@raft-tech/rdp-sdk-typescript 2026.26.0

package/dist/src/internal/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/internal/index.ts"],"names":[],"mappings":"AAAA,YAAY,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EACL,KAAK,YAAY,EACjB,KAAK,YAAY,EACjB,KAAK,aAAa,EAClB,iBAAiB,EACjB,4BAA4B,EAC5B,oBAAoB,EACpB,YAAY,GACb,MAAM,WAAW,CAAC;AACnB,OAAO,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AAC3E,OAAO,EACL,iBAAiB,EACjB,WAAW,EACX,eAAe,GAChB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,KAAK,MAAM,EACX,KAAK,OAAO,EACZ,UAAU,EACV,qBAAqB,EACrB,UAAU,EACV,WAAW,EACX,cAAc,GACf,MAAM,cAAc,CAAC;AACtB,OAAO,EACL,kBAAkB,EAClB,KAAK,SAAS,EACd,KAAK,SAAS,EACd,UAAU,EACV,cAAc,GACf,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC"}

package/dist/src/internal/index.js

@@ -0,0 +1,7 @@
+export { apiKeyInterceptor, clientCredentialsInterceptor, userAgentInterceptor, validateAuth, } from "./auth.js";
+export { loggingInterceptor, timeoutInterceptor } from "./interceptors.js";
+export { buildInterceptors, resolveArgs, resolveEndpoint, } from "./transport.js";
+export { WithAPIKey, WithClientCredentials, WithLogger, WithTimeout, defaultOptions, } from "./options.js";
+export { DEFAULT_SERVER_URL, fromConfig, validateConfig, } from "./config.js";
+export { VERSION } from "./version.js";
+//# sourceMappingURL=index.js.map

package/dist/src/internal/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/internal/index.ts"],"names":[],"mappings":"AACA,OAAO,EAIL,iBAAiB,EACjB,4BAA4B,EAC5B,oBAAoB,EACpB,YAAY,GACb,MAAM,WAAW,CAAC;AACnB,OAAO,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AAC3E,OAAO,EACL,iBAAiB,EACjB,WAAW,EACX,eAAe,GAChB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAGL,UAAU,EACV,qBAAqB,EACrB,UAAU,EACV,WAAW,EACX,cAAc,GACf,MAAM,cAAc,CAAC;AACtB,OAAO,EACL,kBAAkB,EAGlB,UAAU,EACV,cAAc,GACf,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC"}

package/dist/src/internal/interceptors.d.ts

@@ -0,0 +1,18 @@
+import type { Interceptor } from "@connectrpc/connect";
+import type { Logger } from "./logger.js";
+/**
+ * ConnectRPC interceptor that logs request/response lifecycle events.
+ * Requests and responses are logged at DEBUG, errors at ERROR. When the
+ * logger is silent (default), this is effectively free.
+ */
+export declare function loggingInterceptor(logger: Logger): Interceptor;
+/**
+ * ConnectRPC interceptor that applies an opt-in ceiling to unary RPC calls.
+ * Streaming RPCs are not affected — they are long-lived by design. When
+ * timeoutMs is unset or non-positive, the interceptor is a pass-through and
+ * any caller-supplied AbortSignal on the request wins.
+ *
+ * Uses AbortSignal.timeout() to race the RPC against the deadline.
+ */
+export declare function timeoutInterceptor(timeoutMs?: number): Interceptor;
+//# sourceMappingURL=interceptors.d.ts.map

package/dist/src/internal/interceptors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"interceptors.d.ts","sourceRoot":"","sources":["../../../src/internal/interceptors.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AACvD,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAE1C;;;;GAIG;AACH,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,MAAM,GAAG,WAAW,CAa9D;AAED;;;;;;;GAOG;AACH,wBAAgB,kBAAkB,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,WAAW,CAmClE"}

package/dist/src/internal/interceptors.js

@@ -0,0 +1,56 @@
+/**
+ * ConnectRPC interceptor that logs request/response lifecycle events.
+ * Requests and responses are logged at DEBUG, errors at ERROR. When the
+ * logger is silent (default), this is effectively free.
+ */
+export function loggingInterceptor(logger) {
+    return (next) => async (req) => {
+        const procedure = `${req.service.typeName}/${req.method.name}`;
+        logger.debug({ procedure }, "rpc request");
+        try {
+            const res = await next(req);
+            logger.debug({ procedure }, "rpc response");
+            return res;
+        }
+        catch (err) {
+            logger.error({ procedure, error: String(err) }, "rpc error");
+            throw err;
+        }
+    };
+}
+/**
+ * ConnectRPC interceptor that applies an opt-in ceiling to unary RPC calls.
+ * Streaming RPCs are not affected — they are long-lived by design. When
+ * timeoutMs is unset or non-positive, the interceptor is a pass-through and
+ * any caller-supplied AbortSignal on the request wins.
+ *
+ * Uses AbortSignal.timeout() to race the RPC against the deadline.
+ */
+export function timeoutInterceptor(timeoutMs) {
+    return (next) => async (req) => {
+        // No SDK-level deadline if stream, unset, or non-positive.
+        if (req.stream || !timeoutMs || timeoutMs <= 0) {
+            return next(req);
+        }
+        // Race the RPC against a timeout signal.
+        const timeoutSignal = AbortSignal.timeout(timeoutMs);
+        return new Promise((resolve, reject) => {
+            const onAbort = () => {
+                reject(new DOMException(`rdp: unary RPC timed out after ${timeoutMs}ms`, "TimeoutError"));
+            };
+            if (timeoutSignal.aborted) {
+                onAbort();
+                return;
+            }
+            timeoutSignal.addEventListener("abort", onAbort, { once: true });
+            next(req).then((res) => {
+                timeoutSignal.removeEventListener("abort", onAbort);
+                resolve(res);
+            }, (err) => {
+                timeoutSignal.removeEventListener("abort", onAbort);
+                reject(err);
+            });
+        });
+    };
+}
+//# sourceMappingURL=interceptors.js.map

package/dist/src/internal/interceptors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"interceptors.js","sourceRoot":"","sources":["../../../src/internal/interceptors.ts"],"names":[],"mappings":"AAGA;;;;GAIG;AACH,MAAM,UAAU,kBAAkB,CAAC,MAAc;IAC/C,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;QAC7B,MAAM,SAAS,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,QAAQ,IAAI,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;QAC/D,MAAM,CAAC,KAAK,CAAC,EAAE,SAAS,EAAE,EAAE,aAAa,CAAC,CAAC;QAC3C,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,CAAC;YAC5B,MAAM,CAAC,KAAK,CAAC,EAAE,SAAS,EAAE,EAAE,cAAc,CAAC,CAAC;YAC5C,OAAO,GAAG,CAAC;QACb,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,CAAC,KAAK,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,EAAE,WAAW,CAAC,CAAC;YAC7D,MAAM,GAAG,CAAC;QACZ,CAAC;IACH,CAAC,CAAC;AACJ,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,kBAAkB,CAAC,SAAkB;IACnD,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;QAC7B,2DAA2D;QAC3D,IAAI,GAAG,CAAC,MAAM,IAAI,CAAC,SAAS,IAAI,SAAS,IAAI,CAAC,EAAE,CAAC;YAC/C,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC;QACnB,CAAC;QAED,yCAAyC;QACzC,MAAM,aAAa,GAAG,WAAW,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QACrD,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACrC,MAAM,OAAO,GAAG,GAAG,EAAE;gBACnB,MAAM,CACJ,IAAI,YAAY,CACd,kCAAkC,SAAS,IAAI,EAC/C,cAAc,CACf,CACF,CAAC;YACJ,CAAC,CAAC;YACF,IAAI,aAAa,CAAC,OAAO,EAAE,CAAC;gBAC1B,OAAO,EAAE,CAAC;gBACV,OAAO;YACT,CAAC;YACD,aAAa,CAAC,gBAAgB,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;YACjE,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CACZ,CAAC,GAAG,EAAE,EAAE;gBACN,aAAa,CAAC,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;gBACpD,OAAO,CAAC,GAAG,CAAC,CAAC;YACf,CAAC,EACD,CAAC,GAAG,EAAE,EAAE;gBACN,aAAa,CAAC,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;gBACpD,MAAM,CAAC,GAAG,CAAC,CAAC;YACd,CAAC,CACF,CAAC;QACJ,CAAC,CAAC,CAAC;IACL,CAAC,CAAC;AACJ,CAAC"}

package/dist/src/internal/logger.d.ts

@@ -0,0 +1,16 @@
+/**
+ * Platform-agnostic logger interface for the RDP SDK.
+ * Compatible with pino (Node.js) and console-based loggers (Web).
+ * Each level supports both (msg) and (obj, msg) signatures for pino interop.
+ */
+export interface Logger {
+    debug(msg: string): void;
+    debug(obj: Record<string, unknown>, msg: string): void;
+    info(msg: string): void;
+    info(obj: Record<string, unknown>, msg: string): void;
+    warn(msg: string): void;
+    warn(obj: Record<string, unknown>, msg: string): void;
+    error(msg: string): void;
+    error(obj: Record<string, unknown>, msg: string): void;
+}
+//# sourceMappingURL=logger.d.ts.map

package/dist/src/internal/logger.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"logger.d.ts","sourceRoot":"","sources":["../../../src/internal/logger.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,MAAM,WAAW,MAAM;IACrB,KAAK,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,KAAK,CAAC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;IACvD,IAAI,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;IACtD,IAAI,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;IACtD,KAAK,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,KAAK,CAAC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;CACxD"}

package/dist/src/internal/logger.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=logger.js.map

package/dist/src/internal/logger.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"logger.js","sourceRoot":"","sources":["../../../src/internal/logger.ts"],"names":[],"mappings":""}

package/dist/src/internal/node/logging.d.ts

@@ -0,0 +1,9 @@
+import type { Logger } from "../logger.js";
+/**
+ * Create a pino logger using the SDK's precedence chain:
+ *   1. Injected logger (highest precedence)
+ *   2. SDK_LOG_LEVEL environment variable
+ *   3. Silent (no-op) logger
+ */
+export declare function createLogger(injected?: Logger): Logger;
+//# sourceMappingURL=logging.d.ts.map

package/dist/src/internal/node/logging.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"logging.d.ts","sourceRoot":"","sources":["../../../../src/internal/node/logging.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,cAAc,CAAC;AAK3C;;;;;GAKG;AACH,wBAAgB,YAAY,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,MAAM,CAWtD"}

package/dist/src/internal/node/logging.js

@@ -0,0 +1,20 @@
+import pino from "pino";
+const ENV_LOG_LEVEL = "SDK_LOG_LEVEL";
+const VALID_LEVELS = new Set(["debug", "info", "warn", "error"]);
+/**
+ * Create a pino logger using the SDK's precedence chain:
+ *   1. Injected logger (highest precedence)
+ *   2. SDK_LOG_LEVEL environment variable
+ *   3. Silent (no-op) logger
+ */
+export function createLogger(injected) {
+    if (injected) {
+        return injected;
+    }
+    const envLevel = process.env[ENV_LOG_LEVEL]?.toLowerCase().trim();
+    if (envLevel && VALID_LEVELS.has(envLevel)) {
+        return pino({ level: envLevel }, pino.destination(2));
+    }
+    return pino({ level: "silent" });
+}
+//# sourceMappingURL=logging.js.map

package/dist/src/internal/node/logging.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"logging.js","sourceRoot":"","sources":["../../../../src/internal/node/logging.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,MAAM,CAAC;AAGxB,MAAM,aAAa,GAAG,eAAe,CAAC;AACtC,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;AAEjE;;;;;GAKG;AACH,MAAM,UAAU,YAAY,CAAC,QAAiB;IAC5C,IAAI,QAAQ,EAAE,CAAC;QACb,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,EAAE,WAAW,EAAE,CAAC,IAAI,EAAE,CAAC;IAClE,IAAI,QAAQ,IAAI,YAAY,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC3C,OAAO,IAAI,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC;IACxD,CAAC;IAED,OAAO,IAAI,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;AACnC,CAAC"}

package/dist/src/internal/node/options.d.ts

@@ -0,0 +1,13 @@
+import type { Options } from "../options.js";
+export { type Option, type Options as CoreOptions, WithAPIKey, WithClientCredentials, WithLogger, WithTimeout, defaultOptions as coreDefaultOptions, } from "../options.js";
+/** Node.js-specific options extending core options. */
+export interface NodeOptions extends Options {
+    tlsSkipVerify: boolean;
+}
+/** Node.js-specific functional option. */
+export type NodeOption = (opts: NodeOptions) => void;
+/** Returns the base Node.js configuration. */
+export declare function defaultOptions(): NodeOptions;
+/** Disables TLS certificate verification (dev environments only). */
+export declare function WithTLSSkipVerify(): NodeOption;
+//# sourceMappingURL=options.d.ts.map

package/dist/src/internal/node/options.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"options.d.ts","sourceRoot":"","sources":["../../../../src/internal/node/options.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AAG7C,OAAO,EACL,KAAK,MAAM,EACX,KAAK,OAAO,IAAI,WAAW,EAC3B,UAAU,EACV,qBAAqB,EACrB,UAAU,EACV,WAAW,EACX,cAAc,IAAI,kBAAkB,GACrC,MAAM,eAAe,CAAC;AAEvB,uDAAuD;AACvD,MAAM,WAAW,WAAY,SAAQ,OAAO;IAC1C,aAAa,EAAE,OAAO,CAAC;CACxB;AAED,0CAA0C;AAC1C,MAAM,MAAM,UAAU,GAAG,CAAC,IAAI,EAAE,WAAW,KAAK,IAAI,CAAC;AAErD,8CAA8C;AAC9C,wBAAgB,cAAc,IAAI,WAAW,CAE5C;AAED,qEAAqE;AACrE,wBAAgB,iBAAiB,IAAI,UAAU,CAI9C"}

package/dist/src/internal/node/options.js

@@ -0,0 +1,13 @@
+// Re-export all core options.
+export { WithAPIKey, WithClientCredentials, WithLogger, WithTimeout, defaultOptions as coreDefaultOptions, } from "../options.js";
+/** Returns the base Node.js configuration. */
+export function defaultOptions() {
+    return { tlsSkipVerify: false };
+}
+/** Disables TLS certificate verification (dev environments only). */
+export function WithTLSSkipVerify() {
+    return (o) => {
+        o.tlsSkipVerify = true;
+    };
+}
+//# sourceMappingURL=options.js.map

package/dist/src/internal/node/options.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"options.js","sourceRoot":"","sources":["../../../../src/internal/node/options.ts"],"names":[],"mappings":"AAEA,8BAA8B;AAC9B,OAAO,EAGL,UAAU,EACV,qBAAqB,EACrB,UAAU,EACV,WAAW,EACX,cAAc,IAAI,kBAAkB,GACrC,MAAM,eAAe,CAAC;AAUvB,8CAA8C;AAC9C,MAAM,UAAU,cAAc;IAC5B,OAAO,EAAE,aAAa,EAAE,KAAK,EAAE,CAAC;AAClC,CAAC;AAED,qEAAqE;AACrE,MAAM,UAAU,iBAAiB;IAC/B,OAAO,CAAC,CAAC,EAAE,EAAE;QACX,CAAC,CAAC,aAAa,GAAG,IAAI,CAAC;IACzB,CAAC,CAAC;AACJ,CAAC"}

package/dist/src/internal/node/token-fetcher.d.ts

@@ -0,0 +1,9 @@
+import type { TokenFetcher } from "../auth.js";
+/**
+ * Creates a TokenFetcher. When `tlsSkipVerify` is true, wires in a
+ * customFetch that uses node:https with `rejectUnauthorized: false` so the
+ * token endpoint can be reached against a self-signed cert. Otherwise
+ * delegates entirely to oauth4webapi's default fetch (globalThis.fetch).
+ */
+export declare function nodeTokenFetcher(tlsSkipVerify: boolean): TokenFetcher;
+//# sourceMappingURL=token-fetcher.d.ts.map

package/dist/src/internal/node/token-fetcher.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"token-fetcher.d.ts","sourceRoot":"","sources":["../../../../src/internal/node/token-fetcher.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAG/C;;;;;GAKG;AACH,wBAAgB,gBAAgB,CAAC,aAAa,EAAE,OAAO,GAAG,YAAY,CAErE"}

package/dist/src/internal/node/token-fetcher.js

@@ -0,0 +1,56 @@
+import * as http from "node:http";
+import * as https from "node:https";
+import { makeTokenFetcher } from "../oauth.js";
+/**
+ * Creates a TokenFetcher. When `tlsSkipVerify` is true, wires in a
+ * customFetch that uses node:https with `rejectUnauthorized: false` so the
+ * token endpoint can be reached against a self-signed cert. Otherwise
+ * delegates entirely to oauth4webapi's default fetch (globalThis.fetch).
+ */
+export function nodeTokenFetcher(tlsSkipVerify) {
+    return makeTokenFetcher(tlsSkipVerify ? nodeSkipVerifyFetch() : undefined);
+}
+/**
+ * node:https-based customFetch adapter that disables TLS verification.
+ * Implements the oauth4webapi customFetch contract.
+ */
+function nodeSkipVerifyFetch() {
+    return (url, options) => new Promise((resolve, reject) => {
+        const parsed = new URL(url);
+        const reqModule = parsed.protocol === "https:" ? https : http;
+        const req = reqModule.request({
+            method: options.method,
+            hostname: parsed.hostname,
+            port: parsed.port,
+            path: parsed.pathname + parsed.search,
+            headers: options.headers,
+            rejectUnauthorized: false,
+            signal: options.signal,
+        }, (res) => {
+            const chunks = [];
+            res.on("data", (chunk) => chunks.push(chunk));
+            res.on("end", () => {
+                const responseHeaders = new Headers();
+                for (const [k, v] of Object.entries(res.headers)) {
+                    if (Array.isArray(v)) {
+                        for (const vv of v)
+                            responseHeaders.append(k, vv);
+                    }
+                    else if (v !== undefined) {
+                        responseHeaders.set(k, String(v));
+                    }
+                }
+                resolve(new Response(Buffer.concat(chunks), {
+                    status: res.statusCode ?? 0,
+                    headers: responseHeaders,
+                }));
+            });
+        });
+        req.on("error", reject);
+        if (options.body !== undefined) {
+            req.write(options.body.toString());
+        }
+        req.end();
+    });
+}
+//# sourceMappingURL=token-fetcher.js.map

package/dist/src/internal/node/token-fetcher.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"token-fetcher.js","sourceRoot":"","sources":["../../../../src/internal/node/token-fetcher.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,KAAK,KAAK,MAAM,YAAY,CAAC;AAEpC,OAAO,EAAyB,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAEtE;;;;;GAKG;AACH,MAAM,UAAU,gBAAgB,CAAC,aAAsB;IACrD,OAAO,gBAAgB,CAAC,aAAa,CAAC,CAAC,CAAC,mBAAmB,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;AAC7E,CAAC;AAED;;;GAGG;AACH,SAAS,mBAAmB;IAC1B,OAAO,CAAC,GAAG,EAAE,OAAO,EAAE,EAAE,CACtB,IAAI,OAAO,CAAW,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACxC,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;QAC5B,MAAM,SAAS,GAAG,MAAM,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;QAC9D,MAAM,GAAG,GAAG,SAAS,CAAC,OAAO,CAC3B;YACE,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,IAAI,EAAE,MAAM,CAAC,QAAQ,GAAG,MAAM,CAAC,MAAM;YACrC,OAAO,EAAE,OAAO,CAAC,OAAO;YACxB,kBAAkB,EAAE,KAAK;YACzB,MAAM,EAAE,OAAO,CAAC,MAAM;SACvB,EACD,CAAC,GAAG,EAAE,EAAE;YACN,MAAM,MAAM,GAAa,EAAE,CAAC;YAC5B,GAAG,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;YACtD,GAAG,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE;gBACjB,MAAM,eAAe,GAAG,IAAI,OAAO,EAAE,CAAC;gBACtC,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;oBACjD,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;wBACrB,KAAK,MAAM,EAAE,IAAI,CAAC;4BAAE,eAAe,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;oBACpD,CAAC;yBAAM,IAAI,CAAC,KAAK,SAAS,EAAE,CAAC;wBAC3B,eAAe,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;oBACpC,CAAC;gBACH,CAAC;gBACD,OAAO,CACL,IAAI,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE;oBAClC,MAAM,EAAE,GAAG,CAAC,UAAU,IAAI,CAAC;oBAC3B,OAAO,EAAE,eAAe;iBACzB,CAAC,CACH,CAAC;YACJ,CAAC,CAAC,CAAC;QACL,CAAC,CACF,CAAC;QACF,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QACxB,IAAI,OAAO,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YAC/B,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC;QACrC,CAAC;QACD,GAAG,CAAC,GAAG,EAAE,CAAC;IACZ,CAAC,CAAC,CAAC;AACP,CAAC"}

package/dist/src/internal/oauth.d.ts

@@ -0,0 +1,24 @@
+import * as oauth from "oauth4webapi";
+import { type TokenFetcher } from "./auth.js";
+/**
+ * oauth4webapi's customFetch hook shape. Extracted so platform adapters
+ * (e.g. a node:https-based TLS-skip adapter) implement exactly this
+ * contract.
+ */
+export type OauthCustomFetch = (url: string, options: oauth.CustomFetchOptions<"POST", URLSearchParams>) => Promise<Response>;
+/**
+ * Build a TokenFetcher that delegates token-endpoint handling to
+ * oauth4webapi. Spec-correct RFC 6749 response parsing (including error
+ * responses and token_type validation) lives in the library so the SDK
+ * doesn't have to.
+ *
+ * Pass `customFetch` to use a platform-specific fetch implementation —
+ * the Node adapter does this to honor TLS skip-verify. When omitted,
+ * oauth4webapi uses globalThis.fetch.
+ *
+ * `allowInsecureRequests` is always enabled: the SDK accepts http://
+ * endpoints (for local dev) at the endpoint-validation layer, so the
+ * token request path must too.
+ */
+export declare function makeTokenFetcher(customFetch?: OauthCustomFetch): TokenFetcher;
+//# sourceMappingURL=oauth.d.ts.map

package/dist/src/internal/oauth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauth.d.ts","sourceRoot":"","sources":["../../../src/internal/oauth.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,KAAK,MAAM,cAAc,CAAC;AACtC,OAAO,EAEL,KAAK,YAAY,EAElB,MAAM,WAAW,CAAC;AAEnB;;;;GAIG;AACH,MAAM,MAAM,gBAAgB,GAAG,CAC7B,GAAG,EAAE,MAAM,EACX,OAAO,EAAE,KAAK,CAAC,kBAAkB,CAAC,MAAM,EAAE,eAAe,CAAC,KACvD,OAAO,CAAC,QAAQ,CAAC,CAAC;AAEvB;;;;;;;;;;;;;GAaG;AACH,wBAAgB,gBAAgB,CAAC,WAAW,CAAC,EAAE,gBAAgB,GAAG,YAAY,CAoC7E"}

package/dist/src/internal/oauth.js

@@ -0,0 +1,43 @@
+import * as oauth from "oauth4webapi";
+import { TOKEN_FETCH_TIMEOUT_MS, } from "./auth.js";
+/**
+ * Build a TokenFetcher that delegates token-endpoint handling to
+ * oauth4webapi. Spec-correct RFC 6749 response parsing (including error
+ * responses and token_type validation) lives in the library so the SDK
+ * doesn't have to.
+ *
+ * Pass `customFetch` to use a platform-specific fetch implementation —
+ * the Node adapter does this to honor TLS skip-verify. When omitted,
+ * oauth4webapi uses globalThis.fetch.
+ *
+ * `allowInsecureRequests` is always enabled: the SDK accepts http://
+ * endpoints (for local dev) at the endpoint-validation layer, so the
+ * token request path must too.
+ */
+export function makeTokenFetcher(customFetch) {
+    return async (url, body) => {
+        const tokenUrl = new URL(url);
+        const as = {
+            issuer: tokenUrl.origin,
+            token_endpoint: url,
+        };
+        const clientId = body.get("client_id") ?? "";
+        const clientSecret = body.get("client_secret") ?? "";
+        const client = { client_id: clientId };
+        const clientAuth = oauth.ClientSecretPost(clientSecret);
+        const response = await oauth.clientCredentialsGrantRequest(as, client, clientAuth, new URLSearchParams(), {
+            signal: AbortSignal.timeout(TOKEN_FETCH_TIMEOUT_MS),
+            // oauth4webapi marks this symbol @deprecated purely to make it
+            // visually stand out; it's the supported way to accept http:// for
+            // local development.
+            [oauth.allowInsecureRequests]: true,
+            ...(customFetch ? { [oauth.customFetch]: customFetch } : {}),
+        });
+        const tokenResponse = await oauth.processClientCredentialsResponse(as, client, response);
+        return {
+            access_token: tokenResponse.access_token,
+            expires_in: tokenResponse.expires_in,
+        };
+    };
+}
+//# sourceMappingURL=oauth.js.map

package/dist/src/internal/oauth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauth.js","sourceRoot":"","sources":["../../../src/internal/oauth.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,KAAK,MAAM,cAAc,CAAC;AACtC,OAAO,EACL,sBAAsB,GAGvB,MAAM,WAAW,CAAC;AAYnB;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,gBAAgB,CAAC,WAA8B;IAC7D,OAAO,KAAK,EAAE,GAAG,EAAE,IAAI,EAA0B,EAAE;QACjD,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;QAC9B,MAAM,EAAE,GAA8B;YACpC,MAAM,EAAE,QAAQ,CAAC,MAAM;YACvB,cAAc,EAAE,GAAG;SACpB,CAAC;QACF,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC;QAC7C,MAAM,YAAY,GAAG,IAAI,CAAC,GAAG,CAAC,eAAe,CAAC,IAAI,EAAE,CAAC;QACrD,MAAM,MAAM,GAAiB,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC;QACrD,MAAM,UAAU,GAAG,KAAK,CAAC,gBAAgB,CAAC,YAAY,CAAC,CAAC;QAExD,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,6BAA6B,CACxD,EAAE,EACF,MAAM,EACN,UAAU,EACV,IAAI,eAAe,EAAE,EACrB;YACE,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,sBAAsB,CAAC;YACnD,+DAA+D;YAC/D,mEAAmE;YACnE,qBAAqB;YACrB,CAAC,KAAK,CAAC,qBAAqB,CAAC,EAAE,IAAI;YACnC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,WAAW,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC7D,CACF,CAAC;QACF,MAAM,aAAa,GAAG,MAAM,KAAK,CAAC,gCAAgC,CAChE,EAAE,EACF,MAAM,EACN,QAAQ,CACT,CAAC;QACF,OAAO;YACL,YAAY,EAAE,aAAa,CAAC,YAAY;YACxC,UAAU,EAAE,aAAa,CAAC,UAAU;SACrC,CAAC;IACJ,CAAC,CAAC;AACJ,CAAC"}

package/dist/src/internal/options.d.ts

@@ -0,0 +1,33 @@
+import type { Logger } from "./logger.js";
+/** Configuration for the SDK client. */
+export interface Options {
+    /**
+     * Opt-in ceiling (ms) on unary RPC calls. When unset, no SDK-level
+     * deadline is applied and callers own their deadlines via per-call
+     * AbortSignal. Streaming RPCs are never affected.
+     */
+    timeout?: number;
+    /** OAuth2 client credentials for token-based auth. */
+    clientCredentials?: {
+        clientId: string;
+        clientSecret: string;
+    };
+    apiKey?: string;
+    logger?: Logger;
+}
+/** Functional option that configures the SDK client. */
+export type Option = (opts: Options) => void;
+/** Returns the base configuration with default server settings. */
+export declare function defaultOptions(): Options;
+/** Configures OAuth2 client credentials authentication. */
+export declare function WithClientCredentials(clientId: string, clientSecret: string): Option;
+/** Configures API key authentication. */
+export declare function WithAPIKey(key: string): Option;
+/**
+ * Sets an opt-in ceiling on unary RPC calls. Streaming RPCs are not
+ * affected. When omitted, no SDK-level deadline is applied.
+ */
+export declare function WithTimeout(ms: number): Option;
+/** Injects a structured logger. Takes precedence over SDK_LOG_LEVEL. */
+export declare function WithLogger(logger: Logger): Option;
+//# sourceMappingURL=options.d.ts.map

package/dist/src/internal/options.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"options.d.ts","sourceRoot":"","sources":["../../../src/internal/options.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAE1C,wCAAwC;AACxC,MAAM,WAAW,OAAO;IACtB;;;;OAIG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,sDAAsD;IACtD,iBAAiB,CAAC,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,YAAY,EAAE,MAAM,CAAA;KAAE,CAAC;IAC/D,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,wDAAwD;AACxD,MAAM,MAAM,MAAM,GAAG,CAAC,IAAI,EAAE,OAAO,KAAK,IAAI,CAAC;AAE7C,mEAAmE;AACnE,wBAAgB,cAAc,IAAI,OAAO,CAExC;AAED,2DAA2D;AAC3D,wBAAgB,qBAAqB,CACnC,QAAQ,EAAE,MAAM,EAChB,YAAY,EAAE,MAAM,GACnB,MAAM,CAIR;AAED,yCAAyC;AACzC,wBAAgB,UAAU,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAI9C;AAED;;;GAGG;AACH,wBAAgB,WAAW,CAAC,EAAE,EAAE,MAAM,GAAG,MAAM,CAI9C;AAED,wEAAwE;AACxE,wBAAgB,UAAU,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAIjD"}

package/dist/src/internal/options.js

@@ -0,0 +1,32 @@
+/** Returns the base configuration with default server settings. */
+export function defaultOptions() {
+    return {};
+}
+/** Configures OAuth2 client credentials authentication. */
+export function WithClientCredentials(clientId, clientSecret) {
+    return (o) => {
+        o.clientCredentials = { clientId, clientSecret };
+    };
+}
+/** Configures API key authentication. */
+export function WithAPIKey(key) {
+    return (o) => {
+        o.apiKey = key;
+    };
+}
+/**
+ * Sets an opt-in ceiling on unary RPC calls. Streaming RPCs are not
+ * affected. When omitted, no SDK-level deadline is applied.
+ */
+export function WithTimeout(ms) {
+    return (o) => {
+        o.timeout = ms;
+    };
+}
+/** Injects a structured logger. Takes precedence over SDK_LOG_LEVEL. */
+export function WithLogger(logger) {
+    return (o) => {
+        o.logger = logger;
+    };
+}
+//# sourceMappingURL=options.js.map

package/dist/src/internal/options.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"options.js","sourceRoot":"","sources":["../../../src/internal/options.ts"],"names":[],"mappings":"AAmBA,mEAAmE;AACnE,MAAM,UAAU,cAAc;IAC5B,OAAO,EAAE,CAAC;AACZ,CAAC;AAED,2DAA2D;AAC3D,MAAM,UAAU,qBAAqB,CACnC,QAAgB,EAChB,YAAoB;IAEpB,OAAO,CAAC,CAAC,EAAE,EAAE;QACX,CAAC,CAAC,iBAAiB,GAAG,EAAE,QAAQ,EAAE,YAAY,EAAE,CAAC;IACnD,CAAC,CAAC;AACJ,CAAC;AAED,yCAAyC;AACzC,MAAM,UAAU,UAAU,CAAC,GAAW;IACpC,OAAO,CAAC,CAAC,EAAE,EAAE;QACX,CAAC,CAAC,MAAM,GAAG,GAAG,CAAC;IACjB,CAAC,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,WAAW,CAAC,EAAU;IACpC,OAAO,CAAC,CAAC,EAAE,EAAE;QACX,CAAC,CAAC,OAAO,GAAG,EAAE,CAAC;IACjB,CAAC,CAAC;AACJ,CAAC;AAED,wEAAwE;AACxE,MAAM,UAAU,UAAU,CAAC,MAAc;IACvC,OAAO,CAAC,CAAC,EAAE,EAAE;QACX,CAAC,CAAC,MAAM,GAAG,MAAM,CAAC;IACpB,CAAC,CAAC;AACJ,CAAC"}

package/dist/src/internal/transport.d.ts

@@ -0,0 +1,29 @@
+import type { Interceptor } from "@connectrpc/connect";
+import { type TokenFetcher } from "./auth.js";
+import type { Logger } from "./logger.js";
+import type { Options } from "./options.js";
+/**
+ * Parse the variadic createClient arguments into a rawEndpoint (or undefined)
+ * and the remaining option mutators. Throws if the endpoint was passed as the
+ * empty string, which would otherwise be silently coerced to the default.
+ */
+export declare function resolveArgs<Opt>(args: [string, ...Opt[]] | Opt[]): {
+    rawEndpoint: string | undefined;
+    opts: Opt[];
+};
+/**
+ * Resolve the final endpoint URL. Strips trailing slashes, falls back to
+ * [DEFAULT_SERVER_URL] when no endpoint was provided, and rejects any URL
+ * with a path, query, fragment, or userinfo component (the auth endpoint
+ * is always at {endpoint}/api/v1/auth/token).
+ */
+export declare function resolveEndpoint(rawEndpoint: string | undefined): string;
+/**
+ * Build the interceptor chain shared by every facade on both the node and
+ * web SDKs: userAgent → auth (api_key | client_credentials) → logging →
+ * timeout. Callers own the platform-specific createConnectTransport call
+ * because its options differ materially (HTTP/2 + nodeOptions on node,
+ * plain fetch-based on web).
+ */
+export declare function buildInterceptors(endpoint: string, o: Options, tokenFetcher: TokenFetcher, logger: Logger): Interceptor[];
+//# sourceMappingURL=transport.d.ts.map

package/dist/src/internal/transport.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"transport.d.ts","sourceRoot":"","sources":["../../../src/internal/transport.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AACvD,OAAO,EACL,KAAK,YAAY,EAKlB,MAAM,WAAW,CAAC;AAGnB,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AAE5C;;;;GAIG;AACH,wBAAgB,WAAW,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC,MAAM,EAAE,GAAG,GAAG,EAAE,CAAC,GAAG,GAAG,EAAE,GAAG;IAClE,WAAW,EAAE,MAAM,GAAG,SAAS,CAAC;IAChC,IAAI,EAAE,GAAG,EAAE,CAAC;CACb,CASA;AAED;;;;;GAKG;AACH,wBAAgB,eAAe,CAAC,WAAW,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,CAMvE;AAED;;;;;;GAMG;AACH,wBAAgB,iBAAiB,CAC/B,QAAQ,EAAE,MAAM,EAChB,CAAC,EAAE,OAAO,EACV,YAAY,EAAE,YAAY,EAC1B,MAAM,EAAE,MAAM,GACb,WAAW,EAAE,CAyBf"}

package/dist/src/internal/transport.js

@@ -0,0 +1,52 @@
+import { apiKeyInterceptor, clientCredentialsInterceptor, userAgentInterceptor, validateAuth, } from "./auth.js";
+import { DEFAULT_SERVER_URL, validateEndpointUrl } from "./config.js";
+import { loggingInterceptor, timeoutInterceptor } from "./interceptors.js";
+/**
+ * Parse the variadic createClient arguments into a rawEndpoint (or undefined)
+ * and the remaining option mutators. Throws if the endpoint was passed as the
+ * empty string, which would otherwise be silently coerced to the default.
+ */
+export function resolveArgs(args) {
+    if (typeof args[0] === "string") {
+        const rawEndpoint = args[0];
+        if (rawEndpoint === "") {
+            throw new Error("rdp: endpoint is required");
+        }
+        return { rawEndpoint, opts: args.slice(1) };
+    }
+    return { rawEndpoint: undefined, opts: args };
+}
+/**
+ * Resolve the final endpoint URL. Strips trailing slashes, falls back to
+ * [DEFAULT_SERVER_URL] when no endpoint was provided, and rejects any URL
+ * with a path, query, fragment, or userinfo component (the auth endpoint
+ * is always at {endpoint}/api/v1/auth/token).
+ */
+export function resolveEndpoint(rawEndpoint) {
+    const endpoint = rawEndpoint
+        ? rawEndpoint.replace(/\/+$/, "")
+        : DEFAULT_SERVER_URL;
+    validateEndpointUrl(endpoint);
+    return endpoint;
+}
+/**
+ * Build the interceptor chain shared by every facade on both the node and
+ * web SDKs: userAgent → auth (api_key | client_credentials) → logging →
+ * timeout. Callers own the platform-specific createConnectTransport call
+ * because its options differ materially (HTTP/2 + nodeOptions on node,
+ * plain fetch-based on web).
+ */
+export function buildInterceptors(endpoint, o, tokenFetcher, logger) {
+    const auth = validateAuth({ clientCredentials: o.clientCredentials, apiKey: o.apiKey }, logger);
+    const interceptors = [userAgentInterceptor()];
+    if (auth.method === "client_credentials") {
+        const tokenUrl = `${endpoint}/api/v1/auth/token`;
+        interceptors.push(clientCredentialsInterceptor(auth.clientId, auth.clientSecret, tokenUrl, tokenFetcher, logger));
+    }
+    else if (auth.method === "api_key") {
+        interceptors.push(apiKeyInterceptor(auth.apiKey));
+    }
+    interceptors.push(loggingInterceptor(logger), timeoutInterceptor(o.timeout));
+    return interceptors;
+}
+//# sourceMappingURL=transport.js.map

package/dist/src/internal/transport.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"transport.js","sourceRoot":"","sources":["../../../src/internal/transport.ts"],"names":[],"mappings":"AACA,OAAO,EAEL,iBAAiB,EACjB,4BAA4B,EAC5B,oBAAoB,EACpB,YAAY,GACb,MAAM,WAAW,CAAC;AACnB,OAAO,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AACtE,OAAO,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AAI3E;;;;GAIG;AACH,MAAM,UAAU,WAAW,CAAM,IAAgC;IAI/D,IAAI,OAAO,IAAI,CAAC,CAAC,CAAC,KAAK,QAAQ,EAAE,CAAC;QAChC,MAAM,WAAW,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;QAC5B,IAAI,WAAW,KAAK,EAAE,EAAE,CAAC;YACvB,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;QAC/C,CAAC;QACD,OAAO,EAAE,WAAW,EAAE,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAAU,EAAE,CAAC;IACvD,CAAC;IACD,OAAO,EAAE,WAAW,EAAE,SAAS,EAAE,IAAI,EAAE,IAAa,EAAE,CAAC;AACzD,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,eAAe,CAAC,WAA+B;IAC7D,MAAM,QAAQ,GAAG,WAAW;QAC1B,CAAC,CAAC,WAAW,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC;QACjC,CAAC,CAAC,kBAAkB,CAAC;IACvB,mBAAmB,CAAC,QAAQ,CAAC,CAAC;IAC9B,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,iBAAiB,CAC/B,QAAgB,EAChB,CAAU,EACV,YAA0B,EAC1B,MAAc;IAEd,MAAM,IAAI,GAAG,YAAY,CACvB,EAAE,iBAAiB,EAAE,CAAC,CAAC,iBAAiB,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,EAC5D,MAAM,CACP,CAAC;IAEF,MAAM,YAAY,GAAkB,CAAC,oBAAoB,EAAE,CAAC,CAAC;IAE7D,IAAI,IAAI,CAAC,MAAM,KAAK,oBAAoB,EAAE,CAAC;QACzC,MAAM,QAAQ,GAAG,GAAG,QAAQ,oBAAoB,CAAC;QACjD,YAAY,CAAC,IAAI,CACf,4BAA4B,CAC1B,IAAI,CAAC,QAAQ,EACb,IAAI,CAAC,YAAY,EACjB,QAAQ,EACR,YAAY,EACZ,MAAM,CACP,CACF,CAAC;IACJ,CAAC;SAAM,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QACrC,YAAY,CAAC,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;IACpD,CAAC;IAED,YAAY,CAAC,IAAI,CAAC,kBAAkB,CAAC,MAAM,CAAC,EAAE,kBAAkB,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;IAC7E,OAAO,YAAY,CAAC;AACtB,CAAC"}

package/dist/src/internal/version.d.ts

@@ -0,0 +1,7 @@
+/**
+ * SDK version derived from package.json. The release workflow runs
+ * `npm version --no-git-tag-version <version>` before building, so this value
+ * follows the published package version.
+ */
+export declare const VERSION: string;
+//# sourceMappingURL=version.d.ts.map

package/dist/src/internal/version.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"version.d.ts","sourceRoot":"","sources":["../../../src/internal/version.ts"],"names":[],"mappings":"AAEA;;;;GAIG;AACH,eAAO,MAAM,OAAO,QAAc,CAAC"}

package/dist/src/internal/version.js

@@ -0,0 +1,8 @@
+import pkg from "../../package.json" with { type: "json" };
+/**
+ * SDK version derived from package.json. The release workflow runs
+ * `npm version --no-git-tag-version <version>` before building, so this value
+ * follows the published package version.
+ */
+export const VERSION = pkg.version;
+//# sourceMappingURL=version.js.map

package/dist/src/internal/version.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"version.js","sourceRoot":"","sources":["../../../src/internal/version.ts"],"names":[],"mappings":"AAAA,OAAO,GAAG,MAAM,oBAAoB,CAAC,OAAO,IAAI,EAAE,MAAM,EAAE,CAAC;AAE3D;;;;GAIG;AACH,MAAM,CAAC,MAAM,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC"}

package/dist/src/internal/web/logging.d.ts

@@ -0,0 +1,8 @@
+import type { Logger } from "../logger.js";
+/**
+ * Create a logger for the web SDK.
+ * Returns the injected logger if provided, otherwise a silent noop logger.
+ * No SDK_LOG_LEVEL env var support (no process.env in browsers).
+ */
+export declare function createLogger(injected?: Logger): Logger;
+//# sourceMappingURL=logging.d.ts.map

package/dist/src/internal/web/logging.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"logging.d.ts","sourceRoot":"","sources":["../../../../src/internal/web/logging.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,cAAc,CAAC;AAS3C;;;;GAIG;AACH,wBAAgB,YAAY,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,MAAM,CAEtD"}

package/dist/src/internal/web/logging.js

@@ -0,0 +1,15 @@
+const noop = {
+    debug() { },
+    info() { },
+    warn() { },
+    error() { },
+};
+/**
+ * Create a logger for the web SDK.
+ * Returns the injected logger if provided, otherwise a silent noop logger.
+ * No SDK_LOG_LEVEL env var support (no process.env in browsers).
+ */
+export function createLogger(injected) {
+    return injected ?? noop;
+}
+//# sourceMappingURL=logging.js.map

package/dist/src/internal/web/logging.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"logging.js","sourceRoot":"","sources":["../../../../src/internal/web/logging.ts"],"names":[],"mappings":"AAEA,MAAM,IAAI,GAAW;IACnB,KAAK,KAAI,CAAC;IACV,IAAI,KAAI,CAAC;IACT,IAAI,KAAI,CAAC;IACT,KAAK,KAAI,CAAC;CACX,CAAC;AAEF;;;;GAIG;AACH,MAAM,UAAU,YAAY,CAAC,QAAiB;IAC5C,OAAO,QAAQ,IAAI,IAAI,CAAC;AAC1B,CAAC"}

package/dist/src/internal/web/token-fetcher.d.ts

@@ -0,0 +1,8 @@
+import type { TokenFetcher } from "../auth.js";
+/**
+ * Creates a TokenFetcher for the web SDK. Delegates entirely to
+ * oauth4webapi's default fetch (the browser's global fetch). Browsers
+ * manage TLS verification themselves, so there is no skip-verify path.
+ */
+export declare function webTokenFetcher(): TokenFetcher;
+//# sourceMappingURL=token-fetcher.d.ts.map

package/dist/src/internal/web/token-fetcher.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"token-fetcher.d.ts","sourceRoot":"","sources":["../../../../src/internal/web/token-fetcher.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAG/C;;;;GAIG;AACH,wBAAgB,eAAe,IAAI,YAAY,CAE9C"}

package/dist/src/internal/web/token-fetcher.js

@@ -0,0 +1,10 @@
+import { makeTokenFetcher } from "../oauth.js";
+/**
+ * Creates a TokenFetcher for the web SDK. Delegates entirely to
+ * oauth4webapi's default fetch (the browser's global fetch). Browsers
+ * manage TLS verification themselves, so there is no skip-verify path.
+ */
+export function webTokenFetcher() {
+    return makeTokenFetcher();
+}
+//# sourceMappingURL=token-fetcher.js.map

package/dist/src/internal/web/token-fetcher.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"token-fetcher.js","sourceRoot":"","sources":["../../../../src/internal/web/token-fetcher.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAE/C;;;;GAIG;AACH,MAAM,UAAU,eAAe;IAC7B,OAAO,gBAAgB,EAAE,CAAC;AAC5B,CAAC"}