@qlik/api 1.16.0 → 1.17.0

package/api-keys.d.ts

@@ -1,4 +1,4 @@
-import { A as ApiCallOptions } from './global.types-z1p6A9D-.js';
+import { A as ApiCallOptions } from './global.types-BU2Yugjm.js';
 import './auth-types-BU5EGt_9.js';
 
 type ApiKey = {
@@ -16,7 +16,7 @@ type ApiKey = {
     readonly lastUpdated?: string;
     /** The status of the API key. */
     status: "active" | "expired" | "revoked";
-    /** The ID of the subject for the API key. For SCIM the format is `SCIM\\{{IDP-ID}}`, where `{{IDP-ID}}` is the ID of the IDP in Qlik. */
+    /** The ID of the subject for the API key. For SCIM the format is `SCIM\\{{IDP-ID}}`, where `{{IDP-ID}}` is the ID of the IDP in Qlik. For users, use their user ID, e.g. `64ef645a3b7009d55dee5a2b`. */
     sub: string;
     /** Type of the subject. For SCIM, it should be `externalClient`. */
     subType: "user" | "externalClient";
@@ -26,11 +26,11 @@ type ApiKey = {
 type ApiKeyBody = {
     /** Text that describes the API key. */
     description: string;
-    /** The expiry of the API key, in ISO8601 duration format. */
+    /** The expiry of the API key, in ISO8601 duration format. For example, `P7D` sets expiry after 7 days. If not provided, defaults to the maximum API key or SCIM key expiry configured in the tenant. */
     expiry?: string;
-    /** The ID of the subject for the API key. For SCIM the format is `SCIM\\{{IDP-ID}}`, where `{{IDP-ID}}` is the ID of the IDP in Qlik. */
+    /** The ID of the subject for the API key. For SCIM the format is `SCIM\\{{IDP-ID}}`, where `{{IDP-ID}}` is the ID of the IDP in Qlik. When creating an API key for a user, this is their user ID, e.g. `64ef645a3b7009d55dee5a2b`, and will default to the requesting user if not provided. User must be assigned the `Developer` role. */
     sub?: string;
-    /** Type of the subject. For SCIM, it should be `externalClient`. */
+    /** Type of the subject. For SCIM, it should be `externalClient`. If not specified, defaults to `user`. */
     subType?: "user" | "externalClient";
 };
 /**
@@ -40,7 +40,7 @@ type ApiKeyConfigPatch = {
     /** The operation to be performed. */
     op: "replace";
     /** The path for the given resource field to patch. */
-    path: "/api_keys_enabled" | "/max_api_key_expiry" | "/max_keys_per_user";
+    path: "/api_keys_enabled" | "/max_api_key_expiry" | "/max_keys_per_user" | "/scim_externalClient_expiry";
     /** The value to be used for this operation. */
     value: unknown;
 };
@@ -80,12 +80,14 @@ type ApiKeyWithToken = {
     token: string;
 };
 type ApiKeysConfig = {
-    /** Enables or disables API key functionality for the specified tenant. */
+    /** Enables or disables user API key functionality for the specified tenant. */
     api_keys_enabled?: boolean;
-    /** The maximum lifetime, in ISO8601 duration format, for which an API key can be issued for the specified tenant. */
+    /** The maximum lifetime, in ISO8601 duration format, for which an API key can be issued for the specified tenant, e.g. `P7D` for 7 days. */
     max_api_key_expiry?: string;
     /** The maximum number of active API keys that any user can create for the specified tenant. */
     max_keys_per_user?: number;
+    /** The expiry of the scim `externalClient` token in ISO8601 duration format, e.g. `P365D` for 365 days. Used during the creation of an `externalClient` API key for configuring a SCIM compatible Identity Provider. */
+    scim_externalClient_expiry?: string;
 };
 type ApiKeysConfigPatchSchema = ApiKeyConfigPatch[];
 type ApiKeysPatchSchema = ApiKeyPatch[];
@@ -130,7 +132,7 @@ type ApiKeyPage = {
     };
 };
 /**
- * Lists API keys for a given tenant ID.
+ * Lists API keys for the tenant. To list API keys owned by other users, requesting user must be assigned the `TenantAdmin` role.
  *
  * @param query an object with query parameters
  * @throws GetApiKeysHttpError
@@ -148,7 +150,7 @@ declare const getApiKeys: (query: {
     startingAfter?: string;
     /** The status of the API key. */
     status?: "active" | "expired" | "revoked";
-    /** The ID of the subject. */
+    /** The ID of the subject. For SCIM the format is `SCIM\\{{IDP-ID}}`, where `{{IDP-ID}}` is the ID of the IDP in Qlik. For users, use their user ID, e.g. `64ef645a3b7009d55dee5a2b`. */
     sub?: string;
 }, options?: ApiCallOptions) => Promise<GetApiKeysHttpResponse>;
 type GetApiKeysHttpResponse = {
@@ -164,7 +166,8 @@ type GetApiKeysHttpError = {
     status: number;
 };
 /**
- * Creates an API key resource.
+ * Creates an API key, either for a user, or for configuring SCIM for a compatible Identity Provider.
+ * Sending `sub` and `subType` is required only for creating SCIM keys.
  *
  * @param body an object with the body content
  * @throws CreateApiKeyHttpError
@@ -181,9 +184,9 @@ type CreateApiKeyHttpError = {
     status: number;
 };
 /**
- * Gets the API keys configuration for a given tenant ID.
+ * Retrieves the API key configuration for a tenant.
  *
- * @param tenantId The tenant ID of the API keys configuration to be retrieved.
+ * @param tenantId The tenant ID from which you wish to retrieve the API key configuration.
  * @throws GetApiKeysConfigHttpError
  */
 declare const getApiKeysConfig: (tenantId: string, options?: ApiCallOptions) => Promise<GetApiKeysConfigHttpResponse>;
@@ -216,9 +219,9 @@ type PatchApiKeysConfigHttpError = {
     status: number;
 };
 /**
- * When the owner of the API key sends the request, the key will be removed. When a TenantAdmin sends the request, the key will be revoked.
+ * Deletes or revokes an API key for a given API key ID. When the owner of the API key sends the request, the key will be deleted and removed from the tenant. When a user assigned the `TenantAdmin` role sends the request, the key will be disabled and marked as revoked.
  *
- * @param id The ID of the API key resource to be retrieved.
+ * @param id The ID of the API key to be retrieved.
  * @throws DeleteApiKeyHttpError
  */
 declare const deleteApiKey: (id: string, options?: ApiCallOptions) => Promise<DeleteApiKeyHttpResponse>;
@@ -233,9 +236,9 @@ type DeleteApiKeyHttpError = {
     status: number;
 };
 /**
- * Gets the API key for a given ID.
+ * Returns the API key for a given API key ID.
  *
- * @param id The ID of the API key resource to be retrieved.
+ * @param id The ID of the API key to be retrieved.
  * @throws GetApiKeyHttpError
  */
 declare const getApiKey: (id: string, options?: ApiCallOptions) => Promise<GetApiKeyHttpResponse>;
@@ -250,7 +253,7 @@ type GetApiKeyHttpError = {
     status: number;
 };
 /**
- * Updates an API key for a given ID.
+ * Updates an API key description for a given API key ID.
  *
  * @param id The ID of the API key resource to be updated.
  * @param body an object with the body content
@@ -273,23 +276,24 @@ type PatchApiKeyHttpError = {
 declare function clearCache(): void;
 interface ApiKeysAPI {
     /**
-     * Lists API keys for a given tenant ID.
+     * Lists API keys for the tenant. To list API keys owned by other users, requesting user must be assigned the `TenantAdmin` role.
      *
      * @param query an object with query parameters
      * @throws GetApiKeysHttpError
      */
     getApiKeys: typeof getApiKeys;
     /**
-     * Creates an API key resource.
+     * Creates an API key, either for a user, or for configuring SCIM for a compatible Identity Provider.
+     * Sending `sub` and `subType` is required only for creating SCIM keys.
      *
      * @param body an object with the body content
      * @throws CreateApiKeyHttpError
      */
     createApiKey: typeof createApiKey;
     /**
-     * Gets the API keys configuration for a given tenant ID.
+     * Retrieves the API key configuration for a tenant.
      *
-     * @param tenantId The tenant ID of the API keys configuration to be retrieved.
+     * @param tenantId The tenant ID from which you wish to retrieve the API key configuration.
      * @throws GetApiKeysConfigHttpError
      */
     getApiKeysConfig: typeof getApiKeysConfig;
@@ -302,21 +306,21 @@ interface ApiKeysAPI {
      */
     patchApiKeysConfig: typeof patchApiKeysConfig;
     /**
-     * When the owner of the API key sends the request, the key will be removed. When a TenantAdmin sends the request, the key will be revoked.
+     * Deletes or revokes an API key for a given API key ID. When the owner of the API key sends the request, the key will be deleted and removed from the tenant. When a user assigned the `TenantAdmin` role sends the request, the key will be disabled and marked as revoked.
      *
-     * @param id The ID of the API key resource to be retrieved.
+     * @param id The ID of the API key to be retrieved.
      * @throws DeleteApiKeyHttpError
      */
     deleteApiKey: typeof deleteApiKey;
     /**
-     * Gets the API key for a given ID.
+     * Returns the API key for a given API key ID.
      *
-     * @param id The ID of the API key resource to be retrieved.
+     * @param id The ID of the API key to be retrieved.
      * @throws GetApiKeyHttpError
      */
     getApiKey: typeof getApiKey;
     /**
-     * Updates an API key for a given ID.
+     * Updates an API key description for a given API key ID.
      *
      * @param id The ID of the API key resource to be updated.
      * @param body an object with the body content

package/api-keys.js

@@ -1,8 +1,8 @@
 import {
   clearApiCache,
   invokeFetch
-} from "./chunks/MFNOHOWH.js";
-import "./chunks/7IMOYFWE.js";
+} from "./chunks/5W53XSXH.js";
+import "./chunks/NJRTJEAQ.js";
 import "./chunks/2ZQ3ZX7F.js";
 
 // src/public/rest/api-keys.ts

package/apps.d.ts

@@ -1,4 +1,4 @@
-import { A as ApiCallOptions, D as DownloadableBlob } from './global.types-z1p6A9D-.js';
+import { A as ApiCallOptions, D as DownloadableBlob } from './global.types-BU2Yugjm.js';
 import './auth-types-BU5EGt_9.js';
 
 type Analysis = "breakdown" | "changePoint" | "comparison" | "contribution" | "correlation" | "fact" | "mutualInfo" | "rank" | "spike" | "trend" | "values";

package/apps.js

@@ -1,8 +1,8 @@
 import {
   clearApiCache,
   invokeFetch
-} from "./chunks/MFNOHOWH.js";
-import "./chunks/7IMOYFWE.js";
+} from "./chunks/5W53XSXH.js";
+import "./chunks/NJRTJEAQ.js";
 import "./chunks/2ZQ3ZX7F.js";
 
 // src/public/rest/apps.ts

package/audits.d.ts

@@ -1,4 +1,4 @@
-import { A as ApiCallOptions } from './global.types-z1p6A9D-.js';
+import { A as ApiCallOptions } from './global.types-BU2Yugjm.js';
 import './auth-types-BU5EGt_9.js';
 
 type ErrorResponse = {

package/audits.js

@@ -1,8 +1,8 @@
 import {
   clearApiCache,
   invokeFetch
-} from "./chunks/MFNOHOWH.js";
-import "./chunks/7IMOYFWE.js";
+} from "./chunks/5W53XSXH.js";
+import "./chunks/NJRTJEAQ.js";
 import "./chunks/2ZQ3ZX7F.js";
 
 // src/public/rest/audits.ts

package/auth.js

@@ -4,8 +4,8 @@ import {
   logout,
   registerAuthModule,
   setDefaultHostConfig
-} from "./chunks/6O3XBOLZ.js";
-import "./chunks/7IMOYFWE.js";
+} from "./chunks/AVML2WPM.js";
+import "./chunks/NJRTJEAQ.js";
 export {
   auth_default as default,
   getAccessToken,

package/automations.d.ts

@@ -1,4 +1,4 @@
-import { A as ApiCallOptions } from './global.types-z1p6A9D-.js';
+import { A as ApiCallOptions } from './global.types-BU2Yugjm.js';
 import './auth-types-BU5EGt_9.js';
 
 type AutomationDetailRequestObject = {

package/automations.js

@@ -1,8 +1,8 @@
 import {
   clearApiCache,
   invokeFetch
-} from "./chunks/MFNOHOWH.js";
-import "./chunks/7IMOYFWE.js";
+} from "./chunks/5W53XSXH.js";
+import "./chunks/NJRTJEAQ.js";
 import "./chunks/2ZQ3ZX7F.js";
 
 // src/public/rest/automations.ts

package/brands.d.ts

@@ -1,4 +1,4 @@
-import { A as ApiCallOptions, D as DownloadableBlob } from './global.types-z1p6A9D-.js';
+import { A as ApiCallOptions, D as DownloadableBlob } from './global.types-BU2Yugjm.js';
 import './auth-types-BU5EGt_9.js';
 
 /**

package/brands.js

@@ -1,8 +1,8 @@
 import {
   clearApiCache,
   invokeFetch
-} from "./chunks/MFNOHOWH.js";
-import "./chunks/7IMOYFWE.js";
+} from "./chunks/5W53XSXH.js";
+import "./chunks/NJRTJEAQ.js";
 import "./chunks/2ZQ3ZX7F.js";
 
 // src/public/rest/brands.ts

package/chunks/{MFNOHOWH.js → 5W53XSXH.js}

@@ -1,12 +1,12 @@
 import {
   getInvokeFetchRuntimeModule
-} from "./7IMOYFWE.js";
+} from "./NJRTJEAQ.js";
 import {
   isBrowser
 } from "./2ZQ3ZX7F.js";
 
 // src/public/invoke-fetch.ts
-var defaultUserAgent = "qlik-api/1.16.0";
+var defaultUserAgent = "qlik-api/1.17.0";
 async function invokeFetch(api, props) {
   const hostConfig = props.options?.hostConfig;
   let userAgent;

package/chunks/{O3XVX7VQ.js → 6MPNTVLD.js}

@@ -4,7 +4,7 @@ import {
   getRestCallAuthParams,
   getWebSocketAuthParams,
   toValidWebsocketLocationUrl
-} from "./3XRP5N4L.js";
+} from "./HFUVFYT4.js";
 import {
   isBrowser,
   isNode

package/chunks/{6O3XBOLZ.js → AVML2WPM.js}

@@ -1,6 +1,6 @@
 import {
   getAuthRuntimeModule
-} from "./7IMOYFWE.js";
+} from "./NJRTJEAQ.js";
 
 // src/public/auth.ts
 function registerAuthModule(name, authModule) {

package/chunks/{TBHMVTOT.js → GLS4DAZ4.js}

@@ -1,4 +1,4 @@
-// node_modules/.pnpm/@qlik+runtime-module-loader@1.0.8/node_modules/@qlik/runtime-module-loader/dist/index.js
+// node_modules/.pnpm/@qlik+runtime-module-loader@1.0.10/node_modules/@qlik/runtime-module-loader/dist/index.js
 window.__qlikMainPrivateResolvers = window.__qlikMainPrivateResolvers || {};
 window.__qlikMainPrivateResolvers.mainUrlPromise = window.__qlikMainPrivateResolvers.mainUrlPromise || new Promise((resolve) => {
   window.__qlikMainPrivateResolvers.resolveMainJsUrl = (value) => resolve(value);

package/chunks/{3XRP5N4L.js → HFUVFYT4.js}

@@ -792,7 +792,61 @@ async function refreshAccessToken(hostConfig) {
   }
 }
 
+// src/auth/internal/default-auth-modules/oauth/temporary-token.ts
+async function exchangeAccessTokenForTemporaryToken(hostConfig, accessToken, purpose) {
+  const response = await fetch(`${toValidLocationUrl(hostConfig)}/oauth/token`, {
+    method: "POST",
+    credentials: "include",
+    mode: "cors",
+    headers: { "content-type": "application/json" },
+    redirect: "follow",
+    body: JSON.stringify({
+      subject_token: accessToken,
+      subject_token_type: "urn:ietf:params:oauth:token-type:access_token",
+      grant_type: "urn:ietf:params:oauth:grant-type:token-exchange",
+      purpose,
+      redirect_uri: globalThis.location?.href,
+      client_id: hostConfig.clientId
+    })
+  });
+  if (response.status !== 200) {
+    throw await toError(response);
+  }
+  const data = await response.json();
+  return data.access_token;
+}
+async function toError(response) {
+  const body = await response.text();
+  try {
+    const data = JSON.parse(body);
+    return new AuthorizationError(data.errors);
+  } catch (err) {
+    return new AuthorizationError([
+      {
+        code: "unknown",
+        status: response.status,
+        detail: body,
+        title: "Unknown authentication error"
+      }
+    ]);
+  }
+}
+
 // src/auth/internal/default-auth-modules/anonymous.ts
+async function handlePotentialAuthenticationErrorAndRetry(hostConfig, fn) {
+  try {
+    return await fn();
+  } catch (err) {
+    const { retry } = await handleAuthenticationError2({
+      hostConfig,
+      canRetry: true
+    });
+    if (retry) {
+      return fn();
+    }
+    throw err;
+  }
+}
 async function getOrCreateTrackingCode(hostConfig) {
   let trackingCode;
   if (isBrowser()) {
@@ -809,7 +863,7 @@ async function getOrCreateTrackingCode(hostConfig) {
 }
 function createTrackingCode() {
   const timeStamp = Math.floor(Date.now() / 1e3).toString(16);
-  const randomString = generateRandomHexString(20);
+  const randomString = generateRandomHexString(40 - timeStamp.length);
   return `${timeStamp}${randomString}`;
 }
 async function getAnonymousAccessToken(hostConfig) {
@@ -849,20 +903,26 @@ async function getRestCallAuthParams2({
 async function getWebSocketAuthParams2({
   hostConfig
 }) {
-  const accessToken = await getAnonymousAccessToken(hostConfig);
+  const websocketAccessToken = await handlePotentialAuthenticationErrorAndRetry(hostConfig, async () => {
+    const accessToken = await getAnonymousAccessToken(hostConfig);
+    return exchangeAccessTokenForTemporaryToken(hostConfig, accessToken, "websocket");
+  });
   return {
     queryParams: {
-      accessToken
+      accessToken: websocketAccessToken
     }
   };
 }
 async function getWebResourceAuthParams2({
   hostConfig
 }) {
-  const accessToken = await getAnonymousAccessToken(hostConfig);
+  const websocketResourceAccessToken = await handlePotentialAuthenticationErrorAndRetry(hostConfig, async () => {
+    const accessToken = await getAnonymousAccessToken(hostConfig);
+    return exchangeAccessTokenForTemporaryToken(hostConfig, accessToken, "websocket");
+  });
   return {
     queryParams: {
-      accessToken
+      accessToken: websocketResourceAccessToken
     }
   };
 }
@@ -1009,7 +1069,7 @@ var cookie_default = {
   handleAuthenticationError: handleAuthenticationError4,
   validateHostConfig: (hostConfig) => internalValidateHostConfig(hostConfig, {
     requiredProps: [],
-    optionalProps: ["webIntegrationId", "crossSiteCookies"]
+    optionalProps: ["webIntegrationId", "crossSiteCookies", "anonymousMode"]
   })
 };
 
@@ -1059,51 +1119,11 @@ function handleOAuthCallback() {
   }
 }
 
-// src/auth/internal/default-auth-modules/oauth/temporary-token.ts
-async function exchangeAccessTokenForTemporaryToken(hostConfig, accessToken, purpose) {
-  const response = await fetch(`${toValidLocationUrl(hostConfig)}/oauth/token`, {
-    method: "POST",
-    credentials: "include",
-    mode: "cors",
-    headers: { "content-type": "application/json" },
-    redirect: "follow",
-    body: JSON.stringify({
-      subject_token: accessToken,
-      subject_token_type: "urn:ietf:params:oauth:token-type:access_token",
-      grant_type: "urn:ietf:params:oauth:grant-type:token-exchange",
-      purpose,
-      redirect_uri: globalThis.location?.href,
-      client_id: hostConfig.clientId
-    })
-  });
-  if (response.status !== 200) {
-    throw await toError(response);
-  }
-  const data = await response.json();
-  return data.access_token;
-}
-async function toError(response) {
-  const body = await response.text();
-  try {
-    const data = JSON.parse(body);
-    return new AuthorizationError(data.errors);
-  } catch (err) {
-    return new AuthorizationError([
-      {
-        code: "unknown",
-        status: response.status,
-        detail: body,
-        title: "Unknown authentication error"
-      }
-    ]);
-  }
-}
-
 // src/auth/internal/default-auth-modules/oauth.ts
 if (isBrowser()) {
   handleOAuthCallback();
 }
-async function handlePotentialAuthenticationErrorAndRetry(hostConfig, fn) {
+async function handlePotentialAuthenticationErrorAndRetry2(hostConfig, fn) {
   try {
     return await fn();
   } catch (err) {
@@ -1131,7 +1151,7 @@ async function getRestCallAuthParams6({
 async function getWebSocketAuthParams6({
   hostConfig
 }) {
-  const websocketAccessToken = await handlePotentialAuthenticationErrorAndRetry(hostConfig, async () => {
+  const websocketAccessToken = await handlePotentialAuthenticationErrorAndRetry2(hostConfig, async () => {
     const accessToken = await getOAuthAccessToken(hostConfig);
     return exchangeAccessTokenForTemporaryToken(hostConfig, accessToken, "websocket");
   });
@@ -1144,7 +1164,7 @@ async function getWebSocketAuthParams6({
 async function getWebResourceAuthParams3({
   hostConfig
 }) {
-  const webResourceAccessToken = await handlePotentialAuthenticationErrorAndRetry(hostConfig, async () => {
+  const webResourceAccessToken = await handlePotentialAuthenticationErrorAndRetry2(hostConfig, async () => {
     const accessToken = await getOAuthAccessToken(hostConfig);
     return exchangeAccessTokenForTemporaryToken(hostConfig, accessToken, "webresource");
   });

package/chunks/{GXMVBX45.js → JBH4H34J.js}

@@ -1,6 +1,6 @@
 import {
   getQixRuntimeModule
-} from "./7IMOYFWE.js";
+} from "./NJRTJEAQ.js";
 
 // src/public/qix.ts
 function openAppSession(appSessionProps) {

package/chunks/{ECWQX4IH.js → NJFCE5EM.js}

@@ -5,7 +5,7 @@ import {
   invokeFetch,
   invoke_fetch_default,
   parseFetchResponse
-} from "./3XRP5N4L.js";
+} from "./HFUVFYT4.js";
 import "./2ZQ3ZX7F.js";
 export {
   EncodingError,

package/chunks/{7IMOYFWE.js → NJRTJEAQ.js}

@@ -1,21 +1,21 @@
 // src/public/public-runtime-modules.ts
 function getAuthRuntimeModule(hostConfig) {
   const isNode = !!globalThis.process?.argv;
-  return isNode ? import("./PESPSFQN.js") : import("./TBHMVTOT.js").then(
+  return isNode ? import("./RWQS4ASJ.js") : import("./GLS4DAZ4.js").then(
     (mod) => mod.importRuntimeModule("auth@v1", hostConfig)
   );
 }
 async function getQixRuntimeModule(hostConfig) {
   await getAuthRuntimeModule(hostConfig);
   const isNode = !!globalThis.process?.argv;
-  return isNode ? import("./YHKRUQRS.js") : import("./TBHMVTOT.js").then(
+  return isNode ? import("./S5OMX5JT.js") : import("./GLS4DAZ4.js").then(
     (mod) => mod.importRuntimeModule("qix@v1", hostConfig)
   );
 }
 async function getInvokeFetchRuntimeModule(hostConfig) {
   await getAuthRuntimeModule(hostConfig);
   const isNode = !!globalThis.process?.argv;
-  return isNode ? import("./ECWQX4IH.js") : import("./TBHMVTOT.js").then(
+  return isNode ? import("./NJFCE5EM.js") : import("./GLS4DAZ4.js").then(
     (mod) => mod.importRuntimeModule("invoke-fetch@v1", hostConfig)
   );
 }

package/chunks/{PESPSFQN.js → RWQS4ASJ.js}

@@ -18,7 +18,7 @@ import {
   toValidEnigmaLocationUrl,
   toValidLocationUrl,
   toValidWebsocketLocationUrl
-} from "./3XRP5N4L.js";
+} from "./HFUVFYT4.js";
 import "./2ZQ3ZX7F.js";
 export {
   AuthorizationError,

package/chunks/{YHKRUQRS.js → S5OMX5JT.js}

@@ -4,7 +4,7 @@ import {
   invokeFetch,
   isWindows,
   toValidWebsocketLocationUrl
-} from "./3XRP5N4L.js";
+} from "./HFUVFYT4.js";
 import {
   isBrowser
 } from "./2ZQ3ZX7F.js";
@@ -101,7 +101,7 @@ function listenForWindowsAuthenticationInformation(session) {
   return authSuggestedInWebsocket;
 }
 async function createAndSetupEnigmaSession(props, canRetry) {
-  const { createEnigmaSession } = await import("./O3XVX7VQ.js");
+  const { createEnigmaSession } = await import("./6MPNTVLD.js");
   const session = await createEnigmaSession(props);
   setupSessionListeners(session, props);
   let global;
@@ -449,6 +449,72 @@ function getOrCreateSharedSession(props) {
   sharedSessions[key] = sharedSessions[key] || createSharedSession(props);
   return sharedSessions[key];
 }
+function getExternalSession(externalApp, appSessionProps) {
+  const listeners = /* @__PURE__ */ new Set();
+  const appSession = {
+    _listeners: listeners,
+    getDoc: () => externalApp,
+    onWebSocketEvent: (fn) => () => {
+      appSession._listeners.add(fn);
+      return () => {
+        appSession._listeners.delete(fn);
+      };
+    },
+    resume: () => Promise.resolve(),
+    close: () => Promise.resolve()
+  };
+  const triggerEventListeners = (event) => {
+    for (const fn of globalEventListeners) {
+      fn(event);
+    }
+    for (const fn of appSession._listeners) {
+      fn(event);
+    }
+  };
+  externalApp.then((app) => {
+    app.session.on("opened", (event) => {
+      const wsEvent = {
+        eventType: "opened",
+        ...appSessionProps,
+        ...event
+      };
+      triggerEventListeners(wsEvent);
+    });
+    app.session.on("closed", (event) => {
+      const wsEvent = {
+        eventType: "closed",
+        ...appSessionProps,
+        ...event
+      };
+      triggerEventListeners(wsEvent);
+    });
+    app.session.on("suspended", (event) => {
+      const wsEvent = {
+        eventType: "suspended",
+        ...appSessionProps,
+        ...event
+      };
+      triggerEventListeners(wsEvent);
+    });
+    app.session.on("resuming", (event) => {
+      const wsEvent = {
+        eventType: "resuming",
+        ...appSessionProps,
+        ...event
+      };
+      triggerEventListeners(wsEvent);
+    });
+    app.session.on("resumed", (event) => {
+      const wsEvent = {
+        eventType: "resumed",
+        ...appSessionProps,
+        ...event
+      };
+      triggerEventListeners(wsEvent);
+    });
+  });
+  return appSession;
+}
 
 // src/qix/qix-functions.ts
 async function createSessionApp() {
@@ -491,13 +557,7 @@ function openAppSession(appIdOrProps) {
   const appSessionId = toGlobalAppSessionId(appSessionProps);
   const externalApp = externalApps[appSessionId];
   if (externalApp) {
-    return {
-      getDoc: () => externalApp,
-      onWebSocketEvent: (fn) => () => {
-      },
-      resume: () => Promise.resolve(),
-      close: () => Promise.resolve()
-    };
+    return getExternalSession(externalApp, appSessionProps);
   }
   const sharedSession = getOrCreateSharedSession(appSessionProps);
   const listeners = /* @__PURE__ */ new Set();