@sfdxy/anypoint-connect 0.17.0 → 0.18.0

package/dist/auth/ClientCredentialsProvider.d.ts

@@ -0,0 +1,23 @@
+import type { TokenProvider } from './TokenProvider.js';
+export interface ClientCredentialsConfig {
+    clientId: string;
+    clientSecret: string;
+    baseUrl?: string;
+}
+/**
+ * Service authentication: a Connected App's client credentials exchanged for a token. The token lives
+ * in memory only (never the human token file), concurrent callers share one exchange, and it is
+ * renewed shortly before it expires. It uses its own request, not the authenticated client, so token
+ * acquisition cannot call itself.
+ */
+export declare class ClientCredentialsProvider implements TokenProvider {
+    readonly unauthorizedMessage = "The service token was rejected. Check that the Connected App is still valid and has access to this organization.";
+    private readonly config;
+    private cached;
+    private pending;
+    constructor(config: ClientCredentialsConfig);
+    invalidate(): void;
+    getAccessToken(): Promise<string>;
+    private acquire;
+}
+//# sourceMappingURL=ClientCredentialsProvider.d.ts.map

package/dist/auth/ClientCredentialsProvider.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ClientCredentialsProvider.d.ts","sourceRoot":"","sources":["../../src/auth/ClientCredentialsProvider.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAQxD,MAAM,WAAW,uBAAuB;IACpC,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,EAAE,MAAM,CAAC;IACrB,OAAO,CAAC,EAAE,MAAM,CAAC;CACpB;AASD;;;;;GAKG;AACH,qBAAa,yBAA0B,YAAW,aAAa;IAC3D,QAAQ,CAAC,mBAAmB,sHAC2F;IACvH,OAAO,CAAC,QAAQ,CAAC,MAAM,CAA0B;IACjD,OAAO,CAAC,MAAM,CAAqD;IACnE,OAAO,CAAC,OAAO,CAAgC;gBAEnC,MAAM,EAAE,uBAAuB;IAO3C,UAAU,IAAI,IAAI;IAIZ,cAAc,IAAI,OAAO,CAAC,MAAM,CAAC;YAQzB,OAAO;CAyBxB"}

package/dist/auth/ClientCredentialsProvider.js

@@ -0,0 +1,59 @@
+const DEFAULT_BASE_URL = 'https://anypoint.mulesoft.com';
+/** Used when the platform omits `expires_in`: a short lifetime, so a missing field never over-trusts a token. */
+const FALLBACK_LIFETIME_SECONDS = 600;
+const RENEW_BEFORE_EXPIRY_MS = 60_000;
+const TOKEN_REQUEST_TIMEOUT_MS = 30_000;
+/**
+ * Service authentication: a Connected App's client credentials exchanged for a token. The token lives
+ * in memory only (never the human token file), concurrent callers share one exchange, and it is
+ * renewed shortly before it expires. It uses its own request, not the authenticated client, so token
+ * acquisition cannot call itself.
+ */
+export class ClientCredentialsProvider {
+    unauthorizedMessage = 'The service token was rejected. Check that the Connected App is still valid and has access to this organization.';
+    config;
+    cached = null;
+    pending = null;
+    constructor(config) {
+        if (!config.clientId || !config.clientSecret) {
+            throw new Error('client_credentials authentication needs a client ID and secret.');
+        }
+        this.config = config;
+    }
+    invalidate() {
+        this.cached = null;
+    }
+    async getAccessToken() {
+        if (this.cached && this.cached.expiresAt - Date.now() > RENEW_BEFORE_EXPIRY_MS)
+            return this.cached.token;
+        this.pending ??= this.acquire().finally(() => {
+            this.pending = null;
+        });
+        return this.pending;
+    }
+    async acquire() {
+        const url = `${this.config.baseUrl || DEFAULT_BASE_URL}/accounts/api/v2/oauth2/token`;
+        const response = await fetch(url, {
+            method: 'POST',
+            signal: AbortSignal.timeout(TOKEN_REQUEST_TIMEOUT_MS), // a hung endpoint must not block every request
+            headers: { 'Content-Type': 'application/x-www-form-urlencoded' },
+            body: new URLSearchParams({
+                grant_type: 'client_credentials',
+                client_id: this.config.clientId,
+                client_secret: this.config.clientSecret,
+            }).toString(),
+        });
+        const data = (await response.json().catch(() => ({})));
+        if (!response.ok || !data.access_token) {
+            // Only the platform's own error fields: never the request, which carries the secret.
+            const detail = [data.error, data.error_description].filter(Boolean).join(': ');
+            throw new Error(`Service token request failed (HTTP ${response.status})${detail ? `: ${detail}` : ''}`);
+        }
+        const seconds = Number.isFinite(data.expires_in) && data.expires_in > 0
+            ? data.expires_in
+            : FALLBACK_LIFETIME_SECONDS;
+        this.cached = { token: data.access_token, expiresAt: Date.now() + seconds * 1000 };
+        return data.access_token;
+    }
+}
+//# sourceMappingURL=ClientCredentialsProvider.js.map

package/dist/auth/ClientCredentialsProvider.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ClientCredentialsProvider.js","sourceRoot":"","sources":["../../src/auth/ClientCredentialsProvider.ts"],"names":[],"mappings":"AAEA,MAAM,gBAAgB,GAAG,+BAA+B,CAAC;AACzD,iHAAiH;AACjH,MAAM,yBAAyB,GAAG,GAAG,CAAC;AACtC,MAAM,sBAAsB,GAAG,MAAM,CAAC;AACtC,MAAM,wBAAwB,GAAG,MAAM,CAAC;AAexC;;;;;GAKG;AACH,MAAM,OAAO,yBAAyB;IACzB,mBAAmB,GACxB,kHAAkH,CAAC;IACtG,MAAM,CAA0B;IACzC,MAAM,GAAgD,IAAI,CAAC;IAC3D,OAAO,GAA2B,IAAI,CAAC;IAE/C,YAAY,MAA+B;QACvC,IAAI,CAAC,MAAM,CAAC,QAAQ,IAAI,CAAC,MAAM,CAAC,YAAY,EAAE,CAAC;YAC3C,MAAM,IAAI,KAAK,CAAC,iEAAiE,CAAC,CAAC;QACvF,CAAC;QACD,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACzB,CAAC;IAED,UAAU;QACN,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;IACvB,CAAC;IAED,KAAK,CAAC,cAAc;QAChB,IAAI,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,MAAM,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,sBAAsB;YAAE,OAAO,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC;QACzG,IAAI,CAAC,OAAO,KAAK,IAAI,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE;YACzC,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;QACxB,CAAC,CAAC,CAAC;QACH,OAAO,IAAI,CAAC,OAAO,CAAC;IACxB,CAAC;IAEO,KAAK,CAAC,OAAO;QACjB,MAAM,GAAG,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,IAAI,gBAAgB,+BAA+B,CAAC;QACtF,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;YAC9B,MAAM,EAAE,MAAM;YACd,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,wBAAwB,CAAC,EAAE,+CAA+C;YACtG,OAAO,EAAE,EAAE,cAAc,EAAE,mCAAmC,EAAE;YAChE,IAAI,EAAE,IAAI,eAAe,CAAC;gBACtB,UAAU,EAAE,oBAAoB;gBAChC,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ;gBAC/B,aAAa,EAAE,IAAI,CAAC,MAAM,CAAC,YAAY;aAC1C,CAAC,CAAC,QAAQ,EAAE;SAChB,CAAC,CAAC;QACH,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAyB,CAAC;QAC/E,IAAI,CAAC,QAAQ,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC;YACrC,qFAAqF;YACrF,MAAM,MAAM,GAAG,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,iBAAiB,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC/E,MAAM,IAAI,KAAK,CAAC,sCAAsC,QAAQ,CAAC,MAAM,IAAI,MAAM,CAAC,CAAC,CAAC,KAAK,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAC5G,CAAC;QACD,MAAM,OAAO,GACT,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,UAAU,CAAC,IAAK,IAAI,CAAC,UAAqB,GAAG,CAAC;YAC/D,CAAC,CAAE,IAAI,CAAC,UAAqB;YAC7B,CAAC,CAAC,yBAAyB,CAAC;QACpC,IAAI,CAAC,MAAM,GAAG,EAAE,KAAK,EAAE,IAAI,CAAC,YAAY,EAAE,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,GAAG,IAAI,EAAE,CAAC;QACnF,OAAO,IAAI,CAAC,YAAY,CAAC;IAC7B,CAAC;CACJ"}

package/dist/auth/TokenProvider.d.ts

@@ -0,0 +1,12 @@
+/**
+ * What the HTTP client needs from authentication: a valid access token for the next request.
+ * `TokenManager` (human login), `ClientCredentialsProvider` and `BearerProvider` all satisfy it.
+ */
+export interface TokenProvider {
+    getAccessToken(): Promise<string>;
+    /** Shown instead of a bare 401 when the platform rejects the token and nothing can renew it. */
+    readonly unauthorizedMessage?: string;
+    /** Drop a cached token the platform rejected, so the next request gets a fresh one. */
+    invalidate?(): void;
+}
+//# sourceMappingURL=TokenProvider.d.ts.map

package/dist/auth/TokenProvider.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"TokenProvider.d.ts","sourceRoot":"","sources":["../../src/auth/TokenProvider.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,MAAM,WAAW,aAAa;IAC1B,cAAc,IAAI,OAAO,CAAC,MAAM,CAAC,CAAC;IAClC,gGAAgG;IAChG,QAAQ,CAAC,mBAAmB,CAAC,EAAE,MAAM,CAAC;IACtC,uFAAuF;IACvF,UAAU,CAAC,IAAI,IAAI,CAAC;CACvB"}

package/dist/auth/TokenProvider.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=TokenProvider.js.map

package/dist/auth/TokenProvider.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"TokenProvider.js","sourceRoot":"","sources":["../../src/auth/TokenProvider.ts"],"names":[],"mappings":""}

package/dist/auth/index.d.ts

@@ -2,4 +2,5 @@ export { OAuthFlow, type OAuthConfig, type OAuthCallbackOptions } from './OAuthF
 export { TokenManager, type TokenManagerConfig, type AuthStatus } from './TokenManager.js';
 export { FileStore } from './FileStore.js';
 export type { TokenStore, AnypointTokens } from './TokenStore.js';
+export type { TokenProvider } from './TokenProvider.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/auth/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/auth/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,KAAK,WAAW,EAAE,KAAK,oBAAoB,EAAE,MAAM,gBAAgB,CAAC;AACxF,OAAO,EAAE,YAAY,EAAE,KAAK,kBAAkB,EAAE,KAAK,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAC3F,OAAO,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAC3C,YAAY,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/auth/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,KAAK,WAAW,EAAE,KAAK,oBAAoB,EAAE,MAAM,gBAAgB,CAAC;AACxF,OAAO,EAAE,YAAY,EAAE,KAAK,kBAAkB,EAAE,KAAK,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAC3F,OAAO,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAC3C,YAAY,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AAClE,YAAY,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC"}

package/dist/cli.js

@@ -16,6 +16,7 @@ import { createDesignCenterCommand } from './commands/design-center.js';
 import { createRuntimesCommand } from './commands/runtimes.js';
 import { createAlertsCommand } from './commands/alerts.js';
 import { VERSION } from './version.js';
+import { log } from './utils/logger.js';
 import { migrateIfNeeded } from './config/profiles.js';
 // Auto-migrate legacy config to profiles/default/ if needed
 migrateIfNeeded();
@@ -26,6 +27,11 @@ program
     .version(VERSION)
     // Program options only before the subcommand, so `apps update --version 1.2.0` reaches the subcommand
     .enablePositionalOptions();
+// Under --json, stdout carries only the result; progress and notices go to stderr.
+program.hook('preAction', (_program, action) => {
+    if (action.opts().json)
+        log.toStderr();
+});
 program.addCommand(createConfigCommand());
 program.addCommand(createAuthCommand());
 program.addCommand(createAppsCommand());

package/dist/cli.js.map

@@ -1 +1 @@
-{"version":3,"file":"cli.js","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":";AACA;;;GAGG;AAEH,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AAC3D,OAAO,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AACvD,OAAO,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AACvD,OAAO,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AAC3D,OAAO,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AACvD,OAAO,EAAE,oBAAoB,EAAE,MAAM,uBAAuB,CAAC;AAC7D,OAAO,EAAE,qBAAqB,EAAE,MAAM,wBAAwB,CAAC;AAC/D,OAAO,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AACrD,OAAO,EAAE,yBAAyB,EAAE,MAAM,6BAA6B,CAAC;AACxE,OAAO,EAAE,qBAAqB,EAAE,MAAM,wBAAwB,CAAC;AAC/D,OAAO,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AAC3D,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AACvC,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AAEvD,4DAA4D;AAC5D,eAAe,EAAE,CAAC;AAElB,MAAM,OAAO,GAAG,IAAI,OAAO,EAAE,CAAC;AAE9B,OAAO;KACF,IAAI,CAAC,KAAK,CAAC;KACX,WAAW,CACR,mNAAmN,CACtN;KACA,OAAO,CAAC,OAAO,CAAC;IACjB,sGAAsG;KACrG,uBAAuB,EAAE,CAAC;AAE/B,OAAO,CAAC,UAAU,CAAC,mBAAmB,EAAE,CAAC,CAAC;AAC1C,OAAO,CAAC,UAAU,CAAC,iBAAiB,EAAE,CAAC,CAAC;AACxC,OAAO,CAAC,UAAU,CAAC,iBAAiB,EAAE,CAAC,CAAC;AACxC,OAAO,CAAC,UAAU,CAAC,mBAAmB,EAAE,CAAC,CAAC;AAC1C,OAAO,CAAC,UAAU,CAAC,iBAAiB,EAAE,CAAC,CAAC;AACxC,OAAO,CAAC,UAAU,CAAC,oBAAoB,EAAE,CAAC,CAAC;AAC3C,OAAO,CAAC,UAAU,CAAC,qBAAqB,EAAE,CAAC,CAAC;AAC5C,OAAO,CAAC,UAAU,CAAC,gBAAgB,EAAE,CAAC,CAAC;AACvC,OAAO,CAAC,UAAU,CAAC,yBAAyB,EAAE,CAAC,CAAC;AAChD,OAAO,CAAC,UAAU,CAAC,qBAAqB,EAAE,CAAC,CAAC;AAC5C,OAAO,CAAC,UAAU,CAAC,mBAAmB,EAAE,CAAC,CAAC;AAE1C,OAAO;KACF,OAAO,CAAC,KAAK,CAAC;KACd,WAAW,CAAC,0DAA0D,CAAC;KACvE,MAAM,CAAC,KAAK,IAAI,EAAE;IACf,MAAM,EAAE,wBAAwB,EAAE,GAAG,MAAM,MAAM,CAAC,iBAAiB,CAAC,CAAC;IACrE,MAAM,MAAM,GAAG,IAAI,wBAAwB,EAAE,CAAC;IAC9C,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;AACzB,CAAC,CAAC,CAAC;AAEP,OAAO,CAAC,KAAK,EAAE,CAAC"}
+{"version":3,"file":"cli.js","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":";AACA;;;GAGG;AAEH,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AAC3D,OAAO,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AACvD,OAAO,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AACvD,OAAO,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AAC3D,OAAO,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AACvD,OAAO,EAAE,oBAAoB,EAAE,MAAM,uBAAuB,CAAC;AAC7D,OAAO,EAAE,qBAAqB,EAAE,MAAM,wBAAwB,CAAC;AAC/D,OAAO,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AACrD,OAAO,EAAE,yBAAyB,EAAE,MAAM,6BAA6B,CAAC;AACxE,OAAO,EAAE,qBAAqB,EAAE,MAAM,wBAAwB,CAAC;AAC/D,OAAO,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AAC3D,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AACvC,OAAO,EAAE,GAAG,EAAE,MAAM,mBAAmB,CAAC;AACxC,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AAEvD,4DAA4D;AAC5D,eAAe,EAAE,CAAC;AAElB,MAAM,OAAO,GAAG,IAAI,OAAO,EAAE,CAAC;AAE9B,OAAO;KACF,IAAI,CAAC,KAAK,CAAC;KACX,WAAW,CACR,mNAAmN,CACtN;KACA,OAAO,CAAC,OAAO,CAAC;IACjB,sGAAsG;KACrG,uBAAuB,EAAE,CAAC;AAE/B,mFAAmF;AACnF,OAAO,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,EAAE;IAC3C,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC,IAAI;QAAE,GAAG,CAAC,QAAQ,EAAE,CAAC;AAC3C,CAAC,CAAC,CAAC;AAEH,OAAO,CAAC,UAAU,CAAC,mBAAmB,EAAE,CAAC,CAAC;AAC1C,OAAO,CAAC,UAAU,CAAC,iBAAiB,EAAE,CAAC,CAAC;AACxC,OAAO,CAAC,UAAU,CAAC,iBAAiB,EAAE,CAAC,CAAC;AACxC,OAAO,CAAC,UAAU,CAAC,mBAAmB,EAAE,CAAC,CAAC;AAC1C,OAAO,CAAC,UAAU,CAAC,iBAAiB,EAAE,CAAC,CAAC;AACxC,OAAO,CAAC,UAAU,CAAC,oBAAoB,EAAE,CAAC,CAAC;AAC3C,OAAO,CAAC,UAAU,CAAC,qBAAqB,EAAE,CAAC,CAAC;AAC5C,OAAO,CAAC,UAAU,CAAC,gBAAgB,EAAE,CAAC,CAAC;AACvC,OAAO,CAAC,UAAU,CAAC,yBAAyB,EAAE,CAAC,CAAC;AAChD,OAAO,CAAC,UAAU,CAAC,qBAAqB,EAAE,CAAC,CAAC;AAC5C,OAAO,CAAC,UAAU,CAAC,mBAAmB,EAAE,CAAC,CAAC;AAE1C,OAAO;KACF,OAAO,CAAC,KAAK,CAAC;KACd,WAAW,CAAC,0DAA0D,CAAC;KACvE,MAAM,CAAC,KAAK,IAAI,EAAE;IACf,MAAM,EAAE,wBAAwB,EAAE,GAAG,MAAM,MAAM,CAAC,iBAAiB,CAAC,CAAC;IACrE,MAAM,MAAM,GAAG,IAAI,wBAAwB,EAAE,CAAC;IAC9C,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;AACzB,CAAC,CAAC,CAAC;AAEP,OAAO,CAAC,KAAK,EAAE,CAAC"}

package/dist/client/AnypointClient.d.ts

@@ -18,6 +18,8 @@ import { AnypointMQApi } from '../api/AnypointMQApi.js';
 import { ObjectStoreApi } from '../api/ObjectStoreApi.js';
 import { RuntimesApi } from '../api/RuntimesApi.js';
 import { AlertsApi } from '../api/AlertsApi.js';
+import { type Config } from '../config/profiles.js';
+import { type AuthMode } from '../config/auth-modes.js';
 export interface AnypointClientConfig {
     clientId: string;
     clientSecret: string;
@@ -25,9 +27,20 @@ export interface AnypointClientConfig {
     baseUrl?: string;
     cacheTtlMinutes?: number;
     profileName?: string;
+    /** How to authenticate. The browser login when unset, so existing callers are unchanged. */
+    authMode?: AuthMode;
+    /** The organization to operate in. Required for `client_credentials` and `bearer`. */
+    orgId?: string;
+    /** The token for `bearer` mode. */
+    accessToken?: string;
 }
 export declare class AnypointClient {
+    /** Only the browser login has a token manager; service modes hold their token in memory. */
     private readonly tokenManager;
+    private readonly authMode;
+    private readonly configuredOrgId;
+    private readonly provider;
+    private userOrgId;
     private readonly httpClient;
     private readonly cache;
     readonly accessManagement: AccessManagementApi;
@@ -44,13 +57,20 @@ export declare class AnypointClient {
     readonly objectStore: ObjectStoreApi;
     readonly runtimes: RuntimesApi;
     readonly alerts: AlertsApi;
+    /** A client for a resolved profile configuration. */
+    static fromConfig(config: Config): AnypointClient;
     constructor(config: AnypointClientConfig);
+    getAuthMode(): AuthMode;
+    /** The browser login's token manager; service modes have none, and say so. */
+    private browserLogin;
     getAuthStatus(): Promise<AuthStatus>;
     getAuthorizeUrl(): string;
     authenticate(): Promise<void>;
     refreshToken(): Promise<void>;
     logout(): Promise<void>;
+    /** The signed-in person. Service identities are not people, so this is for the browser login only. */
     whoami(): Promise<UserProfile>;
+    /** The configured organization, else the signed-in user's own (looked up once). */
     getDefaultOrgId(): Promise<string>;
     clearCache(): void;
     /** Expose cache instance for diagnostics (read-only stats) */

package/dist/client/AnypointClient.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"AnypointClient.d.ts","sourceRoot":"","sources":["../../src/client/AnypointClient.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAgB,KAAK,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAEjE,OAAO,EAAE,KAAK,EAAE,MAAM,YAAY,CAAC;AACnC,OAAO,EAAE,mBAAmB,EAAE,KAAK,WAAW,EAAE,MAAM,+BAA+B,CAAC;AACtF,OAAO,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAC;AACtD,OAAO,EAAE,OAAO,EAAE,MAAM,mBAAmB,CAAC;AAC5C,OAAO,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAC;AACxD,OAAO,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AACpD,OAAO,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAC;AACxD,OAAO,EAAE,eAAe,EAAE,MAAM,2BAA2B,CAAC;AAC5D,OAAO,EAAE,oBAAoB,EAAE,MAAM,+BAA+B,CAAC;AACrE,OAAO,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAC;AACxD,OAAO,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AACpD,OAAO,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAC;AACxD,OAAO,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAC;AAC1D,OAAO,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AACpD,OAAO,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAGhD,MAAM,WAAW,oBAAoB;IACjC,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,EAAE,MAAM,CAAC;IACrB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,WAAW,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,qBAAa,cAAc;IACvB,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAe;IAC5C,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAa;IACxC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAQ;IAG9B,SAAgB,gBAAgB,EAAE,mBAAmB,CAAC;IACtD,SAAgB,SAAS,EAAE,YAAY,CAAC;IACxC,SAAgB,IAAI,EAAE,OAAO,CAAC;IAC9B,SAAgB,UAAU,EAAE,aAAa,CAAC;IAC1C,SAAgB,QAAQ,EAAE,WAAW,CAAC;IACtC,SAAgB,UAAU,EAAE,aAAa,CAAC;IAC1C,SAAgB,YAAY,EAAE,eAAe,CAAC;IAC9C,SAAgB,oBAAoB,EAAE,oBAAoB,CAAC;IAC3D,SAAgB,UAAU,EAAE,aAAa,CAAC;IAC1C,SAAgB,QAAQ,EAAE,WAAW,CAAC;IACtC,SAAgB,UAAU,EAAE,aAAa,CAAC;IAC1C,SAAgB,WAAW,EAAE,cAAc,CAAC;IAC5C,SAAgB,QAAQ,EAAE,WAAW,CAAC;IACtC,SAAgB,MAAM,EAAE,SAAS,CAAC;gBAEtB,MAAM,EAAE,oBAAoB;IAkClC,aAAa,IAAI,OAAO,CAAC,UAAU,CAAC;IAI1C,eAAe,IAAI,MAAM;IAInB,YAAY,IAAI,OAAO,CAAC,IAAI,CAAC;IAI7B,YAAY,IAAI,OAAO,CAAC,IAAI,CAAC;IAI7B,MAAM,IAAI,OAAO,CAAC,IAAI,CAAC;IAOvB,MAAM,IAAI,OAAO,CAAC,WAAW,CAAC;IAI9B,eAAe,IAAI,OAAO,CAAC,MAAM,CAAC;IAKxC,UAAU,IAAI,IAAI;IAIlB,8DAA8D;IAC9D,QAAQ,IAAI,KAAK;CAGpB"}
+{"version":3,"file":"AnypointClient.d.ts","sourceRoot":"","sources":["../../src/client/AnypointClient.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAgB,KAAK,UAAU,EAAsB,MAAM,kBAAkB,CAAC;AAIrF,OAAO,EAAE,KAAK,EAAE,MAAM,YAAY,CAAC;AACnC,OAAO,EAAE,mBAAmB,EAAE,KAAK,WAAW,EAAE,MAAM,+BAA+B,CAAC;AACtF,OAAO,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAC;AACtD,OAAO,EAAE,OAAO,EAAE,MAAM,mBAAmB,CAAC;AAC5C,OAAO,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAC;AACxD,OAAO,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AACpD,OAAO,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAC;AACxD,OAAO,EAAE,eAAe,EAAE,MAAM,2BAA2B,CAAC;AAC5D,OAAO,EAAE,oBAAoB,EAAE,MAAM,+BAA+B,CAAC;AACrE,OAAO,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAC;AACxD,OAAO,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AACpD,OAAO,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAC;AACxD,OAAO,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAC;AAC1D,OAAO,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AACpD,OAAO,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAChD,OAAO,EAAwB,KAAK,MAAM,EAAE,MAAM,uBAAuB,CAAC;AAC1E,OAAO,EAAoC,KAAK,QAAQ,EAAE,MAAM,yBAAyB,CAAC;AAE1F,MAAM,WAAW,oBAAoB;IACjC,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,EAAE,MAAM,CAAC;IACrB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,4FAA4F;IAC5F,QAAQ,CAAC,EAAE,QAAQ,CAAC;IACpB,sFAAsF;IACtF,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,mCAAmC;IACnC,WAAW,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,qBAAa,cAAc;IACvB,4FAA4F;IAC5F,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAsB;IACnD,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAW;IACpC,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAqB;IACrD,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAgB;IACzC,OAAO,CAAC,SAAS,CAAqB;IACtC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAa;IACxC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAQ;IAG9B,SAAgB,gBAAgB,EAAE,mBAAmB,CAAC;IACtD,SAAgB,SAAS,EAAE,YAAY,CAAC;IACxC,SAAgB,IAAI,EAAE,OAAO,CAAC;IAC9B,SAAgB,UAAU,EAAE,aAAa,CAAC;IAC1C,SAAgB,QAAQ,EAAE,WAAW,CAAC;IACtC,SAAgB,UAAU,EAAE,aAAa,CAAC;IAC1C,SAAgB,YAAY,EAAE,eAAe,CAAC;IAC9C,SAAgB,oBAAoB,EAAE,oBAAoB,CAAC;IAC3D,SAAgB,UAAU,EAAE,aAAa,CAAC;IAC1C,SAAgB,QAAQ,EAAE,WAAW,CAAC;IACtC,SAAgB,UAAU,EAAE,aAAa,CAAC;IAC1C,SAAgB,WAAW,EAAE,cAAc,CAAC;IAC5C,SAAgB,QAAQ,EAAE,WAAW,CAAC;IACtC,SAAgB,MAAM,EAAE,SAAS,CAAC;IAElC,qDAAqD;IACrD,MAAM,CAAC,UAAU,CAAC,MAAM,EAAE,MAAM,GAAG,cAAc;gBAarC,MAAM,EAAE,oBAAoB;IAqDxC,WAAW,IAAI,QAAQ;IAIvB,8EAA8E;IAC9E,OAAO,CAAC,YAAY;IASd,aAAa,IAAI,OAAO,CAAC,UAAU,CAAC;IAW1C,eAAe,IAAI,MAAM;IAInB,YAAY,IAAI,OAAO,CAAC,IAAI,CAAC;IAI7B,YAAY,IAAI,OAAO,CAAC,IAAI,CAAC;IAI7B,MAAM,IAAI,OAAO,CAAC,IAAI,CAAC;IAO7B,sGAAsG;IAChG,MAAM,IAAI,OAAO,CAAC,WAAW,CAAC;IASpC,mFAAmF;IAC7E,eAAe,IAAI,OAAO,CAAC,MAAM,CAAC;IAMxC,UAAU,IAAI,IAAI;IAIlB,8DAA8D;IAC9D,QAAQ,IAAI,KAAK;CAGpB"}

package/dist/client/AnypointClient.js

@@ -3,6 +3,8 @@
  * Main facade providing unified access to all Anypoint APIs
  */
 import { TokenManager } from '../auth/index.js';
+import { BearerProvider } from '../auth/BearerProvider.js';
+import { ClientCredentialsProvider } from '../auth/ClientCredentialsProvider.js';
 import { HttpClient } from './HttpClient.js';
 import { Cache } from './Cache.js';
 import { AccessManagementApi } from '../api/AccessManagementApi.js';
@@ -20,8 +22,14 @@ import { ObjectStoreApi } from '../api/ObjectStoreApi.js';
 import { RuntimesApi } from '../api/RuntimesApi.js';
 import { AlertsApi } from '../api/AlertsApi.js';
 import { DEFAULT_CALLBACK_URL } from '../config/profiles.js';
+import { DEFAULT_AUTH_MODE, isServiceMode } from '../config/auth-modes.js';
 export class AnypointClient {
+    /** Only the browser login has a token manager; service modes hold their token in memory. */
     tokenManager;
+    authMode;
+    configuredOrgId;
+    provider;
+    userOrgId;
     httpClient;
     cache;
     // API clients
@@ -39,18 +47,51 @@ export class AnypointClient {
     objectStore;
     runtimes;
     alerts;
-    constructor(config) {
-        this.tokenManager = new TokenManager({
+    /** A client for a resolved profile configuration. */
+    static fromConfig(config) {
+        return new AnypointClient({
             clientId: config.clientId,
             clientSecret: config.clientSecret,
-            redirectUri: config.redirectUri || DEFAULT_CALLBACK_URL,
+            redirectUri: config.callbackUrl,
             baseUrl: config.baseUrl,
-            profileName: config.profileName,
+            profileName: config.profile,
+            authMode: config.authMode,
+            orgId: config.orgId,
+            accessToken: config.accessToken,
         });
+    }
+    constructor(config) {
+        this.authMode = config.authMode ?? DEFAULT_AUTH_MODE;
+        this.configuredOrgId = config.orgId || undefined;
+        if (isServiceMode(this.authMode) && !this.configuredOrgId) {
+            throw new Error(`The ${this.authMode} mode needs an explicit organization (orgId).`);
+        }
+        if (this.authMode === 'client_credentials') {
+            this.tokenManager = null;
+            this.provider = new ClientCredentialsProvider({
+                clientId: config.clientId,
+                clientSecret: config.clientSecret,
+                baseUrl: config.baseUrl,
+            });
+        }
+        else if (this.authMode === 'bearer') {
+            this.tokenManager = null;
+            this.provider = new BearerProvider(config.accessToken);
+        }
+        else {
+            this.tokenManager = new TokenManager({
+                clientId: config.clientId,
+                clientSecret: config.clientSecret,
+                redirectUri: config.redirectUri || DEFAULT_CALLBACK_URL,
+                baseUrl: config.baseUrl,
+                profileName: config.profileName,
+            });
+            this.provider = this.tokenManager;
+        }
         this.cache = new Cache(config.cacheTtlMinutes || 5);
         this.httpClient = new HttpClient({
             baseUrl: config.baseUrl || 'https://anypoint.mulesoft.com',
-            tokenManager: this.tokenManager,
+            tokenProvider: this.provider,
         });
         this.accessManagement = new AccessManagementApi(this.httpClient, this.cache);
         this.cloudHub2 = new CloudHub2Api(this.httpClient, this.cache);
@@ -68,29 +109,55 @@ export class AnypointClient {
         this.alerts = new AlertsApi(this.httpClient);
     }
     // ── Auth ──────────────────────────────────────────
+    getAuthMode() {
+        return this.authMode;
+    }
+    /** The browser login's token manager; service modes have none, and say so. */
+    browserLogin(action) {
+        if (!this.tokenManager) {
+            throw new Error(`${action} is not available with ${this.authMode} authentication; there is no browser login.`);
+        }
+        return this.tokenManager;
+    }
     async getAuthStatus() {
-        return this.tokenManager.getStatus();
+        if (this.tokenManager)
+            return this.tokenManager.getStatus();
+        // Service modes: authenticated when a token can be obtained now.
+        try {
+            await this.provider.getAccessToken();
+            return { authenticated: true };
+        }
+        catch {
+            return { authenticated: false };
+        }
     }
     getAuthorizeUrl() {
-        return this.tokenManager.getAuthorizeUrl();
+        return this.browserLogin('Login').getAuthorizeUrl();
     }
     async authenticate() {
-        await this.tokenManager.authenticate();
+        await this.browserLogin('Login').authenticate();
     }
     async refreshToken() {
-        await this.tokenManager.refresh();
+        await this.browserLogin('Token refresh').refresh();
     }
     async logout() {
-        await this.tokenManager.logout();
+        await this.browserLogin('Logout').logout();
         this.cache.clear();
     }
     // ── Convenience ───────────────────────────────────
+    /** The signed-in person. Service identities are not people, so this is for the browser login only. */
     async whoami() {
+        if (isServiceMode(this.authMode)) {
+            throw new Error(`whoami is not available with ${this.authMode} authentication; the organization comes from configuration.`);
+        }
         return this.accessManagement.getMe();
     }
+    /** The configured organization, else the signed-in user's own (looked up once). */
     async getDefaultOrgId() {
-        const me = await this.whoami();
-        return me.organization.id;
+        if (this.configuredOrgId)
+            return this.configuredOrgId;
+        this.userOrgId ??= (await this.whoami()).organization.id;
+        return this.userOrgId;
     }
     clearCache() {
         this.cache.clear();

package/dist/client/AnypointClient.js.map

@@ -1 +1 @@
-{"version":3,"file":"AnypointClient.js","sourceRoot":"","sources":["../../src/client/AnypointClient.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,YAAY,EAAmB,MAAM,kBAAkB,CAAC;AACjE,OAAO,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAC7C,OAAO,EAAE,KAAK,EAAE,MAAM,YAAY,CAAC;AACnC,OAAO,EAAE,mBAAmB,EAAoB,MAAM,+BAA+B,CAAC;AACtF,OAAO,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAC;AACtD,OAAO,EAAE,OAAO,EAAE,MAAM,mBAAmB,CAAC;AAC5C,OAAO,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAC;AACxD,OAAO,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AACpD,OAAO,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAC;AACxD,OAAO,EAAE,eAAe,EAAE,MAAM,2BAA2B,CAAC;AAC5D,OAAO,EAAE,oBAAoB,EAAE,MAAM,+BAA+B,CAAC;AACrE,OAAO,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAC;AACxD,OAAO,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AACpD,OAAO,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAC;AACxD,OAAO,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAC;AAC1D,OAAO,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AACpD,OAAO,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAChD,OAAO,EAAE,oBAAoB,EAAE,MAAM,uBAAuB,CAAC;AAW7D,MAAM,OAAO,cAAc;IACN,YAAY,CAAe;IAC3B,UAAU,CAAa;IACvB,KAAK,CAAQ;IAE9B,cAAc;IACE,gBAAgB,CAAsB;IACtC,SAAS,CAAe;IACxB,IAAI,CAAU;IACd,UAAU,CAAgB;IAC1B,QAAQ,CAAc;IACtB,UAAU,CAAgB;IAC1B,YAAY,CAAkB;IAC9B,oBAAoB,CAAuB;IAC3C,UAAU,CAAgB;IAC1B,QAAQ,CAAc;IACtB,UAAU,CAAgB;IAC1B,WAAW,CAAiB;IAC5B,QAAQ,CAAc;IACtB,MAAM,CAAY;IAElC,YAAY,MAA4B;QACpC,IAAI,CAAC,YAAY,GAAG,IAAI,YAAY,CAAC;YACjC,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,YAAY,EAAE,MAAM,CAAC,YAAY;YACjC,WAAW,EAAE,MAAM,CAAC,WAAW,IAAI,oBAAoB;YACvD,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,WAAW,EAAE,MAAM,CAAC,WAAW;SAClC,CAAC,CAAC;QAEH,IAAI,CAAC,KAAK,GAAG,IAAI,KAAK,CAAC,MAAM,CAAC,eAAe,IAAI,CAAC,CAAC,CAAC;QAEpD,IAAI,CAAC,UAAU,GAAG,IAAI,UAAU,CAAC;YAC7B,OAAO,EAAE,MAAM,CAAC,OAAO,IAAI,+BAA+B;YAC1D,YAAY,EAAE,IAAI,CAAC,YAAY;SAClC,CAAC,CAAC;QAEH,IAAI,CAAC,gBAAgB,GAAG,IAAI,mBAAmB,CAAC,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;QAC7E,IAAI,CAAC,SAAS,GAAG,IAAI,YAAY,CAAC,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;QAC/D,IAAI,CAAC,IAAI,GAAG,IAAI,OAAO,CAAC,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;QACzD,IAAI,CAAC,UAAU,GAAG,IAAI,aAAa,CAAC,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;QACjE,IAAI,CAAC,QAAQ,GAAG,IAAI,WAAW,CAAC,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;QAC7D,IAAI,CAAC,UAAU,GAAG,IAAI,aAAa,CAAC,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;QACjE,IAAI,CAAC,YAAY,GAAG,IAAI,eAAe,CAAC,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;QACrE,IAAI,CAAC,oBAAoB,GAAG,IAAI,oBAAoB,CAAC,IAAI,CAAC,YAAY,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;QACvF,IAAI,CAAC,UAAU,GAAG,IAAI,aAAa,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACrD,IAAI,CAAC,QAAQ,GAAG,IAAI,WAAW,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACjD,IAAI,CAAC,UAAU,GAAG,IAAI,aAAa,CAAC,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;QACjE,IAAI,CAAC,WAAW,GAAG,IAAI,cAAc,CAAC,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;QACnE,IAAI,CAAC,QAAQ,GAAG,IAAI,WAAW,CAAC,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;QAC7D,IAAI,CAAC,MAAM,GAAG,IAAI,SAAS,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IACjD,CAAC;IAED,qDAAqD;IAErD,KAAK,CAAC,aAAa;QACf,OAAO,IAAI,CAAC,YAAY,CAAC,SAAS,EAAE,CAAC;IACzC,CAAC;IAED,eAAe;QACX,OAAO,IAAI,CAAC,YAAY,CAAC,eAAe,EAAE,CAAC;IAC/C,CAAC;IAED,KAAK,CAAC,YAAY;QACd,MAAM,IAAI,CAAC,YAAY,CAAC,YAAY,EAAE,CAAC;IAC3C,CAAC;IAED,KAAK,CAAC,YAAY;QACd,MAAM,IAAI,CAAC,YAAY,CAAC,OAAO,EAAE,CAAC;IACtC,CAAC;IAED,KAAK,CAAC,MAAM;QACR,MAAM,IAAI,CAAC,YAAY,CAAC,MAAM,EAAE,CAAC;QACjC,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;IACvB,CAAC;IAED,qDAAqD;IAErD,KAAK,CAAC,MAAM;QACR,OAAO,IAAI,CAAC,gBAAgB,CAAC,KAAK,EAAE,CAAC;IACzC,CAAC;IAED,KAAK,CAAC,eAAe;QACjB,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,MAAM,EAAE,CAAC;QAC/B,OAAO,EAAE,CAAC,YAAY,CAAC,EAAE,CAAC;IAC9B,CAAC;IAED,UAAU;QACN,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;IACvB,CAAC;IAED,8DAA8D;IAC9D,QAAQ;QACJ,OAAO,IAAI,CAAC,KAAK,CAAC;IACtB,CAAC;CACJ"}
+{"version":3,"file":"AnypointClient.js","sourceRoot":"","sources":["../../src/client/AnypointClient.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,YAAY,EAAuC,MAAM,kBAAkB,CAAC;AACrF,OAAO,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAC;AAC3D,OAAO,EAAE,yBAAyB,EAAE,MAAM,sCAAsC,CAAC;AACjF,OAAO,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAC7C,OAAO,EAAE,KAAK,EAAE,MAAM,YAAY,CAAC;AACnC,OAAO,EAAE,mBAAmB,EAAoB,MAAM,+BAA+B,CAAC;AACtF,OAAO,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAC;AACtD,OAAO,EAAE,OAAO,EAAE,MAAM,mBAAmB,CAAC;AAC5C,OAAO,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAC;AACxD,OAAO,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AACpD,OAAO,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAC;AACxD,OAAO,EAAE,eAAe,EAAE,MAAM,2BAA2B,CAAC;AAC5D,OAAO,EAAE,oBAAoB,EAAE,MAAM,+BAA+B,CAAC;AACrE,OAAO,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAC;AACxD,OAAO,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AACpD,OAAO,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAC;AACxD,OAAO,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAC;AAC1D,OAAO,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AACpD,OAAO,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAChD,OAAO,EAAE,oBAAoB,EAAe,MAAM,uBAAuB,CAAC;AAC1E,OAAO,EAAE,iBAAiB,EAAE,aAAa,EAAiB,MAAM,yBAAyB,CAAC;AAiB1F,MAAM,OAAO,cAAc;IACvB,4FAA4F;IAC3E,YAAY,CAAsB;IAClC,QAAQ,CAAW;IACnB,eAAe,CAAqB;IACpC,QAAQ,CAAgB;IACjC,SAAS,CAAqB;IACrB,UAAU,CAAa;IACvB,KAAK,CAAQ;IAE9B,cAAc;IACE,gBAAgB,CAAsB;IACtC,SAAS,CAAe;IACxB,IAAI,CAAU;IACd,UAAU,CAAgB;IAC1B,QAAQ,CAAc;IACtB,UAAU,CAAgB;IAC1B,YAAY,CAAkB;IAC9B,oBAAoB,CAAuB;IAC3C,UAAU,CAAgB;IAC1B,QAAQ,CAAc;IACtB,UAAU,CAAgB;IAC1B,WAAW,CAAiB;IAC5B,QAAQ,CAAc;IACtB,MAAM,CAAY;IAElC,qDAAqD;IACrD,MAAM,CAAC,UAAU,CAAC,MAAc;QAC5B,OAAO,IAAI,cAAc,CAAC;YACtB,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,YAAY,EAAE,MAAM,CAAC,YAAY;YACjC,WAAW,EAAE,MAAM,CAAC,WAAW;YAC/B,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,WAAW,EAAE,MAAM,CAAC,OAAO;YAC3B,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,KAAK,EAAE,MAAM,CAAC,KAAK;YACnB,WAAW,EAAE,MAAM,CAAC,WAAW;SAClC,CAAC,CAAC;IACP,CAAC;IAED,YAAY,MAA4B;QACpC,IAAI,CAAC,QAAQ,GAAG,MAAM,CAAC,QAAQ,IAAI,iBAAiB,CAAC;QACrD,IAAI,CAAC,eAAe,GAAG,MAAM,CAAC,KAAK,IAAI,SAAS,CAAC;QACjD,IAAI,aAAa,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,eAAe,EAAE,CAAC;YACxD,MAAM,IAAI,KAAK,CAAC,OAAO,IAAI,CAAC,QAAQ,+CAA+C,CAAC,CAAC;QACzF,CAAC;QAED,IAAI,IAAI,CAAC,QAAQ,KAAK,oBAAoB,EAAE,CAAC;YACzC,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC;YACzB,IAAI,CAAC,QAAQ,GAAG,IAAI,yBAAyB,CAAC;gBAC1C,QAAQ,EAAE,MAAM,CAAC,QAAQ;gBACzB,YAAY,EAAE,MAAM,CAAC,YAAY;gBACjC,OAAO,EAAE,MAAM,CAAC,OAAO;aAC1B,CAAC,CAAC;QACP,CAAC;aAAM,IAAI,IAAI,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;YACpC,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC;YACzB,IAAI,CAAC,QAAQ,GAAG,IAAI,cAAc,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;QAC3D,CAAC;aAAM,CAAC;YACJ,IAAI,CAAC,YAAY,GAAG,IAAI,YAAY,CAAC;gBACjC,QAAQ,EAAE,MAAM,CAAC,QAAQ;gBACzB,YAAY,EAAE,MAAM,CAAC,YAAY;gBACjC,WAAW,EAAE,MAAM,CAAC,WAAW,IAAI,oBAAoB;gBACvD,OAAO,EAAE,MAAM,CAAC,OAAO;gBACvB,WAAW,EAAE,MAAM,CAAC,WAAW;aAClC,CAAC,CAAC;YACH,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,YAAY,CAAC;QACtC,CAAC;QAED,IAAI,CAAC,KAAK,GAAG,IAAI,KAAK,CAAC,MAAM,CAAC,eAAe,IAAI,CAAC,CAAC,CAAC;QAEpD,IAAI,CAAC,UAAU,GAAG,IAAI,UAAU,CAAC;YAC7B,OAAO,EAAE,MAAM,CAAC,OAAO,IAAI,+BAA+B;YAC1D,aAAa,EAAE,IAAI,CAAC,QAAQ;SAC/B,CAAC,CAAC;QAEH,IAAI,CAAC,gBAAgB,GAAG,IAAI,mBAAmB,CAAC,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;QAC7E,IAAI,CAAC,SAAS,GAAG,IAAI,YAAY,CAAC,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;QAC/D,IAAI,CAAC,IAAI,GAAG,IAAI,OAAO,CAAC,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;QACzD,IAAI,CAAC,UAAU,GAAG,IAAI,aAAa,CAAC,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;QACjE,IAAI,CAAC,QAAQ,GAAG,IAAI,WAAW,CAAC,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;QAC7D,IAAI,CAAC,UAAU,GAAG,IAAI,aAAa,CAAC,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;QACjE,IAAI,CAAC,YAAY,GAAG,IAAI,eAAe,CAAC,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;QACrE,IAAI,CAAC,oBAAoB,GAAG,IAAI,oBAAoB,CAAC,IAAI,CAAC,YAAY,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;QACvF,IAAI,CAAC,UAAU,GAAG,IAAI,aAAa,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACrD,IAAI,CAAC,QAAQ,GAAG,IAAI,WAAW,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACjD,IAAI,CAAC,UAAU,GAAG,IAAI,aAAa,CAAC,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;QACjE,IAAI,CAAC,WAAW,GAAG,IAAI,cAAc,CAAC,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;QACnE,IAAI,CAAC,QAAQ,GAAG,IAAI,WAAW,CAAC,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;QAC7D,IAAI,CAAC,MAAM,GAAG,IAAI,SAAS,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IACjD,CAAC;IAED,qDAAqD;IAErD,WAAW;QACP,OAAO,IAAI,CAAC,QAAQ,CAAC;IACzB,CAAC;IAED,8EAA8E;IACtE,YAAY,CAAC,MAAc;QAC/B,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC;YACrB,MAAM,IAAI,KAAK,CACX,GAAG,MAAM,0BAA0B,IAAI,CAAC,QAAQ,6CAA6C,CAChG,CAAC;QACN,CAAC;QACD,OAAO,IAAI,CAAC,YAAY,CAAC;IAC7B,CAAC;IAED,KAAK,CAAC,aAAa;QACf,IAAI,IAAI,CAAC,YAAY;YAAE,OAAO,IAAI,CAAC,YAAY,CAAC,SAAS,EAAE,CAAC;QAC5D,iEAAiE;QACjE,IAAI,CAAC;YACD,MAAM,IAAI,CAAC,QAAQ,CAAC,cAAc,EAAE,CAAC;YACrC,OAAO,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC;QACnC,CAAC;QAAC,MAAM,CAAC;YACL,OAAO,EAAE,aAAa,EAAE,KAAK,EAAE,CAAC;QACpC,CAAC;IACL,CAAC;IAED,eAAe;QACX,OAAO,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,eAAe,EAAE,CAAC;IACxD,CAAC;IAED,KAAK,CAAC,YAAY;QACd,MAAM,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,YAAY,EAAE,CAAC;IACpD,CAAC;IAED,KAAK,CAAC,YAAY;QACd,MAAM,IAAI,CAAC,YAAY,CAAC,eAAe,CAAC,CAAC,OAAO,EAAE,CAAC;IACvD,CAAC;IAED,KAAK,CAAC,MAAM;QACR,MAAM,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC,MAAM,EAAE,CAAC;QAC3C,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;IACvB,CAAC;IAED,qDAAqD;IAErD,sGAAsG;IACtG,KAAK,CAAC,MAAM;QACR,IAAI,aAAa,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC/B,MAAM,IAAI,KAAK,CACX,gCAAgC,IAAI,CAAC,QAAQ,6DAA6D,CAC7G,CAAC;QACN,CAAC;QACD,OAAO,IAAI,CAAC,gBAAgB,CAAC,KAAK,EAAE,CAAC;IACzC,CAAC;IAED,mFAAmF;IACnF,KAAK,CAAC,eAAe;QACjB,IAAI,IAAI,CAAC,eAAe;YAAE,OAAO,IAAI,CAAC,eAAe,CAAC;QACtD,IAAI,CAAC,SAAS,KAAK,CAAC,MAAM,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,YAAY,CAAC,EAAE,CAAC;QACzD,OAAO,IAAI,CAAC,SAAS,CAAC;IAC1B,CAAC;IAED,UAAU;QACN,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;IACvB,CAAC;IAED,8DAA8D;IAC9D,QAAQ;QACJ,OAAO,IAAI,CAAC,KAAK,CAAC;IACtB,CAAC;CACJ"}

package/dist/client/HttpClient.d.ts

@@ -3,17 +3,17 @@
  * Axios wrapper with authentication and rate limiting
  */
 import { type AxiosRequestConfig } from 'axios';
-import type { TokenManager } from '../auth/TokenManager.js';
+import type { TokenProvider } from '../auth/TokenProvider.js';
 import { type RateLimiterConfig } from './RateLimiter.js';
 export interface HttpClientConfig {
     baseUrl?: string;
-    tokenManager: TokenManager;
+    tokenProvider: TokenProvider;
     rateLimiter?: RateLimiterConfig;
     timeout?: number;
 }
 export declare class HttpClient {
     private readonly client;
-    private readonly tokenManager;
+    private readonly tokenProvider;
     private readonly rateLimiter;
     constructor(config: HttpClientConfig);
     get<T = unknown>(url: string, config?: AxiosRequestConfig): Promise<T>;

package/dist/client/HttpClient.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"HttpClient.d.ts","sourceRoot":"","sources":["../../src/client/HttpClient.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAc,EAAsB,KAAK,kBAAkB,EAAsB,MAAM,OAAO,CAAC;AAC/F,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,yBAAyB,CAAC;AAC5D,OAAO,EAAe,KAAK,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAIvE,MAAM,WAAW,gBAAgB;IAC7B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,YAAY,EAAE,YAAY,CAAC;IAC3B,WAAW,CAAC,EAAE,iBAAiB,CAAC;IAChC,OAAO,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,qBAAa,UAAU;IACnB,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAgB;IACvC,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAe;IAC5C,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAc;gBAE9B,MAAM,EAAE,gBAAgB;IAoB9B,GAAG,CAAC,CAAC,GAAG,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,kBAAkB,GAAG,OAAO,CAAC,CAAC,CAAC;IAOtE,IAAI,CAAC,CAAC,GAAG,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,EAAE,kBAAkB,GAAG,OAAO,CAAC,CAAC,CAAC;IAO7F;;;;;;OAMG;IACG,aAAa,CAAC,CAAC,GAAG,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,CAAC,EAAE,kBAAkB,GAAG,OAAO,CAAC,CAAC,CAAC;IAUhG,GAAG,CAAC,CAAC,GAAG,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,EAAE,kBAAkB,GAAG,OAAO,CAAC,CAAC,CAAC;IAOtF,KAAK,CAAC,CAAC,GAAG,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,EAAE,kBAAkB,GAAG,OAAO,CAAC,CAAC,CAAC;IAOxF,MAAM,CAAC,CAAC,GAAG,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,kBAAkB,GAAG,OAAO,CAAC,CAAC,CAAC;IAOzE,QAAQ,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,kBAAkB,GAAG,OAAO,CAAC,MAAM,CAAC;CAS5E"}
+{"version":3,"file":"HttpClient.d.ts","sourceRoot":"","sources":["../../src/client/HttpClient.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAc,EAAsB,KAAK,kBAAkB,EAAsB,MAAM,OAAO,CAAC;AAC/F,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAC;AAC9D,OAAO,EAAe,KAAK,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAIvE,MAAM,WAAW,gBAAgB;IAC7B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,aAAa,EAAE,aAAa,CAAC;IAC7B,WAAW,CAAC,EAAE,iBAAiB,CAAC;IAChC,OAAO,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,qBAAa,UAAU;IACnB,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAgB;IACvC,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAgB;IAC9C,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAc;gBAE9B,MAAM,EAAE,gBAAgB;IA+B9B,GAAG,CAAC,CAAC,GAAG,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,kBAAkB,GAAG,OAAO,CAAC,CAAC,CAAC;IAOtE,IAAI,CAAC,CAAC,GAAG,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,EAAE,kBAAkB,GAAG,OAAO,CAAC,CAAC,CAAC;IAO7F;;;;;;OAMG;IACG,aAAa,CAAC,CAAC,GAAG,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,CAAC,EAAE,kBAAkB,GAAG,OAAO,CAAC,CAAC,CAAC;IAUhG,GAAG,CAAC,CAAC,GAAG,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,EAAE,kBAAkB,GAAG,OAAO,CAAC,CAAC,CAAC;IAOtF,KAAK,CAAC,CAAC,GAAG,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,EAAE,kBAAkB,GAAG,OAAO,CAAC,CAAC,CAAC;IAOxF,MAAM,CAAC,CAAC,GAAG,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,kBAAkB,GAAG,OAAO,CAAC,CAAC,CAAC;IAOzE,QAAQ,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,kBAAkB,GAAG,OAAO,CAAC,MAAM,CAAC;CAS5E"}

package/dist/client/HttpClient.js

@@ -7,10 +7,10 @@ import { RateLimiter } from './RateLimiter.js';
 const DEFAULT_BASE_URL = 'https://anypoint.mulesoft.com';
 export class HttpClient {
     client;
-    tokenManager;
+    tokenProvider;
     rateLimiter;
     constructor(config) {
-        this.tokenManager = config.tokenManager;
+        this.tokenProvider = config.tokenProvider;
         this.rateLimiter = new RateLimiter(config.rateLimiter);
         this.client = axios.create({
             baseURL: config.baseUrl || DEFAULT_BASE_URL,
@@ -21,10 +21,20 @@ export class HttpClient {
         });
         // Add auth interceptor
         this.client.interceptors.request.use(async (requestConfig) => {
-            const accessToken = await this.tokenManager.getAccessToken();
+            const accessToken = await this.tokenProvider.getAccessToken();
             requestConfig.headers.Authorization = `Bearer ${accessToken}`;
             return requestConfig;
         });
+        // A token that cannot be renewed (a supplied bearer or a service token) gets a plain
+        // explanation instead of the platform's bare 401.
+        this.client.interceptors.response.use(undefined, (error) => {
+            const hint = this.tokenProvider.unauthorizedMessage;
+            if (hint && axios.isAxiosError(error) && error.response?.status === 401) {
+                this.tokenProvider.invalidate?.();
+                throw new Error(`${hint} (HTTP 401)`, { cause: error });
+            }
+            throw error;
+        });
     }
     async get(url, config) {
         return this.rateLimiter.execute(async () => {

package/dist/client/HttpClient.js.map

@@ -1 +1 @@
-{"version":3,"file":"HttpClient.js","sourceRoot":"","sources":["../../src/client/HttpClient.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,KAA0E,MAAM,OAAO,CAAC;AAE/F,OAAO,EAAE,WAAW,EAA0B,MAAM,kBAAkB,CAAC;AAEvE,MAAM,gBAAgB,GAAG,+BAA+B,CAAC;AASzD,MAAM,OAAO,UAAU;IACF,MAAM,CAAgB;IACtB,YAAY,CAAe;IAC3B,WAAW,CAAc;IAE1C,YAAY,MAAwB;QAChC,IAAI,CAAC,YAAY,GAAG,MAAM,CAAC,YAAY,CAAC;QACxC,IAAI,CAAC,WAAW,GAAG,IAAI,WAAW,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;QAEvD,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC;YACvB,OAAO,EAAE,MAAM,CAAC,OAAO,IAAI,gBAAgB;YAC3C,OAAO,EAAE,MAAM,CAAC,OAAO,IAAI,KAAK;YAChC,OAAO,EAAE;gBACL,cAAc,EAAE,kBAAkB;aACrC;SACJ,CAAC,CAAC;QAEH,uBAAuB;QACvB,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,aAAa,EAAE,EAAE;YACzD,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,cAAc,EAAE,CAAC;YAC7D,aAAa,CAAC,OAAO,CAAC,aAAa,GAAG,UAAU,WAAW,EAAE,CAAC;YAC9D,OAAO,aAAa,CAAC;QACzB,CAAC,CAAC,CAAC;IACP,CAAC;IAED,KAAK,CAAC,GAAG,CAAc,GAAW,EAAE,MAA2B;QAC3D,OAAO,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,KAAK,IAAI,EAAE;YACvC,MAAM,QAAQ,GAAqB,MAAM,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;YACtE,OAAO,QAAQ,CAAC,IAAI,CAAC;QACzB,CAAC,CAAC,CAAC;IACP,CAAC;IAED,KAAK,CAAC,IAAI,CAAc,GAAW,EAAE,IAAc,EAAE,MAA2B;QAC5E,OAAO,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,KAAK,IAAI,EAAE;YACvC,MAAM,QAAQ,GAAqB,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;YAC7E,OAAO,QAAQ,CAAC,IAAI,CAAC;QACzB,CAAC,CAAC,CAAC;IACP,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,aAAa,CAAc,GAAW,EAAE,IAAc,EAAE,MAA2B;QACrF,OAAO,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,KAAK,IAAI,EAAE;YACvC,MAAM,QAAQ,GAAqB,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,EAAE;gBACjE,GAAG,MAAM;gBACT,OAAO,EAAE,EAAE,GAAG,MAAM,EAAE,OAAO,EAAE,cAAc,EAAE,SAAS,EAAE;aAC7D,CAAC,CAAC;YACH,OAAO,QAAQ,CAAC,IAAI,CAAC;QACzB,CAAC,CAAC,CAAC;IACP,CAAC;IAED,KAAK,CAAC,GAAG,CAAc,GAAW,EAAE,IAAc,EAAE,MAA2B;QAC3E,OAAO,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,KAAK,IAAI,EAAE;YACvC,MAAM,QAAQ,GAAqB,MAAM,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;YAC5E,OAAO,QAAQ,CAAC,IAAI,CAAC;QACzB,CAAC,CAAC,CAAC;IACP,CAAC;IAED,KAAK,CAAC,KAAK,CAAc,GAAW,EAAE,IAAc,EAAE,MAA2B;QAC7E,OAAO,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,KAAK,IAAI,EAAE;YACvC,MAAM,QAAQ,GAAqB,MAAM,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;YAC9E,OAAO,QAAQ,CAAC,IAAI,CAAC;QACzB,CAAC,CAAC,CAAC;IACP,CAAC;IAED,KAAK,CAAC,MAAM,CAAc,GAAW,EAAE,MAA2B;QAC9D,OAAO,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,KAAK,IAAI,EAAE;YACvC,MAAM,QAAQ,GAAqB,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;YACzE,OAAO,QAAQ,CAAC,IAAI,CAAC;QACzB,CAAC,CAAC,CAAC;IACP,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,GAAW,EAAE,MAA2B;QACnD,OAAO,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,KAAK,IAAI,EAAE;YACvC,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE;gBACxC,GAAG,MAAM;gBACT,YAAY,EAAE,aAAa;aAC9B,CAAC,CAAC;YACH,OAAO,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QACtC,CAAC,CAAC,CAAC;IACP,CAAC;CACJ"}
+{"version":3,"file":"HttpClient.js","sourceRoot":"","sources":["../../src/client/HttpClient.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,KAA0E,MAAM,OAAO,CAAC;AAE/F,OAAO,EAAE,WAAW,EAA0B,MAAM,kBAAkB,CAAC;AAEvE,MAAM,gBAAgB,GAAG,+BAA+B,CAAC;AASzD,MAAM,OAAO,UAAU;IACF,MAAM,CAAgB;IACtB,aAAa,CAAgB;IAC7B,WAAW,CAAc;IAE1C,YAAY,MAAwB;QAChC,IAAI,CAAC,aAAa,GAAG,MAAM,CAAC,aAAa,CAAC;QAC1C,IAAI,CAAC,WAAW,GAAG,IAAI,WAAW,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;QAEvD,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC;YACvB,OAAO,EAAE,MAAM,CAAC,OAAO,IAAI,gBAAgB;YAC3C,OAAO,EAAE,MAAM,CAAC,OAAO,IAAI,KAAK;YAChC,OAAO,EAAE;gBACL,cAAc,EAAE,kBAAkB;aACrC;SACJ,CAAC,CAAC;QAEH,uBAAuB;QACvB,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,aAAa,EAAE,EAAE;YACzD,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,cAAc,EAAE,CAAC;YAC9D,aAAa,CAAC,OAAO,CAAC,aAAa,GAAG,UAAU,WAAW,EAAE,CAAC;YAC9D,OAAO,aAAa,CAAC;QACzB,CAAC,CAAC,CAAC;QAEH,qFAAqF;QACrF,kDAAkD;QAClD,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,EAAE,CAAC,KAAc,EAAE,EAAE;YAChE,MAAM,IAAI,GAAG,IAAI,CAAC,aAAa,CAAC,mBAAmB,CAAC;YACpD,IAAI,IAAI,IAAI,KAAK,CAAC,YAAY,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,QAAQ,EAAE,MAAM,KAAK,GAAG,EAAE,CAAC;gBACtE,IAAI,CAAC,aAAa,CAAC,UAAU,EAAE,EAAE,CAAC;gBAClC,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,aAAa,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;YAC5D,CAAC;YACD,MAAM,KAAK,CAAC;QAChB,CAAC,CAAC,CAAC;IACP,CAAC;IAED,KAAK,CAAC,GAAG,CAAc,GAAW,EAAE,MAA2B;QAC3D,OAAO,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,KAAK,IAAI,EAAE;YACvC,MAAM,QAAQ,GAAqB,MAAM,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;YACtE,OAAO,QAAQ,CAAC,IAAI,CAAC;QACzB,CAAC,CAAC,CAAC;IACP,CAAC;IAED,KAAK,CAAC,IAAI,CAAc,GAAW,EAAE,IAAc,EAAE,MAA2B;QAC5E,OAAO,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,KAAK,IAAI,EAAE;YACvC,MAAM,QAAQ,GAAqB,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;YAC7E,OAAO,QAAQ,CAAC,IAAI,CAAC;QACzB,CAAC,CAAC,CAAC;IACP,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,aAAa,CAAc,GAAW,EAAE,IAAc,EAAE,MAA2B;QACrF,OAAO,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,KAAK,IAAI,EAAE;YACvC,MAAM,QAAQ,GAAqB,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,EAAE;gBACjE,GAAG,MAAM;gBACT,OAAO,EAAE,EAAE,GAAG,MAAM,EAAE,OAAO,EAAE,cAAc,EAAE,SAAS,EAAE;aAC7D,CAAC,CAAC;YACH,OAAO,QAAQ,CAAC,IAAI,CAAC;QACzB,CAAC,CAAC,CAAC;IACP,CAAC;IAED,KAAK,CAAC,GAAG,CAAc,GAAW,EAAE,IAAc,EAAE,MAA2B;QAC3E,OAAO,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,KAAK,IAAI,EAAE;YACvC,MAAM,QAAQ,GAAqB,MAAM,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;YAC5E,OAAO,QAAQ,CAAC,IAAI,CAAC;QACzB,CAAC,CAAC,CAAC;IACP,CAAC;IAED,KAAK,CAAC,KAAK,CAAc,GAAW,EAAE,IAAc,EAAE,MAA2B;QAC7E,OAAO,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,KAAK,IAAI,EAAE;YACvC,MAAM,QAAQ,GAAqB,MAAM,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;YAC9E,OAAO,QAAQ,CAAC,IAAI,CAAC;QACzB,CAAC,CAAC,CAAC;IACP,CAAC;IAED,KAAK,CAAC,MAAM,CAAc,GAAW,EAAE,MAA2B;QAC9D,OAAO,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,KAAK,IAAI,EAAE;YACvC,MAAM,QAAQ,GAAqB,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;YACzE,OAAO,QAAQ,CAAC,IAAI,CAAC;QACzB,CAAC,CAAC,CAAC;IACP,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,GAAW,EAAE,MAA2B;QACnD,OAAO,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,KAAK,IAAI,EAAE;YACvC,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE;gBACxC,GAAG,MAAM;gBACT,YAAY,EAAE,aAAa;aAC9B,CAAC,CAAC;YACH,OAAO,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QACtC,CAAC,CAAC,CAAC;IACP,CAAC;CACJ"}

package/dist/commands/alerts.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"alerts.d.ts","sourceRoot":"","sources":["../../src/commands/alerts.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAgHpC,wBAAgB,mBAAmB,IAAI,OAAO,CAwS7C"}
+{"version":3,"file":"alerts.d.ts","sourceRoot":"","sources":["../../src/commands/alerts.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAiHpC,wBAAgB,mBAAmB,IAAI,OAAO,CAuU7C"}

package/dist/commands/alerts.js

@@ -18,7 +18,7 @@ import { printTable } from '../utils/formatter.js';
 import { ALERT_METRIC_IDS, ALERT_OPERATORS } from '../api/AlertsApi.js';
 import { confirmProductionWrite, isProductionEnv } from '../safety/guards.js';
 import { checkPreapproval } from '../safety/preapproval.js';
-import { CHANGE_IN_PROGRESS, alertEnvironment, executeDeleteAlert, executeUpdateAlert, normalizeAlert, normalizeRuntimeManagerAlert, planCreateAlert, planUpdateAlert, previewPayload, readAlertForDelete, targetsApp, } from '../workflows/alerts.js';
+import { CHANGE_IN_PROGRESS, alertEnvironment, executeDeleteAlert, executeUpdateAlert, alertWait, normalizeAlert, normalizeRuntimeManagerAlert, planCreateAlert, planUpdateAlert, previewPayload, readAlertForDelete, targetsApp, } from '../workflows/alerts.js';
 import { createClient } from './shared.js';
 const collect = (value, previous = []) => [...previous, value];
 const list = (value) => value
@@ -232,6 +232,18 @@ export function createAlertsCommand() {
             process.exitCode = 1;
         }
     });
+    const WAIT_OPTION = [
+        '--wait <seconds>',
+        'Keep checking the list this long for the change to apply',
+        number('--wait'),
+    ];
+    /** Ctrl-C while waiting stops the wait and reports what was last seen; the write is not repeated. */
+    function cancelOnSigint() {
+        const controller = new AbortController();
+        const onSigint = () => controller.abort();
+        process.once('SIGINT', onSigint);
+        return { signal: controller.signal, done: () => process.off('SIGINT', onSigint) };
+    }
     async function runUpdate(id, patch, tool, opts) {
         try {
             const client = createClient();
@@ -251,7 +263,8 @@ export function createAlertsCommand() {
                 log.warn('Cancelled');
                 return;
             }
-            const result = await executeUpdateAlert(client, plan);
+            const cancel = cancelOnSigint();
+            const result = await executeUpdateAlert(client, plan, alertWait(opts.wait, cancel.signal)).finally(cancel.done);
             if (result.verified)
                 log.success(result.message);
             else
@@ -272,6 +285,7 @@ export function createAlertsCommand() {
         .option('--threshold <n>', 'Threshold in the metric unit', number('--threshold'))
         .option('--duration <minutes>', 'Minutes the condition must hold', number('--duration'));
     addNotificationOptions(update)
+        .option(...WAIT_OPTION)
         .option('--dry-run', 'Show the change, then stop', false)
         .option('--force', 'Skip the production confirmation prompt', false)
         .action(async (id, opts) => {
@@ -292,6 +306,7 @@ export function createAlertsCommand() {
             .command(name)
             .description(`${name === 'enable' ? 'Enable' : 'Disable'} an alert`)
             .argument('<id>', 'Alert ID')
+            .option(...WAIT_OPTION)
             .option('--dry-run', 'Show the change, then stop', false)
             .option('--force', 'Skip the production confirmation prompt', false)
             .action(async (id, opts) => {
@@ -304,6 +319,7 @@ export function createAlertsCommand() {
         .argument('<id>', 'Alert ID')
         .option('--confirm <name>', 'Delete only if the alert has this exact name')
         .option('--allow-production', 'Explicitly allow deletion in a production environment', false)
+        .option(...WAIT_OPTION)
         .action(async (id, opts) => {
         try {
             const client = createClient();
@@ -342,7 +358,8 @@ export function createAlertsCommand() {
                 }
                 log.warn(`Production deletion pre-approved (${decision.preapprovalSource})`);
             }
-            const result = await executeDeleteAlert(client, orgId, alert);
+            const cancel = cancelOnSigint();
+            const result = await executeDeleteAlert(client, orgId, alert, alertWait(opts.wait, cancel.signal)).finally(cancel.done);
             if (result.verifiedAbsent)
                 log.success(result.message);
             else