@passflow/core 0.14.1 → 0.15.0

package/dist/lib/api/auth.d.ts

@@ -2,12 +2,27 @@ import { AuthenticationResponseJSON, RegistrationResponseJSON } from '@simpleweb
 import { DeviceService } from '../device';
 import { StorageManager } from '../storage';
 import { AxiosClient } from './axios-client';
-import { OS, PassflowAuthorizationResponse, PassflowConfig, PassflowLogoutResponse, PassflowPasskeyAuthenticateStartPayload, PassflowPasskeyRegisterStartPayload, PassflowPasskeyStart, PassflowPasswordlessResponse, PassflowPasswordlessSignInCompletePayload, PassflowPasswordlessSignInPayload, PassflowSendPasswordResetEmailPayload, PassflowSessionValidationResponse, PassflowSignInPayload, PassflowSignUpPayload, PassflowSuccessResponse, PassflowValidationResponse } from './model';
+import { OS, PassflowAuthorizationResponse, PassflowConfig, PassflowLogoutResponse, PassflowPasskeyAuthenticateStartPayload, PassflowPasskeyRegisterStartPayload, PassflowPasskeyStart, PassflowPasswordlessResponse, PassflowPasswordlessSignInCompletePayload, PassflowPasswordlessSignInPayload, PassflowSendPasswordResetEmailPayload, PassflowSessionValidationResponse, PassflowSignInPayload, PassflowSignUpPayload, PassflowSuccessResponse, PassflowValidationResponse, UpgradeRefreshField } from './model';
 export declare class AuthAPI {
     protected axiosClient: AxiosClient;
     constructor(config: PassflowConfig, storageManager?: StorageManager, deviceService?: DeviceService);
     setAppId(appId: string): void;
-    refreshToken(refreshToken: string, scopes: string[], accessToken?: string): Promise<PassflowAuthorizationResponse>;
+    /**
+     * Refreshes the session, optionally committing an assurance upgrade.
+     *
+     * `upgrade` carries `{type, assertion}` — the proof the user just produced.
+     * The server scores the new `acr` from the durable session record plus the
+     * verified factor and rotates the tokens, so this one endpoint is both the
+     * refresh and the elevation.
+     *
+     * When `upgrade` is present the request is MARKED as part of the upgrade
+     * transaction. The server answers a wrong code, a spent challenge, a foreign
+     * session and an exhausted budget with a bare 401 carrying no RFC 9470
+     * vocabulary, which is indistinguishable from an expired session on the
+     * response alone; the marker is what tells the response interceptor not to
+     * invalidate the session over a mistyped digit.
+     */
+    refreshToken(refreshToken: string, scopes: string[], accessToken?: string, upgrade?: UpgradeRefreshField): Promise<PassflowAuthorizationResponse>;
     signIn(payload: PassflowSignInPayload, deviceId: string, os: OS): Promise<PassflowAuthorizationResponse>;
     signUp(payload: PassflowSignUpPayload): Promise<PassflowAuthorizationResponse>;
     passwordlessSignIn(payload: PassflowPasswordlessSignInPayload, deviceId: string, os: OS): Promise<PassflowPasswordlessResponse>;

package/dist/lib/api/auth.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../../../lib/api/auth.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,0BAA0B,EAAE,wBAAwB,EAAE,MAAM,uBAAuB,CAAC;AAG7F,OAAO,EAAE,aAAa,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAE5C,OAAO,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAC7C,OAAO,EACL,EAAE,EAEF,6BAA6B,EAC7B,cAAc,EAEd,sBAAsB,EAGtB,uCAAuC,EAGvC,mCAAmC,EACnC,oBAAoB,EACpB,4BAA4B,EAC5B,yCAAyC,EAEzC,iCAAiC,EACjC,qCAAqC,EACrC,iCAAiC,EAEjC,qBAAqB,EACrB,qBAAqB,EACrB,uBAAuB,EAEvB,0BAA0B,EAC3B,MAAM,SAAS,CAAC;AAEjB,qBAAa,OAAO;IAClB,SAAS,CAAC,WAAW,EAAE,WAAW,CAAC;gBAEvB,MAAM,EAAE,cAAc,EAAE,cAAc,CAAC,EAAE,cAAc,EAAE,aAAa,CAAC,EAAE,aAAa;IAIlG,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI;IAI7B,YAAY,CAAC,YAAY,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,WAAW,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,6BAA6B,CAAC;IAalH,MAAM,CAAC,OAAO,EAAE,qBAAqB,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,GAAG,OAAO,CAAC,6BAA6B,CAAC;IAYxG,MAAM,CAAC,OAAO,EAAE,qBAAqB,GAAG,OAAO,CAAC,6BAA6B,CAAC;IAa9E,kBAAkB,CAChB,OAAO,EAAE,iCAAiC,EAC1C,QAAQ,EAAE,MAAM,EAChB,EAAE,EAAE,EAAE,GACL,OAAO,CAAC,4BAA4B,CAAC;IAcxC,0BAA0B,CAAC,OAAO,EAAE,yCAAyC,GAAG,OAAO,CAAC,0BAA0B,CAAC;IAOnH,MAAM,CAAC,QAAQ,CAAC,EAAE,MAAM,EAAE,YAAY,CAAC,EAAE,MAAM,EAAE,OAAO,UAAQ,GAAG,OAAO,CAAC,sBAAsB,CAAC;IAOlG,eAAe,IAAI,OAAO,CAAC,iCAAiC,CAAC;IAI7D,sBAAsB,CAAC,OAAO,EAAE,qCAAqC,GAAG,OAAO,CAAC,uBAAuB,CAAC;IAOxG,aAAa,CAAC,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,UAAU,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,6BAA6B,CAAC;IAcjH,oBAAoB,CAClB,OAAO,EAAE,mCAAmC,EAC5C,QAAQ,EAAE,MAAM,EAChB,EAAE,EAAE,EAAE,EACN,OAAO,UAAQ,GACd,OAAO,CAAC,oBAAoB,CAAC;IAchC,uBAAuB,CACrB,WAAW,EAAE,wBAAwB,EACrC,QAAQ,EAAE,MAAM,EAChB,WAAW,EAAE,MAAM,EACnB,OAAO,UAAQ,GACd,OAAO,CAAC,6BAA6B,CAAC;IAczC,wBAAwB,CACtB,OAAO,EAAE,uCAAuC,EAChD,QAAQ,EAAE,MAAM,EAChB,EAAE,EAAE,EAAE,EACN,OAAO,UAAQ,GACd,OAAO,CAAC,oBAAoB,CAAC;IAkBhC,2BAA2B,CACzB,WAAW,EAAE,0BAA0B,EACvC,QAAQ,EAAE,MAAM,EAChB,WAAW,EAAE,MAAM,EACnB,OAAO,UAAQ,GACd,OAAO,CAAC,6BAA6B,CAAC;IAczC,eAAe,CACb,GAAG,EAAE,MAAM,EACX,QAAQ,EAAE,MAAM,EAChB,WAAW,EAAE,MAAM,EACnB,OAAO,UAAQ,EACf,KAAK,CAAC,EAAE,MAAM,GACb,OAAO,CAAC,0BAA0B,CAAC;CAiBvC"}
+{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../../../lib/api/auth.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,0BAA0B,EAAE,wBAAwB,EAAE,MAAM,uBAAuB,CAAC;AAI7F,OAAO,EAAE,aAAa,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAG5C,OAAO,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAC7C,OAAO,EACL,EAAE,EAEF,6BAA6B,EAC7B,cAAc,EAEd,sBAAsB,EAGtB,uCAAuC,EAGvC,mCAAmC,EACnC,oBAAoB,EACpB,4BAA4B,EAC5B,yCAAyC,EAEzC,iCAAiC,EACjC,qCAAqC,EACrC,iCAAiC,EAEjC,qBAAqB,EACrB,qBAAqB,EACrB,uBAAuB,EAEvB,0BAA0B,EAC1B,mBAAmB,EACpB,MAAM,SAAS,CAAC;AAEjB,qBAAa,OAAO;IAClB,SAAS,CAAC,WAAW,EAAE,WAAW,CAAC;gBAEvB,MAAM,EAAE,cAAc,EAAE,cAAc,CAAC,EAAE,cAAc,EAAE,aAAa,CAAC,EAAE,aAAa;IAIlG,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI;IAI7B;;;;;;;;;;;;;;OAcG;IACH,YAAY,CACV,YAAY,EAAE,MAAM,EACpB,MAAM,EAAE,MAAM,EAAE,EAChB,WAAW,CAAC,EAAE,MAAM,EACpB,OAAO,CAAC,EAAE,mBAAmB,GAC5B,OAAO,CAAC,6BAA6B,CAAC;IAsBzC,MAAM,CAAC,OAAO,EAAE,qBAAqB,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,GAAG,OAAO,CAAC,6BAA6B,CAAC;IAYxG,MAAM,CAAC,OAAO,EAAE,qBAAqB,GAAG,OAAO,CAAC,6BAA6B,CAAC;IAa9E,kBAAkB,CAChB,OAAO,EAAE,iCAAiC,EAC1C,QAAQ,EAAE,MAAM,EAChB,EAAE,EAAE,EAAE,GACL,OAAO,CAAC,4BAA4B,CAAC;IAcxC,0BAA0B,CAAC,OAAO,EAAE,yCAAyC,GAAG,OAAO,CAAC,0BAA0B,CAAC;IAOnH,MAAM,CAAC,QAAQ,CAAC,EAAE,MAAM,EAAE,YAAY,CAAC,EAAE,MAAM,EAAE,OAAO,UAAQ,GAAG,OAAO,CAAC,sBAAsB,CAAC;IAOlG,eAAe,IAAI,OAAO,CAAC,iCAAiC,CAAC;IAI7D,sBAAsB,CAAC,OAAO,EAAE,qCAAqC,GAAG,OAAO,CAAC,uBAAuB,CAAC;IAOxG,aAAa,CAAC,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,UAAU,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,6BAA6B,CAAC;IAcjH,oBAAoB,CAClB,OAAO,EAAE,mCAAmC,EAC5C,QAAQ,EAAE,MAAM,EAChB,EAAE,EAAE,EAAE,EACN,OAAO,UAAQ,GACd,OAAO,CAAC,oBAAoB,CAAC;IAchC,uBAAuB,CACrB,WAAW,EAAE,wBAAwB,EACrC,QAAQ,EAAE,MAAM,EAChB,WAAW,EAAE,MAAM,EACnB,OAAO,UAAQ,GACd,OAAO,CAAC,6BAA6B,CAAC;IAczC,wBAAwB,CACtB,OAAO,EAAE,uCAAuC,EAChD,QAAQ,EAAE,MAAM,EAChB,EAAE,EAAE,EAAE,EACN,OAAO,UAAQ,GACd,OAAO,CAAC,oBAAoB,CAAC;IAkBhC,2BAA2B,CACzB,WAAW,EAAE,0BAA0B,EACvC,QAAQ,EAAE,MAAM,EAChB,WAAW,EAAE,MAAM,EACnB,OAAO,UAAQ,GACd,OAAO,CAAC,6BAA6B,CAAC;IAczC,eAAe,CACb,GAAG,EAAE,MAAM,EACX,QAAQ,EAAE,MAAM,EAChB,WAAW,EAAE,MAAM,EACnB,OAAO,UAAQ,EACf,KAAK,CAAC,EAAE,MAAM,GACb,OAAO,CAAC,0BAA0B,CAAC;CAiBvC"}

package/dist/lib/api/axios-client.d.ts

@@ -1,9 +1,10 @@
-import { AxiosRequestConfig } from 'axios';
+import { AxiosError, AxiosRequestConfig, AxiosResponse } from 'axios';
 import { DeviceService } from '../device';
 import { StorageManager } from '../storage';
 import { TokenService } from '../token';
 import { TokenDeliveryManager } from '../token/delivery-manager';
-import { PassflowConfig } from './model';
+import type { UpgradeChallenge } from '../upgrade/challenge';
+import { PassflowConfig, type UpgradeDomain } from './model';
 export declare enum HttpStatuses {
     badRequest = 400,
     unauthorized = 401,
@@ -12,6 +13,16 @@ export declare enum HttpStatuses {
     success = 200,
     created = 201
 }
+/**
+ * Handles a challenge the Passflow instance itself received, resolving with a
+ * replayed response once the session has been elevated.
+ *
+ * Consulted INSIDE the existing error interceptor rather than registered as a
+ * later one: axios runs response interceptors FIFO and the handler below
+ * converts the `AxiosError` into a `PassflowError`, which has no headers and no
+ * config, so anything registered afterwards is structurally too late.
+ */
+export type AxiosUpgradeHandler = (error: AxiosError, challenge: UpgradeChallenge) => Promise<AxiosResponse>;
 export declare class AxiosClient {
     private instance;
     protected storageManager: StorageManager;
@@ -26,8 +37,42 @@ export declare class AxiosClient {
     appId?: string;
     protected defaultHeaders: Record<string, string>;
     private readonly nonAccessTokenEndpoints;
+    /**
+     * Endpoints under `/auth/` that DO need credentials.
+     *
+     * `'upgrade'` is here because `/auth/upgrade/start` is access-token-gated.
+     * Without it the path matches `isNonAuthEndpoint()` and the request
+     * interceptor returns before either the cookie-mode branch or the JSON-mode
+     * token branch runs: no `Authorization`, no `withCredentials`, no CSRF token,
+     * and a prepare round that 401s in every delivery mode.
+     */
     private readonly protectedEndpoints;
+    /** Set when a consumer wires the upgrade feature. Absent by default. */
+    private upgradeHandler?;
+    /**
+     * Passflow's own API as an interception scope, resolved ONCE here from
+     * `PassflowConfig.url` so no wrapper or adapter ever derives it. `null` when
+     * no `url` was configured — see `resolveUpgradeDomain`.
+     */
+    readonly upgradeDomain: UpgradeDomain | null;
     constructor(config: PassflowConfig, storageManager?: StorageManager, deviceService?: DeviceService);
+    /**
+     * The `setSessionInvalid()` suppression predicate, keyed on the request that
+     * failed and on the response that came back — never on "this response does not
+     * speak upgrade vocabulary", which is unsound in both directions.
+     */
+    private isUpgradeTransactionError;
+    /**
+     * Installs (or clears) the handler consulted when a response carries an
+     * upgrade challenge. Passing `undefined` detaches it.
+     */
+    setUpgradeInterceptor(handler: AxiosUpgradeHandler | undefined): void;
+    /**
+     * Re-issues a request after an elevation. Exposed for the upgrade handler,
+     * which owns the replay-once decision; the marker preventing a second
+     * elevation travels on the config the caller passes in.
+     */
+    replay<T = unknown>(config: AxiosRequestConfig): Promise<AxiosResponse<T>>;
     private isProtectedEndpoint;
     private isNonAuthEndpoint;
     /**

package/dist/lib/api/axios-client.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"axios-client.d.ts","sourceRoot":"","sources":["../../../lib/api/axios-client.ts"],"names":[],"mappings":"AAAA,OAAc,EAA6B,kBAAkB,EAA6C,MAAM,OAAO,CAAC;AAUxH,OAAO,EAAE,aAAa,EAAE,MAAM,WAAW,CAAC;AAG1C,OAAO,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAC5C,OAAO,EAAE,YAAY,EAA8B,MAAM,UAAU,CAAC;AACpE,OAAO,EAAE,oBAAoB,EAAE,MAAM,2BAA2B,CAAC;AAGjE,OAAO,EAEL,cAAc,EAMf,MAAM,SAAS,CAAC;AAEjB,oBAAY,YAAY;IACtB,UAAU,MAAM;IAChB,YAAY,MAAM;IAClB,eAAe,MAAM;IACrB,mBAAmB,MAAM;IACzB,OAAO,MAAM;IACb,OAAO,MAAM;CACd;AAqBD,qBAAa,WAAW;IACtB,OAAO,CAAC,QAAQ,CAAgB;IAChC,SAAS,CAAC,cAAc,EAAE,cAAc,CAAC;IACzC,SAAS,CAAC,aAAa,EAAE,aAAa,CAAC;IACvC,SAAS,CAAC,oBAAoB,EAAE,oBAAoB,CAAC;IACrD,OAAO,CAAC,cAAc,CAAsE;IAC5F,OAAO,CAAC,YAAY,CAAS;IAC7B,OAAO,CAAC,SAAS,CAAkB;IAEnC,YAAY,EAAE,YAAY,CAAC;IAE3B,IAAI,MAAM,IAAI,MAAM,CAEnB;IACD,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,CAAC,EAAE,MAAM,CAAC;IAEf,SAAS,CAAC,cAAc,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAG9C;IAEF,OAAO,CAAC,QAAQ,CAAC,uBAAuB,CAAyC;IACjF,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAAyB;gBAEhD,MAAM,EAAE,cAAc,EAAE,cAAc,CAAC,EAAE,cAAc,EAAE,aAAa,CAAC,EAAE,aAAa;IAiJlG,OAAO,CAAC,mBAAmB;IAI3B,OAAO,CAAC,iBAAiB;IAIzB;;;;;;;;OAQG;IACH,OAAO,CAAC,mBAAmB;IAa3B;;;OAGG;YACW,aAAa;YAwDb,oBAAoB;YAoDpB,gBAAgB;YA4BhB,IAAI;IASlB,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,kBAAkB,GAAG,OAAO,CAAC,CAAC,CAAC;IAI7D,IAAI,CAAC,CAAC,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,CAAC,EAAE,MAAM,CAAC,EAAE,kBAAkB,GAAG,OAAO,CAAC,CAAC,CAAC;IAI3E,GAAG,CAAC,CAAC,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,CAAC,EAAE,MAAM,CAAC,EAAE,kBAAkB,GAAG,OAAO,CAAC,CAAC,CAAC;IAI1E,KAAK,CAAC,CAAC,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,CAAC,EAAE,MAAM,CAAC,EAAE,kBAAkB,GAAG,OAAO,CAAC,CAAC,CAAC;IAI5E,MAAM,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,kBAAkB,GAAG,OAAO,CAAC,CAAC,CAAC;IAIhE;;;;;OAKG;IACH,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI;CAY9B"}
+{"version":3,"file":"axios-client.d.ts","sourceRoot":"","sources":["../../../lib/api/axios-client.ts"],"names":[],"mappings":"AAAA,OAAc,EAAE,UAAU,EAAiB,kBAAkB,EAAE,aAAa,EAA8B,MAAM,OAAO,CAAC;AAUxH,OAAO,EAAE,aAAa,EAAE,MAAM,WAAW,CAAC;AAG1C,OAAO,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAC5C,OAAO,EAAE,YAAY,EAA8B,MAAM,UAAU,CAAC;AACpE,OAAO,EAAE,oBAAoB,EAAE,MAAM,2BAA2B,CAAC;AACjE,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AAI7D,OAAO,EAEL,cAAc,EAMd,KAAK,aAAa,EAEnB,MAAM,SAAS,CAAC;AAEjB,oBAAY,YAAY;IACtB,UAAU,MAAM;IAChB,YAAY,MAAM;IAClB,eAAe,MAAM;IACrB,mBAAmB,MAAM;IACzB,OAAO,MAAM;IACb,OAAO,MAAM;CACd;AAuBD;;;;;;;;GAQG;AACH,MAAM,MAAM,mBAAmB,GAAG,CAAC,KAAK,EAAE,UAAU,EAAE,SAAS,EAAE,gBAAgB,KAAK,OAAO,CAAC,aAAa,CAAC,CAAC;AAE7G,qBAAa,WAAW;IACtB,OAAO,CAAC,QAAQ,CAAgB;IAChC,SAAS,CAAC,cAAc,EAAE,cAAc,CAAC;IACzC,SAAS,CAAC,aAAa,EAAE,aAAa,CAAC;IACvC,SAAS,CAAC,oBAAoB,EAAE,oBAAoB,CAAC;IACrD,OAAO,CAAC,cAAc,CAAsE;IAC5F,OAAO,CAAC,YAAY,CAAS;IAC7B,OAAO,CAAC,SAAS,CAAkB;IAEnC,YAAY,EAAE,YAAY,CAAC;IAE3B,IAAI,MAAM,IAAI,MAAM,CAEnB;IACD,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,CAAC,EAAE,MAAM,CAAC;IAEf,SAAS,CAAC,cAAc,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAG9C;IAEF,OAAO,CAAC,QAAQ,CAAC,uBAAuB,CAAyC;IACjF;;;;;;;;OAQG;IACH,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAAoC;IAEvE,wEAAwE;IACxE,OAAO,CAAC,cAAc,CAAC,CAAsB;IAE7C;;;;OAIG;IACH,QAAQ,CAAC,aAAa,EAAE,aAAa,GAAG,IAAI,CAAC;gBAEjC,MAAM,EAAE,cAAc,EAAE,cAAc,CAAC,EAAE,cAAc,EAAE,aAAa,CAAC,EAAE,aAAa;IA6LlG;;;;OAIG;IACH,OAAO,CAAC,yBAAyB;IAIjC;;;OAGG;IACH,qBAAqB,CAAC,OAAO,EAAE,mBAAmB,GAAG,SAAS,GAAG,IAAI;IAIrE;;;;OAIG;IACH,MAAM,CAAC,CAAC,GAAG,OAAO,EAAE,MAAM,EAAE,kBAAkB,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC;IAI1E,OAAO,CAAC,mBAAmB;IAI3B,OAAO,CAAC,iBAAiB;IAIzB;;;;;;;;OAQG;IACH,OAAO,CAAC,mBAAmB;IAa3B;;;OAGG;YACW,aAAa;YAwDb,oBAAoB;YAoDpB,gBAAgB;YA4BhB,IAAI;IASlB,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,kBAAkB,GAAG,OAAO,CAAC,CAAC,CAAC;IAI7D,IAAI,CAAC,CAAC,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,CAAC,EAAE,MAAM,CAAC,EAAE,kBAAkB,GAAG,OAAO,CAAC,CAAC,CAAC;IAI3E,GAAG,CAAC,CAAC,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,CAAC,EAAE,MAAM,CAAC,EAAE,kBAAkB,GAAG,OAAO,CAAC,CAAC,CAAC;IAI1E,KAAK,CAAC,CAAC,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,CAAC,EAAE,MAAM,CAAC,EAAE,kBAAkB,GAAG,OAAO,CAAC,CAAC,CAAC;IAI5E,MAAM,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,kBAAkB,GAAG,OAAO,CAAC,CAAC,CAAC;IAIhE;;;;;OAKG;IACH,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI;CAY9B"}

package/dist/lib/api/index.d.ts

@@ -6,5 +6,6 @@ export * from './model';
 export * from './setting';
 export * from './tenant';
 export * from './two-factor';
+export * from './upgrade';
 export * from './user';
 //# sourceMappingURL=index.d.ts.map

package/dist/lib/api/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../lib/api/index.ts"],"names":[],"mappings":"AAAA,cAAc,OAAO,CAAC;AACtB,cAAc,QAAQ,CAAC;AACvB,cAAc,YAAY,CAAC;AAC3B,cAAc,cAAc,CAAC;AAC7B,cAAc,SAAS,CAAC;AACxB,cAAc,WAAW,CAAC;AAC1B,cAAc,UAAU,CAAC;AACzB,cAAc,cAAc,CAAC;AAC7B,cAAc,QAAQ,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../lib/api/index.ts"],"names":[],"mappings":"AAAA,cAAc,OAAO,CAAC;AACtB,cAAc,QAAQ,CAAC;AACvB,cAAc,YAAY,CAAC;AAC3B,cAAc,cAAc,CAAC;AAC7B,cAAc,SAAS,CAAC;AACxB,cAAc,WAAW,CAAC;AAC1B,cAAc,UAAU,CAAC;AACzB,cAAc,cAAc,CAAC;AAC7B,cAAc,WAAW,CAAC;AAC1B,cAAc,QAAQ,CAAC"}

package/dist/lib/api/model.d.ts

@@ -1,7 +1,8 @@
-import type { AuthenticationResponseJSON, PublicKeyCredentialCreationOptionsJSON, RegistrationResponseJSON } from '@simplewebauthn/types';
+import type { AuthenticationResponseJSON, PublicKeyCredentialCreationOptionsJSON, PublicKeyCredentialRequestOptionsJSON, RegistrationResponseJSON } from '@simplewebauthn/types';
 import type { AxiosRequestConfig } from 'axios';
 import type { PlatformAdapter } from '../platform';
 import type { Tokens } from '../types';
+import type { UpgradeAssertion, UpgradeFactor } from '../upgrade/factors';
 export type RequestOptions<D> = {
     data?: D;
     config?: AxiosRequestConfig;
@@ -62,7 +63,8 @@ export declare enum PassflowEndpointPaths {
     TwoFactorTrustedDevices = "/v2/user/2fa/trusted-devices",
     TwoFactorTrustedDeviceRevoke = "/v2/user/2fa/trusted-devices/:id",
     cliAuthStatus = "/cli/auth/status/:sessionId",
-    cliAuthComplete = "/cli/auth/complete"
+    cliAuthComplete = "/cli/auth/complete",
+    upgradeStart = "/auth/upgrade/start"
 }
 export declare enum PassflowAdminEndpointPaths {
     passkeyRegisterStart = "/admin/auth/passkey/register/start",
@@ -126,6 +128,69 @@ export type PassflowConfig = {
      * Pass a custom adapter to support React Native or other platforms.
      */
     platform?: PlatformAdapter;
+    /**
+     * Assurance upgrade (step-up) configuration. Construction-time only: the
+     * prompt handler is deliberately NOT here, because it is a lifetime-scoped
+     * resource that has to be torn down, which configuration cannot express.
+     */
+    upgrade?: PassflowUpgradeConfig;
+};
+export type PassflowUpgradeConfig = {
+    /** Relying-party id forwarded verbatim to `POST /auth/upgrade/start` for passkey upgrades. */
+    relyingPartyId?: string;
+    /** Overrides the factor set offered during an upgrade. Defaults to what this SDK can complete. */
+    factors?: readonly UpgradeFactor[];
+};
+/**
+ * Passflow's own API, as an interception scope — "domain 1".
+ *
+ * A challenge arriving from here is handled with zero configuration, because
+ * `url` is an input the SDK already takes and whatever it points at is
+ * unambiguously ours.
+ */
+export type UpgradeDomain = {
+    /** The API origin, e.g. `https://api.passflow.dev`. */
+    origin: string;
+    /** The path prefix when `url` carries one, normalised without a trailing slash. */
+    pathPrefix?: string;
+};
+/**
+ * Resolves domain 1 from `PassflowConfig.url`.
+ *
+ * `url` is OPTIONAL, and the absent case is specified rather than guessed: the
+ * domain is EMPTY (`null`), and nothing throws. Throwing would break apps that
+ * never enabled step-up, and substituting a default origin — `PASSFLOW_CLOUD_URL`,
+ * the document origin, the origin the first 401 came from — would be the SDK
+ * inferring a trust boundary it has no information about. An empty domain is not
+ * silent: the first parseable challenge on an attached surface must raise a
+ * diagnostic naming `url` as the fix.
+ *
+ * Note this deliberately does NOT mirror `AxiosClient`'s `url || PASSFLOW_CLOUD_URL`
+ * fallback. That fallback decides where to send our own traffic; this decides
+ * whose 401s may drive a security prompt, and the two questions do not share an
+ * answer.
+ */
+export declare const resolveUpgradeDomain: (url?: string) => UpgradeDomain | null;
+/** The raw `POST /auth/upgrade/start` body, snake_case exactly as the server sends it. */
+export type UpgradeStartWire = {
+    challenge_id: string;
+    method: string;
+    /** RFC 3339. The server enforces the TTL; the SDK carries this for display only. */
+    expires_at: string;
+    /** WebAuthn assertion options, present only for a passkey upgrade. */
+    webauthn?: PublicKeyCredentialRequestOptionsJSON;
+    /** Masked delivery target (`j***@x.com`), present only for email / SMS OTP. */
+    code_sent_to?: string;
+};
+/**
+ * The `upgrade` field of `POST /auth/refresh` — the commit round.
+ *
+ * The server types `assertion` as `json.RawMessage`, so a new factor can extend
+ * the payload without a wire-format change.
+ */
+export type UpgradeRefreshField = {
+    type: string;
+    assertion: UpgradeAssertion;
 };
 export type PassflowAuthorizationResponse = Tokens & {
     requires_2fa?: boolean;

package/dist/lib/api/model.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"model.d.ts","sourceRoot":"","sources":["../../../lib/api/model.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,0BAA0B,EAC1B,sCAAsC,EACtC,wBAAwB,EACzB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,OAAO,CAAC;AAEhD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AACnD,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,UAAU,CAAC;AAEvC,MAAM,MAAM,cAAc,CAAC,CAAC,IAAI;IAC9B,IAAI,CAAC,EAAE,CAAC,CAAC;IACT,MAAM,CAAC,EAAE,kBAAkB,CAAC;CAC7B,CAAC;AAEF,oBAAY,aAAa;IACvB,GAAG,QAAQ;IACX,IAAI,SAAS;IACb,GAAG,QAAQ;IACX,KAAK,UAAU;IACf,MAAM,WAAW;CAClB;AAED,oBAAY,qBAAqB;IAC/B,MAAM,gBAAgB;IACtB,MAAM,mBAAmB;IACzB,kBAAkB,2BAA2B;IAC7C,YAAY,6BAA6B;IACzC,oBAAoB,gCAAgC;IACpD,MAAM,iBAAiB;IACvB,OAAO,kBAAkB;IACzB,eAAe,aAAa;IAC5B,sBAAsB,yBAAyB;IAC/C,aAAa,0BAA0B;IACvC,WAAW,kBAAkB;IAC7B,oBAAoB,iCAAiC;IACrD,uBAAuB,oCAAoC;IAC3D,wBAAwB,qCAAqC;IAC7D,2BAA2B,wCAAwC;IACnE,eAAe,mBAAmB;IAClC,WAAW,cAAc;IACzB,sBAAsB,uBAAuB;IAC7C,eAAe,sBAAsB;IACrC,WAAW,kBAAkB;IAC7B,cAAc,4BAAmD;IACjE,sBAAsB,+BAAsD;IAC5E,cAAc,sBAAsB;IACpC,UAAU,iBAAiB;IAC3B,eAAe,uCAAuC;IACtD,iBAAiB,iBAAiB;IAClC,gBAAgB,+BAA+B;IAC/C,gBAAgB,sCAAsC;IACtD,iBAAiB,oCAAoC;IACrD,SAAS,cAAc;IACvB,eAAe,qBAAqB;IACpC,mBAAmB,0BAA0B;IAC7C,qBAAqB,4BAA4B;IACjD,eAAe,qBAAqB;IACpC,iBAAiB,uBAAuB;IACxC,wBAAwB,wCAAwC;IAChE,uBAAuB,oBAAoB,CAAE,oCAAoC;IAEjF,yBAAyB,mCAAmC;IAC5D,0BAA0B,yBAAyB;IACnD,mBAAmB,6BAA6B;IAChD,sBAAsB,gCAAgC;IACtD,qBAAqB,6BAA6B;IAClD,kBAAkB,2BAA2B;IAC7C,iBAAiB,wBAAwB;IACzC,oBAAoB,6BAA6B;IACjD,uBAAuB,iCAAiC;IACxD,4BAA4B,qCAAqC;IAEjE,aAAa,gCAAgC;IAC7C,eAAe,uBAAuB;CACvC;AAED,oBAAY,0BAA0B;IACpC,oBAAoB,uCAAuC;IAC3D,uBAAuB,0CAA0C;IACjE,wBAAwB,2CAA2C;IACnE,2BAA2B,8CAA8C;IACzE,eAAe,yBAAyB;IACxC,MAAM,uBAAuB;CAC9B;AAED;;;GAGG;AACH,MAAM,MAAM,mBAAmB,GAAG;IAChC;;;OAGG;IACH,OAAO,EAAE,OAAO,CAAC;IACjB;;;;OAIG;IACH,WAAW,EAAE,MAAM,CAAC;IACpB;;;;OAIG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB;;;OAGG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;;;OAGG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB,CAAC;AAEF,kDAAkD;AAClD,MAAM,MAAM,SAAS,GAAG,mBAAmB,CAAC;AAE5C,MAAM,MAAM,cAAc,GAAG;IAC3B,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;IAClB,sBAAsB,CAAC,EAAE,OAAO,CAAC;IACjC,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAC3B,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B;;;;OAIG;IACH,aAAa,CAAC,EAAE,mBAAmB,CAAC;IACpC;;;;OAIG;IACH,QAAQ,CAAC,EAAE,eAAe,CAAC;CAC5B,CAAC;AAEF,MAAM,MAAM,6BAA6B,GAAG,MAAM,GAAG;IACnD,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,cAAc,CAAC,EAAE,WAAW,GAAG,QAAQ,GAAG,QAAQ,CAAC;IACnD,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB,CAAC;AAEF,MAAM,MAAM,0BAA0B,GAAG,MAAM,GAAG;IAChD,YAAY,EAAE,MAAM,CAAC;CACtB,CAAC;AAEF,MAAM,MAAM,uBAAuB,GAAG;IACpC,MAAM,EAAE,IAAI,CAAC;CACd,CAAC;AAEF,MAAM,MAAM,sBAAsB,GAAG;IACnC,MAAM,EAAE,IAAI,CAAC;CACd,CAAC;AAEF,MAAM,WAAW,iCAAiC;IAChD,KAAK,EAAE,OAAO,CAAC;IACf,IAAI,CAAC,EAAE;QACL,EAAE,EAAE,MAAM,CAAC;QACX,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;KACxB,CAAC;IACF,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,MAAM,qBAAqB,GAAG;IAClC,KAAK,EAAE;QACL,EAAE,EAAE,MAAM,CAAC;QACX,OAAO,EAAE,MAAM,CAAC;QAChB,MAAM,EAAE,MAAM,CAAC;QACf,QAAQ,EAAE,MAAM,CAAC;QACjB,IAAI,EAAE,MAAM,CAAC;KACd,CAAC;CACH,CAAC;AAEF,qBAAa,aAAc,SAAQ,KAAK;IACtC,EAAE,EAAE,MAAM,CAAC;IACX,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;gBAED,KAAK,EAAE,qBAAqB,CAAC,OAAO,CAAC;CAQlD;AAED,MAAM,MAAM,qBAAqB,GAAG;IAClC,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;IAClB,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB,GAAG,CACA;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,KAAK,CAAC;IAAC,QAAQ,CAAC,EAAE,KAAK,CAAA;CAAE,GAClD;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,KAAK,CAAC;IAAC,QAAQ,CAAC,EAAE,KAAK,CAAA;CAAE,GAClD;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,KAAK,CAAC;IAAC,KAAK,CAAC,EAAE,KAAK,CAAA;CAAE,CACrD,CAAC;AAEF,MAAM,MAAM,6BAA6B,GAAG,qBAAqB,GAAG;IAClE,MAAM,EAAE,MAAM,CAAC;IACf,EAAE,EAAE,EAAE,CAAC;CACR,CAAC;AAEF,MAAM,MAAM,sBAAsB,GAAG;IACnC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB,CAAC;AAEF,MAAM,MAAM,mBAAmB,GAAG;IAChC,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,IAAI,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,sBAAsB,CAAC;CACpC,GAAG,CAAC;IAAE,KAAK,EAAE,MAAM,CAAA;CAAE,GAAG;IAAE,YAAY,EAAE,MAAM,CAAA;CAAE,CAAC,CAAC;AAEnD,MAAM,MAAM,qBAAqB,GAAG;IAClC,IAAI,EAAE,mBAAmB,CAAC;IAC1B,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;IAClB,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB,CAAC;AAEF,MAAM,MAAM,iCAAiC,GAAG;IAC9C,cAAc,EAAE,yBAAyB,CAAC;IAC1C,YAAY,EAAE,MAAM,CAAC;IACrB,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;IAClB,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB,GAAG,CAAC;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,KAAK,CAAA;CAAE,GAAG;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,KAAK,CAAA;CAAE,CAAC,CAAC;AAE1E,MAAM,MAAM,4BAA4B,GAAG;IACzC,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,IAAI,GAAG,MAAM,CAAC;CAC3B,CAAC;AAEF,MAAM,MAAM,yCAAyC,GAAG,iCAAiC,GAAG;IAC1F,MAAM,EAAE,MAAM,CAAC;IACf,EAAE,EAAE,EAAE,CAAC;CACR,CAAC;AAEF,MAAM,MAAM,yCAAyC,GAAG;IACtD,YAAY,EAAE,MAAM,CAAC;IACrB,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;IAClB,cAAc,CAAC,EAAE,yBAAyB,CAAC;CAC5C,CAAC;AAEF,oBAAY,SAAS;IACnB,MAAM,WAAW;IACjB,QAAQ,aAAa;CACtB;AAED,MAAM,MAAM,WAAW,GAAG;IACxB,QAAQ,EAAE,SAAS,CAAC;CACrB,CAAC;AAEF,MAAM,MAAM,wBAAwB,GAAG,IAAI,GAAG,OAAO,GAAG,OAAO,GAAG,UAAU,GAAG,WAAW,GAAG,MAAM,CAAC;AACpG,MAAM,MAAM,yBAAyB,GAAG,UAAU,GAAG,KAAK,GAAG,YAAY,GAAG,gBAAgB,GAAG,UAAU,GAAG,MAAM,CAAC;AACnH,MAAM,MAAM,yBAAyB,GAAG,OAAO,GAAG,KAAK,GAAG,MAAM,GAAG,QAAQ,GAAG,eAAe,GAAG,MAAM,CAAC;AAEvG,MAAM,MAAM,gBAAgB,GAAG;IAC7B,QAAQ,EAAE,wBAAwB,CAAC;IACnC,SAAS,EAAE,yBAAyB,CAAC;IACrC,SAAS,EAAE,yBAAyB,CAAC;CACtC,CAAC;AAEF,MAAM,MAAM,aAAa,GAAG,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;AAElD,MAAM,MAAM,gBAAgB,GAAG,UAAU,GAAG,SAAS,GAAG,UAAU,GAAG,KAAK,GAAG,MAAM,GAAG,WAAW,CAAC;AAElG,MAAM,MAAM,cAAc,GACtB;IAAE,IAAI,EAAE,OAAO,CAAC,gBAAgB,EAAE,UAAU,CAAC,CAAC;IAAC,QAAQ,EAAE,gBAAgB,CAAA;CAAE,GAC3E;IAAE,IAAI,EAAE,OAAO,CAAC,gBAAgB,EAAE,KAAK,CAAC,CAAC;IAAC,QAAQ,EAAE,WAAW,CAAA;CAAE,GACjE;IACE,IAAI,EAAE,OAAO,CAAC,gBAAgB,EAAE,UAAU,GAAG,KAAK,CAAC,CAAC;IACpD,QAAQ,EAAE,aAAa,CAAC;CACzB,CAAC;AAEN,MAAM,MAAM,OAAO,GAAG,KAAK,GAAG,KAAK,GAAG,KAAK,GAAG,SAAS,GAAG,KAAK,GAAG,SAAS,GAAG,KAAK,GAAG,OAAO,CAAC;AAE9F,MAAM,MAAM,mBAAmB,GAAG,WAAW,GAAG,QAAQ,GAAG,EAAE,CAAC;AAE9D,MAAM,MAAM,WAAW,GAAG;IACxB,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,OAAO,CAAC;IAChB,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE,OAAO,CAAC;IACjB,IAAI,EAAE,OAAO,CAAC;IACd,aAAa,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC;IAC/B,OAAO,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC;IACzB,sBAAsB,EAAE,OAAO,CAAC;IAChC,eAAe,EAAE,cAAc,EAAE,CAAC;IAClC,wBAAwB,EAAE,OAAO,CAAC;IAClC,YAAY,EAAE,OAAO,CAAC;IACtB,mBAAmB,EAAE,OAAO,CAAC;IAC7B,oBAAoB,EAAE,OAAO,CAAC;IAC9B,wBAAwB,EAAE,OAAO,CAAC;IAClC,iCAAiC,EAAE,OAAO,CAAC;IAC3C,8BAA8B,EAAE,OAAO,CAAC;IACxC,6BAA6B,EAAE,OAAO,GAAG,QAAQ,GAAG,UAAU,CAAC;IAC/D,0BAA0B,EAAE,OAAO,CAAC;IACpC,sBAAsB,EAAE,OAAO,CAAC;IAChC,+BAA+B,EAAE,MAAM,CAAC;IACxC,QAAQ,EAAE,kBAAkB,CAAC;IAC7B,eAAe,EAAE,gBAAgB,CAAC;IAClC,kBAAkB,CAAC,EAAE,OAAO,CAAC;IAC7B,qBAAqB,CAAC,EAAE,mBAAmB,CAAC;CAC7C,CAAC;AAEF,MAAM,MAAM,kBAAkB,GAAG;IAC/B,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,0BAA0B,EAAE,OAAO,CAAC;CACrC,CAAC;AAEF,oBAAY,EAAE;IACZ,GAAG,QAAQ;IACX,GAAG,QAAQ;IACX,OAAO,YAAY;CACpB;AAED;;;;GAIG;AACH,wBAAgB,mBAAmB,CAAC,UAAU,EAAE,KAAK,GAAG,KAAK,GAAG,SAAS,GAAG,EAAE,CAG7E;AAED,MAAM,MAAM,mCAAmC,GAAG;IAChD,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,YAAY,CAAC,EAAE,MAAM,CAAC;IAEtB,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,aAAa,CAAC,EAAE,OAAO,CAAC;IAExB,gBAAgB,EAAE,MAAM,CAAC;IACzB,YAAY,EAAE,MAAM,CAAC;CACtB,CAAC;AAEF,MAAM,MAAM,2CAA2C,GAAG,mCAAmC,GAAG;IAC9F,MAAM,EAAE,MAAM,CAAC;IACf,EAAE,EAAE,EAAE,CAAC;CACR,CAAC;AAEF,MAAM,MAAM,oBAAoB,GAAG;IACjC,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,sCAAsC,CAAC;CACnD,CAAC;AAEF,MAAM,MAAM,wCAAwC,GAAG,MAAM,CAAC;AAE9D,MAAM,MAAM,sBAAsB,GAAG;IACnC,MAAM,EAAE,MAAM,CAAC;IACf,YAAY,EAAE,MAAM,CAAC;CACtB,CAAC;AAEF,MAAM,MAAM,8BAA8B,GAAG,sBAAsB,GAAG;IACpE,YAAY,EAAE,wBAAwB,CAAC;CACxC,CAAC;AAEF,MAAM,MAAM,kCAAkC,GAAG,sBAAsB,GAAG;IACxE,YAAY,EAAE,0BAA0B,CAAC;CAC1C,CAAC;AAEF,MAAM,MAAM,uCAAuC,GAAG;IACpD,gBAAgB,EAAE,MAAM,CAAC;IACzB,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;IAClB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB,CAAC;AAEF,MAAM,MAAM,+CAA+C,GAAG,uCAAuC,GAAG;IACtG,MAAM,EAAE,MAAM,CAAC;IACf,EAAE,EAAE,EAAE,CAAC;CACR,CAAC;AAEF,MAAM,MAAM,4BAA4B,GAAG;IACzC,QAAQ,EAAE,SAAS,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;IACrB,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;IAClB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,aAAa,CAAC,EAAE,OAAO,CAAC;CACzB,CAAC;AAEF,MAAM,MAAM,oCAAoC,GAAG,4BAA4B,GAAG;IAChF,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB,CAAC;AAEF,MAAM,MAAM,uBAAuB,GAAG;IACpC,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,MAAM,CAAC;IACf,YAAY,EAAE,MAAM,CAAC;CACtB,CAAC;AAGF,MAAM,MAAM,6BAA6B,GAAG,MAAM,GAAG,UAAU,GAAG,WAAW,GAAG,aAAa,CAAC;AAE9F,MAAM,MAAM,mBAAmB,GAAG;IAChC,eAAe,EAAE,8BAA8B,CAAC;IAChD,gBAAgB,EAAE,uBAAuB,CAAC;CAC3C,CAAC;AAEF,MAAM,MAAM,8BAA8B,GAAG;IAC3C,4BAA4B,EAAE,OAAO,CAAC;IACtC,mBAAmB,EAAE,MAAM,CAAC;IAC5B,kBAAkB,EAAE,OAAO,CAAC;IAC5B,yBAAyB,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,GAAG,QAAQ,CAAC;IAClE,iBAAiB,EAAE,OAAO,CAAC;IAC3B,iBAAiB,EAAE,OAAO,CAAC;IAC3B,cAAc,EAAE,OAAO,CAAC;IACxB,cAAc,EAAE,OAAO,CAAC;CACzB,CAAC;AAEF,MAAM,MAAM,uBAAuB,GAAG;IAEpC,EAAE,EAAE,MAAM,CAAC;IACX,YAAY,EAAE,MAAM,CAAC;IAGrB,YAAY,CAAC,EAAE;QACb,iBAAiB,EAAE,6BAA6B,CAAC;QACjD,wBAAwB,EAAE,UAAU,GAAG,gBAAgB,GAAG,KAAK,CAAC;QAChE,gBAAgB,EAAE,6BAA6B,CAAC;QAChD,oBAAoB,EAAE,6BAA6B,CAAC;QACpD,UAAU,EAAE,OAAO,CAAC;KACrB,CAAC;IACF,cAAc,CAAC,EAAE;QACf,iBAAiB,EAAE,6BAA6B,CAAC;QACjD,oBAAoB,EAAE,6BAA6B,CAAC;QACpD,UAAU,EAAE,OAAO,CAAC;KACrB,CAAC;CACH,CAAC;AAEF,KAAK,uBAAuB,GAAG;IAC7B,YAAY,EAAE,OAAO,CAAC;IACtB,aAAa,EAAE,OAAO,CAAC;IACvB,eAAe,EAAE,OAAO,CAAC;IACzB,YAAY,EAAE,OAAO,CAAC;CACvB,CAAC;AAEF,KAAK,8BAA8B,GAAG;IACpC,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;IACnB,aAAa,EAAE,OAAO,CAAC;IACvB,UAAU,EAAE,UAAU,GAAG,gBAAgB,CAAC;CAC3C,CAAC;AAEF,MAAM,MAAM,mBAAmB,GAAG;IAChC,EAAE,EAAE,MAAM,CAAC;IACX,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,gBAAgB,CAAC;IAC3B,cAAc,EAAE,yBAAyB,CAAC;IAC1C,aAAa,EAAE,MAAM,CAAC;IACtB,WAAW,EAAE,IAAI,GAAG,MAAM,CAAC;IAC3B,uBAAuB,EAAE,MAAM,CAAC;IAChC,YAAY,EAAE,IAAI,GAAG,MAAM,CAAC;IAC5B,YAAY,EAAE,IAAI,GAAG,MAAM,CAAC;IAC5B,UAAU,EAAE,MAAM,CAAC;IACnB,gBAAgB,EAAE,MAAM,CAAC;IACzB,SAAS,EAAE,MAAM,EAAE,CAAC;IACpB,KAAK,EAAE,uBAAuB,CAAC;IAC/B,aAAa,EAAE,8BAA8B,CAAC;IAC9C,QAAQ,EAAE,OAAO,CAAC;IAClB,WAAW,EAAE,IAAI,GAAG,MAAM,CAAC;IAC3B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,oBAAoB,CAAC,EAAE,MAAM,CAAC;CAC/B,CAAC;AAEF,MAAM,MAAM,qCAAqC,GAAG;IAClD,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB,GAAG,CACA;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,KAAK,CAAC;IAAC,QAAQ,CAAC,EAAE,KAAK,CAAA;CAAE,GAClD;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,KAAK,CAAC;IAAC,QAAQ,CAAC,EAAE,KAAK,CAAA;CAAE,GAClD;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,KAAK,CAAC;IAAC,KAAK,CAAC,EAAE,KAAK,CAAA;CAAE,CACrD,CAAC;AAEF,MAAM,MAAM,sBAAsB,GAAG;IACnC,IAAI,EAAE,MAAM,CAAC;CACd,CAAC;AAEF,MAAM,MAAM,qBAAqB,GAAG;IAClC,YAAY,EAAE,MAAM,CAAC;IACrB,MAAM,EAAE,MAAM,EAAE,CAAC;CAClB,CAAC;AAEF,MAAM,MAAM,qBAAqB,GAAG;IAClC,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;IACd,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE;QACL,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAAC;KAC3B,CAAC;CACH,CAAC;AAEF,MAAM,MAAM,aAAa,GAAG;IAC1B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,OAAO,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;CACpB,CAAC;AAEF,MAAM,MAAM,YAAY,GAAG;IACzB,EAAE,EAAE,MAAM,CAAC;IACX,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,MAAM,CAAC;CACd,CAAC;AAEF,MAAM,MAAM,sBAAsB,GAAG;IACnC,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,eAAe,CAAC,EAAE,mBAAmB,EAAE,CAAC;IACxC,MAAM,CAAC,EAAE,aAAa,EAAE,CAAC;IACzB,KAAK,CAAC,EAAE,YAAY,EAAE,CAAC;CACxB,CAAC;AAEF;;GAEG;AACH,MAAM,MAAM,mBAAmB,GAAG;IAChC,IAAI,EAAE;QACJ,EAAE,EAAE,MAAM,CAAC;QACX,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QACrB,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QACtB,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;KACvB,CAAC;IACF,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,CAAC,EAAE;QACN,EAAE,EAAE,MAAM,CAAC;KACZ,EAAE,CAAC;CACL,CAAC;AAEF,MAAM,MAAM,2BAA2B,GAAG;IACxC,IAAI,EAAE,MAAM,CAAC;CACd,CAAC;AAEF,MAAM,MAAM,uBAAuB,GAAG,SAAS,GAAG,QAAQ,GAAG,YAAY,CAAC;AAE1E,MAAM,MAAM,8BAA8B,GAAG,QAAQ,GAAG,OAAO,GAAG,MAAM,CAAC;AAEzE,MAAM,MAAM,gBAAgB,GAAG;IAC7B,aAAa,EAAE,MAAM,CAAC;IACtB,UAAU,EAAE,MAAM,CAAC;IACnB,oBAAoB,EAAE,MAAM,CAAC;IAC7B,gBAAgB,EAAE,MAAM,CAAC;IACzB,UAAU,EAAE,MAAM,CAAC;IACnB,sBAAsB,EAAE,MAAM,CAAC;IAC/B,kBAAkB,EAAE,MAAM,CAAC;IAC3B,iBAAiB,EAAE,MAAM,CAAC;IAC1B,aAAa,EAAE,MAAM,CAAC;IACtB,iCAAiC,EAAE,MAAM,CAAC;IAC1C,2BAA2B,EAAE,MAAM,CAAC;IACpC,QAAQ,EAAE,MAAM,CAAC;IACjB,+BAA+B,EAAE,MAAM,CAAC;IACxC,yBAAyB,EAAE,MAAM,CAAC;IAClC,gBAAgB,EAAE,MAAM,CAAC;IACzB,UAAU,EAAE,MAAM,CAAC;CACpB,CAAC;AAEF,MAAM,MAAM,gBAAgB,GAAG;IAC7B,aAAa,EAAE,uBAAuB,CAAC;IACvC,gBAAgB,EAAE,MAAM,CAAC;IACzB,oBAAoB,EAAE,OAAO,CAAC;IAC9B,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,8BAA8B,CAAC;IAC7C,WAAW,EAAE,gBAAgB,CAAC;IAC9B,UAAU,EAAE,gBAAgB,CAAC;CAC9B,CAAC;AAEF,MAAM,MAAM,2BAA2B,GAAG,sBAAsB,CAAC;AAGjE,wBAAgB,cAAc,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,MAAM,CAMvF;AASD;;GAEG;AACH,oBAAY,eAAe;IACzB,QAAQ,aAAa;IACrB,QAAQ,aAAa;IACrB,QAAQ,aAAa;CACtB;AAED;;GAEG;AACH,MAAM,MAAM,kBAAkB,GAC1B,cAAc,GACd,cAAc,GACd,mBAAmB,GACnB,mBAAmB,GACnB,iBAAiB,GACjB,aAAa,GACb,uBAAuB,GACvB,6BAA6B,GAC7B,mBAAmB,GACnB,qBAAqB,CAAC;AAG1B,MAAM,MAAM,uBAAuB,GAAG;IACpC,IAAI,EAAE,MAAM,CAAC;CACd,CAAC;AAEF,MAAM,MAAM,sBAAsB,GAAG;IACnC,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,CAAC;CACnB,CAAC;AAEF,MAAM,MAAM,wBAAwB,GAAG;IACrC,aAAa,EAAE,MAAM,CAAC;IACtB,SAAS,EAAE,MAAM,CAAC;CACnB,CAAC;AAEF,MAAM,MAAM,uBAAuB,GAAG;IACpC,IAAI,EAAE,MAAM,CAAC;CACd,CAAC;AAEF,MAAM,MAAM,0BAA0B,GAAG;IACvC,IAAI,EAAE,MAAM,CAAC;CACd,CAAC;AAGF,MAAM,MAAM,uBAAuB,GAAG;IACpC,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,EAAE,eAAe,CAAC;IACxB,wBAAwB,EAAE,MAAM,CAAC;IACjC,WAAW,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC;CACrB,CAAC;AAEF,MAAM,MAAM,sBAAsB,GAAG;IACnC,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC;CACrB,CAAC;AAEF,MAAM,MAAM,wBAAwB,GAAG;IACrC,OAAO,EAAE,IAAI,CAAC;IACd,cAAc,EAAE,MAAM,EAAE,CAAC;CAC1B,CAAC;AAEF,MAAM,MAAM,uBAAuB,GAAG,MAAM,GAAG;IAC7C,OAAO,EAAE,IAAI,CAAC;CACf,CAAC;AAEF,MAAM,MAAM,yBAAyB,GAAG,MAAM,GAAG;IAC/C,OAAO,EAAE,IAAI,CAAC;IACd,wBAAwB,EAAE,MAAM,CAAC;CAClC,CAAC;AAEF,MAAM,MAAM,wBAAwB,GAAG;IACrC,OAAO,EAAE,IAAI,CAAC;CACf,CAAC;AAEF,MAAM,MAAM,2BAA2B,GAAG;IACxC,OAAO,EAAE,IAAI,CAAC;IACd,cAAc,EAAE,MAAM,EAAE,CAAC;CAC1B,CAAC;AAMF;;GAEG;AACH,MAAM,MAAM,gCAAgC,GACxC,eAAe,GACf,eAAe,GACf,eAAe,GACf,cAAc,GACd,cAAc,CAAC;AAEnB;;GAEG;AACH,MAAM,MAAM,4BAA4B,GAAG;IACzC,IAAI,EAAE,gCAAgC,CAAC;IACvC,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB,CAAC;AAEF;;;GAGG;AACH,MAAM,MAAM,yCAAyC,GAAG;IACtD,OAAO,EAAE,OAAO,CAAC;IACjB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,KAAK,CAAC,EAAE,4BAA4B,CAAC;CACtC,CAAC;AAEF;;;GAGG;AACH,MAAM,MAAM,8BAA8B,GAAG;IAC3C,YAAY,EAAE,MAAM,CAAC;IACrB,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,KAAK,EAAE,WAAW,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;CACnB,CAAC;AAMF;;GAEG;AACH,MAAM,MAAM,eAAe,GAAG,MAAM,GAAG,WAAW,GAAG,SAAS,GAAG,SAAS,GAAG,UAAU,GAAG,cAAc,GAAG,gBAAgB,CAAC;AAE5H;;GAEG;AACH,MAAM,WAAW,yBAAyB;IACxC,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,YAAY,CAAC,EAAE,OAAO,CAAC;CACxB;AAED;;GAEG;AACH,MAAM,WAAW,0BAA0B;IACzC,YAAY,EAAE,MAAM,CAAC;IACrB,MAAM,EAAE,eAAe,CAAC;IACxB,mBAAmB,EAAE,eAAe,EAAE,CAAC;IACvC,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,gBAAgB,CAAC,EAAE,OAAO,CAAC;CAC5B;AAED;;GAEG;AACH,MAAM,WAAW,wBAAwB;IACvC,YAAY,EAAE,MAAM,CAAC;IACrB,MAAM,EAAE,eAAe,CAAC;IACxB,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,CAAC,EAAE,OAAO,CAAC;CACxB;AAED;;GAEG;AACH,MAAM,WAAW,yBAAyB;IACxC,OAAO,EAAE,OAAO,CAAC;IACjB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,cAAc,CAAC,EAAE,OAAO,CAAC;CAC1B;AAED;;GAEG;AACH,MAAM,WAAW,yBAAyB;IACxC,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,eAAe,CAAC;IACxB,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED;;GAEG;AACH,MAAM,WAAW,2BAA2B;IAC1C,YAAY,EAAE,MAAM,CAAC;IACrB,MAAM,EAAE,eAAe,CAAC;CACzB;AAMD,MAAM,WAAW,qBAAqB;IACpC,MAAM,EAAE,SAAS,GAAG,WAAW,GAAG,SAAS,GAAG,QAAQ,CAAC;IACvD,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,SAAS,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACpC,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,sBAAsB;IACrC,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,EAAE,MAAM,CAAC;IACrB,aAAa,EAAE,MAAM,CAAC;IACtB,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;CACpB"}
+{"version":3,"file":"model.d.ts","sourceRoot":"","sources":["../../../lib/api/model.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,0BAA0B,EAC1B,sCAAsC,EACtC,qCAAqC,EACrC,wBAAwB,EACzB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,OAAO,CAAC;AAEhD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AACnD,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,UAAU,CAAC;AACvC,OAAO,KAAK,EAAE,gBAAgB,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAE1E,MAAM,MAAM,cAAc,CAAC,CAAC,IAAI;IAC9B,IAAI,CAAC,EAAE,CAAC,CAAC;IACT,MAAM,CAAC,EAAE,kBAAkB,CAAC;CAC7B,CAAC;AAEF,oBAAY,aAAa;IACvB,GAAG,QAAQ;IACX,IAAI,SAAS;IACb,GAAG,QAAQ;IACX,KAAK,UAAU;IACf,MAAM,WAAW;CAClB;AAED,oBAAY,qBAAqB;IAC/B,MAAM,gBAAgB;IACtB,MAAM,mBAAmB;IACzB,kBAAkB,2BAA2B;IAC7C,YAAY,6BAA6B;IACzC,oBAAoB,gCAAgC;IACpD,MAAM,iBAAiB;IACvB,OAAO,kBAAkB;IACzB,eAAe,aAAa;IAC5B,sBAAsB,yBAAyB;IAC/C,aAAa,0BAA0B;IACvC,WAAW,kBAAkB;IAC7B,oBAAoB,iCAAiC;IACrD,uBAAuB,oCAAoC;IAC3D,wBAAwB,qCAAqC;IAC7D,2BAA2B,wCAAwC;IACnE,eAAe,mBAAmB;IAClC,WAAW,cAAc;IACzB,sBAAsB,uBAAuB;IAC7C,eAAe,sBAAsB;IACrC,WAAW,kBAAkB;IAC7B,cAAc,4BAAmD;IACjE,sBAAsB,+BAAsD;IAC5E,cAAc,sBAAsB;IACpC,UAAU,iBAAiB;IAC3B,eAAe,uCAAuC;IACtD,iBAAiB,iBAAiB;IAClC,gBAAgB,+BAA+B;IAC/C,gBAAgB,sCAAsC;IACtD,iBAAiB,oCAAoC;IACrD,SAAS,cAAc;IACvB,eAAe,qBAAqB;IACpC,mBAAmB,0BAA0B;IAC7C,qBAAqB,4BAA4B;IACjD,eAAe,qBAAqB;IACpC,iBAAiB,uBAAuB;IACxC,wBAAwB,wCAAwC;IAChE,uBAAuB,oBAAoB,CAAE,oCAAoC;IAEjF,yBAAyB,mCAAmC;IAC5D,0BAA0B,yBAAyB;IACnD,mBAAmB,6BAA6B;IAChD,sBAAsB,gCAAgC;IACtD,qBAAqB,6BAA6B;IAClD,kBAAkB,2BAA2B;IAC7C,iBAAiB,wBAAwB;IACzC,oBAAoB,6BAA6B;IACjD,uBAAuB,iCAAiC;IACxD,4BAA4B,qCAAqC;IAEjE,aAAa,gCAAgC;IAC7C,eAAe,uBAAuB;IAEtC,YAAY,wBAAwB;CACrC;AAED,oBAAY,0BAA0B;IACpC,oBAAoB,uCAAuC;IAC3D,uBAAuB,0CAA0C;IACjE,wBAAwB,2CAA2C;IACnE,2BAA2B,8CAA8C;IACzE,eAAe,yBAAyB;IACxC,MAAM,uBAAuB;CAC9B;AAED;;;GAGG;AACH,MAAM,MAAM,mBAAmB,GAAG;IAChC;;;OAGG;IACH,OAAO,EAAE,OAAO,CAAC;IACjB;;;;OAIG;IACH,WAAW,EAAE,MAAM,CAAC;IACpB;;;;OAIG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB;;;OAGG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;;;OAGG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB,CAAC;AAEF,kDAAkD;AAClD,MAAM,MAAM,SAAS,GAAG,mBAAmB,CAAC;AAE5C,MAAM,MAAM,cAAc,GAAG;IAC3B,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;IAClB,sBAAsB,CAAC,EAAE,OAAO,CAAC;IACjC,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAC3B,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B;;;;OAIG;IACH,aAAa,CAAC,EAAE,mBAAmB,CAAC;IACpC;;;;OAIG;IACH,QAAQ,CAAC,EAAE,eAAe,CAAC;IAC3B;;;;OAIG;IACH,OAAO,CAAC,EAAE,qBAAqB,CAAC;CACjC,CAAC;AAEF,MAAM,MAAM,qBAAqB,GAAG;IAClC,8FAA8F;IAC9F,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,kGAAkG;IAClG,OAAO,CAAC,EAAE,SAAS,aAAa,EAAE,CAAC;CACpC,CAAC;AAEF;;;;;;GAMG;AACH,MAAM,MAAM,aAAa,GAAG;IAC1B,uDAAuD;IACvD,MAAM,EAAE,MAAM,CAAC;IACf,mFAAmF;IACnF,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB,CAAC;AAEF;;;;;;;;;;;;;;;GAeG;AACH,eAAO,MAAM,oBAAoB,GAAI,MAAM,MAAM,KAAG,aAAa,GAAG,IAanE,CAAC;AAEF,0FAA0F;AAC1F,MAAM,MAAM,gBAAgB,GAAG;IAC7B,YAAY,EAAE,MAAM,CAAC;IACrB,MAAM,EAAE,MAAM,CAAC;IACf,oFAAoF;IACpF,UAAU,EAAE,MAAM,CAAC;IACnB,sEAAsE;IACtE,QAAQ,CAAC,EAAE,qCAAqC,CAAC;IACjD,+EAA+E;IAC/E,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB,CAAC;AAEF;;;;;GAKG;AACH,MAAM,MAAM,mBAAmB,GAAG;IAChC,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,gBAAgB,CAAC;CAC7B,CAAC;AAEF,MAAM,MAAM,6BAA6B,GAAG,MAAM,GAAG;IACnD,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,cAAc,CAAC,EAAE,WAAW,GAAG,QAAQ,GAAG,QAAQ,CAAC;IACnD,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB,CAAC;AAEF,MAAM,MAAM,0BAA0B,GAAG,MAAM,GAAG;IAChD,YAAY,EAAE,MAAM,CAAC;CACtB,CAAC;AAEF,MAAM,MAAM,uBAAuB,GAAG;IACpC,MAAM,EAAE,IAAI,CAAC;CACd,CAAC;AAEF,MAAM,MAAM,sBAAsB,GAAG;IACnC,MAAM,EAAE,IAAI,CAAC;CACd,CAAC;AAEF,MAAM,WAAW,iCAAiC;IAChD,KAAK,EAAE,OAAO,CAAC;IACf,IAAI,CAAC,EAAE;QACL,EAAE,EAAE,MAAM,CAAC;QACX,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;KACxB,CAAC;IACF,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,MAAM,qBAAqB,GAAG;IAClC,KAAK,EAAE;QACL,EAAE,EAAE,MAAM,CAAC;QACX,OAAO,EAAE,MAAM,CAAC;QAChB,MAAM,EAAE,MAAM,CAAC;QACf,QAAQ,EAAE,MAAM,CAAC;QACjB,IAAI,EAAE,MAAM,CAAC;KACd,CAAC;CACH,CAAC;AAEF,qBAAa,aAAc,SAAQ,KAAK;IACtC,EAAE,EAAE,MAAM,CAAC;IACX,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;gBAED,KAAK,EAAE,qBAAqB,CAAC,OAAO,CAAC;CAQlD;AAED,MAAM,MAAM,qBAAqB,GAAG;IAClC,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;IAClB,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB,GAAG,CACA;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,KAAK,CAAC;IAAC,QAAQ,CAAC,EAAE,KAAK,CAAA;CAAE,GAClD;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,KAAK,CAAC;IAAC,QAAQ,CAAC,EAAE,KAAK,CAAA;CAAE,GAClD;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,KAAK,CAAC;IAAC,KAAK,CAAC,EAAE,KAAK,CAAA;CAAE,CACrD,CAAC;AAEF,MAAM,MAAM,6BAA6B,GAAG,qBAAqB,GAAG;IAClE,MAAM,EAAE,MAAM,CAAC;IACf,EAAE,EAAE,EAAE,CAAC;CACR,CAAC;AAEF,MAAM,MAAM,sBAAsB,GAAG;IACnC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB,CAAC;AAEF,MAAM,MAAM,mBAAmB,GAAG;IAChC,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,IAAI,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,sBAAsB,CAAC;CACpC,GAAG,CAAC;IAAE,KAAK,EAAE,MAAM,CAAA;CAAE,GAAG;IAAE,YAAY,EAAE,MAAM,CAAA;CAAE,CAAC,CAAC;AAEnD,MAAM,MAAM,qBAAqB,GAAG;IAClC,IAAI,EAAE,mBAAmB,CAAC;IAC1B,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;IAClB,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB,CAAC;AAEF,MAAM,MAAM,iCAAiC,GAAG;IAC9C,cAAc,EAAE,yBAAyB,CAAC;IAC1C,YAAY,EAAE,MAAM,CAAC;IACrB,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;IAClB,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB,GAAG,CAAC;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,KAAK,CAAA;CAAE,GAAG;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,KAAK,CAAA;CAAE,CAAC,CAAC;AAE1E,MAAM,MAAM,4BAA4B,GAAG;IACzC,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,IAAI,GAAG,MAAM,CAAC;CAC3B,CAAC;AAEF,MAAM,MAAM,yCAAyC,GAAG,iCAAiC,GAAG;IAC1F,MAAM,EAAE,MAAM,CAAC;IACf,EAAE,EAAE,EAAE,CAAC;CACR,CAAC;AAEF,MAAM,MAAM,yCAAyC,GAAG;IACtD,YAAY,EAAE,MAAM,CAAC;IACrB,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;IAClB,cAAc,CAAC,EAAE,yBAAyB,CAAC;CAC5C,CAAC;AAEF,oBAAY,SAAS;IACnB,MAAM,WAAW;IACjB,QAAQ,aAAa;CACtB;AAED,MAAM,MAAM,WAAW,GAAG;IACxB,QAAQ,EAAE,SAAS,CAAC;CACrB,CAAC;AAEF,MAAM,MAAM,wBAAwB,GAAG,IAAI,GAAG,OAAO,GAAG,OAAO,GAAG,UAAU,GAAG,WAAW,GAAG,MAAM,CAAC;AACpG,MAAM,MAAM,yBAAyB,GAAG,UAAU,GAAG,KAAK,GAAG,YAAY,GAAG,gBAAgB,GAAG,UAAU,GAAG,MAAM,CAAC;AACnH,MAAM,MAAM,yBAAyB,GAAG,OAAO,GAAG,KAAK,GAAG,MAAM,GAAG,QAAQ,GAAG,eAAe,GAAG,MAAM,CAAC;AAEvG,MAAM,MAAM,gBAAgB,GAAG;IAC7B,QAAQ,EAAE,wBAAwB,CAAC;IACnC,SAAS,EAAE,yBAAyB,CAAC;IACrC,SAAS,EAAE,yBAAyB,CAAC;CACtC,CAAC;AAEF,MAAM,MAAM,aAAa,GAAG,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;AAElD,MAAM,MAAM,gBAAgB,GAAG,UAAU,GAAG,SAAS,GAAG,UAAU,GAAG,KAAK,GAAG,MAAM,GAAG,WAAW,CAAC;AAElG,MAAM,MAAM,cAAc,GACtB;IAAE,IAAI,EAAE,OAAO,CAAC,gBAAgB,EAAE,UAAU,CAAC,CAAC;IAAC,QAAQ,EAAE,gBAAgB,CAAA;CAAE,GAC3E;IAAE,IAAI,EAAE,OAAO,CAAC,gBAAgB,EAAE,KAAK,CAAC,CAAC;IAAC,QAAQ,EAAE,WAAW,CAAA;CAAE,GACjE;IACE,IAAI,EAAE,OAAO,CAAC,gBAAgB,EAAE,UAAU,GAAG,KAAK,CAAC,CAAC;IACpD,QAAQ,EAAE,aAAa,CAAC;CACzB,CAAC;AAEN,MAAM,MAAM,OAAO,GAAG,KAAK,GAAG,KAAK,GAAG,KAAK,GAAG,SAAS,GAAG,KAAK,GAAG,SAAS,GAAG,KAAK,GAAG,OAAO,CAAC;AAE9F,MAAM,MAAM,mBAAmB,GAAG,WAAW,GAAG,QAAQ,GAAG,EAAE,CAAC;AAE9D,MAAM,MAAM,WAAW,GAAG;IACxB,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,OAAO,CAAC;IAChB,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE,OAAO,CAAC;IACjB,IAAI,EAAE,OAAO,CAAC;IACd,aAAa,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC;IAC/B,OAAO,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC;IACzB,sBAAsB,EAAE,OAAO,CAAC;IAChC,eAAe,EAAE,cAAc,EAAE,CAAC;IAClC,wBAAwB,EAAE,OAAO,CAAC;IAClC,YAAY,EAAE,OAAO,CAAC;IACtB,mBAAmB,EAAE,OAAO,CAAC;IAC7B,oBAAoB,EAAE,OAAO,CAAC;IAC9B,wBAAwB,EAAE,OAAO,CAAC;IAClC,iCAAiC,EAAE,OAAO,CAAC;IAC3C,8BAA8B,EAAE,OAAO,CAAC;IACxC,6BAA6B,EAAE,OAAO,GAAG,QAAQ,GAAG,UAAU,CAAC;IAC/D,0BAA0B,EAAE,OAAO,CAAC;IACpC,sBAAsB,EAAE,OAAO,CAAC;IAChC,+BAA+B,EAAE,MAAM,CAAC;IACxC,QAAQ,EAAE,kBAAkB,CAAC;IAC7B,eAAe,EAAE,gBAAgB,CAAC;IAClC,kBAAkB,CAAC,EAAE,OAAO,CAAC;IAC7B,qBAAqB,CAAC,EAAE,mBAAmB,CAAC;CAC7C,CAAC;AAEF,MAAM,MAAM,kBAAkB,GAAG;IAC/B,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,0BAA0B,EAAE,OAAO,CAAC;CACrC,CAAC;AAEF,oBAAY,EAAE;IACZ,GAAG,QAAQ;IACX,GAAG,QAAQ;IACX,OAAO,YAAY;CACpB;AAED;;;;GAIG;AACH,wBAAgB,mBAAmB,CAAC,UAAU,EAAE,KAAK,GAAG,KAAK,GAAG,SAAS,GAAG,EAAE,CAG7E;AAED,MAAM,MAAM,mCAAmC,GAAG;IAChD,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,YAAY,CAAC,EAAE,MAAM,CAAC;IAEtB,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,aAAa,CAAC,EAAE,OAAO,CAAC;IAExB,gBAAgB,EAAE,MAAM,CAAC;IACzB,YAAY,EAAE,MAAM,CAAC;CACtB,CAAC;AAEF,MAAM,MAAM,2CAA2C,GAAG,mCAAmC,GAAG;IAC9F,MAAM,EAAE,MAAM,CAAC;IACf,EAAE,EAAE,EAAE,CAAC;CACR,CAAC;AAEF,MAAM,MAAM,oBAAoB,GAAG;IACjC,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,sCAAsC,CAAC;CACnD,CAAC;AAEF,MAAM,MAAM,wCAAwC,GAAG,MAAM,CAAC;AAE9D,MAAM,MAAM,sBAAsB,GAAG;IACnC,MAAM,EAAE,MAAM,CAAC;IACf,YAAY,EAAE,MAAM,CAAC;CACtB,CAAC;AAEF,MAAM,MAAM,8BAA8B,GAAG,sBAAsB,GAAG;IACpE,YAAY,EAAE,wBAAwB,CAAC;CACxC,CAAC;AAEF,MAAM,MAAM,kCAAkC,GAAG,sBAAsB,GAAG;IACxE,YAAY,EAAE,0BAA0B,CAAC;CAC1C,CAAC;AAEF,MAAM,MAAM,uCAAuC,GAAG;IACpD,gBAAgB,EAAE,MAAM,CAAC;IACzB,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;IAClB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB,CAAC;AAEF,MAAM,MAAM,+CAA+C,GAAG,uCAAuC,GAAG;IACtG,MAAM,EAAE,MAAM,CAAC;IACf,EAAE,EAAE,EAAE,CAAC;CACR,CAAC;AAEF,MAAM,MAAM,4BAA4B,GAAG;IACzC,QAAQ,EAAE,SAAS,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;IACrB,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;IAClB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,aAAa,CAAC,EAAE,OAAO,CAAC;CACzB,CAAC;AAEF,MAAM,MAAM,oCAAoC,GAAG,4BAA4B,GAAG;IAChF,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB,CAAC;AAEF,MAAM,MAAM,uBAAuB,GAAG;IACpC,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,MAAM,CAAC;IACf,YAAY,EAAE,MAAM,CAAC;CACtB,CAAC;AAGF,MAAM,MAAM,6BAA6B,GAAG,MAAM,GAAG,UAAU,GAAG,WAAW,GAAG,aAAa,CAAC;AAE9F,MAAM,MAAM,mBAAmB,GAAG;IAChC,eAAe,EAAE,8BAA8B,CAAC;IAChD,gBAAgB,EAAE,uBAAuB,CAAC;CAC3C,CAAC;AAEF,MAAM,MAAM,8BAA8B,GAAG;IAC3C,4BAA4B,EAAE,OAAO,CAAC;IACtC,mBAAmB,EAAE,MAAM,CAAC;IAC5B,kBAAkB,EAAE,OAAO,CAAC;IAC5B,yBAAyB,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,GAAG,QAAQ,CAAC;IAClE,iBAAiB,EAAE,OAAO,CAAC;IAC3B,iBAAiB,EAAE,OAAO,CAAC;IAC3B,cAAc,EAAE,OAAO,CAAC;IACxB,cAAc,EAAE,OAAO,CAAC;CACzB,CAAC;AAEF,MAAM,MAAM,uBAAuB,GAAG;IAEpC,EAAE,EAAE,MAAM,CAAC;IACX,YAAY,EAAE,MAAM,CAAC;IAGrB,YAAY,CAAC,EAAE;QACb,iBAAiB,EAAE,6BAA6B,CAAC;QACjD,wBAAwB,EAAE,UAAU,GAAG,gBAAgB,GAAG,KAAK,CAAC;QAChE,gBAAgB,EAAE,6BAA6B,CAAC;QAChD,oBAAoB,EAAE,6BAA6B,CAAC;QACpD,UAAU,EAAE,OAAO,CAAC;KACrB,CAAC;IACF,cAAc,CAAC,EAAE;QACf,iBAAiB,EAAE,6BAA6B,CAAC;QACjD,oBAAoB,EAAE,6BAA6B,CAAC;QACpD,UAAU,EAAE,OAAO,CAAC;KACrB,CAAC;CACH,CAAC;AAEF,KAAK,uBAAuB,GAAG;IAC7B,YAAY,EAAE,OAAO,CAAC;IACtB,aAAa,EAAE,OAAO,CAAC;IACvB,eAAe,EAAE,OAAO,CAAC;IACzB,YAAY,EAAE,OAAO,CAAC;CACvB,CAAC;AAEF,KAAK,8BAA8B,GAAG;IACpC,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;IACnB,aAAa,EAAE,OAAO,CAAC;IACvB,UAAU,EAAE,UAAU,GAAG,gBAAgB,CAAC;CAC3C,CAAC;AAEF,MAAM,MAAM,mBAAmB,GAAG;IAChC,EAAE,EAAE,MAAM,CAAC;IACX,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,gBAAgB,CAAC;IAC3B,cAAc,EAAE,yBAAyB,CAAC;IAC1C,aAAa,EAAE,MAAM,CAAC;IACtB,WAAW,EAAE,IAAI,GAAG,MAAM,CAAC;IAC3B,uBAAuB,EAAE,MAAM,CAAC;IAChC,YAAY,EAAE,IAAI,GAAG,MAAM,CAAC;IAC5B,YAAY,EAAE,IAAI,GAAG,MAAM,CAAC;IAC5B,UAAU,EAAE,MAAM,CAAC;IACnB,gBAAgB,EAAE,MAAM,CAAC;IACzB,SAAS,EAAE,MAAM,EAAE,CAAC;IACpB,KAAK,EAAE,uBAAuB,CAAC;IAC/B,aAAa,EAAE,8BAA8B,CAAC;IAC9C,QAAQ,EAAE,OAAO,CAAC;IAClB,WAAW,EAAE,IAAI,GAAG,MAAM,CAAC;IAC3B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,oBAAoB,CAAC,EAAE,MAAM,CAAC;CAC/B,CAAC;AAEF,MAAM,MAAM,qCAAqC,GAAG;IAClD,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB,GAAG,CACA;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,KAAK,CAAC;IAAC,QAAQ,CAAC,EAAE,KAAK,CAAA;CAAE,GAClD;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,KAAK,CAAC;IAAC,QAAQ,CAAC,EAAE,KAAK,CAAA;CAAE,GAClD;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,KAAK,CAAC;IAAC,KAAK,CAAC,EAAE,KAAK,CAAA;CAAE,CACrD,CAAC;AAEF,MAAM,MAAM,sBAAsB,GAAG;IACnC,IAAI,EAAE,MAAM,CAAC;CACd,CAAC;AAEF,MAAM,MAAM,qBAAqB,GAAG;IAClC,YAAY,EAAE,MAAM,CAAC;IACrB,MAAM,EAAE,MAAM,EAAE,CAAC;CAClB,CAAC;AAEF,MAAM,MAAM,qBAAqB,GAAG;IAClC,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;IACd,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE;QACL,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAAC;KAC3B,CAAC;CACH,CAAC;AAEF,MAAM,MAAM,aAAa,GAAG;IAC1B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,OAAO,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;CACpB,CAAC;AAEF,MAAM,MAAM,YAAY,GAAG;IACzB,EAAE,EAAE,MAAM,CAAC;IACX,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,MAAM,CAAC;CACd,CAAC;AAEF,MAAM,MAAM,sBAAsB,GAAG;IACnC,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,eAAe,CAAC,EAAE,mBAAmB,EAAE,CAAC;IACxC,MAAM,CAAC,EAAE,aAAa,EAAE,CAAC;IACzB,KAAK,CAAC,EAAE,YAAY,EAAE,CAAC;CACxB,CAAC;AAEF;;GAEG;AACH,MAAM,MAAM,mBAAmB,GAAG;IAChC,IAAI,EAAE;QACJ,EAAE,EAAE,MAAM,CAAC;QACX,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QACrB,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QACtB,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;KACvB,CAAC;IACF,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,CAAC,EAAE;QACN,EAAE,EAAE,MAAM,CAAC;KACZ,EAAE,CAAC;CACL,CAAC;AAEF,MAAM,MAAM,2BAA2B,GAAG;IACxC,IAAI,EAAE,MAAM,CAAC;CACd,CAAC;AAEF,MAAM,MAAM,uBAAuB,GAAG,SAAS,GAAG,QAAQ,GAAG,YAAY,CAAC;AAE1E,MAAM,MAAM,8BAA8B,GAAG,QAAQ,GAAG,OAAO,GAAG,MAAM,CAAC;AAEzE,MAAM,MAAM,gBAAgB,GAAG;IAC7B,aAAa,EAAE,MAAM,CAAC;IACtB,UAAU,EAAE,MAAM,CAAC;IACnB,oBAAoB,EAAE,MAAM,CAAC;IAC7B,gBAAgB,EAAE,MAAM,CAAC;IACzB,UAAU,EAAE,MAAM,CAAC;IACnB,sBAAsB,EAAE,MAAM,CAAC;IAC/B,kBAAkB,EAAE,MAAM,CAAC;IAC3B,iBAAiB,EAAE,MAAM,CAAC;IAC1B,aAAa,EAAE,MAAM,CAAC;IACtB,iCAAiC,EAAE,MAAM,CAAC;IAC1C,2BAA2B,EAAE,MAAM,CAAC;IACpC,QAAQ,EAAE,MAAM,CAAC;IACjB,+BAA+B,EAAE,MAAM,CAAC;IACxC,yBAAyB,EAAE,MAAM,CAAC;IAClC,gBAAgB,EAAE,MAAM,CAAC;IACzB,UAAU,EAAE,MAAM,CAAC;CACpB,CAAC;AAEF,MAAM,MAAM,gBAAgB,GAAG;IAC7B,aAAa,EAAE,uBAAuB,CAAC;IACvC,gBAAgB,EAAE,MAAM,CAAC;IACzB,oBAAoB,EAAE,OAAO,CAAC;IAC9B,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,8BAA8B,CAAC;IAC7C,WAAW,EAAE,gBAAgB,CAAC;IAC9B,UAAU,EAAE,gBAAgB,CAAC;CAC9B,CAAC;AAEF,MAAM,MAAM,2BAA2B,GAAG,sBAAsB,CAAC;AAGjE,wBAAgB,cAAc,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,MAAM,CAMvF;AASD;;GAEG;AACH,oBAAY,eAAe;IACzB,QAAQ,aAAa;IACrB,QAAQ,aAAa;IACrB,QAAQ,aAAa;CACtB;AAED;;GAEG;AACH,MAAM,MAAM,kBAAkB,GAC1B,cAAc,GACd,cAAc,GACd,mBAAmB,GACnB,mBAAmB,GACnB,iBAAiB,GACjB,aAAa,GACb,uBAAuB,GACvB,6BAA6B,GAC7B,mBAAmB,GACnB,qBAAqB,CAAC;AAG1B,MAAM,MAAM,uBAAuB,GAAG;IACpC,IAAI,EAAE,MAAM,CAAC;CACd,CAAC;AAEF,MAAM,MAAM,sBAAsB,GAAG;IACnC,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,CAAC;CACnB,CAAC;AAEF,MAAM,MAAM,wBAAwB,GAAG;IACrC,aAAa,EAAE,MAAM,CAAC;IACtB,SAAS,EAAE,MAAM,CAAC;CACnB,CAAC;AAEF,MAAM,MAAM,uBAAuB,GAAG;IACpC,IAAI,EAAE,MAAM,CAAC;CACd,CAAC;AAEF,MAAM,MAAM,0BAA0B,GAAG;IACvC,IAAI,EAAE,MAAM,CAAC;CACd,CAAC;AAGF,MAAM,MAAM,uBAAuB,GAAG;IACpC,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,EAAE,eAAe,CAAC;IACxB,wBAAwB,EAAE,MAAM,CAAC;IACjC,WAAW,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC;CACrB,CAAC;AAEF,MAAM,MAAM,sBAAsB,GAAG;IACnC,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC;CACrB,CAAC;AAEF,MAAM,MAAM,wBAAwB,GAAG;IACrC,OAAO,EAAE,IAAI,CAAC;IACd,cAAc,EAAE,MAAM,EAAE,CAAC;CAC1B,CAAC;AAEF,MAAM,MAAM,uBAAuB,GAAG,MAAM,GAAG;IAC7C,OAAO,EAAE,IAAI,CAAC;CACf,CAAC;AAEF,MAAM,MAAM,yBAAyB,GAAG,MAAM,GAAG;IAC/C,OAAO,EAAE,IAAI,CAAC;IACd,wBAAwB,EAAE,MAAM,CAAC;CAClC,CAAC;AAEF,MAAM,MAAM,wBAAwB,GAAG;IACrC,OAAO,EAAE,IAAI,CAAC;CACf,CAAC;AAEF,MAAM,MAAM,2BAA2B,GAAG;IACxC,OAAO,EAAE,IAAI,CAAC;IACd,cAAc,EAAE,MAAM,EAAE,CAAC;CAC1B,CAAC;AAMF;;GAEG;AACH,MAAM,MAAM,gCAAgC,GACxC,eAAe,GACf,eAAe,GACf,eAAe,GACf,cAAc,GACd,cAAc,CAAC;AAEnB;;GAEG;AACH,MAAM,MAAM,4BAA4B,GAAG;IACzC,IAAI,EAAE,gCAAgC,CAAC;IACvC,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB,CAAC;AAEF;;;GAGG;AACH,MAAM,MAAM,yCAAyC,GAAG;IACtD,OAAO,EAAE,OAAO,CAAC;IACjB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,KAAK,CAAC,EAAE,4BAA4B,CAAC;CACtC,CAAC;AAEF;;;GAGG;AACH,MAAM,MAAM,8BAA8B,GAAG;IAC3C,YAAY,EAAE,MAAM,CAAC;IACrB,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,KAAK,EAAE,WAAW,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;CACnB,CAAC;AAMF;;GAEG;AACH,MAAM,MAAM,eAAe,GAAG,MAAM,GAAG,WAAW,GAAG,SAAS,GAAG,SAAS,GAAG,UAAU,GAAG,cAAc,GAAG,gBAAgB,CAAC;AAE5H;;GAEG;AACH,MAAM,WAAW,yBAAyB;IACxC,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,YAAY,CAAC,EAAE,OAAO,CAAC;CACxB;AAED;;GAEG;AACH,MAAM,WAAW,0BAA0B;IACzC,YAAY,EAAE,MAAM,CAAC;IACrB,MAAM,EAAE,eAAe,CAAC;IACxB,mBAAmB,EAAE,eAAe,EAAE,CAAC;IACvC,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,gBAAgB,CAAC,EAAE,OAAO,CAAC;CAC5B;AAED;;GAEG;AACH,MAAM,WAAW,wBAAwB;IACvC,YAAY,EAAE,MAAM,CAAC;IACrB,MAAM,EAAE,eAAe,CAAC;IACxB,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,CAAC,EAAE,OAAO,CAAC;CACxB;AAED;;GAEG;AACH,MAAM,WAAW,yBAAyB;IACxC,OAAO,EAAE,OAAO,CAAC;IACjB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,cAAc,CAAC,EAAE,OAAO,CAAC;CAC1B;AAED;;GAEG;AACH,MAAM,WAAW,yBAAyB;IACxC,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,eAAe,CAAC;IACxB,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED;;GAEG;AACH,MAAM,WAAW,2BAA2B;IAC1C,YAAY,EAAE,MAAM,CAAC;IACrB,MAAM,EAAE,eAAe,CAAC;CACzB;AAMD,MAAM,WAAW,qBAAqB;IACpC,MAAM,EAAE,SAAS,GAAG,WAAW,GAAG,SAAS,GAAG,QAAQ,CAAC;IACvD,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,SAAS,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACpC,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,sBAAsB;IACrC,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,EAAE,MAAM,CAAC;IACrB,aAAa,EAAE,MAAM,CAAC;IACtB,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;CACpB"}

package/dist/lib/api/upgrade.d.ts

@@ -0,0 +1,39 @@
+/**
+ * The assurance-upgrade API — the prepare round of a step-up.
+ *
+ * One endpoint, deliberately. The commit round is `POST /auth/refresh`, which
+ * belongs to `AuthAPI` because that is the only path that stores the rotated
+ * tokens; splitting it off here would elevate the session on the server and
+ * leave the client holding stale ones.
+ *
+ * Constructed exactly like `AuthAPI`, sharing `StorageManager` and
+ * `DeviceService`, which is what makes cookie mode, CSRF and the device headers
+ * work without duplicating any of it.
+ */
+import type { DeviceService } from '../device';
+import type { StorageManager } from '../storage';
+import { AxiosClient } from './axios-client';
+import { type PassflowConfig, type UpgradeStartWire } from './model';
+/** The `POST /auth/upgrade/start` request body. `relying_party_id` is passkey-only. */
+export type UpgradeStartPayload = {
+    method: string;
+    relying_party_id?: string;
+};
+export declare class UpgradeAPI {
+    protected axiosClient: AxiosClient;
+    constructor(config: PassflowConfig, storageManager?: StorageManager, deviceService?: DeviceService);
+    setAppId(appId: string): void;
+    /**
+     * Issues a single-use, session-bound upgrade challenge.
+     *
+     * Returns the raw snake_case body: normalisation is the transport's job, and
+     * keeping it out of here means the wire shape has exactly one definition.
+     *
+     * The request carries the upgrade-transaction marker, so a 401 from this round
+     * — a stale access token, a foreign session — is recognised as part of an
+     * elevation by the response interceptor and does not invalidate the session
+     * behind the user's back.
+     */
+    startUpgrade(payload: UpgradeStartPayload): Promise<UpgradeStartWire>;
+}
+//# sourceMappingURL=upgrade.d.ts.map

package/dist/lib/api/upgrade.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"upgrade.d.ts","sourceRoot":"","sources":["../../../lib/api/upgrade.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAIH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,WAAW,CAAC;AAC/C,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAGjD,OAAO,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAC7C,OAAO,EAAE,KAAK,cAAc,EAAyB,KAAK,gBAAgB,EAAE,MAAM,SAAS,CAAC;AAE5F,uFAAuF;AACvF,MAAM,MAAM,mBAAmB,GAAG;IAChC,MAAM,EAAE,MAAM,CAAC;IACf,gBAAgB,CAAC,EAAE,MAAM,CAAC;CAC3B,CAAC;AAEF,qBAAa,UAAU;IACrB,SAAS,CAAC,WAAW,EAAE,WAAW,CAAC;gBAEvB,MAAM,EAAE,cAAc,EAAE,cAAc,CAAC,EAAE,cAAc,EAAE,aAAa,CAAC,EAAE,aAAa;IAIlG,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI;IAI7B;;;;;;;;;;OAUG;IACH,YAAY,CAAC,OAAO,EAAE,mBAAmB,GAAG,OAAO,CAAC,gBAAgB,CAAC;CAOtE"}

package/dist/lib/index.d.ts

@@ -13,8 +13,10 @@ export { CLIAuthAPI } from './api/cli-auth';
 export type { CLIAuthStatusResponse, CLIAuthCompleteRequest } from './api/model';
 export { M2MClient, M2MError, M2MNetworkError, M2MTokenParseError, M2MConfigError, M2MErrorCodes, M2M_DEFAULTS } from './m2m';
 export type { M2MClientConfig, M2MTokenRequestOptions, M2MTokenRequestInfo, M2MTokenResponse, M2MErrorResponse, M2MTokenClaims, M2MErrorCode, M2MTokenCache, RetryStrategy, M2MRateLimitInfo, } from './m2m';
-export { INSUFFICIENT_USER_AUTHENTICATION, UPGRADE_REQUIRED, parseChallengeBody, parseChallengeHeader, parseUpgradeChallenge, DEFAULT_UPGRADE_FACTORS, factorRegistry, passkeyFactor, recoveryCodesFactor, UpgradeFactorError, totpFactor, UpgradeCancelledError, UpgradeController, UpgradeUnsatisfiableError, selectFactors, } from './upgrade';
-export type { UpgradeChallenge, UpgradeAssertion, UpgradeAssertContext, UpgradeFactor, UpgradeFactorInput, UpgradeFactorType, UpgradePrepared, UpgradeControllerOptions, UpgradePromptHandler, UpgradePromptRequest, UpgradePromptResult, UpgradeTransport, } from './upgrade';
+export { INSUFFICIENT_USER_AUTHENTICATION, UPGRADE_REQUIRED, parseChallengeBody, parseChallengeHeader, parseUpgradeChallenge, DEFAULT_UPGRADE_FACTORS, factorRegistry, passkeyFactor, recoveryCodesFactor, UpgradeFactorError, totpFactor, UpgradeCancelledError, UpgradeController, UpgradeUnsatisfiableError, selectFactors, classifyUpgradeError, invalidatesSessionOnCommit, isRecoverableCommitFailure, isRetryableUpgradeKind, isUpgradeTransportError, RECOVERABLE_COMMIT_ERROR_IDS, SESSION_INVALIDATING_COMMIT_ERROR_IDS, UpgradeErrorIds, UpgradeTransportError, attachUpgradeAuth, barOf, coreOutcomeToError, handleChallenge, isUpgradeCancelled, isUpgradeExhausted, isUpgradeInsufficient, isUpgradeSessionChanged, isUpgradeTransportFailure, isUpgradeUnavailable, isUpgradeUnsatisfiable, mergeChallenges, parseAcrToken, parseMaxAge, planReplay, readAcrValues, readUpgradeChallenge, requiredAcrLevel, createUpgradeClient, createUpgradeFacade, settleAxiosOutcome, settleFetchOutcome, tagUpgradeOutcome, upgradeFetch, UpgradeInsufficientError, UpgradeSessionChangedError, UpgradeUnavailableError, } from './upgrade';
+export type { CreateClientConfig, FetchLike, ResponseInterceptorHost, Settlement, UpgradeEnableOptions, UpgradeEndpoint, UpgradeErrorKind, UpgradeFacade, UpgradeFacadeDeps, UpgradeOptions, UpgradeResult, UpgradeSessionPin, UpgradeTransportErrorInit, RequestSnapshot, SnapshotHeader, UpgradeChallenge, UpgradeAssertion, UpgradeAssertContext, UpgradeFactor, UpgradeFactorInput, UpgradeFactorType, UpgradePrepared, UpgradeControllerOptions, UpgradePromptHandler, UpgradePromptRequest, UpgradePromptResult, UpgradeTransport, AssuranceBar, BodyKind, ChallengeChannel, ChallengeContext, ChallengeInput, ChallengeReadOptions, ChallengeReading, CoreOutcome, InterceptionScope, MaxAgeReading, ReplayHints, ReplayPlan, ReplayPolicy, UpgradeDiagnostic, UpgradeDiagnosticReason, UpgradeDiagnosticSink, UpgradeElevation, UpgradeFlightState, UpgradeFlightSummary, UpgradeInterceptorOptions, UpgradeProof, UpgradeReplayInfo, UpgradeWaiterSummary, Waiter, WaiterEntry, WaiterOutcome, WaiterReport, } from './upgrade';
+export { FETCH_PRIORITY_OIDC, FETCH_PRIORITY_UPGRADE, FetchMiddlewareContractError, fetchRegistryState, registerFetchMiddleware, } from './interceptors/fetch-registry';
+export type { FetchMiddleware, RegisterOptions } from './interceptors/fetch-registry';
 export { TokenDeliveryMode, SessionState } from './types';
 export type { AuthCallbackResult, CurrentUrlInfo, OpenAuthUrlOptions, PasskeySupport, PlatformAdapter, PlatformStorage, } from './platform';
 export { PopupClosedError, WebAdapter, webAdapter } from './platform';

package/dist/lib/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../lib/index.ts"],"names":[],"mappings":"AACA,cAAc,OAAO,CAAC;AAGtB,cAAc,aAAa,CAAC;AAE5B,OAAO,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AAEtC,cAAc,YAAY,CAAC;AAE3B,OAAO,EAAE,KAAK,YAAY,EAAE,aAAa,EAAE,KAAK,oBAAoB,EAAE,KAAK,kBAAkB,EAAE,MAAM,SAAS,CAAC;AAE/G,OAAO,EACL,KAAK,KAAK,EACV,KAAK,eAAe,EACpB,KAAK,eAAe,EACpB,cAAc,EACd,UAAU,EACV,KAAK,iBAAiB,EACtB,KAAK,MAAM,EACX,KAAK,gBAAgB,EACrB,KAAK,KAAK,EACV,SAAS,EACT,KAAK,cAAc,GACpB,MAAM,SAAS,CAAC;AAEjB,cAAc,SAAS,CAAC;AAExB,OAAO,EAAE,YAAY,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,eAAe,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAC;AAG/H,YAAY,EACV,uBAAuB,EACvB,wBAAwB,EACxB,uBAAuB,EACvB,wBAAwB,EACxB,kBAAkB,EAClB,eAAe,EACf,wBAAwB,EACxB,yBAAyB,EACzB,0BAA0B,EAC1B,2BAA2B,EAC3B,4BAA4B,EAC5B,gCAAgC,EAChC,8BAA8B,EAC9B,yCAAyC,EACzC,sBAAsB,EACtB,uBAAuB,EACvB,sBAAsB,EACtB,uBAAuB,GACxB,MAAM,aAAa,CAAC;AAGrB,OAAO,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AACtD,OAAO,EAAE,gBAAgB,EAAE,MAAM,+BAA+B,CAAC;AAGjE,OAAO,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AAC5C,YAAY,EAAE,qBAAqB,EAAE,sBAAsB,EAAE,MAAM,aAAa,CAAC;AAGjF,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,eAAe,EAAE,kBAAkB,EAAE,cAAc,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM,OAAO,CAAC;AAC9H,YAAY,EACV,eAAe,EACf,sBAAsB,EACtB,mBAAmB,EACnB,gBAAgB,EAChB,gBAAgB,EAChB,cAAc,EACd,YAAY,EACZ,aAAa,EACb,aAAa,EACb,gBAAgB,GACjB,MAAM,OAAO,CAAC;AAGf,OAAO,EACL,gCAAgC,EAChC,gBAAgB,EAChB,kBAAkB,EAClB,oBAAoB,EACpB,qBAAqB,EACrB,uBAAuB,EACvB,cAAc,EACd,aAAa,EACb,mBAAmB,EACnB,kBAAkB,EAClB,UAAU,EACV,qBAAqB,EACrB,iBAAiB,EACjB,yBAAyB,EACzB,aAAa,GACd,MAAM,WAAW,CAAC;AACnB,YAAY,EACV,gBAAgB,EAChB,gBAAgB,EAChB,oBAAoB,EACpB,aAAa,EACb,kBAAkB,EAClB,iBAAiB,EACjB,eAAe,EACf,wBAAwB,EACxB,oBAAoB,EACpB,oBAAoB,EACpB,mBAAmB,EACnB,gBAAgB,GACjB,MAAM,WAAW,CAAC;AAGnB,OAAO,EAAE,iBAAiB,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAG1D,YAAY,EACV,kBAAkB,EAClB,cAAc,EACd,kBAAkB,EAClB,cAAc,EACd,eAAe,EACf,eAAe,GAChB,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,gBAAgB,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../lib/index.ts"],"names":[],"mappings":"AACA,cAAc,OAAO,CAAC;AAGtB,cAAc,aAAa,CAAC;AAE5B,OAAO,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AAEtC,cAAc,YAAY,CAAC;AAE3B,OAAO,EAAE,KAAK,YAAY,EAAE,aAAa,EAAE,KAAK,oBAAoB,EAAE,KAAK,kBAAkB,EAAE,MAAM,SAAS,CAAC;AAE/G,OAAO,EACL,KAAK,KAAK,EACV,KAAK,eAAe,EACpB,KAAK,eAAe,EACpB,cAAc,EACd,UAAU,EACV,KAAK,iBAAiB,EACtB,KAAK,MAAM,EACX,KAAK,gBAAgB,EACrB,KAAK,KAAK,EACV,SAAS,EACT,KAAK,cAAc,GACpB,MAAM,SAAS,CAAC;AAEjB,cAAc,SAAS,CAAC;AAExB,OAAO,EAAE,YAAY,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,eAAe,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAC;AAG/H,YAAY,EACV,uBAAuB,EACvB,wBAAwB,EACxB,uBAAuB,EACvB,wBAAwB,EACxB,kBAAkB,EAClB,eAAe,EACf,wBAAwB,EACxB,yBAAyB,EACzB,0BAA0B,EAC1B,2BAA2B,EAC3B,4BAA4B,EAC5B,gCAAgC,EAChC,8BAA8B,EAC9B,yCAAyC,EACzC,sBAAsB,EACtB,uBAAuB,EACvB,sBAAsB,EACtB,uBAAuB,GACxB,MAAM,aAAa,CAAC;AAGrB,OAAO,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AACtD,OAAO,EAAE,gBAAgB,EAAE,MAAM,+BAA+B,CAAC;AAGjE,OAAO,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AAC5C,YAAY,EAAE,qBAAqB,EAAE,sBAAsB,EAAE,MAAM,aAAa,CAAC;AAGjF,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,eAAe,EAAE,kBAAkB,EAAE,cAAc,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM,OAAO,CAAC;AAC9H,YAAY,EACV,eAAe,EACf,sBAAsB,EACtB,mBAAmB,EACnB,gBAAgB,EAChB,gBAAgB,EAChB,cAAc,EACd,YAAY,EACZ,aAAa,EACb,aAAa,EACb,gBAAgB,GACjB,MAAM,OAAO,CAAC;AAGf,OAAO,EACL,gCAAgC,EAChC,gBAAgB,EAChB,kBAAkB,EAClB,oBAAoB,EACpB,qBAAqB,EACrB,uBAAuB,EACvB,cAAc,EACd,aAAa,EACb,mBAAmB,EACnB,kBAAkB,EAClB,UAAU,EACV,qBAAqB,EACrB,iBAAiB,EACjB,yBAAyB,EACzB,aAAa,EAMb,oBAAoB,EACpB,0BAA0B,EAC1B,0BAA0B,EAC1B,sBAAsB,EACtB,uBAAuB,EACvB,4BAA4B,EAC5B,qCAAqC,EACrC,eAAe,EACf,qBAAqB,EAKrB,iBAAiB,EACjB,KAAK,EACL,kBAAkB,EAClB,eAAe,EACf,kBAAkB,EAClB,kBAAkB,EAClB,qBAAqB,EACrB,uBAAuB,EACvB,yBAAyB,EACzB,oBAAoB,EACpB,sBAAsB,EACtB,eAAe,EACf,aAAa,EACb,WAAW,EACX,UAAU,EACV,aAAa,EACb,oBAAoB,EACpB,gBAAgB,EAChB,mBAAmB,EACnB,mBAAmB,EACnB,kBAAkB,EAClB,kBAAkB,EAClB,iBAAiB,EACjB,YAAY,EACZ,wBAAwB,EACxB,0BAA0B,EAC1B,uBAAuB,GACxB,MAAM,WAAW,CAAC;AACnB,YAAY,EACV,kBAAkB,EAClB,SAAS,EACT,uBAAuB,EACvB,UAAU,EACV,oBAAoB,EACpB,eAAe,EACf,gBAAgB,EAChB,aAAa,EACb,iBAAiB,EACjB,cAAc,EACd,aAAa,EACb,iBAAiB,EACjB,yBAAyB,EACzB,eAAe,EACf,cAAc,EACd,gBAAgB,EAChB,gBAAgB,EAChB,oBAAoB,EACpB,aAAa,EACb,kBAAkB,EAClB,iBAAiB,EACjB,eAAe,EACf,wBAAwB,EACxB,oBAAoB,EACpB,oBAAoB,EACpB,mBAAmB,EACnB,gBAAgB,EAChB,YAAY,EACZ,QAAQ,EACR,gBAAgB,EAChB,gBAAgB,EAChB,cAAc,EACd,oBAAoB,EACpB,gBAAgB,EAChB,WAAW,EACX,iBAAiB,EACjB,aAAa,EACb,WAAW,EACX,UAAU,EACV,YAAY,EACZ,iBAAiB,EACjB,uBAAuB,EACvB,qBAAqB,EACrB,gBAAgB,EAChB,kBAAkB,EAClB,oBAAoB,EACpB,yBAAyB,EACzB,YAAY,EACZ,iBAAiB,EACjB,oBAAoB,EACpB,MAAM,EACN,WAAW,EACX,aAAa,EACb,YAAY,GACb,MAAM,WAAW,CAAC;AAOnB,OAAO,EACL,mBAAmB,EACnB,sBAAsB,EACtB,4BAA4B,EAC5B,kBAAkB,EAClB,uBAAuB,GACxB,MAAM,+BAA+B,CAAC;AACvC,YAAY,EAAE,eAAe,EAAE,eAAe,EAAE,MAAM,+BAA+B,CAAC;AAGtF,OAAO,EAAE,iBAAiB,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAG1D,YAAY,EACV,kBAAkB,EAClB,cAAc,EACd,kBAAkB,EAClB,cAAc,EACd,eAAe,EACf,eAAe,GAChB,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,gBAAgB,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC"}

package/dist/lib/interceptors/fetch-registry.d.ts

@@ -0,0 +1,96 @@
+/**
+ * One `fetch` patch point, many middlewares.
+ *
+ * This module exists because of a bug, not a requirement (architecture §4.3,
+ * reaffirmed by §13.5's "what survives supersession"). Two features that each do
+ * `globalThis.fetch = wrapper` in an effect and restore their captured original
+ * in cleanup compose as `A(B(native))`, and whichever cleanup runs first assigns
+ * a fetch that predates the other patch. React guarantees no cleanup ordering
+ * across sibling effects, nor across a parent/child boundary under Strict Mode
+ * double-invocation, so one of the two interceptors silently disappears —
+ * non-deterministically, and only in composed mounts.
+ *
+ * The fix is to make the patch a shared resource with reference-counted
+ * ownership: the registry installs exactly one wrapper on the first
+ * registration, composes the registered middlewares by priority on every call,
+ * and removes the wrapper on the last removal. **Teardown is the registry's
+ * responsibility, not any caller's** — no caller captures or restores
+ * `globalThis.fetch` itself, which is precisely the ownership mistake being
+ * retired.
+ *
+ * Composition is a Decorator chain, not a Chain of Responsibility: every
+ * middleware MUST delegate to `next`. A link that may legitimately swallow a
+ * request would mean a stranger's `fetch` call can vanish inside our wrapper, so
+ * non-delegation is detected per invocation and reported as a named error rather
+ * than left to surface as a hung promise (§9.4/R7).
+ *
+ * SSR safety is a stated non-functional requirement and is structural here:
+ * `globalThis` is read only inside `install()` and inside the state reader,
+ * never at module scope. Importing this module on a server touches no global and
+ * throws nothing; `registerFetchMiddleware` returns a no-op unregister when
+ * there is no `fetch` to patch (§9.4/R6).
+ *
+ * The module is generic. It knows nothing about upgrades, OIDC or Passflow
+ * endpoints — only about ordering, ownership and delegation.
+ */
+/** A `fetch`-shaped function: the platform `fetch`, or the next link in the chain. */
+export type FetchLike = (input: RequestInfo | URL, init?: RequestInit) => Promise<Response>;
+/**
+ * A registered interception layer.
+ *
+ * It receives the next link explicitly rather than closing over a captured
+ * global, which is what lets the chain be rebuilt per call and reordered by
+ * priority without any middleware knowing its neighbours.
+ */
+export type FetchMiddleware = (next: FetchLike, input: RequestInfo | URL, init?: RequestInit) => Promise<Response>;
+export type RegisterOptions = {
+    /** Lower runs OUTER (further from the network). Ties break by registration order. */
+    priority: number;
+    /** Diagnostic label, surfaced in the error thrown when a middleware fails to delegate. */
+    name: string;
+};
+/**
+ * Outer layer. The OIDC AuthFlow interceptor must observe the response the
+ * caller will actually receive — including a replayed one — because it follows a
+ * `redirect_url` out of that body. Placed inside the upgrade middleware it would
+ * inspect the raw 401, do nothing, and the page would then navigate on a
+ * response the caller never saw.
+ */
+export declare const FETCH_PRIORITY_OIDC = 10;
+/**
+ * Inner layer. The upgrade middleware must see the raw 401 and replace it before
+ * anything upstream forms an opinion about it.
+ */
+export declare const FETCH_PRIORITY_UPGRADE = 20;
+/** Thrown when a registered middleware resolves without ever calling `next`. */
+export declare class FetchMiddlewareContractError extends Error {
+    /** The `name` the offending middleware was registered under. */
+    readonly middlewareName: string;
+    constructor(middlewareName: string);
+}
+/**
+ * Registers a middleware, installing the one global patch on the FIRST
+ * registration, and returns an idempotent unregister that removes the patch on
+ * the LAST removal.
+ *
+ * Safe in both directions and under Strict Mode's double-invoke: ownership is by
+ * reference count over entry identity, so register/unregister/register of the
+ * same middleware, and removals in any order relative to other registrations,
+ * all converge. The returned function is bound to this one registration — a
+ * second call does nothing, and registering the same middleware twice yields two
+ * independent entries and two independent unregisters (§9.4/R8).
+ */
+export declare const registerFetchMiddleware: (middleware: FetchMiddleware, opts: RegisterOptions) => (() => void);
+/**
+ * Test and diagnostic read of the registry.
+ *
+ * `names` is in execution order, outermost first. `foreignPatch` is computed
+ * live rather than remembered, so it reports a stranger's patch as soon as it
+ * lands, not only once a teardown has declined to restore over it.
+ */
+export declare const fetchRegistryState: () => {
+    installed: boolean;
+    names: string[];
+    foreignPatch: boolean;
+};
+//# sourceMappingURL=fetch-registry.d.ts.map

package/dist/lib/interceptors/fetch-registry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"fetch-registry.d.ts","sourceRoot":"","sources":["../../../lib/interceptors/fetch-registry.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkCG;AAEH,sFAAsF;AACtF,MAAM,MAAM,SAAS,GAAG,CAAC,KAAK,EAAE,WAAW,GAAG,GAAG,EAAE,IAAI,CAAC,EAAE,WAAW,KAAK,OAAO,CAAC,QAAQ,CAAC,CAAC;AAE5F;;;;;;GAMG;AACH,MAAM,MAAM,eAAe,GAAG,CAAC,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,WAAW,GAAG,GAAG,EAAE,IAAI,CAAC,EAAE,WAAW,KAAK,OAAO,CAAC,QAAQ,CAAC,CAAC;AAEnH,MAAM,MAAM,eAAe,GAAG;IAC5B,qFAAqF;IACrF,QAAQ,EAAE,MAAM,CAAC;IACjB,0FAA0F;IAC1F,IAAI,EAAE,MAAM,CAAC;CACd,CAAC;AAEF;;;;;;GAMG;AACH,eAAO,MAAM,mBAAmB,KAAK,CAAC;AAEtC;;;GAGG;AACH,eAAO,MAAM,sBAAsB,KAAK,CAAC;AAEzC,gFAAgF;AAChF,qBAAa,4BAA6B,SAAQ,KAAK;IACrD,gEAAgE;IAChE,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;gBAEpB,cAAc,EAAE,MAAM;CASnC;AAiID;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,uBAAuB,GAAI,YAAY,eAAe,EAAE,MAAM,eAAe,KAAG,CAAC,MAAM,IAAI,CA4BvG,CAAC;AAEF;;;;;;GAMG;AACH,eAAO,MAAM,kBAAkB,QAAO;IAAE,SAAS,EAAE,OAAO,CAAC;IAAC,KAAK,EAAE,MAAM,EAAE,CAAC;IAAC,YAAY,EAAE,OAAO,CAAA;CAOjG,CAAC"}

package/dist/lib/passflow.d.ts

@@ -1,7 +1,9 @@
+import type { AxiosInstance } from 'axios';
 import { type AppSettings, type InvitationsPaginatedList, type InviteLinkResponse, type PassflowAuthorizationResponse, type PassflowConfig, PassflowFederatedAuthPayload, type PassflowPasskeyAuthenticateStartPayload, type PassflowPasskeyRegisterStartPayload, type PassflowPasskeySettings, type PassflowPasswordPolicySettings, type PassflowPasswordlessResponse, type PassflowPasswordlessSignInCompletePayload, type PassflowPasswordlessSignInPayload, type PassflowSendPasswordResetEmailPayload, type PassflowSettingsAll, type PassflowSignInPayload, type PassflowSignUpPayload, type PassflowSuccessResponse, type PassflowTenantResponse, type PassflowValidationResponse, type RequestInviteLinkPayload, type TwoFactorConfirmResponse, type TwoFactorDisableResponse, type TwoFactorRecoveryResponse, type TwoFactorRegenerateResponse, type TwoFactorSetupResponse, type TwoFactorStatusResponse, type TwoFactorVerifyResponse } from './api';
 import { TenantService, TwoFactorService } from './services';
 import { PassflowEvent, type PassflowSubscriber } from './store';
-import { type TokenType } from './token';
+import { TokenType } from './token';
+import { type CreateClientConfig, type FetchLike, type ResponseInterceptorHost, type UpgradeFacade } from './upgrade';
 import type { ParsedTokens, SessionParams, Tokens } from './types';
 export declare class Passflow {
     /**
@@ -20,6 +22,7 @@ export declare class Passflow {
     private tenantApi;
     private invitationApi;
     private twoFactorApi;
+    private upgradeApi;
     private scopes;
     private createTenantForNewUser;
     private doRefreshTokens;
@@ -34,6 +37,19 @@ export declare class Passflow {
     private twoFactorService;
     tenant: TenantService;
     twoFactor: TwoFactorService;
+    /**
+     * Step-up (assurance upgrade) wiring. Always present, inert until
+     * `enable({ prompt })` is called — constructing a `Passflow` must never patch
+     * a global or install a prompt.
+     */
+    readonly upgrade: UpgradeFacade;
+    /**
+     * Passflow's own API as an interception scope ("domain 1"), resolved ONCE
+     * here from `PassflowConfig.url` so no adapter or wrapper ever derives it.
+     * `null` when no `url` was configured, which is empty — never a throw, and
+     * never silent: the first parseable challenge then names `url` as the fix.
+     */
+    private readonly upgradeDomain;
     private createSessionCallback?;
     private expiredSessionCallback?;
     error?: Error;
@@ -55,6 +71,92 @@ export declare class Passflow {
      * ```
      */
     setAppId(appId: string): void;
+    /**
+     * Wraps a `fetch`, returning a new function with step-up handling attached.
+     *
+     * Installs nothing and touches no global — this is the SSR- and
+     * React-Native-safe surface. Two verbs exist because the semantics genuinely
+     * differ: an axios interceptor mutates, a fetch wrapper returns, and one name
+     * would hide which happened.
+     *
+     * A challenge from Passflow's own API is handled with no further
+     * configuration; a challenge from the developer's own backend needs that
+     * backend declared via `upgrade.enable({ backend })`.
+     *
+     * @example
+     * ```typescript
+     * const authedFetch = passflow.withAuth(fetch);
+     * const res = await authedFetch('https://api.example.com/transfer', { method: 'POST' });
+     * if (!res.ok && isUpgradeCancelled(res)) {
+     *   // the user declined the step-up — not an authorization failure
+     * }
+     * ```
+     */
+    withAuth(next?: FetchLike): FetchLike;
+    /**
+     * Attaches step-up handling to an axios instance the caller already owns,
+     * **mutating** it, and returns a `detach()` disposer.
+     *
+     * The parameter is typed structurally — duck-typed on
+     * `interceptors.response.use` — so this package's axios version is not a
+     * constraint on the caller's. It returns the disposer rather than the
+     * instance on purpose: it mutates, so returning the instance would read as if
+     * it had built something.
+     *
+     * @example
+     * ```typescript
+     * const api = axios.create({ baseURL: 'https://api.example.com' });
+     * const detach = passflow.attachAuth(api);
+     * ```
+     */
+    attachAuth(instance: ResponseInterceptorHost): () => void;
+    /**
+     * Builds a ready axios instance with step-up handling already wired, for a
+     * caller with no HTTP client of their own.
+     *
+     * Pure passthrough of axios' own create options, so `baseURL`, `headers`,
+     * `timeout` and `adapter` stay the caller's. A `baseURL` is NOT read as a
+     * declared backend — that would derive an interception scope through a side
+     * door; declare it with `upgrade.enable({ backend })`.
+     *
+     * @example
+     * ```typescript
+     * const api = passflow.createClient({ baseURL: 'https://api.example.com' });
+     * ```
+     */
+    createClient(config?: CreateClientConfig): AxiosInstance;
+    /**
+     * The assurance bar the session currently holds, read from the `acr` claim of
+     * the stored access token.
+     *
+     * The server scores `acr` and is the only authority; this is the client-side
+     * read of what it last said, and it is what lets an `insufficient` outcome
+     * report a real `obtained` bar instead of the bar the ceremony was ranked for.
+     */
+    private readAssuranceBar;
+    /** Every axios client this instance owns, which is every surface a Passflow 401 can arrive on. */
+    private axiosClients;
+    /**
+     * Installs (or clears) §4.4's internal seam on every one of the SDK's own
+     * clients.
+     *
+     * Each client gets a handler bound to its OWN `replay`, so a replayed request
+     * goes back out through the instance that issued it. The seam is consulted
+     * inside the existing error interceptor, which is where it has to live: axios
+     * runs response interceptors FIFO and that handler converts the `AxiosError`
+     * into a `PassflowError` with no headers and no config, so anything
+     * registered afterwards is structurally too late.
+     */
+    private attachUpgradeSeam;
+    /**
+     * Notifies on a session change, which the facade answers by discarding its
+     * controller.
+     *
+     * `SignIn` and `SignOut` both count: a challenge is server-bound to the
+     * session's `sid`, so an elevation abandoned across either boundary must never
+     * elevate the NEW session.
+     */
+    private subscribeToSessionChange;
     /**
      * Configure session callbacks and check current session status.
      *