@smess/networking 1.2.0 → 2.0.0

package/dist/core/transport.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"transport.js","sourceRoot":"","sources":["../../src/core/transport.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,8BAA8B,CAAC;AAgC7D,MAAM,OAAO,GAAG,MAAM,CAAC,eAAe,CAAC,CAAC;AAExC,SAAS,WAAW,CAAC,MAA+B,EAAE,SAA6B;IACjF,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;IACzC,IAAI,KAAgD,CAAC;IACrD,MAAM,OAAO,GAAG,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACvD,IAAI,MAAM,EAAE,OAAO;QAAE,UAAU,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;;QAChD,MAAM,EAAE,gBAAgB,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;IAChE,IAAI,SAAS,IAAI,SAAS,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QAC7D,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,SAAS,CAAC,CAAC;IACjE,CAAC;IACD,OAAO;QACL,MAAM,EAAE,UAAU,CAAC,MAAM;QACzB,QAAQ,EAAE,GAAG,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC,OAAO,IAAI,UAAU,CAAC,MAAM,CAAC,MAAM,KAAK,OAAO;QACjF,OAAO,EAAE,GAAG,EAAE;YACZ,IAAI,KAAK,KAAK,SAAS;gBAAE,YAAY,CAAC,KAAK,CAAC,CAAC;YAC7C,MAAM,EAAE,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAChD,CAAC;KACF,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,QAAQ,CAAC,QAAkB,EAAE,YAA0B;IACpE,IAAI,QAAQ,CAAC,EAAE,IAAI,YAAY,KAAK,MAAM;QAAE,OAAO,EAAE,IAAI,EAAE,MAAM,QAAQ,CAAC,IAAI,EAAE,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC;IACtG,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;IAClC,IAAI,YAAY,KAAK,MAAM,IAAI,QAAQ,CAAC,EAAE;QAAE,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC;IACpF,IAAI,GAAG,CAAC,IAAI,EAAE,KAAK,EAAE;QAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC;IACrE,oGAAoG;IACpG,IAAI,CAAC;QACH,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC;IACtD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC;IACzC,CAAC;AACH,CAAC;AAED,kHAAkH;AAClH,MAAM,UAAU,oBAAoB,CAAC,SAAyB;IAC5D,OAAO,KAAK,EAAE,OAAO,EAAE,EAAE;QACvB,wGAAwG;QACxG,MAAM,OAAO,GAAkB,SAAS,IAAI,CAAC,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,UAAU,CAAC,KAAK,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC;QAC7F,MAAM,IAAI,GAAG,WAAW,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC;QAC5D,MAAM,IAAI,GAAG,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,CAAC;QAC1D,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE;gBAC1C,GAAG,OAAO,CAAC,YAAY;gBACvB,MAAM,EAAE,OAAO,CAAC,MAAM;gBACtB,OAAO,EAAE,OAAO,CAAC,OAAO;gBACxB,IAAI,EAAE,OAAO,CAAC,IAAI,IAAI,IAAI;gBAC1B,MAAM,EAAE,IAAI,CAAC,MAAM;aACpB,CAAC,CAAC;YACH,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,GAAG,MAAM,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC,YAAY,CAAC,CAAC;YAC5E,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,EAAE,EAAE,QAAQ,CAAC,EAAE,EAAE,OAAO,EAAE,QAAQ,CAAC,OAAO,EAAE,GAAG,EAAE,QAAQ,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC;QACrI,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,aAAa,CAAC,EAAE,CAAC,KAAK,CAAC;gBAAE,MAAM,KAAK,CAAC;YACzC,IAAI,IAAI,CAAC,QAAQ,EAAE,EAAE,CAAC;gBACpB,MAAM,IAAI,aAAa,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,2BAA2B,OAAO,CAAC,SAAS,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;YAClI,CAAC;YACD,IAAI,IAAI,CAAC,MAAM,CAAC,OAAO;gBAAE,MAAM,IAAI,aAAa,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;YAC5F,MAAM,IAAI,aAAa,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QACrE,CAAC;gBAAS,CAAC;YACT,IAAI,CAAC,OAAO,EAAE,CAAC;QACjB,CAAC;IACH,CAAC,CAAC;AACJ,CAAC"}

package/dist/core/types.d.ts

@@ -0,0 +1,24 @@
+/** Shared primitive types used across the transport, client and module layers. */
+export type HttpMethod = 'GET' | 'POST' | 'PUT' | 'PATCH' | 'DELETE';
+/**
+ * How a request uses the signed-in session.
+ *
+ * - `none`: never sends `Authorization`. Required for core-services' anonymous firewalls (login, refresh,
+ *   OTP, SSO, public catalogs): Lexik rejects any stale Bearer with 401, even on public routes.
+ * - `optional`: sends the access token when there is one.
+ * - `required`: fails with `unauthenticated` (code `no_session`) before any network call when signed out.
+ */
+export type AuthMode = 'none' | 'optional' | 'required';
+/** `json` parses the body (empty body → `undefined`); `text` and `blob` return it raw. */
+export type ResponseType = 'json' | 'text' | 'blob';
+export type MaybePromise<T> = T | Promise<T>;
+export type QueryPrimitive = string | number | boolean | null | undefined;
+/** Query values; arrays are sent PHP-style (`key[]=a&key[]=b`); `null`/`undefined` are dropped. */
+export type QueryParams = Readonly<Record<string, QueryPrimitive | readonly QueryPrimitive[]>>;
+/**
+ * Extra `fetch` options passed through untouched (`cache`, `credentials`, `keepalive`, Next.js `next`, ...).
+ * `method`, `headers`, `body` and `signal` are owned by the client.
+ */
+export type FetchOptions = Omit<RequestInit, 'method' | 'headers' | 'body' | 'signal'> & Record<string, unknown>;
+export type FetchFunction = (input: string, init?: RequestInit) => Promise<Response>;
+//# sourceMappingURL=types.d.ts.map

package/dist/core/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/core/types.ts"],"names":[],"mappings":"AAAA,kFAAkF;AAElF,MAAM,MAAM,UAAU,GAAG,KAAK,GAAG,MAAM,GAAG,KAAK,GAAG,OAAO,GAAG,QAAQ,CAAC;AAErE;;;;;;;GAOG;AACH,MAAM,MAAM,QAAQ,GAAG,MAAM,GAAG,UAAU,GAAG,UAAU,CAAC;AAExD,0FAA0F;AAC1F,MAAM,MAAM,YAAY,GAAG,MAAM,GAAG,MAAM,GAAG,MAAM,CAAC;AAEpD,MAAM,MAAM,YAAY,CAAC,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;AAE7C,MAAM,MAAM,cAAc,GAAG,MAAM,GAAG,MAAM,GAAG,OAAO,GAAG,IAAI,GAAG,SAAS,CAAC;AAE1E,mGAAmG;AACnG,MAAM,MAAM,WAAW,GAAG,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,cAAc,GAAG,SAAS,cAAc,EAAE,CAAC,CAAC,CAAC;AAE/F;;;GAGG;AACH,MAAM,MAAM,YAAY,GAAG,IAAI,CAAC,WAAW,EAAE,QAAQ,GAAG,SAAS,GAAG,MAAM,GAAG,QAAQ,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;AAEjH,MAAM,MAAM,aAAa,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,WAAW,KAAK,OAAO,CAAC,QAAQ,CAAC,CAAC"}

package/dist/core/types.js

@@ -0,0 +1,3 @@
+/** Shared primitive types used across the transport, client and module layers. */
+export {};
+//# sourceMappingURL=types.js.map

package/dist/core/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/core/types.ts"],"names":[],"mappings":"AAAA,kFAAkF"}

package/dist/core/url.d.ts

@@ -0,0 +1,15 @@
+import type { QueryParams } from './types.js';
+type ParamNames<P extends string> = P extends `${string}{${infer Name}}${infer Rest}` ? Name | ParamNames<Rest> : never;
+/** `{ id: … }` for `'/v1/things/{id}'`; an empty object type when the path has no placeholders. */
+export type PathParams<P extends string> = [ParamNames<P>] extends [never] ? Record<string, never> : {
+    readonly [K in ParamNames<P>]: string | number;
+};
+export type HasPathParams<P extends string> = [ParamNames<P>] extends [never] ? false : true;
+/** Fills `{name}` placeholders with URL-encoded values. Throws on a missing or empty value. */
+export declare function buildPath(template: string, params?: Readonly<Record<string, string | number>>): string;
+/** Serializes query params the way Symfony reads them; returns `''` or `?a=1&b[]=x`. */
+export declare function serializeQuery(query: QueryParams | undefined): string;
+/** Joins a base URL (optionally with a path prefix) and an absolute path. */
+export declare function joinUrl(base: string, path: string): string;
+export {};
+//# sourceMappingURL=url.d.ts.map

package/dist/core/url.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"url.d.ts","sourceRoot":"","sources":["../../src/core/url.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAkB,MAAM,YAAY,CAAC;AAE9D,KAAK,UAAU,CAAC,CAAC,SAAS,MAAM,IAAI,CAAC,SAAS,GAAG,MAAM,IAAI,MAAM,IAAI,IAAI,MAAM,IAAI,EAAE,GAAG,IAAI,GAAG,UAAU,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC;AAExH,mGAAmG;AACnG,MAAM,MAAM,UAAU,CAAC,CAAC,SAAS,MAAM,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,GACtE,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,GACrB;IAAE,QAAQ,EAAE,CAAC,IAAI,UAAU,CAAC,CAAC,CAAC,GAAG,MAAM,GAAG,MAAM;CAAE,CAAC;AAEvD,MAAM,MAAM,aAAa,CAAC,CAAC,SAAS,MAAM,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,GAAG,KAAK,GAAG,IAAI,CAAC;AAI7F,+FAA+F;AAC/F,wBAAgB,SAAS,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,GAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAAC,CAAM,GAAG,MAAM,CAQ1G;AAQD,wFAAwF;AACxF,wBAAgB,cAAc,CAAC,KAAK,EAAE,WAAW,GAAG,SAAS,GAAG,MAAM,CAiBrE;AAED,6EAA6E;AAC7E,wBAAgB,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,CAG1D"}

package/dist/core/url.js

@@ -0,0 +1,46 @@
+const PLACEHOLDER = /\{([^}]+)\}/g;
+/** Fills `{name}` placeholders with URL-encoded values. Throws on a missing or empty value. */
+export function buildPath(template, params = {}) {
+    return template.replace(PLACEHOLDER, (_match, name) => {
+        const value = params[name];
+        if (value === undefined || value === null || String(value) === '') {
+            throw new TypeError(`Missing path parameter "${name}" for ${template}`);
+        }
+        return encodeURIComponent(String(value));
+    });
+}
+function stringify(value) {
+    if (value === undefined || value === null)
+        return undefined;
+    if (typeof value === 'boolean')
+        return value ? 'true' : 'false';
+    return String(value);
+}
+/** Serializes query params the way Symfony reads them; returns `''` or `?a=1&b[]=x`. */
+export function serializeQuery(query) {
+    if (!query)
+        return '';
+    const search = new URLSearchParams();
+    for (const [key, raw] of Object.entries(query)) {
+        if (Array.isArray(raw)) {
+            const name = key.endsWith('[]') ? key : `${key}[]`;
+            for (const item of raw) {
+                const value = stringify(item);
+                if (value !== undefined)
+                    search.append(name, value);
+            }
+            continue;
+        }
+        const value = stringify(raw);
+        if (value !== undefined)
+            search.append(key, value);
+    }
+    const text = search.toString();
+    return text ? `?${text}` : '';
+}
+/** Joins a base URL (optionally with a path prefix) and an absolute path. */
+export function joinUrl(base, path) {
+    const trimmed = base.replace(/\/+$/, '');
+    return `${trimmed}${path.startsWith('/') ? path : `/${path}`}`;
+}
+//# sourceMappingURL=url.js.map

package/dist/core/url.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"url.js","sourceRoot":"","sources":["../../src/core/url.ts"],"names":[],"mappings":"AAWA,MAAM,WAAW,GAAG,cAAc,CAAC;AAEnC,+FAA+F;AAC/F,MAAM,UAAU,SAAS,CAAC,QAAgB,EAAE,SAAoD,EAAE;IAChG,OAAO,QAAQ,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC,MAAM,EAAE,IAAY,EAAE,EAAE;QAC5D,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC;QAC3B,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI,IAAI,MAAM,CAAC,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC;YAClE,MAAM,IAAI,SAAS,CAAC,2BAA2B,IAAI,SAAS,QAAQ,EAAE,CAAC,CAAC;QAC1E,CAAC;QACD,OAAO,kBAAkB,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;IAC3C,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,SAAS,CAAC,KAAqB;IACtC,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,SAAS,CAAC;IAC5D,IAAI,OAAO,KAAK,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC;IAChE,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC;AACvB,CAAC;AAED,wFAAwF;AACxF,MAAM,UAAU,cAAc,CAAC,KAA8B;IAC3D,IAAI,CAAC,KAAK;QAAE,OAAO,EAAE,CAAC;IACtB,MAAM,MAAM,GAAG,IAAI,eAAe,EAAE,CAAC;IACrC,KAAK,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAC/C,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;YACvB,MAAM,IAAI,GAAG,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,GAAG,IAAI,CAAC;YACnD,KAAK,MAAM,IAAI,IAAI,GAAgC,EAAE,CAAC;gBACpD,MAAM,KAAK,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;gBAC9B,IAAI,KAAK,KAAK,SAAS;oBAAE,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;YACtD,CAAC;YACD,SAAS;QACX,CAAC;QACD,MAAM,KAAK,GAAG,SAAS,CAAC,GAAqB,CAAC,CAAC;QAC/C,IAAI,KAAK,KAAK,SAAS;YAAE,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IACrD,CAAC;IACD,MAAM,IAAI,GAAG,MAAM,CAAC,QAAQ,EAAE,CAAC;IAC/B,OAAO,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;AAChC,CAAC;AAED,6EAA6E;AAC7E,MAAM,UAAU,OAAO,CAAC,IAAY,EAAE,IAAY;IAChD,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IACzC,OAAO,GAAG,OAAO,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,EAAE,CAAC;AACjE,CAAC"}

package/dist/errors/parse-error-body.d.ts

@@ -0,0 +1,20 @@
+/**
+ * Reads every error format core-services emits into one shape:
+ *
+ * - Stripe style `{"error": {"type", "code", "message", "param"}}` (Danara, rate limits, Mobile, Payment, ...)
+ * - Common `{"errors": {"<field or empty>": [{"message"}]}}` (validation, auth, http, access-denied subscribers)
+ * - `{"code", "message"}` (Campaign, EmailCampaign, SSO user messages, Lexik JWT failures)
+ * - `{"is_success": false, "error_code", "error_message"}` (DefaultExceptionSubscriber, 500)
+ * - `{"error": "text"}` (API-key rate limit, X-Internal-Key failures)
+ * - `{"violations": [{"propertyPath", "message"}]}` and `{"detail"}` / `{"title"}` (API Platform style)
+ * - a short `text/plain` body (CORS tenant mismatch 403); HTML error pages yield nothing
+ */
+export interface ParsedErrorBody {
+    message?: string;
+    code?: string;
+    type?: string;
+    param?: string;
+    fields?: Record<string, string>;
+}
+export declare function parseErrorBody(body: unknown): ParsedErrorBody;
+//# sourceMappingURL=parse-error-body.d.ts.map

package/dist/errors/parse-error-body.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"parse-error-body.d.ts","sourceRoot":"","sources":["../../src/errors/parse-error-body.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,MAAM,WAAW,eAAe;IAC9B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACjC;AAoBD,wBAAgB,cAAc,CAAC,IAAI,EAAE,OAAO,GAAG,eAAe,CAwD7D"}

package/dist/errors/parse-error-body.js

@@ -0,0 +1,73 @@
+const MAX_TEXT_MESSAGE = 500;
+const isRecord = (value) => typeof value === 'object' && value !== null && !Array.isArray(value);
+const text = (value) => typeof value === 'string' && value.trim() !== '' ? value.trim() : undefined;
+function messagesOf(value) {
+    const items = Array.isArray(value) ? value : [value];
+    const out = [];
+    for (const item of items) {
+        const message = isRecord(item) ? text(item.message) ?? text(item.title) : text(item);
+        if (message)
+            out.push(message);
+    }
+    return out;
+}
+export function parseErrorBody(body) {
+    if (typeof body === 'string') {
+        const trimmed = body.trim();
+        if (trimmed && trimmed.length <= MAX_TEXT_MESSAGE && !trimmed.startsWith('<'))
+            return { message: trimmed };
+        return {};
+    }
+    if (!isRecord(body))
+        return {};
+    const out = {};
+    const general = [];
+    const fields = {};
+    const error = body.error;
+    if (isRecord(error)) {
+        out.message = text(error.message);
+        out.code = text(error.code);
+        out.type = text(error.type);
+        out.param = text(error.param);
+    }
+    else if (text(error)) {
+        out.message = text(error);
+    }
+    const errors = body.errors;
+    if (isRecord(errors)) {
+        for (const [key, value] of Object.entries(errors)) {
+            const messages = messagesOf(value);
+            if (messages.length === 0)
+                continue;
+            if (key === '')
+                general.push(...messages);
+            else
+                fields[key] ?? (fields[key] = messages[0]);
+        }
+    }
+    const violations = Array.isArray(body.violations) ? body.violations : Array.isArray(errors) ? errors : undefined;
+    if (violations) {
+        for (const violation of violations) {
+            const message = isRecord(violation) ? text(violation.message) ?? text(violation.title) : text(violation);
+            if (!message)
+                continue;
+            const key = isRecord(violation)
+                ? text(violation.propertyPath) ?? text(violation.property_path) ?? text(violation.field)
+                : undefined;
+            if (key)
+                fields[key] ?? (fields[key] = message);
+            else
+                general.push(message);
+        }
+    }
+    out.message ?? (out.message = general[0] ?? text(body.message) ?? text(body.error_message) ?? text(body.detail) ?? text(body.title));
+    if (general.length > 1 && out.message === general[0])
+        out.message = general.join(' ');
+    out.code ?? (out.code = text(body.error_code) ?? text(body.code));
+    if (Object.keys(fields).length > 0) {
+        out.fields = fields;
+        out.message ?? (out.message = Object.values(fields).join(' '));
+    }
+    return Object.fromEntries(Object.entries(out).filter(([, value]) => value !== undefined));
+}
+//# sourceMappingURL=parse-error-body.js.map

package/dist/errors/parse-error-body.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"parse-error-body.js","sourceRoot":"","sources":["../../src/errors/parse-error-body.ts"],"names":[],"mappings":"AAmBA,MAAM,gBAAgB,GAAG,GAAG,CAAC;AAE7B,MAAM,QAAQ,GAAG,CAAC,KAAc,EAAoC,EAAE,CACpE,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAEvE,MAAM,IAAI,GAAG,CAAC,KAAc,EAAsB,EAAE,CAClD,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;AAE9E,SAAS,UAAU,CAAC,KAAc;IAChC,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;IACrD,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,OAAO,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACrF,IAAI,OAAO;YAAE,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACjC,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,IAAa;IAC1C,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;QAC7B,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QAC5B,IAAI,OAAO,IAAI,OAAO,CAAC,MAAM,IAAI,gBAAgB,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;QAC3G,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,OAAO,EAAE,CAAC;IAE/B,MAAM,GAAG,GAAoB,EAAE,CAAC;IAChC,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,MAAM,MAAM,GAA2B,EAAE,CAAC;IAE1C,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC;IACzB,IAAI,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QACpB,GAAG,CAAC,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAClC,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC5B,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC5B,GAAG,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IAChC,CAAC;SAAM,IAAI,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QACvB,GAAG,CAAC,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC;IAC5B,CAAC;IAED,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;IAC3B,IAAI,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;QACrB,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;YAClD,MAAM,QAAQ,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC;YACnC,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;gBAAE,SAAS;YACpC,IAAI,GAAG,KAAK,EAAE;gBAAE,OAAO,CAAC,IAAI,CAAC,GAAG,QAAQ,CAAC,CAAC;;gBACrC,MAAM,CAAC,GAAG,MAAV,MAAM,CAAC,GAAG,IAAM,QAAQ,CAAC,CAAC,CAAW,EAAC;QAC7C,CAAC;IACH,CAAC;IAED,MAAM,UAAU,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;IACjH,IAAI,UAAU,EAAE,CAAC;QACf,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;YACnC,MAAM,OAAO,GAAG,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YACzG,IAAI,CAAC,OAAO;gBAAE,SAAS;YACvB,MAAM,GAAG,GAAG,QAAQ,CAAC,SAAS,CAAC;gBAC7B,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,IAAI,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC,IAAI,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC;gBACxF,CAAC,CAAC,SAAS,CAAC;YACd,IAAI,GAAG;gBAAE,MAAM,CAAC,GAAG,MAAV,MAAM,CAAC,GAAG,IAAM,OAAO,EAAC;;gBAC5B,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC7B,CAAC;IACH,CAAC;IAED,GAAG,CAAC,OAAO,KAAX,GAAG,CAAC,OAAO,GACT,OAAO,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,EAAC;IACxG,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,GAAG,CAAC,OAAO,KAAK,OAAO,CAAC,CAAC,CAAC;QAAE,GAAG,CAAC,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACtF,GAAG,CAAC,IAAI,KAAR,GAAG,CAAC,IAAI,GAAK,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,EAAC;IAEtD,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACnC,GAAG,CAAC,MAAM,GAAG,MAAM,CAAC;QACpB,GAAG,CAAC,OAAO,KAAX,GAAG,CAAC,OAAO,GAAK,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAC;IAClD,CAAC;IAED,OAAO,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,KAAK,KAAK,SAAS,CAAC,CAAoB,CAAC;AAC/G,CAAC"}

package/dist/errors/smess-api-error.d.ts

@@ -0,0 +1,70 @@
+/**
+ * What went wrong, independent of which of core-services' error formats the server used.
+ *
+ * | kind               | when                                                        |
+ * |--------------------|-------------------------------------------------------------|
+ * | `network`          | no response (DNS, offline, CORS, connection reset)          |
+ * | `timeout`          | the client's timeout fired                                  |
+ * | `aborted`          | the caller's AbortSignal fired                              |
+ * | `unauthenticated`  | 401, or `auth: 'required'` while signed out (`no_session`)  |
+ * | `forbidden`        | 403                                                         |
+ * | `not_found`        | 404, 410                                                    |
+ * | `conflict`         | 409                                                         |
+ * | `validation`       | 400, 422 and other 4xx; field messages are in `fields`      |
+ * | `rate_limited`     | 429; `retryAfter` holds the seconds to wait when sent       |
+ * | `upgrade_required` | 426 (mobile app version gate)                               |
+ * | `unavailable`      | 502, 503, 504; core names the missing dependency on 503     |
+ * | `server`           | other 5xx                                                   |
+ * | `invalid_response` | a 2xx whose body is not what the endpoint promises          |
+ * | `config`           | the client is not set up for this call (no host, no tenant) |
+ */
+export type SmessErrorKind = 'network' | 'timeout' | 'aborted' | 'unauthenticated' | 'forbidden' | 'not_found' | 'conflict' | 'validation' | 'rate_limited' | 'upgrade_required' | 'unavailable' | 'server' | 'invalid_response' | 'config';
+export interface SmessRequestInfo {
+    readonly method: string;
+    readonly url: string;
+    readonly service?: string;
+}
+export interface SmessApiErrorInit {
+    kind: SmessErrorKind;
+    /** HTTP status; 0 when no response was received. */
+    status?: number;
+    message?: string;
+    /** Machine code: Stripe-style `error.code` (`missing_client_id`, `email_already_registered`, ...) or a client code. */
+    code?: string;
+    /** Stripe-style `error.type` (`invalid_request_error`, `rate_limit_error`, ...). */
+    type?: string;
+    /** Stripe-style `error.param`. */
+    param?: string;
+    /** The server's own text. Can be an i18n key (`error.validation.not_blank`); the app decides how to show it. */
+    serverMessage?: string;
+    /** First message per field, keys as the server sent them (snake_case property paths). */
+    fields?: Record<string, string>;
+    /** Seconds, from `Retry-After`. */
+    retryAfter?: number;
+    /** The parsed (or raw text) error body. */
+    body?: unknown;
+    request?: SmessRequestInfo;
+    cause?: unknown;
+}
+/** The one error type every call rejects with (programming errors in app middleware excepted). */
+export declare class SmessApiError extends Error {
+    readonly name = "SmessApiError";
+    readonly kind: SmessErrorKind;
+    readonly status: number;
+    readonly code?: string;
+    readonly type?: string;
+    readonly param?: string;
+    readonly serverMessage?: string;
+    readonly fields?: Readonly<Record<string, string>>;
+    readonly retryAfter?: number;
+    readonly body?: unknown;
+    readonly request?: SmessRequestInfo;
+    constructor(init: SmessApiErrorInit);
+    /** `instanceof` that also works when two copies of the package are bundled. */
+    static is(value: unknown): value is SmessApiError;
+}
+export declare const isSmessApiError: (value: unknown) => value is SmessApiError;
+export declare function errorKindForStatus(status: number): SmessErrorKind;
+/** `Retry-After` as seconds (delta-seconds or an HTTP date); undefined when absent or unreadable. */
+export declare function parseRetryAfter(value: string | null, now?: number): number | undefined;
+//# sourceMappingURL=smess-api-error.d.ts.map

package/dist/errors/smess-api-error.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"smess-api-error.d.ts","sourceRoot":"","sources":["../../src/errors/smess-api-error.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,MAAM,cAAc,GACtB,SAAS,GACT,SAAS,GACT,SAAS,GACT,iBAAiB,GACjB,WAAW,GACX,WAAW,GACX,UAAU,GACV,YAAY,GACZ,cAAc,GACd,kBAAkB,GAClB,aAAa,GACb,QAAQ,GACR,kBAAkB,GAClB,QAAQ,CAAC;AAEb,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,cAAc,CAAC;IACrB,oDAAoD;IACpD,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,uHAAuH;IACvH,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,oFAAoF;IACpF,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,kCAAkC;IAClC,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,gHAAgH;IAChH,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,yFAAyF;IACzF,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAChC,mCAAmC;IACnC,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,2CAA2C;IAC3C,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,OAAO,CAAC,EAAE,gBAAgB,CAAC;IAC3B,KAAK,CAAC,EAAE,OAAO,CAAC;CACjB;AAqBD,kGAAkG;AAClG,qBAAa,aAAc,SAAQ,KAAK;IACtC,SAAkB,IAAI,mBAAmB;IACzC,QAAQ,CAAC,IAAI,EAAE,cAAc,CAAC;IAC9B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,MAAM,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IACnD,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,IAAI,CAAC,EAAE,OAAO,CAAC;IACxB,QAAQ,CAAC,OAAO,CAAC,EAAE,gBAAgB,CAAC;gBAExB,IAAI,EAAE,iBAAiB;IAkBnC,+EAA+E;IAC/E,MAAM,CAAC,EAAE,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,aAAa;CAGlD;AAED,eAAO,MAAM,eAAe,GAAI,OAAO,OAAO,KAAG,KAAK,IAAI,aAAwC,CAAC;AAEnG,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,MAAM,GAAG,cAAc,CAsBjE;AAED,qGAAqG;AACrG,wBAAgB,eAAe,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,EAAE,GAAG,GAAE,MAAmB,GAAG,MAAM,GAAG,SAAS,CAOlG"}

package/dist/errors/smess-api-error.js

@@ -0,0 +1,84 @@
+const BRAND = Symbol.for('@smess/networking:SmessApiError');
+const DEFAULT_MESSAGES = {
+    network: 'The network request failed.',
+    timeout: 'The request timed out.',
+    aborted: 'The request was cancelled.',
+    unauthenticated: 'Sign-in is required.',
+    forbidden: 'Access denied.',
+    not_found: 'Not found.',
+    conflict: 'The request conflicts with the current state.',
+    validation: 'The request was rejected.',
+    rate_limited: 'Too many requests.',
+    upgrade_required: 'This app version is no longer supported.',
+    unavailable: 'The service is temporarily unavailable.',
+    server: 'The server failed to process the request.',
+    invalid_response: 'The server returned an unexpected response.',
+    config: 'The client is not configured for this request.',
+};
+/** The one error type every call rejects with (programming errors in app middleware excepted). */
+export class SmessApiError extends Error {
+    constructor(init) {
+        super(init.message ?? init.serverMessage ?? DEFAULT_MESSAGES[init.kind], init.cause === undefined ? undefined : { cause: init.cause });
+        this.name = 'SmessApiError';
+        this.kind = init.kind;
+        this.status = init.status ?? 0;
+        if (init.code !== undefined)
+            this.code = init.code;
+        if (init.type !== undefined)
+            this.type = init.type;
+        if (init.param !== undefined)
+            this.param = init.param;
+        if (init.serverMessage !== undefined)
+            this.serverMessage = init.serverMessage;
+        if (init.fields !== undefined)
+            this.fields = Object.freeze({ ...init.fields });
+        if (init.retryAfter !== undefined)
+            this.retryAfter = init.retryAfter;
+        if (init.body !== undefined)
+            this.body = init.body;
+        if (init.request !== undefined)
+            this.request = init.request;
+        Object.defineProperty(this, BRAND, { value: true });
+    }
+    /** `instanceof` that also works when two copies of the package are bundled. */
+    static is(value) {
+        return typeof value === 'object' && value !== null && value[BRAND] === true;
+    }
+}
+export const isSmessApiError = (value) => SmessApiError.is(value);
+export function errorKindForStatus(status) {
+    switch (status) {
+        case 401:
+            return 'unauthenticated';
+        case 403:
+            return 'forbidden';
+        case 404:
+        case 410:
+            return 'not_found';
+        case 409:
+            return 'conflict';
+        case 426:
+            return 'upgrade_required';
+        case 429:
+            return 'rate_limited';
+        case 502:
+        case 503:
+        case 504:
+            return 'unavailable';
+        default:
+            return status >= 500 ? 'server' : 'validation';
+    }
+}
+/** `Retry-After` as seconds (delta-seconds or an HTTP date); undefined when absent or unreadable. */
+export function parseRetryAfter(value, now = Date.now()) {
+    if (!value)
+        return undefined;
+    const trimmed = value.trim();
+    if (/^\d+$/.test(trimmed))
+        return Number(trimmed);
+    const date = Date.parse(trimmed);
+    if (Number.isNaN(date))
+        return undefined;
+    return Math.max(0, Math.ceil((date - now) / 1000));
+}
+//# sourceMappingURL=smess-api-error.js.map

package/dist/errors/smess-api-error.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"smess-api-error.js","sourceRoot":"","sources":["../../src/errors/smess-api-error.ts"],"names":[],"mappings":"AAiEA,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,iCAAiC,CAAC,CAAC;AAE5D,MAAM,gBAAgB,GAAmC;IACvD,OAAO,EAAE,6BAA6B;IACtC,OAAO,EAAE,wBAAwB;IACjC,OAAO,EAAE,4BAA4B;IACrC,eAAe,EAAE,sBAAsB;IACvC,SAAS,EAAE,gBAAgB;IAC3B,SAAS,EAAE,YAAY;IACvB,QAAQ,EAAE,+CAA+C;IACzD,UAAU,EAAE,2BAA2B;IACvC,YAAY,EAAE,oBAAoB;IAClC,gBAAgB,EAAE,0CAA0C;IAC5D,WAAW,EAAE,yCAAyC;IACtD,MAAM,EAAE,2CAA2C;IACnD,gBAAgB,EAAE,6CAA6C;IAC/D,MAAM,EAAE,gDAAgD;CACzD,CAAC;AAEF,kGAAkG;AAClG,MAAM,OAAO,aAAc,SAAQ,KAAK;IAatC,YAAY,IAAuB;QACjC,KAAK,CACH,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,aAAa,IAAI,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,EACjE,IAAI,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAC7D,CAAC;QAhBc,SAAI,GAAG,eAAe,CAAC;QAiBvC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC;QACtB,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,CAAC,CAAC;QAC/B,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS;YAAE,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC;QACnD,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS;YAAE,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC;QACnD,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS;YAAE,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC;QACtD,IAAI,IAAI,CAAC,aAAa,KAAK,SAAS;YAAE,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC,aAAa,CAAC;QAC9E,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS;YAAE,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;QAC/E,IAAI,IAAI,CAAC,UAAU,KAAK,SAAS;YAAE,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,UAAU,CAAC;QACrE,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS;YAAE,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC;QACnD,IAAI,IAAI,CAAC,OAAO,KAAK,SAAS;YAAE,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC;QAC5D,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACtD,CAAC;IAED,+EAA+E;IAC/E,MAAM,CAAC,EAAE,CAAC,KAAc;QACtB,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAK,KAAiC,CAAC,KAAK,CAAC,KAAK,IAAI,CAAC;IAC3G,CAAC;CACF;AAED,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,KAAc,EAA0B,EAAE,CAAC,aAAa,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC;AAEnG,MAAM,UAAU,kBAAkB,CAAC,MAAc;IAC/C,QAAQ,MAAM,EAAE,CAAC;QACf,KAAK,GAAG;YACN,OAAO,iBAAiB,CAAC;QAC3B,KAAK,GAAG;YACN,OAAO,WAAW,CAAC;QACrB,KAAK,GAAG,CAAC;QACT,KAAK,GAAG;YACN,OAAO,WAAW,CAAC;QACrB,KAAK,GAAG;YACN,OAAO,UAAU,CAAC;QACpB,KAAK,GAAG;YACN,OAAO,kBAAkB,CAAC;QAC5B,KAAK,GAAG;YACN,OAAO,cAAc,CAAC;QACxB,KAAK,GAAG,CAAC;QACT,KAAK,GAAG,CAAC;QACT,KAAK,GAAG;YACN,OAAO,aAAa,CAAC;QACvB;YACE,OAAO,MAAM,IAAI,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,YAAY,CAAC;IACnD,CAAC;AACH,CAAC;AAED,qGAAqG;AACrG,MAAM,UAAU,eAAe,CAAC,KAAoB,EAAE,MAAc,IAAI,CAAC,GAAG,EAAE;IAC5E,IAAI,CAAC,KAAK;QAAE,OAAO,SAAS,CAAC;IAC7B,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IAC7B,IAAI,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC;QAAE,OAAO,MAAM,CAAC,OAAO,CAAC,CAAC;IAClD,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IACjC,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC;QAAE,OAAO,SAAS,CAAC;IACzC,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,GAAG,GAAG,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC;AACrD,CAAC"}

package/dist/index.d.ts

@@ -1,25 +1,27 @@
-export * from "./services/user.service";
-export * from "./services/product.service";
-export * from "./services/auth.service";
-export * from "./services/store.service";
-export * from "./services/store.cart.service";
-export * from "./services/store.product.service";
-export * from "./services/customer.service";
-export * from "./services/employee.service";
-export * from "./services/order.service";
-export * from "./services/cache.service";
-export * from "./services/smess.service";
-export * from "./services/utils/withAuthReset";
-export * from "./services/storefront.product.service";
-export * from "./services/storefront.store.service";
-export * from "./services/storefront.cart.service";
-export * from "./services/storefront.checkout.service";
-export * from "./services/storefront.order.service";
-export * from "./services/storefront.customer.metadata.service";
-export * from "./core/base.provider";
-export * from "./core/base.service.wrapper";
-export * from "./core/axios.observable";
-export * from "./types/types";
-export { $logger } from "./services/logger.service";
-export declare const baseURL: () => string;
-export declare const apiVersion: () => string;
+export { createSmessClient, DEFAULT_TIMEOUT_MS, DEFAULT_REFRESH_SKEW_MS } from './core/client.js';
+export type { SmessClient, SmessClientConfig, RawRequest, SessionHandle } from './core/client.js';
+export { defineEndpoint } from './core/endpoint.js';
+export type { Endpoint, AnyEndpoint, CallOptions, CallInput, CallArgs, EndpointResult, None } from './core/endpoint.js';
+export { PRODUCTION_HOSTS } from './core/hosts.js';
+export type { HostMap, ServiceKey } from './core/hosts.js';
+export type { Middleware, RequestContext, EndpointInfo } from './core/pipeline.js';
+export { createFetchTransport } from './core/transport.js';
+export type { Transport, TransportRequest, HttpResponse } from './core/transport.js';
+export type { RetryOptions } from './core/retry.js';
+export type { AuthMode, HttpMethod, ResponseType, QueryParams, QueryPrimitive, FetchOptions, FetchFunction, MaybePromise, } from './core/types.js';
+export { buildPath, serializeQuery, joinUrl } from './core/url.js';
+export type { PathParams } from './core/url.js';
+export { paginate } from './core/pagination.js';
+export type { ApiList, PagedList } from './core/pagination.js';
+export { unwrapData, ignoreBody, emptyObjectAsNull } from './core/decoders.js';
+export { SmessApiError, isSmessApiError, errorKindForStatus, parseRetryAfter } from './errors/smess-api-error.js';
+export type { SmessErrorKind, SmessApiErrorInit, SmessRequestInfo } from './errors/smess-api-error.js';
+export { parseErrorBody } from './errors/parse-error-body.js';
+export type { ParsedErrorBody } from './errors/parse-error-body.js';
+export { memorySession, staticSession, webStorageSession } from './session/stores.js';
+export type { WebStorageSessionOptions } from './session/stores.js';
+export { decodeJwt, tokenExpiresAt } from './session/jwt.js';
+export type { SmessJwtClaims } from './session/jwt.js';
+export type { RefreshStrategy } from './session/auth-middleware.js';
+export type { Session, SessionStore, SessionExpiredEvent, SessionExpiredReason } from './session/types.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,uBAAuB,EAAE,MAAM,kBAAkB,CAAC;AAClG,YAAY,EAAE,WAAW,EAAE,iBAAiB,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAClG,OAAO,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AACpD,YAAY,EAAE,QAAQ,EAAE,WAAW,EAAE,WAAW,EAAE,SAAS,EAAE,QAAQ,EAAE,cAAc,EAAE,IAAI,EAAE,MAAM,oBAAoB,CAAC;AACxH,OAAO,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AACnD,YAAY,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAC3D,YAAY,EAAE,UAAU,EAAE,cAAc,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AACnF,OAAO,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AAC3D,YAAY,EAAE,SAAS,EAAE,gBAAgB,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACrF,YAAY,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AACpD,YAAY,EACV,QAAQ,EACR,UAAU,EACV,YAAY,EACZ,WAAW,EACX,cAAc,EACd,YAAY,EACZ,aAAa,EACb,YAAY,GACb,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAAE,SAAS,EAAE,cAAc,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AACnE,YAAY,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAChD,OAAO,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AAChD,YAAY,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AAC/D,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AAG/E,OAAO,EAAE,aAAa,EAAE,eAAe,EAAE,kBAAkB,EAAE,eAAe,EAAE,MAAM,6BAA6B,CAAC;AAClH,YAAY,EAAE,cAAc,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,MAAM,6BAA6B,CAAC;AACvG,OAAO,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAC;AAC9D,YAAY,EAAE,eAAe,EAAE,MAAM,8BAA8B,CAAC;AAGpE,OAAO,EAAE,aAAa,EAAE,aAAa,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AACtF,YAAY,EAAE,wBAAwB,EAAE,MAAM,qBAAqB,CAAC;AACpE,OAAO,EAAE,SAAS,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAC7D,YAAY,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AACvD,YAAY,EAAE,eAAe,EAAE,MAAM,8BAA8B,CAAC;AACpE,YAAY,EAAE,OAAO,EAAE,YAAY,EAAE,mBAAmB,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAC"}

package/dist/index.js

@@ -1,29 +1,15 @@
-export * from "./services/user.service";
-export * from "./services/product.service";
-export * from "./services/auth.service";
-export * from "./services/store.service";
-export * from "./services/store.cart.service";
-export * from "./services/store.product.service";
-export * from "./services/customer.service";
-export * from "./services/employee.service";
-export * from "./services/order.service";
-export * from "./services/cache.service";
-export * from "./services/smess.service";
-export * from "./services/utils/withAuthReset";
-export * from "./services/storefront.product.service";
-export * from "./services/storefront.store.service";
-export * from "./services/storefront.cart.service";
-export * from "./services/storefront.checkout.service";
-export * from "./services/storefront.order.service";
-export * from "./services/storefront.customer.metadata.service";
-export * from "./core/base.provider";
-export * from "./core/base.service.wrapper";
-export * from "./core/axios.observable";
-export * from "./types/types";
-export { $logger } from "./services/logger.service";
-export const baseURL = () => {
-    return "";
-};
-export const apiVersion = () => {
-    return "api/v1";
-};
+// Core: client, endpoints, transport, middleware.
+export { createSmessClient, DEFAULT_TIMEOUT_MS, DEFAULT_REFRESH_SKEW_MS } from './core/client.js';
+export { defineEndpoint } from './core/endpoint.js';
+export { PRODUCTION_HOSTS } from './core/hosts.js';
+export { createFetchTransport } from './core/transport.js';
+export { buildPath, serializeQuery, joinUrl } from './core/url.js';
+export { paginate } from './core/pagination.js';
+export { unwrapData, ignoreBody, emptyObjectAsNull } from './core/decoders.js';
+// Errors.
+export { SmessApiError, isSmessApiError, errorKindForStatus, parseRetryAfter } from './errors/smess-api-error.js';
+export { parseErrorBody } from './errors/parse-error-body.js';
+// Session.
+export { memorySession, staticSession, webStorageSession } from './session/stores.js';
+export { decodeJwt, tokenExpiresAt } from './session/jwt.js';
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,kDAAkD;AAClD,OAAO,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,uBAAuB,EAAE,MAAM,kBAAkB,CAAC;AAElG,OAAO,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AAEpD,OAAO,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AAGnD,OAAO,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AAa3D,OAAO,EAAE,SAAS,EAAE,cAAc,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AAEnE,OAAO,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AAEhD,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AAE/E,UAAU;AACV,OAAO,EAAE,aAAa,EAAE,eAAe,EAAE,kBAAkB,EAAE,eAAe,EAAE,MAAM,6BAA6B,CAAC;AAElH,OAAO,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAC;AAG9D,WAAW;AACX,OAAO,EAAE,aAAa,EAAE,aAAa,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AAEtF,OAAO,EAAE,SAAS,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC"}

package/dist/modules/authentication/index.d.ts

@@ -0,0 +1,89 @@
+/**
+ * Authentication module (`src/Microservice/Authentication`, host `app.authentication_host` → auth.smess.vn).
+ *
+ * Token lifecycle on the wire:
+ * - `login_check` and `token/refresh` return `{token, refresh_token}`. Refresh tokens do not rotate and
+ *   their TTL slides on each use; the access JWT lives 3600 s.
+ * - OTP verify and password reset return `{data: {token, refreshToken}}` (camelCase), and `{data: null}`
+ *   with HTTP 200 when the code or reset token is wrong.
+ * - Every anonymous call here uses `auth: 'none'`: a stale Bearer would 401 them (Lexik `supports()`).
+ */
+import type { SmessClient } from '../../core/client.js';
+import type { RefreshStrategy } from '../../session/auth-middleware.js';
+import type { Session } from '../../session/types.js';
+/** `login_check` / `token/refresh` success body (Lexik + gesdinet). */
+export interface TokenPair {
+    token: string;
+    refresh_token: string;
+}
+/** `AuthenticationSucceedDTO`, plain `json_encode` (camelCase). */
+export interface AuthenticationSucceeded {
+    token: string;
+    refreshToken: string;
+}
+export interface LoginInput {
+    /** Email or phone; `email`, `phone_number` and `phone` are also accepted by the server. */
+    identifier: string;
+    password: string;
+}
+export interface IdentifierInput {
+    identifier: string;
+}
+export interface OtpVerifyInput {
+    identifier: string;
+    /** Exactly 6 characters. */
+    code: string;
+}
+export interface ResetPasswordInput {
+    token: string;
+    new_password: string;
+}
+export interface ChangePasswordInput {
+    old_password: string;
+    password: string;
+    /** Also revokes every refresh token of the user. */
+    disconnect_from_all_devices?: boolean;
+}
+export declare const authenticationEndpoints: {
+    readonly login: import("../../core/endpoint.js").Endpoint<"/v1/authentication/login_check", LoginInput, never, TokenPair>;
+    readonly refresh: import("../../core/endpoint.js").Endpoint<"/v1/authentication/token/refresh", {
+        refresh_token: string;
+    }, never, TokenPair>;
+    readonly otpRequest: import("../../core/endpoint.js").Endpoint<"/v1/authentication/otp/request", IdentifierInput, never, undefined>;
+    readonly otpVerify: import("../../core/endpoint.js").Endpoint<"/v1/authentication/otp/verify", OtpVerifyInput, never, {
+        data: AuthenticationSucceeded | null;
+    }>;
+    readonly forgotPassword: import("../../core/endpoint.js").Endpoint<"/v1/authentication/forgot-password", IdentifierInput, never, undefined>;
+    readonly resetPassword: import("../../core/endpoint.js").Endpoint<"/v1/authentication/verify-reset-password-token", ResetPasswordInput, never, {
+        data: AuthenticationSucceeded | null;
+    }>;
+    readonly changePassword: import("../../core/endpoint.js").Endpoint<"/v1/authentication/change-password", ChangePasswordInput, never, undefined>;
+    readonly logout: import("../../core/endpoint.js").Endpoint<"/v1/authentication/logout", never, never, undefined>;
+};
+/** Renews sessions through `POST /v1/authentication/token/refresh`. Pass as `refresh` to `createSmessClient`. */
+export declare function authenticationRefresh(): RefreshStrategy;
+/** Sign-in flows. Successful logins are saved to the client's session store (when it has a writable one). */
+export declare function authentication(client: SmessClient): {
+    /** Password login. */
+    login: (input: LoginInput) => Promise<Session>;
+    /** Renews the session now (normally automatic). Uses the stored refresh token unless one is given. */
+    refresh: (refreshToken?: string) => Promise<Session>;
+    otp: {
+        /** Emails or texts a 6-digit code. Always succeeds (it never reveals whether the account exists). */
+        request: (input: IdentifierInput) => Promise<undefined>;
+        /** Exchanges the code for a session. A wrong or expired code fails with `validation` / `invalid_code`. */
+        verify: (input: OtpVerifyInput) => Promise<Session>;
+    };
+    /** Sends a reset link. Always succeeds. */
+    forgotPassword: (input: IdentifierInput) => Promise<undefined>;
+    /** Sets a new password from a reset-link token and signs in. A bad token fails with `invalid_reset_token`. */
+    resetPassword: (input: ResetPasswordInput) => Promise<Session>;
+    changePassword: (input: ChangePasswordInput) => Promise<undefined>;
+    /**
+     * Server logout, then clears the local session. The server revokes every refresh token of the user
+     * (all devices). To sign out of this device only, call `client.session.clear()`.
+     */
+    logout: () => Promise<void>;
+};
+export type AuthenticationModule = ReturnType<typeof authentication>;
+//# sourceMappingURL=index.d.ts.map

package/dist/modules/authentication/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/modules/authentication/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AACH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AAIxD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,kCAAkC,CAAC;AACxE,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,wBAAwB,CAAC;AAItD,uEAAuE;AACvE,MAAM,WAAW,SAAS;IACxB,KAAK,EAAE,MAAM,CAAC;IACd,aAAa,EAAE,MAAM,CAAC;CACvB;AAED,mEAAmE;AACnE,MAAM,WAAW,uBAAuB;IACtC,KAAK,EAAE,MAAM,CAAC;IACd,YAAY,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,UAAU;IACzB,2FAA2F;IAC3F,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,eAAe;IAC9B,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,cAAc;IAC7B,UAAU,EAAE,MAAM,CAAC;IACnB,4BAA4B;IAC5B,IAAI,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,kBAAkB;IACjC,KAAK,EAAE,MAAM,CAAC;IACd,YAAY,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,mBAAmB;IAClC,YAAY,EAAE,MAAM,CAAC;IACrB,QAAQ,EAAE,MAAM,CAAC;IACjB,oDAAoD;IACpD,2BAA2B,CAAC,EAAE,OAAO,CAAC;CACvC;AAMD,eAAO,MAAM,uBAAuB;;;uBAOkB,MAAM;;;;cAaxB,uBAAuB,GAAG,IAAI;;;;cAa1B,uBAAuB,GAAG,IAAI;;;;CAoB5D,CAAC;AAoBX,iHAAiH;AACjH,wBAAgB,qBAAqB,IAAI,eAAe,CAQvD;AAID,6GAA6G;AAC7G,wBAAgB,cAAc,CAAC,MAAM,EAAE,WAAW;IAQ9C,sBAAsB;mBACD,UAAU;IAE/B,sGAAsG;6BACvE,MAAM;;QAOnC,qGAAqG;yBACpF,eAAe;QAChC,0GAA0G;wBACpF,cAAc;;IAItC,2CAA2C;4BACnB,eAAe;IAEvC,8GAA8G;2BACjF,kBAAkB;4BAGvB,mBAAmB;IAE3C;;;OAGG;;EASN;AAED,MAAM,MAAM,oBAAoB,GAAG,UAAU,CAAC,OAAO,cAAc,CAAC,CAAC"}