@pellux/goodvibes-sdk 0.30.3 → 0.33.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Michael Davis and GoodVibes contributors
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -18,7 +18,7 @@ import { createGoodVibesSdk } from '@pellux/goodvibes-sdk';
 import { createMemoryTokenStore } from '@pellux/goodvibes-sdk/auth';
 
 const sdk = createGoodVibesSdk({
-  baseUrl: 'http://127.0.0.1:3210',
+  baseUrl: 'http://127.0.0.1:3421',
   tokenStore: createMemoryTokenStore(process.env.GOODVIBES_TOKEN ?? null),
 });
 
@@ -37,7 +37,6 @@ Entry points:
 - `@pellux/goodvibes-sdk/react-native`
 - `@pellux/goodvibes-sdk/expo`
 - `@pellux/goodvibes-sdk/daemon`
-- `@pellux/goodvibes-sdk/platform`
 
 Cloudflare batch provisioning is exposed through daemon `/api/cloudflare/*`
 routes. The `/workers` entry is for manual Worker deployments.

package/dist/auth.d.ts

@@ -3,13 +3,13 @@ import type { AuthTokenResolver } from '@pellux/goodvibes-transport-http';
 import type { OperatorSdk } from '@pellux/goodvibes-operator-sdk';
 import { AutoRefreshCoordinator, PermissionResolver, SessionManager, TokenStore } from './client-auth/index.js';
 import type { AutoRefreshOptions } from './client-auth/index.js';
-import type { GoodVibesAuthLoginOptions, GoodVibesCurrentAuth, GoodVibesLoginInput, GoodVibesLoginOutput, GoodVibesTokenStore } from './client-auth/types.js';
+import type { GoodVibesAuthLoginOptions, GoodVibesCurrentAuth, GoodVibesExpiringTokenStore, GoodVibesLoginInput, GoodVibesLoginOutput, GoodVibesTokenStore } from './client-auth/types.js';
 export { PermissionResolver, SessionManager, TokenStore } from './client-auth/index.js';
 export type { OAuthStartState, OAuthTokenPayload } from './client-auth/oauth-types.js';
-export type { GoodVibesAuthLoginOptions, GoodVibesCurrentAuth, GoodVibesLoginInput, GoodVibesLoginOutput, GoodVibesTokenStore, } from './client-auth/types.js';
+export type { GoodVibesAuthLoginOptions, GoodVibesCurrentAuth, GoodVibesExpiringTokenStore, GoodVibesLoginInput, GoodVibesLoginOutput, GoodVibesTokenStore, } from './client-auth/types.js';
 export interface BrowserTokenStoreOptions {
-    readonly key?: string;
-    readonly storage?: Pick<Storage, 'getItem' | 'setItem' | 'removeItem'>;
+    readonly key?: string | undefined;
+    readonly storage?: Pick<Storage, 'getItem' | 'setItem' | 'removeItem'> | undefined;
 }
 /**
  * The combined auth client attached to an SDK instance.
@@ -53,6 +53,8 @@ export interface GoodVibesAuthClient {
  * @see AutoRefreshOptions
  */
 export type { AutoRefreshOptions };
+export type { AutoRefreshCoordinatorOptions } from './client-auth/index.js';
+export type { ControlPlaneAuthMode, ControlPlaneAuthSnapshot } from './client-auth/control-plane-auth-snapshot.js';
 /**
  * Create a simple in-memory token store.
  *
@@ -66,7 +68,7 @@ export type { AutoRefreshOptions };
  * const sdk = createGoodVibesSdk({ baseUrl: '...', tokenStore: store });
  * await sdk.auth.clearToken(); // clears only in-memory
  */
-export declare function createMemoryTokenStore(initialToken?: string | null, initialExpiresAt?: number): GoodVibesTokenStore;
+export declare function createMemoryTokenStore(initialToken?: string | null, initialExpiresAt?: number): GoodVibesExpiringTokenStore;
 /**
  * Create a token store backed by `localStorage` (or a custom `Storage`).
  *
@@ -82,7 +84,7 @@ export declare function createMemoryTokenStore(initialToken?: string | null, ini
  * await sdk.auth.login({ username: 'alice', password: 's3cr3t' });
  * // token is now stored in sessionStorage
  */
-export declare function createBrowserTokenStore(options?: BrowserTokenStoreOptions): GoodVibesTokenStore;
+export declare function createBrowserTokenStore(options?: BrowserTokenStoreOptions): GoodVibesExpiringTokenStore;
 /**
  * Create the auth client attached to an SDK instance.
  *
@@ -104,7 +106,7 @@ export declare function createBrowserTokenStore(options?: BrowserTokenStoreOptio
  * // Later: clear the session
  * await sdk.auth.clearToken();
  */
-export declare function createGoodVibesAuthClient(operator: OperatorSdk, tokenStore: GoodVibesTokenStore | null, getAuthToken?: AuthTokenResolver, observer?: SDKObserver, autoRefreshOptions?: AutoRefreshOptions, 
+export declare function createGoodVibesAuthClient(operator: OperatorSdk, tokenStore: GoodVibesTokenStore | null, getAuthToken?: AuthTokenResolver, observer?: SDKObserver | undefined, autoRefreshOptions?: AutoRefreshOptions, 
 /**
  * Optional pre-built `AutoRefreshCoordinator`. When provided, it is reused
  * directly (no new coordinator is constructed). This allows `createGoodVibesSdk`

package/dist/auth.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../src/auth.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAEvD,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,kCAAkC,CAAC;AAC1E,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,gCAAgC,CAAC;AAClE,OAAO,EACL,sBAAsB,EACtB,kBAAkB,EAClB,cAAc,EACd,UAAU,EACX,MAAM,wBAAwB,CAAC;AAChC,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,wBAAwB,CAAC;AAEjE,OAAO,KAAK,EACV,yBAAyB,EACzB,oBAAoB,EACpB,mBAAmB,EACnB,oBAAoB,EACpB,mBAAmB,EACpB,MAAM,wBAAwB,CAAC;AAOhC,OAAO,EAAE,kBAAkB,EAAE,cAAc,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AACxF,YAAY,EAAE,eAAe,EAAE,iBAAiB,EAAE,MAAM,8BAA8B,CAAC;AACvF,YAAY,EACV,yBAAyB,EACzB,oBAAoB,EACpB,mBAAmB,EACnB,oBAAoB,EACpB,mBAAmB,GACpB,MAAM,wBAAwB,CAAC;AAEhC,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,OAAO,CAAC,EAAE,IAAI,CAAC,OAAO,EAAE,SAAS,GAAG,SAAS,GAAG,YAAY,CAAC,CAAC;CACxE;AAED;;;;;;;;;;;GAWG;AACH,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC;IAC3B,2FAA2F;IAC3F,QAAQ,CAAC,UAAU,EAAE,UAAU,GAAG,IAAI,CAAC;IACvC,qFAAqF;IACrF,QAAQ,CAAC,cAAc,EAAE,cAAc,CAAC;IACxC;;;;;;;OAOG;IACH,kBAAkB,CAAC,QAAQ,EAAE,oBAAoB,GAAG,kBAAkB,CAAC;IACvE,OAAO,IAAI,OAAO,CAAC,oBAAoB,CAAC,CAAC;IACzC,KAAK,CAAC,KAAK,EAAE,mBAAmB,EAAE,OAAO,CAAC,EAAE,yBAAyB,GAAG,OAAO,CAAC,oBAAoB,CAAC,CAAC;IACtG,wEAAwE;IACxE,QAAQ,IAAI,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IACnC,6DAA6D;IAC7D,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC9C,sEAAsE;IACtE,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CAC7B;AAED;;;;GAIG;AACH,YAAY,EAAE,kBAAkB,EAAE,CAAC;AAYnC;;;;;;;;;;;;GAYG;AACH,wBAAgB,sBAAsB,CAAC,YAAY,GAAE,MAAM,GAAG,IAAW,EAAE,gBAAgB,CAAC,EAAE,MAAM,GAAG,mBAAmB,CAyBzH;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,uBAAuB,CAAC,OAAO,GAAE,wBAA6B,GAAG,mBAAmB,CA4CnG;AAwBD;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,wBAAgB,yBAAyB,CACvC,QAAQ,EAAE,WAAW,EACrB,UAAU,EAAE,mBAAmB,GAAG,IAAI,EACtC,YAAY,CAAC,EAAE,iBAAiB,EAChC,QAAQ,CAAC,EAAE,WAAW,EACtB,kBAAkB,CAAC,EAAE,kBAAkB;AACvC;;;;;GAKG;AACH,mBAAmB,CAAC,EAAE,sBAAsB,GAAG,IAAI,GAClD,mBAAmB,CAsFrB"}
+{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../src/auth.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAEvD,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,kCAAkC,CAAC;AAC1E,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,gCAAgC,CAAC;AAClE,OAAO,EACL,sBAAsB,EACtB,kBAAkB,EAClB,cAAc,EACd,UAAU,EACX,MAAM,wBAAwB,CAAC;AAChC,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,wBAAwB,CAAC;AAEjE,OAAO,KAAK,EACV,yBAAyB,EACzB,oBAAoB,EACpB,2BAA2B,EAC3B,mBAAmB,EACnB,oBAAoB,EACpB,mBAAmB,EACpB,MAAM,wBAAwB,CAAC;AAOhC,OAAO,EAAE,kBAAkB,EAAE,cAAc,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AACxF,YAAY,EAAE,eAAe,EAAE,iBAAiB,EAAE,MAAM,8BAA8B,CAAC;AACvF,YAAY,EACV,yBAAyB,EACzB,oBAAoB,EACpB,2BAA2B,EAC3B,mBAAmB,EACnB,oBAAoB,EACpB,mBAAmB,GACpB,MAAM,wBAAwB,CAAC;AAEhC,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAClC,QAAQ,CAAC,OAAO,CAAC,EAAE,IAAI,CAAC,OAAO,EAAE,SAAS,GAAG,SAAS,GAAG,YAAY,CAAC,GAAG,SAAS,CAAC;CACpF;AAED;;;;;;;;;;;GAWG;AACH,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC;IAC3B,2FAA2F;IAC3F,QAAQ,CAAC,UAAU,EAAE,UAAU,GAAG,IAAI,CAAC;IACvC,qFAAqF;IACrF,QAAQ,CAAC,cAAc,EAAE,cAAc,CAAC;IACxC;;;;;;;OAOG;IACH,kBAAkB,CAAC,QAAQ,EAAE,oBAAoB,GAAG,kBAAkB,CAAC;IACvE,OAAO,IAAI,OAAO,CAAC,oBAAoB,CAAC,CAAC;IACzC,KAAK,CAAC,KAAK,EAAE,mBAAmB,EAAE,OAAO,CAAC,EAAE,yBAAyB,GAAG,OAAO,CAAC,oBAAoB,CAAC,CAAC;IACtG,wEAAwE;IACxE,QAAQ,IAAI,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IACnC,6DAA6D;IAC7D,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC9C,sEAAsE;IACtE,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CAC7B;AAED;;;;GAIG;AACH,YAAY,EAAE,kBAAkB,EAAE,CAAC;AACnC,YAAY,EAAE,6BAA6B,EAAE,MAAM,wBAAwB,CAAC;AAC5E,YAAY,EAAE,oBAAoB,EAAE,wBAAwB,EAAE,MAAM,8CAA8C,CAAC;AAYnH;;;;;;;;;;;;GAYG;AACH,wBAAgB,sBAAsB,CAAC,YAAY,GAAE,MAAM,GAAG,IAAW,EAAE,gBAAgB,CAAC,EAAE,MAAM,GAAG,2BAA2B,CA0BjI;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,uBAAuB,CAAC,OAAO,GAAE,wBAA6B,GAAG,2BAA2B,CAgD3G;AAwBD;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,wBAAgB,yBAAyB,CACvC,QAAQ,EAAE,WAAW,EACrB,UAAU,EAAE,mBAAmB,GAAG,IAAI,EACtC,YAAY,CAAC,EAAE,iBAAiB,EAChC,QAAQ,CAAC,EAAE,WAAW,GAAG,SAAS,EAClC,kBAAkB,CAAC,EAAE,kBAAkB;AACvC;;;;;GAKG;AACH,mBAAmB,CAAC,EAAE,sBAAsB,GAAG,IAAI,GAClD,mBAAmB,CAwGrB"}

package/dist/auth.js

@@ -1,9 +1,9 @@
 import { ConfigurationError } from '@pellux/goodvibes-errors';
 import { invokeObserver } from './observer/index.js';
 import { AutoRefreshCoordinator, PermissionResolver, SessionManager, TokenStore, } from './client-auth/index.js';
-// Re-export focused responsibility classes for consumers who prefer
-// narrower, single-concern APIs over the combined GoodVibesAuthClient facade.
-// OAuthClient is intentionally omitted from this client-safe surface because it
+// Re-export focused responsibility classes for consumers who prefer narrower,
+// single-concern APIs over the combined GoodVibesAuthClient facade.
+// OAuthClient is intentionally omitted from this client-side surface because it
 // depends on Node runtime facilities. Daemon OAuth flows belong on the server
 // side; clients receive acquired tokens via TokenStore.
 export { PermissionResolver, SessionManager, TokenStore } from './client-auth/index.js';
@@ -35,7 +35,8 @@ export function createMemoryTokenStore(initialToken = null, initialExpiresAt) {
             return token;
         },
         async setToken(nextToken) {
-            token = nextToken;
+            // Normalize: treat whitespace-only tokens as null.
+            token = nextToken && nextToken.trim() ? nextToken.trim() : null;
             // When setToken is called directly (not via setTokenEntry), clear expiry
             // to avoid stale expiry data attached to a manually-set token.
             expiresAt = undefined;
@@ -45,7 +46,7 @@ export function createMemoryTokenStore(initialToken = null, initialExpiresAt) {
             expiresAt = undefined;
         },
         async getTokenEntry() {
-            return { token, expiresAt };
+            return expiresAt !== undefined ? { token, expiresAt } : { token };
         },
         async setTokenEntry(nextToken, nextExpiresAt) {
             token = nextToken;
@@ -78,12 +79,13 @@ export function createBrowserTokenStore(options = {}) {
             return value && value.trim() ? value : null;
         },
         async setToken(token) {
-            if (!token) {
+            const normalized = token && token.trim() ? token.trim() : null;
+            if (!normalized) {
                 storage.removeItem(key);
                 storage.removeItem(expiresAtKey);
                 return;
             }
-            storage.setItem(key, token);
+            storage.setItem(key, normalized);
             // Clear expiry when set via setToken (no expiry info provided).
             storage.removeItem(expiresAtKey);
         },
@@ -95,8 +97,11 @@ export function createBrowserTokenStore(options = {}) {
             const value = storage.getItem(key);
             const token = value && value.trim() ? value : null;
             const expiresAtStr = storage.getItem(expiresAtKey);
-            const expiresAt = expiresAtStr ? parseInt(expiresAtStr, 10) : undefined;
-            return { token, expiresAt: Number.isFinite(expiresAt) ? expiresAt : undefined };
+            const expiresAtRaw = expiresAtStr ? Number(expiresAtStr) : NaN;
+            const finalExpiresAt = Number.isFinite(expiresAtRaw) && expiresAtRaw > 0
+                ? expiresAtRaw
+                : undefined;
+            return finalExpiresAt !== undefined ? { token, expiresAt: finalExpiresAt } : { token };
         },
         async setTokenEntry(token, expiresAt) {
             if (!token) {
@@ -161,8 +166,10 @@ existingCoordinator) {
     // Construct the split-class instances that own each concern.
     // The facade delegates to these rather than duplicating logic.
     const ts = tokenStore ? new TokenStore(tokenStore) : null;
-    const sm = new SessionManager(operator, ts);
+    const sm = new SessionManager(operator, ts, observer);
     // Use the provided coordinator if available; otherwise build one.
+    // `existingCoordinator !== undefined` handles the null case: null means
+    // "caller explicitly decided no coordinator"; undefined means "not provided, build one".
     const coordinator = existingCoordinator !== undefined
         ? existingCoordinator
         : (() => {
@@ -173,7 +180,7 @@ existingCoordinator) {
                     tokenStore,
                     autoRefresh,
                     refreshLeewayMs,
-                    refresh: autoRefreshOptions?.refresh,
+                    ...(autoRefreshOptions?.refresh !== undefined ? { refresh: autoRefreshOptions.refresh } : {}),
                     observer,
                 })
                 : null;
@@ -205,12 +212,12 @@ existingCoordinator) {
             const priorToken = await ts?.getToken();
             const result = await sm.login(input, options);
             // Notify observer of the auth state transition. Observer errors are
-            // swallowed so they never disrupt SDK logic.
+            // isolated and reported by invokeObserver.
             invokeObserver(() => observer?.onAuthTransition?.({
                 from: priorToken ? 'token' : 'anonymous',
                 to: 'token',
                 reason: 'login',
-            }));
+            }), { label: 'onAuthTransition' });
             return result;
         },
         async getToken() {
@@ -220,18 +227,29 @@ existingCoordinator) {
             return await readToken(null, getAuthToken);
         },
         async setToken(token) {
-            await assertWritableTokenStore(tokenStore).setToken(token);
+            const priorToken = await ts?.getToken();
+            await assertWritableTokenStore(ts).setToken(token);
+            // Notify observer of the token state transition.
+            invokeObserver(() => observer?.onAuthTransition?.({
+                from: priorToken ? 'token' : 'anonymous',
+                to: token ? 'token' : 'anonymous',
+                reason: token ? 'refresh' : 'logout',
+            }), { label: 'onAuthTransition' });
         },
         async clearToken() {
+            // assertWritableTokenStore first: throws ConfigurationError when no tokenStore,
+            // regardless of current token value (read-only resolvers have no store at all).
+            const store = assertWritableTokenStore(ts);
             const currentToken = await ts?.getToken();
-            await assertWritableTokenStore(tokenStore).clearToken();
-            // Notify observer of the logout transition. Observer errors are
-            // swallowed so they never disrupt SDK logic.
+            await store.clearToken();
+            // Notify observer of the auth state transition. Always fire — even for
+            // anonymous→anonymous — so callers that explicitly call clearToken receive
+            // the expected transition event.
             invokeObserver(() => observer?.onAuthTransition?.({
                 from: currentToken ? 'token' : 'anonymous',
                 to: 'anonymous',
                 reason: 'logout',
-            }));
+            }), { label: 'onAuthTransition' });
         },
     };
 }

package/dist/browser.d.ts

@@ -1,8 +1,20 @@
 import { type GoodVibesSdkOptions, type GoodVibesSdk } from './client.js';
+/**
+ * Options for {@link createBrowserGoodVibesSdk}.
+ *
+ * Extends {@link GoodVibesSdkOptions} with browser-friendly defaults:
+ * - `baseUrl` is optional and defaults to `location.origin`.
+ * - `fetch` and `WebSocketImpl` default to the browser globals.
+ *
+ * This is the canonical options type for the browser entrypoint
+ * (`@pellux/goodvibes-sdk/browser`). The web entrypoint
+ * (`@pellux/goodvibes-sdk/web`) exposes the same shape as
+ * `WebGoodVibesSdkOptions` — a named alias retained for ergonomic imports.
+ */
 export interface BrowserGoodVibesSdkOptions extends Omit<GoodVibesSdkOptions, 'baseUrl' | 'fetch' | 'WebSocketImpl'> {
-    readonly baseUrl?: string;
-    readonly fetch?: typeof fetch;
-    readonly WebSocketImpl?: typeof WebSocket;
+    readonly baseUrl?: string | undefined;
+    readonly fetch?: typeof fetch | undefined;
+    readonly WebSocketImpl?: typeof WebSocket | undefined;
 }
 /**
  * Create a GoodVibes SDK instance for browser environments.
@@ -24,6 +36,6 @@ export interface BrowserGoodVibesSdkOptions extends Omit<GoodVibesSdkOptions, 'b
  *
  * const agents = await sdk.operator.agents.list();
  */
-export { forSession } from './transport-realtime.js';
+export { forSession } from './companion-realtime.js';
 export declare function createBrowserGoodVibesSdk(options?: BrowserGoodVibesSdkOptions): GoodVibesSdk;
 //# sourceMappingURL=browser.d.ts.map

package/dist/browser.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"browser.d.ts","sourceRoot":"","sources":["../src/browser.ts"],"names":[],"mappings":"AACA,OAAO,EAEL,KAAK,mBAAmB,EACxB,KAAK,YAAY,EAClB,MAAM,aAAa,CAAC;AAErB,MAAM,WAAW,0BACf,SAAQ,IAAI,CAAC,mBAAmB,EAAE,SAAS,GAAG,OAAO,GAAG,eAAe,CAAC;IACxE,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,KAAK,CAAC;IAC9B,QAAQ,CAAC,aAAa,CAAC,EAAE,OAAO,SAAS,CAAC;CAC3C;AAaD;;;;;;;;;;;;;;;;;;;GAmBG;AACH,OAAO,EAAE,UAAU,EAAE,MAAM,yBAAyB,CAAC;AAErD,wBAAgB,yBAAyB,CACvC,OAAO,GAAE,0BAA+B,GACvC,YAAY,CAiCd"}
+{"version":3,"file":"browser.d.ts","sourceRoot":"","sources":["../src/browser.ts"],"names":[],"mappings":"AACA,OAAO,EAEL,KAAK,mBAAmB,EACxB,KAAK,YAAY,EAClB,MAAM,aAAa,CAAC;AAErB;;;;;;;;;;;GAWG;AACH,MAAM,WAAW,0BACf,SAAQ,IAAI,CAAC,mBAAmB,EAAE,SAAS,GAAG,OAAO,GAAG,eAAe,CAAC;IACxE,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACtC,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,KAAK,GAAG,SAAS,CAAC;IAC1C,QAAQ,CAAC,aAAa,CAAC,EAAE,OAAO,SAAS,GAAG,SAAS,CAAC;CACvD;AAaD;;;;;;;;;;;;;;;;;;;GAmBG;AACH,OAAO,EAAE,UAAU,EAAE,MAAM,yBAAyB,CAAC;AAErD,wBAAgB,yBAAyB,CACvC,OAAO,GAAE,0BAA+B,GACvC,YAAY,CAiCd"}

package/dist/browser.js

@@ -29,7 +29,7 @@ function resolveBrowserBaseUrl(baseUrl) {
  *
  * const agents = await sdk.operator.agents.list();
  */
-export { forSession } from './transport-realtime.js';
+export { forSession } from './companion-realtime.js';
 export function createBrowserGoodVibesSdk(options = {}) {
     return createGoodVibesSdk({
         baseUrl: resolveBrowserBaseUrl(options.baseUrl),
@@ -42,6 +42,7 @@ export function createBrowserGoodVibesSdk(options = {}) {
             },
         }),
         realtime: {
+            ...(options.realtime ?? {}),
             sseReconnect: {
                 enabled: true,
                 baseDelayMs: 500,
@@ -54,7 +55,6 @@ export function createBrowserGoodVibesSdk(options = {}) {
                 maxDelayMs: 5_000,
                 ...(options.realtime?.webSocketReconnect ?? {}),
             },
-            ...(options.realtime ?? {}),
         },
         ...(options.getAuthToken ? { getAuthToken: options.getAuthToken } : {}),
         ...(options.tokenStore ? { tokenStore: options.tokenStore } : {}),

package/dist/client-auth/android-keystore-token-store.d.ts

@@ -1,31 +1,3 @@
-/**
- * android-keystore-token-store.ts
- *
- * Token store backed by `react-native-keychain` for bare React Native on Android.
- *
- * On Android, `react-native-keychain` routes to EncryptedSharedPreferences
- * backed by the Android Keystore system — hardware-backed AES-256-GCM
- * encryption where available (API 23+). This is the **recommended**
- * implementation for proper hardware-backed security.
- *
- * Alternative: `@react-native-async-storage/async-storage` can store the
- * token but is NOT hardware-backed. If you cannot use `react-native-keychain`,
- * wrap async-storage with an additional encryption layer (e.g.
- * `react-native-encrypted-storage`). The `react-native-keychain` path is
- * strongly preferred for production apps.
- *
- * `react-native-keychain` is an **optional peer dependency** — this module
- * does NOT import it at the top level.
- *
- * ## Installation
- *
- * ```sh
- * npm install react-native-keychain
- * # Android: auto-linked via Gradle; no manual step required
- * ```
- *
- * Wave 6 three-part error messages: [what happened] · [why] · [what to do]
- */
 import type { GoodVibesTokenStore } from './types.js';
 /**
  * String union of `Keychain.ACCESS_CONTROL` values relevant for Android.
@@ -43,7 +15,7 @@ export interface AndroidKeystoreTokenStoreOptions {
      * prefix on Android).
      * @default 'com.pellux.goodvibes-sdk'
      */
-    readonly service?: string;
+    readonly service?: string | undefined;
     /**
      * Access control policy. Maps to `Keychain.ACCESS_CONTROL` constants.
      *
@@ -53,13 +25,13 @@ export interface AndroidKeystoreTokenStoreOptions {
      * Leave undefined to use the default Keystore protection without interactive
      * authentication prompts.
      */
-    readonly accessControl?: AndroidAccessControl;
+    readonly accessControl?: AndroidAccessControl | undefined;
     /**
      * Controls when stored data is accessible.
      * Maps to `Keychain.ACCESSIBLE` constants (Android respects a subset).
      * @default 'WHEN_UNLOCKED_THIS_DEVICE_ONLY'
      */
-    readonly accessible?: AndroidAccessible;
+    readonly accessible?: AndroidAccessible | undefined;
 }
 export interface AndroidKeystoreTokenStore extends GoodVibesTokenStore {
     /**

package/dist/client-auth/android-keystore-token-store.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"android-keystore-token-store.d.ts","sourceRoot":"","sources":["../../src/client-auth/android-keystore-token-store.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AAGH,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAC;AAMtD;;;;GAIG;AACH,MAAM,MAAM,oBAAoB,GAC5B,cAAc,GACd,iCAAiC,GACjC,sBAAsB,GACtB,yCAAyC,GACzC,iBAAiB,GACjB,sBAAsB,CAAC;AAE3B;;GAEG;AACH,MAAM,MAAM,iBAAiB,GACzB,eAAe,GACf,oBAAoB,GACpB,QAAQ,GACR,oCAAoC,GACpC,gCAAgC,GAChC,qCAAqC,GACrC,yBAAyB,CAAC;AAM9B,MAAM,WAAW,gCAAgC;IAC/C;;;;OAIG;IACH,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAE1B;;;;;;;;OAQG;IACH,QAAQ,CAAC,aAAa,CAAC,EAAE,oBAAoB,CAAC;IAE9C;;;;OAIG;IACH,QAAQ,CAAC,UAAU,CAAC,EAAE,iBAAiB,CAAC;CACzC;AAkDD,MAAM,WAAW,yBAA0B,SAAQ,mBAAmB;IACpE;;;;OAIG;IACH,aAAa,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,EAAE,SAAS,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAEvE;;;OAGG;IACH,aAAa,IAAI,OAAO,CAAC;QAAE,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CACxE;AAMD;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AACH,wBAAgB,+BAA+B,CAC7C,OAAO,GAAE,gCAAqC,EAC9C,YAAY,CAAC,EAAE,MAAM,OAAO,CAAC,OAAO,CAAC,GACpC,yBAAyB,CAuF3B"}
+{"version":3,"file":"android-keystore-token-store.d.ts","sourceRoot":"","sources":["../../src/client-auth/android-keystore-token-store.ts"],"names":[],"mappings":"AA6BA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAC;AAMtD;;;;GAIG;AACH,MAAM,MAAM,oBAAoB,GAC5B,cAAc,GACd,iCAAiC,GACjC,sBAAsB,GACtB,yCAAyC,GACzC,iBAAiB,GACjB,sBAAsB,CAAC;AAE3B;;GAEG;AACH,MAAM,MAAM,iBAAiB,GACzB,eAAe,GACf,oBAAoB,GACpB,QAAQ,GACR,oCAAoC,GACpC,gCAAgC,GAChC,qCAAqC,GACrC,yBAAyB,CAAC;AAM9B,MAAM,WAAW,gCAAgC;IAC/C;;;;OAIG;IACH,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAEtC;;;;;;;;OAQG;IACH,QAAQ,CAAC,aAAa,CAAC,EAAE,oBAAoB,GAAG,SAAS,CAAC;IAE1D;;;;OAIG;IACH,QAAQ,CAAC,UAAU,CAAC,EAAE,iBAAiB,GAAG,SAAS,CAAC;CACrD;AA0ED,MAAM,WAAW,yBAA0B,SAAQ,mBAAmB;IACpE;;;;OAIG;IACH,aAAa,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,EAAE,SAAS,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAEvE;;;OAGG;IACH,aAAa,IAAI,OAAO,CAAC;QAAE,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CACxE;AAMD;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AACH,wBAAgB,+BAA+B,CAC7C,OAAO,GAAE,gCAAqC,EAC9C,YAAY,CAAC,EAAE,MAAM,OAAO,CAAC,OAAO,CAAC,GACpC,yBAAyB,CA+F3B"}

package/dist/client-auth/android-keystore-token-store.js

@@ -24,15 +24,16 @@
  * # Android: auto-linked via Gradle; no manual step required
  * ```
  *
- * Wave 6 three-part error messages: [what happened] · [why] · [what to do]
+ * Error messages use the format: [what happened] · [why] · [what to do]
  */
 import { GoodVibesSdkError } from '@pellux/goodvibes-errors';
+const REACT_NATIVE_KEYCHAIN_MODULE = 'react-native-keychain';
 let _mod = null;
 async function loadKeychain() {
     if (_mod !== null)
         return _mod;
     try {
-        _mod = await import('react-native-keychain');
+        _mod = (await import(REACT_NATIVE_KEYCHAIN_MODULE));
         return _mod;
     }
     catch {
@@ -96,18 +97,18 @@ export function createAndroidKeystoreTokenStore(options = {}, __loadModule) {
         const opts = { service };
         const accessibleValue = mod.ACCESSIBLE[accessible];
         if (accessibleValue !== undefined) {
-            opts['accessible'] = accessibleValue;
+            opts.accessible = accessibleValue;
         }
-        else if (options.accessible !== undefined) {
-            console.warn(`[pellux/goodvibes-sdk] react-native-keychain does not expose ACCESSIBLE.${accessible}; falling back to default`);
+        else {
+            throw new Error(`react-native-keychain does not expose ACCESSIBLE.${accessible}; choose a supported keychain accessibility constant.`);
         }
         if (accessControl !== undefined) {
             const acValue = mod.ACCESS_CONTROL[accessControl];
             if (acValue !== undefined) {
-                opts['accessControl'] = acValue;
+                opts.accessControl = acValue;
             }
             else {
-                console.warn(`[pellux/goodvibes-sdk] react-native-keychain does not expose ACCESS_CONTROL.${accessControl}; falling back to default`);
+                throw new Error(`react-native-keychain does not expose ACCESS_CONTROL.${accessControl}; choose a supported keychain access-control constant.`);
             }
         }
         return opts;
@@ -120,8 +121,15 @@ export function createAndroidKeystoreTokenStore(options = {}, __loadModule) {
         try {
             return JSON.parse(result.password);
         }
-        catch {
-            return null;
+        catch (err) {
+            await mod.resetGenericPassword(buildOptions(mod));
+            throw new GoodVibesSdkError('Android keystore token store payload is corrupt and was cleared.', {
+                code: 'SDK_TOKEN_STORE_CORRUPT',
+                category: 'authentication',
+                source: 'runtime',
+                recoverable: true,
+                cause: err,
+            });
         }
     }
     async function writePayload(payload) {
@@ -158,7 +166,8 @@ export function createAndroidKeystoreTokenStore(options = {}, __loadModule) {
             const payload = await readPayload();
             if (payload === null)
                 return { token: null };
-            return { token: payload.token, expiresAt: payload.expiresAt ?? undefined };
+            const expiresAt = payload.expiresAt ?? undefined;
+            return expiresAt !== undefined ? { token: payload.token, expiresAt } : { token: payload.token };
         },
     };
 }

package/dist/client-auth/auto-refresh-middleware.d.ts

@@ -2,7 +2,7 @@
  * Auto-refresh transport middleware.
  *
  * Integrates `AutoRefreshCoordinator` at the transport boundary so that ALL
- * typed operator/peer SDK calls benefit from silent token refresh — not only
+ * typed operator/peer SDK calls benefit from automatic token refresh — not only
  * `auth.current()`.
  *
  * Responsibilities:

package/dist/client-auth/auto-refresh-middleware.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"auto-refresh-middleware.d.ts","sourceRoot":"","sources":["../../src/client-auth/auto-refresh-middleware.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAEH,OAAO,KAAK,EAAoB,mBAAmB,EAAE,MAAM,kCAAkC,CAAC;AAC9F,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,4CAA4C,CAAC;AACpF,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAC;AACtD,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,mBAAmB,CAAC;AAKhE;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,2BAA2B,CACzC,WAAW,EAAE,sBAAsB,EACnC,SAAS,EAAE,IAAI,CAAC,iBAAiB,EAAE,aAAa,CAAC,EACjD,UAAU,EAAE,mBAAmB,GAC9B,mBAAmB,CAyGrB"}
+{"version":3,"file":"auto-refresh-middleware.d.ts","sourceRoot":"","sources":["../../src/client-auth/auto-refresh-middleware.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAEH,OAAO,KAAK,EAAoB,mBAAmB,EAAE,MAAM,kCAAkC,CAAC;AAC9F,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,4CAA4C,CAAC;AACpF,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAC;AACtD,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,mBAAmB,CAAC;AAMhE;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,2BAA2B,CACzC,WAAW,EAAE,sBAAsB,EACnC,SAAS,EAAE,IAAI,CAAC,iBAAiB,EAAE,aAAa,CAAC,EACjD,UAAU,EAAE,mBAAmB,GAC9B,mBAAmB,CA6HrB"}

package/dist/client-auth/auto-refresh-middleware.js

@@ -2,7 +2,7 @@
  * Auto-refresh transport middleware.
  *
  * Integrates `AutoRefreshCoordinator` at the transport boundary so that ALL
- * typed operator/peer SDK calls benefit from silent token refresh — not only
+ * typed operator/peer SDK calls benefit from automatic token refresh — not only
  * `auth.current()`.
  *
  * Responsibilities:
@@ -20,7 +20,8 @@
  *      middleware-error-wrapping instrumentation does not re-wrap them as
  *      `kind:'unknown'`.
  */
-/** Internal flag key — never conflicts with public HttpJsonRequestOptions fields. */
+import { is401Error } from './auto-refresh.js';
+/** Request-local flag key that never conflicts with public HttpJsonRequestOptions fields. */
 const ATTEMPTED_FLAG = '__gv_ar_attempted';
 /**
  * Create a transport middleware that integrates the `AutoRefreshCoordinator`
@@ -59,12 +60,25 @@ export function createAutoRefreshMiddleware(coordinator, transport, tokenStore)
             return;
         }
         // ── Pre-flight refresh ───────────────────────────────────────────────────
-        // Silently refreshes the token when it is within the leeway window.
+        // Refresh the token before dispatch when it is within the leeway window.
         // After refresh, update ctx.headers.Authorization with the fresh token so
         // consumer middleware (which runs after this one in the chain) sees the
         // current Bearer token, not the stale one that was set when ctx was built.
-        await coordinator.ensureFreshToken();
-        const freshToken = await tokenStore.getToken();
+        try {
+            await coordinator.ensureFreshToken();
+        }
+        catch (error) {
+            ctx.error = error;
+            return;
+        }
+        let freshToken;
+        try {
+            freshToken = await tokenStore.getToken();
+        }
+        catch (error) {
+            ctx.error = error;
+            return;
+        }
         if (freshToken) {
             ctx.headers['Authorization'] = `Bearer ${freshToken}`;
         }
@@ -106,7 +120,7 @@ export function createAutoRefreshMiddleware(coordinator, transport, tokenStore)
         };
         // Delegate to coordinator.refreshAndRetryOnce — this refreshes the token
         // exactly once and executes the retry fn once. If the retry also returns
-        // 401, it throws GoodVibesSdkError{kind:'auth'} (Wave 6 three-part message).
+        // 401, it throws GoodVibesSdkError{kind:'auth'} with the standard three-part message.
         //
         // IMPORTANT: we place terminal errors onto ctx.error instead of re-throwing
         // them. This bypasses the transport's middleware-error-wrapping path
@@ -128,6 +142,15 @@ export function createAutoRefreshMiddleware(coordinator, transport, tokenStore)
         }
         // Put the retry result back onto ctx.response so the transport's outer
         // requestJson can resolve it via `await ctx.response.json()`.
+        //
+        // status: 200 — transport.requestJson throws on non-2xx, so a non-throwing
+        //   return means the retry succeeded. The transport layer only inspects the
+        //   JSON body; the status is not forwarded to callers by HttpJsonTransport.
+        //
+        // headers: Content-Type only — the transport reads `ctx.response.json()` and
+        //   does not forward response headers to callers. If header forwarding is
+        //   needed in the future, use the lower-level fetch path here instead.
+        //
         // Also clear ctx.error: the innerFetch path sets it when it throws (before
         // re-throwing), so it reflects the original 401. Since we handled the 401
         // successfully, we must clear it so the transport's `if (ctx.error) throw`
@@ -142,14 +165,4 @@ export function createAutoRefreshMiddleware(coordinator, transport, tokenStore)
 // ---------------------------------------------------------------------------
 // Helpers
 // ---------------------------------------------------------------------------
-/** Detect a 401 response across the various error shapes the SDK produces. */
-function is401Error(error) {
-    if (typeof error !== 'object' || error === null)
-        return false;
-    const e = error;
-    const status = e.status ??
-        e.transport?.status ??
-        e.response?.status ??
-        e.cause?.response?.status;
-    return status === 401;
-}
+// is401Error is shared — import from auto-refresh.ts to avoid divergence.

package/dist/client-auth/auto-refresh.d.ts

@@ -1,9 +1,9 @@
 /**
- * AutoRefreshCoordinator — Silent token refresh with in-flight request queuing.
+ * AutoRefreshCoordinator — automatic token refresh with in-flight request queuing.
  *
  * Prevents user-visible 401s by:
  *   1. Pre-flight leeway check: if the token expires within refreshLeewayMs,
- *      trigger a silent refresh before the request is dispatched.
+ *      trigger an automatic refresh before the request is dispatched.
  *   2. Reactive 401 retry: if a request returns 401 and the token wasn't
  *      already known expired, trigger a refresh then retry the request once.
  *   3. In-flight queuing: while a refresh is in progress, subsequent refresh
@@ -13,22 +13,22 @@
  * function), the pre-flight check is a graceful no-op and the reactive path
  * triggers a token re-read (which may succeed if the store was updated externally).
  *
- * Wave 6 three-part error messages:
+ * Error messages use this three-part format:
  *   [what happened] · [why] · [what to do]
  */
 import type { GoodVibesTokenStore } from './types.js';
 import type { SDKObserver } from '../observer/index.js';
 export interface AutoRefreshOptions {
     /**
-     * Enable or disable silent token refresh. Default: `true`.
+     * Enable or disable automatic token refresh. Default: `true`.
      * When `false`, 401 responses propagate immediately without retry.
      */
-    readonly autoRefresh?: boolean;
+    readonly autoRefresh?: boolean | undefined;
     /**
-     * Milliseconds before token expiry to trigger a silent refresh.
+     * Milliseconds before token expiry to trigger an automatic refresh.
      * Default: 60_000 (1 minute).
      */
-    readonly refreshLeewayMs?: number;
+    readonly refreshLeewayMs?: number | undefined;
     /**
      * Consumer-provided callback invoked to obtain a new token when the current
      * token is near expiry (pre-flight leeway check) or a 401 is received
@@ -58,10 +58,10 @@ export interface AutoRefreshOptions {
      *   },
      * });
      */
-    readonly refresh?: () => Promise<{
+    readonly refresh?: (() => Promise<{
         token: string;
         expiresAt?: number;
-    }>;
+    }>) | undefined;
 }
 export interface AutoRefreshCoordinatorOptions {
     readonly tokenStore: GoodVibesTokenStore;
@@ -76,18 +76,18 @@ export interface AutoRefreshCoordinatorOptions {
      * no network call is made. Reactive 401 retry still re-reads the token
      * store in case an external party updated it.
      */
-    readonly refresh?: () => Promise<{
+    readonly refresh?: (() => Promise<{
         token: string;
-        expiresAt?: number;
-    }>;
-    readonly observer?: SDKObserver;
+        expiresAt?: number | undefined;
+    }>) | undefined;
+    readonly observer?: SDKObserver | undefined;
 }
 export declare class AutoRefreshCoordinator {
     #private;
     constructor(options: AutoRefreshCoordinatorOptions);
     /**
      * Call before dispatching a request. If the token is near expiry (within
-     * `refreshLeewayMs`), silently refreshes before the request goes out.
+     * `refreshLeewayMs`), refreshes before the request goes out.
      *
      * If `autoRefresh` is disabled, this is a no-op.
      */
@@ -111,7 +111,7 @@ export declare class AutoRefreshCoordinator {
      * `withRetryOn401`) and then calls `fn` a single time.
      *
      * If `fn` throws a 401 on retry, a terminal `GoodVibesSdkError{kind:'auth'}`
-     * is thrown with the Wave 6 three-part message format.
+     * is thrown with the standard three-part message format.
      *
      * Used by `createAutoRefreshMiddleware` to avoid making an extra HTTP call
      * when the middleware already observed the initial 401 from `next()`.
@@ -120,4 +120,5 @@ export declare class AutoRefreshCoordinator {
      */
     refreshAndRetryOnce<T>(fn: () => Promise<T>): Promise<T>;
 }
+export declare function is401Error(error: unknown): boolean;
 //# sourceMappingURL=auto-refresh.d.ts.map

package/dist/client-auth/auto-refresh.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"auto-refresh.d.ts","sourceRoot":"","sources":["../../src/client-auth/auto-refresh.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAGH,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAC;AACtD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AAOxD,MAAM,WAAW,kBAAkB;IACjC;;;OAGG;IACH,QAAQ,CAAC,WAAW,CAAC,EAAE,OAAO,CAAC;IAE/B;;;OAGG;IACH,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAC;IAElC;;;;;;;;;;;;;;;;;;;;;;;;;;;;OA4BG;IACH,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,OAAO,CAAC;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CACzE;AAED,MAAM,WAAW,6BAA6B;IAC5C,QAAQ,CAAC,UAAU,EAAE,mBAAmB,CAAC;IACzC,QAAQ,CAAC,WAAW,EAAE,OAAO,CAAC;IAC9B,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC;;;;;;;;OAQG;IACH,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,OAAO,CAAC;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACxE,QAAQ,CAAC,QAAQ,CAAC,EAAE,WAAW,CAAC;CACjC;AAMD,qBAAa,sBAAsB;;gBAUrB,OAAO,EAAE,6BAA6B;IAsGlD;;;;;OAKG;IACG,gBAAgB,IAAI,OAAO,CAAC,IAAI,CAAC;IAYvC;;;;;;;;OAQG;IACG,cAAc,CAAC,CAAC,EAAE,EAAE,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC;IA0CzD;;;;;;;;;;;;;;;OAeG;IACG,mBAAmB,CAAC,CAAC,EAAE,EAAE,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC;CA2B/D"}
+{"version":3,"file":"auto-refresh.d.ts","sourceRoot":"","sources":["../../src/client-auth/auto-refresh.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAGH,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAC;AACtD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AAOxD,MAAM,WAAW,kBAAkB;IACjC;;;OAGG;IACH,QAAQ,CAAC,WAAW,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;IAE3C;;;OAGG;IACH,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAE9C;;;;;;;;;;;;;;;;;;;;;;;;;;;;OA4BG;IACH,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC,MAAM,OAAO,CAAC;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC,GAAG,SAAS,CAAC;CACvF;AAED,MAAM,WAAW,6BAA6B;IAC5C,QAAQ,CAAC,UAAU,EAAE,mBAAmB,CAAC;IACzC,QAAQ,CAAC,WAAW,EAAE,OAAO,CAAC;IAC9B,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC;;;;;;;;OAQG;IACH,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC,MAAM,OAAO,CAAC;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;KAAE,CAAC,CAAC,GAAG,SAAS,CAAC;IAClG,QAAQ,CAAC,QAAQ,CAAC,EAAE,WAAW,GAAG,SAAS,CAAC;CAC7C;AAMD,qBAAa,sBAAsB;;gBAUrB,OAAO,EAAE,6BAA6B;IA+GlD;;;;;OAKG;IACG,gBAAgB,IAAI,OAAO,CAAC,IAAI,CAAC;IAYvC;;;;;;;;OAQG;IACG,cAAc,CAAC,CAAC,EAAE,EAAE,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC;IA0CzD;;;;;;;;;;;;;;;OAeG;IACG,mBAAmB,CAAC,CAAC,EAAE,EAAE,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC;CA2B/D;AAMD,wBAAgB,UAAU,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAclD"}