@nylas-labs/cli-kit 0.1.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Nylas, Inc.
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/dist/dashboard.d.ts

@@ -0,0 +1,162 @@
+/**
+ * Client for the Nylas dashboard-account service:
+ * - CLI SSO device-authorization flow (login/register)
+ * - session management (current, switch-org, refresh, logout)
+ * - inbox domains REST (/orgs/inbox/domains/*)
+ *
+ * All authenticated requests carry `Authorization: Bearer <userToken>`,
+ * `X-Nylas-Org: <orgToken>`, and a per-request DPoP proof header.
+ */
+import type { DpopKey } from './dpop.js';
+export declare const DEFAULT_DASHBOARD_ACCOUNT_URL = "https://dashboard-account.eu.nylas.com";
+export type SsoLoginType = 'google_SSO' | 'microsoft_SSO' | 'github_SSO';
+export type SsoMode = 'login' | 'register';
+export type DashboardTokens = {
+    userToken: string;
+    orgToken?: string;
+};
+export type DashboardUser = {
+    publicId: string;
+    emailAddress?: string;
+    firstName?: string;
+    lastName?: string;
+};
+export type DashboardOrganization = {
+    publicId: string;
+    name?: string;
+    region?: string;
+    role?: string;
+};
+export type SsoStartResponse = {
+    flowId: string;
+    verificationUri: string;
+    verificationUriComplete?: string;
+    userCode: string;
+    expiresIn: number;
+    interval: number;
+};
+export type AuthResponse = {
+    userToken: string;
+    orgToken: string;
+    user: DashboardUser;
+    organizations: DashboardOrganization[];
+};
+export type OrgSwitchResponse = {
+    orgToken: string;
+    orgSessionId: string;
+    org: DashboardOrganization;
+    previousOrgSessionRevoked: boolean;
+};
+export type SsoPollResponse = {
+    status: 'authorization_pending' | 'access_denied' | 'expired_token';
+    retryAfter?: number;
+} | ({
+    status: 'complete';
+} & AuthResponse) | {
+    status: 'mfa_required';
+    user: DashboardUser;
+    organizations: DashboardOrganization[];
+};
+export type SessionResponse = {
+    user: DashboardUser;
+    organization?: DashboardOrganization;
+    organizations?: DashboardOrganization[];
+};
+export type InboxDomain = {
+    id: string;
+    name: string;
+    domainAddress: string;
+    organizationId: string;
+    region: 'us' | 'eu';
+    branded: boolean;
+    verifiedOwnership: boolean;
+    verifiedMx: boolean;
+    verifiedSpf: boolean;
+    verifiedDkim: boolean;
+    verifiedDmarc: boolean;
+    verifiedArc: boolean;
+    verifiedFeedback: boolean;
+    createdAt: number;
+    updatedAt: number;
+};
+export type DomainAvailability = {
+    domainAddress: string;
+    available: boolean;
+    conflictsWith: 'us' | 'eu' | null;
+};
+export type DomainVerificationResult = {
+    domainId?: string;
+    attempt: {
+        type?: string;
+        options: {
+            host?: string;
+            type?: string;
+            value?: string;
+        };
+    } | null;
+    status: string;
+    createdAt?: number;
+    expiresAt?: number;
+    message: string;
+};
+export declare class DashboardAccountError extends Error {
+    readonly status: number;
+    readonly body: unknown;
+    constructor(message: string, status: number, body: unknown);
+}
+export declare class DashboardAccountClient {
+    private readonly dpop;
+    private readonly baseUrl;
+    private readonly fetchImpl;
+    constructor(dpop: DpopKey, baseUrl?: string, fetchImpl?: typeof fetch);
+    ssoStart(input: {
+        loginType: SsoLoginType;
+        mode: SsoMode;
+        privacyPolicyAccepted?: boolean;
+    }): Promise<SsoStartResponse>;
+    ssoPoll(input: {
+        flowId: string;
+        orgPublicId?: string;
+    }): Promise<SsoPollResponse>;
+    /**
+     * Runs the full device flow: start, hand the verification URL to the
+     * caller (open a browser, print the code), then poll until terminal.
+     */
+    ssoAuthorize(input: {
+        loginType: SsoLoginType;
+        mode: SsoMode;
+        orgPublicId?: string;
+    }, onStarted: (started: SsoStartResponse) => void | Promise<void>, signal?: AbortSignal): Promise<SsoPollResponse>;
+    refresh(tokens: DashboardTokens): Promise<{
+        userToken: string;
+        orgToken?: string;
+    }>;
+    logout(tokens: DashboardTokens): Promise<void>;
+    currentSession(tokens: DashboardTokens): Promise<SessionResponse>;
+    switchOrg(tokens: DashboardTokens, orgPublicId: string): Promise<OrgSwitchResponse>;
+    listInboxDomains(tokens: DashboardTokens, query?: {
+        limit?: number;
+        pageToken?: string;
+    }): Promise<InboxDomain[]>;
+    domainAvailability(tokens: DashboardTokens, domainAddress: string): Promise<DomainAvailability>;
+    createInboxDomain(tokens: DashboardTokens, input: {
+        name: string;
+        domainAddress: string;
+        region: 'us' | 'eu';
+    }): Promise<InboxDomain>;
+    getInboxDomain(tokens: DashboardTokens, domainIdOrAddress: string, region?: 'us' | 'eu'): Promise<InboxDomain>;
+    /** Returns the DNS record the customer must publish for one verification type. */
+    domainInfo(tokens: DashboardTokens, domainId: string, query: {
+        region: 'us' | 'eu';
+        type: string;
+    }): Promise<DomainVerificationResult>;
+    /** Runs one verification attempt (type: ownership | mx | spf | dkim | feedback | dmarc). */
+    verifyDomain(tokens: DashboardTokens, domainId: string, input: {
+        type: string;
+    }, region: 'us' | 'eu'): Promise<DomainVerificationResult>;
+    deleteInboxDomain(tokens: DashboardTokens, domainId: string, region: 'us' | 'eu'): Promise<void>;
+    private request;
+    /** Unwraps the `{request_id, success, data}` envelope used by REST routes. */
+    private requestEnveloped;
+}
+//# sourceMappingURL=dashboard.d.ts.map

package/dist/dashboard.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"dashboard.d.ts","sourceRoot":"","sources":["../src/dashboard.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAA;AAExC,eAAO,MAAM,6BAA6B,2CAA2C,CAAA;AAErF,MAAM,MAAM,YAAY,GAAG,YAAY,GAAG,eAAe,GAAG,YAAY,CAAA;AACxE,MAAM,MAAM,OAAO,GAAG,OAAO,GAAG,UAAU,CAAA;AAE1C,MAAM,MAAM,eAAe,GAAG;IAC7B,SAAS,EAAE,MAAM,CAAA;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAA;CACjB,CAAA;AAED,MAAM,MAAM,aAAa,GAAG;IAC3B,QAAQ,EAAE,MAAM,CAAA;IAChB,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAA;CACjB,CAAA;AAED,MAAM,MAAM,qBAAqB,GAAG;IACnC,QAAQ,EAAE,MAAM,CAAA;IAChB,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,IAAI,CAAC,EAAE,MAAM,CAAA;CACb,CAAA;AAED,MAAM,MAAM,gBAAgB,GAAG;IAC9B,MAAM,EAAE,MAAM,CAAA;IACd,eAAe,EAAE,MAAM,CAAA;IACvB,uBAAuB,CAAC,EAAE,MAAM,CAAA;IAChC,QAAQ,EAAE,MAAM,CAAA;IAChB,SAAS,EAAE,MAAM,CAAA;IACjB,QAAQ,EAAE,MAAM,CAAA;CAChB,CAAA;AAED,MAAM,MAAM,YAAY,GAAG;IAC1B,SAAS,EAAE,MAAM,CAAA;IACjB,QAAQ,EAAE,MAAM,CAAA;IAChB,IAAI,EAAE,aAAa,CAAA;IACnB,aAAa,EAAE,qBAAqB,EAAE,CAAA;CACtC,CAAA;AAED,MAAM,MAAM,iBAAiB,GAAG;IAC/B,QAAQ,EAAE,MAAM,CAAA;IAChB,YAAY,EAAE,MAAM,CAAA;IACpB,GAAG,EAAE,qBAAqB,CAAA;IAC1B,yBAAyB,EAAE,OAAO,CAAA;CAClC,CAAA;AAED,MAAM,MAAM,eAAe,GACxB;IAAE,MAAM,EAAE,uBAAuB,GAAG,eAAe,GAAG,eAAe,CAAC;IAAC,UAAU,CAAC,EAAE,MAAM,CAAA;CAAE,GAC5F,CAAC;IAAE,MAAM,EAAE,UAAU,CAAA;CAAE,GAAG,YAAY,CAAC,GACvC;IAAE,MAAM,EAAE,cAAc,CAAC;IAAC,IAAI,EAAE,aAAa,CAAC;IAAC,aAAa,EAAE,qBAAqB,EAAE,CAAA;CAAE,CAAA;AAE1F,MAAM,MAAM,eAAe,GAAG;IAC7B,IAAI,EAAE,aAAa,CAAA;IACnB,YAAY,CAAC,EAAE,qBAAqB,CAAA;IACpC,aAAa,CAAC,EAAE,qBAAqB,EAAE,CAAA;CACvC,CAAA;AAED,MAAM,MAAM,WAAW,GAAG;IACzB,EAAE,EAAE,MAAM,CAAA;IACV,IAAI,EAAE,MAAM,CAAA;IACZ,aAAa,EAAE,MAAM,CAAA;IACrB,cAAc,EAAE,MAAM,CAAA;IACtB,MAAM,EAAE,IAAI,GAAG,IAAI,CAAA;IACnB,OAAO,EAAE,OAAO,CAAA;IAChB,iBAAiB,EAAE,OAAO,CAAA;IAC1B,UAAU,EAAE,OAAO,CAAA;IACnB,WAAW,EAAE,OAAO,CAAA;IACpB,YAAY,EAAE,OAAO,CAAA;IACrB,aAAa,EAAE,OAAO,CAAA;IACtB,WAAW,EAAE,OAAO,CAAA;IACpB,gBAAgB,EAAE,OAAO,CAAA;IACzB,SAAS,EAAE,MAAM,CAAA;IACjB,SAAS,EAAE,MAAM,CAAA;CACjB,CAAA;AAED,MAAM,MAAM,kBAAkB,GAAG;IAChC,aAAa,EAAE,MAAM,CAAA;IACrB,SAAS,EAAE,OAAO,CAAA;IAClB,aAAa,EAAE,IAAI,GAAG,IAAI,GAAG,IAAI,CAAA;CACjC,CAAA;AAED,MAAM,MAAM,wBAAwB,GAAG;IACtC,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,OAAO,EAAE;QACR,IAAI,CAAC,EAAE,MAAM,CAAA;QACb,OAAO,EAAE;YAAE,IAAI,CAAC,EAAE,MAAM,CAAC;YAAC,IAAI,CAAC,EAAE,MAAM,CAAC;YAAC,KAAK,CAAC,EAAE,MAAM,CAAA;SAAE,CAAA;KACzD,GAAG,IAAI,CAAA;IACR,MAAM,EAAE,MAAM,CAAA;IACd,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,OAAO,EAAE,MAAM,CAAA;CACf,CAAA;AAMD,qBAAa,qBAAsB,SAAQ,KAAK;IAG9C,QAAQ,CAAC,MAAM,EAAE,MAAM;IACvB,QAAQ,CAAC,IAAI,EAAE,OAAO;IAHvB,YACC,OAAO,EAAE,MAAM,EACN,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,OAAO,EAItB;CACD;AAED,qBAAa,sBAAsB;IAEjC,OAAO,CAAC,QAAQ,CAAC,IAAI;IACrB,OAAO,CAAC,QAAQ,CAAC,OAAO;IACxB,OAAO,CAAC,QAAQ,CAAC,SAAS;IAH3B,YACkB,IAAI,EAAE,OAAO,EACb,OAAO,GAAE,MAAsC,EAC/C,SAAS,GAAE,OAAO,KAAa,EAC7C;IAIE,QAAQ,CAAC,KAAK,EAAE;QACrB,SAAS,EAAE,YAAY,CAAA;QACvB,IAAI,EAAE,OAAO,CAAA;QACb,qBAAqB,CAAC,EAAE,OAAO,CAAA;KAC/B,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAO5B;IAEK,OAAO,CAAC,KAAK,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,WAAW,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,eAAe,CAAC,CAKvF;IAED;;;OAGG;IACG,YAAY,CACjB,KAAK,EAAE;QAAE,SAAS,EAAE,YAAY,CAAC;QAAC,IAAI,EAAE,OAAO,CAAC;QAAC,WAAW,CAAC,EAAE,MAAM,CAAA;KAAE,EACvE,SAAS,EAAE,CAAC,OAAO,EAAE,gBAAgB,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,EAC9D,MAAM,CAAC,EAAE,WAAW,GAClB,OAAO,CAAC,eAAe,CAAC,CAiB1B;IAIK,OAAO,CAAC,MAAM,EAAE,eAAe,GAAG,OAAO,CAAC;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAGxF;IAEK,MAAM,CAAC,MAAM,EAAE,eAAe,GAAG,OAAO,CAAC,IAAI,CAAC,CAEnD;IAEK,cAAc,CAAC,MAAM,EAAE,eAAe,GAAG,OAAO,CAAC,eAAe,CAAC,CAGtE;IAEK,SAAS,CAAC,MAAM,EAAE,eAAe,EAAE,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAMxF;IAIK,gBAAgB,CACrB,MAAM,EAAE,eAAe,EACvB,KAAK,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,CAAA;KAAE,GAC5C,OAAO,CAAC,WAAW,EAAE,CAAC,CAMxB;IAEK,kBAAkB,CAAC,MAAM,EAAE,eAAe,EAAE,aAAa,EAAE,MAAM,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAGpG;IAEK,iBAAiB,CACtB,MAAM,EAAE,eAAe,EACvB,KAAK,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,aAAa,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,IAAI,GAAG,IAAI,CAAA;KAAE,GACjE,OAAO,CAAC,WAAW,CAAC,CAEtB;IAEK,cAAc,CACnB,MAAM,EAAE,eAAe,EACvB,iBAAiB,EAAE,MAAM,EACzB,MAAM,CAAC,EAAE,IAAI,GAAG,IAAI,GAClB,OAAO,CAAC,WAAW,CAAC,CAKtB;IAED,kFAAkF;IAC5E,UAAU,CACf,MAAM,EAAE,eAAe,EACvB,QAAQ,EAAE,MAAM,EAChB,KAAK,EAAE;QAAE,MAAM,EAAE,IAAI,GAAG,IAAI,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,GAC1C,OAAO,CAAC,wBAAwB,CAAC,CAKnC;IAED,4FAA4F;IACtF,YAAY,CACjB,MAAM,EAAE,eAAe,EACvB,QAAQ,EAAE,MAAM,EAChB,KAAK,EAAE;QAAE,IAAI,EAAE,MAAM,CAAA;KAAE,EACvB,MAAM,EAAE,IAAI,GAAG,IAAI,GACjB,OAAO,CAAC,wBAAwB,CAAC,CAMnC;IAEK,iBAAiB,CAAC,MAAM,EAAE,eAAe,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,GAAG,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAKrG;YAIa,OAAO;IA4CrB,8EAA8E;YAChE,gBAAgB;CAQ9B"}

package/dist/dashboard.js

@@ -0,0 +1,383 @@
+/**
+ * Client for the Nylas dashboard-account service:
+ * - CLI SSO device-authorization flow (login/register)
+ * - session management (current, switch-org, refresh, logout)
+ * - inbox domains REST (/orgs/inbox/domains/*)
+ *
+ * All authenticated requests carry `Authorization: Bearer <userToken>`,
+ * `X-Nylas-Org: <orgToken>`, and a per-request DPoP proof header.
+ */
+export const DEFAULT_DASHBOARD_ACCOUNT_URL = 'https://dashboard-account.eu.nylas.com';
+const DEFAULT_HTTP_TIMEOUT_MS = 30_000;
+export class DashboardAccountError extends Error {
+    status;
+    body;
+    constructor(message, status, body) {
+        super(message);
+        this.status = status;
+        this.body = body;
+        this.name = 'DashboardAccountError';
+    }
+}
+export class DashboardAccountClient {
+    dpop;
+    baseUrl;
+    fetchImpl;
+    constructor(dpop, baseUrl = DEFAULT_DASHBOARD_ACCOUNT_URL, fetchImpl = fetch) {
+        this.dpop = dpop;
+        this.baseUrl = baseUrl;
+        this.fetchImpl = fetchImpl;
+    }
+    // ---- CLI SSO device flow -------------------------------------------------
+    async ssoStart(input) {
+        const body = { loginType: input.loginType, mode: input.mode };
+        if (input.mode === 'register') {
+            body.privacyPolicyAccepted = input.privacyPolicyAccepted ?? true;
+        }
+        const data = await this.requestEnveloped('POST', '/auth/cli/sso/start', { body });
+        return parseSsoStartResponse(data, '/auth/cli/sso/start');
+    }
+    async ssoPoll(input) {
+        const body = { flowId: input.flowId };
+        if (input.orgPublicId)
+            body.orgPublicId = input.orgPublicId;
+        const data = await this.requestEnveloped('POST', '/auth/cli/sso/poll', { body });
+        return parseSsoPollResponse(data, '/auth/cli/sso/poll');
+    }
+    /**
+     * Runs the full device flow: start, hand the verification URL to the
+     * caller (open a browser, print the code), then poll until terminal.
+     */
+    async ssoAuthorize(input, onStarted, signal) {
+        const started = await this.ssoStart({ ...input, privacyPolicyAccepted: true });
+        await onStarted(started);
+        const deadline = Date.now() + started.expiresIn * 1000;
+        let intervalMs = Math.max(started.interval, 1) * 1000;
+        while (Date.now() < deadline) {
+            if (signal?.aborted)
+                throw new Error('SSO flow aborted');
+            await new Promise((r) => setTimeout(r, intervalMs));
+            const poll = await this.ssoPoll({
+                flowId: started.flowId,
+                ...(input.orgPublicId ? { orgPublicId: input.orgPublicId } : {}),
+            });
+            if (poll.status !== 'authorization_pending')
+                return poll;
+            if (poll.retryAfter)
+                intervalMs = poll.retryAfter * 1000;
+        }
+        return { status: 'expired_token' };
+    }
+    // ---- Sessions --------------------------------------------------------------
+    async refresh(tokens) {
+        const data = await this.requestEnveloped('POST', '/auth/cli/refresh', { tokens });
+        return parseRefreshResponse(data, '/auth/cli/refresh');
+    }
+    async logout(tokens) {
+        await this.requestEnveloped('POST', '/auth/cli/logout', { tokens });
+    }
+    async currentSession(tokens) {
+        const data = await this.requestEnveloped('GET', '/sessions/current', { tokens });
+        return parseSessionResponse(data, '/sessions/current');
+    }
+    async switchOrg(tokens, orgPublicId) {
+        const data = await this.requestEnveloped('POST', '/sessions/switch-org', {
+            tokens,
+            body: { orgPublicId },
+        });
+        return parseOrgSwitchResponse(data, '/sessions/switch-org');
+    }
+    // ---- Inbox domains (org-level, aggregated in dashboard-account) -----------
+    async listInboxDomains(tokens, query) {
+        const params = new URLSearchParams();
+        if (query?.limit)
+            params.set('limit', String(query.limit));
+        if (query?.pageToken)
+            params.set('pageToken', query.pageToken);
+        const qs = params.size ? `?${params}` : '';
+        return this.requestEnveloped('GET', `/orgs/inbox/domains${qs}`, { tokens });
+    }
+    async domainAvailability(tokens, domainAddress) {
+        const qs = new URLSearchParams({ domainAddress });
+        return this.requestEnveloped('GET', `/orgs/inbox/domains/availability?${qs}`, { tokens });
+    }
+    async createInboxDomain(tokens, input) {
+        return this.requestEnveloped('POST', '/orgs/inbox/domains', { tokens, body: input });
+    }
+    async getInboxDomain(tokens, domainIdOrAddress, region) {
+        const qs = region ? `?${new URLSearchParams({ region })}` : '';
+        return this.requestEnveloped('GET', `/orgs/inbox/domains/${encodeURIComponent(domainIdOrAddress)}${qs}`, {
+            tokens,
+        });
+    }
+    /** Returns the DNS record the customer must publish for one verification type. */
+    async domainInfo(tokens, domainId, query) {
+        const qs = new URLSearchParams(query);
+        return this.requestEnveloped('GET', `/orgs/inbox/domains/${encodeURIComponent(domainId)}/info?${qs}`, {
+            tokens,
+        });
+    }
+    /** Runs one verification attempt (type: ownership | mx | spf | dkim | feedback | dmarc). */
+    async verifyDomain(tokens, domainId, input, region) {
+        const qs = new URLSearchParams({ region });
+        return this.requestEnveloped('POST', `/orgs/inbox/domains/${encodeURIComponent(domainId)}/verify?${qs}`, {
+            tokens,
+            body: input,
+        });
+    }
+    async deleteInboxDomain(tokens, domainId, region) {
+        const qs = new URLSearchParams({ region });
+        await this.requestEnveloped('DELETE', `/orgs/inbox/domains/${encodeURIComponent(domainId)}?${qs}`, {
+            tokens,
+        });
+    }
+    // ---- HTTP core -------------------------------------------------------------
+    async request(method, path, opts) {
+        const url = `${this.baseUrl}${path}`;
+        const headers = {
+            'Content-Type': 'application/json',
+            DPoP: await this.dpop.proof(method, url, opts.tokens?.userToken),
+        };
+        if (opts.tokens) {
+            headers.Authorization = `Bearer ${opts.tokens.userToken}`;
+            if (opts.tokens.orgToken)
+                headers['X-Nylas-Org'] = opts.tokens.orgToken;
+        }
+        const res = await fetchWithTimeout(this.fetchImpl, url, {
+            method,
+            headers,
+            body: opts.body === undefined ? null : JSON.stringify(opts.body),
+            redirect: 'error',
+        }, `dashboard-account ${method} ${path}`);
+        const text = await res.text();
+        let parsed = null;
+        try {
+            parsed = text ? JSON.parse(text) : null;
+        }
+        catch {
+            parsed = text;
+        }
+        if (!res.ok) {
+            throw new DashboardAccountError(`dashboard-account ${method} ${path} failed with ${res.status}`, res.status, parsed);
+        }
+        return parsed;
+    }
+    /** Unwraps the `{request_id, success, data}` envelope used by REST routes. */
+    async requestEnveloped(method, path, opts) {
+        const envelope = unwrapEnvelope(await this.request(method, path, opts), path);
+        return envelope.data;
+    }
+}
+function unwrapEnvelope(value, path) {
+    if (isRecord(value) && value.success === true && 'data' in value) {
+        return value;
+    }
+    throw new Error(`dashboard-account ${path} returned a malformed response`);
+}
+function parseSsoStartResponse(value, path) {
+    if (!isRecord(value))
+        throw new Error(`dashboard-account ${path} returned a malformed response`);
+    const flowId = readString(value, 'flowId', path);
+    const verificationUri = readUrl(value, 'verificationUri', path);
+    const verificationUriComplete = readOptionalUrl(value, 'verificationUriComplete', path);
+    const userCode = readString(value, 'userCode', path);
+    const expiresIn = readPositiveNumber(value, 'expiresIn', path);
+    const interval = readPositiveNumber(value, 'interval', path);
+    return {
+        flowId,
+        verificationUri,
+        ...(verificationUriComplete ? { verificationUriComplete } : {}),
+        userCode,
+        expiresIn,
+        interval,
+    };
+}
+function parseSsoPollResponse(value, path) {
+    if (!isRecord(value))
+        throw new Error(`dashboard-account ${path} returned a malformed response`);
+    const status = readString(value, 'status', path);
+    if (status === 'authorization_pending') {
+        const retryAfter = readOptionalPositiveNumber(value, 'retryAfter', path);
+        return retryAfter ? { status, retryAfter } : { status };
+    }
+    if (status === 'access_denied' || status === 'expired_token')
+        return { status };
+    if (status === 'mfa_required') {
+        return {
+            status,
+            user: parseDashboardUser(value.user, path),
+            organizations: parseOrganizations(value.organizations, path),
+        };
+    }
+    if (status === 'complete') {
+        return { status, ...parseAuthResponse(value, path) };
+    }
+    throw new Error(`dashboard-account ${path} returned an unknown SSO status`);
+}
+function parseAuthResponse(value, path) {
+    if (!isRecord(value))
+        throw new Error(`dashboard-account ${path} returned a malformed response`);
+    return {
+        userToken: readString(value, 'userToken', path),
+        orgToken: readString(value, 'orgToken', path),
+        user: parseDashboardUser(value.user, path),
+        organizations: parseOrganizations(value.organizations ?? value.relations, path),
+    };
+}
+function parseRefreshResponse(value, path) {
+    if (!isRecord(value))
+        throw new Error(`dashboard-account ${path} returned a malformed response`);
+    const orgToken = readOptionalString(value, 'orgToken');
+    return {
+        userToken: readString(value, 'userToken', path),
+        ...(orgToken ? { orgToken } : {}),
+    };
+}
+function parseOrgSwitchResponse(value, path) {
+    if (!isRecord(value))
+        throw new Error(`dashboard-account ${path} returned a malformed response`);
+    return {
+        orgToken: readString(value, 'orgToken', path),
+        orgSessionId: readString(value, 'orgSessionId', path),
+        org: parseOrganization(value.org, path),
+        previousOrgSessionRevoked: readBoolean(value, 'previousOrgSessionRevoked', path),
+    };
+}
+function parseSessionResponse(value, path) {
+    if (!isRecord(value))
+        throw new Error(`dashboard-account ${path} returned a malformed response`);
+    const organizations = parseOrganizations(value.organizations ?? value.relations ?? [], path);
+    const currentOrg = typeof value.currentOrg === 'string' ? value.currentOrg : undefined;
+    const directOrganization = value.organization ? parseOrganization(value.organization, path) : undefined;
+    const organization = directOrganization ??
+        organizations.find((org) => org.publicId === currentOrg) ??
+        findCurrentRelationOrganization(value.relations, currentOrg, path);
+    return {
+        user: parseDashboardUser(value.user, path),
+        ...(organization ? { organization } : {}),
+        ...(organizations.length > 0 ? { organizations } : {}),
+    };
+}
+function parseDashboardUser(value, path) {
+    if (!isRecord(value))
+        throw new Error(`dashboard-account ${path} returned a malformed response`);
+    const user = { publicId: readString(value, 'publicId', path) };
+    if (typeof value.emailAddress === 'string')
+        user.emailAddress = value.emailAddress;
+    if (typeof value.firstName === 'string')
+        user.firstName = value.firstName;
+    if (typeof value.lastName === 'string')
+        user.lastName = value.lastName;
+    return user;
+}
+function parseOrganizations(value, path) {
+    if (!Array.isArray(value))
+        throw new Error(`dashboard-account ${path} returned a malformed response`);
+    return value.map((org) => parseOrganization(org, path));
+}
+function findCurrentRelationOrganization(value, currentOrg, path) {
+    if (!currentOrg || !Array.isArray(value))
+        return undefined;
+    const relation = value.find((item) => {
+        if (!isRecord(item))
+            return false;
+        return item.orgId === currentOrg || item.orgPublicId === currentOrg;
+    });
+    return relation ? parseOrganization(relation, path) : undefined;
+}
+function parseOrganization(value, path) {
+    if (!isRecord(value))
+        throw new Error(`dashboard-account ${path} returned a malformed response`);
+    const publicId = typeof value.publicId === 'string' && value.publicId.length > 0
+        ? value.publicId
+        : typeof value.orgPublicId === 'string' && value.orgPublicId.length > 0
+            ? value.orgPublicId
+            : undefined;
+    if (!publicId)
+        throw new Error(`dashboard-account ${path} returned a malformed response`);
+    const parsed = { publicId };
+    const name = readOptionalString(value, 'name') ?? readOptionalString(value, 'orgName');
+    const region = readOptionalString(value, 'region') ?? readOptionalString(value, 'orgRegion');
+    const role = readOptionalString(value, 'role');
+    if (name)
+        parsed.name = name;
+    if (region)
+        parsed.region = region;
+    if (role)
+        parsed.role = role;
+    return parsed;
+}
+function isRecord(value) {
+    return typeof value === 'object' && value !== null && !Array.isArray(value);
+}
+function readString(record, field, path) {
+    const value = record[field];
+    if (typeof value === 'string' && value.length > 0)
+        return value;
+    throw new Error(`dashboard-account ${path} returned a malformed response`);
+}
+function readOptionalString(record, field) {
+    const value = record[field];
+    return typeof value === 'string' && value.length > 0 ? value : undefined;
+}
+function readBoolean(record, field, path) {
+    const value = record[field];
+    if (typeof value === 'boolean')
+        return value;
+    throw new Error(`dashboard-account ${path} returned a malformed response`);
+}
+function readPositiveNumber(record, field, path) {
+    const value = record[field];
+    if (typeof value === 'number' && Number.isFinite(value) && value > 0)
+        return value;
+    throw new Error(`dashboard-account ${path} returned a malformed response`);
+}
+function readOptionalPositiveNumber(record, field, path) {
+    if (!(field in record))
+        return undefined;
+    return readPositiveNumber(record, field, path);
+}
+function readUrl(record, field, path) {
+    const value = readString(record, field, path);
+    if (isHttpUrl(value))
+        return value;
+    throw new Error(`dashboard-account ${path} returned a malformed response`);
+}
+function readOptionalUrl(record, field, path) {
+    if (!(field in record))
+        return undefined;
+    const value = record[field];
+    if (typeof value !== 'string')
+        throw new Error(`dashboard-account ${path} returned a malformed response`);
+    if (value.length === 0)
+        return undefined;
+    if (isHttpUrl(value))
+        return value;
+    throw new Error(`dashboard-account ${path} returned a malformed response`);
+}
+function isHttpUrl(value) {
+    try {
+        const url = new URL(value);
+        return url.protocol === 'https:' || url.protocol === 'http:';
+    }
+    catch {
+        return false;
+    }
+}
+async function fetchWithTimeout(fetchImpl, input, init, label) {
+    const controller = new AbortController();
+    const timeout = setTimeout(() => controller.abort(), DEFAULT_HTTP_TIMEOUT_MS);
+    try {
+        return await fetchImpl(input, { ...init, signal: controller.signal });
+    }
+    catch (err) {
+        if (err instanceof Error && err.name === 'AbortError') {
+            throw new Error(`${label} timed out after ${DEFAULT_HTTP_TIMEOUT_MS / 1000}s`);
+        }
+        throw err;
+    }
+    finally {
+        clearTimeout(timeout);
+    }
+}
+//# sourceMappingURL=dashboard.js.map

package/dist/dashboard.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"dashboard.js","sourceRoot":"","sources":["../src/dashboard.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAIH,MAAM,CAAC,MAAM,6BAA6B,GAAG,wCAAwC,CAAA;AAgGrF,MAAM,uBAAuB,GAAG,MAAM,CAAA;AAEtC,MAAM,OAAO,qBAAsB,SAAQ,KAAK;IAGrC,MAAM;IACN,IAAI;IAHd,YACC,OAAe,EACN,MAAc,EACd,IAAa;QAEtB,KAAK,CAAC,OAAO,CAAC,CAAA;sBAHL,MAAM;oBACN,IAAI;QAGb,IAAI,CAAC,IAAI,GAAG,uBAAuB,CAAA;IACpC,CAAC;CACD;AAED,MAAM,OAAO,sBAAsB;IAEhB,IAAI;IACJ,OAAO;IACP,SAAS;IAH3B,YACkB,IAAa,EACb,OAAO,GAAW,6BAA6B,EAC/C,SAAS,GAAiB,KAAK;oBAF/B,IAAI;uBACJ,OAAO;yBACP,SAAS;IACxB,CAAC;IAEJ,6EAA6E;IAE7E,KAAK,CAAC,QAAQ,CAAC,KAId;QACA,MAAM,IAAI,GAA4B,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CAAA;QACtF,IAAI,KAAK,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;YAC/B,IAAI,CAAC,qBAAqB,GAAG,KAAK,CAAC,qBAAqB,IAAI,IAAI,CAAA;QACjE,CAAC;QACD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAU,MAAM,EAAE,qBAAqB,EAAE,EAAE,IAAI,EAAE,CAAC,CAAA;QAC1F,OAAO,qBAAqB,CAAC,IAAI,EAAE,qBAAqB,CAAC,CAAA;IAC1D,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,KAA+C;QAC5D,MAAM,IAAI,GAA4B,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAA;QAC9D,IAAI,KAAK,CAAC,WAAW;YAAE,IAAI,CAAC,WAAW,GAAG,KAAK,CAAC,WAAW,CAAA;QAC3D,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAU,MAAM,EAAE,oBAAoB,EAAE,EAAE,IAAI,EAAE,CAAC,CAAA;QACzF,OAAO,oBAAoB,CAAC,IAAI,EAAE,oBAAoB,CAAC,CAAA;IACxD,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,YAAY,CACjB,KAAuE,EACvE,SAA8D,EAC9D,MAAoB;QAEpB,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,EAAE,GAAG,KAAK,EAAE,qBAAqB,EAAE,IAAI,EAAE,CAAC,CAAA;QAC9E,MAAM,SAAS,CAAC,OAAO,CAAC,CAAA;QAExB,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC,SAAS,GAAG,IAAI,CAAA;QACtD,IAAI,UAAU,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC,GAAG,IAAI,CAAA;QACrD,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,EAAE,CAAC;YAC9B,IAAI,MAAM,EAAE,OAAO;gBAAE,MAAM,IAAI,KAAK,CAAC,kBAAkB,CAAC,CAAA;YACxD,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC,CAAA;YACnD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC;gBAC/B,MAAM,EAAE,OAAO,CAAC,MAAM;gBACtB,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAChE,CAAC,CAAA;YACF,IAAI,IAAI,CAAC,MAAM,KAAK,uBAAuB;gBAAE,OAAO,IAAI,CAAA;YACxD,IAAI,IAAI,CAAC,UAAU;gBAAE,UAAU,GAAG,IAAI,CAAC,UAAU,GAAG,IAAI,CAAA;QACzD,CAAC;QACD,OAAO,EAAE,MAAM,EAAE,eAAe,EAAE,CAAA;IACnC,CAAC;IAED,+EAA+E;IAE/E,KAAK,CAAC,OAAO,CAAC,MAAuB;QACpC,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAU,MAAM,EAAE,mBAAmB,EAAE,EAAE,MAAM,EAAE,CAAC,CAAA;QAC1F,OAAO,oBAAoB,CAAC,IAAI,EAAE,mBAAmB,CAAC,CAAA;IACvD,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,MAAuB;QACnC,MAAM,IAAI,CAAC,gBAAgB,CAAU,MAAM,EAAE,kBAAkB,EAAE,EAAE,MAAM,EAAE,CAAC,CAAA;IAC7E,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,MAAuB;QAC3C,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAU,KAAK,EAAE,mBAAmB,EAAE,EAAE,MAAM,EAAE,CAAC,CAAA;QACzF,OAAO,oBAAoB,CAAC,IAAI,EAAE,mBAAmB,CAAC,CAAA;IACvD,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,MAAuB,EAAE,WAAmB;QAC3D,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAU,MAAM,EAAE,sBAAsB,EAAE;YACjF,MAAM;YACN,IAAI,EAAE,EAAE,WAAW,EAAE;SACrB,CAAC,CAAA;QACF,OAAO,sBAAsB,CAAC,IAAI,EAAE,sBAAsB,CAAC,CAAA;IAC5D,CAAC;IAED,8EAA8E;IAE9E,KAAK,CAAC,gBAAgB,CACrB,MAAuB,EACvB,KAA8C;QAE9C,MAAM,MAAM,GAAG,IAAI,eAAe,EAAE,CAAA;QACpC,IAAI,KAAK,EAAE,KAAK;YAAE,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAA;QAC1D,IAAI,KAAK,EAAE,SAAS;YAAE,MAAM,CAAC,GAAG,CAAC,WAAW,EAAE,KAAK,CAAC,SAAS,CAAC,CAAA;QAC9D,MAAM,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAA;QAC1C,OAAO,IAAI,CAAC,gBAAgB,CAAC,KAAK,EAAE,sBAAsB,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,CAAC,CAAA;IAC5E,CAAC;IAED,KAAK,CAAC,kBAAkB,CAAC,MAAuB,EAAE,aAAqB;QACtE,MAAM,EAAE,GAAG,IAAI,eAAe,CAAC,EAAE,aAAa,EAAE,CAAC,CAAA;QACjD,OAAO,IAAI,CAAC,gBAAgB,CAAC,KAAK,EAAE,oCAAoC,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,CAAC,CAAA;IAC1F,CAAC;IAED,KAAK,CAAC,iBAAiB,CACtB,MAAuB,EACvB,KAAmE;QAEnE,OAAO,IAAI,CAAC,gBAAgB,CAAC,MAAM,EAAE,qBAAqB,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAA;IACrF,CAAC;IAED,KAAK,CAAC,cAAc,CACnB,MAAuB,EACvB,iBAAyB,EACzB,MAAoB;QAEpB,MAAM,EAAE,GAAG,MAAM,CAAC,CAAC,CAAC,IAAI,IAAI,eAAe,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAA;QAC9D,OAAO,IAAI,CAAC,gBAAgB,CAAC,KAAK,EAAE,uBAAuB,kBAAkB,CAAC,iBAAiB,CAAC,GAAG,EAAE,EAAE,EAAE;YACxG,MAAM;SACN,CAAC,CAAA;IACH,CAAC;IAED,kFAAkF;IAClF,KAAK,CAAC,UAAU,CACf,MAAuB,EACvB,QAAgB,EAChB,KAA4C;QAE5C,MAAM,EAAE,GAAG,IAAI,eAAe,CAAC,KAAK,CAAC,CAAA;QACrC,OAAO,IAAI,CAAC,gBAAgB,CAAC,KAAK,EAAE,uBAAuB,kBAAkB,CAAC,QAAQ,CAAC,SAAS,EAAE,EAAE,EAAE;YACrG,MAAM;SACN,CAAC,CAAA;IACH,CAAC;IAED,4FAA4F;IAC5F,KAAK,CAAC,YAAY,CACjB,MAAuB,EACvB,QAAgB,EAChB,KAAuB,EACvB,MAAmB;QAEnB,MAAM,EAAE,GAAG,IAAI,eAAe,CAAC,EAAE,MAAM,EAAE,CAAC,CAAA;QAC1C,OAAO,IAAI,CAAC,gBAAgB,CAAC,MAAM,EAAE,uBAAuB,kBAAkB,CAAC,QAAQ,CAAC,WAAW,EAAE,EAAE,EAAE;YACxG,MAAM;YACN,IAAI,EAAE,KAAK;SACX,CAAC,CAAA;IACH,CAAC;IAED,KAAK,CAAC,iBAAiB,CAAC,MAAuB,EAAE,QAAgB,EAAE,MAAmB;QACrF,MAAM,EAAE,GAAG,IAAI,eAAe,CAAC,EAAE,MAAM,EAAE,CAAC,CAAA;QAC1C,MAAM,IAAI,CAAC,gBAAgB,CAAC,QAAQ,EAAE,uBAAuB,kBAAkB,CAAC,QAAQ,CAAC,IAAI,EAAE,EAAE,EAAE;YAClG,MAAM;SACN,CAAC,CAAA;IACH,CAAC;IAED,+EAA+E;IAEvE,KAAK,CAAC,OAAO,CACpB,MAAc,EACd,IAAY,EACZ,IAAkD;QAElD,MAAM,GAAG,GAAG,GAAG,IAAI,CAAC,OAAO,GAAG,IAAI,EAAE,CAAA;QACpC,MAAM,OAAO,GAA2B;YACvC,cAAc,EAAE,kBAAkB;YAClC,IAAI,EAAE,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,GAAG,EAAE,IAAI,CAAC,MAAM,EAAE,SAAS,CAAC;SAChE,CAAA;QACD,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YACjB,OAAO,CAAC,aAAa,GAAG,UAAU,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,CAAA;YACzD,IAAI,IAAI,CAAC,MAAM,CAAC,QAAQ;gBAAE,OAAO,CAAC,aAAa,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAA;QACxE,CAAC;QAED,MAAM,GAAG,GAAG,MAAM,gBAAgB,CACjC,IAAI,CAAC,SAAS,EACd,GAAG,EACH;YACC,MAAM;YACN,OAAO;YACP,IAAI,EAAE,IAAI,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC;YAChE,QAAQ,EAAE,OAAO;SACjB,EACD,qBAAqB,MAAM,IAAI,IAAI,EAAE,CACrC,CAAA;QAED,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAA;QAC7B,IAAI,MAAM,GAAY,IAAI,CAAA;QAC1B,IAAI,CAAC;YACJ,MAAM,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;QACxC,CAAC;QAAC,MAAM,CAAC;YACR,MAAM,GAAG,IAAI,CAAA;QACd,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YACb,MAAM,IAAI,qBAAqB,CAC9B,qBAAqB,MAAM,IAAI,IAAI,gBAAgB,GAAG,CAAC,MAAM,EAAE,EAC/D,GAAG,CAAC,MAAM,EACV,MAAM,CACN,CAAA;QACF,CAAC;QACD,OAAO,MAAW,CAAA;IACnB,CAAC;IAED,8EAA8E;IACtE,KAAK,CAAC,gBAAgB,CAC7B,MAAc,EACd,IAAY,EACZ,IAAkD;QAElD,MAAM,QAAQ,GAAG,cAAc,CAAI,MAAM,IAAI,CAAC,OAAO,CAAU,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,IAAI,CAAC,CAAA;QACzF,OAAO,QAAQ,CAAC,IAAI,CAAA;IACrB,CAAC;CACD;AAED,SAAS,cAAc,CAAI,KAAc,EAAE,IAAY;IACtD,IAAI,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,OAAO,KAAK,IAAI,IAAI,MAAM,IAAI,KAAK,EAAE,CAAC;QAClE,OAAO,KAAoB,CAAA;IAC5B,CAAC;IACD,MAAM,IAAI,KAAK,CAAC,qBAAqB,IAAI,gCAAgC,CAAC,CAAA;AAC3E,CAAC;AAED,SAAS,qBAAqB,CAAC,KAAc,EAAE,IAAY;IAC1D,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,qBAAqB,IAAI,gCAAgC,CAAC,CAAA;IAEhG,MAAM,MAAM,GAAG,UAAU,CAAC,KAAK,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAA;IAChD,MAAM,eAAe,GAAG,OAAO,CAAC,KAAK,EAAE,iBAAiB,EAAE,IAAI,CAAC,CAAA;IAC/D,MAAM,uBAAuB,GAAG,eAAe,CAAC,KAAK,EAAE,yBAAyB,EAAE,IAAI,CAAC,CAAA;IACvF,MAAM,QAAQ,GAAG,UAAU,CAAC,KAAK,EAAE,UAAU,EAAE,IAAI,CAAC,CAAA;IACpD,MAAM,SAAS,GAAG,kBAAkB,CAAC,KAAK,EAAE,WAAW,EAAE,IAAI,CAAC,CAAA;IAC9D,MAAM,QAAQ,GAAG,kBAAkB,CAAC,KAAK,EAAE,UAAU,EAAE,IAAI,CAAC,CAAA;IAE5D,OAAO;QACN,MAAM;QACN,eAAe;QACf,GAAG,CAAC,uBAAuB,CAAC,CAAC,CAAC,EAAE,uBAAuB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/D,QAAQ;QACR,SAAS;QACT,QAAQ;KACR,CAAA;AACF,CAAC;AAED,SAAS,oBAAoB,CAAC,KAAc,EAAE,IAAY;IACzD,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,qBAAqB,IAAI,gCAAgC,CAAC,CAAA;IAEhG,MAAM,MAAM,GAAG,UAAU,CAAC,KAAK,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAA;IAChD,IAAI,MAAM,KAAK,uBAAuB,EAAE,CAAC;QACxC,MAAM,UAAU,GAAG,0BAA0B,CAAC,KAAK,EAAE,YAAY,EAAE,IAAI,CAAC,CAAA;QACxE,OAAO,UAAU,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAA;IACxD,CAAC;IACD,IAAI,MAAM,KAAK,eAAe,IAAI,MAAM,KAAK,eAAe;QAAE,OAAO,EAAE,MAAM,EAAE,CAAA;IAC/E,IAAI,MAAM,KAAK,cAAc,EAAE,CAAC;QAC/B,OAAO;YACN,MAAM;YACN,IAAI,EAAE,kBAAkB,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,CAAC;YAC1C,aAAa,EAAE,kBAAkB,CAAC,KAAK,CAAC,aAAa,EAAE,IAAI,CAAC;SAC5D,CAAA;IACF,CAAC;IACD,IAAI,MAAM,KAAK,UAAU,EAAE,CAAC;QAC3B,OAAO,EAAE,MAAM,EAAE,GAAG,iBAAiB,CAAC,KAAK,EAAE,IAAI,CAAC,EAAE,CAAA;IACrD,CAAC;IAED,MAAM,IAAI,KAAK,CAAC,qBAAqB,IAAI,iCAAiC,CAAC,CAAA;AAC5E,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAc,EAAE,IAAY;IACtD,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,qBAAqB,IAAI,gCAAgC,CAAC,CAAA;IAChG,OAAO;QACN,SAAS,EAAE,UAAU,CAAC,KAAK,EAAE,WAAW,EAAE,IAAI,CAAC;QAC/C,QAAQ,EAAE,UAAU,CAAC,KAAK,EAAE,UAAU,EAAE,IAAI,CAAC;QAC7C,IAAI,EAAE,kBAAkB,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,CAAC;QAC1C,aAAa,EAAE,kBAAkB,CAAC,KAAK,CAAC,aAAa,IAAI,KAAK,CAAC,SAAS,EAAE,IAAI,CAAC;KAC/E,CAAA;AACF,CAAC;AAED,SAAS,oBAAoB,CAAC,KAAc,EAAE,IAAY;IACzD,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,qBAAqB,IAAI,gCAAgC,CAAC,CAAA;IAChG,MAAM,QAAQ,GAAG,kBAAkB,CAAC,KAAK,EAAE,UAAU,CAAC,CAAA;IACtD,OAAO;QACN,SAAS,EAAE,UAAU,CAAC,KAAK,EAAE,WAAW,EAAE,IAAI,CAAC;QAC/C,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACjC,CAAA;AACF,CAAC;AAED,SAAS,sBAAsB,CAAC,KAAc,EAAE,IAAY;IAC3D,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,qBAAqB,IAAI,gCAAgC,CAAC,CAAA;IAChG,OAAO;QACN,QAAQ,EAAE,UAAU,CAAC,KAAK,EAAE,UAAU,EAAE,IAAI,CAAC;QAC7C,YAAY,EAAE,UAAU,CAAC,KAAK,EAAE,cAAc,EAAE,IAAI,CAAC;QACrD,GAAG,EAAE,iBAAiB,CAAC,KAAK,CAAC,GAAG,EAAE,IAAI,CAAC;QACvC,yBAAyB,EAAE,WAAW,CAAC,KAAK,EAAE,2BAA2B,EAAE,IAAI,CAAC;KAChF,CAAA;AACF,CAAC;AAED,SAAS,oBAAoB,CAAC,KAAc,EAAE,IAAY;IACzD,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,qBAAqB,IAAI,gCAAgC,CAAC,CAAA;IAChG,MAAM,aAAa,GAAG,kBAAkB,CAAC,KAAK,CAAC,aAAa,IAAI,KAAK,CAAC,SAAS,IAAI,EAAE,EAAE,IAAI,CAAC,CAAA;IAC5F,MAAM,UAAU,GAAG,OAAO,KAAK,CAAC,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAA;IACtF,MAAM,kBAAkB,GAAG,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,iBAAiB,CAAC,KAAK,CAAC,YAAY,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;IACvG,MAAM,YAAY,GACjB,kBAAkB;QAClB,aAAa,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,QAAQ,KAAK,UAAU,CAAC;QACxD,+BAA+B,CAAC,KAAK,CAAC,SAAS,EAAE,UAAU,EAAE,IAAI,CAAC,CAAA;IAEnE,OAAO;QACN,IAAI,EAAE,kBAAkB,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,CAAC;QAC1C,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACzC,GAAG,CAAC,aAAa,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACtD,CAAA;AACF,CAAC;AAED,SAAS,kBAAkB,CAAC,KAAc,EAAE,IAAY;IACvD,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,qBAAqB,IAAI,gCAAgC,CAAC,CAAA;IAChG,MAAM,IAAI,GAAkB,EAAE,QAAQ,EAAE,UAAU,CAAC,KAAK,EAAE,UAAU,EAAE,IAAI,CAAC,EAAE,CAAA;IAC7E,IAAI,OAAO,KAAK,CAAC,YAAY,KAAK,QAAQ;QAAE,IAAI,CAAC,YAAY,GAAG,KAAK,CAAC,YAAY,CAAA;IAClF,IAAI,OAAO,KAAK,CAAC,SAAS,KAAK,QAAQ;QAAE,IAAI,CAAC,SAAS,GAAG,KAAK,CAAC,SAAS,CAAA;IACzE,IAAI,OAAO,KAAK,CAAC,QAAQ,KAAK,QAAQ;QAAE,IAAI,CAAC,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAA;IACtE,OAAO,IAAI,CAAA;AACZ,CAAC;AAED,SAAS,kBAAkB,CAAC,KAAc,EAAE,IAAY;IACvD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,qBAAqB,IAAI,gCAAgC,CAAC,CAAA;IACrG,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,iBAAiB,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,CAAA;AACxD,CAAC;AAED,SAAS,+BAA+B,CACvC,KAAc,EACd,UAA8B,EAC9B,IAAY;IAEZ,IAAI,CAAC,UAAU,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,SAAS,CAAA;IAC1D,MAAM,QAAQ,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE;QACpC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;YAAE,OAAO,KAAK,CAAA;QACjC,OAAO,IAAI,CAAC,KAAK,KAAK,UAAU,IAAI,IAAI,CAAC,WAAW,KAAK,UAAU,CAAA;IACpE,CAAC,CAAC,CAAA;IACF,OAAO,QAAQ,CAAC,CAAC,CAAC,iBAAiB,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;AAChE,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAc,EAAE,IAAY;IACtD,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,qBAAqB,IAAI,gCAAgC,CAAC,CAAA;IAChG,MAAM,QAAQ,GACb,OAAO,KAAK,CAAC,QAAQ,KAAK,QAAQ,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC;QAC9D,CAAC,CAAC,KAAK,CAAC,QAAQ;QAChB,CAAC,CAAC,OAAO,KAAK,CAAC,WAAW,KAAK,QAAQ,IAAI,KAAK,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC;YACtE,CAAC,CAAC,KAAK,CAAC,WAAW;YACnB,CAAC,CAAC,SAAS,CAAA;IACd,IAAI,CAAC,QAAQ;QAAE,MAAM,IAAI,KAAK,CAAC,qBAAqB,IAAI,gCAAgC,CAAC,CAAA;IAEzF,MAAM,MAAM,GAA0B,EAAE,QAAQ,EAAE,CAAA;IAClD,MAAM,IAAI,GAAG,kBAAkB,CAAC,KAAK,EAAE,MAAM,CAAC,IAAI,kBAAkB,CAAC,KAAK,EAAE,SAAS,CAAC,CAAA;IACtF,MAAM,MAAM,GAAG,kBAAkB,CAAC,KAAK,EAAE,QAAQ,CAAC,IAAI,kBAAkB,CAAC,KAAK,EAAE,WAAW,CAAC,CAAA;IAC5F,MAAM,IAAI,GAAG,kBAAkB,CAAC,KAAK,EAAE,MAAM,CAAC,CAAA;IAC9C,IAAI,IAAI;QAAE,MAAM,CAAC,IAAI,GAAG,IAAI,CAAA;IAC5B,IAAI,MAAM;QAAE,MAAM,CAAC,MAAM,GAAG,MAAM,CAAA;IAClC,IAAI,IAAI;QAAE,MAAM,CAAC,IAAI,GAAG,IAAI,CAAA;IAC5B,OAAO,MAAM,CAAA;AACd,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC/B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAA;AAC5E,CAAC;AAED,SAAS,UAAU,CAAC,MAAkB,EAAE,KAAa,EAAE,IAAY;IAClE,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,CAAA;IAC3B,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,KAAK,CAAA;IAC/D,MAAM,IAAI,KAAK,CAAC,qBAAqB,IAAI,gCAAgC,CAAC,CAAA;AAC3E,CAAC;AAED,SAAS,kBAAkB,CAAC,MAAkB,EAAE,KAAa;IAC5D,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,CAAA;IAC3B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAA;AACzE,CAAC;AAED,SAAS,WAAW,CAAC,MAAkB,EAAE,KAAa,EAAE,IAAY;IACnE,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,CAAA;IAC3B,IAAI,OAAO,KAAK,KAAK,SAAS;QAAE,OAAO,KAAK,CAAA;IAC5C,MAAM,IAAI,KAAK,CAAC,qBAAqB,IAAI,gCAAgC,CAAC,CAAA;AAC3E,CAAC;AAED,SAAS,kBAAkB,CAAC,MAAkB,EAAE,KAAa,EAAE,IAAY;IAC1E,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,CAAA;IAC3B,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC;QAAE,OAAO,KAAK,CAAA;IAClF,MAAM,IAAI,KAAK,CAAC,qBAAqB,IAAI,gCAAgC,CAAC,CAAA;AAC3E,CAAC;AAED,SAAS,0BAA0B,CAAC,MAAkB,EAAE,KAAa,EAAE,IAAY;IAClF,IAAI,CAAC,CAAC,KAAK,IAAI,MAAM,CAAC;QAAE,OAAO,SAAS,CAAA;IACxC,OAAO,kBAAkB,CAAC,MAAM,EAAE,KAAK,EAAE,IAAI,CAAC,CAAA;AAC/C,CAAC;AAED,SAAS,OAAO,CAAC,MAAkB,EAAE,KAAa,EAAE,IAAY;IAC/D,MAAM,KAAK,GAAG,UAAU,CAAC,MAAM,EAAE,KAAK,EAAE,IAAI,CAAC,CAAA;IAC7C,IAAI,SAAS,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAA;IAClC,MAAM,IAAI,KAAK,CAAC,qBAAqB,IAAI,gCAAgC,CAAC,CAAA;AAC3E,CAAC;AAED,SAAS,eAAe,CAAC,MAAkB,EAAE,KAAa,EAAE,IAAY;IACvE,IAAI,CAAC,CAAC,KAAK,IAAI,MAAM,CAAC;QAAE,OAAO,SAAS,CAAA;IACxC,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,CAAA;IAC3B,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,MAAM,IAAI,KAAK,CAAC,qBAAqB,IAAI,gCAAgC,CAAC,CAAA;IACzG,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,SAAS,CAAA;IACxC,IAAI,SAAS,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAA;IAClC,MAAM,IAAI,KAAK,CAAC,qBAAqB,IAAI,gCAAgC,CAAC,CAAA;AAC3E,CAAC;AAED,SAAS,SAAS,CAAC,KAAa;IAC/B,IAAI,CAAC;QACJ,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAA;QAC1B,OAAO,GAAG,CAAC,QAAQ,KAAK,QAAQ,IAAI,GAAG,CAAC,QAAQ,KAAK,OAAO,CAAA;IAC7D,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,KAAK,CAAA;IACb,CAAC;AACF,CAAC;AAED,KAAK,UAAU,gBAAgB,CAC9B,SAAuB,EACvB,KAAa,EACb,IAAiB,EACjB,KAAa;IAEb,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAA;IACxC,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,uBAAuB,CAAC,CAAA;IAC7E,IAAI,CAAC;QACJ,OAAO,MAAM,SAAS,CAAC,KAAK,EAAE,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,UAAU,CAAC,MAAM,EAAE,CAAC,CAAA;IACtE,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACd,IAAI,GAAG,YAAY,KAAK,IAAI,GAAG,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;YACvD,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,oBAAoB,uBAAuB,GAAG,IAAI,GAAG,CAAC,CAAA;QAC/E,CAAC;QACD,MAAM,GAAG,CAAA;IACV,CAAC;YAAS,CAAC;QACV,YAAY,CAAC,OAAO,CAAC,CAAA;IACtB,CAAC;AACF,CAAC"}

package/dist/dpop.d.ts

@@ -0,0 +1,32 @@
+/**
+ * DPoP (RFC 9449) proof generation with Ed25519 via WebCrypto.
+ *
+ * Wire-compatible with the Nylas dashboard-account CLI token binding:
+ * header {typ: "dpop+jwt", alg: "EdDSA", jwk: {kty, crv, x}} and claims
+ * {jti, htm, htu, iat} plus `ath` (SHA-256 of the access token) when bound.
+ *
+ * Uses only WebCrypto + fetch-era globals so it runs in Node >= 20 and on
+ * Cloudflare Workers.
+ */
+export type StoredDpopKey = {
+    /** Private key JWK (OKP/Ed25519, includes `d`). Treat as a secret. */
+    privateJwk: JsonWebKey;
+};
+export declare class DpopKey {
+    private readonly privateKey;
+    private readonly publicJwk;
+    private readonly privateJwk;
+    private constructor();
+    static generate(): Promise<DpopKey>;
+    static fromStored(stored: StoredDpopKey): Promise<DpopKey>;
+    /** Serializable form for persistence (contains the private key). */
+    toStored(): StoredDpopKey;
+    /** RFC 7638 JWK thumbprint of the public key. */
+    thumbprint(): Promise<string>;
+    /**
+     * Generates a DPoP proof JWT for one HTTP request. When `accessToken` is
+     * provided the proof is bound to it via the `ath` claim.
+     */
+    proof(method: string, url: string, accessToken?: string): Promise<string>;
+}
+//# sourceMappingURL=dpop.d.ts.map

package/dist/dpop.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"dpop.d.ts","sourceRoot":"","sources":["../src/dpop.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,MAAM,MAAM,aAAa,GAAG;IAC3B,sEAAsE;IACtE,UAAU,EAAE,UAAU,CAAA;CACtB,CAAA;AAkBD,qBAAa,OAAO;IAElB,OAAO,CAAC,QAAQ,CAAC,UAAU;IAC3B,OAAO,CAAC,QAAQ,CAAC,SAAS;IAC1B,OAAO,CAAC,QAAQ,CAAC,UAAU;IAH5B,OAAO,eAIH;IAEJ,OAAa,QAAQ,IAAI,OAAO,CAAC,OAAO,CAAC,CAOxC;IAED,OAAa,UAAU,CAAC,MAAM,EAAE,aAAa,GAAG,OAAO,CAAC,OAAO,CAAC,CAO/D;IAED,oEAAoE;IACpE,QAAQ,IAAI,aAAa,CAExB;IAED,iDAAiD;IAC3C,UAAU,IAAI,OAAO,CAAC,MAAM,CAAC,CAIlC;IAED;;;OAGG;IACG,KAAK,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,WAAW,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CA0B9E;CACD"}