@polymorfa/browser 0.1.0-dev.20260922094209

package/dist/token.d.ts

@@ -0,0 +1,37 @@
+export interface ClientToken {
+    readonly value: string;
+    readonly audience: "browser";
+    readonly expiresAt: number;
+    readonly scopes?: readonly string[];
+}
+export type ClientTokenProvider = () => Promise<string | ClientToken>;
+export interface ClientTokenProviderOptions {
+    readonly path?: string;
+    readonly fetch?: typeof globalThis.fetch;
+}
+export declare function createClientTokenProvider(options?: ClientTokenProviderOptions): ClientTokenProvider;
+export interface ClientTokenManagerOptions {
+    readonly now?: () => number;
+    readonly expirySkewMs?: number;
+}
+export declare class ClientTokenManager {
+    #private;
+    constructor(provider: ClientTokenProvider, options?: ClientTokenManagerOptions);
+    get(): Promise<string>;
+    /**
+     * The current token with its expiry when the provider supplied one.
+     * `refresh: true` discards the cached token first.
+     */
+    token(options?: {
+        readonly refresh?: boolean;
+    }): Promise<{
+        readonly value: string;
+        readonly expiresAt?: number;
+    }>;
+    /**
+     * Drop the cached token. A provider call already in flight may return the
+     * refused token: it neither answers later requests nor replaces the cache.
+     */
+    invalidate(): void;
+}
+//# sourceMappingURL=token.d.ts.map

package/dist/token.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"token.d.ts","sourceRoot":"","sources":["../src/token.ts"],"names":[],"mappings":"AAEA,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,QAAQ,EAAE,SAAS,CAAC;IAC7B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,MAAM,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CACrC;AAED,MAAM,MAAM,mBAAmB,GAAG,MAAM,OAAO,CAAC,MAAM,GAAG,WAAW,CAAC,CAAC;AAEtE,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,UAAU,CAAC,KAAK,CAAC;CAC1C;AAED,wBAAgB,yBAAyB,CACvC,OAAO,GAAE,0BAA+B,GACvC,mBAAmB,CA8DrB;AAED,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;IAC5B,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;CAChC;AAED,qBAAa,kBAAkB;;gBAU3B,QAAQ,EAAE,mBAAmB,EAC7B,OAAO,GAAE,yBAA8B;IAczC,GAAG,IAAI,OAAO,CAAC,MAAM,CAAC;IAItB;;;OAGG;IACG,KAAK,CACT,OAAO,GAAE;QAAE,QAAQ,CAAC,OAAO,CAAC,EAAE,OAAO,CAAA;KAAO,GAC3C,OAAO,CAAC;QAAE,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAQnE;;;OAGG;IACH,UAAU,IAAI,IAAI;CAyDnB"}

package/dist/token.js

@@ -0,0 +1,152 @@
+import { BrowserConfigurationError, BrowserHttpError } from "./errors.js";
+export function createClientTokenProvider(options = {}) {
+    const path = options.path ?? "/api/polymorfa/token";
+    if (!path.startsWith("/") ||
+        path.startsWith("//") ||
+        path.includes("\\") ||
+        URL.canParse(path)) {
+        throw new BrowserConfigurationError("Client token route must be a same-origin relative path.", "invalid_token_route");
+    }
+    const fetch = options.fetch ?? globalThis.fetch;
+    if (typeof fetch !== "function") {
+        throw new BrowserConfigurationError("A fetch implementation is required for the client token route.", "missing_fetch");
+    }
+    return async () => {
+        const response = await fetch(path, {
+            method: "POST",
+            credentials: "same-origin",
+            headers: { accept: "application/json" },
+        });
+        if (!response.ok) {
+            throw new BrowserHttpError(`Client token route failed with status ${response.status}.`, {
+                category: response.status >= 500 ? "server" : "http",
+                status: response.status,
+                code: "client_token_route_failed",
+            });
+        }
+        let value;
+        try {
+            value = await response.json();
+        }
+        catch {
+            throw new BrowserConfigurationError("Client token route returned an invalid response.", "invalid_token_response");
+        }
+        if (!isClientToken(value)) {
+            throw new BrowserConfigurationError("Client token route returned invalid browser claims.", "invalid_token_response");
+        }
+        return Object.freeze({
+            value: value.value,
+            audience: "browser",
+            expiresAt: value.expiresAt,
+            ...(value.scopes === undefined
+                ? {}
+                : { scopes: Object.freeze([...value.scopes]) }),
+        });
+    };
+}
+export class ClientTokenManager {
+    #provider;
+    #now;
+    #expirySkewMs;
+    #cached;
+    #pending;
+    // Only the latest provider call may replace the cached token.
+    #fetchGeneration = 0;
+    constructor(provider, options = {}) {
+        if (typeof provider !== "function")
+            throw new BrowserConfigurationError("getClientToken must be a function.");
+        this.#provider = provider;
+        this.#now = options.now ?? Date.now;
+        this.#expirySkewMs = options.expirySkewMs ?? 30_000;
+        if (!Number.isFinite(this.#expirySkewMs) || this.#expirySkewMs < 0) {
+            throw new BrowserConfigurationError("expirySkewMs must be a non-negative number.");
+        }
+    }
+    get() {
+        return this.#get(false);
+    }
+    /**
+     * The current token with its expiry when the provider supplied one.
+     * `refresh: true` discards the cached token first.
+     */
+    async token(options = {}) {
+        const value = await this.#get(options.refresh === true);
+        const cached = this.#cached;
+        return cached !== undefined && cached.value === value
+            ? { value, expiresAt: cached.expiresAt }
+            : { value };
+    }
+    /**
+     * Drop the cached token. A provider call already in flight may return the
+     * refused token: it neither answers later requests nor replaces the cache.
+     */
+    invalidate() {
+        this.#cached = undefined;
+        this.#pending = undefined;
+        this.#fetchGeneration += 1;
+    }
+    #get(refresh) {
+        if (!refresh &&
+            this.#cached !== undefined &&
+            this.#cached.expiresAt - this.#expirySkewMs > this.#now()) {
+            return Promise.resolve(this.#cached.value);
+        }
+        // A forced refresh never takes the result of a provider call that started
+        // before it was requested: that call may return the refused token.
+        if (refresh)
+            this.invalidate();
+        if (this.#pending !== undefined)
+            return this.#pending;
+        const generation = ++this.#fetchGeneration;
+        const promise = this.#refresh(generation).finally(() => {
+            if (this.#pending === promise)
+                this.#pending = undefined;
+        });
+        this.#pending = promise;
+        return promise;
+    }
+    async #refresh(generation) {
+        const supplied = await this.#provider();
+        if (typeof supplied === "string") {
+            validatePrefix(supplied);
+            return supplied;
+        }
+        validatePrefix(supplied.value);
+        if (supplied.audience !== "browser") {
+            throw new BrowserConfigurationError("Client token audience must be browser.", "invalid_token_audience");
+        }
+        if (!Number.isFinite(supplied.expiresAt) ||
+            supplied.expiresAt <= this.#now()) {
+            throw new BrowserConfigurationError("Client token is expired or has an invalid expiry.", "expired_client_token");
+        }
+        if (generation !== this.#fetchGeneration)
+            return supplied.value;
+        this.#cached = Object.freeze({
+            ...supplied,
+            ...(supplied.scopes === undefined
+                ? {}
+                : { scopes: Object.freeze([...supplied.scopes]) }),
+        });
+        return supplied.value;
+    }
+}
+function validatePrefix(value) {
+    if (!value.startsWith("pmfa_ct_") || value.length <= "pmfa_ct_".length) {
+        throw new BrowserConfigurationError("Browser client token must use the pmfa_ct_ prefix.", "invalid_client_token");
+    }
+}
+function isClientToken(value) {
+    if (typeof value !== "object" || value === null)
+        return false;
+    const token = value;
+    return (typeof token.value === "string" &&
+        token.value.startsWith("pmfa_ct_") &&
+        token.value.length > "pmfa_ct_".length &&
+        token.audience === "browser" &&
+        typeof token.expiresAt === "number" &&
+        Number.isFinite(token.expiresAt) &&
+        (token.scopes === undefined ||
+            (Array.isArray(token.scopes) &&
+                token.scopes.every((scope) => typeof scope === "string"))));
+}
+//# sourceMappingURL=token.js.map

package/dist/token.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"token.js","sourceRoot":"","sources":["../src/token.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,yBAAyB,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAgB1E,MAAM,UAAU,yBAAyB,CACvC,UAAsC,EAAE;IAExC,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,IAAI,sBAAsB,CAAC;IACpD,IACE,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;QACrB,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QACrB,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;QACnB,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,EAClB,CAAC;QACD,MAAM,IAAI,yBAAyB,CACjC,yDAAyD,EACzD,qBAAqB,CACtB,CAAC;IACJ,CAAC;IACD,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,UAAU,CAAC,KAAK,CAAC;IAChD,IAAI,OAAO,KAAK,KAAK,UAAU,EAAE,CAAC;QAChC,MAAM,IAAI,yBAAyB,CACjC,gEAAgE,EAChE,eAAe,CAChB,CAAC;IACJ,CAAC;IAED,OAAO,KAAK,IAA0B,EAAE;QACtC,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,IAAI,EAAE;YACjC,MAAM,EAAE,MAAM;YACd,WAAW,EAAE,aAAa;YAC1B,OAAO,EAAE,EAAE,MAAM,EAAE,kBAAkB,EAAE;SACxC,CAAC,CAAC;QACH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,IAAI,gBAAgB,CACxB,yCAAyC,QAAQ,CAAC,MAAM,GAAG,EAC3D;gBACE,QAAQ,EAAE,QAAQ,CAAC,MAAM,IAAI,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM;gBACpD,MAAM,EAAE,QAAQ,CAAC,MAAM;gBACvB,IAAI,EAAE,2BAA2B;aAClC,CACF,CAAC;QACJ,CAAC;QAED,IAAI,KAAc,CAAC;QACnB,IAAI,CAAC;YACH,KAAK,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;QAChC,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,yBAAyB,CACjC,kDAAkD,EAClD,wBAAwB,CACzB,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,EAAE,CAAC;YAC1B,MAAM,IAAI,yBAAyB,CACjC,qDAAqD,EACrD,wBAAwB,CACzB,CAAC;QACJ,CAAC;QACD,OAAO,MAAM,CAAC,MAAM,CAAC;YACnB,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,QAAQ,EAAE,SAAS;YACnB,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,GAAG,CAAC,KAAK,CAAC,MAAM,KAAK,SAAS;gBAC5B,CAAC,CAAC,EAAE;gBACJ,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC;SAClD,CAAC,CAAC;IACL,CAAC,CAAC;AACJ,CAAC;AAOD,MAAM,OAAO,kBAAkB;IACpB,SAAS,CAAsB;IAC/B,IAAI,CAAe;IACnB,aAAa,CAAS;IAC/B,OAAO,CAA0B;IACjC,QAAQ,CAA8B;IACtC,8DAA8D;IAC9D,gBAAgB,GAAG,CAAC,CAAC;IAErB,YACE,QAA6B,EAC7B,UAAqC,EAAE;QAEvC,IAAI,OAAO,QAAQ,KAAK,UAAU;YAChC,MAAM,IAAI,yBAAyB,CAAC,oCAAoC,CAAC,CAAC;QAC5E,IAAI,CAAC,SAAS,GAAG,QAAQ,CAAC;QAC1B,IAAI,CAAC,IAAI,GAAG,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC;QACpC,IAAI,CAAC,aAAa,GAAG,OAAO,CAAC,YAAY,IAAI,MAAM,CAAC;QACpD,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,aAAa,CAAC,IAAI,IAAI,CAAC,aAAa,GAAG,CAAC,EAAE,CAAC;YACnE,MAAM,IAAI,yBAAyB,CACjC,6CAA6C,CAC9C,CAAC;QACJ,CAAC;IACH,CAAC;IAED,GAAG;QACD,OAAO,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC1B,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,KAAK,CACT,UAA0C,EAAE;QAE5C,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,KAAK,IAAI,CAAC,CAAC;QACxD,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC;QAC5B,OAAO,MAAM,KAAK,SAAS,IAAI,MAAM,CAAC,KAAK,KAAK,KAAK;YACnD,CAAC,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE;YACxC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC;IAChB,CAAC;IAED;;;OAGG;IACH,UAAU;QACR,IAAI,CAAC,OAAO,GAAG,SAAS,CAAC;QACzB,IAAI,CAAC,QAAQ,GAAG,SAAS,CAAC;QAC1B,IAAI,CAAC,gBAAgB,IAAI,CAAC,CAAC;IAC7B,CAAC;IAED,IAAI,CAAC,OAAgB;QACnB,IACE,CAAC,OAAO;YACR,IAAI,CAAC,OAAO,KAAK,SAAS;YAC1B,IAAI,CAAC,OAAO,CAAC,SAAS,GAAG,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC,IAAI,EAAE,EACzD,CAAC;YACD,OAAO,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QAC7C,CAAC;QACD,0EAA0E;QAC1E,mEAAmE;QACnE,IAAI,OAAO;YAAE,IAAI,CAAC,UAAU,EAAE,CAAC;QAC/B,IAAI,IAAI,CAAC,QAAQ,KAAK,SAAS;YAAE,OAAO,IAAI,CAAC,QAAQ,CAAC;QACtD,MAAM,UAAU,GAAG,EAAE,IAAI,CAAC,gBAAgB,CAAC;QAC3C,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE;YACrD,IAAI,IAAI,CAAC,QAAQ,KAAK,OAAO;gBAAE,IAAI,CAAC,QAAQ,GAAG,SAAS,CAAC;QAC3D,CAAC,CAAC,CAAC;QACH,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC;QACxB,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,UAAkB;QAC/B,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,SAAS,EAAE,CAAC;QACxC,IAAI,OAAO,QAAQ,KAAK,QAAQ,EAAE,CAAC;YACjC,cAAc,CAAC,QAAQ,CAAC,CAAC;YACzB,OAAO,QAAQ,CAAC;QAClB,CAAC;QACD,cAAc,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QAC/B,IAAI,QAAQ,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;YACpC,MAAM,IAAI,yBAAyB,CACjC,wCAAwC,EACxC,wBAAwB,CACzB,CAAC;QACJ,CAAC;QACD,IACE,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,SAAS,CAAC;YACpC,QAAQ,CAAC,SAAS,IAAI,IAAI,CAAC,IAAI,EAAE,EACjC,CAAC;YACD,MAAM,IAAI,yBAAyB,CACjC,mDAAmD,EACnD,sBAAsB,CACvB,CAAC;QACJ,CAAC;QACD,IAAI,UAAU,KAAK,IAAI,CAAC,gBAAgB;YAAE,OAAO,QAAQ,CAAC,KAAK,CAAC;QAChE,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC;YAC3B,GAAG,QAAQ;YACX,GAAG,CAAC,QAAQ,CAAC,MAAM,KAAK,SAAS;gBAC/B,CAAC,CAAC,EAAE;gBACJ,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC;SACrD,CAAC,CAAC;QACH,OAAO,QAAQ,CAAC,KAAK,CAAC;IACxB,CAAC;CACF;AAED,SAAS,cAAc,CAAC,KAAa;IACnC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,UAAU,CAAC,IAAI,KAAK,CAAC,MAAM,IAAI,UAAU,CAAC,MAAM,EAAE,CAAC;QACvE,MAAM,IAAI,yBAAyB,CACjC,oDAAoD,EACpD,sBAAsB,CACvB,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAS,aAAa,CAAC,KAAc;IACnC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC;IAC9D,MAAM,KAAK,GAAG,KAA6B,CAAC;IAC5C,OAAO,CACL,OAAO,KAAK,CAAC,KAAK,KAAK,QAAQ;QAC/B,KAAK,CAAC,KAAK,CAAC,UAAU,CAAC,UAAU,CAAC;QAClC,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,UAAU,CAAC,MAAM;QACtC,KAAK,CAAC,QAAQ,KAAK,SAAS;QAC5B,OAAO,KAAK,CAAC,SAAS,KAAK,QAAQ;QACnC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,SAAS,CAAC;QAChC,CAAC,KAAK,CAAC,MAAM,KAAK,SAAS;YACzB,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC;gBAC1B,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,CAC/D,CAAC;AACJ,CAAC"}

package/dist/transport.d.ts

@@ -0,0 +1,53 @@
+import type { BrowserDiagnosticSink } from "./diagnostics.js";
+import { type ClientTokenProvider } from "./token.js";
+export type BrowserHttpMethod = "GET" | "POST" | "PUT" | "PATCH" | "DELETE" | "HEAD" | "OPTIONS";
+export interface BrowserRequest {
+    readonly method: BrowserHttpMethod;
+    readonly path: string;
+    readonly query?: Readonly<Record<string, string | number | boolean | null | undefined>>;
+    readonly body?: unknown;
+    readonly headers?: Readonly<Record<string, string>>;
+    readonly idempotencyKey?: string;
+    readonly signal?: AbortSignal;
+    readonly timeoutMs?: number;
+    readonly maxNetworkRetries?: number;
+}
+export interface BrowserResponseMetadata {
+    readonly status: number;
+    readonly requestId?: string;
+    readonly attempts: number;
+    readonly headers: Readonly<Record<string, string>>;
+}
+export interface BrowserResponse<T> {
+    readonly data: T;
+    readonly metadata: BrowserResponseMetadata;
+}
+export interface BrowserTransportOptions {
+    readonly getClientToken: ClientTokenProvider;
+    readonly baseUrl?: string;
+    readonly timeoutMs?: number;
+    readonly maxNetworkRetries?: number;
+    readonly fetch?: typeof globalThis.fetch;
+    readonly sleep?: (milliseconds: number, signal?: AbortSignal) => Promise<void>;
+    readonly random?: () => number;
+    readonly now?: () => number;
+    readonly onDiagnostic?: BrowserDiagnosticSink;
+}
+export declare class BrowserTransport {
+    #private;
+    /** The API origin requests are resolved against (no trailing slash). */
+    get baseUrl(): string;
+    constructor(options: BrowserTransportOptions);
+    /**
+     * The client token requests use, for authenticating sockets. `refresh: true`
+     * asks the token provider for a new token.
+     */
+    token(options?: {
+        readonly refresh?: boolean;
+    }): Promise<{
+        readonly value: string;
+        readonly expiresAt?: number;
+    }>;
+    request<T = unknown>(request: BrowserRequest): Promise<BrowserResponse<T>>;
+}
+//# sourceMappingURL=transport.d.ts.map

package/dist/transport.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"transport.d.ts","sourceRoot":"","sources":["../src/transport.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAEV,qBAAqB,EACtB,MAAM,kBAAkB,CAAC;AAS1B,OAAO,EAAsB,KAAK,mBAAmB,EAAE,MAAM,YAAY,CAAC;AAE1E,MAAM,MAAM,iBAAiB,GAC3B,KAAK,GAAG,MAAM,GAAG,KAAK,GAAG,OAAO,GAAG,QAAQ,GAAG,MAAM,GAAG,SAAS,CAAC;AAEnE,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,MAAM,EAAE,iBAAiB,CAAC;IACnC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,KAAK,CAAC,EAAE,QAAQ,CACvB,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,GAAG,IAAI,GAAG,SAAS,CAAC,CAC7D,CAAC;IACF,QAAQ,CAAC,IAAI,CAAC,EAAE,OAAO,CAAC;IACxB,QAAQ,CAAC,OAAO,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IACpD,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAC;IAC9B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,iBAAiB,CAAC,EAAE,MAAM,CAAC;CACrC;AAED,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;CACpD;AAED,MAAM,WAAW,eAAe,CAAC,CAAC;IAChC,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC;IACjB,QAAQ,CAAC,QAAQ,EAAE,uBAAuB,CAAC;CAC5C;AAED,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,cAAc,EAAE,mBAAmB,CAAC;IAC7C,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,iBAAiB,CAAC,EAAE,MAAM,CAAC;IACpC,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,UAAU,CAAC,KAAK,CAAC;IACzC,QAAQ,CAAC,KAAK,CAAC,EAAE,CACf,YAAY,EAAE,MAAM,EACpB,MAAM,CAAC,EAAE,WAAW,KACjB,OAAO,CAAC,IAAI,CAAC,CAAC;IACnB,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,MAAM,CAAC;IAC/B,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;IAC5B,QAAQ,CAAC,YAAY,CAAC,EAAE,qBAAqB,CAAC;CAC/C;AAID,qBAAa,gBAAgB;;IAc3B,wEAAwE;IACxE,IAAI,OAAO,IAAI,MAAM,CAEpB;gBAEW,OAAO,EAAE,uBAAuB;IAuB5C;;;OAGG;IACH,KAAK,CACH,OAAO,GAAE;QAAE,QAAQ,CAAC,OAAO,CAAC,EAAE,OAAO,CAAA;KAAO,GAC3C,OAAO,CAAC;QAAE,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAI7D,OAAO,CAAC,CAAC,GAAG,OAAO,EACvB,OAAO,EAAE,cAAc,GACtB,OAAO,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;CAkI/B"}

package/dist/transport.js

@@ -0,0 +1,328 @@
+import { BrowserCancelledError, BrowserConnectionError, BrowserError, BrowserHttpError, BrowserTimeoutError, BrowserValidationError, } from "./errors.js";
+import { ClientTokenManager } from "./token.js";
+const SAFE_METHODS = new Set(["GET", "HEAD", "OPTIONS"]);
+export class BrowserTransport {
+    #baseUrl;
+    #tokens;
+    #timeoutMs;
+    #maxNetworkRetries;
+    #fetch;
+    #sleep;
+    #random;
+    #now;
+    #onDiagnostic;
+    /** The API origin requests are resolved against (no trailing slash). */
+    get baseUrl() {
+        return this.#baseUrl;
+    }
+    constructor(options) {
+        this.#baseUrl = (options.baseUrl ?? "https://api.polymorfa.com").replace(/\/+$/, "");
+        this.#tokens = new ClientTokenManager(options.getClientToken);
+        this.#timeoutMs = positiveInteger(options.timeoutMs ?? 15_000, "timeoutMs", false);
+        this.#maxNetworkRetries = positiveInteger(options.maxNetworkRetries ?? 2, "maxNetworkRetries", true);
+        this.#fetch = options.fetch ?? globalThis.fetch;
+        this.#sleep = options.sleep ?? defaultSleep;
+        this.#random = options.random ?? Math.random;
+        this.#now = options.now ?? Date.now;
+        this.#onDiagnostic = options.onDiagnostic;
+    }
+    /**
+     * The client token requests use, for authenticating sockets. `refresh: true`
+     * asks the token provider for a new token.
+     */
+    token(options = {}) {
+        return this.#tokens.token(options);
+    }
+    async request(request) {
+        validatePath(request.path);
+        const retries = positiveInteger(request.maxNetworkRetries ?? this.#maxNetworkRetries, "maxNetworkRetries", true);
+        const retryableMethod = SAFE_METHODS.has(request.method) || Boolean(request.idempotencyKey);
+        let attempt = 0;
+        while (true) {
+            attempt += 1;
+            const startedAt = this.#now();
+            this.#emit({
+                type: "request.started",
+                timestamp: startedAt,
+                method: request.method,
+                path: request.path,
+                attempt,
+            });
+            try {
+                const response = await this.#perform(request);
+                const data = await decodeBody(response);
+                const metadata = responseMetadata(response, attempt);
+                if (response.ok) {
+                    this.#emit({
+                        type: "request.completed",
+                        timestamp: this.#now(),
+                        method: request.method,
+                        path: request.path,
+                        attempt,
+                        status: response.status,
+                        durationMs: Math.max(this.#now() - startedAt, 0),
+                        ...(metadata.requestId === undefined
+                            ? {}
+                            : { requestId: metadata.requestId }),
+                    });
+                    return Object.freeze({ data: data, metadata });
+                }
+                if (retryableMethod &&
+                    attempt <= retries &&
+                    isRetryableStatus(response.status) &&
+                    !isIdempotentReplay(response)) {
+                    await this.#sleep(retryDelay(response, attempt, this.#random), request.signal);
+                    continue;
+                }
+                throw httpError(response, data, metadata);
+            }
+            catch (cause) {
+                const error = classifyFailure(cause, request.signal);
+                if ((error instanceof BrowserConnectionError ||
+                    error instanceof BrowserTimeoutError) &&
+                    retryableMethod &&
+                    attempt <= retries) {
+                    await this.#sleep(retryDelay(undefined, attempt, this.#random), request.signal);
+                    continue;
+                }
+                this.#emit({
+                    type: "request.failed",
+                    timestamp: this.#now(),
+                    method: request.method,
+                    path: request.path,
+                    attempt,
+                    durationMs: Math.max(this.#now() - startedAt, 0),
+                    category: error.category,
+                    ...(error.status === undefined ? {} : { status: error.status }),
+                    ...(error.requestId === undefined
+                        ? {}
+                        : { requestId: error.requestId }),
+                });
+                throw error;
+            }
+        }
+    }
+    async #perform(request) {
+        throwIfAborted(request.signal);
+        const token = await this.#tokens.get();
+        throwIfAborted(request.signal);
+        const headers = new Headers(request.headers);
+        headers.set("accept", "application/json");
+        headers.set("authorization", `Bearer ${token}`);
+        headers.set("x-polymorfa-client", "browser/0.1.0-dev.0");
+        if (request.idempotencyKey !== undefined)
+            headers.set("idempotency-key", request.idempotencyKey);
+        const body = request.body === undefined ? undefined : JSON.stringify(request.body);
+        if (body !== undefined)
+            headers.set("content-type", "application/json");
+        const timeoutMs = positiveInteger(request.timeoutMs ?? this.#timeoutMs, "timeoutMs", false);
+        const controller = new AbortController();
+        let timedOut = false;
+        const timer = setTimeout(() => {
+            timedOut = true;
+            controller.abort();
+        }, timeoutMs);
+        const cancel = () => controller.abort(request.signal?.reason);
+        request.signal?.addEventListener("abort", cancel, { once: true });
+        try {
+            return await this.#fetch(requestUrl(this.#baseUrl, request), {
+                method: request.method,
+                headers,
+                ...(body === undefined ? {} : { body }),
+                signal: controller.signal,
+            });
+        }
+        catch (cause) {
+            if (timedOut)
+                throw new RequestTimeout(timeoutMs, cause);
+            throw cause;
+        }
+        finally {
+            clearTimeout(timer);
+            request.signal?.removeEventListener("abort", cancel);
+        }
+    }
+    #emit(event) {
+        this.#onDiagnostic?.(Object.freeze(event));
+    }
+}
+class RequestTimeout extends Error {
+    timeoutMs;
+    constructor(timeoutMs, cause) {
+        super("Request timed out.", { cause });
+        this.timeoutMs = timeoutMs;
+    }
+}
+function validatePath(path) {
+    if (!path.startsWith("/") ||
+        path.startsWith("//") ||
+        path.includes("\\") ||
+        URL.canParse(path)) {
+        throw new BrowserValidationError("Browser request paths must be relative and begin with one slash.", "invalid_path");
+    }
+}
+function requestUrl(baseUrl, request) {
+    const url = new URL(request.path, `${baseUrl}/`);
+    for (const [key, value] of Object.entries(request.query ?? {})) {
+        if (value !== undefined && value !== null)
+            url.searchParams.append(key, String(value));
+    }
+    return url;
+}
+async function decodeBody(response) {
+    if (response.status === 204)
+        return undefined;
+    const text = await response.text();
+    if (text.length === 0)
+        return undefined;
+    const contentType = response.headers.get("content-type") ?? "";
+    if (!contentType.includes("json"))
+        return text;
+    try {
+        return JSON.parse(text);
+    }
+    catch {
+        return text;
+    }
+}
+function responseMetadata(response, attempts) {
+    const headers = {};
+    response.headers.forEach((value, key) => {
+        headers[key] = value;
+    });
+    const requestId = response.headers.get("x-request-id") ??
+        response.headers.get("request-id") ??
+        undefined;
+    return Object.freeze({
+        status: response.status,
+        attempts,
+        headers: Object.freeze(headers),
+        ...(requestId === undefined ? {} : { requestId }),
+    });
+}
+function httpError(response, details, metadata) {
+    const category = response.status === 401
+        ? "authentication"
+        : response.status === 403
+            ? "authorization"
+            : response.status === 404
+                ? "not_found"
+                : response.status === 409
+                    ? "conflict"
+                    : response.status === 429
+                        ? "rate_limit"
+                        : response.status >= 500
+                            ? "server"
+                            : "http";
+    const fields = errorFields(details);
+    // Cross-origin callers cannot always read X-Request-Id; the body repeats it.
+    const requestId = fields.requestId ?? metadata.requestId;
+    return new BrowserHttpError(errorMessage(details, response.status), {
+        category,
+        status: response.status,
+        details,
+        metadata,
+        ...(fields.code === undefined ? {} : { code: fields.code }),
+        ...(requestId === undefined ? {} : { requestId }),
+        ...(fields.docUrl === undefined ? {} : { docUrl: fields.docUrl }),
+    });
+}
+function errorFields(details) {
+    if (typeof details !== "object" || details === null)
+        return {};
+    const record = details;
+    const error = typeof record.error === "object" && record.error !== null
+        ? record.error
+        : undefined;
+    const text = (value) => typeof value === "string" && value.length > 0 ? value : undefined;
+    const code = text(error ? error.code : record.code);
+    const requestId = text(error?.request_id);
+    const docUrl = text(record.docs);
+    return {
+        ...(code === undefined ? {} : { code }),
+        ...(requestId === undefined ? {} : { requestId }),
+        ...(docUrl === undefined ? {} : { docUrl }),
+    };
+}
+function errorMessage(details, status) {
+    if (typeof details === "object" && details !== null) {
+        const record = details;
+        if (typeof record.error === "object" && record.error !== null) {
+            const message = record.error.message;
+            if (typeof message === "string")
+                return message;
+        }
+        if (typeof record.message === "string")
+            return record.message;
+        if (typeof record.error === "string")
+            return record.error;
+    }
+    return `Polymorfa browser request failed with status ${status}.`;
+}
+function classifyFailure(cause, signal) {
+    if (cause instanceof BrowserError)
+        return cause;
+    if (signal?.aborted === true) {
+        return new BrowserCancelledError("The browser request was cancelled.", {
+            category: "cancelled",
+            cause,
+        });
+    }
+    if (cause instanceof RequestTimeout) {
+        return new BrowserTimeoutError(`The browser request exceeded its ${cause.timeoutMs}ms timeout.`, {
+            category: "timeout",
+            cause,
+        });
+    }
+    return new BrowserConnectionError("The browser request could not reach the Polymorfa API.", {
+        category: "connection",
+        cause,
+    });
+}
+/**
+ * A replayed Idempotency-Key result is final: retrying returns the same
+ * recorded response, so a replayed failure is surfaced immediately.
+ */
+function isIdempotentReplay(response) {
+    return response.headers.get("idempotent-replayed") === "true";
+}
+function isRetryableStatus(status) {
+    return status === 408 || status === 409 || status === 429 || status >= 500;
+}
+function retryDelay(response, attempt, random) {
+    const retryAfter = response?.headers.get("retry-after");
+    if (retryAfter !== undefined && retryAfter !== null) {
+        const seconds = Number(retryAfter);
+        if (Number.isFinite(seconds) && seconds >= 0)
+            return Math.min(seconds * 1_000, 30_000);
+    }
+    const ceiling = Math.min(250 * 2 ** Math.max(attempt - 1, 0), 3_000);
+    return Math.floor(ceiling * (0.5 + random() * 0.5));
+}
+async function defaultSleep(milliseconds, signal) {
+    if (signal?.aborted === true)
+        throw signal.reason;
+    await new Promise((resolve, reject) => {
+        const finish = () => {
+            signal?.removeEventListener("abort", abort);
+            resolve();
+        };
+        const timer = setTimeout(finish, milliseconds);
+        const abort = () => {
+            clearTimeout(timer);
+            reject(signal?.reason);
+        };
+        signal?.addEventListener("abort", abort, { once: true });
+    });
+}
+function positiveInteger(value, field, allowZero) {
+    if (!Number.isInteger(value) || value < 0 || (!allowZero && value === 0)) {
+        throw new BrowserValidationError(`${field} must be ${allowZero ? "a non-negative" : "a positive"} integer.`);
+    }
+    return value;
+}
+function throwIfAborted(signal) {
+    if (signal?.aborted === true)
+        throw signal.reason;
+}
+//# sourceMappingURL=transport.js.map

package/dist/transport.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"transport.js","sourceRoot":"","sources":["../src/transport.ts"],"names":[],"mappings":"AAIA,OAAO,EACL,qBAAqB,EACrB,sBAAsB,EACtB,YAAY,EACZ,gBAAgB,EAChB,mBAAmB,EACnB,sBAAsB,GACvB,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,kBAAkB,EAA4B,MAAM,YAAY,CAAC;AA8C1E,MAAM,YAAY,GAAG,IAAI,GAAG,CAAoB,CAAC,KAAK,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC,CAAC;AAE5E,MAAM,OAAO,gBAAgB;IAClB,QAAQ,CAAS;IACjB,OAAO,CAAqB;IAC5B,UAAU,CAAS;IACnB,kBAAkB,CAAS;IAC3B,MAAM,CAA0B;IAChC,MAAM,CAGI;IACV,OAAO,CAAe;IACtB,IAAI,CAAe;IACnB,aAAa,CAAoC;IAE1D,wEAAwE;IACxE,IAAI,OAAO;QACT,OAAO,IAAI,CAAC,QAAQ,CAAC;IACvB,CAAC;IAED,YAAY,OAAgC;QAC1C,IAAI,CAAC,QAAQ,GAAG,CAAC,OAAO,CAAC,OAAO,IAAI,2BAA2B,CAAC,CAAC,OAAO,CACtE,MAAM,EACN,EAAE,CACH,CAAC;QACF,IAAI,CAAC,OAAO,GAAG,IAAI,kBAAkB,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC;QAC9D,IAAI,CAAC,UAAU,GAAG,eAAe,CAC/B,OAAO,CAAC,SAAS,IAAI,MAAM,EAC3B,WAAW,EACX,KAAK,CACN,CAAC;QACF,IAAI,CAAC,kBAAkB,GAAG,eAAe,CACvC,OAAO,CAAC,iBAAiB,IAAI,CAAC,EAC9B,mBAAmB,EACnB,IAAI,CACL,CAAC;QACF,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,KAAK,IAAI,UAAU,CAAC,KAAK,CAAC;QAChD,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,KAAK,IAAI,YAAY,CAAC;QAC5C,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,MAAM,IAAI,IAAI,CAAC,MAAM,CAAC;QAC7C,IAAI,CAAC,IAAI,GAAG,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC;QACpC,IAAI,CAAC,aAAa,GAAG,OAAO,CAAC,YAAY,CAAC;IAC5C,CAAC;IAED;;;OAGG;IACH,KAAK,CACH,UAA0C,EAAE;QAE5C,OAAO,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IACrC,CAAC;IAED,KAAK,CAAC,OAAO,CACX,OAAuB;QAEvB,YAAY,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAC3B,MAAM,OAAO,GAAG,eAAe,CAC7B,OAAO,CAAC,iBAAiB,IAAI,IAAI,CAAC,kBAAkB,EACpD,mBAAmB,EACnB,IAAI,CACL,CAAC;QACF,MAAM,eAAe,GACnB,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,OAAO,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC;QACtE,IAAI,OAAO,GAAG,CAAC,CAAC;QAChB,OAAO,IAAI,EAAE,CAAC;YACZ,OAAO,IAAI,CAAC,CAAC;YACb,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;YAC9B,IAAI,CAAC,KAAK,CAAC;gBACT,IAAI,EAAE,iBAAiB;gBACvB,SAAS,EAAE,SAAS;gBACpB,MAAM,EAAE,OAAO,CAAC,MAAM;gBACtB,IAAI,EAAE,OAAO,CAAC,IAAI;gBAClB,OAAO;aACR,CAAC,CAAC;YACH,IAAI,CAAC;gBACH,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;gBAC9C,MAAM,IAAI,GAAG,MAAM,UAAU,CAAC,QAAQ,CAAC,CAAC;gBACxC,MAAM,QAAQ,GAAG,gBAAgB,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;gBACrD,IAAI,QAAQ,CAAC,EAAE,EAAE,CAAC;oBAChB,IAAI,CAAC,KAAK,CAAC;wBACT,IAAI,EAAE,mBAAmB;wBACzB,SAAS,EAAE,IAAI,CAAC,IAAI,EAAE;wBACtB,MAAM,EAAE,OAAO,CAAC,MAAM;wBACtB,IAAI,EAAE,OAAO,CAAC,IAAI;wBAClB,OAAO;wBACP,MAAM,EAAE,QAAQ,CAAC,MAAM;wBACvB,UAAU,EAAE,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,SAAS,EAAE,CAAC,CAAC;wBAChD,GAAG,CAAC,QAAQ,CAAC,SAAS,KAAK,SAAS;4BAClC,CAAC,CAAC,EAAE;4BACJ,CAAC,CAAC,EAAE,SAAS,EAAE,QAAQ,CAAC,SAAS,EAAE,CAAC;qBACvC,CAAC,CAAC;oBACH,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,IAAS,EAAE,QAAQ,EAAE,CAAC,CAAC;gBACtD,CAAC;gBACD,IACE,eAAe;oBACf,OAAO,IAAI,OAAO;oBAClB,iBAAiB,CAAC,QAAQ,CAAC,MAAM,CAAC;oBAClC,CAAC,kBAAkB,CAAC,QAAQ,CAAC,EAC7B,CAAC;oBACD,MAAM,IAAI,CAAC,MAAM,CACf,UAAU,CAAC,QAAQ,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,EAC3C,OAAO,CAAC,MAAM,CACf,CAAC;oBACF,SAAS;gBACX,CAAC;gBACD,MAAM,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAC;YAC5C,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,KAAK,GAAG,eAAe,CAAC,KAAK,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;gBACrD,IACE,CAAC,KAAK,YAAY,sBAAsB;oBACtC,KAAK,YAAY,mBAAmB,CAAC;oBACvC,eAAe;oBACf,OAAO,IAAI,OAAO,EAClB,CAAC;oBACD,MAAM,IAAI,CAAC,MAAM,CACf,UAAU,CAAC,SAAS,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,EAC5C,OAAO,CAAC,MAAM,CACf,CAAC;oBACF,SAAS;gBACX,CAAC;gBACD,IAAI,CAAC,KAAK,CAAC;oBACT,IAAI,EAAE,gBAAgB;oBACtB,SAAS,EAAE,IAAI,CAAC,IAAI,EAAE;oBACtB,MAAM,EAAE,OAAO,CAAC,MAAM;oBACtB,IAAI,EAAE,OAAO,CAAC,IAAI;oBAClB,OAAO;oBACP,UAAU,EAAE,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,SAAS,EAAE,CAAC,CAAC;oBAChD,QAAQ,EAAE,KAAK,CAAC,QAAQ;oBACxB,GAAG,CAAC,KAAK,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC;oBAC/D,GAAG,CAAC,KAAK,CAAC,SAAS,KAAK,SAAS;wBAC/B,CAAC,CAAC,EAAE;wBACJ,CAAC,CAAC,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,CAAC;iBACpC,CAAC,CAAC;gBACH,MAAM,KAAK,CAAC;YACd,CAAC;QACH,CAAC;IACH,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,OAAuB;QACpC,cAAc,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QAC/B,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC;QACvC,cAAc,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QAC/B,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QAC7C,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE,kBAAkB,CAAC,CAAC;QAC1C,OAAO,CAAC,GAAG,CAAC,eAAe,EAAE,UAAU,KAAK,EAAE,CAAC,CAAC;QAChD,OAAO,CAAC,GAAG,CAAC,oBAAoB,EAAE,qBAAqB,CAAC,CAAC;QACzD,IAAI,OAAO,CAAC,cAAc,KAAK,SAAS;YACtC,OAAO,CAAC,GAAG,CAAC,iBAAiB,EAAE,OAAO,CAAC,cAAc,CAAC,CAAC;QACzD,MAAM,IAAI,GACR,OAAO,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QACxE,IAAI,IAAI,KAAK,SAAS;YAAE,OAAO,CAAC,GAAG,CAAC,cAAc,EAAE,kBAAkB,CAAC,CAAC;QAExE,MAAM,SAAS,GAAG,eAAe,CAC/B,OAAO,CAAC,SAAS,IAAI,IAAI,CAAC,UAAU,EACpC,WAAW,EACX,KAAK,CACN,CAAC;QACF,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;QACzC,IAAI,QAAQ,GAAG,KAAK,CAAC;QACrB,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;YAC5B,QAAQ,GAAG,IAAI,CAAC;YAChB,UAAU,CAAC,KAAK,EAAE,CAAC;QACrB,CAAC,EAAE,SAAS,CAAC,CAAC;QACd,MAAM,MAAM,GAAG,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAC9D,OAAO,CAAC,MAAM,EAAE,gBAAgB,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QAClE,IAAI,CAAC;YACH,OAAO,MAAM,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,QAAQ,EAAE,OAAO,CAAC,EAAE;gBAC3D,MAAM,EAAE,OAAO,CAAC,MAAM;gBACtB,OAAO;gBACP,GAAG,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC;gBACvC,MAAM,EAAE,UAAU,CAAC,MAAM;aAC1B,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,QAAQ;gBAAE,MAAM,IAAI,cAAc,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;YACzD,MAAM,KAAK,CAAC;QACd,CAAC;gBAAS,CAAC;YACT,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,OAAO,CAAC,MAAM,EAAE,mBAAmB,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QACvD,CAAC;IACH,CAAC;IAED,KAAK,CAAC,KAA6B;QACjC,IAAI,CAAC,aAAa,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;IAC7C,CAAC;CACF;AAED,MAAM,cAAe,SAAQ,KAAK;IAErB;IADX,YACW,SAAiB,EAC1B,KAAc;QAEd,KAAK,CAAC,oBAAoB,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;QAH9B,cAAS,GAAT,SAAS,CAAQ;IAI5B,CAAC;CACF;AAED,SAAS,YAAY,CAAC,IAAY;IAChC,IACE,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;QACrB,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QACrB,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;QACnB,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,EAClB,CAAC;QACD,MAAM,IAAI,sBAAsB,CAC9B,kEAAkE,EAClE,cAAc,CACf,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAS,UAAU,CAAC,OAAe,EAAE,OAAuB;IAC1D,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,OAAO,GAAG,CAAC,CAAC;IACjD,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,IAAI,EAAE,CAAC,EAAE,CAAC;QAC/D,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI;YACvC,GAAG,CAAC,YAAY,CAAC,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;IAChD,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,KAAK,UAAU,UAAU,CAAC,QAAkB;IAC1C,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG;QAAE,OAAO,SAAS,CAAC;IAC9C,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;IACnC,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IACxC,MAAM,WAAW,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC;IAC/D,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,MAAM,CAAC;QAAE,OAAO,IAAI,CAAC;IAC/C,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAY,CAAC;IACrC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,gBAAgB,CACvB,QAAkB,EAClB,QAAgB;IAEhB,MAAM,OAAO,GAA2B,EAAE,CAAC;IAC3C,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;QACtC,OAAO,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;IACvB,CAAC,CAAC,CAAC;IACH,MAAM,SAAS,GACb,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC;QACpC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC;QAClC,SAAS,CAAC;IACZ,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,MAAM,EAAE,QAAQ,CAAC,MAAM;QACvB,QAAQ;QACR,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC;QAC/B,GAAG,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC;KAClD,CAAC,CAAC;AACL,CAAC;AAED,SAAS,SAAS,CAChB,QAAkB,EAClB,OAAgB,EAChB,QAAiC;IAEjC,MAAM,QAAQ,GACZ,QAAQ,CAAC,MAAM,KAAK,GAAG;QACrB,CAAC,CAAC,gBAAgB;QAClB,CAAC,CAAC,QAAQ,CAAC,MAAM,KAAK,GAAG;YACvB,CAAC,CAAC,eAAe;YACjB,CAAC,CAAC,QAAQ,CAAC,MAAM,KAAK,GAAG;gBACvB,CAAC,CAAC,WAAW;gBACb,CAAC,CAAC,QAAQ,CAAC,MAAM,KAAK,GAAG;oBACvB,CAAC,CAAC,UAAU;oBACZ,CAAC,CAAC,QAAQ,CAAC,MAAM,KAAK,GAAG;wBACvB,CAAC,CAAC,YAAY;wBACd,CAAC,CAAC,QAAQ,CAAC,MAAM,IAAI,GAAG;4BACtB,CAAC,CAAC,QAAQ;4BACV,CAAC,CAAC,MAAM,CAAC;IACvB,MAAM,MAAM,GAAG,WAAW,CAAC,OAAO,CAAC,CAAC;IACpC,6EAA6E;IAC7E,MAAM,SAAS,GAAG,MAAM,CAAC,SAAS,IAAI,QAAQ,CAAC,SAAS,CAAC;IACzD,OAAO,IAAI,gBAAgB,CAAC,YAAY,CAAC,OAAO,EAAE,QAAQ,CAAC,MAAM,CAAC,EAAE;QAClE,QAAQ;QACR,MAAM,EAAE,QAAQ,CAAC,MAAM;QACvB,OAAO;QACP,QAAQ;QACR,GAAG,CAAC,MAAM,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC;QAC3D,GAAG,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC;QACjD,GAAG,CAAC,MAAM,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC;KAClE,CAAC,CAAC;AACL,CAAC;AAED,SAAS,WAAW,CAAC,OAAgB;IAKnC,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,KAAK,IAAI;QAAE,OAAO,EAAE,CAAC;IAC/D,MAAM,MAAM,GAAG,OAAkC,CAAC;IAClD,MAAM,KAAK,GACT,OAAO,MAAM,CAAC,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,KAAK,KAAK,IAAI;QACvD,CAAC,CAAE,MAAM,CAAC,KAAiC;QAC3C,CAAC,CAAC,SAAS,CAAC;IAChB,MAAM,IAAI,GAAG,CAAC,KAAc,EAAE,EAAE,CAC9B,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;IACpE,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACpD,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC;IAC1C,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACjC,OAAO;QACL,GAAG,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC;QACvC,GAAG,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC;QACjD,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC;KAC5C,CAAC;AACJ,CAAC;AAED,SAAS,YAAY,CAAC,OAAgB,EAAE,MAAc;IACpD,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;QACpD,MAAM,MAAM,GAAG,OAAkC,CAAC;QAClD,IAAI,OAAO,MAAM,CAAC,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,KAAK,KAAK,IAAI,EAAE,CAAC;YAC9D,MAAM,OAAO,GAAI,MAAM,CAAC,KAAiC,CAAC,OAAO,CAAC;YAClE,IAAI,OAAO,OAAO,KAAK,QAAQ;gBAAE,OAAO,OAAO,CAAC;QAClD,CAAC;QACD,IAAI,OAAO,MAAM,CAAC,OAAO,KAAK,QAAQ;YAAE,OAAO,MAAM,CAAC,OAAO,CAAC;QAC9D,IAAI,OAAO,MAAM,CAAC,KAAK,KAAK,QAAQ;YAAE,OAAO,MAAM,CAAC,KAAK,CAAC;IAC5D,CAAC;IACD,OAAO,gDAAgD,MAAM,GAAG,CAAC;AACnE,CAAC;AAED,SAAS,eAAe,CACtB,KAAc,EACd,MAA+B;IAE/B,IAAI,KAAK,YAAY,YAAY;QAAE,OAAO,KAAK,CAAC;IAChD,IAAI,MAAM,EAAE,OAAO,KAAK,IAAI,EAAE,CAAC;QAC7B,OAAO,IAAI,qBAAqB,CAAC,oCAAoC,EAAE;YACrE,QAAQ,EAAE,WAAW;YACrB,KAAK;SACN,CAAC,CAAC;IACL,CAAC;IACD,IAAI,KAAK,YAAY,cAAc,EAAE,CAAC;QACpC,OAAO,IAAI,mBAAmB,CAC5B,oCAAoC,KAAK,CAAC,SAAS,aAAa,EAChE;YACE,QAAQ,EAAE,SAAS;YACnB,KAAK;SACN,CACF,CAAC;IACJ,CAAC;IACD,OAAO,IAAI,sBAAsB,CAC/B,wDAAwD,EACxD;QACE,QAAQ,EAAE,YAAY;QACtB,KAAK;KACN,CACF,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,SAAS,kBAAkB,CAAC,QAAkB;IAC5C,OAAO,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAC,KAAK,MAAM,CAAC;AAChE,CAAC;AAED,SAAS,iBAAiB,CAAC,MAAc;IACvC,OAAO,MAAM,KAAK,GAAG,IAAI,MAAM,KAAK,GAAG,IAAI,MAAM,KAAK,GAAG,IAAI,MAAM,IAAI,GAAG,CAAC;AAC7E,CAAC;AAED,SAAS,UAAU,CACjB,QAA8B,EAC9B,OAAe,EACf,MAAoB;IAEpB,MAAM,UAAU,GAAG,QAAQ,EAAE,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;IACxD,IAAI,UAAU,KAAK,SAAS,IAAI,UAAU,KAAK,IAAI,EAAE,CAAC;QACpD,MAAM,OAAO,GAAG,MAAM,CAAC,UAAU,CAAC,CAAC;QACnC,IAAI,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,OAAO,IAAI,CAAC;YAC1C,OAAO,IAAI,CAAC,GAAG,CAAC,OAAO,GAAG,KAAK,EAAE,MAAM,CAAC,CAAC;IAC7C,CAAC;IACD,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,GAAG,CAAC,EAAE,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;IACrE,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,GAAG,CAAC,GAAG,GAAG,MAAM,EAAE,GAAG,GAAG,CAAC,CAAC,CAAC;AACtD,CAAC;AAED,KAAK,UAAU,YAAY,CACzB,YAAoB,EACpB,MAAoB;IAEpB,IAAI,MAAM,EAAE,OAAO,KAAK,IAAI;QAAE,MAAM,MAAM,CAAC,MAAM,CAAC;IAClD,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QAC1C,MAAM,MAAM,GAAG,GAAG,EAAE;YAClB,MAAM,EAAE,mBAAmB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;YAC5C,OAAO,EAAE,CAAC;QACZ,CAAC,CAAC;QACF,MAAM,KAAK,GAAG,UAAU,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;QAC/C,MAAM,KAAK,GAAG,GAAG,EAAE;YACjB,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QACzB,CAAC,CAAC;QACF,MAAM,EAAE,gBAAgB,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;IAC3D,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,eAAe,CACtB,KAAa,EACb,KAAa,EACb,SAAkB;IAElB,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,IAAI,CAAC,CAAC,SAAS,IAAI,KAAK,KAAK,CAAC,CAAC,EAAE,CAAC;QACzE,MAAM,IAAI,sBAAsB,CAC9B,GAAG,KAAK,YAAY,SAAS,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,YAAY,WAAW,CAC3E,CAAC;IACJ,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,cAAc,CAAC,MAA+B;IACrD,IAAI,MAAM,EAAE,OAAO,KAAK,IAAI;QAAE,MAAM,MAAM,CAAC,MAAM,CAAC;AACpD,CAAC"}

package/package.json

@@ -0,0 +1,45 @@
+{
+  "name": "@polymorfa/browser",
+  "version": "0.1.0-dev.20260922094209",
+  "description": "Framework-neutral Polymorfa browser transport and product controllers",
+  "type": "module",
+  "license": "MIT",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/polymorfa/sdks.git",
+    "directory": "packages/browser"
+  },
+  "bugs": {
+    "url": "https://github.com/polymorfa/sdks/issues"
+  },
+  "homepage": "https://github.com/polymorfa/sdks#readme",
+  "sideEffects": false,
+  "dependencies": {
+    "@polymorfa/sdk": "0.1.0-dev.20260922094209"
+  },
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js"
+    },
+    "./internal": {
+      "types": "./dist/internal.d.ts",
+      "import": "./dist/internal.js"
+    }
+  },
+  "files": [
+    "dist",
+    "README.md",
+    "LICENSE"
+  ],
+  "scripts": {
+    "build": "tsc -p tsconfig.build.json",
+    "typecheck": "tsc -p tsconfig.json --noEmit"
+  },
+  "publishConfig": {
+    "access": "public",
+    "provenance": true
+  }
+}