@sinequa/atomic 2.7.0 → 2.8.0

package/README.md

@@ -38,16 +38,20 @@ npm install @microsoft/sp-http --save-peer
 ## At a glance
 
 ```typescript
-import { setGlobalConfig, isAuthenticated, login, fetchQuery } from '@sinequa/atomic';
+import { setGlobalConfig, isAuthenticated, login, fetchQuery } from "@sinequa/atomic";
 
-setGlobalConfig({ app: 'my-app', backendUrl: 'https://my-sinequa-server.example.com' });
+setGlobalConfig({ app: "my-app", backendUrl: "https://my-sinequa-server.example.com" });
 
 if (!isAuthenticated()) {
-  await login({ username: 'alice', password: 's3cr3t' });
+  await login({ username: "alice", password: "s3cr3t" });
 }
 
 // A query is a plain object; only `name` — the query web service — is required.
-const result = await fetchQuery({ name: '<your-query>', text: 'knowledge management', pageSize: 10 });
+const result = await fetchQuery({
+  name: "<your-query>",
+  text: "knowledge management",
+  pageSize: 10,
+});
 
 // One round-trip: the documents are in `records`, the facet counts in `aggregations`.
 // Check `$error` before concluding anything from an empty `records`.
@@ -67,16 +71,17 @@ token is attached automatically. Import from the `./spfx` subpath and call
 `initializeAadHttpClient` once during web part initialization:
 
 ```typescript
-import { initializeAadHttpClient, fetchQuery } from '@sinequa/atomic/spfx';
-import { AadHttpClient } from '@microsoft/sp-http';
+import { initializeAadHttpClient, fetchQuery } from "@sinequa/atomic/spfx";
+import { AadHttpClient } from "@microsoft/sp-http";
 
 // In your web part's onInit():
-const client = await this.context.aadHttpClientFactory
-  .getClient('https://my-sinequa-server.example.com');
+const client = await this.context.aadHttpClientFactory.getClient(
+  "https://my-sinequa-server.example.com",
+);
 initializeAadHttpClient(client);
 
 // All subsequent API calls route through AadHttpClient automatically:
-const results = await fetchQuery({ name: '<your-query>', text: 'knowledge management' });
+const results = await fetchQuery({ name: "<your-query>", text: "knowledge management" });
 ```
 
 Call `initializeAadHttpClient(null)` to detach the client (e.g. in `onDispose`).
@@ -102,11 +107,11 @@ and each takes its transport and auth knobs as configuration (`httpAdapter`, and
 `auth: { fetch, storage, logger }`), which removes the need for module mocks in tests.
 
 ```typescript
-import { createAtomicClient } from '@sinequa/atomic';
+import { createAtomicClient } from "@sinequa/atomic";
 
-const client = createAtomicClient({ app: 'myapp', backendUrl: 'https://backend' });
-client.auth.on('unauthorized', () => client.auth.login());
-const results = await client.http.post('api/v1/search.query', { text: 'hello' });
+const client = createAtomicClient({ app: "myapp", backendUrl: "https://backend" });
+client.auth.on("unauthorized", () => client.auth.login());
+const results = await client.http.post("api/v1/search.query", { text: "hello" });
 ```
 
 The free functions below keep working unchanged: they run on a default client whose configuration
@@ -118,23 +123,23 @@ See [The client](./docs/core/client.mdx) and [Multiple backends](./docs/integrat
 
 Full auth lifecycle — from first handshake to logout.
 
-| Export | Description |
-|---|---|
-| `isAuthenticated()` | Synchronous. `true` when a CSRF token is stored **or** a token-less session was recorded (ambient SSO issues no client token) |
-| `hasSession()` | Asks the server when nothing is stored, and never redirects — unlike `login()` |
-| `login(credentials?)` | Login — switches on the resolved `authMode` (credentials / SSO / OAuth / SAML / bearer / unknown) |
-| `logout()` | Clears session, returns the server's `redirectUrl` |
-| `clearSessionTokens()` | Drops the local session (tokens, token-less flag) and emits `authenticated: false`, without a server round-trip |
-| `detectAuthMode(config, preLogin?)` | Pure resolution of the `AuthMode` from config + server pre-login (no I/O) |
-| `getToken()` / `setToken(token)` | Read/write the stored CSRF token |
-| `requestWebTokenSession(credentials?)` | POSTs `security.webtoken`. The JWT lands in a cookie; the returned (and stored) value is the **CSRF token**. Omit the credentials to use the configured bearer token |
-| `getCsrfToken()` | CSRF token for mutating requests |
-| `deleteWebTokenCookie()` | Explicitly removes the web token cookie |
-| `onAuthEvent(event, handler)` | Typed subscription to the auth lifecycle (`authenticated`, `unauthorized`, `requestFailed`, `tokenRefreshed`, `loggedOut`) — returns the unsubscribe function |
-| `tryAutoAuthentication()` | Probes a protected endpoint for server-side auto-authentication (OIDC, IIS Negotiate) — used by `login()` in `sso`, `unknown` and `bearer` modes. Never throws |
-| `isRedirectPending()` | Whether an OAuth/SAML redirect is in flight and has not established a session yet |
-| `tryOAuthAuthentication()` / `trySAMLAuthentication()` | Redirect to the configured identity provider (with a one-shot redirect-loop guard) |
-| `emitAuthenticatedEvent(bool)` | Dispatches the DOM `'authenticated'` CustomEvent (on `document`, bubbles to `window`) |
+| Export                                                 | Description                                                                                                                                                                  |
+| ------------------------------------------------------ | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
+| `isAuthenticated()`                                    | Synchronous. `true` when a CSRF token is stored **or** a token-less session was recorded (ambient SSO issues no client token)                                                |
+| `hasSession()`                                         | Asks the server when nothing is stored, and never redirects — unlike `login()`                                                                                               |
+| `login(credentials?)`                                  | Login — switches on the resolved `authMode` (credentials / SSO / OAuth / SAML / bearer / unknown)                                                                            |
+| `logout()`                                             | Clears session, returns the server's `redirectUrl`                                                                                                                           |
+| `clearSessionTokens()`                                 | Drops the local session (tokens, token-less flag) and emits `authenticated: false`, without a server round-trip                                                              |
+| `detectAuthMode(config, preLogin?)`                    | Pure resolution of the `AuthMode` from config + server pre-login (no I/O)                                                                                                    |
+| `getToken()` / `setToken(token)`                       | Read/write the stored CSRF token                                                                                                                                             |
+| `requestWebTokenSession(credentials?)`                 | POSTs `security.webtoken`. The JWT lands in a cookie; the returned (and stored) value is the **CSRF token**. Omit the credentials to use the configured bearer token         |
+| `getCsrfToken()`                                       | CSRF token for mutating requests                                                                                                                                             |
+| `deleteWebTokenCookie()`                               | Explicitly removes the web token cookie                                                                                                                                      |
+| `onAuthEvent(event, handler)`                          | Typed subscription to the auth lifecycle (`authenticated`, `unauthorized`, `sessionLost`, `requestFailed`, `tokenRefreshed`, `loggedOut`) — returns the unsubscribe function |
+| `tryAutoAuthentication()`                              | Probes a protected endpoint for server-side auto-authentication (OIDC, IIS Negotiate) — used by `login()` in `sso`, `unknown` and `bearer` modes. Never throws               |
+| `isRedirectPending()`                                  | Whether an OAuth/SAML redirect is in flight and has not established a session yet                                                                                            |
+| `tryOAuthAuthentication()` / `trySAMLAuthentication()` | Redirect to the configured identity provider (with a one-shot redirect-loop guard)                                                                                           |
+| `emitAuthenticatedEvent(bool)`                         | Dispatches the DOM `'authenticated'` CustomEvent (on `document`, bubbles to `window`)                                                                                        |
 
 > `getJWToken` is **`@deprecated`**: it is an alias of `requestWebTokenSession`, renamed because the
 > old name suggested it returned the JWT. It will be removed in the next major.
@@ -146,7 +151,7 @@ the request replayed once. See [Authentication](./docs/auth/index.mdx) and
 [Handling 401](./docs/auth/handling-401.mdx).
 
 ```typescript
-import { isAuthenticated, login, logout } from '@sinequa/atomic';
+import { isAuthenticated, login, logout } from "@sinequa/atomic";
 
 if (!isAuthenticated()) {
   // Auto-resolve: reuse an existing session if any, otherwise follow the resolved
@@ -154,7 +159,7 @@ if (!isAuthenticated()) {
   const ok = await login();
 
   // — or — explicit credentials, which bypass mode detection entirely.
-  const okWithCredentials = await login({ username: 'alice', password: 's3cr3t' });
+  const okWithCredentials = await login({ username: "alice", password: "s3cr3t" });
 }
 
 const redirectUrl = await logout();
@@ -166,14 +171,14 @@ const redirectUrl = await logout();
 typed discriminated union — no more juggling overlapping booleans:
 
 ```typescript
-import { AuthMode, globalConfig, setGlobalConfig } from '@sinequa/atomic';
+import { AuthMode, globalConfig, setGlobalConfig } from "@sinequa/atomic";
 
-setGlobalConfig({ authMode: AuthMode.credentials() });        // username/password form
-setGlobalConfig({ authMode: AuthMode.sso() });                // browser/proxy-injected auth
-setGlobalConfig({ authMode: AuthMode.oauth('my-provider') }); // redirect to an OAuth provider
-setGlobalConfig({ authMode: AuthMode.saml('my-provider') });  // redirect to a SAML provider
-setGlobalConfig({ authMode: AuthMode.bearer(token) });        // server-to-server bearer token
-setGlobalConfig({ authMode: AuthMode.unknown() });            // try SSO, then fall back to credentials
+setGlobalConfig({ authMode: AuthMode.credentials() }); // username/password form
+setGlobalConfig({ authMode: AuthMode.sso() }); // browser/proxy-injected auth
+setGlobalConfig({ authMode: AuthMode.oauth("my-provider") }); // redirect to an OAuth provider
+setGlobalConfig({ authMode: AuthMode.saml("my-provider") }); // redirect to a SAML provider
+setGlobalConfig({ authMode: AuthMode.bearer(token) }); // server-to-server bearer token
+setGlobalConfig({ authMode: AuthMode.unknown() }); // try SSO, then fall back to credentials
 
 // `login()` and `detectAuthMode()` branch on `authMode.kind`. Every key of `globalConfig` is
 // optional, so read it through `?.` — the default is `AuthMode.unknown()`.
@@ -211,7 +216,7 @@ import {
   fetchQueryExport,
   fetchQueryIntent,
   searchPrincipals,
-} from '@sinequa/atomic';
+} from "@sinequa/atomic";
 ```
 
 Auditing is not a `fetch*` function: use `Audit.notify(...)`, plus the record decorators
@@ -225,7 +230,7 @@ import {
   fetchVersion,
   fetchChangePassword,
   fetchSendPasswordResetEmail,
-} from '@sinequa/atomic';
+} from "@sinequa/atomic";
 ```
 
 The full endpoint list — with the `client.api` method and the free function for each — is in
@@ -239,7 +244,7 @@ Utilities for transforming Sinequa data structures.
 
 ```typescript
 import {
-  getMetadata,           // metadata of an article as `string[]` (splits comma-separated values)
+  getMetadata, // metadata of an article as `string[]` (splits comma-separated values)
   getMetadataWithValues, // same, as `{ display, value }[]`
   makeColumn,
   extraColumns,
@@ -248,7 +253,7 @@ import {
   escapeExpr,
   guid,
   isObject,
-} from '@sinequa/atomic';
+} from "@sinequa/atomic";
 ```
 
 More in [Helpers](./docs/reference/helpers.mdx).
@@ -260,18 +265,15 @@ operands and collapse trivial cases (0 → `undefined`, 1 → the operand itself
 cleanly from optional UI state:
 
 ```typescript
-import { filter, fetchQuery } from '@sinequa/atomic';
+import { filter, fetchQuery } from "@sinequa/atomic";
 
 const filters = filter.and(
-  filter.gt('size', 1000),
-  filter.or(
-    filter.eq('treepath', '/HR/*'),
-    filter.in('authors', ['alice', 'bob']),
-  ),
-  onlyRecent && filter.between('modified', '2024-01-01', '2024-12-31'),
+  filter.gt("size", 1000),
+  filter.or(filter.eq("treepath", "/HR/*"), filter.in("authors", ["alice", "bob"])),
+  onlyRecent && filter.between("modified", "2024-01-01", "2024-12-31"),
 );
 
-await fetchQuery({ name: '<your-query>', text: 'report', filters });
+await fetchQuery({ name: "<your-query>", text: "report", filters });
 ```
 
 Leaf operators: `eq` · `neq` · `gt` · `gte` · `lt` · `lte` · `like` · `contains` · `regex` · `isNull` · `isNotNull` · `in` · `between`. Combinators: `and` · `or` · `not`.
@@ -288,13 +290,13 @@ built rather than a value. Passing it to `filter.eq` makes the backend answer
 ```typescript
 import {
   bisect,
-  sysLang,                     // resolves `all[fr]tous[de]alle` against a locale
-  getRelativeDate,             // and `getOffsetFromDates`
-  getQueryParamsFromUrl,       // and `getUrlParamsFromQueryParams`, `getFiltersFromUrl`, …
-  addConcepts,                 // and `getConcepts`, `parseText`, `rewriteText`, `removeConcept(s)`
+  sysLang, // resolves `all[fr]tous[de]alle` against a locale
+  getRelativeDate, // and `getOffsetFromDates`
+  getQueryParamsFromUrl, // and `getUrlParamsFromQueryParams`, `getFiltersFromUrl`, …
+  addConcepts, // and `getConcepts`, `parseText`, `rewriteText`, `removeConcept(s)`
   notify,
-  configureLogger,             // and the `debug` / `info` / `warn` / `error` bindings, `LogLevel`
-} from '@sinequa/atomic';
+  configureLogger, // and the `debug` / `info` / `warn` / `error` bindings, `LogLevel`
+} from "@sinequa/atomic";
 ```
 
 > The library's verbosity is set with `configureLogger({ level: LogLevel.DEBUG })`, **not** through
@@ -309,15 +311,29 @@ The package re-exports every Sinequa domain type so you never need to cast:
 
 ```typescript
 import type {
-  CCApp, CCQuery, CCColumn, CCIndex,
-  Aggregation, AggregationItem, ListAggregation, TreeAggregation,
-  Filter, SimpleFilter, InFilter, BetweenFilter, ExprFilter, NullFilter, NotNullFilter,
-  AuthMode, AuthModeKind,
+  CCApp,
+  CCQuery,
+  CCColumn,
+  CCIndex,
+  Aggregation,
+  AggregationItem,
+  ListAggregation,
+  TreeAggregation,
+  Filter,
+  SimpleFilter,
+  InFilter,
+  BetweenFilter,
+  ExprFilter,
+  NullFilter,
+  NotNullFilter,
+  AuthMode,
+  AuthModeKind,
   PreviewData,
   Principal,
-  AuditEvent, AuditRecord,
+  AuditEvent,
+  AuditRecord,
   TextChunk,
-} from '@sinequa/atomic';
+} from "@sinequa/atomic";
 ```
 
 Which type comes back from which call: [Type map](./docs/reference/types-map.mdx).
@@ -330,11 +346,11 @@ Set the backend URL before making any API call (required when the Sinequa server
 same-origin). `setGlobalConfig` performs a shallow merge into `globalConfig`:
 
 ```typescript
-import { setGlobalConfig, globalConfig, AuthMode } from '@sinequa/atomic';
+import { setGlobalConfig, globalConfig, AuthMode } from "@sinequa/atomic";
 
 setGlobalConfig({
-  app: 'my-app',
-  backendUrl: 'https://my-sinequa-server.example.com',
+  app: "my-app",
+  backendUrl: "https://my-sinequa-server.example.com",
   authMode: AuthMode.unknown(), // optional — defaults to `unknown`
 });
 
@@ -388,7 +404,7 @@ npm run dev:pack     # build + pack locally
 ## Contributing
 
 1. All tests must pass.
-2. Lint with [Biome](https://biomejs.dev/) — `npx @biomejs/biome check --write .`
+2. Lint and format with Vite+ (Oxlint/Oxfmt) — `npx vp check --fix`
 3. Follow [Conventional Commits](https://www.conventionalcommits.org/).
 4. Any change touching `src/` needs a **changeset** in the same commit (`npm run changeset`, then
    `npm run changeset:status` to check) — the `changeset-check` CI job blocks the merge without one.

package/dist/atomic.cjs

@@ -1 +1 @@
-Object.defineProperty(exports,Symbol.toStringTag,{value:`Module`});const e=require("./src-BS1kfBgv.cjs");exports.API=e.ht,exports.ApiError=e.Gn,exports.Audit=e.Ot,exports.AuditEventType=e.nn,exports.AuthMode=e.nr,exports.DEFAULT_AGGREGATION_COUNT=e.in,exports.DidYouMeanKind=e.Qt,exports.EngineType=e.tn,exports.EngineTypeModifier=e.en,exports.LogLevel=e.cr,exports.MINIMUM_COMPATIBLE_SERVER_API_VERSION=e.$t,exports.RFMDisplay=e.Zt,exports.ServerError=e.Hn,exports.TimeoutError=e.Fn,exports.UnauthorizedError=e.Wn,exports.addAuditAdditionalInfo=e.kt,exports.addConcepts=e.b,exports.addContainerDocuments=e.H,exports.addSessionId=e.At,exports.addUrl=e.jt,exports.aggItemRegex=e.D,exports.aggregationHasMore=e.an,exports.aggregationItemStrictCompare=e.O,exports.appInitializerFn=e.sn,exports.applyConfig=e.$n,exports.assertNever=e.En,exports.bisect=e.E,exports.buildPathsAndLevels=e.ft,exports.clearSessionTokens=e.yn,exports.configureLogger=e.lr,exports.createAtomicClient=e.N,exports.createContainer=e.U,exports.createHeaders=e.Kn,exports.createHeadersWithContext=e.qn,exports.createTimeoutController=e.Pn,exports.createUserProfile=e.I,Object.defineProperty(exports,"debug",{enumerable:!0,get:function(){return e.ur}}),exports.del=e.hn,exports.delWithContext=e.gn,exports.deleteContainerDocuments=e.W,exports.deleteContainers=e.G,exports.deleteUserProfileProperty=e.L,exports.deleteUserSettings=e.Z,exports.deleteWebTokenCookie=e.xn,exports.detectAuthMode=e.jn,exports.emitAuthenticatedEvent=e.Yn,Object.defineProperty(exports,"error",{enumerable:!0,get:function(){return e.dr}}),exports.escapeExpr=e.Mt,exports.expiresSoon=e.n,exports.extraColumns=e.Yt,exports.fetchAggregation=e.Dt,exports.fetchApp=e.cn,exports.fetchAppPreLogin=e.ln,exports.fetchBulkQuery=e.pt,exports.fetchChangePassword=e.X,exports.fetchDataset=e.wt,exports.fetchDatasetList=e.Tt,exports.fetchDatasets=e.Et,exports.fetchLabels=e.St,exports.fetchPreview=e.bt,exports.fetchPreviewUrl=e.xt,exports.fetchPrincipal=e.gt,exports.fetchPrincipalList=e._t,exports.fetchPrincipalUserid=e.vt,exports.fetchPrincipalUserids=e.yt,exports.fetchPrincipalsByIds=e.ct,exports.fetchQuery=e.mt,exports.fetchQueryExport=e.dt,exports.fetchQueryIntent=e.ut,exports.fetchSendPasswordResetEmail=e.B,exports.fetchSimilarDocuments=e.st,exports.fetchSponsoredLinks=e.ot,exports.fetchSuggest=e.nt,exports.fetchSuggestField=e.rt,exports.fetchSuggestQuery=e.it,exports.fetchTextChunks=e.tt,exports.fetchUploadStatus=e.V,exports.fetchUserProfile=e.R,exports.fetchUserSettings=e.Q,exports.fetchVersion=e.F,exports.filter=e.Kt,exports.flattenLegacyFilterValues=e.qt,exports.get=e.kn,exports.getConcepts=e.x,exports.getContainer=e.K,exports.getCsrfToken=e.On,exports.getDefaultClient=e.P,exports.getFiltersFromURI=e.s,exports.getFiltersFromUrl=e.c,exports.getHelpIndexUrl=e.a,exports.getIdFromUrl=e.l,exports.getJWToken=e.wn,exports.getMetadata=e.Wt,exports.getMetadataWithValues=e.Gt,exports.getOffsetFromDates=e.v,exports.getQueryPageFromUrl=e.u,exports.getQueryParamsFromUrl=e.d,exports.getQueryTabFromUrl=e.f,exports.getQueryTextFromUrl=e.p,exports.getRelativeDate=e.y,exports.getTime=e.Nt,exports.getToken=e.Jn,exports.getUrlParamsFromQueryParams=e.m,exports.getWithContext=e.An,exports.globalConfig=e.er,exports.guid=e.Pt,exports.handleResponse=e.Bn,exports.handleResponseWithContext=e.Vn,exports.hasSession=e.Dn,exports.hashString=e.Ft,Object.defineProperty(exports,"info",{enumerable:!0,get:function(){return e.fr}}),exports.initializeAppConfig=e.un,exports.isArrayBuffer=e.It,exports.isAuthenticated=e._n,exports.isBlob=e.Lt,exports.isDate=e.Rt,exports.isExpired=e.r,exports.isExternalAuthMode=e.rr,exports.isJsonable=e.zt,exports.isNotInputEvent=e._,exports.isObject=e.Bt,exports.isRedirectPending=e.vn,exports.isString=e.Vt,exports.labels=e.Ct,exports.legacyBooleansToAuthMode=e.ir,exports.legacyFilterToFilter=e.Jt,exports.listContainerDocuments=e.q,exports.listContainers=e.J,exports.login=e.Sn,exports.logout=e.bn,exports.makeColumn=e.Xt,exports.notify=e.g,exports.onAuthEvent=e.mr,exports.openParentNodes=e.k,exports.parseText=e.S,exports.parseValueAndOperatorFromItem=e.A,exports.patch=e.pn,exports.patchUserProfile=e.z,exports.patchUserSettings=e.$,exports.patchWithContext=e.mn,exports.post=e.In,exports.postWithContext=e.Ln,exports.put=e.dn,exports.putWithContext=e.fn,exports.queryParamsFromUrl=e.h,exports.removeConcept=e.C,exports.removeConcepts=e.w,exports.requestWebTokenSession=e.Tn,exports.resolveAggregationCount=e.on,exports.resolveBearerToken=e.ar,exports.resolveNoAutoAuthentication=e.Rn,exports.resolveNoAutoAuthenticationWithContext=e.zn,exports.resolveOAuthProvider=e.or,exports.resolveSAMLProvider=e.sr,exports.resolveToColumnName=e.rn,exports.resultPages=e.Ut,exports.rewriteText=e.T,exports.saveUserSettings=e.et,exports.searchPrincipals=e.lt,exports.setGlobalConfig=e.tr,exports.setToken=e.Un,exports.sha512=e.Ht,exports.suggestionsToTreeAggregationNodes=e.j,exports.sysLang=e.o,exports.toDate=e.i,exports.toSqlValue=e.at,exports.translateAggregationToDateOptions=e.M,exports.tryAutoAuthentication=e.Cn,exports.tryOAuthAuthentication=e.Nn,exports.trySAMLAuthentication=e.Mn,exports.updateContainer=e.Y,Object.defineProperty(exports,"warn",{enumerable:!0,get:function(){return e.pr}}),exports.withRetry=e.t;
+Object.defineProperty(exports,Symbol.toStringTag,{value:`Module`});const e=require("./src-DMsETv6_.cjs");exports.API=e.ht,exports.ApiError=e.Gn,exports.Audit=e.Ot,exports.AuditEventType=e.nn,exports.AuthMode=e.nr,exports.DEFAULT_AGGREGATION_COUNT=e.in,exports.DidYouMeanKind=e.Qt,exports.EngineType=e.tn,exports.EngineTypeModifier=e.en,exports.LogLevel=e.cr,exports.MINIMUM_COMPATIBLE_SERVER_API_VERSION=e.$t,exports.RFMDisplay=e.Zt,exports.ServerError=e.Hn,exports.TimeoutError=e.Fn,exports.UnauthorizedError=e.Wn,exports.addAuditAdditionalInfo=e.kt,exports.addConcepts=e.b,exports.addContainerDocuments=e.H,exports.addSessionId=e.At,exports.addUrl=e.jt,exports.aggItemRegex=e.D,exports.aggregationHasMore=e.an,exports.aggregationItemStrictCompare=e.O,exports.appInitializerFn=e.sn,exports.applyConfig=e.$n,exports.assertNever=e.En,exports.bisect=e.E,exports.buildPathsAndLevels=e.ft,exports.clearSessionTokens=e.yn,exports.configureLogger=e.lr,exports.createAtomicClient=e.N,exports.createContainer=e.U,exports.createHeaders=e.Kn,exports.createHeadersWithContext=e.qn,exports.createTimeoutController=e.Pn,exports.createUserProfile=e.I,Object.defineProperty(exports,"debug",{enumerable:!0,get:function(){return e.ur}}),exports.del=e.hn,exports.delWithContext=e.gn,exports.deleteContainerDocuments=e.W,exports.deleteContainers=e.G,exports.deleteUserProfileProperty=e.L,exports.deleteUserSettings=e.Z,exports.deleteWebTokenCookie=e.xn,exports.detectAuthMode=e.jn,exports.emitAuthenticatedEvent=e.Yn,Object.defineProperty(exports,"error",{enumerable:!0,get:function(){return e.dr}}),exports.escapeExpr=e.Mt,exports.expiresSoon=e.n,exports.extraColumns=e.Yt,exports.fetchAggregation=e.Dt,exports.fetchApp=e.cn,exports.fetchAppPreLogin=e.ln,exports.fetchBulkQuery=e.pt,exports.fetchChangePassword=e.X,exports.fetchDataset=e.wt,exports.fetchDatasetList=e.Tt,exports.fetchDatasets=e.Et,exports.fetchLabels=e.St,exports.fetchPreview=e.bt,exports.fetchPreviewUrl=e.xt,exports.fetchPrincipal=e.gt,exports.fetchPrincipalList=e._t,exports.fetchPrincipalUserid=e.vt,exports.fetchPrincipalUserids=e.yt,exports.fetchPrincipalsByIds=e.ct,exports.fetchQuery=e.mt,exports.fetchQueryExport=e.dt,exports.fetchQueryIntent=e.ut,exports.fetchSendPasswordResetEmail=e.B,exports.fetchSimilarDocuments=e.st,exports.fetchSponsoredLinks=e.ot,exports.fetchSuggest=e.nt,exports.fetchSuggestField=e.rt,exports.fetchSuggestQuery=e.it,exports.fetchTextChunks=e.tt,exports.fetchUploadStatus=e.V,exports.fetchUserProfile=e.R,exports.fetchUserSettings=e.Q,exports.fetchVersion=e.F,exports.filter=e.Kt,exports.flattenLegacyFilterValues=e.qt,exports.get=e.kn,exports.getConcepts=e.x,exports.getContainer=e.K,exports.getCsrfToken=e.On,exports.getDefaultClient=e.P,exports.getFiltersFromURI=e.s,exports.getFiltersFromUrl=e.c,exports.getHelpIndexUrl=e.a,exports.getIdFromUrl=e.l,exports.getJWToken=e.wn,exports.getMetadata=e.Wt,exports.getMetadataWithValues=e.Gt,exports.getOffsetFromDates=e.v,exports.getQueryPageFromUrl=e.u,exports.getQueryParamsFromUrl=e.d,exports.getQueryTabFromUrl=e.f,exports.getQueryTextFromUrl=e.p,exports.getRelativeDate=e.y,exports.getTime=e.Nt,exports.getToken=e.Jn,exports.getUrlParamsFromQueryParams=e.m,exports.getWithContext=e.An,exports.globalConfig=e.er,exports.guid=e.Pt,exports.handleResponse=e.Bn,exports.handleResponseWithContext=e.Vn,exports.hasSession=e.Dn,exports.hashString=e.Ft,Object.defineProperty(exports,"info",{enumerable:!0,get:function(){return e.fr}}),exports.initializeAppConfig=e.un,exports.isArrayBuffer=e.It,exports.isAuthenticated=e._n,exports.isBlob=e.Lt,exports.isDate=e.Rt,exports.isExpired=e.r,exports.isExternalAuthMode=e.rr,exports.isJsonable=e.zt,exports.isNotInputEvent=e._,exports.isObject=e.Bt,exports.isRedirectPending=e.vn,exports.isString=e.Vt,exports.labels=e.Ct,exports.legacyBooleansToAuthMode=e.ir,exports.legacyFilterToFilter=e.Jt,exports.listContainerDocuments=e.q,exports.listContainers=e.J,exports.login=e.Sn,exports.logout=e.bn,exports.makeColumn=e.Xt,exports.notify=e.g,exports.onAuthEvent=e.mr,exports.openParentNodes=e.k,exports.parseText=e.S,exports.parseValueAndOperatorFromItem=e.A,exports.patch=e.pn,exports.patchUserProfile=e.z,exports.patchUserSettings=e.$,exports.patchWithContext=e.mn,exports.post=e.In,exports.postWithContext=e.Ln,exports.put=e.dn,exports.putWithContext=e.fn,exports.queryParamsFromUrl=e.h,exports.removeConcept=e.C,exports.removeConcepts=e.w,exports.requestWebTokenSession=e.Tn,exports.resolveAggregationCount=e.on,exports.resolveBearerToken=e.ar,exports.resolveNoAutoAuthentication=e.Rn,exports.resolveNoAutoAuthenticationWithContext=e.zn,exports.resolveOAuthProvider=e.or,exports.resolveSAMLProvider=e.sr,exports.resolveToColumnName=e.rn,exports.resultPages=e.Ut,exports.rewriteText=e.T,exports.saveUserSettings=e.et,exports.searchPrincipals=e.lt,exports.setGlobalConfig=e.tr,exports.setToken=e.Un,exports.sha512=e.Ht,exports.suggestionsToTreeAggregationNodes=e.j,exports.sysLang=e.o,exports.toDate=e.i,exports.toSqlValue=e.at,exports.translateAggregationToDateOptions=e.M,exports.tryAutoAuthentication=e.Cn,exports.tryOAuthAuthentication=e.Nn,exports.trySAMLAuthentication=e.Mn,exports.updateContainer=e.Y,Object.defineProperty(exports,"warn",{enumerable:!0,get:function(){return e.pr}}),exports.withRetry=e.t;

package/dist/atomic.js

@@ -1,2 +1 @@
-import { $ as e, $n as t, $t as n, A as r, An as i, At as a, B as o, Bn as s, Bt as c, C as l, Cn as u, Ct as d, D as f, Dn as p, Dt as m, E as h, En as g, Et as _, F as v, Fn as y, Ft as b, G as x, Gn as S, Gt as C, H as w, Hn as T, Ht as E, I as D, In as O, It as k, J as A, Jn as j, Jt as M, K as N, Kn as P, Kt as F, L as I, Ln as L, Lt as R, M as z, Mn as B, Mt as V, N as H, Nn as U, Nt as W, O as G, On as K, Ot as q, P as J, Pn as Y, Pt as X, Q as Z, Qt as Q, R as $, Rn as ee, Rt as te, S as ne, Sn as re, St as ie, T as ae, Tn as oe, Tt as se, U as ce, Un as le, Ut as ue, V as de, Vn as fe, Vt as pe, W as me, Wn as he, Wt as ge, X as _e, Xt as ve, Y as ye, Yn as be, Yt as xe, Z as Se, Zt as Ce, _ as we, _n as Te, _t as Ee, a as De, an as Oe, ar as ke, at as Ae, b as je, bn as Me, bt as Ne, c as Pe, cn as Fe, cr as Ie, ct as Le, d as Re, dn as ze, dr as Be, dt as Ve, en as He, er as Ue, et as We, f as Ge, fn as Ke, fr as qe, ft as Je, g as Ye, gn as Xe, gt as Ze, h as Qe, hn as $e, ht as et, i as tt, in as nt, ir as rt, it, j as at, jn as ot, jt as st, k as ct, kn as lt, kt as ut, l as dt, ln as ft, lr as pt, lt as mt, m as ht, mn as gt, mr as _t, mt as vt, n as yt, nn as bt, nr as xt, nt as St, o as Ct, on as wt, or as Tt, ot as Et, p as Dt, pn as Ot, pr as kt, pt as At, q as jt, qn as Mt, qt as Nt, r as Pt, rn as Ft, rr as It, rt as Lt, s as Rt, sn as zt, sr as Bt, st as Vt, t as Ht, tn as Ut, tr as Wt, tt as Gt, u as Kt, un as qt, ur as Jt, ut as Yt, v as Xt, vn as Zt, vt as Qt, w as $t, wn as en, wt as tn, x as nn, xn as rn, xt as an, y as on, yn as sn, yt as cn, z as ln, zn as un, zt as dn } from "./src-BowomHL9.js";
-export { et as API, S as ApiError, q as Audit, bt as AuditEventType, xt as AuthMode, nt as DEFAULT_AGGREGATION_COUNT, Q as DidYouMeanKind, Ut as EngineType, He as EngineTypeModifier, Ie as LogLevel, n as MINIMUM_COMPATIBLE_SERVER_API_VERSION, Ce as RFMDisplay, T as ServerError, y as TimeoutError, he as UnauthorizedError, ut as addAuditAdditionalInfo, je as addConcepts, w as addContainerDocuments, a as addSessionId, st as addUrl, f as aggItemRegex, Oe as aggregationHasMore, G as aggregationItemStrictCompare, zt as appInitializerFn, t as applyConfig, g as assertNever, h as bisect, Je as buildPathsAndLevels, sn as clearSessionTokens, pt as configureLogger, H as createAtomicClient, ce as createContainer, P as createHeaders, Mt as createHeadersWithContext, Y as createTimeoutController, D as createUserProfile, Jt as debug, $e as del, Xe as delWithContext, me as deleteContainerDocuments, x as deleteContainers, I as deleteUserProfileProperty, Se as deleteUserSettings, rn as deleteWebTokenCookie, ot as detectAuthMode, be as emitAuthenticatedEvent, Be as error, V as escapeExpr, yt as expiresSoon, xe as extraColumns, m as fetchAggregation, Fe as fetchApp, ft as fetchAppPreLogin, At as fetchBulkQuery, _e as fetchChangePassword, tn as fetchDataset, se as fetchDatasetList, _ as fetchDatasets, ie as fetchLabels, Ne as fetchPreview, an as fetchPreviewUrl, Ze as fetchPrincipal, Ee as fetchPrincipalList, Qt as fetchPrincipalUserid, cn as fetchPrincipalUserids, Le as fetchPrincipalsByIds, vt as fetchQuery, Ve as fetchQueryExport, Yt as fetchQueryIntent, o as fetchSendPasswordResetEmail, Vt as fetchSimilarDocuments, Et as fetchSponsoredLinks, St as fetchSuggest, Lt as fetchSuggestField, it as fetchSuggestQuery, Gt as fetchTextChunks, de as fetchUploadStatus, $ as fetchUserProfile, Z as fetchUserSettings, v as fetchVersion, F as filter, Nt as flattenLegacyFilterValues, lt as get, nn as getConcepts, N as getContainer, K as getCsrfToken, J as getDefaultClient, Rt as getFiltersFromURI, Pe as getFiltersFromUrl, De as getHelpIndexUrl, dt as getIdFromUrl, en as getJWToken, ge as getMetadata, C as getMetadataWithValues, Xt as getOffsetFromDates, Kt as getQueryPageFromUrl, Re as getQueryParamsFromUrl, Ge as getQueryTabFromUrl, Dt as getQueryTextFromUrl, on as getRelativeDate, W as getTime, j as getToken, ht as getUrlParamsFromQueryParams, i as getWithContext, Ue as globalConfig, X as guid, s as handleResponse, fe as handleResponseWithContext, p as hasSession, b as hashString, qe as info, qt as initializeAppConfig, k as isArrayBuffer, Te as isAuthenticated, R as isBlob, te as isDate, Pt as isExpired, It as isExternalAuthMode, dn as isJsonable, we as isNotInputEvent, c as isObject, Zt as isRedirectPending, pe as isString, d as labels, rt as legacyBooleansToAuthMode, M as legacyFilterToFilter, jt as listContainerDocuments, A as listContainers, re as login, Me as logout, ve as makeColumn, Ye as notify, _t as onAuthEvent, ct as openParentNodes, ne as parseText, r as parseValueAndOperatorFromItem, Ot as patch, ln as patchUserProfile, e as patchUserSettings, gt as patchWithContext, O as post, L as postWithContext, ze as put, Ke as putWithContext, Qe as queryParamsFromUrl, l as removeConcept, $t as removeConcepts, oe as requestWebTokenSession, wt as resolveAggregationCount, ke as resolveBearerToken, ee as resolveNoAutoAuthentication, un as resolveNoAutoAuthenticationWithContext, Tt as resolveOAuthProvider, Bt as resolveSAMLProvider, Ft as resolveToColumnName, ue as resultPages, ae as rewriteText, We as saveUserSettings, mt as searchPrincipals, Wt as setGlobalConfig, le as setToken, E as sha512, at as suggestionsToTreeAggregationNodes, Ct as sysLang, tt as toDate, Ae as toSqlValue, z as translateAggregationToDateOptions, u as tryAutoAuthentication, U as tryOAuthAuthentication, B as trySAMLAuthentication, ye as updateContainer, kt as warn, Ht as withRetry };
+export { ht as API, Gn as ApiError, Ot as Audit, nn as AuditEventType, nr as AuthMode, in as DEFAULT_AGGREGATION_COUNT, Qt as DidYouMeanKind, tn as EngineType, en as EngineTypeModifier, cr as LogLevel, $t as MINIMUM_COMPATIBLE_SERVER_API_VERSION, Zt as RFMDisplay, Hn as ServerError, Fn as TimeoutError, Wn as UnauthorizedError, kt as addAuditAdditionalInfo, b as addConcepts, H as addContainerDocuments, At as addSessionId, jt as addUrl, D as aggItemRegex, an as aggregationHasMore, O as aggregationItemStrictCompare, sn as appInitializerFn, $n as applyConfig, En as assertNever, E as bisect, ft as buildPathsAndLevels, yn as clearSessionTokens, lr as configureLogger, N as createAtomicClient, U as createContainer, Kn as createHeaders, qn as createHeadersWithContext, Pn as createTimeoutController, I as createUserProfile, ur as debug, hn as del, gn as delWithContext, W as deleteContainerDocuments, G as deleteContainers, L as deleteUserProfileProperty, Z as deleteUserSettings, xn as deleteWebTokenCookie, jn as detectAuthMode, Yn as emitAuthenticatedEvent, dr as error, Mt as escapeExpr, n as expiresSoon, Yt as extraColumns, Dt as fetchAggregation, cn as fetchApp, ln as fetchAppPreLogin, pt as fetchBulkQuery, X as fetchChangePassword, wt as fetchDataset, Tt as fetchDatasetList, Et as fetchDatasets, St as fetchLabels, bt as fetchPreview, xt as fetchPreviewUrl, gt as fetchPrincipal, _t as fetchPrincipalList, vt as fetchPrincipalUserid, yt as fetchPrincipalUserids, ct as fetchPrincipalsByIds, mt as fetchQuery, dt as fetchQueryExport, ut as fetchQueryIntent, B as fetchSendPasswordResetEmail, st as fetchSimilarDocuments, ot as fetchSponsoredLinks, nt as fetchSuggest, rt as fetchSuggestField, it as fetchSuggestQuery, tt as fetchTextChunks, V as fetchUploadStatus, R as fetchUserProfile, Q as fetchUserSettings, F as fetchVersion, Kt as filter, qt as flattenLegacyFilterValues, kn as get, x as getConcepts, K as getContainer, On as getCsrfToken, P as getDefaultClient, s as getFiltersFromURI, c as getFiltersFromUrl, a as getHelpIndexUrl, l as getIdFromUrl, wn as getJWToken, Wt as getMetadata, Gt as getMetadataWithValues, v as getOffsetFromDates, u as getQueryPageFromUrl, d as getQueryParamsFromUrl, f as getQueryTabFromUrl, p as getQueryTextFromUrl, y as getRelativeDate, Nt as getTime, Jn as getToken, m as getUrlParamsFromQueryParams, An as getWithContext, er as globalConfig, Pt as guid, Bn as handleResponse, Vn as handleResponseWithContext, Dn as hasSession, Ft as hashString, fr as info, un as initializeAppConfig, It as isArrayBuffer, _n as isAuthenticated, Lt as isBlob, Rt as isDate, r as isExpired, rr as isExternalAuthMode, zt as isJsonable, _ as isNotInputEvent, Bt as isObject, vn as isRedirectPending, Vt as isString, Ct as labels, ir as legacyBooleansToAuthMode, Jt as legacyFilterToFilter, q as listContainerDocuments, J as listContainers, Sn as login, bn as logout, Xt as makeColumn, g as notify, mr as onAuthEvent, k as openParentNodes, S as parseText, A as parseValueAndOperatorFromItem, pn as patch, z as patchUserProfile, $ as patchUserSettings, mn as patchWithContext, In as post, Ln as postWithContext, dn as put, fn as putWithContext, h as queryParamsFromUrl, C as removeConcept, w as removeConcepts, Tn as requestWebTokenSession, on as resolveAggregationCount, ar as resolveBearerToken, Rn as resolveNoAutoAuthentication, zn as resolveNoAutoAuthenticationWithContext, or as resolveOAuthProvider, sr as resolveSAMLProvider, rn as resolveToColumnName, Ut as resultPages, T as rewriteText, et as saveUserSettings, lt as searchPrincipals, tr as setGlobalConfig, Un as setToken, Ht as sha512, j as suggestionsToTreeAggregationNodes, o as sysLang, i as toDate, at as toSqlValue, M as translateAggregationToDateOptions, Cn as tryAutoAuthentication, Nn as tryOAuthAuthentication, Mn as trySAMLAuthentication, Y as updateContainer, pr as warn, t as withRetry } from "./src-C-nHTU3y.js";

package/dist/authentication/constants.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"constants.d.ts","sourceRoot":"","sources":["../../src/authentication/constants.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,aAAa,EAAkB,MAAM,0BAA0B,CAAC;AAE9E;;;GAGG;AACH,eAAO,MAAM,eAAe,QAAS,CAAC;AAEtC,8FAA8F;AAC9F,eAAO,MAAM,2BAA2B,GAAI,KAAK,aAAa,KAAG,MAClB,CAAC;AAEhD,2FAA2F;AAC3F,eAAO,MAAM,gBAAgB,QAAO,MACS,CAAC;AAE9C;;;GAGG;AACH,eAAO,MAAM,YAAY;IACvB,yFAAyF;;IAEzF,+FAA+F;;IAE/F,+EAA+E;;IAE/E,gGAAgG;;CAExF,CAAC;AAEX;;;;;;GAMG;AACH,eAAO,MAAM,yBAAyB,kCAAkC,CAAC"}
+{"version":3,"file":"constants.d.ts","sourceRoot":"","sources":["../../src/authentication/constants.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,aAAa,EAAkB,MAAM,0BAA0B,CAAC;AAE9E;;;GAGG;AACH,eAAO,MAAM,eAAe,QAAS,CAAC;AAEtC,8FAA8F;AAC9F,eAAO,MAAM,2BAA2B,GAAI,KAAK,aAAa,KAAG,MAClB,CAAC;AAEhD,2FAA2F;AAC3F,eAAO,MAAM,gBAAgB,QAAO,MAAqD,CAAC;AAE1F;;;GAGG;AACH,eAAO,MAAM,YAAY;IACvB,yFAAyF;;IAEzF,+FAA+F;;IAE/F,+EAA+E;;IAE/E,gGAAgG;;CAExF,CAAC;AAEX;;;;;;GAMG;AACH,eAAO,MAAM,yBAAyB,kCAAkC,CAAC"}

package/dist/authentication/events/auth-events.d.ts

@@ -1,5 +1,14 @@
 import type { ApiError } from "../../web-api/helpers/errors/api-error";
 import type { UnauthorizedError } from "../../web-api/helpers/errors/unauthorized-error";
+/**
+ * Why a 401 was left to reach its caller (payload of the `sessionLost` event):
+ *
+ * - `noHook` — no `auth.recoverFromUnauthorized` hook is configured;
+ * - `refused` — the hook reported failure (`false`) or threw;
+ * - `replayUnauthorized` — the session was reported recovered, but the replayed request was rejected
+ *   with a 401 again.
+ */
+export type SessionLostReason = "noHook" | "refused" | "replayUnauthorized";
 /**
  * Typed client events and their payloads.
  *
@@ -7,6 +16,17 @@ import type { UnauthorizedError } from "../../web-api/helpers/errors/unauthorize
  * - `unauthorized` — a request was rejected with a 401 (fires just before the
  *   {@link UnauthorizedError} is thrown). Use it to **observe**; to actually recover the session
  *   and have the request replayed, configure `auth.recoverFromUnauthorized` instead;
+ * - `sessionLost` — a 401 actually reached the caller: the session could not be re-established.
+ *   Unlike `unauthorized`, it does **not** fire for a 401 that `auth.recoverFromUnauthorized`
+ *   recovered silently (the request is replayed and succeeds), so it is the event to drive a
+ *   "session expired" message from. It fires once per lost session — for the first request of a
+ *   burst losing it, not for each — and is re-armed once the session is shown alive again (a
+ *   successful sign-in, the hook reporting success, or a request sent after the announcement that
+ *   succeeds). It fires after `unauthorized`/`requestFailed`,
+ *   just before the {@link UnauthorizedError} is rethrown. It never fires for a `noRecovery` request
+ *   (sign-in, auto-authentication probe, logout, audit), whose 401 is an answer rather than an
+ *   expiry, for a request trailing behind a deliberate `logout()`, nor for a request its caller
+ *   aborted. `reason` tells why the 401 stood (see {@link SessionLostReason});
  * - `requestFailed` — any request that ended on an error status, 401 included. The place to
  *   surface a notification without wrapping every call site;
  * - `tokenRefreshed` — the CSRF token was stored or refreshed (`sinequa-jwt-refresh` header);
@@ -20,6 +40,11 @@ export type AuthEventMap = {
         endpoint: string;
         error: UnauthorizedError;
     };
+    sessionLost: {
+        endpoint: string;
+        error: UnauthorizedError;
+        reason: SessionLostReason;
+    };
     requestFailed: {
         endpoint: string;
         status: number;

package/dist/authentication/events/auth-events.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"auth-events.d.ts","sourceRoot":"","sources":["../../../src/authentication/events/auth-events.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,wCAAwC,CAAC;AACvE,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,iDAAiD,CAAC;AAEzF;;;;;;;;;;;GAWG;AACH,MAAM,MAAM,YAAY,GAAG;IACzB,aAAa,EAAE;QAAE,aAAa,EAAE,OAAO,CAAA;KAAE,CAAC;IAC1C,YAAY,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,iBAAiB,CAAA;KAAE,CAAC;IAC7D,aAAa,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,QAAQ,CAAA;KAAE,CAAC;IACrE,cAAc,EAAE;QAAE,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC;IAClC,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;CAClC,CAAC;AAEF,MAAM,MAAM,aAAa,GAAG,MAAM,YAAY,CAAC;AAE/C,8DAA8D;AAC9D,MAAM,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC;AAErC;;;GAGG;AACH,MAAM,WAAW,YAAY;IAC3B,EAAE,CAAC,CAAC,SAAS,aAAa,EACxB,KAAK,EAAE,CAAC,EACR,OAAO,EAAE,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC,CAAC,KAAK,IAAI,GAC1C,WAAW,CAAC;IACf,IAAI,CAAC,CAAC,SAAS,aAAa,EAAE,KAAK,EAAE,CAAC,EAAE,OAAO,EAAE,YAAY,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC;CACzE;AAED,wCAAwC;AACxC,wBAAgB,kBAAkB,IAAI,YAAY,CA8BjD;AAED,wFAAwF;AACxF,eAAO,MAAM,mBAAmB,cAAuB,CAAC;AAExD;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,WAAW,CAAC,CAAC,SAAS,aAAa,EACjD,KAAK,EAAE,CAAC,EACR,OAAO,EAAE,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC,CAAC,KAAK,IAAI,GAC1C,WAAW,CAEb;AAED;;;;;GAKG;AACH,wBAAgB,aAAa,CAAC,CAAC,SAAS,aAAa,EACnD,KAAK,EAAE,CAAC,EACR,OAAO,EAAE,YAAY,CAAC,CAAC,CAAC,GACvB,IAAI,CAEN"}
+{"version":3,"file":"auth-events.d.ts","sourceRoot":"","sources":["../../../src/authentication/events/auth-events.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,wCAAwC,CAAC;AACvE,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,iDAAiD,CAAC;AAEzF;;;;;;;GAOG;AACH,MAAM,MAAM,iBAAiB,GAAG,QAAQ,GAAG,SAAS,GAAG,oBAAoB,CAAC;AAE5E;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,MAAM,MAAM,YAAY,GAAG;IACzB,aAAa,EAAE;QAAE,aAAa,EAAE,OAAO,CAAA;KAAE,CAAC;IAC1C,YAAY,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,iBAAiB,CAAA;KAAE,CAAC;IAC7D,WAAW,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,iBAAiB,CAAC;QAAC,MAAM,EAAE,iBAAiB,CAAA;KAAE,CAAC;IACvF,aAAa,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,QAAQ,CAAA;KAAE,CAAC;IACrE,cAAc,EAAE;QAAE,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC;IAClC,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;CAClC,CAAC;AAEF,MAAM,MAAM,aAAa,GAAG,MAAM,YAAY,CAAC;AAE/C,8DAA8D;AAC9D,MAAM,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC;AAErC;;;GAGG;AACH,MAAM,WAAW,YAAY;IAC3B,EAAE,CAAC,CAAC,SAAS,aAAa,EAAE,KAAK,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC,CAAC,KAAK,IAAI,GAAG,WAAW,CAAC;IAChG,IAAI,CAAC,CAAC,SAAS,aAAa,EAAE,KAAK,EAAE,CAAC,EAAE,OAAO,EAAE,YAAY,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC;CACzE;AAED,wCAAwC;AACxC,wBAAgB,kBAAkB,IAAI,YAAY,CA8BjD;AAED,wFAAwF;AACxF,eAAO,MAAM,mBAAmB,cAAuB,CAAC;AAExD;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,WAAW,CAAC,CAAC,SAAS,aAAa,EACjD,KAAK,EAAE,CAAC,EACR,OAAO,EAAE,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC,CAAC,KAAK,IAAI,GAC1C,WAAW,CAEb;AAED;;;;;GAKG;AACH,wBAAgB,aAAa,CAAC,CAAC,SAAS,aAAa,EAAE,KAAK,EAAE,CAAC,EAAE,OAAO,EAAE,YAAY,CAAC,CAAC,CAAC,GAAG,IAAI,CAE/F"}

package/dist/authentication/events/emit-authenticated-event.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"emit-authenticated-event.d.ts","sourceRoot":"","sources":["../../../src/authentication/events/emit-authenticated-event.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,KAAK,aAAa,EAEnB,MAAM,6BAA6B,CAAC;AAGrC;;;GAGG;AACH,wBAAgB,iCAAiC,CAC/C,GAAG,EAAE,aAAa,EAClB,aAAa,EAAE,OAAO,QA4BvB;AAED;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,sBAAsB,CAAC,aAAa,EAAE,OAAO,QAE5D"}
+{"version":3,"file":"emit-authenticated-event.d.ts","sourceRoot":"","sources":["../../../src/authentication/events/emit-authenticated-event.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,aAAa,EAAkB,MAAM,6BAA6B,CAAC;AAIjF;;;GAGG;AACH,wBAAgB,iCAAiC,CAAC,GAAG,EAAE,aAAa,EAAE,aAAa,EAAE,OAAO,QA4B3F;AAED;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,sBAAsB,CAAC,aAAa,EAAE,OAAO,QAE5D"}

package/dist/authentication/events/index.d.ts

@@ -1,3 +1,3 @@
-export { type AuthEventMap, type AuthEventName, onAuthEvent, type Unsubscribe, } from "./auth-events";
+export { type AuthEventMap, type AuthEventName, onAuthEvent, type SessionLostReason, type Unsubscribe, } from "./auth-events";
 export { emitAuthenticatedEvent } from "./emit-authenticated-event";
 //# sourceMappingURL=index.d.ts.map

package/dist/authentication/events/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/authentication/events/index.ts"],"names":[],"mappings":"AAGA,OAAO,EACL,KAAK,YAAY,EACjB,KAAK,aAAa,EAClB,WAAW,EACX,KAAK,WAAW,GACjB,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,sBAAsB,EAAE,MAAM,4BAA4B,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/authentication/events/index.ts"],"names":[],"mappings":"AAGA,OAAO,EACL,KAAK,YAAY,EACjB,KAAK,aAAa,EAClB,WAAW,EACX,KAAK,iBAAiB,EACtB,KAAK,WAAW,GACjB,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,sBAAsB,EAAE,MAAM,4BAA4B,CAAC"}

package/dist/authentication/index.d.ts

@@ -1,4 +1,4 @@
-export { type AuthEventMap, type AuthEventName, emitAuthenticatedEvent, onAuthEvent, type Unsubscribe, } from "./events";
+export { type AuthEventMap, type AuthEventName, emitAuthenticatedEvent, onAuthEvent, type SessionLostReason, type Unsubscribe, } from "./events";
 export { tryOAuthAuthentication, trySAMLAuthentication } from "./providers";
 export { clearSessionTokens, detectAuthMode, hasSession, isAuthenticated, isRedirectPending, login, logout, tryAutoAuthentication, } from "./session";
 export { deleteWebTokenCookie, getCsrfToken, getJWToken, getToken, requestWebTokenSession, setToken, } from "./tokens";

package/dist/authentication/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/authentication/index.ts"],"names":[],"mappings":"AAGA,OAAO,EACL,KAAK,YAAY,EACjB,KAAK,aAAa,EAClB,sBAAsB,EACtB,WAAW,EACX,KAAK,WAAW,GACjB,MAAM,UAAU,CAAC;AAGlB,OAAO,EAAE,sBAAsB,EAAE,qBAAqB,EAAE,MAAM,aAAa,CAAC;AAE5E,OAAO,EACL,kBAAkB,EAClB,cAAc,EACd,UAAU,EACV,eAAe,EACf,iBAAiB,EACjB,KAAK,EACL,MAAM,EACN,qBAAqB,GACtB,MAAM,WAAW,CAAC;AAEnB,OAAO,EACL,oBAAoB,EACpB,YAAY,EACZ,UAAU,EACV,QAAQ,EACR,sBAAsB,EACtB,QAAQ,GACT,MAAM,UAAU,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/authentication/index.ts"],"names":[],"mappings":"AAGA,OAAO,EACL,KAAK,YAAY,EACjB,KAAK,aAAa,EAClB,sBAAsB,EACtB,WAAW,EACX,KAAK,iBAAiB,EACtB,KAAK,WAAW,GACjB,MAAM,UAAU,CAAC;AAGlB,OAAO,EAAE,sBAAsB,EAAE,qBAAqB,EAAE,MAAM,aAAa,CAAC;AAE5E,OAAO,EACL,kBAAkB,EAClB,cAAc,EACd,UAAU,EACV,eAAe,EACf,iBAAiB,EACjB,KAAK,EACL,MAAM,EACN,qBAAqB,GACtB,MAAM,WAAW,CAAC;AAEnB,OAAO,EACL,oBAAoB,EACpB,YAAY,EACZ,UAAU,EACV,QAAQ,EACR,sBAAsB,EACtB,QAAQ,GACT,MAAM,UAAU,CAAC"}

package/dist/authentication/providers/oauth-authentication.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"oauth-authentication.d.ts","sourceRoot":"","sources":["../../../src/authentication/providers/oauth-authentication.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,KAAK,aAAa,EAEnB,MAAM,6BAA6B,CAAC;AAIrC,kCAAkC;AAClC,eAAO,MAAM,iCAAiC,GAC5C,KAAK,aAAa,KACjB,OAAO,CAAC;IAAE,WAAW,EAAE,MAAM,CAAA;CAAE,CAUjC,CAAC;AAEF;;;;;;;;;GASG;AACH,eAAO,MAAM,sBAAsB,QAAO,OAAO,CAAC;IAAE,WAAW,EAAE,MAAM,CAAA;CAAE,CACtB,CAAC"}
+{"version":3,"file":"oauth-authentication.d.ts","sourceRoot":"","sources":["../../../src/authentication/providers/oauth-authentication.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,aAAa,EAAkB,MAAM,6BAA6B,CAAC;AAIjF,kCAAkC;AAClC,eAAO,MAAM,iCAAiC,GAC5C,KAAK,aAAa,KACjB,OAAO,CAAC;IAAE,WAAW,EAAE,MAAM,CAAA;CAAE,CAUjC,CAAC;AAEF;;;;;;;;;GASG;AACH,eAAO,MAAM,sBAAsB,QAAO,OAAO,CAAC;IAAE,WAAW,EAAE,MAAM,CAAA;CAAE,CACtB,CAAC"}

package/dist/authentication/providers/redirect-to-identity-provider.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"redirect-to-identity-provider.d.ts","sourceRoot":"","sources":["../../../src/authentication/providers/redirect-to-identity-provider.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,KAAK,aAAa,EAInB,MAAM,6BAA6B,CAAC;AAQrC,qFAAqF;AACrF,QAAA,MAAM,cAAc;;;;;;;;;;;CAWV,CAAC;AAEX,MAAM,WAAW,+BAA+B;IAC9C,IAAI,EAAE,MAAM,OAAO,cAAc,CAAC;IAClC,gGAAgG;IAChG,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED;;;;;;;;;GASG;AACH,wBAAsB,0BAA0B,CAC9C,GAAG,EAAE,aAAa,EAClB,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,+BAA+B,GAClD,OAAO,CAAC;IAAE,WAAW,EAAE,MAAM,CAAA;CAAE,CAAC,CAoDlC"}
+{"version":3,"file":"redirect-to-identity-provider.d.ts","sourceRoot":"","sources":["../../../src/authentication/providers/redirect-to-identity-provider.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,KAAK,aAAa,EAInB,MAAM,6BAA6B,CAAC;AAKrC,qFAAqF;AACrF,QAAA,MAAM,cAAc;;;;;;;;;;;CAWV,CAAC;AAEX,MAAM,WAAW,+BAA+B;IAC9C,IAAI,EAAE,MAAM,OAAO,cAAc,CAAC;IAClC,gGAAgG;IAChG,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED;;;;;;;;;GASG;AACH,wBAAsB,0BAA0B,CAC9C,GAAG,EAAE,aAAa,EAClB,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,+BAA+B,GAClD,OAAO,CAAC;IAAE,WAAW,EAAE,MAAM,CAAA;CAAE,CAAC,CAiDlC"}

package/dist/authentication/providers/saml-authentication.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"saml-authentication.d.ts","sourceRoot":"","sources":["../../../src/authentication/providers/saml-authentication.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,KAAK,aAAa,EAEnB,MAAM,6BAA6B,CAAC;AAIrC,iCAAiC;AACjC,eAAO,MAAM,gCAAgC,GAC3C,KAAK,aAAa,KACjB,OAAO,CAAC;IAAE,WAAW,EAAE,MAAM,CAAA;CAAE,CAUjC,CAAC;AAEF;;;;;;;;;GASG;AACH,eAAO,MAAM,qBAAqB,QAAO,OAAO,CAAC;IAAE,WAAW,EAAE,MAAM,CAAA;CAAE,CACtB,CAAC"}
+{"version":3,"file":"saml-authentication.d.ts","sourceRoot":"","sources":["../../../src/authentication/providers/saml-authentication.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,aAAa,EAAkB,MAAM,6BAA6B,CAAC;AAIjF,iCAAiC;AACjC,eAAO,MAAM,gCAAgC,GAC3C,KAAK,aAAa,KACjB,OAAO,CAAC;IAAE,WAAW,EAAE,MAAM,CAAA;CAAE,CAUjC,CAAC;AAEF;;;;;;;;;GASG;AACH,eAAO,MAAM,qBAAqB,QAAO,OAAO,CAAC;IAAE,WAAW,EAAE,MAAM,CAAA;CAAE,CACtB,CAAC"}

package/dist/authentication/session/auth-mode-marker.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"auth-mode-marker.d.ts","sourceRoot":"","sources":["../../../src/authentication/session/auth-mode-marker.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,KAAK,aAAa,EAInB,MAAM,6BAA6B,CAAC;AAQrC;;;;;;;;;GASG;AACH,eAAO,MAAM,sCAAsC,GACjD,KAAK,aAAa,KACjB,IAGF,CAAC;AAEF,eAAO,MAAM,qCAAqC,GAChD,KAAK,aAAa,KACjB,OAGF,CAAC;AAEF,eAAO,MAAM,+BAA+B,GAAI,KAAK,aAAa,KAAG,IAGpE,CAAC;AAEF,kDAAkD;AAClD,eAAO,MAAM,2BAA2B,QAAO,IACS,CAAC;AAEzD,iDAAiD;AACjD,eAAO,MAAM,0BAA0B,QAAO,OACS,CAAC;AAExD,2CAA2C;AAC3C,eAAO,MAAM,oBAAoB,QAAO,IACS,CAAC"}
+{"version":3,"file":"auth-mode-marker.d.ts","sourceRoot":"","sources":["../../../src/authentication/session/auth-mode-marker.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,KAAK,aAAa,EAInB,MAAM,6BAA6B,CAAC;AAQrC;;;;;;;;;GASG;AACH,eAAO,MAAM,sCAAsC,GAAI,KAAK,aAAa,KAAG,IAG3E,CAAC;AAEF,eAAO,MAAM,qCAAqC,GAAI,KAAK,aAAa,KAAG,OAG1E,CAAC;AAEF,eAAO,MAAM,+BAA+B,GAAI,KAAK,aAAa,KAAG,IAGpE,CAAC;AAEF,kDAAkD;AAClD,eAAO,MAAM,2BAA2B,QAAO,IACS,CAAC;AAEzD,iDAAiD;AACjD,eAAO,MAAM,0BAA0B,QAAO,OACS,CAAC;AAExD,2CAA2C;AAC3C,eAAO,MAAM,oBAAoB,QAAO,IAAuD,CAAC"}

package/dist/authentication/session/auth-state.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"auth-state.d.ts","sourceRoot":"","sources":["../../../src/authentication/session/auth-state.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,KAAK,aAAa,EAInB,MAAM,6BAA6B,CAAC;AAGrC;;;;;;;;;GASG;AACH,eAAO,MAAM,2BAA2B,GACtC,KAAK,aAAa,EAClB,eAAe,OAAO,KACrB,IAQF,CAAC;AAEF,yGAAyG;AACzG,eAAO,MAAM,8BAA8B,GAAI,KAAK,aAAa,KAAG,OAGtD,CAAC;AAEf,uCAAuC;AACvC,eAAO,MAAM,gBAAgB,GAAI,eAAe,OAAO,KAAG,IACE,CAAC;AAE7D,0CAA0C;AAC1C,eAAO,MAAM,mBAAmB,QAAO,OACS,CAAC"}
+{"version":3,"file":"auth-state.d.ts","sourceRoot":"","sources":["../../../src/authentication/session/auth-state.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,KAAK,aAAa,EAInB,MAAM,6BAA6B,CAAC;AAGrC;;;;;;;;;GASG;AACH,eAAO,MAAM,2BAA2B,GAAI,KAAK,aAAa,EAAE,eAAe,OAAO,KAAG,IAQxF,CAAC;AAEF,yGAAyG;AACzG,eAAO,MAAM,8BAA8B,GAAI,KAAK,aAAa,KAAG,OACwB,CAAC;AAE7F,uCAAuC;AACvC,eAAO,MAAM,gBAAgB,GAAI,eAAe,OAAO,KAAG,IACE,CAAC;AAE7D,0CAA0C;AAC1C,eAAO,MAAM,mBAAmB,QAAO,OAAyD,CAAC"}

package/dist/authentication/session/has-session.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"has-session.d.ts","sourceRoot":"","sources":["../../../src/authentication/session/has-session.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,KAAK,aAAa,EAKnB,MAAM,6BAA6B,CAAC;AAKrC;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,wBAAsB,qBAAqB,CACzC,GAAG,EAAE,aAAa,GACjB,OAAO,CAAC,OAAO,CAAC,CAwBlB;AAsBD,iCAAiC;AACjC,eAAO,MAAM,UAAU,QAAO,OAAO,CAAC,OAAO,CACN,CAAC"}
+{"version":3,"file":"has-session.d.ts","sourceRoot":"","sources":["../../../src/authentication/session/has-session.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,KAAK,aAAa,EAKnB,MAAM,6BAA6B,CAAC;AAKrC;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,wBAAsB,qBAAqB,CAAC,GAAG,EAAE,aAAa,GAAG,OAAO,CAAC,OAAO,CAAC,CAmBhF;AAoBD,iCAAiC;AACjC,eAAO,MAAM,UAAU,QAAO,OAAO,CAAC,OAAO,CAA0C,CAAC"}

package/dist/authentication/session/login.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"login.d.ts","sourceRoot":"","sources":["../../../src/authentication/session/login.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,KAAK,aAAa,EAMnB,MAAM,6BAA6B,CAAC;AAGrC,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAgG/C;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,eAAO,MAAM,gBAAgB,GAC3B,KAAK,aAAa,EAClB,cAAc,WAAW,KACxB,OAAO,CAAC,OAAO,CAwFjB,CAAC;AAEF,4BAA4B;AAC5B,eAAO,MAAM,KAAK,GAAI,cAAc,WAAW,KAAG,OAAO,CAAC,OAAO,CAClB,CAAC"}
+{"version":3,"file":"login.d.ts","sourceRoot":"","sources":["../../../src/authentication/session/login.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,KAAK,aAAa,EAMnB,MAAM,6BAA6B,CAAC;AAGrC,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAmF/C;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,eAAO,MAAM,gBAAgB,GAC3B,KAAK,aAAa,EAClB,cAAc,WAAW,KACxB,OAAO,CAAC,OAAO,CAoFjB,CAAC;AAEF,4BAA4B;AAC5B,eAAO,MAAM,KAAK,GAAI,cAAc,WAAW,KAAG,OAAO,CAAC,OAAO,CAClB,CAAC"}

package/dist/authentication/session/logout.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"logout.d.ts","sourceRoot":"","sources":["../../../src/authentication/session/logout.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,KAAK,aAAa,EAKnB,MAAM,6BAA6B,CAAC;AAQrC;;;;;;;GAOG;AACH,wBAAsB,iBAAiB,CACrC,GAAG,EAAE,aAAa,GACjB,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAgC7B;AAED,6BAA6B;AAC7B,wBAAsB,MAAM,IAAI,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAE1D;AAED;;GAEG;AACH,wBAAgB,6BAA6B,CAAC,GAAG,EAAE,aAAa,GAAG,IAAI,CAatE;AAED;;GAEG;AACH,wBAAgB,kBAAkB,IAAI,IAAI,CAEzC"}
+{"version":3,"file":"logout.d.ts","sourceRoot":"","sources":["../../../src/authentication/session/logout.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,KAAK,aAAa,EAKnB,MAAM,6BAA6B,CAAC;AAQrC;;;;;;;GAOG;AACH,wBAAsB,iBAAiB,CAAC,GAAG,EAAE,aAAa,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CA6BvF;AAED,6BAA6B;AAC7B,wBAAsB,MAAM,IAAI,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAE1D;AAED;;GAEG;AACH,wBAAgB,6BAA6B,CAAC,GAAG,EAAE,aAAa,GAAG,IAAI,CAStE;AAED;;GAEG;AACH,wBAAgB,kBAAkB,IAAI,IAAI,CAEzC"}

package/dist/authentication/session/redirect-guard.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"redirect-guard.d.ts","sourceRoot":"","sources":["../../../src/authentication/session/redirect-guard.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,KAAK,aAAa,EAInB,MAAM,6BAA6B,CAAC;AAGrC;;;;;;;;;;;;GAYG;AACH,wBAAgB,4BAA4B,CAAC,GAAG,EAAE,aAAa,GAAG,OAAO,CAMxE;AAED,wCAAwC;AACxC,eAAO,MAAM,iBAAiB,QAAO,OACS,CAAC"}
+{"version":3,"file":"redirect-guard.d.ts","sourceRoot":"","sources":["../../../src/authentication/session/redirect-guard.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,KAAK,aAAa,EAInB,MAAM,6BAA6B,CAAC;AAGrC;;;;;;;;;;;;GAYG;AACH,wBAAgB,4BAA4B,CAAC,GAAG,EAAE,aAAa,GAAG,OAAO,CAExE;AAED,wCAAwC;AACxC,eAAO,MAAM,iBAAiB,QAAO,OAAuD,CAAC"}

package/dist/authentication/session/session-lost-latch.d.ts

@@ -0,0 +1,32 @@
+import type { AtomicContext } from "../../client/atomic-context";
+/** Taken when a request is sent, and handed back with its outcome. */
+export declare function sessionLostMarkWithContext(ctx: AtomicContext): number;
+/**
+ * Claims the announcement of this context's session loss for a request sent at `mark`.
+ *
+ * @returns `true` for the one caller that must raise `sessionLost`; `false` when the loss was
+ * already announced, or when the request was sent before the current session was established.
+ */
+export declare function claimSessionLostWithContext(ctx: AtomicContext, mark: number): boolean;
+/**
+ * A new session is established: its next loss is a new one to announce, and requests sent before
+ * it can no longer announce it lost.
+ *
+ * Called from `emitAuthenticatedEventWithContext(ctx, true)`, which every authentication path goes
+ * through, and when a recovery hook reports success (a hook may restore the session without
+ * `login()`, e.g. by refreshing an SSO cookie).
+ */
+export declare function rearmSessionLostWithContext(ctx: AtomicContext): void;
+/**
+ * A recovery hook called at `mark` reported success: re-arms like a new session, unless one was
+ * already established since — the hook went through `login()`, which re-armed. Doing it again would
+ * disown the requests sent against that session in the meantime.
+ */
+export declare function rearmUnlessEstablishedSinceWithContext(ctx: AtomicContext, mark: number): void;
+/**
+ * A request sent at `mark` succeeded: if it was sent after the announcement, the session is alive
+ * and the latch re-arms — without starting a new session, so requests in flight keep their right to
+ * announce its loss. A request sent earlier proves nothing about the loss announced since.
+ */
+export declare function confirmSessionAliveWithContext(ctx: AtomicContext, mark: number): void;
+//# sourceMappingURL=session-lost-latch.d.ts.map

package/dist/authentication/session/session-lost-latch.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-lost-latch.d.ts","sourceRoot":"","sources":["../../../src/authentication/session/session-lost-latch.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,6BAA6B,CAAC;AA2CjE,sEAAsE;AACtE,wBAAgB,0BAA0B,CAAC,GAAG,EAAE,aAAa,GAAG,MAAM,CAErE;AAED;;;;;GAKG;AACH,wBAAgB,2BAA2B,CAAC,GAAG,EAAE,aAAa,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAQrF;AAED;;;;;;;GAOG;AACH,wBAAgB,2BAA2B,CAAC,GAAG,EAAE,aAAa,GAAG,IAAI,CAIpE;AAED;;;;GAIG;AACH,wBAAgB,sCAAsC,CAAC,GAAG,EAAE,aAAa,EAAE,IAAI,EAAE,MAAM,GAAG,IAAI,CAI7F;AAED;;;;GAIG;AACH,wBAAgB,8BAA8B,CAAC,GAAG,EAAE,aAAa,EAAE,IAAI,EAAE,MAAM,GAAG,IAAI,CAKrF"}

package/dist/authentication/session/try-auto-authentication.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"try-auto-authentication.d.ts","sourceRoot":"","sources":["../../../src/authentication/session/try-auto-authentication.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,KAAK,aAAa,EAGnB,MAAM,6BAA6B,CAAC;AAQrC;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,eAAO,MAAM,gCAAgC,GAC3C,KAAK,aAAa,KACjB,OAAO,CAAC,OAAO,CAkCjB,CAAC;AAEF,4CAA4C;AAC5C,eAAO,MAAM,qBAAqB,QAAO,OAAO,CAAC,OAAO,CACN,CAAC"}
+{"version":3,"file":"try-auto-authentication.d.ts","sourceRoot":"","sources":["../../../src/authentication/session/try-auto-authentication.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,aAAa,EAAiC,MAAM,6BAA6B,CAAC;AAQhG;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,eAAO,MAAM,gCAAgC,GAAU,KAAK,aAAa,KAAG,OAAO,CAAC,OAAO,CAwB1F,CAAC;AAEF,4CAA4C;AAC5C,eAAO,MAAM,qBAAqB,QAAO,OAAO,CAAC,OAAO,CACN,CAAC"}

package/dist/authentication/session/user-authentication.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"user-authentication.d.ts","sourceRoot":"","sources":["../../../src/authentication/session/user-authentication.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,KAAK,aAAa,EAEnB,MAAM,6BAA6B,CAAC;AAIrC;;;;;;GAMG;AACH,eAAO,MAAM,0BAA0B,GAAI,KAAK,aAAa,KAAG,OACG,CAAC;AAEpE;;;GAGG;AACH,eAAO,MAAM,eAAe,QAAO,OACS,CAAC"}
+{"version":3,"file":"user-authentication.d.ts","sourceRoot":"","sources":["../../../src/authentication/session/user-authentication.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,aAAa,EAAkB,MAAM,6BAA6B,CAAC;AAIjF;;;;;;GAMG;AACH,eAAO,MAAM,0BAA0B,GAAI,KAAK,aAAa,KAAG,OACG,CAAC;AAEpE;;;GAGG;AACH,eAAO,MAAM,eAAe,QAAO,OAAqD,CAAC"}

package/dist/authentication/tokens/delete-web-token-cookie.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"delete-web-token-cookie.d.ts","sourceRoot":"","sources":["../../../src/authentication/tokens/delete-web-token-cookie.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,KAAK,aAAa,EAEnB,MAAM,6BAA6B,CAAC;AAKrC,+DAA+D;AAC/D,MAAM,MAAM,0BAA0B,GAAG;IACvC,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB,CAAC;AAEF;;;GAGG;AACH,eAAO,MAAM,+BAA+B,GAC1C,KAAK,aAAa,KACjB,OAAO,CAAC,0BAA0B,CAcpC,CAAC;AAEF,2CAA2C;AAC3C,eAAO,MAAM,oBAAoB,QAAO,OAAO,CAAC,0BAA0B,CACzB,CAAC"}
+{"version":3,"file":"delete-web-token-cookie.d.ts","sourceRoot":"","sources":["../../../src/authentication/tokens/delete-web-token-cookie.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,aAAa,EAAkB,MAAM,6BAA6B,CAAC;AAKjF,+DAA+D;AAC/D,MAAM,MAAM,0BAA0B,GAAG;IACvC,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB,CAAC;AAEF;;;GAGG;AACH,eAAO,MAAM,+BAA+B,GAC1C,KAAK,aAAa,KACjB,OAAO,CAAC,0BAA0B,CAcpC,CAAC;AAEF,2CAA2C;AAC3C,eAAO,MAAM,oBAAoB,QAAO,OAAO,CAAC,0BAA0B,CACzB,CAAC"}

package/dist/authentication/tokens/get-csrf-token.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"get-csrf-token.d.ts","sourceRoot":"","sources":["../../../src/authentication/tokens/get-csrf-token.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,KAAK,aAAa,EAGnB,MAAM,6BAA6B,CAAC;AAMrC;;;;;;;;;;;;;GAaG;AACH,eAAO,MAAM,uBAAuB,GAClC,KAAK,aAAa,KACjB,OAAO,CAAC,MAAM,GAAG,IAAI,CA0BvB,CAAC;AAEF,mCAAmC;AACnC,eAAO,MAAM,YAAY,QAAO,OAAO,CAAC,MAAM,GAAG,IAAI,CACZ,CAAC"}
+{"version":3,"file":"get-csrf-token.d.ts","sourceRoot":"","sources":["../../../src/authentication/tokens/get-csrf-token.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,aAAa,EAAiC,MAAM,6BAA6B,CAAC;AAMhG;;;;;;;;;;;;;GAaG;AACH,eAAO,MAAM,uBAAuB,GAAU,KAAK,aAAa,KAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAwBvF,CAAC;AAEF,mCAAmC;AACnC,eAAO,MAAM,YAAY,QAAO,OAAO,CAAC,MAAM,GAAG,IAAI,CAA4C,CAAC"}

package/dist/authentication/tokens/get-jwt-token.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"get-jwt-token.d.ts","sourceRoot":"","sources":["../../../src/authentication/tokens/get-jwt-token.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,KAAK,aAAa,EAGnB,MAAM,6BAA6B,CAAC;AAErC,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAM/C;;;;;;;;;;;;;;;GAeG;AACH,wBAAsB,iCAAiC,CACrD,GAAG,EAAE,aAAa,EAClB,WAAW,CAAC,EAAE,WAAW,EACzB,OAAO,CAAC,EAAE;IAAE,WAAW,CAAC,EAAE,OAAO,CAAA;CAAE,GAClC,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CA4BxB;AAED;;;;;;;;;GASG;AACH,wBAAgB,sBAAsB,CACpC,WAAW,EAAE,WAAW,GACvB,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;AAC1B;;;;;;GAMG;AACH,wBAAgB,sBAAsB,IAAI,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;AAKjE;;;GAGG;AACH,eAAO,MAAM,UAAU,+BAAyB,CAAC"}
+{"version":3,"file":"get-jwt-token.d.ts","sourceRoot":"","sources":["../../../src/authentication/tokens/get-jwt-token.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,aAAa,EAAiC,MAAM,6BAA6B,CAAC;AAEhG,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAM/C;;;;;;;;;;;;;;;GAeG;AACH,wBAAsB,iCAAiC,CACrD,GAAG,EAAE,aAAa,EAClB,WAAW,CAAC,EAAE,WAAW,EACzB,OAAO,CAAC,EAAE;IAAE,WAAW,CAAC,EAAE,OAAO,CAAA;CAAE,GAClC,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CA4BxB;AAED;;;;;;;;;GASG;AACH,wBAAgB,sBAAsB,CAAC,WAAW,EAAE,WAAW,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;AACzF;;;;;;GAMG;AACH,wBAAgB,sBAAsB,IAAI,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;AAKjE;;;GAGG;AACH,eAAO,MAAM,UAAU,+BAAyB,CAAC"}

package/dist/authentication/tokens/get-token.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"get-token.d.ts","sourceRoot":"","sources":["../../../src/authentication/tokens/get-token.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,KAAK,aAAa,EAKnB,MAAM,6BAA6B,CAAC;AAGrC;;;GAGG;AACH,eAAO,MAAM,mBAAmB,GAAI,KAAK,aAAa,KAAG,MAAM,GAAG,IA0BjE,CAAC;AAEF;;;GAGG;AACH,eAAO,MAAM,QAAQ,QAAO,MAAM,GAAG,IACA,CAAC"}
+{"version":3,"file":"get-token.d.ts","sourceRoot":"","sources":["../../../src/authentication/tokens/get-token.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,KAAK,aAAa,EAKnB,MAAM,6BAA6B,CAAC;AAGrC;;;GAGG;AACH,eAAO,MAAM,mBAAmB,GAAI,KAAK,aAAa,KAAG,MAAM,GAAG,IAsBjE,CAAC;AAEF;;;GAGG;AACH,eAAO,MAAM,QAAQ,QAAO,MAAM,GAAG,IAA2C,CAAC"}

package/dist/authentication/tokens/set-token.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"set-token.d.ts","sourceRoot":"","sources":["../../../src/authentication/tokens/set-token.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,KAAK,aAAa,EAInB,MAAM,6BAA6B,CAAC;AAGrC;;;GAGG;AACH,eAAO,MAAM,mBAAmB,GAC9B,KAAK,aAAa,EAClB,OAAO,MAAM,KACZ,IAMF,CAAC;AAEF;;;GAGG;AACH,eAAO,MAAM,QAAQ,GAAI,OAAO,MAAM,KAAG,IACG,CAAC"}
+{"version":3,"file":"set-token.d.ts","sourceRoot":"","sources":["../../../src/authentication/tokens/set-token.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,KAAK,aAAa,EAInB,MAAM,6BAA6B,CAAC;AAGrC;;;GAGG;AACH,eAAO,MAAM,mBAAmB,GAAI,KAAK,aAAa,EAAE,OAAO,MAAM,KAAG,IAMvE,CAAC;AAEF;;;GAGG;AACH,eAAO,MAAM,QAAQ,GAAI,OAAO,MAAM,KAAG,IAAkD,CAAC"}

package/dist/client/atomic-context.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"atomic-context.d.ts","sourceRoot":"","sources":["../../src/client/atomic-context.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,KAAK,YAAY,EAGlB,MAAM,sCAAsC,CAAC;AAC9C,OAAO,KAAK,EACV,YAAY,EACZ,YAAY,EACb,MAAM,gCAAgC,CAAC;AAExC,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,iCAAiC,CAAC;AAIvE,OAAO,EAAyB,KAAK,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAEzE;;;;;;;GAOG;AACH,MAAM,WAAW,aAAa;IAC5B;;;OAGG;IACH,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC,eAAe,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACpE,wCAAwC;IACxC,QAAQ,CAAC,MAAM,EAAE,YAAY,CAAC;IAC9B,qFAAqF;IACrF,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,yFAAyF;IACzF,kBAAkB,IAAI,WAAW,GAAG,SAAS,CAAC;CAC/C;AAcD;;;GAGG;AACH,eAAO,MAAM,cAAc,EAAE,aAK5B,CAAC;AAEF;;;;;;;;;GASG;AACH,wBAAgB,aAAa,CAAC,OAAO,EAAE;IACrC,MAAM,EAAE,OAAO,CAAC,eAAe,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC3D,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,WAAW,CAAC,EAAE,WAAW,CAAC;CAC3B,GAAG,aAAa,CAShB;AAED,wEAAwE;AACxE,wBAAgB,aAAa,CAAC,GAAG,EAAE,aAAa,GAAG,YAAY,CAE9D;AAED,wFAAwF;AACxF,wBAAgB,YAAY,CAAC,GAAG,EAAE,aAAa,GAAG,OAAO,UAAU,CAAC,KAAK,CAGxE;AAED,4FAA4F;AAC5F,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,aAAa,GAAG,kBAAkB,CAEzE;AAED,0FAA0F;AAC1F,wBAAgB,cAAc,CAC5B,GAAG,EAAE,aAAa,EAClB,KAAK,EAAE,SAAS,GAAG,OAAO,GACzB,YAAY,CAEd;AAED,wDAAwD;AACxD,wBAAgB,UAAU,CAAC,GAAG,EAAE,aAAa,EAAE,GAAG,EAAE,MAAM,GAAG,MAAM,CAElE;AAED;;;GAGG;AACH,wBAAgB,WAAW,CACzB,GAAG,EAAE,aAAa,EAClB,MAAM,EAAE,OAAO,CAAC,eAAe,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GACzD,IAAI,CAEN"}
+{"version":3,"file":"atomic-context.d.ts","sourceRoot":"","sources":["../../src/client/atomic-context.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,KAAK,YAAY,EAGlB,MAAM,sCAAsC,CAAC;AAC9C,OAAO,KAAK,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,gCAAgC,CAAC;AAEjF,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,iCAAiC,CAAC;AAIvE,OAAO,EAAyB,KAAK,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAEzE;;;;;;;GAOG;AACH,MAAM,WAAW,aAAa;IAC5B;;;OAGG;IACH,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC,eAAe,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACpE,wCAAwC;IACxC,QAAQ,CAAC,MAAM,EAAE,YAAY,CAAC;IAC9B,qFAAqF;IACrF,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,yFAAyF;IACzF,kBAAkB,IAAI,WAAW,GAAG,SAAS,CAAC;CAC/C;AAcD;;;GAGG;AACH,eAAO,MAAM,cAAc,EAAE,aAK5B,CAAC;AAEF;;;;;;;;;GASG;AACH,wBAAgB,aAAa,CAAC,OAAO,EAAE;IACrC,MAAM,EAAE,OAAO,CAAC,eAAe,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC3D,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,WAAW,CAAC,EAAE,WAAW,CAAC;CAC3B,GAAG,aAAa,CAShB;AAED,wEAAwE;AACxE,wBAAgB,aAAa,CAAC,GAAG,EAAE,aAAa,GAAG,YAAY,CAE9D;AAED,wFAAwF;AACxF,wBAAgB,YAAY,CAAC,GAAG,EAAE,aAAa,GAAG,OAAO,UAAU,CAAC,KAAK,CAGxE;AAED,4FAA4F;AAC5F,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,aAAa,GAAG,kBAAkB,CAEzE;AAED,0FAA0F;AAC1F,wBAAgB,cAAc,CAAC,GAAG,EAAE,aAAa,EAAE,KAAK,EAAE,SAAS,GAAG,OAAO,GAAG,YAAY,CAE3F;AAED,wDAAwD;AACxD,wBAAgB,UAAU,CAAC,GAAG,EAAE,aAAa,EAAE,GAAG,EAAE,MAAM,GAAG,MAAM,CAElE;AAED;;;GAGG;AACH,wBAAgB,WAAW,CACzB,GAAG,EAAE,aAAa,EAClB,MAAM,EAAE,OAAO,CAAC,eAAe,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GACzD,IAAI,CAEN"}