@oneidentity/safeguard 8.2.0-pre58935 → 8.2.0-pre6932

package/dist/browser.d.ts

@@ -35,7 +35,7 @@ interface StorageProvider {
   clear(): void;
 }
 /** Well-known storage keys used by the SDK. */
-declare const StorageKeys: {
+export declare const StorageKeys: {
   readonly STATE: "safeguard_state";
   readonly CODE_VERIFIER: "safeguard_code_verifier";
 };
@@ -49,7 +49,7 @@ declare const StorageKeys: {
  * - `console.log(secretValue)` prints "[REDACTED]"
  * - `.expose()` returns the raw value when intentionally needed
  */
-declare class SecretValue {
+export declare class SecretValue {
   #private;
   constructor(value: string);
   /** Returns the raw secret. Use only when you intentionally need the plaintext. */
@@ -94,7 +94,7 @@ interface Auth {
 /**
  * Safeguard appliance service endpoints.
  */
-declare enum Service {
+export declare enum Service {
   CORE = "core",
   APPLIANCE = "appliance",
   NOTIFICATION = "notification",
@@ -105,7 +105,7 @@ declare enum Service {
 /**
  * HTTP methods supported by the Safeguard API.
  */
-declare enum HttpMethod {
+export declare enum HttpMethod {
   GET = "GET",
   POST = "POST",
   PUT = "PUT",
@@ -169,7 +169,7 @@ interface SafeguardClientOptions {
  * ├── TransportError        (Network/connection failures)
  * └── ConfigurationError    (Invalid client options)
  */
-declare class SafeguardError extends Error {
+export declare class SafeguardError extends Error {
   constructor(message: string, options?: ErrorOptions);
 }
 interface ApiErrorBody {
@@ -180,7 +180,7 @@ interface ApiErrorBody {
   };
   [key: string]: unknown;
 }
-declare class ApiError extends SafeguardError {
+export declare class ApiError extends SafeguardError {
   readonly status: number;
   readonly body: ApiErrorBody | null;
   constructor(message: string, status: number, body?: ApiErrorBody | null, options?: ErrorOptions);
@@ -191,19 +191,19 @@ declare class ApiError extends SafeguardError {
   private static parseBody;
   private static buildMessage;
 }
-declare class AuthenticationError extends ApiError {
+export declare class AuthenticationError extends ApiError {
   constructor(message: string, body?: ApiErrorBody | null, options?: ErrorOptions);
 }
-declare class AuthorizationError extends ApiError {
+export declare class AuthorizationError extends ApiError {
   constructor(message: string, body?: ApiErrorBody | null, options?: ErrorOptions);
 }
-declare class NotFoundError extends ApiError {
+export declare class NotFoundError extends ApiError {
   constructor(message: string, body?: ApiErrorBody | null, options?: ErrorOptions);
 }
-declare class TransportError extends SafeguardError {
+export declare class TransportError extends SafeguardError {
   constructor(message: string, options?: ErrorOptions);
 }
-declare class ConfigurationError extends SafeguardError {
+export declare class ConfigurationError extends SafeguardError {
   constructor(message: string, options?: ErrorOptions);
 }
 //#endregion
@@ -215,7 +215,7 @@ declare class ConfigurationError extends SafeguardError {
  * buildServiceUrl('appliance.example.com', Service.CORE)
  * // => 'https://appliance.example.com/service/core/v4'
  */
-declare function buildServiceUrl(host: string, service: Service, apiVersion?: string): string;
+export declare function buildServiceUrl(host: string, service: Service, apiVersion?: string): string;
 /**
  * Builds a full API URL including path and optional query parameters.
  *
@@ -223,32 +223,32 @@ declare function buildServiceUrl(host: string, service: Service, apiVersion?: st
  * buildRequestUrl('appliance.example.com', Service.CORE, 'Users', { filter: 'Name eq "admin"' })
  * // => 'https://appliance.example.com/service/core/v4/Users?filter=Name+eq+%22admin%22'
  */
-declare function buildRequestUrl(host: string, service: Service, relativeUrl: string, query?: Record<string, string | number | boolean>, apiVersion?: string): string;
+export declare function buildRequestUrl(host: string, service: Service, relativeUrl: string, query?: Record<string, string | number | boolean>, apiVersion?: string): string;
 /**
  * Encodes bytes to a URL-safe base64 string (no padding).
  */
-declare function base64UrlEncode(bytes: Uint8Array): string;
+export declare function base64UrlEncode(bytes: Uint8Array): string;
 /**
  * Generates a cryptographically random code verifier for PKCE.
  * Returns a 43-character base64url string (32 random bytes).
  */
-declare function generateCodeVerifier(): string;
+export declare function generateCodeVerifier(): string;
 /**
  * Computes the S256 code challenge from a code verifier.
  * Uses Web Crypto API (available in Node 20+ and all modern browsers).
  */
-declare function generateCodeChallenge(verifier: string): Promise<string>;
+export declare function generateCodeChallenge(verifier: string): Promise<string>;
 /**
  * Generates a random state parameter for OAuth flows.
  */
-declare function generateState(): string;
+export declare function generateState(): string;
 //#endregion
 //#region src/storage/memory.d.ts
 /**
  * In-memory storage provider. Default for Node.js environments.
  * Data does not persist across process restarts.
  */
-declare class MemoryStorage implements StorageProvider {
+export declare class MemoryStorage implements StorageProvider {
   #private;
   get(key: string): string | null;
   set(key: string, value: string): void;
@@ -261,7 +261,7 @@ declare class MemoryStorage implements StorageProvider {
  * Browser sessionStorage adapter. Data persists for the browser tab lifetime.
  * Requires a DOM environment (browser or jsdom).
  */
-declare class BrowserSessionStorage implements StorageProvider {
+export declare class BrowserSessionStorage implements StorageProvider {
   get(key: string): string | null;
   set(key: string, value: string): void;
   remove(key: string): void;
@@ -273,7 +273,7 @@ declare class BrowserSessionStorage implements StorageProvider {
  * Browser HTTP client using native fetch API.
  * No TLS configuration needed — browser handles certificates.
  */
-declare class BrowserHttpClient implements HttpClient {
+export declare class BrowserHttpClient implements HttpClient {
   #private;
   constructor(options?: {
     credentials?: RequestCredentials;
@@ -291,7 +291,7 @@ interface PasswordAuthOptions {
 /**
  * Authenticates using username/password via RSTS Resource Owner grant.
  */
-declare class PasswordAuth implements Auth {
+export declare class PasswordAuth implements Auth {
   #private;
   constructor(options: PasswordAuthOptions);
   get description(): string;
@@ -310,7 +310,7 @@ interface PkceAuthOptions {
  * Authenticates using PKCE (Proof Key for Code Exchange) with browser redirect.
  * For browser environments where the user is redirected to RSTS login.
  */
-declare class PkceAuth implements Auth {
+export declare class PkceAuth implements Auth {
   #private;
   constructor(options: PkceAuthOptions);
   get description(): string;
@@ -368,7 +368,7 @@ interface DeviceCodeAuthOptions {
  * spawns or opens a browser and performs no display I/O. Platform-agnostic, so
  * it is exported from both the Node and browser entry points.
  */
-declare class DeviceCodeAuth implements Auth {
+export declare class DeviceCodeAuth implements Auth {
   #private;
   constructor(options: DeviceCodeAuthOptions);
   get description(): string;
@@ -391,7 +391,7 @@ interface PkceCallbackResult {
  * @param url - The callback URL to parse (defaults to window.location.href)
  * @returns The parsed code and state, or null if not a valid callback
  */
-declare function handlePkceCallback(storage: StorageProvider, url?: string): PkceCallbackResult | null;
+export declare function handlePkceCallback(storage: StorageProvider, url?: string): PkceCallbackResult | null;
 //#endregion
 //#region src/auth/token.d.ts
 interface TokenAuthOptions {
@@ -402,7 +402,7 @@ interface TokenAuthOptions {
  * Uses a pre-existing access token. No authentication flow — the token is assumed valid.
  * Useful when tokens are obtained externally or for service-to-service scenarios.
  */
-declare class TokenAuth implements Auth {
+export declare class TokenAuth implements Auth {
   #private;
   constructor(options: TokenAuthOptions);
   get description(): string;
@@ -414,7 +414,7 @@ declare class TokenAuth implements Auth {
  * Anonymous authentication — no credentials.
  * Used for accessing public Safeguard endpoints (e.g., appliance status).
  */
-declare class AnonymousAuth implements Auth {
+export declare class AnonymousAuth implements Auth {
   get description(): string;
   authenticate(_host: string, _httpClient: HttpClient, _storage: StorageProvider): Promise<TokenSet>;
 }
@@ -424,7 +424,7 @@ declare class AnonymousAuth implements Auth {
  * Main entry point for the Safeguard SDK.
  * Instance-based — no global state. Multiple clients to different appliances are supported.
  */
-declare class SafeguardClient {
+export declare class SafeguardClient {
   #private;
   constructor(host: string, options: SafeguardClientOptions);
   /** The appliance hostname this client connects to. */
@@ -477,5 +477,5 @@ declare class SafeguardClient {
   invoke<T = unknown>(service: Service, method: HttpMethod, relativeUrl: string, options?: RequestOptions): Promise<T>;
 }
 //#endregion
-export { AnonymousAuth, ApiError, type ApiErrorBody, type Auth, AuthenticationError, AuthorizationError, BrowserHttpClient, BrowserSessionStorage, ConfigurationError, DeviceCodeAuth, type DeviceCodeAuthOptions, type DeviceCodeInfo, type HttpClient, HttpMethod, type HttpRequestOptions, type HttpResponse, MemoryStorage, NotFoundError, PasswordAuth, type PasswordAuthOptions, PkceAuth, type PkceAuthOptions, type PkceCallbackResult, type RequestOptions, SafeguardClient, type SafeguardClientOptions, SafeguardError, type SafeguardResponse, SecretValue, Service, StorageKeys, type StorageProvider, TokenAuth, type TokenAuthOptions, type TokenSet, TransportError, base64UrlEncode, buildRequestUrl, buildServiceUrl, generateCodeChallenge, generateCodeVerifier, generateState, handlePkceCallback };
+export type { ApiErrorBody, Auth, DeviceCodeAuthOptions, DeviceCodeInfo, HttpClient, HttpRequestOptions, HttpResponse, PasswordAuthOptions, PkceAuthOptions, PkceCallbackResult, RequestOptions, SafeguardClientOptions, SafeguardResponse, StorageProvider, TokenAuthOptions, TokenSet };
 //# sourceMappingURL=browser.d.ts.map

package/dist/browser.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"browser.d.ts","names":[],"sources":["../src/http/types.ts","../src/storage/types.ts","../src/secret.ts","../src/auth/types.ts","../src/types.ts","../src/errors.ts","../src/utils.ts","../src/storage/memory.ts","../src/storage/session.ts","../src/http/browser.ts","../src/auth/password.ts","../src/auth/pkce.ts","../src/auth/device-code.ts","../src/auth/pkce-callback.ts","../src/auth/token.ts","../src/auth/anonymous.ts","../src/client.ts"],"mappings":";;;;UAIiB;EACf;EACA;EACA,UAAU;EACV,gBAAgB;EAChB,SAAS;EACT;;UAGe;EACf;EACA,SAAS;EACT;;;;;;UA+Ce;EACf,QAAQ,SAAS,qBAAqB,QAAQ;EAC9C;;;;;;;UC9De;EACf,IAAI;EACJ,IAAI,aAAa;EACjB,OAAO;EACP;;;cAIW;WAAA;WAAA;;;;;;;;;;;;cCDA;;EAGC,YAAA;;EAKZ;EAIA;EAIA;OASK,OAAO;;;;;;;UC5BG;;EAEf,aAAa;;EAEb;;EAEA;;;;;UAMe;;;;;;;EAOf,aAAa,cAAc,YAAY,YAAY,SAAS,kBAAkB,QAAQ;;;;EAKtF,cAAc,cAAc,YAAY,YAAY,SAAS,kBAAkB,QAAQ;;WAG9E;;;;;;;aC/BC;EACV;EACA;EACA;EACA;EACA;EACA;;;;;aAMU;EACV;EACA;EACA;EACA;EACA;;;;;UAMe,kBAAkB;EACjC,MAAM;EACN;EACA,SAAS;;;;;UAMM;;EAEf;;EAEA,OAAO;;EAEP,UAAU;;EAEV,QAAQ;;EAER,SAAS;;EAET;;EAEA;;;;;UAMe;;EAEf,MAFe;;EAIf,cAAc;;EAEd;;EAEA;;EAEA;;EAEA;;;;;;;;;;;;;;;cCvDW,uBAAuB;EACtB,YAAA,iBAAiB,UAAU;;UAMxB;EACf;EACA;EACA;IAAe;;GACd;;cAGU,iBAAiB;WACnB;WACA,MAAM;EAEH,YAAA,iBAAiB,gBAAgB,OAAM,qBAA4B,UAAU;;;;SAUlF,aAAa,gBAAgB,eAAe,sBAAsB;iBAgB1D;iBAUA;;cASJ,4BAA4B;EAC3B,YAAA,iBAAiB,OAAM,qBAA4B,UAAU;;cAM9D,2BAA2B;EAC1B,YAAA,iBAAiB,OAAM,qBAA4B,UAAU;;cAM9D,sBAAsB;EACrB,YAAA,iBAAiB,OAAM,qBAA4B,UAAU;;cAM9D,uBAAuB;EACtB,YAAA,iBAAiB,UAAU;;cAM5B,2BAA2B;EAC1B,YAAA,iBAAiB,UAAU;;;;;;;;;;;iBCxDzB,gBAAgB,cAAc,SAAS,SAAS;;;;;;;;iBAchD,gBACd,cACA,SAAS,SACT,qBACA,QAAQ,2CACR;;;;iBAkBc,gBAAgB,OAAO;;;;;iBASvB;;;;;iBAUM,sBAAsB,mBAAmB;;;;iBAU/C;;;;;;;cC5GH,yBAAyB;;EAGpC,IAAI;EAIJ,IAAI,aAAa;EAIjB,OAAO;EAIP;;;;;;;;cCfW,iCAAiC;EAC5C,IAAI;EAIJ,IAAI,aAAa;EAIjB,OAAO;EAIP;;;;;;;;cCbW,6BAA6B;;EAG5B,YAAA;IAAY,cAAc;;EAIhC,QAAQ,SAAS,qBAAqB,QAAQ;;;;UCNrC;EACf;EACA;;EAEA;;;;;cAMW,wBAAwB;;EAKvB,YAAA,SAAS;MASjB;EAIE,aAAa,cAAc,YAAY,YAAY,UAAU,kBAAkB,QAAQ;EAUvF,aAAa,cAAc,YAAY,YAAY,SAAS,kBAAkB,QAAQ;;;;UCrC7E;;EAEf;;EAEA;;;;;;cAOW,oBAAoB;;EAInB,YAAA,SAAS;MAOjB;;;;;EAQE,aAAa,cAAc,YAAY,YAAY,SAAS,kBAAkB,QAAQ;;;;;;;;;;UC1B7E;;EAEf;;EAEA;;EAEA;;EAEA;;EAEA;;;;;UAMe;;;;;;EAMf,eAAe,MAAM,0BAA0B;;EAE/C;;EAEA;;EAEA;;EAEA,SAAS;;;;;;;;;;;cA6DE,0BAA0B;;EAOzB,YAAA,SAAS;MAcjB;EAIE,aACJ,cACA,YAAY,YACZ,UAAU,kBACT,QAAQ;;;;UChII;EACf;EACA;;;;;;;;;;;;;iBAcc,mBACd,SAAS,iBACT,eACC;;;UCjBc;;EAEf;;;;;;cAOW,qBAAqB;;EAGpB,YAAA,SAAS;MAKjB;EAIE,aAAa,eAAe,aAAa,YAAY,UAAU,kBAAkB,QAAQ;;;;;;;;cClBpF,yBAAyB;MAChC;EAIE,aAAa,eAAe,aAAa,YAAY,UAAU,kBAAkB,QAAQ;;;;;;;;cCGpF;;EAgBC,YAAA,cAAc,SAAS;;MAc/B;;MAKA;;MAKA,eAAe;;MAKf;;MAKA;;;;;EAQJ,WAAW,SAAS;;;;;;;EAWpB,cAAc,YAAY;;;;;;EAUpB,WAAW;;;;EAiBX,cAAc;;;;EASpB;EAQM,IAAI,aAAa,SAAS,SAAS,qBAAqB,UAAU,iBAAiB,QAAQ;EAI3F,KAAK,aAAa,SAAS,SAAS,qBAAqB,UAAU,iBAAiB,QAAQ;EAI5F,IAAI,aAAa,SAAS,SAAS,qBAAqB,UAAU,iBAAiB,QAAQ;EAI3F,OAAO,aAAa,SAAS,SAAS,qBAAqB,UAAU,iBAAiB,QAAQ;EAI9F,MAAM,aAAa,SAAS,SAAS,qBAAqB,UAAU,iBAAiB,QAAQ;;;;;;;EAY7F,OAAO,aACX,SAAS,SACT,QAAQ,YACR,qBACA,UAAU,iBACT,QAAQ"}
+{"version":3,"file":"browser.d.ts","names":["_$__auth_types_js0.Auth"],"sources":["../src/http/types.ts","../src/storage/types.ts","../src/secret.ts","../src/auth/types.ts","../src/types.ts","../src/errors.ts","../src/utils.ts","../src/storage/memory.ts","../src/storage/session.ts","../src/http/browser.ts","../src/auth/password.ts","../src/auth/pkce.ts","../src/auth/device-code.ts","../src/auth/pkce-callback.ts","../src/auth/token.ts","../src/auth/anonymous.ts","../src/client.ts"],"mappings":";;;;UAIiB;EACf;EACA;EACA,UAAU;EACV,gBAAgB;EAChB,SAAS;EACT;;UAGe;EACf;EACA,SAAS;EACT;;;;;;UA+Ce;EACf,QAAQ,SAAS,qBAAqB,QAAQ;EAC9C;;;;;;;UC9De;EACf,IAAI;EACJ,IAAI,aAAa;EACjB,OAAO;EACP;;;qBAIW;;;;;;;;;;;;;;qBCDA;;EAGC,YAAA;;EAKZ;EAIA;EAIA;OASK,OAAO;;;;;;;UC5BG;;EAEf,aAAa;;EAEb;;EAEA;;;;;UAMe;;;;;;;EAOf,aAAa,cAAc,YAAY,YAAY,SAAS,kBAAkB,QAAQ;;;;EAKtF,cAAc,cAAc,YAAY,YAAY,SAAS,kBAAkB,QAAQ;;WAG9E;;;;;;;oBC/BC;EACV;EACA;EACA;EACA;EACA;EACA;;;;;oBAMU;EACV;EACA;EACA;EACA;EACA;;;;;UAMe,kBAAkB;EACjC,MAAM;EACN;EACA,SAAS;;;;;UAMM;;EAEf;;EAEA,OAAO;;EAEP,UAAU;;EAEV,QAAQ;;EAER,SAAS;;EAET;;EAEA;;;;;UAMe;;EAEf,MAFeA;;EAIf,cAAc;;EAEd;;EAEA;;EAEA;;EAEA;;;;;;;;;;;;;;;qBCvDW,uBAAuB;EACtB,YAAA,iBAAiB,UAAU;;UAMxB;EACf;EACA;EACA;IAAe;;GACd;;qBAGU,iBAAiB;WACnB;WACA,MAAM;EAEH,YAAA,iBAAiB,gBAAgB,OAAM,qBAA4B,UAAU;;;;SAUlF,aAAa,gBAAgB,eAAe,sBAAsB;iBAgB1D;iBAUA;;qBASJ,4BAA4B;EAC3B,YAAA,iBAAiB,OAAM,qBAA4B,UAAU;;qBAM9D,2BAA2B;EAC1B,YAAA,iBAAiB,OAAM,qBAA4B,UAAU;;qBAM9D,sBAAsB;EACrB,YAAA,iBAAiB,OAAM,qBAA4B,UAAU;;qBAM9D,uBAAuB;EACtB,YAAA,iBAAiB,UAAU;;qBAM5B,2BAA2B;EAC1B,YAAA,iBAAiB,UAAU;;;;;;;;;;;wBCxDzB,gBAAgB,cAAc,SAAS,SAAS;;;;;;;;wBAchD,gBACd,cACA,SAAS,SACT,qBACA,QAAQ,2CACR;;;;wBAkBc,gBAAgB,OAAO;;;;;wBASvB;;;;;wBAUM,sBAAsB,mBAAmB;;;;wBAU/C;;;;;;;qBC5GH,yBAAyB;;EAGpC,IAAI;EAIJ,IAAI,aAAa;EAIjB,OAAO;EAIP;;;;;;;;qBCfW,iCAAiC;EAC5C,IAAI;EAIJ,IAAI,aAAa;EAIjB,OAAO;EAIP;;;;;;;;qBCbW,6BAA6B;;EAG5B,YAAA;IAAY,cAAc;;EAIhC,QAAQ,SAAS,qBAAqB,QAAQ;;;;UCNrC;EACf;EACA;;EAEA;;;;;qBAMW,wBAAwB;;EAKvB,YAAA,SAAS;MASjB;EAIE,aAAa,cAAc,YAAY,YAAY,UAAU,kBAAkB,QAAQ;EAUvF,aAAa,cAAc,YAAY,YAAY,SAAS,kBAAkB,QAAQ;;;;UCrC7E;;EAEf;;EAEA;;;;;;qBAOW,oBAAoB;;EAInB,YAAA,SAAS;MAOjB;;;;;EAQE,aAAa,cAAc,YAAY,YAAY,SAAS,kBAAkB,QAAQ;;;;;;;;;;UC1B7E;;EAEf;;EAEA;;EAEA;;EAEA;;EAEA;;;;;UAMe;;;;;;EAMf,eAAe,MAAM,0BAA0B;;EAE/C;;EAEA;;EAEA;;EAEA,SAAS;;;;;;;;;;;qBA6DE,0BAA0B;;EAOzB,YAAA,SAAS;MAcjB;EAIE,aACJ,cACA,YAAY,YACZ,UAAU,kBACT,QAAQ;;;;UChII;EACf;EACA;;;;;;;;;;;;;wBAcc,mBACd,SAAS,iBACT,eACC;;;UCjBc;;EAEf;;;;;;qBAOW,qBAAqB;;EAGpB,YAAA,SAAS;MAKjB;EAIE,aAAa,eAAe,aAAa,YAAY,UAAU,kBAAkB,QAAQ;;;;;;;;qBClBpF,yBAAyB;MAChC;EAIE,aAAa,eAAe,aAAa,YAAY,UAAU,kBAAkB,QAAQ;;;;;;;;qBCGpF;;EAgBC,YAAA,cAAc,SAAS;;MAc/B;;MAKA;;MAKA,eAAe;;MAKf;;MAKA;;;;;EAQJ,WAAW,SAAS;;;;;;;EAWpB,cAAc,YAAY;;;;;;EAUpB,WAAW;;;;EAiBX,cAAc;;;;EASpB;EAQM,IAAI,aAAa,SAAS,SAAS,qBAAqB,UAAU,iBAAiB,QAAQ;EAI3F,KAAK,aAAa,SAAS,SAAS,qBAAqB,UAAU,iBAAiB,QAAQ;EAI5F,IAAI,aAAa,SAAS,SAAS,qBAAqB,UAAU,iBAAiB,QAAQ;EAI3F,OAAO,aAAa,SAAS,SAAS,qBAAqB,UAAU,iBAAiB,QAAQ;EAI9F,MAAM,aAAa,SAAS,SAAS,qBAAqB,UAAU,iBAAiB,QAAQ;;;;;;;EAY7F,OAAO,aACX,SAAS,SACT,QAAQ,YACR,qBACA,UAAU,iBACT,QAAQ"}

package/dist/events.d.cts

@@ -35,7 +35,7 @@ interface PersistentListenerOptions {
  * One-shot event listener wrapping a SignalR HubConnection.
  * For persistent auto-reconnect behavior, use PersistentSafeguardEventListener.
  */
-declare class SafeguardEventListener {
+export declare class SafeguardEventListener {
   #private;
   constructor(connection: HubConnection);
   /** Current connection state. */
@@ -131,7 +131,7 @@ interface Auth {
  * - State change event notifications
  * - Manual `stop()` that prevents further auto-reconnect
  */
-declare class PersistentSafeguardEventListener {
+export declare class PersistentSafeguardEventListener {
   #private;
   constructor(connection: HubConnection, auth: Auth, host: string, httpClient: HttpClient, storage: StorageProvider, options?: PersistentListenerOptions, tokenSet?: TokenSet);
   /** Current connection state. */
@@ -154,5 +154,5 @@ declare class PersistentSafeguardEventListener {
   stop(): Promise<void>;
 }
 //#endregion
-export { type EventHandler, type EventListenerState, type PersistentListenerOptions, PersistentSafeguardEventListener, type SafeguardEvent, SafeguardEventListener, type StateChangeHandler };
+export type { EventHandler, EventListenerState, PersistentListenerOptions, SafeguardEvent, StateChangeHandler };
 //# sourceMappingURL=events.d.cts.map

package/dist/events.d.cts.map

@@ -1 +1 @@
-{"version":3,"file":"events.d.cts","names":[],"sources":["../src/events/types.ts","../src/events/listener.ts","../src/http/types.ts","../src/storage/types.ts","../src/secret.ts","../src/auth/types.ts","../src/events/persistent.ts"],"mappings":";;;;;KAGY;;;;KAUA,gBAAgB,OAAO;;;;KAKvB,sBAAsB,OAAO;;;;UAKxB;EACf;GACC;;;;;UAMc;;EAEf;;EAEA;;;;;;;;cC5BW;;EAKC,YAAA,YAAY;;MAwBpB,SAAS;;;;EAOb,GAAG,6BAA6B,SAAS;;;;EAQnC,SAAS;;;;EAST,QAAQ;;;;;;;UCxDC;EACf;EACA;EACA,UAAU;EACV,gBAAgB;EAChB,SAAS;EACT;;UAGe;EACf;EACA,SAAS;EACT;;;;;;UA+Ce;EACf,QAAQ,SAAS,qBAAqB,QAAQ;EAC9C;;;;;;;UC9De;EACf,IAAI;EACJ,IAAI,aAAa;EACjB,OAAO;EACP;;;;;;;;;;;;cCGW;;EAGC,YAAA;;EAKZ;EAIA;EAIA;OASK,OAAO;;;;;;;UC5BG;;EAEf,aAAa;;EAEb;;EAEA;;;;;UAMe;;;;;;;EAOf,aAAa,cAAc,YAAY,YAAY,SAAS,kBAAkB,QAAQ;;;;EAKtF,cAAc,cAAc,YAAY,YAAY,SAAS,kBAAkB,QAAQ;;WAG9E;;;;;;;;;;;;cCXE;;EAoBT,YAAA,YAAY,eACZ,MAAM,MACN,cACA,YAAY,YACZ,SAAS,iBACT,UAAU,2BACV,WAAW;;MAmCT,SAAS;;;;EAOb,GAAG,6BAA6B,SAAS;;;;EAQzC,cAAc,SAAS;;;;EAQjB,SAAS;;;;EAWT,QAAQ"}
+{"version":3,"file":"events.d.cts","names":[],"sources":["../src/events/types.ts","../src/events/listener.ts","../src/http/types.ts","../src/storage/types.ts","../src/secret.ts","../src/auth/types.ts","../src/events/persistent.ts"],"mappings":";;;;;KAGY;;;;KAUA,gBAAgB,OAAO;;;;KAKvB,sBAAsB,OAAO;;;;UAKxB;EACf;GACC;;;;;UAMc;;EAEf;;EAEA;;;;;;;;qBC5BW;;EAKC,YAAA,YAAY;;MAwBpB,SAAS;;;;EAOb,GAAG,6BAA6B,SAAS;;;;EAQnC,SAAS;;;;EAST,QAAQ;;;;;;;UCxDC;EACf;EACA;EACA,UAAU;EACV,gBAAgB;EAChB,SAAS;EACT;;UAGe;EACf;EACA,SAAS;EACT;;;;;;UA+Ce;EACf,QAAQ,SAAS,qBAAqB,QAAQ;EAC9C;;;;;;;UC9De;EACf,IAAI;EACJ,IAAI,aAAa;EACjB,OAAO;EACP;;;;;;;;;;;;cCGW;;EAGC,YAAA;;EAKZ;EAIA;EAIA;OASK,OAAO;;;;;;;UC5BG;;EAEf,aAAa;;EAEb;;EAEA;;;;;UAMe;;;;;;;EAOf,aAAa,cAAc,YAAY,YAAY,SAAS,kBAAkB,QAAQ;;;;EAKtF,cAAc,cAAc,YAAY,YAAY,SAAS,kBAAkB,QAAQ;;WAG9E;;;;;;;;;;;;qBCXE;;EAoBT,YAAA,YAAY,eACZ,MAAM,MACN,cACA,YAAY,YACZ,SAAS,iBACT,UAAU,2BACV,WAAW;;MAmCT,SAAS;;;;EAOb,GAAG,6BAA6B,SAAS;;;;EAQzC,cAAc,SAAS;;;;EAQjB,SAAS;;;;EAWT,QAAQ"}

package/dist/events.d.ts

@@ -35,7 +35,7 @@ interface PersistentListenerOptions {
  * One-shot event listener wrapping a SignalR HubConnection.
  * For persistent auto-reconnect behavior, use PersistentSafeguardEventListener.
  */
-declare class SafeguardEventListener {
+export declare class SafeguardEventListener {
   #private;
   constructor(connection: HubConnection);
   /** Current connection state. */
@@ -131,7 +131,7 @@ interface Auth {
  * - State change event notifications
  * - Manual `stop()` that prevents further auto-reconnect
  */
-declare class PersistentSafeguardEventListener {
+export declare class PersistentSafeguardEventListener {
   #private;
   constructor(connection: HubConnection, auth: Auth, host: string, httpClient: HttpClient, storage: StorageProvider, options?: PersistentListenerOptions, tokenSet?: TokenSet);
   /** Current connection state. */
@@ -154,5 +154,5 @@ declare class PersistentSafeguardEventListener {
   stop(): Promise<void>;
 }
 //#endregion
-export { type EventHandler, type EventListenerState, type PersistentListenerOptions, PersistentSafeguardEventListener, type SafeguardEvent, SafeguardEventListener, type StateChangeHandler };
+export type { EventHandler, EventListenerState, PersistentListenerOptions, SafeguardEvent, StateChangeHandler };
 //# sourceMappingURL=events.d.ts.map

package/dist/events.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"events.d.ts","names":[],"sources":["../src/events/types.ts","../src/events/listener.ts","../src/http/types.ts","../src/storage/types.ts","../src/secret.ts","../src/auth/types.ts","../src/events/persistent.ts"],"mappings":";;;;;KAGY;;;;KAUA,gBAAgB,OAAO;;;;KAKvB,sBAAsB,OAAO;;;;UAKxB;EACf;GACC;;;;;UAMc;;EAEf;;EAEA;;;;;;;;cC5BW;;EAKC,YAAA,YAAY;;MAwBpB,SAAS;;;;EAOb,GAAG,6BAA6B,SAAS;;;;EAQnC,SAAS;;;;EAST,QAAQ;;;;;;;UCxDC;EACf;EACA;EACA,UAAU;EACV,gBAAgB;EAChB,SAAS;EACT;;UAGe;EACf;EACA,SAAS;EACT;;;;;;UA+Ce;EACf,QAAQ,SAAS,qBAAqB,QAAQ;EAC9C;;;;;;;UC9De;EACf,IAAI;EACJ,IAAI,aAAa;EACjB,OAAO;EACP;;;;;;;;;;;;cCGW;;EAGC,YAAA;;EAKZ;EAIA;EAIA;OASK,OAAO;;;;;;;UC5BG;;EAEf,aAAa;;EAEb;;EAEA;;;;;UAMe;;;;;;;EAOf,aAAa,cAAc,YAAY,YAAY,SAAS,kBAAkB,QAAQ;;;;EAKtF,cAAc,cAAc,YAAY,YAAY,SAAS,kBAAkB,QAAQ;;WAG9E;;;;;;;;;;;;cCXE;;EAoBT,YAAA,YAAY,eACZ,MAAM,MACN,cACA,YAAY,YACZ,SAAS,iBACT,UAAU,2BACV,WAAW;;MAmCT,SAAS;;;;EAOb,GAAG,6BAA6B,SAAS;;;;EAQzC,cAAc,SAAS;;;;EAQjB,SAAS;;;;EAWT,QAAQ"}
+{"version":3,"file":"events.d.ts","names":[],"sources":["../src/events/types.ts","../src/events/listener.ts","../src/http/types.ts","../src/storage/types.ts","../src/secret.ts","../src/auth/types.ts","../src/events/persistent.ts"],"mappings":";;;;;KAGY;;;;KAUA,gBAAgB,OAAO;;;;KAKvB,sBAAsB,OAAO;;;;UAKxB;EACf;GACC;;;;;UAMc;;EAEf;;EAEA;;;;;;;;qBC5BW;;EAKC,YAAA,YAAY;;MAwBpB,SAAS;;;;EAOb,GAAG,6BAA6B,SAAS;;;;EAQnC,SAAS;;;;EAST,QAAQ;;;;;;;UCxDC;EACf;EACA;EACA,UAAU;EACV,gBAAgB;EAChB,SAAS;EACT;;UAGe;EACf;EACA,SAAS;EACT;;;;;;UA+Ce;EACf,QAAQ,SAAS,qBAAqB,QAAQ;EAC9C;;;;;;;UC9De;EACf,IAAI;EACJ,IAAI,aAAa;EACjB,OAAO;EACP;;;;;;;;;;;;cCGW;;EAGC,YAAA;;EAKZ;EAIA;EAIA;OASK,OAAO;;;;;;;UC5BG;;EAEf,aAAa;;EAEb;;EAEA;;;;;UAMe;;;;;;;EAOf,aAAa,cAAc,YAAY,YAAY,SAAS,kBAAkB,QAAQ;;;;EAKtF,cAAc,cAAc,YAAY,YAAY,SAAS,kBAAkB,QAAQ;;WAG9E;;;;;;;;;;;;qBCXE;;EAoBT,YAAA,YAAY,eACZ,MAAM,MACN,cACA,YAAY,YACZ,SAAS,iBACT,UAAU,2BACV,WAAW;;MAmCT,SAAS;;;;EAOb,GAAG,6BAA6B,SAAS;;;;EAQzC,cAAc,SAAS;;;;EAQjB,SAAS;;;;EAWT,QAAQ"}

package/dist/index.d.cts

@@ -73,7 +73,7 @@ interface StorageProvider {
   clear(): void;
 }
 /** Well-known storage keys used by the SDK. */
-declare const StorageKeys: {
+export declare const StorageKeys: {
   readonly STATE: "safeguard_state";
   readonly CODE_VERIFIER: "safeguard_code_verifier";
 };
@@ -87,7 +87,7 @@ declare const StorageKeys: {
  * - `console.log(secretValue)` prints "[REDACTED]"
  * - `.expose()` returns the raw value when intentionally needed
  */
-declare class SecretValue {
+export declare class SecretValue {
   #private;
   constructor(value: string);
   /** Returns the raw secret. Use only when you intentionally need the plaintext. */
@@ -132,7 +132,7 @@ interface Auth {
 /**
  * Safeguard appliance service endpoints.
  */
-declare enum Service {
+export declare enum Service {
   CORE = "core",
   APPLIANCE = "appliance",
   NOTIFICATION = "notification",
@@ -143,7 +143,7 @@ declare enum Service {
 /**
  * HTTP methods supported by the Safeguard API.
  */
-declare enum HttpMethod {
+export declare enum HttpMethod {
   GET = "GET",
   POST = "POST",
   PUT = "PUT",
@@ -207,7 +207,7 @@ interface SafeguardClientOptions {
  * ├── TransportError        (Network/connection failures)
  * └── ConfigurationError    (Invalid client options)
  */
-declare class SafeguardError extends Error {
+export declare class SafeguardError extends Error {
   constructor(message: string, options?: ErrorOptions);
 }
 interface ApiErrorBody {
@@ -218,7 +218,7 @@ interface ApiErrorBody {
   };
   [key: string]: unknown;
 }
-declare class ApiError extends SafeguardError {
+export declare class ApiError extends SafeguardError {
   readonly status: number;
   readonly body: ApiErrorBody | null;
   constructor(message: string, status: number, body?: ApiErrorBody | null, options?: ErrorOptions);
@@ -229,19 +229,19 @@ declare class ApiError extends SafeguardError {
   private static parseBody;
   private static buildMessage;
 }
-declare class AuthenticationError extends ApiError {
+export declare class AuthenticationError extends ApiError {
   constructor(message: string, body?: ApiErrorBody | null, options?: ErrorOptions);
 }
-declare class AuthorizationError extends ApiError {
+export declare class AuthorizationError extends ApiError {
   constructor(message: string, body?: ApiErrorBody | null, options?: ErrorOptions);
 }
-declare class NotFoundError extends ApiError {
+export declare class NotFoundError extends ApiError {
   constructor(message: string, body?: ApiErrorBody | null, options?: ErrorOptions);
 }
-declare class TransportError extends SafeguardError {
+export declare class TransportError extends SafeguardError {
   constructor(message: string, options?: ErrorOptions);
 }
-declare class ConfigurationError extends SafeguardError {
+export declare class ConfigurationError extends SafeguardError {
   constructor(message: string, options?: ErrorOptions);
 }
 //#endregion
@@ -252,7 +252,7 @@ declare class ConfigurationError extends SafeguardError {
  *
  * @throws {ConfigurationError} if the host contains disallowed characters
  */
-declare function validateHost(host: string): string;
+export declare function validateHost(host: string): string;
 /**
  * Builds the base URL for a Safeguard service endpoint.
  *
@@ -260,7 +260,7 @@ declare function validateHost(host: string): string;
  * buildServiceUrl('appliance.example.com', Service.CORE)
  * // => 'https://appliance.example.com/service/core/v4'
  */
-declare function buildServiceUrl(host: string, service: Service, apiVersion?: string): string;
+export declare function buildServiceUrl(host: string, service: Service, apiVersion?: string): string;
 /**
  * Builds a full API URL including path and optional query parameters.
  *
@@ -268,32 +268,32 @@ declare function buildServiceUrl(host: string, service: Service, apiVersion?: st
  * buildRequestUrl('appliance.example.com', Service.CORE, 'Users', { filter: 'Name eq "admin"' })
  * // => 'https://appliance.example.com/service/core/v4/Users?filter=Name+eq+%22admin%22'
  */
-declare function buildRequestUrl(host: string, service: Service, relativeUrl: string, query?: Record<string, string | number | boolean>, apiVersion?: string): string;
+export declare function buildRequestUrl(host: string, service: Service, relativeUrl: string, query?: Record<string, string | number | boolean>, apiVersion?: string): string;
 /**
  * Encodes bytes to a URL-safe base64 string (no padding).
  */
-declare function base64UrlEncode(bytes: Uint8Array): string;
+export declare function base64UrlEncode(bytes: Uint8Array): string;
 /**
  * Generates a cryptographically random code verifier for PKCE.
  * Returns a 43-character base64url string (32 random bytes).
  */
-declare function generateCodeVerifier(): string;
+export declare function generateCodeVerifier(): string;
 /**
  * Computes the S256 code challenge from a code verifier.
  * Uses Web Crypto API (available in Node 20+ and all modern browsers).
  */
-declare function generateCodeChallenge(verifier: string): Promise<string>;
+export declare function generateCodeChallenge(verifier: string): Promise<string>;
 /**
  * Generates a random state parameter for OAuth flows.
  */
-declare function generateState(): string;
+export declare function generateState(): string;
 //#endregion
 //#region src/storage/memory.d.ts
 /**
  * In-memory storage provider. Default for Node.js environments.
  * Data does not persist across process restarts.
  */
-declare class MemoryStorage implements StorageProvider {
+export declare class MemoryStorage implements StorageProvider {
   #private;
   get(key: string): string | null;
   set(key: string, value: string): void;
@@ -306,7 +306,7 @@ declare class MemoryStorage implements StorageProvider {
  * Browser sessionStorage adapter. Data persists for the browser tab lifetime.
  * Requires a DOM environment (browser or jsdom).
  */
-declare class BrowserSessionStorage implements StorageProvider {
+export declare class BrowserSessionStorage implements StorageProvider {
   get(key: string): string | null;
   set(key: string, value: string): void;
   remove(key: string): void;
@@ -318,7 +318,7 @@ declare class BrowserSessionStorage implements StorageProvider {
  * Node.js HTTP client using undici for full TLS control.
  * Creates a per-instance Agent — no global state mutation.
  */
-declare class NodeHttpClient implements HttpClient {
+export declare class NodeHttpClient implements HttpClient {
   #private;
   constructor(tlsOptions?: TlsOptions);
   request(options: HttpRequestOptions): Promise<HttpResponse>;
@@ -330,7 +330,7 @@ declare class NodeHttpClient implements HttpClient {
  * Browser HTTP client using native fetch API.
  * No TLS configuration needed — browser handles certificates.
  */
-declare class BrowserHttpClient implements HttpClient {
+export declare class BrowserHttpClient implements HttpClient {
   #private;
   constructor(options?: {
     credentials?: RequestCredentials;
@@ -348,7 +348,7 @@ interface PasswordAuthOptions {
 /**
  * Authenticates using username/password via RSTS Resource Owner grant.
  */
-declare class PasswordAuth implements Auth {
+export declare class PasswordAuth implements Auth {
   #private;
   constructor(options: PasswordAuthOptions);
   get description(): string;
@@ -379,7 +379,7 @@ interface CertificateAuthOptions {
  * Authenticates using a client certificate (mTLS) against RSTS.
  * Node.js only — requires TLS client cert support in HttpClient.
  */
-declare class CertificateAuth implements Auth {
+export declare class CertificateAuth implements Auth {
   #private;
   constructor(options: CertificateAuthOptions);
   get description(): string;
@@ -405,7 +405,7 @@ interface PkceAuthOptions {
  * Authenticates using PKCE (Proof Key for Code Exchange) with browser redirect.
  * For browser environments where the user is redirected to RSTS login.
  */
-declare class PkceAuth implements Auth {
+export declare class PkceAuth implements Auth {
   #private;
   constructor(options: PkceAuthOptions);
   get description(): string;
@@ -430,7 +430,7 @@ interface PkceNonInteractiveAuthOptions {
  *
  * Matches PySafeguard's PkceAuth behavior (local server pattern).
  */
-declare class PkceNonInteractiveAuth implements Auth {
+export declare class PkceNonInteractiveAuth implements Auth {
   #private;
   constructor(options?: PkceNonInteractiveAuthOptions);
   get description(): string;
@@ -484,7 +484,7 @@ interface DeviceCodeAuthOptions {
  * spawns or opens a browser and performs no display I/O. Platform-agnostic, so
  * it is exported from both the Node and browser entry points.
  */
-declare class DeviceCodeAuth implements Auth {
+export declare class DeviceCodeAuth implements Auth {
   #private;
   constructor(options: DeviceCodeAuthOptions);
   get description(): string;
@@ -507,7 +507,7 @@ interface PkceCallbackResult {
  * @param url - The callback URL to parse (defaults to window.location.href)
  * @returns The parsed code and state, or null if not a valid callback
  */
-declare function handlePkceCallback(storage: StorageProvider, url?: string): PkceCallbackResult | null;
+export declare function handlePkceCallback(storage: StorageProvider, url?: string): PkceCallbackResult | null;
 //#endregion
 //#region src/auth/token.d.ts
 interface TokenAuthOptions {
@@ -518,7 +518,7 @@ interface TokenAuthOptions {
  * Uses a pre-existing access token. No authentication flow — the token is assumed valid.
  * Useful when tokens are obtained externally or for service-to-service scenarios.
  */
-declare class TokenAuth implements Auth {
+export declare class TokenAuth implements Auth {
   #private;
   constructor(options: TokenAuthOptions);
   get description(): string;
@@ -530,7 +530,7 @@ declare class TokenAuth implements Auth {
  * Anonymous authentication — no credentials.
  * Used for accessing public Safeguard endpoints (e.g., appliance status).
  */
-declare class AnonymousAuth implements Auth {
+export declare class AnonymousAuth implements Auth {
   get description(): string;
   authenticate(_host: string, _httpClient: HttpClient, _storage: StorageProvider): Promise<TokenSet>;
 }
@@ -540,7 +540,7 @@ declare class AnonymousAuth implements Auth {
  * Main entry point for the Safeguard SDK.
  * Instance-based — no global state. Multiple clients to different appliances are supported.
  */
-declare class SafeguardClient {
+export declare class SafeguardClient {
   #private;
   constructor(host: string, options: SafeguardClientOptions);
   /** The appliance hostname this client connects to. */
@@ -597,7 +597,7 @@ declare class SafeguardClient {
 /**
  * SSH key formats for private key retrieval.
  */
-declare enum SshKeyFormat {
+export declare enum SshKeyFormat {
   OpenSsh = "OpenSsh",
   Ssh2 = "Ssh2",
   Putty = "Putty"
@@ -617,7 +617,7 @@ interface RetrievableAccount {
 /**
  * Brokered access request types.
  */
-declare enum BrokeredAccessRequestType {
+export declare enum BrokeredAccessRequestType {
   Password = "Password",
   SshKey = "SshKey",
   ApiKey = "ApiKey",
@@ -666,7 +666,7 @@ interface A2AClientOptions {
  *
  * Full parity with PySafeguard and SafeguardDotNet A2A clients.
  */
-declare class A2AClient {
+export declare class A2AClient {
   #private;
   constructor(host: string, options: A2AClientOptions);
   /** The appliance hostname. */
@@ -728,5 +728,5 @@ declare class A2AClient {
   brokerAccessRequest(apiKey: string, request: BrokeredAccessRequest): Promise<BrokeredAccessResponse>;
 }
 //#endregion
-export { A2AClient, type A2AClientOptions, AnonymousAuth, ApiError, type ApiErrorBody, type Auth, AuthenticationError, AuthorizationError, type BrokeredAccessRequest, BrokeredAccessRequestType, type BrokeredAccessResponse, BrowserHttpClient, BrowserSessionStorage, CertificateAuth, type CertificateAuthOptions, ConfigurationError, DeviceCodeAuth, type DeviceCodeAuthOptions, type DeviceCodeInfo, type HttpClient, HttpMethod, type HttpRequestOptions, type HttpResponse, MemoryStorage, NodeHttpClient, NotFoundError, PasswordAuth, type PasswordAuthOptions, PkceAuth, type PkceAuthOptions, type PkceCallbackResult, PkceNonInteractiveAuth, type PkceNonInteractiveAuthOptions, type RequestOptions, type RetrievableAccount, SafeguardClient, type SafeguardClientOptions, SafeguardError, type SafeguardResponse, SecretValue, Service, SshKeyFormat, StorageKeys, type StorageProvider, type TlsOptions, type TlsVersion, TokenAuth, type TokenAuthOptions, type TokenSet, TransportError, base64UrlEncode, buildRequestUrl, buildServiceUrl, generateCodeChallenge, generateCodeVerifier, generateState, handlePkceCallback, validateHost };
+export type { A2AClientOptions, ApiErrorBody, Auth, BrokeredAccessRequest, BrokeredAccessResponse, CertificateAuthOptions, DeviceCodeAuthOptions, DeviceCodeInfo, HttpClient, HttpRequestOptions, HttpResponse, PasswordAuthOptions, PkceAuthOptions, PkceCallbackResult, PkceNonInteractiveAuthOptions, RequestOptions, RetrievableAccount, SafeguardClientOptions, SafeguardResponse, StorageProvider, TlsOptions, TlsVersion, TokenAuthOptions, TokenSet };
 //# sourceMappingURL=index.d.cts.map

package/dist/index.d.cts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.cts","names":[],"sources":["../src/http/types.ts","../src/storage/types.ts","../src/secret.ts","../src/auth/types.ts","../src/types.ts","../src/errors.ts","../src/utils.ts","../src/storage/memory.ts","../src/storage/session.ts","../src/http/node.ts","../src/http/browser.ts","../src/auth/password.ts","../src/auth/certificate.ts","../src/auth/pkce.ts","../src/auth/pkce-noninteractive.ts","../src/auth/device-code.ts","../src/auth/pkce-callback.ts","../src/auth/token.ts","../src/auth/anonymous.ts","../src/client.ts","../src/a2a/types.ts","../src/a2a/index.ts"],"mappings":";;;;UAIiB;EACf;EACA;EACA,UAAU;EACV,gBAAgB;EAChB,SAAS;EACT;;UAGe;EACf;EACA,SAAS;EACT;;;;;;KAOU;UAEK;;EAEf,cAAc;;EAEd,gBAAgB;;EAEhB,eAAe;;EAEf,eAAe;;EAEf;;EAEA;;;;;;EAMA,aAAa;;;;;;;;;;;;;EAab,aAAa;;;;;;UAOE;EACf,QAAQ,SAAS,qBAAqB,QAAQ;EAC9C;;;;;;;UC9De;EACf,IAAI;EACJ,IAAI,aAAa;EACjB,OAAO;EACP;;;cAIW;WAAA;WAAA;;;;;;;;;;;;cCDA;;EAGC,YAAA;;EAKZ;EAIA;EAIA;OASK,OAAO;;;;;;;UC5BG;;EAEf,aAAa;;EAEb;;EAEA;;;;;UAMe;;;;;;;EAOf,aAAa,cAAc,YAAY,YAAY,SAAS,kBAAkB,QAAQ;;;;EAKtF,cAAc,cAAc,YAAY,YAAY,SAAS,kBAAkB,QAAQ;;WAG9E;;;;;;;aC/BC;EACV;EACA;EACA;EACA;EACA;EACA;;;;;aAMU;EACV;EACA;EACA;EACA;EACA;;;;;UAMe,kBAAkB;EACjC,MAAM;EACN;EACA,SAAS;;;;;UAMM;;EAEf;;EAEA,OAAO;;EAEP,UAAU;;EAEV,QAAQ;;EAER,SAAS;;EAET;;EAEA;;;;;UAMe;;EAEf,MAFe;;EAIf,cAAc;;EAEd;;EAEA;;EAEA;;EAEA;;;;;;;;;;;;;;;cCvDW,uBAAuB;EACtB,YAAA,iBAAiB,UAAU;;UAMxB;EACf;EACA;EACA;IAAe;;GACd;;cAGU,iBAAiB;WACnB;WACA,MAAM;EAEH,YAAA,iBAAiB,gBAAgB,OAAM,qBAA4B,UAAU;;;;SAUlF,aAAa,gBAAgB,eAAe,sBAAsB;iBAgB1D;iBAUA;;cASJ,4BAA4B;EAC3B,YAAA,iBAAiB,OAAM,qBAA4B,UAAU;;cAM9D,2BAA2B;EAC1B,YAAA,iBAAiB,OAAM,qBAA4B,UAAU;;cAM9D,sBAAsB;EACrB,YAAA,iBAAiB,OAAM,qBAA4B,UAAU;;cAM9D,uBAAuB;EACtB,YAAA,iBAAiB,UAAU;;cAM5B,2BAA2B;EAC1B,YAAA,iBAAiB,UAAU;;;;;;;;;;iBC/FzB,aAAa;;;;;;;;iBAuCb,gBAAgB,cAAc,SAAS,SAAS;;;;;;;;iBAchD,gBACd,cACA,SAAS,SACT,qBACA,QAAQ,2CACR;;;;iBAkBc,gBAAgB,OAAO;;;;;iBASvB;;;;;iBAUM,sBAAsB,mBAAmB;;;;iBAU/C;;;;;;;cC5GH,yBAAyB;;EAGpC,IAAI;EAIJ,IAAI,aAAa;EAIjB,OAAO;EAIP;;;;;;;;cCfW,iCAAiC;EAC5C,IAAI;EAIJ,IAAI,aAAa;EAIjB,OAAO;EAIP;;;;;;;;cCoCW,0BAA0B;;EAGzB,YAAA,aAAa;EAgBnB,QAAQ,SAAS,qBAAqB,QAAQ;EAmCpD;;;;;;;;cCvGW,6BAA6B;;EAG5B,YAAA;IAAY,cAAc;;EAIhC,QAAQ,SAAS,qBAAqB,QAAQ;;;;UCNrC;EACf;EACA;;EAEA;;;;;cAMW,wBAAwB;;EAKvB,YAAA,SAAS;MASjB;EAIE,aAAa,cAAc,YAAY,YAAY,UAAU,kBAAkB,QAAQ;EAUvF,aAAa,cAAc,YAAY,YAAY,SAAS,kBAAkB,QAAQ;;;;UCtC7E;;EAEf;;EAEA;;EAEA,gBAAgB;;EAEhB,eAAe;;EAEf;;EAEA,eAAe;;EAEf;;EAEA;;;;;;cAOW,2BAA2B;;EAU1B,YAAA,SAAS;MAgBjB;;EAKJ;IAAmB,gBAAgB;IAAQ,eAAe;IAAQ,eAAe;IAAQ;;EAYnF,aAAa,cAAc,YAAY,YAAY,UAAU,kBAAkB,QAAQ;EAQvF,aAAa,cAAc,YAAY,YAAY,SAAS,kBAAkB,QAAQ;;;;UCzE7E;;EAEf;;EAEA;;;;;;cAOW,oBAAoB;;EAInB,YAAA,SAAS;MAOjB;;;;;EAQE,aAAa,cAAc,YAAY,YAAY,SAAS,kBAAkB,QAAQ;;;;UC/B7E;;EAEf;;EAEA;;;;;;;;;cAUW,kCAAkC;;EAIjC,YAAA,UAAU;MAKlB;EAIE,aAAa,cAAc,YAAY,YAAY,UAAU,kBAAkB,QAAQ;;;;;;;;;;UCtB9E;;EAEf;;EAEA;;EAEA;;EAEA;;EAEA;;;;;UAMe;;;;;;EAMf,eAAe,MAAM,0BAA0B;;EAE/C;;EAEA;;EAEA;;EAEA,SAAS;;;;;;;;;;;cA6DE,0BAA0B;;EAOzB,YAAA,SAAS;MAcjB;EAIE,aACJ,cACA,YAAY,YACZ,UAAU,kBACT,QAAQ;;;;UChII;EACf;EACA;;;;;;;;;;;;;iBAcc,mBACd,SAAS,iBACT,eACC;;;UCjBc;;EAEf;;;;;;cAOW,qBAAqB;;EAGpB,YAAA,SAAS;MAKjB;EAIE,aAAa,eAAe,aAAa,YAAY,UAAU,kBAAkB,QAAQ;;;;;;;;cClBpF,yBAAyB;MAChC;EAIE,aAAa,eAAe,aAAa,YAAY,UAAU,kBAAkB,QAAQ;;;;;;;;cCGpF;;EAgBC,YAAA,cAAc,SAAS;;MAc/B;;MAKA;;MAKA,eAAe;;MAKf;;MAKA;;;;;EAQJ,WAAW,SAAS;;;;;;;EAWpB,cAAc,YAAY;;;;;;EAUpB,WAAW;;;;EAiBX,cAAc;;;;EASpB;EAQM,IAAI,aAAa,SAAS,SAAS,qBAAqB,UAAU,iBAAiB,QAAQ;EAI3F,KAAK,aAAa,SAAS,SAAS,qBAAqB,UAAU,iBAAiB,QAAQ;EAI5F,IAAI,aAAa,SAAS,SAAS,qBAAqB,UAAU,iBAAiB,QAAQ;EAI3F,OAAO,aAAa,SAAS,SAAS,qBAAqB,UAAU,iBAAiB,QAAQ;EAI9F,MAAM,aAAa,SAAS,SAAS,qBAAqB,UAAU,iBAAiB,QAAQ;;;;;;;EAY7F,OAAO,aACX,SAAS,SACT,QAAQ,YACR,qBACA,UAAU,iBACT,QAAQ;;;;;;;aChKD;EACV;EACA;EACA;;;;;UAMe;EACf;EACA;EACA;EACA;EACA;EACA;EACA;;;;;aAMU;EACV;EACA;EACA;EACA;EACA;EACA;EACA;;;;;UAMe;EACf,YAAY;EACZ;EACA;EACA;EACA;EACA;EACA;EACA;EACA;;;;;UAMe;EACf;EACA;GACC;;;;UC7Cc;;EAEf,MAAM;;EAEN,cAAc;;EAEd;;EAEA;;;;;;;;cASW;;EAQC,YAAA,cAAc,SAAS;;MAW/B;;MAKA,eAAe;;MAKf;;MAKA,QAAQ;;;;EAOZ,cAAc,YAAY;;;;;EASpB,iBAAiB,iBAAiB,QAAQ;;;;;;EAY1C,mBAAmB,gBAAgB,SAAS,eAAe,QAAQ;;;;;EAgBnE,qBAAqB,iBAAiB,QAAQ;;;;;;;;;EAa9C,0BAA0B,QAAQ;;;;;;EAwClC,YAAY,gBAAgB,mBAAmB;;;;;;;;EAyB/C,cACJ,gBACA,aACA,qBACA,SAAS,eACR;;;;;;EA+BG,oBACJ,gBACA,SAAS,wBACR,QAAQ"}
+{"version":3,"file":"index.d.cts","names":["_$__auth_types_js0.Auth"],"sources":["../src/http/types.ts","../src/storage/types.ts","../src/secret.ts","../src/auth/types.ts","../src/types.ts","../src/errors.ts","../src/utils.ts","../src/storage/memory.ts","../src/storage/session.ts","../src/http/node.ts","../src/http/browser.ts","../src/auth/password.ts","../src/auth/certificate.ts","../src/auth/pkce.ts","../src/auth/pkce-noninteractive.ts","../src/auth/device-code.ts","../src/auth/pkce-callback.ts","../src/auth/token.ts","../src/auth/anonymous.ts","../src/client.ts","../src/a2a/types.ts","../src/a2a/index.ts"],"mappings":";;;;UAIiB;EACf;EACA;EACA,UAAU;EACV,gBAAgB;EAChB,SAAS;EACT;;UAGe;EACf;EACA,SAAS;EACT;;;;;;KAOU;UAEK;;EAEf,cAAc;;EAEd,gBAAgB;;EAEhB,eAAe;;EAEf,eAAe;;EAEf;;EAEA;;;;;;EAMA,aAAa;;;;;;;;;;;;;EAab,aAAa;;;;;;UAOE;EACf,QAAQ,SAAS,qBAAqB,QAAQ;EAC9C;;;;;;;UC9De;EACf,IAAI;EACJ,IAAI,aAAa;EACjB,OAAO;EACP;;;qBAIW;;;;;;;;;;;;;;qBCDA;;EAGC,YAAA;;EAKZ;EAIA;EAIA;OASK,OAAO;;;;;;;UC5BG;;EAEf,aAAa;;EAEb;;EAEA;;;;;UAMe;;;;;;;EAOf,aAAa,cAAc,YAAY,YAAY,SAAS,kBAAkB,QAAQ;;;;EAKtF,cAAc,cAAc,YAAY,YAAY,SAAS,kBAAkB,QAAQ;;WAG9E;;;;;;;oBC/BC;EACV;EACA;EACA;EACA;EACA;EACA;;;;;oBAMU;EACV;EACA;EACA;EACA;EACA;;;;;UAMe,kBAAkB;EACjC,MAAM;EACN;EACA,SAAS;;;;;UAMM;;EAEf;;EAEA,OAAO;;EAEP,UAAU;;EAEV,QAAQ;;EAER,SAAS;;EAET;;EAEA;;;;;UAMe;;EAEf,MAFeA;;EAIf,cAAc;;EAEd;;EAEA;;EAEA;;EAEA;;;;;;;;;;;;;;;qBCvDW,uBAAuB;EACtB,YAAA,iBAAiB,UAAU;;UAMxB;EACf;EACA;EACA;IAAe;;GACd;;qBAGU,iBAAiB;WACnB;WACA,MAAM;EAEH,YAAA,iBAAiB,gBAAgB,OAAM,qBAA4B,UAAU;;;;SAUlF,aAAa,gBAAgB,eAAe,sBAAsB;iBAgB1D;iBAUA;;qBASJ,4BAA4B;EAC3B,YAAA,iBAAiB,OAAM,qBAA4B,UAAU;;qBAM9D,2BAA2B;EAC1B,YAAA,iBAAiB,OAAM,qBAA4B,UAAU;;qBAM9D,sBAAsB;EACrB,YAAA,iBAAiB,OAAM,qBAA4B,UAAU;;qBAM9D,uBAAuB;EACtB,YAAA,iBAAiB,UAAU;;qBAM5B,2BAA2B;EAC1B,YAAA,iBAAiB,UAAU;;;;;;;;;;wBC/FzB,aAAa;;;;;;;;wBAuCb,gBAAgB,cAAc,SAAS,SAAS;;;;;;;;wBAchD,gBACd,cACA,SAAS,SACT,qBACA,QAAQ,2CACR;;;;wBAkBc,gBAAgB,OAAO;;;;;wBASvB;;;;;wBAUM,sBAAsB,mBAAmB;;;;wBAU/C;;;;;;;qBC5GH,yBAAyB;;EAGpC,IAAI;EAIJ,IAAI,aAAa;EAIjB,OAAO;EAIP;;;;;;;;qBCfW,iCAAiC;EAC5C,IAAI;EAIJ,IAAI,aAAa;EAIjB,OAAO;EAIP;;;;;;;;qBCoCW,0BAA0B;;EAGzB,YAAA,aAAa;EAgBnB,QAAQ,SAAS,qBAAqB,QAAQ;EAmCpD;;;;;;;;qBCvGW,6BAA6B;;EAG5B,YAAA;IAAY,cAAc;;EAIhC,QAAQ,SAAS,qBAAqB,QAAQ;;;;UCNrC;EACf;EACA;;EAEA;;;;;qBAMW,wBAAwB;;EAKvB,YAAA,SAAS;MASjB;EAIE,aAAa,cAAc,YAAY,YAAY,UAAU,kBAAkB,QAAQ;EAUvF,aAAa,cAAc,YAAY,YAAY,SAAS,kBAAkB,QAAQ;;;;UCtC7E;;EAEf;;EAEA;;EAEA,gBAAgB;;EAEhB,eAAe;;EAEf;;EAEA,eAAe;;EAEf;;EAEA;;;;;;qBAOW,2BAA2B;;EAU1B,YAAA,SAAS;MAgBjB;;EAKJ;IAAmB,gBAAgB;IAAQ,eAAe;IAAQ,eAAe;IAAQ;;EAYnF,aAAa,cAAc,YAAY,YAAY,UAAU,kBAAkB,QAAQ;EAQvF,aAAa,cAAc,YAAY,YAAY,SAAS,kBAAkB,QAAQ;;;;UCzE7E;;EAEf;;EAEA;;;;;;qBAOW,oBAAoB;;EAInB,YAAA,SAAS;MAOjB;;;;;EAQE,aAAa,cAAc,YAAY,YAAY,SAAS,kBAAkB,QAAQ;;;;UC/B7E;;EAEf;;EAEA;;;;;;;;;qBAUW,kCAAkC;;EAIjC,YAAA,UAAU;MAKlB;EAIE,aAAa,cAAc,YAAY,YAAY,UAAU,kBAAkB,QAAQ;;;;;;;;;;UCtB9E;;EAEf;;EAEA;;EAEA;;EAEA;;EAEA;;;;;UAMe;;;;;;EAMf,eAAe,MAAM,0BAA0B;;EAE/C;;EAEA;;EAEA;;EAEA,SAAS;;;;;;;;;;;qBA6DE,0BAA0B;;EAOzB,YAAA,SAAS;MAcjB;EAIE,aACJ,cACA,YAAY,YACZ,UAAU,kBACT,QAAQ;;;;UChII;EACf;EACA;;;;;;;;;;;;;wBAcc,mBACd,SAAS,iBACT,eACC;;;UCjBc;;EAEf;;;;;;qBAOW,qBAAqB;;EAGpB,YAAA,SAAS;MAKjB;EAIE,aAAa,eAAe,aAAa,YAAY,UAAU,kBAAkB,QAAQ;;;;;;;;qBClBpF,yBAAyB;MAChC;EAIE,aAAa,eAAe,aAAa,YAAY,UAAU,kBAAkB,QAAQ;;;;;;;;qBCGpF;;EAgBC,YAAA,cAAc,SAAS;;MAc/B;;MAKA;;MAKA,eAAe;;MAKf;;MAKA;;;;;EAQJ,WAAW,SAAS;;;;;;;EAWpB,cAAc,YAAY;;;;;;EAUpB,WAAW;;;;EAiBX,cAAc;;;;EASpB;EAQM,IAAI,aAAa,SAAS,SAAS,qBAAqB,UAAU,iBAAiB,QAAQ;EAI3F,KAAK,aAAa,SAAS,SAAS,qBAAqB,UAAU,iBAAiB,QAAQ;EAI5F,IAAI,aAAa,SAAS,SAAS,qBAAqB,UAAU,iBAAiB,QAAQ;EAI3F,OAAO,aAAa,SAAS,SAAS,qBAAqB,UAAU,iBAAiB,QAAQ;EAI9F,MAAM,aAAa,SAAS,SAAS,qBAAqB,UAAU,iBAAiB,QAAQ;;;;;;;EAY7F,OAAO,aACX,SAAS,SACT,QAAQ,YACR,qBACA,UAAU,iBACT,QAAQ;;;;;;;oBChKD;EACV;EACA;EACA;;;;;UAMe;EACf;EACA;EACA;EACA;EACA;EACA;EACA;;;;;oBAMU;EACV;EACA;EACA;EACA;EACA;EACA;EACA;;;;;UAMe;EACf,YAAY;EACZ;EACA;EACA;EACA;EACA;EACA;EACA;EACA;;;;;UAMe;EACf;EACA;GACC;;;;UC7Cc;;EAEf,MAAM;;EAEN,cAAc;;EAEd;;EAEA;;;;;;;;qBASW;;EAQC,YAAA,cAAc,SAAS;;MAW/B;;MAKA,eAAe;;MAKf;;MAKA,QAAQ;;;;EAOZ,cAAc,YAAY;;;;;EASpB,iBAAiB,iBAAiB,QAAQ;;;;;;EAY1C,mBAAmB,gBAAgB,SAAS,eAAe,QAAQ;;;;;EAgBnE,qBAAqB,iBAAiB,QAAQ;;;;;;;;;EAa9C,0BAA0B,QAAQ;;;;;;EAwClC,YAAY,gBAAgB,mBAAmB;;;;;;;;EAyB/C,cACJ,gBACA,aACA,qBACA,SAAS,eACR;;;;;;EA+BG,oBACJ,gBACA,SAAS,wBACR,QAAQ"}

package/dist/index.d.ts

@@ -73,7 +73,7 @@ interface StorageProvider {
   clear(): void;
 }
 /** Well-known storage keys used by the SDK. */
-declare const StorageKeys: {
+export declare const StorageKeys: {
   readonly STATE: "safeguard_state";
   readonly CODE_VERIFIER: "safeguard_code_verifier";
 };
@@ -87,7 +87,7 @@ declare const StorageKeys: {
  * - `console.log(secretValue)` prints "[REDACTED]"
  * - `.expose()` returns the raw value when intentionally needed
  */
-declare class SecretValue {
+export declare class SecretValue {
   #private;
   constructor(value: string);
   /** Returns the raw secret. Use only when you intentionally need the plaintext. */
@@ -132,7 +132,7 @@ interface Auth {
 /**
  * Safeguard appliance service endpoints.
  */
-declare enum Service {
+export declare enum Service {
   CORE = "core",
   APPLIANCE = "appliance",
   NOTIFICATION = "notification",
@@ -143,7 +143,7 @@ declare enum Service {
 /**
  * HTTP methods supported by the Safeguard API.
  */
-declare enum HttpMethod {
+export declare enum HttpMethod {
   GET = "GET",
   POST = "POST",
   PUT = "PUT",
@@ -207,7 +207,7 @@ interface SafeguardClientOptions {
  * ├── TransportError        (Network/connection failures)
  * └── ConfigurationError    (Invalid client options)
  */
-declare class SafeguardError extends Error {
+export declare class SafeguardError extends Error {
   constructor(message: string, options?: ErrorOptions);
 }
 interface ApiErrorBody {
@@ -218,7 +218,7 @@ interface ApiErrorBody {
   };
   [key: string]: unknown;
 }
-declare class ApiError extends SafeguardError {
+export declare class ApiError extends SafeguardError {
   readonly status: number;
   readonly body: ApiErrorBody | null;
   constructor(message: string, status: number, body?: ApiErrorBody | null, options?: ErrorOptions);
@@ -229,19 +229,19 @@ declare class ApiError extends SafeguardError {
   private static parseBody;
   private static buildMessage;
 }
-declare class AuthenticationError extends ApiError {
+export declare class AuthenticationError extends ApiError {
   constructor(message: string, body?: ApiErrorBody | null, options?: ErrorOptions);
 }
-declare class AuthorizationError extends ApiError {
+export declare class AuthorizationError extends ApiError {
   constructor(message: string, body?: ApiErrorBody | null, options?: ErrorOptions);
 }
-declare class NotFoundError extends ApiError {
+export declare class NotFoundError extends ApiError {
   constructor(message: string, body?: ApiErrorBody | null, options?: ErrorOptions);
 }
-declare class TransportError extends SafeguardError {
+export declare class TransportError extends SafeguardError {
   constructor(message: string, options?: ErrorOptions);
 }
-declare class ConfigurationError extends SafeguardError {
+export declare class ConfigurationError extends SafeguardError {
   constructor(message: string, options?: ErrorOptions);
 }
 //#endregion
@@ -252,7 +252,7 @@ declare class ConfigurationError extends SafeguardError {
  *
  * @throws {ConfigurationError} if the host contains disallowed characters
  */
-declare function validateHost(host: string): string;
+export declare function validateHost(host: string): string;
 /**
  * Builds the base URL for a Safeguard service endpoint.
  *
@@ -260,7 +260,7 @@ declare function validateHost(host: string): string;
  * buildServiceUrl('appliance.example.com', Service.CORE)
  * // => 'https://appliance.example.com/service/core/v4'
  */
-declare function buildServiceUrl(host: string, service: Service, apiVersion?: string): string;
+export declare function buildServiceUrl(host: string, service: Service, apiVersion?: string): string;
 /**
  * Builds a full API URL including path and optional query parameters.
  *
@@ -268,32 +268,32 @@ declare function buildServiceUrl(host: string, service: Service, apiVersion?: st
  * buildRequestUrl('appliance.example.com', Service.CORE, 'Users', { filter: 'Name eq "admin"' })
  * // => 'https://appliance.example.com/service/core/v4/Users?filter=Name+eq+%22admin%22'
  */
-declare function buildRequestUrl(host: string, service: Service, relativeUrl: string, query?: Record<string, string | number | boolean>, apiVersion?: string): string;
+export declare function buildRequestUrl(host: string, service: Service, relativeUrl: string, query?: Record<string, string | number | boolean>, apiVersion?: string): string;
 /**
  * Encodes bytes to a URL-safe base64 string (no padding).
  */
-declare function base64UrlEncode(bytes: Uint8Array): string;
+export declare function base64UrlEncode(bytes: Uint8Array): string;
 /**
  * Generates a cryptographically random code verifier for PKCE.
  * Returns a 43-character base64url string (32 random bytes).
  */
-declare function generateCodeVerifier(): string;
+export declare function generateCodeVerifier(): string;
 /**
  * Computes the S256 code challenge from a code verifier.
  * Uses Web Crypto API (available in Node 20+ and all modern browsers).
  */
-declare function generateCodeChallenge(verifier: string): Promise<string>;
+export declare function generateCodeChallenge(verifier: string): Promise<string>;
 /**
  * Generates a random state parameter for OAuth flows.
  */
-declare function generateState(): string;
+export declare function generateState(): string;
 //#endregion
 //#region src/storage/memory.d.ts
 /**
  * In-memory storage provider. Default for Node.js environments.
  * Data does not persist across process restarts.
  */
-declare class MemoryStorage implements StorageProvider {
+export declare class MemoryStorage implements StorageProvider {
   #private;
   get(key: string): string | null;
   set(key: string, value: string): void;
@@ -306,7 +306,7 @@ declare class MemoryStorage implements StorageProvider {
  * Browser sessionStorage adapter. Data persists for the browser tab lifetime.
  * Requires a DOM environment (browser or jsdom).
  */
-declare class BrowserSessionStorage implements StorageProvider {
+export declare class BrowserSessionStorage implements StorageProvider {
   get(key: string): string | null;
   set(key: string, value: string): void;
   remove(key: string): void;
@@ -318,7 +318,7 @@ declare class BrowserSessionStorage implements StorageProvider {
  * Node.js HTTP client using undici for full TLS control.
  * Creates a per-instance Agent — no global state mutation.
  */
-declare class NodeHttpClient implements HttpClient {
+export declare class NodeHttpClient implements HttpClient {
   #private;
   constructor(tlsOptions?: TlsOptions);
   request(options: HttpRequestOptions): Promise<HttpResponse>;
@@ -330,7 +330,7 @@ declare class NodeHttpClient implements HttpClient {
  * Browser HTTP client using native fetch API.
  * No TLS configuration needed — browser handles certificates.
  */
-declare class BrowserHttpClient implements HttpClient {
+export declare class BrowserHttpClient implements HttpClient {
   #private;
   constructor(options?: {
     credentials?: RequestCredentials;
@@ -348,7 +348,7 @@ interface PasswordAuthOptions {
 /**
  * Authenticates using username/password via RSTS Resource Owner grant.
  */
-declare class PasswordAuth implements Auth {
+export declare class PasswordAuth implements Auth {
   #private;
   constructor(options: PasswordAuthOptions);
   get description(): string;
@@ -379,7 +379,7 @@ interface CertificateAuthOptions {
  * Authenticates using a client certificate (mTLS) against RSTS.
  * Node.js only — requires TLS client cert support in HttpClient.
  */
-declare class CertificateAuth implements Auth {
+export declare class CertificateAuth implements Auth {
   #private;
   constructor(options: CertificateAuthOptions);
   get description(): string;
@@ -405,7 +405,7 @@ interface PkceAuthOptions {
  * Authenticates using PKCE (Proof Key for Code Exchange) with browser redirect.
  * For browser environments where the user is redirected to RSTS login.
  */
-declare class PkceAuth implements Auth {
+export declare class PkceAuth implements Auth {
   #private;
   constructor(options: PkceAuthOptions);
   get description(): string;
@@ -430,7 +430,7 @@ interface PkceNonInteractiveAuthOptions {
  *
  * Matches PySafeguard's PkceAuth behavior (local server pattern).
  */
-declare class PkceNonInteractiveAuth implements Auth {
+export declare class PkceNonInteractiveAuth implements Auth {
   #private;
   constructor(options?: PkceNonInteractiveAuthOptions);
   get description(): string;
@@ -484,7 +484,7 @@ interface DeviceCodeAuthOptions {
  * spawns or opens a browser and performs no display I/O. Platform-agnostic, so
  * it is exported from both the Node and browser entry points.
  */
-declare class DeviceCodeAuth implements Auth {
+export declare class DeviceCodeAuth implements Auth {
   #private;
   constructor(options: DeviceCodeAuthOptions);
   get description(): string;
@@ -507,7 +507,7 @@ interface PkceCallbackResult {
  * @param url - The callback URL to parse (defaults to window.location.href)
  * @returns The parsed code and state, or null if not a valid callback
  */
-declare function handlePkceCallback(storage: StorageProvider, url?: string): PkceCallbackResult | null;
+export declare function handlePkceCallback(storage: StorageProvider, url?: string): PkceCallbackResult | null;
 //#endregion
 //#region src/auth/token.d.ts
 interface TokenAuthOptions {
@@ -518,7 +518,7 @@ interface TokenAuthOptions {
  * Uses a pre-existing access token. No authentication flow — the token is assumed valid.
  * Useful when tokens are obtained externally or for service-to-service scenarios.
  */
-declare class TokenAuth implements Auth {
+export declare class TokenAuth implements Auth {
   #private;
   constructor(options: TokenAuthOptions);
   get description(): string;
@@ -530,7 +530,7 @@ declare class TokenAuth implements Auth {
  * Anonymous authentication — no credentials.
  * Used for accessing public Safeguard endpoints (e.g., appliance status).
  */
-declare class AnonymousAuth implements Auth {
+export declare class AnonymousAuth implements Auth {
   get description(): string;
   authenticate(_host: string, _httpClient: HttpClient, _storage: StorageProvider): Promise<TokenSet>;
 }
@@ -540,7 +540,7 @@ declare class AnonymousAuth implements Auth {
  * Main entry point for the Safeguard SDK.
  * Instance-based — no global state. Multiple clients to different appliances are supported.
  */
-declare class SafeguardClient {
+export declare class SafeguardClient {
   #private;
   constructor(host: string, options: SafeguardClientOptions);
   /** The appliance hostname this client connects to. */
@@ -597,7 +597,7 @@ declare class SafeguardClient {
 /**
  * SSH key formats for private key retrieval.
  */
-declare enum SshKeyFormat {
+export declare enum SshKeyFormat {
   OpenSsh = "OpenSsh",
   Ssh2 = "Ssh2",
   Putty = "Putty"
@@ -617,7 +617,7 @@ interface RetrievableAccount {
 /**
  * Brokered access request types.
  */
-declare enum BrokeredAccessRequestType {
+export declare enum BrokeredAccessRequestType {
   Password = "Password",
   SshKey = "SshKey",
   ApiKey = "ApiKey",
@@ -666,7 +666,7 @@ interface A2AClientOptions {
  *
  * Full parity with PySafeguard and SafeguardDotNet A2A clients.
  */
-declare class A2AClient {
+export declare class A2AClient {
   #private;
   constructor(host: string, options: A2AClientOptions);
   /** The appliance hostname. */
@@ -728,5 +728,5 @@ declare class A2AClient {
   brokerAccessRequest(apiKey: string, request: BrokeredAccessRequest): Promise<BrokeredAccessResponse>;
 }
 //#endregion
-export { A2AClient, type A2AClientOptions, AnonymousAuth, ApiError, type ApiErrorBody, type Auth, AuthenticationError, AuthorizationError, type BrokeredAccessRequest, BrokeredAccessRequestType, type BrokeredAccessResponse, BrowserHttpClient, BrowserSessionStorage, CertificateAuth, type CertificateAuthOptions, ConfigurationError, DeviceCodeAuth, type DeviceCodeAuthOptions, type DeviceCodeInfo, type HttpClient, HttpMethod, type HttpRequestOptions, type HttpResponse, MemoryStorage, NodeHttpClient, NotFoundError, PasswordAuth, type PasswordAuthOptions, PkceAuth, type PkceAuthOptions, type PkceCallbackResult, PkceNonInteractiveAuth, type PkceNonInteractiveAuthOptions, type RequestOptions, type RetrievableAccount, SafeguardClient, type SafeguardClientOptions, SafeguardError, type SafeguardResponse, SecretValue, Service, SshKeyFormat, StorageKeys, type StorageProvider, type TlsOptions, type TlsVersion, TokenAuth, type TokenAuthOptions, type TokenSet, TransportError, base64UrlEncode, buildRequestUrl, buildServiceUrl, generateCodeChallenge, generateCodeVerifier, generateState, handlePkceCallback, validateHost };
+export type { A2AClientOptions, ApiErrorBody, Auth, BrokeredAccessRequest, BrokeredAccessResponse, CertificateAuthOptions, DeviceCodeAuthOptions, DeviceCodeInfo, HttpClient, HttpRequestOptions, HttpResponse, PasswordAuthOptions, PkceAuthOptions, PkceCallbackResult, PkceNonInteractiveAuthOptions, RequestOptions, RetrievableAccount, SafeguardClientOptions, SafeguardResponse, StorageProvider, TlsOptions, TlsVersion, TokenAuthOptions, TokenSet };
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","names":[],"sources":["../src/http/types.ts","../src/storage/types.ts","../src/secret.ts","../src/auth/types.ts","../src/types.ts","../src/errors.ts","../src/utils.ts","../src/storage/memory.ts","../src/storage/session.ts","../src/http/node.ts","../src/http/browser.ts","../src/auth/password.ts","../src/auth/certificate.ts","../src/auth/pkce.ts","../src/auth/pkce-noninteractive.ts","../src/auth/device-code.ts","../src/auth/pkce-callback.ts","../src/auth/token.ts","../src/auth/anonymous.ts","../src/client.ts","../src/a2a/types.ts","../src/a2a/index.ts"],"mappings":";;;;UAIiB;EACf;EACA;EACA,UAAU;EACV,gBAAgB;EAChB,SAAS;EACT;;UAGe;EACf;EACA,SAAS;EACT;;;;;;KAOU;UAEK;;EAEf,cAAc;;EAEd,gBAAgB;;EAEhB,eAAe;;EAEf,eAAe;;EAEf;;EAEA;;;;;;EAMA,aAAa;;;;;;;;;;;;;EAab,aAAa;;;;;;UAOE;EACf,QAAQ,SAAS,qBAAqB,QAAQ;EAC9C;;;;;;;UC9De;EACf,IAAI;EACJ,IAAI,aAAa;EACjB,OAAO;EACP;;;cAIW;WAAA;WAAA;;;;;;;;;;;;cCDA;;EAGC,YAAA;;EAKZ;EAIA;EAIA;OASK,OAAO;;;;;;;UC5BG;;EAEf,aAAa;;EAEb;;EAEA;;;;;UAMe;;;;;;;EAOf,aAAa,cAAc,YAAY,YAAY,SAAS,kBAAkB,QAAQ;;;;EAKtF,cAAc,cAAc,YAAY,YAAY,SAAS,kBAAkB,QAAQ;;WAG9E;;;;;;;aC/BC;EACV;EACA;EACA;EACA;EACA;EACA;;;;;aAMU;EACV;EACA;EACA;EACA;EACA;;;;;UAMe,kBAAkB;EACjC,MAAM;EACN;EACA,SAAS;;;;;UAMM;;EAEf;;EAEA,OAAO;;EAEP,UAAU;;EAEV,QAAQ;;EAER,SAAS;;EAET;;EAEA;;;;;UAMe;;EAEf,MAFe;;EAIf,cAAc;;EAEd;;EAEA;;EAEA;;EAEA;;;;;;;;;;;;;;;cCvDW,uBAAuB;EACtB,YAAA,iBAAiB,UAAU;;UAMxB;EACf;EACA;EACA;IAAe;;GACd;;cAGU,iBAAiB;WACnB;WACA,MAAM;EAEH,YAAA,iBAAiB,gBAAgB,OAAM,qBAA4B,UAAU;;;;SAUlF,aAAa,gBAAgB,eAAe,sBAAsB;iBAgB1D;iBAUA;;cASJ,4BAA4B;EAC3B,YAAA,iBAAiB,OAAM,qBAA4B,UAAU;;cAM9D,2BAA2B;EAC1B,YAAA,iBAAiB,OAAM,qBAA4B,UAAU;;cAM9D,sBAAsB;EACrB,YAAA,iBAAiB,OAAM,qBAA4B,UAAU;;cAM9D,uBAAuB;EACtB,YAAA,iBAAiB,UAAU;;cAM5B,2BAA2B;EAC1B,YAAA,iBAAiB,UAAU;;;;;;;;;;iBC/FzB,aAAa;;;;;;;;iBAuCb,gBAAgB,cAAc,SAAS,SAAS;;;;;;;;iBAchD,gBACd,cACA,SAAS,SACT,qBACA,QAAQ,2CACR;;;;iBAkBc,gBAAgB,OAAO;;;;;iBASvB;;;;;iBAUM,sBAAsB,mBAAmB;;;;iBAU/C;;;;;;;cC5GH,yBAAyB;;EAGpC,IAAI;EAIJ,IAAI,aAAa;EAIjB,OAAO;EAIP;;;;;;;;cCfW,iCAAiC;EAC5C,IAAI;EAIJ,IAAI,aAAa;EAIjB,OAAO;EAIP;;;;;;;;cCoCW,0BAA0B;;EAGzB,YAAA,aAAa;EAgBnB,QAAQ,SAAS,qBAAqB,QAAQ;EAmCpD;;;;;;;;cCvGW,6BAA6B;;EAG5B,YAAA;IAAY,cAAc;;EAIhC,QAAQ,SAAS,qBAAqB,QAAQ;;;;UCNrC;EACf;EACA;;EAEA;;;;;cAMW,wBAAwB;;EAKvB,YAAA,SAAS;MASjB;EAIE,aAAa,cAAc,YAAY,YAAY,UAAU,kBAAkB,QAAQ;EAUvF,aAAa,cAAc,YAAY,YAAY,SAAS,kBAAkB,QAAQ;;;;UCtC7E;;EAEf;;EAEA;;EAEA,gBAAgB;;EAEhB,eAAe;;EAEf;;EAEA,eAAe;;EAEf;;EAEA;;;;;;cAOW,2BAA2B;;EAU1B,YAAA,SAAS;MAgBjB;;EAKJ;IAAmB,gBAAgB;IAAQ,eAAe;IAAQ,eAAe;IAAQ;;EAYnF,aAAa,cAAc,YAAY,YAAY,UAAU,kBAAkB,QAAQ;EAQvF,aAAa,cAAc,YAAY,YAAY,SAAS,kBAAkB,QAAQ;;;;UCzE7E;;EAEf;;EAEA;;;;;;cAOW,oBAAoB;;EAInB,YAAA,SAAS;MAOjB;;;;;EAQE,aAAa,cAAc,YAAY,YAAY,SAAS,kBAAkB,QAAQ;;;;UC/B7E;;EAEf;;EAEA;;;;;;;;;cAUW,kCAAkC;;EAIjC,YAAA,UAAU;MAKlB;EAIE,aAAa,cAAc,YAAY,YAAY,UAAU,kBAAkB,QAAQ;;;;;;;;;;UCtB9E;;EAEf;;EAEA;;EAEA;;EAEA;;EAEA;;;;;UAMe;;;;;;EAMf,eAAe,MAAM,0BAA0B;;EAE/C;;EAEA;;EAEA;;EAEA,SAAS;;;;;;;;;;;cA6DE,0BAA0B;;EAOzB,YAAA,SAAS;MAcjB;EAIE,aACJ,cACA,YAAY,YACZ,UAAU,kBACT,QAAQ;;;;UChII;EACf;EACA;;;;;;;;;;;;;iBAcc,mBACd,SAAS,iBACT,eACC;;;UCjBc;;EAEf;;;;;;cAOW,qBAAqB;;EAGpB,YAAA,SAAS;MAKjB;EAIE,aAAa,eAAe,aAAa,YAAY,UAAU,kBAAkB,QAAQ;;;;;;;;cClBpF,yBAAyB;MAChC;EAIE,aAAa,eAAe,aAAa,YAAY,UAAU,kBAAkB,QAAQ;;;;;;;;cCGpF;;EAgBC,YAAA,cAAc,SAAS;;MAc/B;;MAKA;;MAKA,eAAe;;MAKf;;MAKA;;;;;EAQJ,WAAW,SAAS;;;;;;;EAWpB,cAAc,YAAY;;;;;;EAUpB,WAAW;;;;EAiBX,cAAc;;;;EASpB;EAQM,IAAI,aAAa,SAAS,SAAS,qBAAqB,UAAU,iBAAiB,QAAQ;EAI3F,KAAK,aAAa,SAAS,SAAS,qBAAqB,UAAU,iBAAiB,QAAQ;EAI5F,IAAI,aAAa,SAAS,SAAS,qBAAqB,UAAU,iBAAiB,QAAQ;EAI3F,OAAO,aAAa,SAAS,SAAS,qBAAqB,UAAU,iBAAiB,QAAQ;EAI9F,MAAM,aAAa,SAAS,SAAS,qBAAqB,UAAU,iBAAiB,QAAQ;;;;;;;EAY7F,OAAO,aACX,SAAS,SACT,QAAQ,YACR,qBACA,UAAU,iBACT,QAAQ;;;;;;;aChKD;EACV;EACA;EACA;;;;;UAMe;EACf;EACA;EACA;EACA;EACA;EACA;EACA;;;;;aAMU;EACV;EACA;EACA;EACA;EACA;EACA;EACA;;;;;UAMe;EACf,YAAY;EACZ;EACA;EACA;EACA;EACA;EACA;EACA;EACA;;;;;UAMe;EACf;EACA;GACC;;;;UC7Cc;;EAEf,MAAM;;EAEN,cAAc;;EAEd;;EAEA;;;;;;;;cASW;;EAQC,YAAA,cAAc,SAAS;;MAW/B;;MAKA,eAAe;;MAKf;;MAKA,QAAQ;;;;EAOZ,cAAc,YAAY;;;;;EASpB,iBAAiB,iBAAiB,QAAQ;;;;;;EAY1C,mBAAmB,gBAAgB,SAAS,eAAe,QAAQ;;;;;EAgBnE,qBAAqB,iBAAiB,QAAQ;;;;;;;;;EAa9C,0BAA0B,QAAQ;;;;;;EAwClC,YAAY,gBAAgB,mBAAmB;;;;;;;;EAyB/C,cACJ,gBACA,aACA,qBACA,SAAS,eACR;;;;;;EA+BG,oBACJ,gBACA,SAAS,wBACR,QAAQ"}
+{"version":3,"file":"index.d.ts","names":["_$__auth_types_js0.Auth"],"sources":["../src/http/types.ts","../src/storage/types.ts","../src/secret.ts","../src/auth/types.ts","../src/types.ts","../src/errors.ts","../src/utils.ts","../src/storage/memory.ts","../src/storage/session.ts","../src/http/node.ts","../src/http/browser.ts","../src/auth/password.ts","../src/auth/certificate.ts","../src/auth/pkce.ts","../src/auth/pkce-noninteractive.ts","../src/auth/device-code.ts","../src/auth/pkce-callback.ts","../src/auth/token.ts","../src/auth/anonymous.ts","../src/client.ts","../src/a2a/types.ts","../src/a2a/index.ts"],"mappings":";;;;UAIiB;EACf;EACA;EACA,UAAU;EACV,gBAAgB;EAChB,SAAS;EACT;;UAGe;EACf;EACA,SAAS;EACT;;;;;;KAOU;UAEK;;EAEf,cAAc;;EAEd,gBAAgB;;EAEhB,eAAe;;EAEf,eAAe;;EAEf;;EAEA;;;;;;EAMA,aAAa;;;;;;;;;;;;;EAab,aAAa;;;;;;UAOE;EACf,QAAQ,SAAS,qBAAqB,QAAQ;EAC9C;;;;;;;UC9De;EACf,IAAI;EACJ,IAAI,aAAa;EACjB,OAAO;EACP;;;qBAIW;;;;;;;;;;;;;;qBCDA;;EAGC,YAAA;;EAKZ;EAIA;EAIA;OASK,OAAO;;;;;;;UC5BG;;EAEf,aAAa;;EAEb;;EAEA;;;;;UAMe;;;;;;;EAOf,aAAa,cAAc,YAAY,YAAY,SAAS,kBAAkB,QAAQ;;;;EAKtF,cAAc,cAAc,YAAY,YAAY,SAAS,kBAAkB,QAAQ;;WAG9E;;;;;;;oBC/BC;EACV;EACA;EACA;EACA;EACA;EACA;;;;;oBAMU;EACV;EACA;EACA;EACA;EACA;;;;;UAMe,kBAAkB;EACjC,MAAM;EACN;EACA,SAAS;;;;;UAMM;;EAEf;;EAEA,OAAO;;EAEP,UAAU;;EAEV,QAAQ;;EAER,SAAS;;EAET;;EAEA;;;;;UAMe;;EAEf,MAFeA;;EAIf,cAAc;;EAEd;;EAEA;;EAEA;;EAEA;;;;;;;;;;;;;;;qBCvDW,uBAAuB;EACtB,YAAA,iBAAiB,UAAU;;UAMxB;EACf;EACA;EACA;IAAe;;GACd;;qBAGU,iBAAiB;WACnB;WACA,MAAM;EAEH,YAAA,iBAAiB,gBAAgB,OAAM,qBAA4B,UAAU;;;;SAUlF,aAAa,gBAAgB,eAAe,sBAAsB;iBAgB1D;iBAUA;;qBASJ,4BAA4B;EAC3B,YAAA,iBAAiB,OAAM,qBAA4B,UAAU;;qBAM9D,2BAA2B;EAC1B,YAAA,iBAAiB,OAAM,qBAA4B,UAAU;;qBAM9D,sBAAsB;EACrB,YAAA,iBAAiB,OAAM,qBAA4B,UAAU;;qBAM9D,uBAAuB;EACtB,YAAA,iBAAiB,UAAU;;qBAM5B,2BAA2B;EAC1B,YAAA,iBAAiB,UAAU;;;;;;;;;;wBC/FzB,aAAa;;;;;;;;wBAuCb,gBAAgB,cAAc,SAAS,SAAS;;;;;;;;wBAchD,gBACd,cACA,SAAS,SACT,qBACA,QAAQ,2CACR;;;;wBAkBc,gBAAgB,OAAO;;;;;wBASvB;;;;;wBAUM,sBAAsB,mBAAmB;;;;wBAU/C;;;;;;;qBC5GH,yBAAyB;;EAGpC,IAAI;EAIJ,IAAI,aAAa;EAIjB,OAAO;EAIP;;;;;;;;qBCfW,iCAAiC;EAC5C,IAAI;EAIJ,IAAI,aAAa;EAIjB,OAAO;EAIP;;;;;;;;qBCoCW,0BAA0B;;EAGzB,YAAA,aAAa;EAgBnB,QAAQ,SAAS,qBAAqB,QAAQ;EAmCpD;;;;;;;;qBCvGW,6BAA6B;;EAG5B,YAAA;IAAY,cAAc;;EAIhC,QAAQ,SAAS,qBAAqB,QAAQ;;;;UCNrC;EACf;EACA;;EAEA;;;;;qBAMW,wBAAwB;;EAKvB,YAAA,SAAS;MASjB;EAIE,aAAa,cAAc,YAAY,YAAY,UAAU,kBAAkB,QAAQ;EAUvF,aAAa,cAAc,YAAY,YAAY,SAAS,kBAAkB,QAAQ;;;;UCtC7E;;EAEf;;EAEA;;EAEA,gBAAgB;;EAEhB,eAAe;;EAEf;;EAEA,eAAe;;EAEf;;EAEA;;;;;;qBAOW,2BAA2B;;EAU1B,YAAA,SAAS;MAgBjB;;EAKJ;IAAmB,gBAAgB;IAAQ,eAAe;IAAQ,eAAe;IAAQ;;EAYnF,aAAa,cAAc,YAAY,YAAY,UAAU,kBAAkB,QAAQ;EAQvF,aAAa,cAAc,YAAY,YAAY,SAAS,kBAAkB,QAAQ;;;;UCzE7E;;EAEf;;EAEA;;;;;;qBAOW,oBAAoB;;EAInB,YAAA,SAAS;MAOjB;;;;;EAQE,aAAa,cAAc,YAAY,YAAY,SAAS,kBAAkB,QAAQ;;;;UC/B7E;;EAEf;;EAEA;;;;;;;;;qBAUW,kCAAkC;;EAIjC,YAAA,UAAU;MAKlB;EAIE,aAAa,cAAc,YAAY,YAAY,UAAU,kBAAkB,QAAQ;;;;;;;;;;UCtB9E;;EAEf;;EAEA;;EAEA;;EAEA;;EAEA;;;;;UAMe;;;;;;EAMf,eAAe,MAAM,0BAA0B;;EAE/C;;EAEA;;EAEA;;EAEA,SAAS;;;;;;;;;;;qBA6DE,0BAA0B;;EAOzB,YAAA,SAAS;MAcjB;EAIE,aACJ,cACA,YAAY,YACZ,UAAU,kBACT,QAAQ;;;;UChII;EACf;EACA;;;;;;;;;;;;;wBAcc,mBACd,SAAS,iBACT,eACC;;;UCjBc;;EAEf;;;;;;qBAOW,qBAAqB;;EAGpB,YAAA,SAAS;MAKjB;EAIE,aAAa,eAAe,aAAa,YAAY,UAAU,kBAAkB,QAAQ;;;;;;;;qBClBpF,yBAAyB;MAChC;EAIE,aAAa,eAAe,aAAa,YAAY,UAAU,kBAAkB,QAAQ;;;;;;;;qBCGpF;;EAgBC,YAAA,cAAc,SAAS;;MAc/B;;MAKA;;MAKA,eAAe;;MAKf;;MAKA;;;;;EAQJ,WAAW,SAAS;;;;;;;EAWpB,cAAc,YAAY;;;;;;EAUpB,WAAW;;;;EAiBX,cAAc;;;;EASpB;EAQM,IAAI,aAAa,SAAS,SAAS,qBAAqB,UAAU,iBAAiB,QAAQ;EAI3F,KAAK,aAAa,SAAS,SAAS,qBAAqB,UAAU,iBAAiB,QAAQ;EAI5F,IAAI,aAAa,SAAS,SAAS,qBAAqB,UAAU,iBAAiB,QAAQ;EAI3F,OAAO,aAAa,SAAS,SAAS,qBAAqB,UAAU,iBAAiB,QAAQ;EAI9F,MAAM,aAAa,SAAS,SAAS,qBAAqB,UAAU,iBAAiB,QAAQ;;;;;;;EAY7F,OAAO,aACX,SAAS,SACT,QAAQ,YACR,qBACA,UAAU,iBACT,QAAQ;;;;;;;oBChKD;EACV;EACA;EACA;;;;;UAMe;EACf;EACA;EACA;EACA;EACA;EACA;EACA;;;;;oBAMU;EACV;EACA;EACA;EACA;EACA;EACA;EACA;;;;;UAMe;EACf,YAAY;EACZ;EACA;EACA;EACA;EACA;EACA;EACA;EACA;;;;;UAMe;EACf;EACA;GACC;;;;UC7Cc;;EAEf,MAAM;;EAEN,cAAc;;EAEd;;EAEA;;;;;;;;qBASW;;EAQC,YAAA,cAAc,SAAS;;MAW/B;;MAKA,eAAe;;MAKf;;MAKA,QAAQ;;;;EAOZ,cAAc,YAAY;;;;;EASpB,iBAAiB,iBAAiB,QAAQ;;;;;;EAY1C,mBAAmB,gBAAgB,SAAS,eAAe,QAAQ;;;;;EAgBnE,qBAAqB,iBAAiB,QAAQ;;;;;;;;;EAa9C,0BAA0B,QAAQ;;;;;;EAwClC,YAAY,gBAAgB,mBAAmB;;;;;;;;EAyB/C,cACJ,gBACA,aACA,qBACA,SAAS,eACR;;;;;;EA+BG,oBACJ,gBACA,SAAS,wBACR,QAAQ"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@oneidentity/safeguard",
-  "version": "8.2.0-pre58935",
+  "version": "8.2.0-pre6932",
   "description": "One Identity Safeguard JavaScript/TypeScript SDK",
   "type": "module",
   "exports": {
@@ -92,7 +92,7 @@
     "@typescript-eslint/parser": "^8.33.0",
     "eslint": "^9.27.0",
     "prettier": "^3.5.3",
-    "tsdown": "^0.22.0",
+    "tsdown": "^0.23.1",
     "typescript": "^5.8.3",
     "typescript-eslint": "^8.59.3",
     "vitest": "^4.1.6"