisy API.\n *\n * This type represents the low-level HTTP client configured with the Nvisy API schema.\n * It's exposed via {@link Nvisy.api} for advanced use cases requiring direct API access.\n */\nexport type ApiClient = OpenApiClient<paths>;\n\n/**\n * Internal configuration state for the client with all fields resolved.\n *\n * @internal\n */\n// `fetch`, `apiToken`, and `credentials` stay optional after resolution: an\n// omitted `fetch` means \"use the global fetch\"; an omitted `apiToken` means a\n// browser-session client (no bearer header); an omitted `credentials` uses the\n// platform default.\ntype ResolvedConfig = Required<\n\tOmit<ClientConfig, \"fetch\" | \"apiToken\" | \"credentials\">\n> &\n\tPick<ClientConfig, \"fetch\" | \"apiToken\" | \"credentials\">;\n\n/**\n * Main client class for interacting with the Nvisy document processing API.\n *\n * @example\n * ```typescript\n * const nvisy = new Nvisy({ apiToken: \"your-api-token\" });\n * const account = await nvisy.account.getAccount();\n * const workspaces = await nvisy.workspaces.listWorkspaces();\n * ```\n */\nexport class Nvisy {\n\t/**\n\t * The resolved client configuration with defaults applied.\n\t * @internal\n\t */\n\treadonly #config: ResolvedConfig;\n\n\t/**\n\t * The underlying openapi-fetch client instance.\n\t * @internal\n\t */\n\treadonly #api: ApiClient;\n\n\t/**\n\t * Creates a new Nvisy client instance.\n\t *\n\t * Authenticate with an `apiToken` (bearer token) or, for a browser session\n\t * started by the standalone `login` / `signup`, with `credentials: \"include\"`\n\t * and no token.\n\t *\n\t * @param config - Configuration options; omit `apiToken` for a cookie session\n\t * @throws {NvisyError} If an `apiToken` is provided but invalid\n\t *\n\t * @example\n\t * ```typescript\n\t * // API token\n\t * const nvisy = new Nvisy({ apiToken: \"your-api-token\" });\n\t *\n\t * // Browser session\n\t * const nvisy = new Nvisy({ credentials: \"include\" });\n\t *\n\t * const account = await nvisy.account.getAccount();\n\t * ```\n\t */\n\tconstructor(config: ClientConfig = {}) {\n\t\tthis.#config = {\n\t\t\tapiToken: this.#resolveApiToken(config.apiToken),\n\t\t\tcredentials: config.credentials,\n\t\t\tbaseUrl: config.baseUrl ?? DEFAULTS.BASE_URL,\n\t\t\theaders: config.headers ?? {},\n\t\t\tuserAgent: config.userAgent ?? DEFAULTS.USER_AGENT,\n\t\t\twithLogging: config.withLogging ?? false,\n\t\t\tfetch: config.fetch,\n\t\t};\n\n\t\tthis.#api = this.#createApiClient();\n\t}\n\n\t/**\n\t * Creates and configures the underlying openapi-fetch client.\n\t *\n\t * @returns A configured ApiClient instance\n\t * @internal\n\t */\n\t#createApiClient(): ApiClient {\n\t\tconst headers: Record<string, string> = {\n\t\t\t\"Content-Type\": \"application/json\",\n\t\t\t\"User-Agent\": this.#config.userAgent,\n\t\t\t// Only send a bearer token when one is configured; a browser-session\n\t\t\t// client authenticates with cookies instead.\n\t\t\t...(this.#config.apiToken\n\t\t\t\t? { Authorization: `Bearer ${this.#config.apiToken}` }\n\t\t\t\t: {}),\n\t\t\t...this.#config.headers,\n\t\t};\n\n\t\tconst api = createClient<paths>({\n\t\t\tbaseUrl: this.#config.baseUrl,\n\t\t\theaders,\n\t\t\t// `undefined` falls back to the global fetch inside openapi-fetch.\n\t\t\tfetch: this.#config.fetch,\n\t\t\t// Omitted `credentials` uses the platform default.\n\t\t\t...(this.#config.credentials\n\t\t\t\t? { credentials: this.#config.credentials }\n\t\t\t\t: {}),\n\t\t});\n\n\t\tif (this.#config.withLogging) {\n\t\t\tapi.use(createLoggingMiddleware());\n\t\t}\n\n\t\tapi.use(errorMiddleware);\n\t\treturn api;\n\t}\n\n\t/**\n\t * Resolves the configured API token: validated when present, or `undefined`\n\t * for a browser-session client that authenticates with cookies instead.\n\t *\n\t * @param apiToken - The configured API token, if any\n\t * @returns The trimmed, validated token, or `undefined` when none is given\n\t * @throws {NvisyError} If a token is given but invalid\n\t * @internal\n\t */\n\t#resolveApiToken(apiToken: string | undefined): string | undefined {\n\t\treturn apiToken === undefined\n\t\t\t? undefined\n\t\t\t: this.#validateApiToken(apiToken);\n\t}\n\n\t/**\n\t * Validates an API token format.\n\t *\n\t * @param apiToken - The API token to validate\n\t * @returns The trimmed API token if valid\n\t * @throws {NvisyError} If the API token is invalid\n\t * @internal\n\t */\n\t#validateApiToken(apiToken: string): string {\n\t\tif (typeof apiToken !== \"string\" || apiToken.trim().length === 0) {\n\t\t\tthrow new NvisyError(\"API token must be a non-empty string\");\n\t\t}\n\n\t\tconst trimmedToken = apiToken.trim();\n\t\tif (trimmedToken.length < 10) {\n\t\t\tthrow new NvisyError(\"API token must be at least 10 characters\");\n\t\t}\n\n\t\tif (!/^[a-zA-Z0-9_.-]+$/.test(trimmedToken)) {\n\t\t\tthrow new NvisyError(\"API token contains invalid characters\");\n\t\t}\n\n\t\treturn trimmedToken;\n\t}\n\n\t/**\n\t * Creates a new client with a different API token.\n\t *\n\t * Returns a new client instance with the new token. The original client\n\t * remains unchanged. All other configuration (base URL, headers, etc.)\n\t * is preserved in the new client.\n\t *\n\t * @param apiToken - The new API token\n\t * @returns A new Nvisy instance with the new token\n\t * @throws {NvisyError} If the API token is invalid\n\t *\n\t * @example\n\t * ```typescript\n\t * const nvisy = new Nvisy({ apiToken: \"original-token\" });\n\t * const newNvisy = nvisy.withApiToken(\"new-token\");\n\t *\n\t * // newNvisy uses the new token\n\t * // nvisy still uses the original token\n\t * ```\n\t */\n\twithApiToken(apiToken: string): Nvisy {\n\t\treturn new Nvisy({ ...this.#config, apiToken });\n\t}\n\n\t/**\n\t * The base URL used for API requests.\n\t *\n\t * @returns The configured base URL\n\t */\n\tget baseUrl(): string {\n\t\treturn this.#config.baseUrl;\n\t}\n\n\t/**\n\t * The underlying openapi-fetch client for direct API access.\n\t *\n\t * Use this for advanced scenarios where you need direct access to the\n\t * HTTP client, such as calling endpoints not covered by the service classes.\n\t *\n\t * @returns The configured ApiClient instance\n\t */\n\tget api(): ApiClient {\n\t\treturn this.#api;\n\t}\n\n\t/**\n\t * Service for authentication operations (login, signup, logout).\n\t */\n\tget auth(): Auth {\n\t\treturn new Auth(this.#api);\n\t}\n\n\t/**\n\t * Service for API status and health checks.\n\t */\n\tget status(): Status {\n\t\treturn new Status(this.#api);\n\t}\n\n\t/**\n\t * Service for managing the authenticated user's account.\n\t */\n\tget account(): Account {\n\t\treturn new Account(this.#api);\n\t}\n\n\t/**\n\t * Service for viewing workspace activities.\n\t */\n\tget activities(): Activities {\n\t\treturn new Activities(this.#api);\n\t}\n\n\t/**\n\t * Service for workspace analytics.\n\t */\n\tget analytics(): Analytics {\n\t\treturn new Analytics(this.#api);\n\t}\n\n\t/**\n\t * Service for managing API tokens.\n\t */\n\tget apiTokens(): ApiTokens {\n\t\treturn new ApiTokens(this.#api);\n\t}\n\n\t/**\n\t * Service for managing connections.\n\t */\n\tget connections(): Connections {\n\t\treturn new Connections(this.#api);\n\t}\n\n\t/**\n\t * Service for document operations (upload, download, delete, review).\n\t */\n\tget documents(): Documents {\n\t\treturn new Documents(this.#api);\n\t}\n\n\t/**\n\t * Service for discussion threads and comments.\n\t */\n\tget threads(): Threads {\n\t\treturn new Threads(this.#api);\n\t}\n\n\t/**\n\t * Service for managing pipelines.\n\t */\n\tget pipelines(): Pipelines {\n\t\treturn new Pipelines(this.#api);\n\t}\n\n\t/**\n\t * Service for managing policies.\n\t */\n\tget policies(): Policies {\n\t\treturn new Policies(this.#api);\n\t}\n\n\t/**\n\t * Service for managing a workspace's inference providers.\n\t */\n\tget providers(): Providers {\n\t\treturn new Providers(this.#api);\n\t}\n\n\t/**\n\t * Service for reading the deployment's capabilities (labels, recognizers,\n\t * connectors, auth methods).\n\t */\n\tget capabilities(): Capabilities {\n\t\treturn new Capabilities(this.#api);\n\t}\n\n\t/**\n\t * Service for managing workspace invitations.\n\t */\n\tget invites(): Invites {\n\t\treturn new Invites(this.#api);\n\t}\n\n\t/**\n\t * Service for managing workspace members.\n\t */\n\tget members(): Members {\n\t\treturn new Members(this.#api);\n\t}\n\n\t/**\n\t * Service for managing notifications.\n\t */\n\tget notifications(): Notifications {\n\t\treturn new Notifications(this.#api);\n\t}\n\n\t/**\n\t * Service for pipeline detections and their redactions.\n\t */\n\tget detections(): Detections {\n\t\treturn new Detections(this.#api);\n\t}\n\n\t/**\n\t * Service for workspace redactions.\n\t */\n\tget redactions(): Redactions {\n\t\treturn new Redactions(this.#api);\n\t}\n\n\t/**\n\t * Service for document reviews (assigning documents to reviewers).\n\t */\n\tget reviews(): Reviews {\n\t\treturn new Reviews(this.#api);\n\t}\n\n\t/**\n\t * Service for managing connection syncs.\n\t */\n\tget syncs(): Syncs {\n\t\treturn new Syncs(this.#api);\n\t}\n\n\t/**\n\t * Service for managing webhooks.\n\t */\n\tget webhooks(): Webhooks {\n\t\treturn new Webhooks(this.#api);\n\t}\n\n\t/**\n\t * Service for managing workspaces.\n\t */\n\tget workspaces(): Workspaces {\n\t\treturn new Workspaces(this.#api);\n\t}\n}\n"],"mappings":";;;;;;;;;;;AAOA,SAAgB,0BAAsC;CACrD,OAAO;EACN,MAAM,UAAU,EAAE,WAAW;GAE5B,AAAC,QAA8C,aADjC,YAAY,IACsC;GAChE,OAAO;EACR;EAEA,MAAM,WAAW,EAAE,SAAS,YAAY;GACvC,MAAM,QACJ,QAA8C,cAC/C,YAAY,IAAI;GACjB,MAAM,WAAW,KAAK,MAAM,YAAY,IAAI,IAAI,KAAK;GACrD,MAAM,MAAM,IAAI,IAAI,QAAQ,GAAG;GAE/B,QAAQ,IACP,WAAW,QAAQ,OAAO,GAAG,IAAI,SAAS,GAAG,SAAS,OAAO,IAAI,SAAS,IAC3E;GAEA,IAAI,CAAC,SAAS,IAAI;IACjB,MAAM,SAAS,SAAS,MAAM;IAC9B,IAAI;KACH,MAAM,OAAO,MAAM,OAAO,KAAK;KAC/B,QAAQ,MAAM,qBAAqB,KAAK,UAAU,MAAM,MAAM,CAAC,CAAC;IACjE,QAAQ;KACP,MAAM,OAAO,MAAM,OAAO,KAAK;KAC/B,IAAI,MAAM,QAAQ,MAAM,qBAAqB,IAAI;IAClD;GACD;GAEA,OAAO;EACR;EAEA,QAAQ,EAAE,SAAS,SAAS;GAC3B,MAAM,QACJ,QAA8C,cAC/C,YAAY,IAAI;GACjB,MAAM,WAAW,KAAK,MAAM,YAAY,IAAI,IAAI,KAAK;GACrD,MAAM,MAAM,IAAI,IAAI,QAAQ,GAAG;GAE/B,QAAQ,MACP,WAAW,QAAQ,OAAO,GAAG,IAAI,SAAS,UAAU,SAAS,OAC7D,iBAAiB,QAAQ,MAAM,UAAU,KAC1C;EACD;CACD;AACD;;;;;;;;;;;;;;;;;;;;;;;;;;;;AC2BA,IAAa,QAAb,MAAa,MAAM;;;;;CAKlB,AAAS;;;;;CAMT,AAAS;;;;;;;;;;;;;;;;;;;;;;CAuBT,YAAY,SAAuB,CAAC,GAAG;EACtC,KAAK,UAAU;GACd,UAAU,KAAK,iBAAiB,OAAO,QAAQ;GAC/C,aAAa,OAAO;GACpB,SAAS,OAAO,WAAW,SAAS;GACpC,SAAS,OAAO,WAAW,CAAC;GAC5B,WAAW,OAAO,aAAa,SAAS;GACxC,aAAa,OAAO,eAAe;GACnC,OAAO,OAAO;EACf;EAEA,KAAK,OAAO,KAAK,iBAAiB;CACnC;;;;;;;CAQA,mBAA8B;EAC7B,MAAM,UAAkC;GACvC,gBAAgB;GAChB,cAAc,KAAK,QAAQ;GAG3B,GAAI,KAAK,QAAQ,WACd,EAAE,eAAe,UAAU,KAAK,QAAQ,WAAW,IACnD,CAAC;GACJ,GAAG,KAAK,QAAQ;EACjB;EAEA,MAAM,MAAM,aAAoB;GAC/B,SAAS,KAAK,QAAQ;GACtB;GAEA,OAAO,KAAK,QAAQ;GAEpB,GAAI,KAAK,QAAQ,cACd,EAAE,aAAa,KAAK,QAAQ,YAAY,IACxC,CAAC;EACL,CAAC;EAED,IAAI,KAAK,QAAQ,aAChB,IAAI,IAAI,wBAAwB,CAAC;EAGlC,IAAI,IAAI,eAAe;EACvB,OAAO;CACR;;;;;;;;;;CAWA,iBAAiB,UAAkD;EAClE,OAAO,aAAa,SACjB,SACA,KAAK,kBAAkB,QAAQ;CACnC;;;;;;;;;CAUA,kBAAkB,UAA0B;EAC3C,IAAI,OAAO,aAAa,YAAY,SAAS,KAAK,CAAC,CAAC,WAAW,GAC9D,MAAM,IAAI,WAAW,sCAAsC;EAG5D,MAAM,eAAe,SAAS,KAAK;EACnC,IAAI,aAAa,SAAS,IACzB,MAAM,IAAI,WAAW,0CAA0C;EAGhE,IAAI,CAAC,oBAAoB,KAAK,YAAY,GACzC,MAAM,IAAI,WAAW,uCAAuC;EAG7D,OAAO;CACR;;;;;;;;;;;;;;;;;;;;;CAsBA,aAAa,UAAyB;EACrC,OAAO,IAAI,MAAM;GAAE,GAAG,KAAK;GAAS;EAAS,CAAC;CAC/C;;;;;;CAOA,IAAI,UAAkB;EACrB,OAAO,KAAK,QAAQ;CACrB;;;;;;;;;CAUA,IAAI,MAAiB;EACpB,OAAO,KAAK;CACb;;;;CAKA,IAAI,OAAa;EAChB,OAAO,IAAI,KAAK,KAAK,IAAI;CAC1B;;;;CAKA,IAAI,SAAiB;EACpB,OAAO,IAAI,OAAO,KAAK,IAAI;CAC5B;;;;CAKA,IAAI,UAAmB;EACtB,OAAO,IAAI,QAAQ,KAAK,IAAI;CAC7B;;;;CAKA,IAAI,aAAyB;EAC5B,OAAO,IAAI,WAAW,KAAK,IAAI;CAChC;;;;CAKA,IAAI,YAAuB;EAC1B,OAAO,IAAI,UAAU,KAAK,IAAI;CAC/B;;;;CAKA,IAAI,YAAuB;EAC1B,OAAO,IAAI,UAAU,KAAK,IAAI;CAC/B;;;;CAKA,IAAI,cAA2B;EAC9B,OAAO,IAAI,YAAY,KAAK,IAAI;CACjC;;;;CAKA,IAAI,YAAuB;EAC1B,OAAO,IAAI,UAAU,KAAK,IAAI;CAC/B;;;;CAKA,IAAI,UAAmB;EACtB,OAAO,IAAI,QAAQ,KAAK,IAAI;CAC7B;;;;CAKA,IAAI,YAAuB;EAC1B,OAAO,IAAI,UAAU,KAAK,IAAI;CAC/B;;;;CAKA,IAAI,WAAqB;EACxB,OAAO,IAAI,SAAS,KAAK,IAAI;CAC9B;;;;CAKA,IAAI,YAAuB;EAC1B,OAAO,IAAI,UAAU,KAAK,IAAI;CAC/B;;;;;CAMA,IAAI,eAA6B;EAChC,OAAO,IAAI,aAAa,KAAK,IAAI;CAClC;;;;CAKA,IAAI,UAAmB;EACtB,OAAO,IAAI,QAAQ,KAAK,IAAI;CAC7B;;;;CAKA,IAAI,UAAmB;EACtB,OAAO,IAAI,QAAQ,KAAK,IAAI;CAC7B;;;;CAKA,IAAI,gBAA+B;EAClC,OAAO,IAAI,cAAc,KAAK,IAAI;CACnC;;;;CAKA,IAAI,aAAyB;EAC5B,OAAO,IAAI,WAAW,KAAK,IAAI;CAChC;;;;CAKA,IAAI,aAAyB;EAC5B,OAAO,IAAI,WAAW,KAAK,IAAI;CAChC;;;;CAKA,IAAI,UAAmB;EACtB,OAAO,IAAI,QAAQ,KAAK,IAAI;CAC7B;;;;CAKA,IAAI,QAAe;EAClB,OAAO,IAAI,MAAM,KAAK,IAAI;CAC3B;;;;CAKA,IAAI,WAAqB;EACxB,OAAO,IAAI,SAAS,KAAK,IAAI;CAC9B;;;;CAKA,IAAI,aAAyB;EAC5B,OAAO,IAAI,WAAW,KAAK,IAAI;CAChC;AACD"}
+{"version":3,"file":"index.js","names":[],"sources":["../src/client.ts"],"sourcesContent":["/**\n * @fileoverview Main client for the Nvisy SDK.\n *\n * This module exports the {@link Nvisy} class, which is the primary entry point\n * for interacting with the Nvisy document processing API.\n *\n * @module client\n *\n * @example\n * ```typescript\n * const nvisy = new Nvisy({ apiToken: \"your-api-token\" });\n * const account = await nvisy.account.getAccount();\n * ```\n */\n\nimport type { NvisyOptions } from \"@/config.js\";\nimport { NvisyError } from \"@/errors.js\";\nimport { type ApiClient, createApiClient, resolveDefaults } from \"@/http.js\";\nimport {\n\tAccount,\n\tActivities,\n\tAnalytics,\n\tApiTokens,\n\tAuth,\n\tCapabilities,\n\tConnections,\n\tDetections,\n\tDocuments,\n\tInvites,\n\tMembers,\n\tNotifications,\n\tPipelines,\n\tPolicies,\n\tProviders,\n\tRedactions,\n\tReviews,\n\tStatus,\n\tSyncs,\n\tThreads,\n\tWebhooks,\n\tWorkspaces,\n} from \"@/services/index.js\";\n\n/**\n * Typed openapi-fetch client for the Nvisy API. Exposed via {@link Nvisy.api}\n * for advanced use cases requiring direct API access.\n */\nexport type { ApiClient } from \"@/http.js\";\n\n/**\n * Main client class for interacting with the Nvisy document processing API.\n *\n * @example\n * ```typescript\n * const nvisy = new Nvisy({ apiToken: \"your-api-token\" });\n * const account = await nvisy.account.getAccount();\n * const workspaces = await nvisy.workspaces.listWorkspaces();\n * ```\n */\nexport class Nvisy {\n\t/** The config this client was built from (for {@link withApiToken}). @internal */\n\treadonly #config: NvisyOptions;\n\n\t/** The resolved base URL. @internal */\n\treadonly #baseUrl: string;\n\n\t/**\n\t * The underlying openapi-fetch client instance.\n\t * @internal\n\t */\n\treadonly #api: ApiClient;\n\n\t/**\n\t * Creates a new authenticated Nvisy client.\n\t *\n\t * Authenticate with an `apiToken` (bearer) or `session: true` (the browser\n\t * cookie session established by the guest client's login / signup). For the\n\t * pre-auth surface (login / signup / OIDC start, auth capabilities, health),\n\t * use {@link NvisyGuest} from `@nvisy/sdk/guest`.\n\t *\n\t * @param config - Configuration; provide either `apiToken` or `session: true`\n\t * @throws {NvisyError} If an `apiToken` is provided but invalid\n\t *\n\t * @example\n\t * ```typescript\n\t * const nvisy = new Nvisy({ apiToken: \"your-api-token\" });\n\t * // or, after a browser login:\n\t * const nvisy = new Nvisy({ session: true });\n\t * ```\n\t */\n\tconstructor(config: NvisyOptions) {\n\t\tthis.#config = config;\n\t\tconst resolved = resolveDefaults(config);\n\t\tthis.#baseUrl = resolved.baseUrl;\n\n\t\tconst usesSession = config.session === true;\n\t\tthis.#api = createApiClient({\n\t\t\tapiToken: usesSession\n\t\t\t\t? undefined\n\t\t\t\t: this.#validateApiToken(config.apiToken),\n\t\t\t// Session auth sends cookies; default to \"include\" unless the caller\n\t\t\t// overrode `credentials` explicitly.\n\t\t\tcredentials: usesSession\n\t\t\t\t? (config.credentials ?? \"include\")\n\t\t\t\t: config.credentials,\n\t\t\tfetch: config.fetch,\n\t\t\t...resolved,\n\t\t});\n\t}\n\n\t/**\n\t * Validates an API token format.\n\t *\n\t * @param apiToken - The API token to validate\n\t * @returns The trimmed API token if valid\n\t * @throws {NvisyError} If the API token is invalid\n\t * @internal\n\t */\n\t#validateApiToken(apiToken: string | undefined): string {\n\t\tif (typeof apiToken !== \"string\" || apiToken.trim().length === 0) {\n\t\t\tthrow new NvisyError(\"API token must be a non-empty string\");\n\t\t}\n\n\t\tconst trimmedToken = apiToken.trim();\n\t\tif (trimmedToken.length < 10) {\n\t\t\tthrow new NvisyError(\"API token must be at least 10 characters\");\n\t\t}\n\n\t\tif (!/^[a-zA-Z0-9_.-]+$/.test(trimmedToken)) {\n\t\t\tthrow new NvisyError(\"API token contains invalid characters\");\n\t\t}\n\n\t\treturn trimmedToken;\n\t}\n\n\t/**\n\t * Creates a new client with a different API token.\n\t *\n\t * Returns a new client instance with the new token. The original client\n\t * remains unchanged. All other configuration (base URL, headers, etc.)\n\t * is preserved in the new client.\n\t *\n\t * @param apiToken - The new API token\n\t * @returns A new Nvisy instance with the new token\n\t * @throws {NvisyError} If the API token is invalid\n\t *\n\t * @example\n\t * ```typescript\n\t * const nvisy = new Nvisy({ apiToken: \"original-token\" });\n\t * const newNvisy = nvisy.withApiToken(\"new-token\");\n\t *\n\t * // newNvisy uses the new token\n\t * // nvisy still uses the original token\n\t * ```\n\t */\n\twithApiToken(apiToken: string): Nvisy {\n\t\tconst { baseUrl, headers, userAgent, credentials, withLogging, fetch } =\n\t\t\tthis.#config;\n\t\treturn new Nvisy({\n\t\t\tapiToken,\n\t\t\tbaseUrl,\n\t\t\theaders,\n\t\t\tuserAgent,\n\t\t\tcredentials,\n\t\t\twithLogging,\n\t\t\tfetch,\n\t\t});\n\t}\n\n\t/**\n\t * The base URL used for API requests.\n\t *\n\t * @returns The configured base URL\n\t */\n\tget baseUrl(): string {\n\t\treturn this.#baseUrl;\n\t}\n\n\t/**\n\t * The underlying openapi-fetch client for direct API access.\n\t *\n\t * Use this for advanced scenarios where you need direct access to the\n\t * HTTP client, such as calling endpoints not covered by the service classes.\n\t *\n\t * @returns The configured ApiClient instance\n\t */\n\tget api(): ApiClient {\n\t\treturn this.#api;\n\t}\n\n\t/**\n\t * Service for authenticated auth operations (logout, desktop token). Pre-auth\n\t * sign-in lives on {@link NvisyGuest}.\n\t */\n\tget auth(): Auth {\n\t\treturn new Auth(this.#api);\n\t}\n\n\t/**\n\t * Service for API status and health checks.\n\t */\n\tget status(): Status {\n\t\treturn new Status(this.#api);\n\t}\n\n\t/**\n\t * Service for managing the authenticated user's account.\n\t */\n\tget account(): Account {\n\t\treturn new Account(this.#api);\n\t}\n\n\t/**\n\t * Service for viewing workspace activities.\n\t */\n\tget activities(): Activities {\n\t\treturn new Activities(this.#api);\n\t}\n\n\t/**\n\t * Service for workspace analytics.\n\t */\n\tget analytics(): Analytics {\n\t\treturn new Analytics(this.#api);\n\t}\n\n\t/**\n\t * Service for managing API tokens.\n\t */\n\tget apiTokens(): ApiTokens {\n\t\treturn new ApiTokens(this.#api);\n\t}\n\n\t/**\n\t * Service for managing connections.\n\t */\n\tget connections(): Connections {\n\t\treturn new Connections(this.#api);\n\t}\n\n\t/**\n\t * Service for document operations (upload, download, delete, review).\n\t */\n\tget documents(): Documents {\n\t\treturn new Documents(this.#api);\n\t}\n\n\t/**\n\t * Service for discussion threads and comments.\n\t */\n\tget threads(): Threads {\n\t\treturn new Threads(this.#api);\n\t}\n\n\t/**\n\t * Service for managing pipelines.\n\t */\n\tget pipelines(): Pipelines {\n\t\treturn new Pipelines(this.#api);\n\t}\n\n\t/**\n\t * Service for managing policies.\n\t */\n\tget policies(): Policies {\n\t\treturn new Policies(this.#api);\n\t}\n\n\t/**\n\t * Service for managing a workspace's inference providers.\n\t */\n\tget providers(): Providers {\n\t\treturn new Providers(this.#api);\n\t}\n\n\t/**\n\t * Service for reading the deployment's capabilities (labels, recognizers,\n\t * connectors, auth methods).\n\t */\n\tget capabilities(): Capabilities {\n\t\treturn new Capabilities(this.#api);\n\t}\n\n\t/**\n\t * Service for managing workspace invitations.\n\t */\n\tget invites(): Invites {\n\t\treturn new Invites(this.#api);\n\t}\n\n\t/**\n\t * Service for managing workspace members.\n\t */\n\tget members(): Members {\n\t\treturn new Members(this.#api);\n\t}\n\n\t/**\n\t * Service for managing notifications.\n\t */\n\tget notifications(): Notifications {\n\t\treturn new Notifications(this.#api);\n\t}\n\n\t/**\n\t * Service for pipeline detections and their redactions.\n\t */\n\tget detections(): Detections {\n\t\treturn new Detections(this.#api);\n\t}\n\n\t/**\n\t * Service for workspace redactions.\n\t */\n\tget redactions(): Redactions {\n\t\treturn new Redactions(this.#api);\n\t}\n\n\t/**\n\t * Service for document reviews (assigning documents to reviewers).\n\t */\n\tget reviews(): Reviews {\n\t\treturn new Reviews(this.#api);\n\t}\n\n\t/**\n\t * Service for managing connection syncs.\n\t */\n\tget syncs(): Syncs {\n\t\treturn new Syncs(this.#api);\n\t}\n\n\t/**\n\t * Service for managing webhooks.\n\t */\n\tget webhooks(): Webhooks {\n\t\treturn new Webhooks(this.#api);\n\t}\n\n\t/**\n\t * Service for managing workspaces.\n\t */\n\tget workspaces(): Workspaces {\n\t\treturn new Workspaces(this.#api);\n\t}\n}\n"],"mappings":";;;;;;;;;;;;;;;AA2DA,IAAa,QAAb,MAAa,MAAM;;CAElB,AAAS;;CAGT,AAAS;;;;;CAMT,AAAS;;;;;;;;;;;;;;;;;;;CAoBT,YAAY,QAAsB;EACjC,KAAK,UAAU;EACf,MAAM,WAAW,gBAAgB,MAAM;EACvC,KAAK,WAAW,SAAS;EAEzB,MAAM,cAAc,OAAO,YAAY;EACvC,KAAK,OAAO,gBAAgB;GAC3B,UAAU,cACP,SACA,KAAK,kBAAkB,OAAO,QAAQ;GAGzC,aAAa,cACT,OAAO,eAAe,YACvB,OAAO;GACV,OAAO,OAAO;GACd,GAAG;EACJ,CAAC;CACF;;;;;;;;;CAUA,kBAAkB,UAAsC;EACvD,IAAI,OAAO,aAAa,YAAY,SAAS,KAAK,CAAC,CAAC,WAAW,GAC9D,MAAM,IAAI,WAAW,sCAAsC;EAG5D,MAAM,eAAe,SAAS,KAAK;EACnC,IAAI,aAAa,SAAS,IACzB,MAAM,IAAI,WAAW,0CAA0C;EAGhE,IAAI,CAAC,oBAAoB,KAAK,YAAY,GACzC,MAAM,IAAI,WAAW,uCAAuC;EAG7D,OAAO;CACR;;;;;;;;;;;;;;;;;;;;;CAsBA,aAAa,UAAyB;EACrC,MAAM,EAAE,SAAS,SAAS,WAAW,aAAa,aAAa,UAC9D,KAAK;EACN,OAAO,IAAI,MAAM;GAChB;GACA;GACA;GACA;GACA;GACA;GACA;EACD,CAAC;CACF;;;;;;CAOA,IAAI,UAAkB;EACrB,OAAO,KAAK;CACb;;;;;;;;;CAUA,IAAI,MAAiB;EACpB,OAAO,KAAK;CACb;;;;;CAMA,IAAI,OAAa;EAChB,OAAO,IAAI,KAAK,KAAK,IAAI;CAC1B;;;;CAKA,IAAI,SAAiB;EACpB,OAAO,IAAI,OAAO,KAAK,IAAI;CAC5B;;;;CAKA,IAAI,UAAmB;EACtB,OAAO,IAAI,QAAQ,KAAK,IAAI;CAC7B;;;;CAKA,IAAI,aAAyB;EAC5B,OAAO,IAAI,WAAW,KAAK,IAAI;CAChC;;;;CAKA,IAAI,YAAuB;EAC1B,OAAO,IAAI,UAAU,KAAK,IAAI;CAC/B;;;;CAKA,IAAI,YAAuB;EAC1B,OAAO,IAAI,UAAU,KAAK,IAAI;CAC/B;;;;CAKA,IAAI,cAA2B;EAC9B,OAAO,IAAI,YAAY,KAAK,IAAI;CACjC;;;;CAKA,IAAI,YAAuB;EAC1B,OAAO,IAAI,UAAU,KAAK,IAAI;CAC/B;;;;CAKA,IAAI,UAAmB;EACtB,OAAO,IAAI,QAAQ,KAAK,IAAI;CAC7B;;;;CAKA,IAAI,YAAuB;EAC1B,OAAO,IAAI,UAAU,KAAK,IAAI;CAC/B;;;;CAKA,IAAI,WAAqB;EACxB,OAAO,IAAI,SAAS,KAAK,IAAI;CAC9B;;;;CAKA,IAAI,YAAuB;EAC1B,OAAO,IAAI,UAAU,KAAK,IAAI;CAC/B;;;;;CAMA,IAAI,eAA6B;EAChC,OAAO,IAAI,aAAa,KAAK,IAAI;CAClC;;;;CAKA,IAAI,UAAmB;EACtB,OAAO,IAAI,QAAQ,KAAK,IAAI;CAC7B;;;;CAKA,IAAI,UAAmB;EACtB,OAAO,IAAI,QAAQ,KAAK,IAAI;CAC7B;;;;CAKA,IAAI,gBAA+B;EAClC,OAAO,IAAI,cAAc,KAAK,IAAI;CACnC;;;;CAKA,IAAI,aAAyB;EAC5B,OAAO,IAAI,WAAW,KAAK,IAAI;CAChC;;;;CAKA,IAAI,aAAyB;EAC5B,OAAO,IAAI,WAAW,KAAK,IAAI;CAChC;;;;CAKA,IAAI,UAAmB;EACtB,OAAO,IAAI,QAAQ,KAAK,IAAI;CAC7B;;;;CAKA,IAAI,QAAe;EAClB,OAAO,IAAI,MAAM,KAAK,IAAI;CAC3B;;;;CAKA,IAAI,WAAqB;EACxB,OAAO,IAAI,SAAS,KAAK,IAAI;CAC9B;;;;CAKA,IAAI,aAAyB;EAC5B,OAAO,IAAI,WAAW,KAAK,IAAI;CAChC;AACD"}

package/dist/services/index.d.ts

@@ -1,2 +1,2 @@
-import { C as Activities, S as Analytics, _ as Detections, a as Threads, b as Auth, c as Reviews, d as Policies, f as Pipelines, g as Documents, h as Invites, i as Webhooks, l as Redactions, m as Members, o as Syncs, p as Notifications, r as Workspaces, s as Status, u as Providers, v as Connections, w as Account, x as ApiTokens, y as Capabilities } from "../client-DywPcOzJ.js";
-export { Account, Activities, Analytics, ApiTokens, Auth, Capabilities, Connections, Detections, Documents, Invites, Members, Notifications, Pipelines, Policies, Providers, Redactions, Reviews, Status, Syncs, Threads, Webhooks, Workspaces };
+import { C as Activities, S as Analytics, _ as Detections, a as Status, b as Auth, c as Providers, d as Notifications, f as Members, g as Documents, h as GuestAuth, i as Syncs, l as Policies, m as GuestCapabilities, n as Webhooks, o as Reviews, p as Invites, r as Threads, s as Redactions, t as Workspaces, u as Pipelines, v as Connections, w as Account, x as ApiTokens, y as Capabilities } from "../index-CuKzO8Ly.js";
+export { Account, Activities, Analytics, ApiTokens, Auth, Capabilities, Connections, Detections, Documents, GuestAuth, GuestCapabilities, Invites, Members, Notifications, Pipelines, Policies, Providers, Redactions, Reviews, Status, Syncs, Threads, Webhooks, Workspaces };

package/dist/services/index.js

@@ -1,3 +1,3 @@
-import { S as Account, _ as Capabilities, a as Status, b as Analytics, c as Providers, d as Notifications, f as Members, g as Connections, h as Detections, i as Syncs, l as Policies, m as Documents, n as Webhooks, o as Reviews, p as Invites, r as Threads, s as Redactions, t as Workspaces, u as Pipelines, v as Auth, x as Activities, y as ApiTokens } from "../services-DFJfjW1b.js";
+import { C as Activities, S as Analytics, _ as Detections, a as Status, b as Auth, c as Providers, d as Notifications, f as Members, g as Documents, h as GuestAuth, i as Syncs, l as Policies, m as GuestCapabilities, n as Webhooks, o as Reviews, p as Invites, r as Threads, s as Redactions, t as Workspaces, u as Pipelines, v as Connections, w as Account, x as ApiTokens, y as Capabilities } from "../services-BMmcawiT.js";
 
-export { Account, Activities, Analytics, ApiTokens, Auth, Capabilities, Connections, Detections, Documents, Invites, Members, Notifications, Pipelines, Policies, Providers, Redactions, Reviews, Status, Syncs, Threads, Webhooks, Workspaces };
+export { Account, Activities, Analytics, ApiTokens, Auth, Capabilities, Connections, Detections, Documents, GuestAuth, GuestCapabilities, Invites, Members, Notifications, Pipelines, Policies, Providers, Redactions, Reviews, Status, Syncs, Threads, Webhooks, Workspaces };

package/dist/{services-DFJfjW1b.js → services-BMmcawiT.js}

@@ -309,7 +309,9 @@ var ApiTokens = class {
 //#endregion
 //#region src/services/auth.ts
 /**
-* Service for handling authentication operations
+* Authenticated auth operations: ending the current session and minting a
+* desktop token from it. Pre-auth sign-in (login / signup / OIDC start) lives on
+* the guest client ({@link NvisyGuest}).
 */
 var Auth = class {
 	#api;
@@ -317,34 +319,6 @@ var Auth = class {
 		this.#api = api;
 	}
 	/**
-	* Login with email and password, starting a browser session.
-	*
-	* Sets HttpOnly session and CSRF cookies; returns no body. Programmatic
-	* clients should instead create an API token via {@link ApiTokens} and pass
-	* it as `apiToken` when constructing the client.
-	*
-	* @param credentials - Login credentials
-	* @returns Promise that resolves once the session is started
-	* @throws {ApiError} if the request fails
-	*/
-	async loginAccount(credentials) {
-		await this.#api.POST("/auth/login", { body: credentials });
-	}
-	/**
-	* Sign up a new account, starting a browser session.
-	*
-	* Sets HttpOnly session and CSRF cookies; returns no body. Programmatic
-	* clients should instead create an API token via {@link ApiTokens} and pass
-	* it as `apiToken` when constructing the client.
-	*
-	* @param credentials - Signup details
-	* @returns Promise that resolves once the session is started
-	* @throws {ApiError} if the request fails
-	*/
-	async signupAccount(credentials) {
-		await this.#api.POST("/auth/signup", { body: credentials });
-	}
-	/**
 	* Logout, invalidating the current session and clearing its cookies.
 	* @returns Promise that resolves when logout is complete
 	* @throws {ApiError} if the request fails
@@ -353,25 +327,6 @@ var Auth = class {
 		await this.#api.POST("/auth/logout");
 	}
 	/**
-	* Begin an OpenID Connect sign-in with a provider.
-	*
-	* Returns the provider authorize URL to redirect the user to; on consent the
-	* provider redirects to the callback, which signs the user in. Also available
-	* as the standalone `startOidcSignIn` for use without a client.
-	*
-	* @param provider - The identity provider to sign in with
-	* @param query - Optional frontend URL to return to once done
-	* @returns Promise that resolves with the provider authorize URL
-	* @throws {ApiError} if the request fails
-	*/
-	async startOidcSignIn(provider, query) {
-		const { data } = await this.#api.GET("/auth/{provider}/start", { params: {
-			path: { provider },
-			query
-		} });
-		return data;
-	}
-	/**
 	* Mint a long-lived native-app token for a desktop app.
 	*
 	* Requires an active browser session (the desktop login completes in the
@@ -1045,6 +1000,94 @@ var Documents = class {
 	}
 };
 
+//#endregion
+//#region src/services/guest-auth.ts
+/**
+* Pre-auth authentication operations, reachable without an API token: starting
+* a browser session (login / signup) and beginning an OIDC sign-in. Exposed on
+* the guest client ({@link NvisyGuest}).
+*/
+var GuestAuth = class {
+	#api;
+	constructor(api) {
+		this.#api = api;
+	}
+	/**
+	* Login with email and password, starting a browser session.
+	*
+	* Sets HttpOnly session and CSRF cookies; returns no body. For a programmatic
+	* client, create an API token instead and pass it as `apiToken` when
+	* constructing a {@link Nvisy} client.
+	*
+	* @param credentials - Login credentials
+	* @returns Promise that resolves once the session is started
+	* @throws {ApiError} if the request fails
+	*/
+	async loginAccount(credentials) {
+		await this.#api.POST("/auth/login", { body: credentials });
+	}
+	/**
+	* Sign up a new account, starting a browser session.
+	*
+	* Sets HttpOnly session and CSRF cookies; returns no body. For a programmatic
+	* client, create an API token instead and pass it as `apiToken` when
+	* constructing a {@link Nvisy} client.
+	*
+	* @param credentials - Signup details
+	* @returns Promise that resolves once the session is started
+	* @throws {ApiError} if the request fails
+	*/
+	async signupAccount(credentials) {
+		await this.#api.POST("/auth/signup", { body: credentials });
+	}
+	/**
+	* Begin an OpenID Connect sign-in with a provider.
+	*
+	* Returns the provider authorize URL to redirect the user to; on consent the
+	* provider redirects to the callback, which signs the user in.
+	*
+	* @param provider - The identity provider to sign in with
+	* @param query - Optional frontend URL to return to once done
+	* @returns Promise that resolves with the provider authorize URL
+	* @throws {ApiError} if the request fails
+	*/
+	async startOidcSignIn(provider, query) {
+		const { data } = await this.#api.GET("/auth/{provider}/start", { params: {
+			path: { provider },
+			query
+		} });
+		return data;
+	}
+};
+
+//#endregion
+//#region src/services/guest-capabilities.ts
+/**
+* The pre-auth subset of the deployment's capabilities: the sign-in methods it
+* offers. The label / recognizer / connector capability reads require an
+* authenticated client and live on {@link Capabilities}.
+*/
+var GuestCapabilities = class {
+	#api;
+	constructor(api) {
+		this.#api = api;
+	}
+	/**
+	* Get the deployment's available sign-in methods.
+	*
+	* Public: reports whether password sign-in is enabled and which OIDC
+	* providers are configured, so a login screen can render the right buttons
+	* before anyone signs in.
+	*
+	* @returns Promise that resolves with the auth capabilities.
+	* @throws {ApiError} if the request fails
+	*/
+	async getAuthCapabilities() {
+		const { data } = await this.#api.GET("/capabilities/auth");
+		return data;
+	}
+};
+
 //#endregion
 //#region src/services/invites.ts
 /**
@@ -1684,21 +1727,35 @@ var Reviews = class {
 		return data;
 	}
 	/**
-	* Assign (or reassign) a review to a reviewer.
+	* Assign a reviewer to a review (idempotent).
 	* @param workspaceId - Workspace id
 	* @param reviewId - Review ID
-	* @param assignment - Review assignment request (assignee)
+	* @param accountId - Account id of the reviewer to assign
 	* @returns Promise that resolves with the updated review
 	* @throws {ApiError} if the request fails
 	*/
-	async assignReview(workspaceId, reviewId, assignment) {
-		const { data } = await this.#api.PUT("/workspaces/{workspaceId}/reviews/{reviewId}/assign", {
-			params: { path: {
-				workspaceId,
-				reviewId
-			} },
-			body: assignment
-		});
+	async assignReviewer(workspaceId, reviewId, accountId) {
+		const { data } = await this.#api.POST("/workspaces/{workspaceId}/reviews/{reviewId}/assignees/{accountId}", { params: { path: {
+			workspaceId,
+			reviewId,
+			accountId
+		} } });
+		return data;
+	}
+	/**
+	* Remove a reviewer from a review.
+	* @param workspaceId - Workspace id
+	* @param reviewId - Review ID
+	* @param accountId - Account id of the reviewer to remove
+	* @returns Promise that resolves with the updated review
+	* @throws {ApiError} if the request fails
+	*/
+	async unassignReviewer(workspaceId, reviewId, accountId) {
+		const { data } = await this.#api.DELETE("/workspaces/{workspaceId}/reviews/{reviewId}/assignees/{accountId}", { params: { path: {
+			workspaceId,
+			reviewId,
+			accountId
+		} } });
 		return data;
 	}
 	/**
@@ -2311,5 +2368,5 @@ var Workspaces = class {
 };
 
 //#endregion
-export { Account as S, Capabilities as _, Status as a, Analytics as b, Providers as c, Notifications as d, Members as f, Connections as g, Detections as h, Syncs as i, Policies as l, Documents as m, Webhooks as n, Reviews as o, Invites as p, Threads as r, Redactions as s, Workspaces as t, Pipelines as u, Auth as v, Activities as x, ApiTokens as y };
-//# sourceMappingURL=services-DFJfjW1b.js.map
+export { Activities as C, Analytics as S, Detections as _, Status as a, Auth as b, Providers as c, Notifications as d, Members as f, Documents as g, GuestAuth as h, Syncs as i, Policies as l, GuestCapabilities as m, Webhooks as n, Reviews as o, Invites as p, Threads as r, Redactions as s, Workspaces as t, Pipelines as u, Connections as v, Account as w, ApiTokens as x, Capabilities as y };
+//# sourceMappingURL=services-BMmcawiT.js.map