@rockcarver/frodo-lib 4.10.0-1 → 4.11.0-1

package/types/ops/internal/RelationshipHelpers.d.ts

@@ -0,0 +1,111 @@
+import { IdObjectSkeletonInterface, PatchOperationInterface } from '../../api/ApiTypes';
+import { State } from '../../shared/State';
+/**
+ * Shared relationship-CRUD implementation for managed objects and managed
+ * system objects. Both kinds of objects address relationship targets
+ * identically (always under the managed/ collection) and only differ in
+ * which read/patch primitive fetches or mutates the underlying object, so
+ * that difference is injected as readObject/updateProperties rather than
+ * duplicating this logic per object kind.
+ */
+/** A relationship target: the managed object type and id it points to, without any of the underlying _ref plumbing. */
+export type RelationshipTarget = {
+    type: string;
+    id: string;
+};
+type ReadObjectFn = (args: {
+    type: string;
+    id: string;
+    fields: string[];
+    state: State;
+}) => Promise<IdObjectSkeletonInterface>;
+type UpdatePropertiesFn = (args: {
+    type: string;
+    id: string;
+    operations: PatchOperationInterface[];
+    rev?: string;
+    state: State;
+}) => Promise<IdObjectSkeletonInterface>;
+/**
+ * Reads the current value of a relationship field directly off the object —
+ * the forward direction (e.g. an alpha_user's own `manager` or `roles`
+ * field). For the reverse direction (e.g. an alpha_role's members), use
+ * queryRelatedManagedObjects/queryRelatedManagedSystemObjects instead;
+ * reverse relationships aren't stored as a field on the object at all, so
+ * there's nothing here to read.
+ */
+export declare function readRelationshipImpl({ type, id, field, state, readObject, }: {
+    type: string;
+    id: string;
+    field: string;
+    state: State;
+    readObject: ReadObjectFn;
+}): Promise<unknown>;
+/**
+ * Adds one target to a many-valued relationship field without disturbing
+ * any existing members — the safe way to "add a member" (use
+ * replaceRelationshipImpl instead only when you actually mean to overwrite
+ * the whole field).
+ *
+ * @remarks
+ * Uses the exact request shape captured from AIC's own admin UI performing
+ * this action and verified live: field addressed as `/field/-` (JSON
+ * Pointer append-to-array syntax, RFC 6902) with a bare (not array-wrapped)
+ * { _ref, _refProperties: {} } value — not the field's own resourceCollection
+ * fields.
+ */
+export declare function addRelationshipImpl({ type, id, field, target, rev, state, updateProperties, }: {
+    type: string;
+    id: string;
+    field: string;
+    target: RelationshipTarget;
+    rev?: string;
+    state: State;
+    updateProperties: UpdatePropertiesFn;
+}): Promise<IdObjectSkeletonInterface>;
+/**
+ * Removes one target from a many-valued relationship field without
+ * disturbing any other members.
+ *
+ * @remarks
+ * Reads the field's current value first to find the exact stored element,
+ * then removes that exact object (not array-wrapped) — the request shape
+ * captured directly from AIC's own admin UI performing this action and
+ * verified live. Two things this gets exactly right that a naively-built
+ * request gets wrong: the value must be the object matching what's
+ * actually stored, _refProperties (an internal id/rev IDM itself generates
+ * for the relationship, distinct from the referenced object's own id)
+ * included — a freshly-built ref without it doesn't match and the request
+ * is silently ignored; and unlike "add" (which needs its value array-
+ * wrapped), "remove" needs a bare object, not an array containing one.
+ * Throws if the target isn't currently a member, rather than silently
+ * doing nothing the way a raw PATCH with a non-matching value would.
+ */
+export declare function removeRelationshipImpl({ type, id, field, target, rev, state, readObject, updateProperties, }: {
+    type: string;
+    id: string;
+    field: string;
+    target: RelationshipTarget;
+    rev?: string;
+    state: State;
+    readObject: ReadObjectFn;
+    updateProperties: UpdatePropertiesFn;
+}): Promise<IdObjectSkeletonInterface>;
+/**
+ * Replaces the entire value of a relationship field: a single target (or
+ * null to clear it) for a single-valued field like 'manager', or an array
+ * of targets for a many-valued field like 'roles' — replacing the whole
+ * array, not adding to it. Use addRelationshipImpl/removeRelationshipImpl
+ * instead when you only want to change one member of a many-valued field.
+ */
+export declare function replaceRelationshipImpl({ type, id, field, target, rev, state, updateProperties, }: {
+    type: string;
+    id: string;
+    field: string;
+    target: RelationshipTarget | RelationshipTarget[] | null;
+    rev?: string;
+    state: State;
+    updateProperties: UpdatePropertiesFn;
+}): Promise<IdObjectSkeletonInterface>;
+export {};
+//# sourceMappingURL=RelationshipHelpers.d.ts.map

package/types/ops/internal/RelationshipHelpers.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"RelationshipHelpers.d.ts","sourceRoot":"","sources":["../../../src/ops/internal/RelationshipHelpers.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,yBAAyB,EACzB,uBAAuB,EACxB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAG3C;;;;;;;GAOG;AAEH,uHAAuH;AACvH,MAAM,MAAM,kBAAkB,GAAG;IAC/B,IAAI,EAAE,MAAM,CAAC;IACb,EAAE,EAAE,MAAM,CAAC;CACZ,CAAC;AAEF,KAAK,YAAY,GAAG,CAAC,IAAI,EAAE;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,KAAK,EAAE,KAAK,CAAC;CACd,KAAK,OAAO,CAAC,yBAAyB,CAAC,CAAC;AAEzC,KAAK,kBAAkB,GAAG,CAAC,IAAI,EAAE;IAC/B,IAAI,EAAE,MAAM,CAAC;IACb,EAAE,EAAE,MAAM,CAAC;IACX,UAAU,EAAE,uBAAuB,EAAE,CAAC;IACtC,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,KAAK,CAAC;CACd,KAAK,OAAO,CAAC,yBAAyB,CAAC,CAAC;AAmDzC;;;;;;;GAOG;AACH,wBAAsB,oBAAoB,CAAC,EACzC,IAAI,EACJ,EAAE,EACF,KAAK,EACL,KAAK,EACL,UAAU,GACX,EAAE;IACD,IAAI,EAAE,MAAM,CAAC;IACb,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,KAAK,CAAC;IACb,UAAU,EAAE,YAAY,CAAC;CAC1B,GAAG,OAAO,CAAC,OAAO,CAAC,CAGnB;AAED;;;;;;;;;;;;GAYG;AACH,wBAAsB,mBAAmB,CAAC,EACxC,IAAI,EACJ,EAAE,EACF,KAAK,EACL,MAAM,EACN,GAAG,EACH,KAAK,EACL,gBAAgB,GACjB,EAAE;IACD,IAAI,EAAE,MAAM,CAAC;IACb,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,kBAAkB,CAAC;IAC3B,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,KAAK,CAAC;IACb,gBAAgB,EAAE,kBAAkB,CAAC;CACtC,GAAG,OAAO,CAAC,yBAAyB,CAAC,CAcrC;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAsB,sBAAsB,CAAC,EAC3C,IAAI,EACJ,EAAE,EACF,KAAK,EACL,MAAM,EACN,GAAG,EACH,KAAK,EACL,UAAU,EACV,gBAAgB,GACjB,EAAE;IACD,IAAI,EAAE,MAAM,CAAC;IACb,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,kBAAkB,CAAC;IAC3B,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,KAAK,CAAC;IACb,UAAU,EAAE,YAAY,CAAC;IACzB,gBAAgB,EAAE,kBAAkB,CAAC;CACtC,GAAG,OAAO,CAAC,yBAAyB,CAAC,CAkCrC;AAED;;;;;;GAMG;AACH,wBAAsB,uBAAuB,CAAC,EAC5C,IAAI,EACJ,EAAE,EACF,KAAK,EACL,MAAM,EACN,GAAG,EACH,KAAK,EACL,gBAAgB,GACjB,EAAE;IACD,IAAI,EAAE,MAAM,CAAC;IACb,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,kBAAkB,GAAG,kBAAkB,EAAE,GAAG,IAAI,CAAC;IACzD,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,KAAK,CAAC;IACb,gBAAgB,EAAE,kBAAkB,CAAC;CACtC,GAAG,OAAO,CAAC,yBAAyB,CAAC,CAoBrC"}

package/types/shared/Constants.d.ts

@@ -0,0 +1,100 @@
+import { GlossaryObjectType } from '../api/cloud/iga/IgaGlossaryApi';
+export type Constants = {
+    DEFAULT_REALM_KEY: string;
+    CLASSIC_DEPLOYMENT_TYPE_KEY: string;
+    CLOUD_DEPLOYMENT_TYPE_KEY: string;
+    FORGEOPS_DEPLOYMENT_TYPE_KEY: string;
+    DEPLOYMENT_TYPES: string[];
+    DEPLOYMENT_TYPE_REALM_MAP: {
+        classic: string;
+        cloud: string;
+        forgeops: string;
+    };
+    FRODO_METADATA_ID: string;
+    FRODO_CONNECTION_PROFILES_PATH_KEY: string;
+    FRODO_MASTER_KEY_PATH_KEY: string;
+    FRODO_MASTER_KEY_KEY: string;
+    GLOSSARY_APPLICATION_OBJECT_TYPE: GlossaryObjectType;
+    GLOSSARY_ENTITLEMENT_OBJECT_TYPE: GlossaryObjectType;
+    GLOSSARY_ROLE_OBJECT_TYPE: GlossaryObjectType;
+    AVAILABLE_SCOPES: Record<string, string>;
+    CLOUD_BROWSER_MODE_AVAILABLE_SCOPES: string[];
+    TOKEN_FRESHNESS_BUFFER_MS: number;
+    RETRY_NOTHING_KEY: string;
+    RETRY_EVERYTHING_KEY: string;
+    RETRY_NETWORK_KEY: string;
+    RETRY_STRATEGIES: string[];
+};
+declare const _default: {
+    DEFAULT_REALM_KEY: string;
+    CLASSIC_DEPLOYMENT_TYPE_KEY: string;
+    CLOUD_DEPLOYMENT_TYPE_KEY: string;
+    FORGEOPS_DEPLOYMENT_TYPE_KEY: string;
+    DEPLOYMENT_TYPES: string[];
+    DEPLOYMENT_TYPE_REALM_MAP: {
+        classic: string;
+        cloud: string;
+        forgeops: string;
+    };
+    DEFAULT_AMSTER_SERVICE: string;
+    DEFAULT_CLASSIC_USERNAME: string;
+    FRODO_METADATA_ID: string;
+    FRODO_CONNECTION_PROFILES_PATH_KEY: string;
+    FRODO_MASTER_KEY_PATH_KEY: string;
+    FRODO_MASTER_KEY_KEY: string;
+    FRODO_TOKEN_CACHE_PATH_KEY: string;
+    GLOSSARY_APPLICATION_OBJECT_TYPE: "/openidm/managed/application";
+    GLOSSARY_ENTITLEMENT_OBJECT_TYPE: "/openidm/managed/assignment";
+    GLOSSARY_ROLE_OBJECT_TYPE: "/openidm/managed/role";
+    AVAILABLE_SCOPES: {
+        AMIntrospectRealmTokenScope: string;
+        AMIntrospectAllTokens: string;
+        AMIntrospectAllTokensAnyRealm: string;
+        OpenIdScope: string;
+        ProfileScope: string;
+        AmFullScope: string;
+        AutoAccessFullScope: string;
+        AnalyticsFullScope: string;
+        DirectConfigurationSessionFullScope: string;
+        DirectConfigurationSessionReadScope: string;
+        CertificateFullScope: string;
+        CertificateReadScope: string;
+        ContentSecurityPolicyFullScope: string;
+        ContentSecurityPolicyReadScope: string;
+        CookieDomainsFullScope: string;
+        CookieDomainsReadScope: string;
+        CustomDomainFullScope: string;
+        CustomDomainReadScope: string;
+        DatasetDeletionFullScope: string;
+        DatasetDeletionReadScope: string;
+        ESVFullScope: string;
+        ESVReadScope: string;
+        ESVUpdateScope: string;
+        ESVRestartScope: string;
+        AdminFederationFullScope: string;
+        AdminFederationReadScope: string;
+        MTLSFullScope: string;
+        PromotionScope: string;
+        PromotionReadScope: string;
+        ProxyConnectFullScope: string;
+        ProxyConnectReadScope: string;
+        ProxyConnectWriteScope: string;
+        ReleaseFullScope: string;
+        ReleaseReadScope: string;
+        TelemetryFullScope: string;
+        TelemetryReadScope: string;
+        SSOCookieFullScope: string;
+        SSOCookieReadScope: string;
+        WSFedAdminScope: string;
+        IdmFullScope: string;
+        IGAFullScope: string;
+    };
+    CLOUD_BROWSER_MODE_AVAILABLE_SCOPES: string[];
+    TOKEN_FRESHNESS_BUFFER_MS: number;
+    RETRY_NOTHING_KEY: string;
+    RETRY_EVERYTHING_KEY: string;
+    RETRY_NETWORK_KEY: string;
+    RETRY_STRATEGIES: string[];
+};
+export default _default;
+//# sourceMappingURL=Constants.d.ts.map

package/types/shared/Constants.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"Constants.d.ts","sourceRoot":"","sources":["../../src/shared/Constants.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,MAAM,iCAAiC,CAAC;AAErE,MAAM,MAAM,SAAS,GAAG;IACtB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,2BAA2B,EAAE,MAAM,CAAC;IACpC,yBAAyB,EAAE,MAAM,CAAC;IAClC,4BAA4B,EAAE,MAAM,CAAC;IACrC,gBAAgB,EAAE,MAAM,EAAE,CAAC;IAC3B,yBAAyB,EAAE;QACzB,OAAO,EAAE,MAAM,CAAC;QAChB,KAAK,EAAE,MAAM,CAAC;QACd,QAAQ,EAAE,MAAM,CAAC;KAClB,CAAC;IACF,iBAAiB,EAAE,MAAM,CAAC;IAC1B,kCAAkC,EAAE,MAAM,CAAC;IAC3C,yBAAyB,EAAE,MAAM,CAAC;IAClC,oBAAoB,EAAE,MAAM,CAAC;IAC7B,gCAAgC,EAAE,kBAAkB,CAAC;IACrD,gCAAgC,EAAE,kBAAkB,CAAC;IACrD,yBAAyB,EAAE,kBAAkB,CAAC;IAC9C,gBAAgB,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACzC,mCAAmC,EAAE,MAAM,EAAE,CAAC;IAC9C,yBAAyB,EAAE,MAAM,CAAC;IAClC,iBAAiB,EAAE,MAAM,CAAC;IAC1B,oBAAoB,EAAE,MAAM,CAAC;IAC7B,iBAAiB,EAAE,MAAM,CAAC;IAC1B,gBAAgB,EAAE,MAAM,EAAE,CAAC;CAC5B,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAyIF,wBAwBE"}

package/types/shared/OperationType.d.ts

@@ -0,0 +1,14 @@
+/**
+ * Canonical, deployment- and consumer-agnostic classification of what kind
+ * of operation a frodo-lib ops-layer function performs.
+ *
+ * @remarks
+ * This lives in `shared/` (core library, no dependency on `mcp/`) precisely
+ * so that both ordinary ops modules (e.g. each module's `getRequiredScopes()`
+ * — see `ops/RequiredScopesOps.ts`) and the MCP capability layer
+ * (`mcp/CapabilityTypes.ts`'s `McpCapabilityOperationType`, which is a type
+ * alias of this one) can share one vocabulary. Core library code must never
+ * import from `mcp/` — dependencies only ever flow the other way.
+ */
+export type OperationType = 'create' | 'count' | 'read' | 'update' | 'delete' | 'search' | 'list' | 'export' | 'import' | 'special';
+//# sourceMappingURL=OperationType.d.ts.map

package/types/shared/OperationType.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"OperationType.d.ts","sourceRoot":"","sources":["../../src/shared/OperationType.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AACH,MAAM,MAAM,aAAa,GACrB,QAAQ,GACR,OAAO,GACP,MAAM,GACN,QAAQ,GACR,QAAQ,GACR,QAAQ,GACR,MAAM,GACN,QAAQ,GACR,QAAQ,GACR,SAAS,CAAC"}

package/types/shared/State.d.ts

@@ -0,0 +1,355 @@
+import { IAxiosRetryConfig } from 'axios-retry';
+import { RetryStrategy } from '../api/BaseApi';
+import { FeatureInterface } from '../api/cloud/FeatureApi';
+import { UserSessionMetaType } from '../ops/AuthenticateOps';
+import { CallerTrustTierResolver } from '../ops/CallerTrustTierOps';
+import { JwkRsa } from '../ops/JoseOps';
+import { AccessTokenMetaType } from '../ops/OAuth2OidcOps';
+import { ProgressIndicatorStatusType, ProgressIndicatorType } from '../utils/Console';
+/**
+ * A credential to inject into an outgoing AM request, resolved at actual
+ * send time (see `api/BaseApi.ts`'s request interceptors) rather than baked
+ * in when the axios instance was constructed.
+ */
+export type AmCredentialOverride = {
+    header: 'Authorization' | 'Cookie';
+    value: string;
+};
+/**
+ * The four credential types Frodo can authenticate a connection with —
+ * shared by `activeCredentialSource` (which one is active this session),
+ * `preferredCredential` (a profile's persisted preference), and
+ * `AuthenticateOps.ts`'s `credentialOverride`/`CredentialOverrideType` (a
+ * one-shot per-invocation override) — one vocabulary across all three
+ * rather than each redeclaring its own copy of the same four literals.
+ */
+export type CredentialType = 'user' | 'svcacct' | 'amster' | 'browser';
+/**
+ * Browser-mode's per-call AM credential source: cloud browser-login mints a
+ * fresh, short-lived, mint-and-discard RFC 8693-exchanged token immediately
+ * before every AM-domain call (see `ops/BrowserAuthenticateOps.ts`'s
+ * `exchangeTokenForScope`) instead of reusing a cached one. Set on `state`
+ * by `getTokensInteractive()` so `api/BaseApi.ts` — which must never import
+ * from `ops/` — can invoke it without knowing anything about token exchange.
+ * Unset for every non-browser auth mode.
+ */
+export type AmCredentialProvider = (requiredScopes?: string[]) => Promise<AmCredentialOverride | null>;
+/**
+ * On-demand, de-duplicated "make my cached token(s) fresh again" callback
+ * for non-browser auth modes, invoked by `api/BaseApi.ts`'s request
+ * interceptors when a cached token is found to be stale at actual send
+ * time — not just at the one point in time `getTokens()` originally checked
+ * it. Set by `AuthenticateOps.ts` right after a successful login, alongside
+ * `scheduleAutoRefresh`'s timer (this is the same underlying mechanism,
+ * just invocable on demand instead of only when the timer fires). Browser
+ * login mode deliberately leaves this unset — cloud's primary token has no
+ * refresh token, so there is no silent way to redo an interactive login;
+ * going stale must surface a clear re-authentication error instead.
+ */
+export type TokenRefreshHandler = () => Promise<void>;
+export type State = {
+    /**
+     * Get a clone of the full state as an object
+     * @returns a clone of the state
+     */
+    getState(): StateInterface;
+    /**
+     * Set the AM host base URL
+     * @param host Access Management base URL, e.g.: https://cdk.iam.example.com/am. To use a connection profile, just specify a unique substring or alias.
+     */
+    setHost(host: string): void;
+    /**
+     * Get the AM host base URL
+     * @returns the AM host base URL
+     */
+    getHost(): string;
+    /**
+     * Set the IDM host base URL
+     * @param host Identity Management base URL, e.g.: https://cdk.iam.example.com/openidm. To use a connection profile, just specify a unique substring or alias.
+     */
+    setIdmHost(host: string): void;
+    /**
+     * Get the IDM host base URL
+     * @returns the IDM host base URL
+     */
+    getIdmHost(): string;
+    setAlias(alias: string): void;
+    getAlias(): string | undefined;
+    setUsername(username: string): void;
+    getUsername(): string;
+    setPassword(password: string): void;
+    getPassword(): string;
+    setRealm(realm: string): void;
+    getRealm(): string;
+    setUseRealmPrefixOnManagedObjects(useRealmPrefixOnManagedObjects: boolean): void;
+    getUseRealmPrefixOnManagedObjects(): boolean;
+    setDeploymentType(type: string): void;
+    getDeploymentType(): string;
+    setIsIGA(isIGA: boolean): void;
+    getIsIGA(): boolean | undefined;
+    setIsPingFed(isPingFed: boolean): void;
+    getIsPingFed(): boolean | undefined;
+    setAdminClientId(type: string): void;
+    getAdminClientId(): string;
+    setAdminClientRedirectUri(type: string): void;
+    getAdminClientRedirectUri(): string;
+    setAllowInsecureConnection(allowInsecureConnection: boolean): void;
+    getAllowInsecureConnection(): boolean;
+    setCookieName(name: string): void;
+    getCookieName(): string;
+    setUserSessionTokenMeta(value: UserSessionMetaType): void;
+    getCookieValue(): string;
+    getUserSessionTokenMeta(): UserSessionMetaType;
+    setFeatures(features: FeatureInterface[]): void;
+    getFeatures(): FeatureInterface[];
+    setAuthenticationHeaderOverrides(overrides: Record<string, string>): void;
+    getAuthenticationHeaderOverrides(): Record<string, string>;
+    setAuthenticationService(service: string): void;
+    getAuthenticationService(): string;
+    setConfigurationHeaderOverrides(overrides: Record<string, string>): void;
+    getConfigurationHeaderOverrides(): Record<string, string>;
+    setServiceAccountId(uuid: string): void;
+    getServiceAccountId(): string;
+    setServiceAccountJwk(jwk: JwkRsa): void;
+    getServiceAccountJwk(): JwkRsa;
+    setServiceAccountScope(scope: string): void;
+    getServiceAccountScope(): string;
+    setAmsterPrivateKey(key: string): void;
+    getAmsterPrivateKey(): string;
+    setUseBearerTokenForAmApis(useBearerTokenForAmApis: boolean): void;
+    getUseBearerTokenForAmApis(): boolean;
+    setAuthMode(authMode: 'noninteractive' | 'interactive'): void;
+    getAuthMode(): 'noninteractive' | 'interactive';
+    /**
+     * Explicit, persisted preference for which credential type later implicit
+     * commands against this profile should use — `'browser'` included, unlike
+     * the deprecated `defaultCredential` accessors below. An `undefined` value
+     * means "no preference set," not "none of the above." Never mirrors
+     * ambient session state on save; only ever written when the caller
+     * explicitly requests it (e.g. via `--preferred-credential`), so an
+     * unrelated save never silently overwrites a previously-configured
+     * preference — and, when explicitly set, takes priority over a stale
+     * legacy `authMode: 'interactive'` a profile may already carry (the fix
+     * for there previously being no way to undo that once persisted). Backed
+     * by the same underlying storage `defaultCredential` uses below — the two
+     * are two typed views onto one value, not two separate fields. See
+     * `AuthenticateOps.ts`'s `tryBrowserLogin()`/`getTokens()` for how this is
+     * consulted.
+     */
+    setPreferredCredential(preferredCredential: CredentialType): void;
+    getPreferredCredential(): CredentialType | undefined;
+    /**
+     * Only meaningful when `preferredCredential === 'browser'`: whether this
+     * profile prefers the OAuth2 Device Authorization Grant over the default
+     * loopback-redirect flow for its interactive logins, without needing
+     * `--device` repeated on every invocation. `undefined` means no
+     * preference set (falls back to whatever `--device`/the env var says for
+     * that one invocation, exactly like today).
+     */
+    setPreferredDeviceFlow(preferredDeviceFlow: boolean): void;
+    getPreferredDeviceFlow(): boolean | undefined;
+    /**
+     * @deprecated since v4.9.0 — use `setPreferredCredential()`/
+     * `getPreferredCredential()` instead, which also support `'browser'`.
+     * Kept working, unchanged, for external callers still typed against the
+     * 3-value union: `getDefaultCredential()` defensively filters out
+     * `'browser'` (returning `undefined` instead) so it can never hand back a
+     * value outside its own declared type, even though it now shares storage
+     * with the wider `preferredCredential`.
+     */
+    setDefaultCredential(defaultCredential: 'user' | 'svcacct' | 'amster'): void;
+    /** @deprecated since v4.9.0 — use `getPreferredCredential()` instead. */
+    getDefaultCredential(): 'user' | 'svcacct' | 'amster' | undefined;
+    setTokenRefreshHandler(handler: TokenRefreshHandler | undefined): void;
+    getTokenRefreshHandler(): TokenRefreshHandler | undefined;
+    setBrowserLoginClientId(clientId: string): void;
+    getBrowserLoginClientId(): string;
+    setBrowserLoginScope(scope: string): void;
+    getBrowserLoginScope(): string;
+    setAmBearerTokenAcceptanceProbed(probed: boolean): void;
+    getAmBearerTokenAcceptanceProbed(): boolean | undefined;
+    setRefreshToken(token: string): void;
+    getRefreshToken(): string;
+    setIdToken(token: string): void;
+    getIdToken(): string;
+    setNeedsReauthentication(needsReauthentication: boolean): void;
+    getNeedsReauthentication(): boolean;
+    setAmCredentialProvider(provider: AmCredentialProvider): void;
+    getAmCredentialProvider(): AmCredentialProvider | undefined;
+    /** Cached for the life of the session by `determineCallerTrustTier()` (`ops/CallerTrustTierOps.ts`). */
+    setCallerTrustTier(tier: 'full-trust' | 'delegated'): void;
+    getCallerTrustTier(): 'full-trust' | 'delegated' | undefined;
+    /** Extension point letting a customer plug in their own privilege model for browser-login sessions — see `ops/CallerTrustTierOps.ts`. */
+    setCallerTrustTierResolver(resolver: CallerTrustTierResolver | undefined): void;
+    getCallerTrustTierResolver(): CallerTrustTierResolver | undefined;
+    setBearerTokenMeta(token: AccessTokenMetaType): void;
+    getBearerToken(): string;
+    getBearerTokenMeta(): AccessTokenMetaType;
+    /**
+     * Which credential type is currently active for this session — set once,
+     * wherever `getTokens()`'s non-interactive branches (or a browser login)
+     * actually activate a credential. Used by `ops/PrivilegeEscalationOps.ts`
+     * to know where on the escalation ladder the current session sits.
+     */
+    setActiveCredentialSource(source: CredentialType): void;
+    getActiveCredentialSource(): CredentialType | undefined;
+    /**
+     * Extension point letting `api/BaseApi.ts` trigger a credential-privilege
+     * escalation without importing `ops/AuthenticateOps.ts` directly (would be
+     * circular — `AuthenticateOps.ts` already depends on `BaseApi.ts`
+     * transitively). Installed once by `getTokens()` after the initial
+     * credential activates; called by `attachCredentialInterceptor()` when a
+     * pre-flight scope check fails. Resolves `true` if a higher-tier
+     * credential was found and activated (the failed request should be
+     * retried), `false` if there is nothing left to escalate to.
+     */
+    setPrivilegeEscalationHandler(handler: (() => Promise<boolean>) | undefined): void;
+    getPrivilegeEscalationHandler(): (() => Promise<boolean>) | undefined;
+    setPfBearerTokenMeta(token: AccessTokenMetaType): void;
+    getPfBearerToken(): string;
+    getPfBearerTokenMeta(): AccessTokenMetaType;
+    setLogApiKey(key: string): void;
+    getLogApiKey(): string;
+    setLogApiSecret(secret: string): void;
+    getLogApiSecret(): string;
+    setAmVersion(version: string): void;
+    getAmVersion(): string;
+    setIdmVersion(version: string): void;
+    getIdmVersion(): string;
+    setFrodoVersion(version: string): void;
+    getFrodoVersion(): string;
+    setConnectionProfilesPath(path: string): void;
+    getConnectionProfilesPath(): string;
+    setUseTokenCache(useTokenCache: boolean): void;
+    getUseTokenCache(): boolean;
+    setTokenCachePath(path: string): void;
+    getTokenCachePath(): string;
+    setMasterKeyPath(path: string): void;
+    getMasterKeyPath(): string;
+    setOutputFile(file: string): void;
+    getOutputFile(): string;
+    setDirectory(directory: string): void;
+    setEnv(key: string, value: string): void;
+    setEnvs(env: Record<string, string>, clear?: boolean): void;
+    getEnv(key: string): string | undefined;
+    getEnvs(): Record<string, string>;
+    getDirectory(): string;
+    setForceUpdate(forceUpdate: boolean): void;
+    getForceUpdate(): boolean;
+    setAutoRefreshTimer(timer: NodeJS.Timeout): void;
+    getAutoRefreshTimer(): NodeJS.Timeout;
+    setCurlirizeHandler(handler: (message: string) => void): void;
+    getCurlirizeHandler(): (message: string) => void;
+    setCurlirize(curlirize: boolean): void;
+    getCurlirize(): boolean;
+    setCreateProgressHandler(handler: (type: ProgressIndicatorType, total?: number, message?: string) => string): void;
+    getCreateProgressHandler(): (type: ProgressIndicatorType, total?: number, message?: string) => string;
+    setUpdateProgressHandler(handler: (id: string, message: string) => void): void;
+    getUpdateProgressHandler(): (id: string, message: string) => void;
+    setStopProgressHandler(handler: (id: string, message: string, status?: ProgressIndicatorStatusType) => void): void;
+    getStopProgressHandler(): (id: string, message: string, status?: ProgressIndicatorStatusType) => void;
+    setPrintHandler(handler: (message: string | object, type?: string, newline?: boolean) => void): void;
+    getPrintHandler(): (message: string | object, type?: string, newline?: boolean) => void;
+    setErrorHandler(handler: (error: Error, message?: string) => void): void;
+    getErrorHandler(): (error: Error, message?: string) => void;
+    setVerboseHandler(handler: (message: string | object) => void): void;
+    getVerboseHandler(): (message: string | object) => void;
+    setVerbose(verbose: boolean): void;
+    getVerbose(): boolean;
+    setDebugHandler(handler: (message: string | object) => void): void;
+    getDebugHandler(): (message: string | object) => void;
+    setDebug(debug: boolean): void;
+    getDebug(): boolean;
+    setColorTheme(theme: 'dark' | 'light'): void;
+    getColorTheme(): 'dark' | 'light' | undefined;
+    getAxiosRetryConfig(): IAxiosRetryConfig;
+    setAxiosRetryConfig(axiosRetryConfig: IAxiosRetryConfig): void;
+    setAxiosRetryStrategy(strategy: RetryStrategy): void;
+    /**
+     * Reset the state to default values
+     */
+    reset(): void;
+    /**
+     * @deprecated since v0.17.0 use `setHost(host: string)` instead
+     */
+    setTenant(tenant: string): void;
+    /**
+     * @deprecated since v0.17.0 use `getHost` instead
+     */
+    getTenant(): string;
+};
+declare const _default: (initialState: StateInterface) => State;
+export default _default;
+export interface StateInterface {
+    host?: string;
+    idmHost?: string;
+    alias?: string;
+    username?: string;
+    password?: string;
+    realm?: string;
+    useRealmPrefixOnManagedObjects?: boolean;
+    deploymentType?: string;
+    isIGA?: boolean;
+    isPingFed?: boolean;
+    adminClientId?: string;
+    adminClientRedirectUri?: string;
+    allowInsecureConnection?: boolean;
+    authenticationHeaderOverrides?: Record<string, string>;
+    authenticationService?: string;
+    configurationHeaderOverrides?: Record<string, string>;
+    cookieName?: string;
+    userSessionToken?: UserSessionMetaType;
+    features?: FeatureInterface[];
+    serviceAccountId?: string;
+    serviceAccountJwk?: JwkRsa;
+    serviceAccountScope?: string;
+    amsterPrivateKey?: string;
+    authMode?: 'noninteractive' | 'interactive';
+    defaultCredential?: CredentialType;
+    preferredDeviceFlow?: boolean;
+    activeCredentialSource?: CredentialType;
+    privilegeEscalationHandler?: () => Promise<boolean>;
+    tokenRefreshHandler?: TokenRefreshHandler;
+    amCredentialProvider?: AmCredentialProvider;
+    browserLoginClientId?: string;
+    browserLoginScope?: string;
+    amBearerTokenAcceptanceProbed?: boolean;
+    refreshToken?: string;
+    idToken?: string;
+    needsReauthentication?: boolean;
+    callerTrustTier?: 'full-trust' | 'delegated';
+    callerTrustTierResolver?: CallerTrustTierResolver;
+    useBearerTokenForAmApis?: boolean;
+    bearerToken?: AccessTokenMetaType;
+    pfBearerToken?: AccessTokenMetaType;
+    logApiKey?: string;
+    logApiSecret?: string;
+    amVersion?: string;
+    idmVersion?: string;
+    frodoVersion?: string;
+    connectionProfilesPath?: string;
+    useTokenCache?: boolean;
+    tokenCachePath?: string;
+    masterKeyPath?: string;
+    outputFile?: string;
+    directory?: string;
+    forceUpdate?: boolean;
+    autoRefreshTimer?: NodeJS.Timeout;
+    env?: Record<string, string>;
+    printHandler?: (message: string | object, type?: string, newline?: boolean) => void;
+    errorHandler?: (error: Error, message: string) => void;
+    verboseHandler?: (message: string | object) => void;
+    verbose?: boolean;
+    debugHandler?: (message: string | object) => void;
+    debug?: boolean;
+    colorTheme?: 'dark' | 'light';
+    curlirizeHandler?: (message: string) => void;
+    curlirize?: boolean;
+    createProgressHandler?: (type: ProgressIndicatorType, total?: number, message?: string) => string;
+    updateProgressHandler?: (id: string, message: string) => void;
+    stopProgressHandler?: (id: string, message: string, status?: string) => void;
+    axiosRetryConfig?: IAxiosRetryConfig;
+}
+export declare const getVerbose: () => boolean;
+export declare const getDebug: () => boolean;
+//# sourceMappingURL=State.d.ts.map

package/types/shared/State.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"State.d.ts","sourceRoot":"","sources":["../../src/shared/State.ts"],"names":[],"mappings":"AACA,OAAO,EAEL,iBAAiB,EAElB,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAC/C,OAAO,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAC3D,OAAO,EAAE,mBAAmB,EAAE,MAAM,wBAAwB,CAAC;AAC7D,OAAO,EAAE,uBAAuB,EAAE,MAAM,2BAA2B,CAAC;AAEpE,OAAO,EAAE,MAAM,EAAE,MAAM,gBAAgB,CAAC;AACxC,OAAO,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AAI3D,OAAO,EACL,2BAA2B,EAC3B,qBAAqB,EACtB,MAAM,kBAAkB,CAAC;AAK1B;;;;GAIG;AACH,MAAM,MAAM,oBAAoB,GAAG;IACjC,MAAM,EAAE,eAAe,GAAG,QAAQ,CAAC;IACnC,KAAK,EAAE,MAAM,CAAC;CACf,CAAC;AAEF;;;;;;;GAOG;AACH,MAAM,MAAM,cAAc,GAAG,MAAM,GAAG,SAAS,GAAG,QAAQ,GAAG,SAAS,CAAC;AAEvE;;;;;;;;GAQG;AACH,MAAM,MAAM,oBAAoB,GAAG,CACjC,cAAc,CAAC,EAAE,MAAM,EAAE,KACtB,OAAO,CAAC,oBAAoB,GAAG,IAAI,CAAC,CAAC;AAE1C;;;;;;;;;;;GAWG;AACH,MAAM,MAAM,mBAAmB,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;AAEtD,MAAM,MAAM,KAAK,GAAG;IAClB;;;OAGG;IACH,QAAQ,IAAI,cAAc,CAAC;IAC3B;;;OAGG;IACH,OAAO,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B;;;OAGG;IACH,OAAO,IAAI,MAAM,CAAC;IAClB;;;OAGG;IACH,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B;;;OAGG;IACH,UAAU,IAAI,MAAM,CAAC;IACrB,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,QAAQ,IAAI,MAAM,GAAG,SAAS,CAAC;IAC/B,WAAW,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACpC,WAAW,IAAI,MAAM,CAAC;IACtB,WAAW,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACpC,WAAW,IAAI,MAAM,CAAC;IACtB,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,QAAQ,IAAI,MAAM,CAAC;IACnB,iCAAiC,CAC/B,8BAA8B,EAAE,OAAO,GACtC,IAAI,CAAC;IACR,iCAAiC,IAAI,OAAO,CAAC;IAC7C,iBAAiB,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACtC,iBAAiB,IAAI,MAAM,CAAC;IAC5B,QAAQ,CAAC,KAAK,EAAE,OAAO,GAAG,IAAI,CAAC;IAC/B,QAAQ,IAAI,OAAO,GAAG,SAAS,CAAC;IAChC,YAAY,CAAC,SAAS,EAAE,OAAO,GAAG,IAAI,CAAC;IACvC,YAAY,IAAI,OAAO,GAAG,SAAS,CAAC;IACpC,gBAAgB,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACrC,gBAAgB,IAAI,MAAM,CAAC;IAC3B,yBAAyB,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9C,yBAAyB,IAAI,MAAM,CAAC;IACpC,0BAA0B,CAAC,uBAAuB,EAAE,OAAO,GAAG,IAAI,CAAC;IACnE,0BAA0B,IAAI,OAAO,CAAC;IACtC,aAAa,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IAClC,aAAa,IAAI,MAAM,CAAC;IACxB,uBAAuB,CAAC,KAAK,EAAE,mBAAmB,GAAG,IAAI,CAAC;IAC1D,cAAc,IAAI,MAAM,CAAC;IACzB,uBAAuB,IAAI,mBAAmB,CAAC;IAC/C,WAAW,CAAC,QAAQ,EAAE,gBAAgB,EAAE,GAAG,IAAI,CAAC;IAChD,WAAW,IAAI,gBAAgB,EAAE,CAAC;IAClC,gCAAgC,CAAC,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,IAAI,CAAC;IAC1E,gCAAgC,IAAI,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC3D,wBAAwB,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IAChD,wBAAwB,IAAI,MAAM,CAAC;IACnC,+BAA+B,CAAC,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,IAAI,CAAC;IACzE,+BAA+B,IAAI,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC1D,mBAAmB,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACxC,mBAAmB,IAAI,MAAM,CAAC;IAC9B,oBAAoB,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;IACxC,oBAAoB,IAAI,MAAM,CAAC;IAC/B,sBAAsB,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5C,sBAAsB,IAAI,MAAM,CAAC;IACjC,mBAAmB,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;IACvC,mBAAmB,IAAI,MAAM,CAAC;IAC9B,0BAA0B,CAAC,uBAAuB,EAAE,OAAO,GAAG,IAAI,CAAC;IACnE,0BAA0B,IAAI,OAAO,CAAC;IACtC,WAAW,CAAC,QAAQ,EAAE,gBAAgB,GAAG,aAAa,GAAG,IAAI,CAAC;IAC9D,WAAW,IAAI,gBAAgB,GAAG,aAAa,CAAC;IAChD;;;;;;;;;;;;;;;OAeG;IACH,sBAAsB,CAAC,mBAAmB,EAAE,cAAc,GAAG,IAAI,CAAC;IAClE,sBAAsB,IAAI,cAAc,GAAG,SAAS,CAAC;IACrD;;;;;;;OAOG;IACH,sBAAsB,CAAC,mBAAmB,EAAE,OAAO,GAAG,IAAI,CAAC;IAC3D,sBAAsB,IAAI,OAAO,GAAG,SAAS,CAAC;IAC9C;;;;;;;;OAQG;IACH,oBAAoB,CAAC,iBAAiB,EAAE,MAAM,GAAG,SAAS,GAAG,QAAQ,GAAG,IAAI,CAAC;IAC7E,yEAAyE;IACzE,oBAAoB,IAAI,MAAM,GAAG,SAAS,GAAG,QAAQ,GAAG,SAAS,CAAC;IAClE,sBAAsB,CAAC,OAAO,EAAE,mBAAmB,GAAG,SAAS,GAAG,IAAI,CAAC;IACvE,sBAAsB,IAAI,mBAAmB,GAAG,SAAS,CAAC;IAC1D,uBAAuB,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IAChD,uBAAuB,IAAI,MAAM,CAAC;IAClC,oBAAoB,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1C,oBAAoB,IAAI,MAAM,CAAC;IAC/B,gCAAgC,CAAC,MAAM,EAAE,OAAO,GAAG,IAAI,CAAC;IACxD,gCAAgC,IAAI,OAAO,GAAG,SAAS,CAAC;IACxD,eAAe,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrC,eAAe,IAAI,MAAM,CAAC;IAC1B,UAAU,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,UAAU,IAAI,MAAM,CAAC;IACrB,wBAAwB,CAAC,qBAAqB,EAAE,OAAO,GAAG,IAAI,CAAC;IAC/D,wBAAwB,IAAI,OAAO,CAAC;IACpC,uBAAuB,CAAC,QAAQ,EAAE,oBAAoB,GAAG,IAAI,CAAC;IAC9D,uBAAuB,IAAI,oBAAoB,GAAG,SAAS,CAAC;IAC5D,wGAAwG;IACxG,kBAAkB,CAAC,IAAI,EAAE,YAAY,GAAG,WAAW,GAAG,IAAI,CAAC;IAC3D,kBAAkB,IAAI,YAAY,GAAG,WAAW,GAAG,SAAS,CAAC;IAC7D,yIAAyI;IACzI,0BAA0B,CACxB,QAAQ,EAAE,uBAAuB,GAAG,SAAS,GAC5C,IAAI,CAAC;IACR,0BAA0B,IAAI,uBAAuB,GAAG,SAAS,CAAC;IAClE,kBAAkB,CAAC,KAAK,EAAE,mBAAmB,GAAG,IAAI,CAAC;IACrD,cAAc,IAAI,MAAM,CAAC;IACzB,kBAAkB,IAAI,mBAAmB,CAAC;IAC1C;;;;;OAKG;IACH,yBAAyB,CAAC,MAAM,EAAE,cAAc,GAAG,IAAI,CAAC;IACxD,yBAAyB,IAAI,cAAc,GAAG,SAAS,CAAC;IACxD;;;;;;;;;OASG;IACH,6BAA6B,CAC3B,OAAO,EAAE,CAAC,MAAM,OAAO,CAAC,OAAO,CAAC,CAAC,GAAG,SAAS,GAC5C,IAAI,CAAC;IACR,6BAA6B,IAAI,CAAC,MAAM,OAAO,CAAC,OAAO,CAAC,CAAC,GAAG,SAAS,CAAC;IACtE,oBAAoB,CAAC,KAAK,EAAE,mBAAmB,GAAG,IAAI,CAAC;IACvD,gBAAgB,IAAI,MAAM,CAAC;IAC3B,oBAAoB,IAAI,mBAAmB,CAAC;IAC5C,YAAY,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,YAAY,IAAI,MAAM,CAAC;IACvB,eAAe,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtC,eAAe,IAAI,MAAM,CAAC;IAC1B,YAAY,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACpC,YAAY,IAAI,MAAM,CAAC;IACvB,aAAa,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACrC,aAAa,IAAI,MAAM,CAAC;IACxB,eAAe,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvC,eAAe,IAAI,MAAM,CAAC;IAC1B,yBAAyB,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9C,yBAAyB,IAAI,MAAM,CAAC;IACpC,gBAAgB,CAAC,aAAa,EAAE,OAAO,GAAG,IAAI,CAAC;IAC/C,gBAAgB,IAAI,OAAO,CAAC;IAC5B,iBAAiB,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACtC,iBAAiB,IAAI,MAAM,CAAC;IAC5B,gBAAgB,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACrC,gBAAgB,IAAI,MAAM,CAAC;IAC3B,aAAa,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IAClC,aAAa,IAAI,MAAM,CAAC;IACxB,YAAY,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACtC,MAAM,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACzC,OAAO,CAAC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,KAAK,CAAC,EAAE,OAAO,GAAG,IAAI,CAAC;IAC5D,MAAM,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAAC;IACxC,OAAO,IAAI,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAClC,YAAY,IAAI,MAAM,CAAC;IACvB,cAAc,CAAC,WAAW,EAAE,OAAO,GAAG,IAAI,CAAC;IAC3C,cAAc,IAAI,OAAO,CAAC;IAC1B,mBAAmB,CAAC,KAAK,EAAE,MAAM,CAAC,OAAO,GAAG,IAAI,CAAC;IACjD,mBAAmB,IAAI,MAAM,CAAC,OAAO,CAAC;IACtC,mBAAmB,CAAC,OAAO,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,GAAG,IAAI,CAAC;IAC9D,mBAAmB,IAAI,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;IACjD,YAAY,CAAC,SAAS,EAAE,OAAO,GAAG,IAAI,CAAC;IACvC,YAAY,IAAI,OAAO,CAAC;IACxB,wBAAwB,CACtB,OAAO,EAAE,CACP,IAAI,EAAE,qBAAqB,EAC3B,KAAK,CAAC,EAAE,MAAM,EACd,OAAO,CAAC,EAAE,MAAM,KACb,MAAM,GACV,IAAI,CAAC;IACR,wBAAwB,IAAI,CAC1B,IAAI,EAAE,qBAAqB,EAC3B,KAAK,CAAC,EAAE,MAAM,EACd,OAAO,CAAC,EAAE,MAAM,KACb,MAAM,CAAC;IACZ,wBAAwB,CACtB,OAAO,EAAE,CAAC,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,KAAK,IAAI,GAC7C,IAAI,CAAC;IACR,wBAAwB,IAAI,CAAC,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;IAClE,sBAAsB,CACpB,OAAO,EAAE,CACP,EAAE,EAAE,MAAM,EACV,OAAO,EAAE,MAAM,EACf,MAAM,CAAC,EAAE,2BAA2B,KACjC,IAAI,GACR,IAAI,CAAC;IACR,sBAAsB,IAAI,CACxB,EAAE,EAAE,MAAM,EACV,OAAO,EAAE,MAAM,EACf,MAAM,CAAC,EAAE,2BAA2B,KACjC,IAAI,CAAC;IACV,eAAe,CACb,OAAO,EAAE,CACP,OAAO,EAAE,MAAM,GAAG,MAAM,EACxB,IAAI,CAAC,EAAE,MAAM,EACb,OAAO,CAAC,EAAE,OAAO,KACd,IAAI,GACR,IAAI,CAAC;IACR,eAAe,IAAI,CACjB,OAAO,EAAE,MAAM,GAAG,MAAM,EACxB,IAAI,CAAC,EAAE,MAAM,EACb,OAAO,CAAC,EAAE,OAAO,KACd,IAAI,CAAC;IACV,eAAe,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,KAAK,EAAE,OAAO,CAAC,EAAE,MAAM,KAAK,IAAI,GAAG,IAAI,CAAC;IACzE,eAAe,IAAI,CAAC,KAAK,EAAE,KAAK,EAAE,OAAO,CAAC,EAAE,MAAM,KAAK,IAAI,CAAC;IAC5D,iBAAiB,CAAC,OAAO,EAAE,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,KAAK,IAAI,GAAG,IAAI,CAAC;IACrE,iBAAiB,IAAI,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,KAAK,IAAI,CAAC;IACxD,UAAU,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,CAAC;IACnC,UAAU,IAAI,OAAO,CAAC;IACtB,eAAe,CAAC,OAAO,EAAE,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,KAAK,IAAI,GAAG,IAAI,CAAC;IACnE,eAAe,IAAI,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,KAAK,IAAI,CAAC;IACtD,QAAQ,CAAC,KAAK,EAAE,OAAO,GAAG,IAAI,CAAC;IAC/B,QAAQ,IAAI,OAAO,CAAC;IACpB,aAAa,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,GAAG,IAAI,CAAC;IAC7C,aAAa,IAAI,MAAM,GAAG,OAAO,GAAG,SAAS,CAAC;IAC9C,mBAAmB,IAAI,iBAAiB,CAAC;IACzC,mBAAmB,CAAC,gBAAgB,EAAE,iBAAiB,GAAG,IAAI,CAAC;IAC/D,qBAAqB,CAAC,QAAQ,EAAE,aAAa,GAAG,IAAI,CAAC;IACrD;;OAEG;IACH,KAAK,IAAI,IAAI,CAAC;IAId;;OAEG;IACH,SAAS,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC;;OAEG;IACH,SAAS,IAAI,MAAM,CAAC;CACrB,CAAC;yBAEc,cAAc,cAAc,KAAG,KAAK;AAApD,wBA+kBE;AAEF,MAAM,WAAW,cAAc;IAE7B,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,8BAA8B,CAAC,EAAE,OAAO,CAAC;IACzC,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,sBAAsB,CAAC,EAAE,MAAM,CAAC;IAChC,uBAAuB,CAAC,EAAE,OAAO,CAAC;IAElC,6BAA6B,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACvD,qBAAqB,CAAC,EAAE,MAAM,CAAC;IAE/B,4BAA4B,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAEtD,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,gBAAgB,CAAC,EAAE,mBAAmB,CAAC;IAEvC,QAAQ,CAAC,EAAE,gBAAgB,EAAE,CAAC;IAE9B,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAE7B,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAO1B,QAAQ,CAAC,EAAE,gBAAgB,GAAG,aAAa,CAAC;IAC5C,iBAAiB,CAAC,EAAE,cAAc,CAAC;IACnC,mBAAmB,CAAC,EAAE,OAAO,CAAC;IAC9B,sBAAsB,CAAC,EAAE,cAAc,CAAC;IACxC,0BAA0B,CAAC,EAAE,MAAM,OAAO,CAAC,OAAO,CAAC,CAAC;IACpD,mBAAmB,CAAC,EAAE,mBAAmB,CAAC;IAC1C,oBAAoB,CAAC,EAAE,oBAAoB,CAAC;IAC5C,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAI3B,6BAA6B,CAAC,EAAE,OAAO,CAAC;IACxC,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,OAAO,CAAC,EAAE,MAAM,CAAC;IAIjB,qBAAqB,CAAC,EAAE,OAAO,CAAC;IAGhC,eAAe,CAAC,EAAE,YAAY,GAAG,WAAW,CAAC;IAC7C,uBAAuB,CAAC,EAAE,uBAAuB,CAAC;IAElD,uBAAuB,CAAC,EAAE,OAAO,CAAC;IAClC,WAAW,CAAC,EAAE,mBAAmB,CAAC;IAClC,aAAa,CAAC,EAAE,mBAAmB,CAAC;IAEpC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,YAAY,CAAC,EAAE,MAAM,CAAC;IAEtB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,YAAY,CAAC,EAAE,MAAM,CAAC;IAEtB,sBAAsB,CAAC,EAAE,MAAM,CAAC;IAChC,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,gBAAgB,CAAC,EAAE,MAAM,CAAC,OAAO,CAAC;IAClC,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAE7B,YAAY,CAAC,EAAE,CACb,OAAO,EAAE,MAAM,GAAG,MAAM,EACxB,IAAI,CAAC,EAAE,MAAM,EACb,OAAO,CAAC,EAAE,OAAO,KACd,IAAI,CAAC;IACV,YAAY,CAAC,EAAE,CAAC,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;IACvD,cAAc,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,KAAK,IAAI,CAAC;IACpD,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,YAAY,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,KAAK,IAAI,CAAC;IAClD,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,UAAU,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC;IAC9B,gBAAgB,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;IAC7C,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,qBAAqB,CAAC,EAAE,CACtB,IAAI,EAAE,qBAAqB,EAC3B,KAAK,CAAC,EAAE,MAAM,EACd,OAAO,CAAC,EAAE,MAAM,KACb,MAAM,CAAC;IACZ,qBAAqB,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;IAC9D,mBAAmB,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,KAAK,IAAI,CAAC;IAC7E,gBAAgB,CAAC,EAAE,iBAAiB,CAAC;CACtC;AA4ED,eAAO,MAAM,UAAU,QAAO,OAA8B,CAAC;AAE7D,eAAO,MAAM,QAAQ,QAAO,OACgC,CAAC"}

package/types/shared/Version.d.ts

@@ -0,0 +1,16 @@
+export declare const getUserAgent: () => string;
+export declare const getPackageVersion: () => string;
+export declare const getVersionFromPackage: () => string;
+/**
+ * ISO 8601 timestamp of when this frodo-lib bundle was built, substituted as
+ * a literal by tsup's `define` at bundle time (see tsup.config.ts). This is
+ * the only reliable way to tell whether a running process actually picked up
+ * a given source change — a packaging step downstream (e.g. frodo-cli's
+ * bundling of frodo-lib, or pkg's binary packaging) can silently produce a
+ * stale artifact despite every file on disk looking current. Falls back to
+ * an explicit placeholder when running from raw TypeScript source (ts-jest,
+ * ts-node) rather than a tsup build, since no bundler ever substitutes the
+ * identifier there.
+ */
+export declare const getLibBuildTimestamp: () => string;
+//# sourceMappingURL=Version.d.ts.map

package/types/shared/Version.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"Version.d.ts","sourceRoot":"","sources":["../../src/shared/Version.ts"],"names":[],"mappings":"AAEA,eAAO,MAAM,YAAY,cAAqC,CAAC;AAE/D,eAAO,MAAM,iBAAiB,cAA+C,CAAC;AAE9E,eAAO,MAAM,qBAAqB,cAAoB,CAAC;AAIvD;;;;;;;;;;GAUG;AACH,eAAO,MAAM,oBAAoB,QAAO,MAGe,CAAC"}