@spare-technologies/spare-api 1.0.0-beta.7

package/dist/Client.js

@@ -0,0 +1,77 @@
+// This file was auto-generated by Fern from our API Definition.
+import { AuthClient } from "./api/resources/auth/client/Client.js";
+import { BankAccountsClient } from "./api/resources/bankAccounts/client/Client.js";
+import { LinkClient } from "./api/resources/link/client/Client.js";
+import { MandatesClient } from "./api/resources/mandates/client/Client.js";
+import { PaymentConsentsClient } from "./api/resources/paymentConsents/client/Client.js";
+import { PaymentPurposeCodesClient } from "./api/resources/paymentPurposeCodes/client/Client.js";
+import { PaymentRequestsClient } from "./api/resources/paymentRequests/client/Client.js";
+import { PaymentsClient } from "./api/resources/payments/client/Client.js";
+import { ProvidersClient } from "./api/resources/providers/client/Client.js";
+import { SavedDebtorAccountsClient } from "./api/resources/savedDebtorAccounts/client/Client.js";
+import { VerificationsClient } from "./api/resources/verifications/client/Client.js";
+import { normalizeClientOptionsWithAuth } from "./BaseClient.js";
+import * as core from "./core/index.js";
+import { CryptoHelper } from "./crypto.js";
+export class SpareApiClient {
+    constructor(options = {}) {
+        this._options = normalizeClientOptionsWithAuth(options);
+    }
+    get auth() {
+        return (this._auth ?? (this._auth = new AuthClient(this._options)));
+    }
+    get paymentConsents() {
+        return (this._paymentConsents ?? (this._paymentConsents = new PaymentConsentsClient(this._options)));
+    }
+    get link() {
+        return (this._link ?? (this._link = new LinkClient(this._options)));
+    }
+    get mandates() {
+        return (this._mandates ?? (this._mandates = new MandatesClient(this._options)));
+    }
+    get paymentPurposeCodes() {
+        return (this._paymentPurposeCodes ?? (this._paymentPurposeCodes = new PaymentPurposeCodesClient(this._options)));
+    }
+    get paymentRequests() {
+        return (this._paymentRequests ?? (this._paymentRequests = new PaymentRequestsClient(this._options)));
+    }
+    get bankAccounts() {
+        return (this._bankAccounts ?? (this._bankAccounts = new BankAccountsClient(this._options)));
+    }
+    get savedDebtorAccounts() {
+        return (this._savedDebtorAccounts ?? (this._savedDebtorAccounts = new SavedDebtorAccountsClient(this._options)));
+    }
+    get payments() {
+        return (this._payments ?? (this._payments = new PaymentsClient(this._options)));
+    }
+    get providers() {
+        return (this._providers ?? (this._providers = new ProvidersClient(this._options)));
+    }
+    get verifications() {
+        return (this._verifications ?? (this._verifications = new VerificationsClient(this._options)));
+    }
+    get crypto() {
+        return (this._crypto ?? (this._crypto = new CryptoHelper()));
+    }
+    /**
+     * Make a passthrough request using the SDK's configured auth, retry, logging, etc.
+     * This is useful for making requests to endpoints not yet supported in the SDK.
+     * The input can be a URL string, URL object, or Request object. Relative paths are resolved against the configured base URL.
+     *
+     * @param {Request | string | URL} input - The URL, path, or Request object.
+     * @param {RequestInit} init - Standard fetch RequestInit options.
+     * @param {core.PassthroughRequest.RequestOptions} requestOptions - Per-request overrides (timeout, retries, headers, abort signal).
+     * @returns {Promise<Response>} A standard Response object.
+     */
+    async fetch(input, init, requestOptions) {
+        return core.makePassthroughRequest(input, init, {
+            baseUrl: this._options.baseUrl ?? this._options.environment,
+            headers: this._options.headers,
+            timeoutInSeconds: this._options.timeoutInSeconds,
+            maxRetries: this._options.maxRetries,
+            fetch: this._options.fetch,
+            logging: this._options.logging,
+        }, requestOptions);
+    }
+}
+//# sourceMappingURL=Client.js.map

package/dist/Client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"Client.js","sourceRoot":"","sources":["../Client.ts"],"names":[],"mappings":"AAAA,gEAAgE;AAEhE,OAAO,EAAE,UAAU,EAAE,MAAM,uCAAuC,CAAC;AACnE,OAAO,EAAE,kBAAkB,EAAE,MAAM,+CAA+C,CAAC;AACnF,OAAO,EAAE,UAAU,EAAE,MAAM,uCAAuC,CAAC;AACnE,OAAO,EAAE,cAAc,EAAE,MAAM,2CAA2C,CAAC;AAC3E,OAAO,EAAE,qBAAqB,EAAE,MAAM,kDAAkD,CAAC;AACzF,OAAO,EAAE,yBAAyB,EAAE,MAAM,sDAAsD,CAAC;AACjG,OAAO,EAAE,qBAAqB,EAAE,MAAM,kDAAkD,CAAC;AACzF,OAAO,EAAE,cAAc,EAAE,MAAM,2CAA2C,CAAC;AAC3E,OAAO,EAAE,eAAe,EAAE,MAAM,4CAA4C,CAAC;AAC7E,OAAO,EAAE,yBAAyB,EAAE,MAAM,sDAAsD,CAAC;AACjG,OAAO,EAAE,mBAAmB,EAAE,MAAM,gDAAgD,CAAC;AAErF,OAAO,EAAwD,8BAA8B,EAAE,MAAM,iBAAiB,CAAC;AACvH,OAAO,KAAK,IAAI,MAAM,iBAAiB,CAAC;AAExC,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAQ3C,MAAM,OAAO,cAAc;IAevB,YAAY,UAAkC,EAAE;QAC5C,IAAI,CAAC,QAAQ,GAAG,8BAA8B,CAAC,OAAO,CAAC,CAAC;IAC5D,CAAC;IAED,IAAW,IAAI;QACX,OAAO,CAAC,IAAI,CAAC,KAAK,KAAV,IAAI,CAAC,KAAK,GAAK,IAAI,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAC,CAAC;IAC1D,CAAC;IAED,IAAW,eAAe;QACtB,OAAO,CAAC,IAAI,CAAC,gBAAgB,KAArB,IAAI,CAAC,gBAAgB,GAAK,IAAI,qBAAqB,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAC,CAAC;IAChF,CAAC;IAED,IAAW,IAAI;QACX,OAAO,CAAC,IAAI,CAAC,KAAK,KAAV,IAAI,CAAC,KAAK,GAAK,IAAI,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAC,CAAC;IAC1D,CAAC;IAED,IAAW,QAAQ;QACf,OAAO,CAAC,IAAI,CAAC,SAAS,KAAd,IAAI,CAAC,SAAS,GAAK,IAAI,cAAc,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAC,CAAC;IAClE,CAAC;IAED,IAAW,mBAAmB;QAC1B,OAAO,CAAC,IAAI,CAAC,oBAAoB,KAAzB,IAAI,CAAC,oBAAoB,GAAK,IAAI,yBAAyB,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAC,CAAC;IACxF,CAAC;IAED,IAAW,eAAe;QACtB,OAAO,CAAC,IAAI,CAAC,gBAAgB,KAArB,IAAI,CAAC,gBAAgB,GAAK,IAAI,qBAAqB,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAC,CAAC;IAChF,CAAC;IAED,IAAW,YAAY;QACnB,OAAO,CAAC,IAAI,CAAC,aAAa,KAAlB,IAAI,CAAC,aAAa,GAAK,IAAI,kBAAkB,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAC,CAAC;IAC1E,CAAC;IAED,IAAW,mBAAmB;QAC1B,OAAO,CAAC,IAAI,CAAC,oBAAoB,KAAzB,IAAI,CAAC,oBAAoB,GAAK,IAAI,yBAAyB,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAC,CAAC;IACxF,CAAC;IAED,IAAW,QAAQ;QACf,OAAO,CAAC,IAAI,CAAC,SAAS,KAAd,IAAI,CAAC,SAAS,GAAK,IAAI,cAAc,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAC,CAAC;IAClE,CAAC;IAED,IAAW,SAAS;QAChB,OAAO,CAAC,IAAI,CAAC,UAAU,KAAf,IAAI,CAAC,UAAU,GAAK,IAAI,eAAe,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAC,CAAC;IACpE,CAAC;IAED,IAAW,aAAa;QACpB,OAAO,CAAC,IAAI,CAAC,cAAc,KAAnB,IAAI,CAAC,cAAc,GAAK,IAAI,mBAAmB,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAC,CAAC;IAC5E,CAAC;IAGD,IAAW,MAAM;QACb,OAAO,CAAC,IAAI,CAAC,OAAO,KAAZ,IAAI,CAAC,OAAO,GAAK,IAAI,YAAY,EAAE,EAAC,CAAC;IACjD,CAAC;IAED;;;;;;;;;OASG;IACI,KAAK,CAAC,KAAK,CACd,KAA6B,EAC7B,IAAkB,EAClB,cAAuD;QAEvD,OAAO,IAAI,CAAC,sBAAsB,CAC9B,KAAK,EACL,IAAI,EACJ;YACI,OAAO,EAAE,IAAI,CAAC,QAAQ,CAAC,OAAO,IAAI,IAAI,CAAC,QAAQ,CAAC,WAAW;YAC3D,OAAO,EAAE,IAAI,CAAC,QAAQ,CAAC,OAAO;YAC9B,gBAAgB,EAAE,IAAI,CAAC,QAAQ,CAAC,gBAAgB;YAChD,UAAU,EAAE,IAAI,CAAC,QAAQ,CAAC,UAAU;YACpC,KAAK,EAAE,IAAI,CAAC,QAAQ,CAAC,KAAK;YAC1B,OAAO,EAAE,IAAI,CAAC,QAAQ,CAAC,OAAO;SACjC,EACD,cAAc,CACjB,CAAC;IACN,CAAC;CACJ","sourcesContent":["// This file was auto-generated by Fern from our API Definition.\n\nimport { AuthClient } from \"./api/resources/auth/client/Client.js\";\nimport { BankAccountsClient } from \"./api/resources/bankAccounts/client/Client.js\";\nimport { LinkClient } from \"./api/resources/link/client/Client.js\";\nimport { MandatesClient } from \"./api/resources/mandates/client/Client.js\";\nimport { PaymentConsentsClient } from \"./api/resources/paymentConsents/client/Client.js\";\nimport { PaymentPurposeCodesClient } from \"./api/resources/paymentPurposeCodes/client/Client.js\";\nimport { PaymentRequestsClient } from \"./api/resources/paymentRequests/client/Client.js\";\nimport { PaymentsClient } from \"./api/resources/payments/client/Client.js\";\nimport { ProvidersClient } from \"./api/resources/providers/client/Client.js\";\nimport { SavedDebtorAccountsClient } from \"./api/resources/savedDebtorAccounts/client/Client.js\";\nimport { VerificationsClient } from \"./api/resources/verifications/client/Client.js\";\nimport type { BaseClientOptions, BaseRequestOptions } from \"./BaseClient.js\";\nimport { type NormalizedClientOptions, normalizeClientOptions, normalizeClientOptionsWithAuth } from \"./BaseClient.js\";\nimport * as core from \"./core/index.js\";\n\nimport { CryptoHelper } from \"./crypto.js\";\n\nexport declare namespace SpareApiClient {\n    export type Options = BaseClientOptions;\n\n    export interface RequestOptions extends BaseRequestOptions {}\n}\n\nexport class SpareApiClient {\n    protected readonly _options: NormalizedClientOptions<SpareApiClient.Options>;\n    protected _auth: AuthClient | undefined;\n    protected _paymentConsents: PaymentConsentsClient | undefined;\n    protected _link: LinkClient | undefined;\n    protected _mandates: MandatesClient | undefined;\n    protected _paymentPurposeCodes: PaymentPurposeCodesClient | undefined;\n    protected _paymentRequests: PaymentRequestsClient | undefined;\n    protected _bankAccounts: BankAccountsClient | undefined;\n    protected _savedDebtorAccounts: SavedDebtorAccountsClient | undefined;\n    protected _payments: PaymentsClient | undefined;\n    protected _providers: ProvidersClient | undefined;\n    protected _crypto: CryptoHelper | undefined;\n    protected _verifications: VerificationsClient | undefined;\n\n    constructor(options: SpareApiClient.Options = {}) {\n        this._options = normalizeClientOptionsWithAuth(options);\n    }\n\n    public get auth(): AuthClient {\n        return (this._auth ??= new AuthClient(this._options));\n    }\n\n    public get paymentConsents(): PaymentConsentsClient {\n        return (this._paymentConsents ??= new PaymentConsentsClient(this._options));\n    }\n\n    public get link(): LinkClient {\n        return (this._link ??= new LinkClient(this._options));\n    }\n\n    public get mandates(): MandatesClient {\n        return (this._mandates ??= new MandatesClient(this._options));\n    }\n\n    public get paymentPurposeCodes(): PaymentPurposeCodesClient {\n        return (this._paymentPurposeCodes ??= new PaymentPurposeCodesClient(this._options));\n    }\n\n    public get paymentRequests(): PaymentRequestsClient {\n        return (this._paymentRequests ??= new PaymentRequestsClient(this._options));\n    }\n\n    public get bankAccounts(): BankAccountsClient {\n        return (this._bankAccounts ??= new BankAccountsClient(this._options));\n    }\n\n    public get savedDebtorAccounts(): SavedDebtorAccountsClient {\n        return (this._savedDebtorAccounts ??= new SavedDebtorAccountsClient(this._options));\n    }\n\n    public get payments(): PaymentsClient {\n        return (this._payments ??= new PaymentsClient(this._options));\n    }\n\n    public get providers(): ProvidersClient {\n        return (this._providers ??= new ProvidersClient(this._options));\n    }\n\n    public get verifications(): VerificationsClient {\n        return (this._verifications ??= new VerificationsClient(this._options));\n    }\n\n\n    public get crypto(): CryptoHelper {\n        return (this._crypto ??= new CryptoHelper());\n    }\n\n    /**\n     * Make a passthrough request using the SDK's configured auth, retry, logging, etc.\n     * This is useful for making requests to endpoints not yet supported in the SDK.\n     * The input can be a URL string, URL object, or Request object. Relative paths are resolved against the configured base URL.\n     *\n     * @param {Request | string | URL} input - The URL, path, or Request object.\n     * @param {RequestInit} init - Standard fetch RequestInit options.\n     * @param {core.PassthroughRequest.RequestOptions} requestOptions - Per-request overrides (timeout, retries, headers, abort signal).\n     * @returns {Promise<Response>} A standard Response object.\n     */\n    public async fetch(\n        input: Request | string | URL,\n        init?: RequestInit,\n        requestOptions?: core.PassthroughRequest.RequestOptions,\n    ): Promise<Response> {\n        return core.makePassthroughRequest(\n            input,\n            init,\n            {\n                baseUrl: this._options.baseUrl ?? this._options.environment,\n                headers: this._options.headers,\n                timeoutInSeconds: this._options.timeoutInSeconds,\n                maxRetries: this._options.maxRetries,\n                fetch: this._options.fetch,\n                logging: this._options.logging,\n            },\n            requestOptions,\n        );\n    }\n}\n"]}

package/dist/api/index.d.ts

@@ -0,0 +1,3 @@
+export * from "./resources/index.js";
+export * from "./types/index.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/api/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../api/index.ts"],"names":[],"mappings":"AAAA,cAAc,sBAAsB,CAAC;AACrC,cAAc,kBAAkB,CAAC"}

package/dist/api/index.js

@@ -0,0 +1,3 @@
+export * from "./resources/index.js";
+export * from "./types/index.js";
+//# sourceMappingURL=index.js.map

package/dist/api/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../api/index.ts"],"names":[],"mappings":"AAAA,cAAc,sBAAsB,CAAC;AACrC,cAAc,kBAAkB,CAAC","sourcesContent":["export * from \"./resources/index.js\";\nexport * from \"./types/index.js\";\n"]}

package/dist/api/resources/auth/client/Client.d.ts

@@ -0,0 +1,77 @@
+import type { BaseClientOptions, BaseRequestOptions } from "../../../../BaseClient.js";
+import { type NormalizedClientOptions } from "../../../../BaseClient.js";
+import * as core from "../../../../core/index.js";
+import type * as SpareApi from "../../../index.js";
+export declare namespace AuthClient {
+    type Options = BaseClientOptions;
+    interface RequestOptions extends BaseRequestOptions {
+    }
+}
+export declare class AuthClient {
+    protected readonly _options: NormalizedClientOptions<AuthClient.Options>;
+    constructor(options?: AuthClient.Options);
+    /**
+     * Includes the RSA PS512 key used to sign API-key JWTs (\`kid\` matches \`deriveApiTokenJwtKidFromX509CertificatePem\` — SHA-256 hex of UTF-8 JWK \`n\`+\`e\`, same as token headers) and the ECC ES256 key for data payloads (\`kid\` matches \`deriveEccPlatformJwksKidFromX509CertificatePem\` — SHA-256 hex of UTF-8 JWK \`x\`+\`y\`). Relying parties should cache this response for up to 5 minutes (\`Cache-Control: public, max-age=300, stale-while-revalidate=60\`) and re-fetch only when signature verification fails.
+     *
+     * Response is a bare RFC 7517 JWKS: \`{ "keys": \[...] }\`.
+     *
+     * GET /auth/.well-known/jwks.json
+     *
+     * @param {AuthClient.RequestOptions} requestOptions - Request-specific configuration.
+     *
+     * @example
+     *     await client.auth.getPlatformJwks()
+     */
+    private __getAuthHeaders;
+    getPlatformJwks(requestOptions?: AuthClient.RequestOptions): core.HttpResponsePromise<SpareApi.GetPlatformJwksAuthResponse>;
+    private __getPlatformJwks;
+    /**
+     * The tenant header (\`X-Tenant\`) determines which certificate store is queried. Returns 404 if the provider is unknown or has no certificates.
+     *
+     * \`Cache-Control: private, max-age=300\` — private because the response varies by \`X-Tenant\` and must not be served from a shared cache to a different tenant. The \`Vary: X-Tenant\` header is also set for RFC-compliant intermediaries that honour it.
+     *
+     * Response is a bare RFC 7517 JWKS: \`{ "keys": \[...] }\`.
+     *
+     * GET /auth/.well-known/jwks/:provider
+     *
+     * @param {SpareApi.GetProviderJwksAuthRequest} request
+     * @param {AuthClient.RequestOptions} requestOptions - Request-specific configuration.
+     *
+     * @example
+     *     await client.auth.getProviderJwks({
+     *         provider: "provider"
+     *     })
+     */
+    getProviderJwks(request: SpareApi.GetProviderJwksAuthRequest, requestOptions?: AuthClient.RequestOptions): core.HttpResponsePromise<SpareApi.GetProviderJwksAuthResponse>;
+    private __getProviderJwks;
+    /**
+     * Validates the application identifier and API key, enforces IP whitelist policy, verifies application and client status, and issues a signed JWT with role-derived audience scopes.
+     *
+     * POST /auth/api-keys/sessions
+     *
+     * @param {SpareApi.AuthenticateAuthRequest} request
+     * @param {AuthClient.RequestOptions} requestOptions - Request-specific configuration.
+     *
+     * @example
+     *     await client.auth.authenticate({
+     *         "app-id": "app-id",
+     *         "x-api-key": "x-api-key"
+     *     })
+     */
+    authenticate(request: SpareApi.AuthenticateAuthRequest, requestOptions?: AuthClient.RequestOptions): core.HttpResponsePromise<SpareApi.AuthenticateAuthResponse>;
+    private __authenticate;
+    /**
+     * Verifies the refresh JWT, re-checks IP whitelist and application status, then mints a new access JWT and a new refresh JWT (refresh-token rotation on every successful call).
+     *
+     * POST /auth/api-keys/sessions/refresh
+     *
+     * @param {SpareApi.RefreshSessionAuthRequest} request
+     * @param {AuthClient.RequestOptions} requestOptions - Request-specific configuration.
+     *
+     * @example
+     *     await client.auth.refreshSession()
+     */
+    refreshSession(request?: SpareApi.RefreshSessionAuthRequest, requestOptions?: AuthClient.RequestOptions): core.HttpResponsePromise<SpareApi.RefreshSessionAuthResponse>;
+    private __refreshSession;
+}
+//# sourceMappingURL=Client.d.ts.map

package/dist/api/resources/auth/client/Client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"Client.d.ts","sourceRoot":"","sources":["../../../../../api/resources/auth/client/Client.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAC;AACvF,OAAO,EAAE,KAAK,uBAAuB,EAA0D,MAAM,2BAA2B,CAAC;AAEjI,OAAO,KAAK,IAAI,MAAM,2BAA2B,CAAC;AAIlD,OAAO,KAAK,KAAK,QAAQ,MAAM,mBAAmB,CAAC;AAEnD,MAAM,CAAC,OAAO,WAAW,UAAU,CAAC;IAChC,KAAY,OAAO,GAAG,iBAAiB,CAAC;IAExC,UAAiB,cAAe,SAAQ,kBAAkB;KAAG;CAChE;AAED,qBAAa,UAAU;IACnB,SAAS,CAAC,QAAQ,CAAC,QAAQ,EAAE,uBAAuB,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;gBAE7D,OAAO,GAAE,UAAU,CAAC,OAAY;IAI5C;;;;;;;;;;;OAWG;YAEW,gBAAgB;IAUvB,eAAe,CAClB,cAAc,CAAC,EAAE,UAAU,CAAC,cAAc,GAC3C,IAAI,CAAC,mBAAmB,CAAC,QAAQ,CAAC,2BAA2B,CAAC;YAInD,iBAAiB;IAgD/B;;;;;;;;;;;;;;;;OAgBG;IACI,eAAe,CAClB,OAAO,EAAE,QAAQ,CAAC,0BAA0B,EAC5C,cAAc,CAAC,EAAE,UAAU,CAAC,cAAc,GAC3C,IAAI,CAAC,mBAAmB,CAAC,QAAQ,CAAC,2BAA2B,CAAC;YAInD,iBAAiB;IAuD/B;;;;;;;;;;;;;OAaG;IACI,YAAY,CACf,OAAO,EAAE,QAAQ,CAAC,uBAAuB,EACzC,cAAc,CAAC,EAAE,UAAU,CAAC,cAAc,GAC3C,IAAI,CAAC,mBAAmB,CAAC,QAAQ,CAAC,wBAAwB,CAAC;YAIhD,cAAc;IAoD5B;;;;;;;;;;OAUG;IACI,cAAc,CACjB,OAAO,GAAE,QAAQ,CAAC,yBAA8B,EAChD,cAAc,CAAC,EAAE,UAAU,CAAC,cAAc,GAC3C,IAAI,CAAC,mBAAmB,CAAC,QAAQ,CAAC,0BAA0B,CAAC;YAIlD,gBAAgB;CA0DjC"}

package/dist/api/resources/auth/client/Client.js

@@ -0,0 +1,221 @@
+// This file was auto-generated by Fern from our API Definition.
+import { normalizeClientOptionsWithAuth } from "../../../../BaseClient.js";
+import { mergeHeaders, mergeOnlyDefinedHeaders } from "../../../../core/headers.js";
+import * as core from "../../../../core/index.js";
+import * as environments from "../../../../environments.js";
+import { handleNonStatusCodeError } from "../../../../errors/handleNonStatusCodeError.js";
+import * as errors from "../../../../errors/index.js";
+export class AuthClient {
+    constructor(options = {}) {
+        this._options = normalizeClientOptionsWithAuth(options);
+    }
+    /**
+     * Includes the RSA PS512 key used to sign API-key JWTs (\`kid\` matches \`deriveApiTokenJwtKidFromX509CertificatePem\` — SHA-256 hex of UTF-8 JWK \`n\`+\`e\`, same as token headers) and the ECC ES256 key for data payloads (\`kid\` matches \`deriveEccPlatformJwksKidFromX509CertificatePem\` — SHA-256 hex of UTF-8 JWK \`x\`+\`y\`). Relying parties should cache this response for up to 5 minutes (\`Cache-Control: public, max-age=300, stale-while-revalidate=60\`) and re-fetch only when signature verification fails.
+     *
+     * Response is a bare RFC 7517 JWKS: \`{ "keys": \[...] }\`.
+     *
+     * GET /auth/.well-known/jwks.json
+     *
+     * @param {AuthClient.RequestOptions} requestOptions - Request-specific configuration.
+     *
+     * @example
+     *     await client.auth.getPlatformJwks()
+     */
+    async __getAuthHeaders() {
+        // Apply authProvider headers if configured
+        const authProvider = this._options.authProvider;
+        if (authProvider?.getAuthRequest) {
+            const authRequest = await authProvider.getAuthRequest();
+            return authRequest.headers;
+        }
+        return {};
+    }
+    getPlatformJwks(requestOptions) {
+        return core.HttpResponsePromise.fromPromise(this.__getPlatformJwks(requestOptions));
+    }
+    async __getPlatformJwks(requestOptions) {
+        const _authHeaders = await this.__getAuthHeaders();
+        const _headers = mergeHeaders(_authHeaders, this._options?.headers, mergeOnlyDefinedHeaders({
+            "x-tenant": requestOptions?.tenant ?? this._options?.tenant,
+            "x-real-ip": requestOptions?.realIp ?? this._options?.realIp,
+        }), requestOptions?.headers);
+        const _response = await core.fetcher({
+            url: core.url.join((await core.Supplier.get(this._options.baseUrl)) ??
+                (await core.Supplier.get(this._options.environment)) ??
+                environments.SpareApiEnvironment.Sandbox, "auth/.well-known/jwks.json"),
+            method: "GET",
+            headers: _headers,
+            queryString: core.url.queryBuilder().mergeAdditional(requestOptions?.queryParams).build(),
+            timeoutMs: (requestOptions?.timeoutInSeconds ?? this._options?.timeoutInSeconds ?? 60) * 1000,
+            maxRetries: requestOptions?.maxRetries ?? this._options?.maxRetries,
+            abortSignal: requestOptions?.abortSignal,
+            fetchFn: this._options?.fetch,
+            logging: this._options.logging,
+        });
+        if (_response.ok) {
+            return { data: _response.body, rawResponse: _response.rawResponse };
+        }
+        if (_response.error.reason === "status-code") {
+            throw new errors.SpareApiError({
+                statusCode: _response.error.statusCode,
+                body: _response.error.body,
+                rawResponse: _response.rawResponse,
+            });
+        }
+        return handleNonStatusCodeError(_response.error, _response.rawResponse, "GET", "/auth/.well-known/jwks.json");
+    }
+    /**
+     * The tenant header (\`X-Tenant\`) determines which certificate store is queried. Returns 404 if the provider is unknown or has no certificates.
+     *
+     * \`Cache-Control: private, max-age=300\` — private because the response varies by \`X-Tenant\` and must not be served from a shared cache to a different tenant. The \`Vary: X-Tenant\` header is also set for RFC-compliant intermediaries that honour it.
+     *
+     * Response is a bare RFC 7517 JWKS: \`{ "keys": \[...] }\`.
+     *
+     * GET /auth/.well-known/jwks/:provider
+     *
+     * @param {SpareApi.GetProviderJwksAuthRequest} request
+     * @param {AuthClient.RequestOptions} requestOptions - Request-specific configuration.
+     *
+     * @example
+     *     await client.auth.getProviderJwks({
+     *         provider: "provider"
+     *     })
+     */
+    getProviderJwks(request, requestOptions) {
+        return core.HttpResponsePromise.fromPromise(this.__getProviderJwks(request, requestOptions));
+    }
+    async __getProviderJwks(request, requestOptions) {
+        const { provider } = request;
+        const _authHeaders = await this.__getAuthHeaders();
+        const _headers = mergeHeaders(_authHeaders, this._options?.headers, mergeOnlyDefinedHeaders({
+            "x-tenant": requestOptions?.tenant ?? this._options?.tenant,
+            "x-real-ip": requestOptions?.realIp ?? this._options?.realIp,
+        }), requestOptions?.headers);
+        const _response = await core.fetcher({
+            url: core.url.join((await core.Supplier.get(this._options.baseUrl)) ??
+                (await core.Supplier.get(this._options.environment)) ??
+                environments.SpareApiEnvironment.Sandbox, `auth/.well-known/jwks/${core.url.encodePathParam(provider)}`),
+            method: "GET",
+            headers: _headers,
+            queryString: core.url.queryBuilder().mergeAdditional(requestOptions?.queryParams).build(),
+            timeoutMs: (requestOptions?.timeoutInSeconds ?? this._options?.timeoutInSeconds ?? 60) * 1000,
+            maxRetries: requestOptions?.maxRetries ?? this._options?.maxRetries,
+            abortSignal: requestOptions?.abortSignal,
+            fetchFn: this._options?.fetch,
+            logging: this._options.logging,
+        });
+        if (_response.ok) {
+            return { data: _response.body, rawResponse: _response.rawResponse };
+        }
+        if (_response.error.reason === "status-code") {
+            throw new errors.SpareApiError({
+                statusCode: _response.error.statusCode,
+                body: _response.error.body,
+                rawResponse: _response.rawResponse,
+            });
+        }
+        return handleNonStatusCodeError(_response.error, _response.rawResponse, "GET", "/auth/.well-known/jwks/{provider}");
+    }
+    /**
+     * Validates the application identifier and API key, enforces IP whitelist policy, verifies application and client status, and issues a signed JWT with role-derived audience scopes.
+     *
+     * POST /auth/api-keys/sessions
+     *
+     * @param {SpareApi.AuthenticateAuthRequest} request
+     * @param {AuthClient.RequestOptions} requestOptions - Request-specific configuration.
+     *
+     * @example
+     *     await client.auth.authenticate({
+     *         "app-id": "app-id",
+     *         "x-api-key": "x-api-key"
+     *     })
+     */
+    authenticate(request, requestOptions) {
+        return core.HttpResponsePromise.fromPromise(this.__authenticate(request, requestOptions));
+    }
+    async __authenticate(request, requestOptions) {
+        const { "app-id": appId, "x-api-key": apiKey } = request;
+        const _authHeaders = await this.__getAuthHeaders();
+        const _headers = mergeHeaders(_authHeaders, this._options?.headers, mergeOnlyDefinedHeaders({
+            "app-id": appId,
+            "x-api-key": apiKey,
+            "x-tenant": requestOptions?.tenant ?? this._options?.tenant,
+            "x-real-ip": requestOptions?.realIp ?? this._options?.realIp,
+        }), requestOptions?.headers);
+        const _response = await core.fetcher({
+            url: core.url.join((await core.Supplier.get(this._options.baseUrl)) ??
+                (await core.Supplier.get(this._options.environment)) ??
+                environments.SpareApiEnvironment.Sandbox, "auth/api-keys/sessions"),
+            method: "POST",
+            headers: _headers,
+            queryString: core.url.queryBuilder().mergeAdditional(requestOptions?.queryParams).build(),
+            timeoutMs: (requestOptions?.timeoutInSeconds ?? this._options?.timeoutInSeconds ?? 60) * 1000,
+            maxRetries: requestOptions?.maxRetries ?? this._options?.maxRetries,
+            abortSignal: requestOptions?.abortSignal,
+            fetchFn: this._options?.fetch,
+            logging: this._options.logging,
+        });
+        if (_response.ok) {
+            return { data: _response.body, rawResponse: _response.rawResponse };
+        }
+        if (_response.error.reason === "status-code") {
+            throw new errors.SpareApiError({
+                statusCode: _response.error.statusCode,
+                body: _response.error.body,
+                rawResponse: _response.rawResponse,
+            });
+        }
+        return handleNonStatusCodeError(_response.error, _response.rawResponse, "POST", "/auth/api-keys/sessions");
+    }
+    /**
+     * Verifies the refresh JWT, re-checks IP whitelist and application status, then mints a new access JWT and a new refresh JWT (refresh-token rotation on every successful call).
+     *
+     * POST /auth/api-keys/sessions/refresh
+     *
+     * @param {SpareApi.RefreshSessionAuthRequest} request
+     * @param {AuthClient.RequestOptions} requestOptions - Request-specific configuration.
+     *
+     * @example
+     *     await client.auth.refreshSession()
+     */
+    refreshSession(request = {}, requestOptions) {
+        return core.HttpResponsePromise.fromPromise(this.__refreshSession(request, requestOptions));
+    }
+    async __refreshSession(request = {}, requestOptions) {
+        const { "refresh-token": refreshToken, ..._body } = request;
+        const _authHeaders = await this.__getAuthHeaders();
+        const _headers = mergeHeaders(_authHeaders, this._options?.headers, mergeOnlyDefinedHeaders({
+            "refresh-token": refreshToken,
+            "x-tenant": requestOptions?.tenant ?? this._options?.tenant,
+            "x-real-ip": requestOptions?.realIp ?? this._options?.realIp,
+        }), requestOptions?.headers);
+        const _response = await core.fetcher({
+            url: core.url.join((await core.Supplier.get(this._options.baseUrl)) ??
+                (await core.Supplier.get(this._options.environment)) ??
+                environments.SpareApiEnvironment.Sandbox, "auth/api-keys/sessions/refresh"),
+            method: "POST",
+            headers: _headers,
+            contentType: "application/json",
+            queryString: core.url.queryBuilder().mergeAdditional(requestOptions?.queryParams).build(),
+            requestType: "json",
+            body: _body,
+            timeoutMs: (requestOptions?.timeoutInSeconds ?? this._options?.timeoutInSeconds ?? 60) * 1000,
+            maxRetries: requestOptions?.maxRetries ?? this._options?.maxRetries,
+            abortSignal: requestOptions?.abortSignal,
+            fetchFn: this._options?.fetch,
+            logging: this._options.logging,
+        });
+        if (_response.ok) {
+            return { data: _response.body, rawResponse: _response.rawResponse };
+        }
+        if (_response.error.reason === "status-code") {
+            throw new errors.SpareApiError({
+                statusCode: _response.error.statusCode,
+                body: _response.error.body,
+                rawResponse: _response.rawResponse,
+            });
+        }
+        return handleNonStatusCodeError(_response.error, _response.rawResponse, "POST", "/auth/api-keys/sessions/refresh");
+    }
+}
+//# sourceMappingURL=Client.js.map

package/dist/api/resources/auth/client/Client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"Client.js","sourceRoot":"","sources":["../../../../../api/resources/auth/client/Client.ts"],"names":[],"mappings":"AAAA,gEAAgE;AAGhE,OAAO,EAAwD,8BAA8B,EAAE,MAAM,2BAA2B,CAAC;AACjI,OAAO,EAAE,YAAY,EAAE,uBAAuB,EAAE,MAAM,6BAA6B,CAAC;AACpF,OAAO,KAAK,IAAI,MAAM,2BAA2B,CAAC;AAClD,OAAO,KAAK,YAAY,MAAM,6BAA6B,CAAC;AAC5D,OAAO,EAAE,wBAAwB,EAAE,MAAM,gDAAgD,CAAC;AAC1F,OAAO,KAAK,MAAM,MAAM,6BAA6B,CAAC;AAStD,MAAM,OAAO,UAAU;IAGnB,YAAY,UAA8B,EAAE;QACxC,IAAI,CAAC,QAAQ,GAAG,8BAA8B,CAAC,OAAO,CAAC,CAAC;IAC5D,CAAC;IAED;;;;;;;;;;;OAWG;IAEK,KAAK,CAAC,gBAAgB;QAC1B,2CAA2C;QAC3C,MAAM,YAAY,GAAI,IAAI,CAAC,QAAkH,CAAC,YAAY,CAAC;QAC3J,IAAI,YAAY,EAAE,cAAc,EAAE,CAAC;YAC/B,MAAM,WAAW,GAAG,MAAM,YAAY,CAAC,cAAc,EAAE,CAAC;YACxD,OAAO,WAAW,CAAC,OAAO,CAAC;QAC/B,CAAC;QACD,OAAO,EAAE,CAAC;IACd,CAAC;IAEM,eAAe,CAClB,cAA0C;QAE1C,OAAO,IAAI,CAAC,mBAAmB,CAAC,WAAW,CAAC,IAAI,CAAC,iBAAiB,CAAC,cAAc,CAAC,CAAC,CAAC;IACxF,CAAC;IAEO,KAAK,CAAC,iBAAiB,CAC3B,cAA0C;QAE1C,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,gBAAgB,EAAE,CAAC;QAEnD,MAAM,QAAQ,GAAiC,YAAY,CAEvD,YAAY,EAGZ,IAAI,CAAC,QAAQ,EAAE,OAAO,EACtB,uBAAuB,CAAC;YACpB,UAAU,EAAE,cAAc,EAAE,MAAM,IAAI,IAAI,CAAC,QAAQ,EAAE,MAAM;YAC3D,WAAW,EAAE,cAAc,EAAE,MAAM,IAAI,IAAI,CAAC,QAAQ,EAAE,MAAM;SAC/D,CAAC,EACF,cAAc,EAAE,OAAO,CAC1B,CAAC;QACF,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC;YACjC,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC,IAAI,CACd,CAAC,MAAM,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;gBAC5C,CAAC,MAAM,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;gBACpD,YAAY,CAAC,mBAAmB,CAAC,OAAO,EAC5C,4BAA4B,CAC/B;YACD,MAAM,EAAE,KAAK;YACb,OAAO,EAAE,QAAQ;YACjB,WAAW,EAAE,IAAI,CAAC,GAAG,CAAC,YAAY,EAAE,CAAC,eAAe,CAAC,cAAc,EAAE,WAAW,CAAC,CAAC,KAAK,EAAE;YACzF,SAAS,EAAE,CAAC,cAAc,EAAE,gBAAgB,IAAI,IAAI,CAAC,QAAQ,EAAE,gBAAgB,IAAI,EAAE,CAAC,GAAG,IAAI;YAC7F,UAAU,EAAE,cAAc,EAAE,UAAU,IAAI,IAAI,CAAC,QAAQ,EAAE,UAAU;YACnE,WAAW,EAAE,cAAc,EAAE,WAAW;YACxC,OAAO,EAAE,IAAI,CAAC,QAAQ,EAAE,KAAK;YAC7B,OAAO,EAAE,IAAI,CAAC,QAAQ,CAAC,OAAO;SACjC,CAAC,CAAC;QACH,IAAI,SAAS,CAAC,EAAE,EAAE,CAAC;YACf,OAAO,EAAE,IAAI,EAAE,SAAS,CAAC,IAA4C,EAAE,WAAW,EAAE,SAAS,CAAC,WAAW,EAAE,CAAC;QAChH,CAAC;QAED,IAAI,SAAS,CAAC,KAAK,CAAC,MAAM,KAAK,aAAa,EAAE,CAAC;YAC3C,MAAM,IAAI,MAAM,CAAC,aAAa,CAAC;gBAC3B,UAAU,EAAE,SAAS,CAAC,KAAK,CAAC,UAAU;gBACtC,IAAI,EAAE,SAAS,CAAC,KAAK,CAAC,IAAI;gBAC1B,WAAW,EAAE,SAAS,CAAC,WAAW;aACrC,CAAC,CAAC;QACP,CAAC;QAED,OAAO,wBAAwB,CAAC,SAAS,CAAC,KAAK,EAAE,SAAS,CAAC,WAAW,EAAE,KAAK,EAAE,6BAA6B,CAAC,CAAC;IAClH,CAAC;IAED;;;;;;;;;;;;;;;;OAgBG;IACI,eAAe,CAClB,OAA4C,EAC5C,cAA0C;QAE1C,OAAO,IAAI,CAAC,mBAAmB,CAAC,WAAW,CAAC,IAAI,CAAC,iBAAiB,CAAC,OAAO,EAAE,cAAc,CAAC,CAAC,CAAC;IACjG,CAAC;IAEO,KAAK,CAAC,iBAAiB,CAC3B,OAA4C,EAC5C,cAA0C;QAE1C,MAAM,EAAE,QAAQ,EAAE,GAAG,OAAO,CAAC;QAC7B,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,gBAAgB,EAAE,CAAC;QAEnD,MAAM,QAAQ,GAAiC,YAAY,CAEvD,YAAY,EAGZ,IAAI,CAAC,QAAQ,EAAE,OAAO,EACtB,uBAAuB,CAAC;YACpB,UAAU,EAAE,cAAc,EAAE,MAAM,IAAI,IAAI,CAAC,QAAQ,EAAE,MAAM;YAC3D,WAAW,EAAE,cAAc,EAAE,MAAM,IAAI,IAAI,CAAC,QAAQ,EAAE,MAAM;SAC/D,CAAC,EACF,cAAc,EAAE,OAAO,CAC1B,CAAC;QACF,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC;YACjC,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC,IAAI,CACd,CAAC,MAAM,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;gBAC5C,CAAC,MAAM,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;gBACpD,YAAY,CAAC,mBAAmB,CAAC,OAAO,EAC5C,yBAAyB,IAAI,CAAC,GAAG,CAAC,eAAe,CAAC,QAAQ,CAAC,EAAE,CAChE;YACD,MAAM,EAAE,KAAK;YACb,OAAO,EAAE,QAAQ;YACjB,WAAW,EAAE,IAAI,CAAC,GAAG,CAAC,YAAY,EAAE,CAAC,eAAe,CAAC,cAAc,EAAE,WAAW,CAAC,CAAC,KAAK,EAAE;YACzF,SAAS,EAAE,CAAC,cAAc,EAAE,gBAAgB,IAAI,IAAI,CAAC,QAAQ,EAAE,gBAAgB,IAAI,EAAE,CAAC,GAAG,IAAI;YAC7F,UAAU,EAAE,cAAc,EAAE,UAAU,IAAI,IAAI,CAAC,QAAQ,EAAE,UAAU;YACnE,WAAW,EAAE,cAAc,EAAE,WAAW;YACxC,OAAO,EAAE,IAAI,CAAC,QAAQ,EAAE,KAAK;YAC7B,OAAO,EAAE,IAAI,CAAC,QAAQ,CAAC,OAAO;SACjC,CAAC,CAAC;QACH,IAAI,SAAS,CAAC,EAAE,EAAE,CAAC;YACf,OAAO,EAAE,IAAI,EAAE,SAAS,CAAC,IAA4C,EAAE,WAAW,EAAE,SAAS,CAAC,WAAW,EAAE,CAAC;QAChH,CAAC;QAED,IAAI,SAAS,CAAC,KAAK,CAAC,MAAM,KAAK,aAAa,EAAE,CAAC;YAC3C,MAAM,IAAI,MAAM,CAAC,aAAa,CAAC;gBAC3B,UAAU,EAAE,SAAS,CAAC,KAAK,CAAC,UAAU;gBACtC,IAAI,EAAE,SAAS,CAAC,KAAK,CAAC,IAAI;gBAC1B,WAAW,EAAE,SAAS,CAAC,WAAW;aACrC,CAAC,CAAC;QACP,CAAC;QAED,OAAO,wBAAwB,CAC3B,SAAS,CAAC,KAAK,EACf,SAAS,CAAC,WAAW,EACrB,KAAK,EACL,mCAAmC,CACtC,CAAC;IACN,CAAC;IAED;;;;;;;;;;;;;OAaG;IACI,YAAY,CACf,OAAyC,EACzC,cAA0C;QAE1C,OAAO,IAAI,CAAC,mBAAmB,CAAC,WAAW,CAAC,IAAI,CAAC,cAAc,CAAC,OAAO,EAAE,cAAc,CAAC,CAAC,CAAC;IAC9F,CAAC;IAEO,KAAK,CAAC,cAAc,CACxB,OAAyC,EACzC,cAA0C;QAE1C,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,WAAW,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC;QACzD,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,gBAAgB,EAAE,CAAC;QAEnD,MAAM,QAAQ,GAAiC,YAAY,CAEvD,YAAY,EAGZ,IAAI,CAAC,QAAQ,EAAE,OAAO,EACtB,uBAAuB,CAAC;YACpB,QAAQ,EAAE,KAAK;YACf,WAAW,EAAE,MAAM;YACnB,UAAU,EAAE,cAAc,EAAE,MAAM,IAAI,IAAI,CAAC,QAAQ,EAAE,MAAM;YAC3D,WAAW,EAAE,cAAc,EAAE,MAAM,IAAI,IAAI,CAAC,QAAQ,EAAE,MAAM;SAC/D,CAAC,EACF,cAAc,EAAE,OAAO,CAC1B,CAAC;QACF,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC;YACjC,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC,IAAI,CACd,CAAC,MAAM,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;gBAC5C,CAAC,MAAM,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;gBACpD,YAAY,CAAC,mBAAmB,CAAC,OAAO,EAC5C,wBAAwB,CAC3B;YACD,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,QAAQ;YACjB,WAAW,EAAE,IAAI,CAAC,GAAG,CAAC,YAAY,EAAE,CAAC,eAAe,CAAC,cAAc,EAAE,WAAW,CAAC,CAAC,KAAK,EAAE;YACzF,SAAS,EAAE,CAAC,cAAc,EAAE,gBAAgB,IAAI,IAAI,CAAC,QAAQ,EAAE,gBAAgB,IAAI,EAAE,CAAC,GAAG,IAAI;YAC7F,UAAU,EAAE,cAAc,EAAE,UAAU,IAAI,IAAI,CAAC,QAAQ,EAAE,UAAU;YACnE,WAAW,EAAE,cAAc,EAAE,WAAW;YACxC,OAAO,EAAE,IAAI,CAAC,QAAQ,EAAE,KAAK;YAC7B,OAAO,EAAE,IAAI,CAAC,QAAQ,CAAC,OAAO;SACjC,CAAC,CAAC;QACH,IAAI,SAAS,CAAC,EAAE,EAAE,CAAC;YACf,OAAO,EAAE,IAAI,EAAE,SAAS,CAAC,IAAyC,EAAE,WAAW,EAAE,SAAS,CAAC,WAAW,EAAE,CAAC;QAC7G,CAAC;QAED,IAAI,SAAS,CAAC,KAAK,CAAC,MAAM,KAAK,aAAa,EAAE,CAAC;YAC3C,MAAM,IAAI,MAAM,CAAC,aAAa,CAAC;gBAC3B,UAAU,EAAE,SAAS,CAAC,KAAK,CAAC,UAAU;gBACtC,IAAI,EAAE,SAAS,CAAC,KAAK,CAAC,IAAI;gBAC1B,WAAW,EAAE,SAAS,CAAC,WAAW;aACrC,CAAC,CAAC;QACP,CAAC;QAED,OAAO,wBAAwB,CAAC,SAAS,CAAC,KAAK,EAAE,SAAS,CAAC,WAAW,EAAE,MAAM,EAAE,yBAAyB,CAAC,CAAC;IAC/G,CAAC;IAED;;;;;;;;;;OAUG;IACI,cAAc,CACjB,UAA8C,EAAE,EAChD,cAA0C;QAE1C,OAAO,IAAI,CAAC,mBAAmB,CAAC,WAAW,CAAC,IAAI,CAAC,gBAAgB,CAAC,OAAO,EAAE,cAAc,CAAC,CAAC,CAAC;IAChG,CAAC;IAEO,KAAK,CAAC,gBAAgB,CAC1B,UAA8C,EAAE,EAChD,cAA0C;QAE1C,MAAM,EAAE,eAAe,EAAE,YAAY,EAAE,GAAG,KAAK,EAAE,GAAG,OAAO,CAAC;QAC5D,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,gBAAgB,EAAE,CAAC;QAEnD,MAAM,QAAQ,GAAiC,YAAY,CAEvD,YAAY,EAGZ,IAAI,CAAC,QAAQ,EAAE,OAAO,EACtB,uBAAuB,CAAC;YACpB,eAAe,EAAE,YAAY;YAC7B,UAAU,EAAE,cAAc,EAAE,MAAM,IAAI,IAAI,CAAC,QAAQ,EAAE,MAAM;YAC3D,WAAW,EAAE,cAAc,EAAE,MAAM,IAAI,IAAI,CAAC,QAAQ,EAAE,MAAM;SAC/D,CAAC,EACF,cAAc,EAAE,OAAO,CAC1B,CAAC;QACF,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC;YACjC,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC,IAAI,CACd,CAAC,MAAM,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;gBAC5C,CAAC,MAAM,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;gBACpD,YAAY,CAAC,mBAAmB,CAAC,OAAO,EAC5C,gCAAgC,CACnC;YACD,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,QAAQ;YACjB,WAAW,EAAE,kBAAkB;YAC/B,WAAW,EAAE,IAAI,CAAC,GAAG,CAAC,YAAY,EAAE,CAAC,eAAe,CAAC,cAAc,EAAE,WAAW,CAAC,CAAC,KAAK,EAAE;YACzF,WAAW,EAAE,MAAM;YACnB,IAAI,EAAE,KAAK;YACX,SAAS,EAAE,CAAC,cAAc,EAAE,gBAAgB,IAAI,IAAI,CAAC,QAAQ,EAAE,gBAAgB,IAAI,EAAE,CAAC,GAAG,IAAI;YAC7F,UAAU,EAAE,cAAc,EAAE,UAAU,IAAI,IAAI,CAAC,QAAQ,EAAE,UAAU;YACnE,WAAW,EAAE,cAAc,EAAE,WAAW;YACxC,OAAO,EAAE,IAAI,CAAC,QAAQ,EAAE,KAAK;YAC7B,OAAO,EAAE,IAAI,CAAC,QAAQ,CAAC,OAAO;SACjC,CAAC,CAAC;QACH,IAAI,SAAS,CAAC,EAAE,EAAE,CAAC;YACf,OAAO,EAAE,IAAI,EAAE,SAAS,CAAC,IAA2C,EAAE,WAAW,EAAE,SAAS,CAAC,WAAW,EAAE,CAAC;QAC/G,CAAC;QAED,IAAI,SAAS,CAAC,KAAK,CAAC,MAAM,KAAK,aAAa,EAAE,CAAC;YAC3C,MAAM,IAAI,MAAM,CAAC,aAAa,CAAC;gBAC3B,UAAU,EAAE,SAAS,CAAC,KAAK,CAAC,UAAU;gBACtC,IAAI,EAAE,SAAS,CAAC,KAAK,CAAC,IAAI;gBAC1B,WAAW,EAAE,SAAS,CAAC,WAAW;aACrC,CAAC,CAAC;QACP,CAAC;QAED,OAAO,wBAAwB,CAC3B,SAAS,CAAC,KAAK,EACf,SAAS,CAAC,WAAW,EACrB,MAAM,EACN,iCAAiC,CACpC,CAAC;IACN,CAAC;CACJ","sourcesContent":["// This file was auto-generated by Fern from our API Definition.\n\nimport type { BaseClientOptions, BaseRequestOptions } from \"../../../../BaseClient.js\";\nimport { type NormalizedClientOptions, normalizeClientOptions, normalizeClientOptionsWithAuth } from \"../../../../BaseClient.js\";\nimport { mergeHeaders, mergeOnlyDefinedHeaders } from \"../../../../core/headers.js\";\nimport * as core from \"../../../../core/index.js\";\nimport * as environments from \"../../../../environments.js\";\nimport { handleNonStatusCodeError } from \"../../../../errors/handleNonStatusCodeError.js\";\nimport * as errors from \"../../../../errors/index.js\";\nimport type * as SpareApi from \"../../../index.js\";\n\nexport declare namespace AuthClient {\n    export type Options = BaseClientOptions;\n\n    export interface RequestOptions extends BaseRequestOptions {}\n}\n\nexport class AuthClient {\n    protected readonly _options: NormalizedClientOptions<AuthClient.Options>;\n\n    constructor(options: AuthClient.Options = {}) {\n        this._options = normalizeClientOptionsWithAuth(options);\n    }\n\n    /**\n     * Includes the RSA PS512 key used to sign API-key JWTs (\\`kid\\` matches \\`deriveApiTokenJwtKidFromX509CertificatePem\\` — SHA-256 hex of UTF-8 JWK \\`n\\`+\\`e\\`, same as token headers) and the ECC ES256 key for data payloads (\\`kid\\` matches \\`deriveEccPlatformJwksKidFromX509CertificatePem\\` — SHA-256 hex of UTF-8 JWK \\`x\\`+\\`y\\`). Relying parties should cache this response for up to 5 minutes (\\`Cache-Control: public, max-age=300, stale-while-revalidate=60\\`) and re-fetch only when signature verification fails.\n     *\n     * Response is a bare RFC 7517 JWKS: \\`{ \"keys\": \\[...] }\\`.\n     *\n     * GET /auth/.well-known/jwks.json\n     *\n     * @param {AuthClient.RequestOptions} requestOptions - Request-specific configuration.\n     *\n     * @example\n     *     await client.auth.getPlatformJwks()\n     */\n\n    private async __getAuthHeaders(): Promise<Record<string, string>> {\n        // Apply authProvider headers if configured\n        const authProvider = (this._options as unknown as { authProvider?: { getAuthRequest?: () => Promise<{ headers: Record<string, string> }> } }).authProvider;\n        if (authProvider?.getAuthRequest) {\n            const authRequest = await authProvider.getAuthRequest();\n            return authRequest.headers;\n        }\n        return {};\n    }\n\n    public getPlatformJwks(\n        requestOptions?: AuthClient.RequestOptions,\n    ): core.HttpResponsePromise<SpareApi.GetPlatformJwksAuthResponse> {\n        return core.HttpResponsePromise.fromPromise(this.__getPlatformJwks(requestOptions));\n    }\n\n    private async __getPlatformJwks(\n        requestOptions?: AuthClient.RequestOptions,\n    ): Promise<core.WithRawResponse<SpareApi.GetPlatformJwksAuthResponse>> {\n        const _authHeaders = await this.__getAuthHeaders();\n\n        const _headers: core.Fetcher.Args[\"headers\"] = mergeHeaders(\n\n            _authHeaders,\n\n            \n            this._options?.headers,\n            mergeOnlyDefinedHeaders({\n                \"x-tenant\": requestOptions?.tenant ?? this._options?.tenant,\n                \"x-real-ip\": requestOptions?.realIp ?? this._options?.realIp,\n            }),\n            requestOptions?.headers,\n        );\n        const _response = await core.fetcher({\n            url: core.url.join(\n                (await core.Supplier.get(this._options.baseUrl)) ??\n                    (await core.Supplier.get(this._options.environment)) ??\n                    environments.SpareApiEnvironment.Sandbox,\n                \"auth/.well-known/jwks.json\",\n            ),\n            method: \"GET\",\n            headers: _headers,\n            queryString: core.url.queryBuilder().mergeAdditional(requestOptions?.queryParams).build(),\n            timeoutMs: (requestOptions?.timeoutInSeconds ?? this._options?.timeoutInSeconds ?? 60) * 1000,\n            maxRetries: requestOptions?.maxRetries ?? this._options?.maxRetries,\n            abortSignal: requestOptions?.abortSignal,\n            fetchFn: this._options?.fetch,\n            logging: this._options.logging,\n        });\n        if (_response.ok) {\n            return { data: _response.body as SpareApi.GetPlatformJwksAuthResponse, rawResponse: _response.rawResponse };\n        }\n\n        if (_response.error.reason === \"status-code\") {\n            throw new errors.SpareApiError({\n                statusCode: _response.error.statusCode,\n                body: _response.error.body,\n                rawResponse: _response.rawResponse,\n            });\n        }\n\n        return handleNonStatusCodeError(_response.error, _response.rawResponse, \"GET\", \"/auth/.well-known/jwks.json\");\n    }\n\n    /**\n     * The tenant header (\\`X-Tenant\\`) determines which certificate store is queried. Returns 404 if the provider is unknown or has no certificates.\n     *\n     * \\`Cache-Control: private, max-age=300\\` — private because the response varies by \\`X-Tenant\\` and must not be served from a shared cache to a different tenant. The \\`Vary: X-Tenant\\` header is also set for RFC-compliant intermediaries that honour it.\n     *\n     * Response is a bare RFC 7517 JWKS: \\`{ \"keys\": \\[...] }\\`.\n     *\n     * GET /auth/.well-known/jwks/:provider\n     *\n     * @param {SpareApi.GetProviderJwksAuthRequest} request\n     * @param {AuthClient.RequestOptions} requestOptions - Request-specific configuration.\n     *\n     * @example\n     *     await client.auth.getProviderJwks({\n     *         provider: \"provider\"\n     *     })\n     */\n    public getProviderJwks(\n        request: SpareApi.GetProviderJwksAuthRequest,\n        requestOptions?: AuthClient.RequestOptions,\n    ): core.HttpResponsePromise<SpareApi.GetProviderJwksAuthResponse> {\n        return core.HttpResponsePromise.fromPromise(this.__getProviderJwks(request, requestOptions));\n    }\n\n    private async __getProviderJwks(\n        request: SpareApi.GetProviderJwksAuthRequest,\n        requestOptions?: AuthClient.RequestOptions,\n    ): Promise<core.WithRawResponse<SpareApi.GetProviderJwksAuthResponse>> {\n        const { provider } = request;\n        const _authHeaders = await this.__getAuthHeaders();\n\n        const _headers: core.Fetcher.Args[\"headers\"] = mergeHeaders(\n\n            _authHeaders,\n\n            \n            this._options?.headers,\n            mergeOnlyDefinedHeaders({\n                \"x-tenant\": requestOptions?.tenant ?? this._options?.tenant,\n                \"x-real-ip\": requestOptions?.realIp ?? this._options?.realIp,\n            }),\n            requestOptions?.headers,\n        );\n        const _response = await core.fetcher({\n            url: core.url.join(\n                (await core.Supplier.get(this._options.baseUrl)) ??\n                    (await core.Supplier.get(this._options.environment)) ??\n                    environments.SpareApiEnvironment.Sandbox,\n                `auth/.well-known/jwks/${core.url.encodePathParam(provider)}`,\n            ),\n            method: \"GET\",\n            headers: _headers,\n            queryString: core.url.queryBuilder().mergeAdditional(requestOptions?.queryParams).build(),\n            timeoutMs: (requestOptions?.timeoutInSeconds ?? this._options?.timeoutInSeconds ?? 60) * 1000,\n            maxRetries: requestOptions?.maxRetries ?? this._options?.maxRetries,\n            abortSignal: requestOptions?.abortSignal,\n            fetchFn: this._options?.fetch,\n            logging: this._options.logging,\n        });\n        if (_response.ok) {\n            return { data: _response.body as SpareApi.GetProviderJwksAuthResponse, rawResponse: _response.rawResponse };\n        }\n\n        if (_response.error.reason === \"status-code\") {\n            throw new errors.SpareApiError({\n                statusCode: _response.error.statusCode,\n                body: _response.error.body,\n                rawResponse: _response.rawResponse,\n            });\n        }\n\n        return handleNonStatusCodeError(\n            _response.error,\n            _response.rawResponse,\n            \"GET\",\n            \"/auth/.well-known/jwks/{provider}\",\n        );\n    }\n\n    /**\n     * Validates the application identifier and API key, enforces IP whitelist policy, verifies application and client status, and issues a signed JWT with role-derived audience scopes.\n     *\n     * POST /auth/api-keys/sessions\n     *\n     * @param {SpareApi.AuthenticateAuthRequest} request\n     * @param {AuthClient.RequestOptions} requestOptions - Request-specific configuration.\n     *\n     * @example\n     *     await client.auth.authenticate({\n     *         \"app-id\": \"app-id\",\n     *         \"x-api-key\": \"x-api-key\"\n     *     })\n     */\n    public authenticate(\n        request: SpareApi.AuthenticateAuthRequest,\n        requestOptions?: AuthClient.RequestOptions,\n    ): core.HttpResponsePromise<SpareApi.AuthenticateAuthResponse> {\n        return core.HttpResponsePromise.fromPromise(this.__authenticate(request, requestOptions));\n    }\n\n    private async __authenticate(\n        request: SpareApi.AuthenticateAuthRequest,\n        requestOptions?: AuthClient.RequestOptions,\n    ): Promise<core.WithRawResponse<SpareApi.AuthenticateAuthResponse>> {\n        const { \"app-id\": appId, \"x-api-key\": apiKey } = request;\n        const _authHeaders = await this.__getAuthHeaders();\n\n        const _headers: core.Fetcher.Args[\"headers\"] = mergeHeaders(\n\n            _authHeaders,\n\n            \n            this._options?.headers,\n            mergeOnlyDefinedHeaders({\n                \"app-id\": appId,\n                \"x-api-key\": apiKey,\n                \"x-tenant\": requestOptions?.tenant ?? this._options?.tenant,\n                \"x-real-ip\": requestOptions?.realIp ?? this._options?.realIp,\n            }),\n            requestOptions?.headers,\n        );\n        const _response = await core.fetcher({\n            url: core.url.join(\n                (await core.Supplier.get(this._options.baseUrl)) ??\n                    (await core.Supplier.get(this._options.environment)) ??\n                    environments.SpareApiEnvironment.Sandbox,\n                \"auth/api-keys/sessions\",\n            ),\n            method: \"POST\",\n            headers: _headers,\n            queryString: core.url.queryBuilder().mergeAdditional(requestOptions?.queryParams).build(),\n            timeoutMs: (requestOptions?.timeoutInSeconds ?? this._options?.timeoutInSeconds ?? 60) * 1000,\n            maxRetries: requestOptions?.maxRetries ?? this._options?.maxRetries,\n            abortSignal: requestOptions?.abortSignal,\n            fetchFn: this._options?.fetch,\n            logging: this._options.logging,\n        });\n        if (_response.ok) {\n            return { data: _response.body as SpareApi.AuthenticateAuthResponse, rawResponse: _response.rawResponse };\n        }\n\n        if (_response.error.reason === \"status-code\") {\n            throw new errors.SpareApiError({\n                statusCode: _response.error.statusCode,\n                body: _response.error.body,\n                rawResponse: _response.rawResponse,\n            });\n        }\n\n        return handleNonStatusCodeError(_response.error, _response.rawResponse, \"POST\", \"/auth/api-keys/sessions\");\n    }\n\n    /**\n     * Verifies the refresh JWT, re-checks IP whitelist and application status, then mints a new access JWT and a new refresh JWT (refresh-token rotation on every successful call).\n     *\n     * POST /auth/api-keys/sessions/refresh\n     *\n     * @param {SpareApi.RefreshSessionAuthRequest} request\n     * @param {AuthClient.RequestOptions} requestOptions - Request-specific configuration.\n     *\n     * @example\n     *     await client.auth.refreshSession()\n     */\n    public refreshSession(\n        request: SpareApi.RefreshSessionAuthRequest = {},\n        requestOptions?: AuthClient.RequestOptions,\n    ): core.HttpResponsePromise<SpareApi.RefreshSessionAuthResponse> {\n        return core.HttpResponsePromise.fromPromise(this.__refreshSession(request, requestOptions));\n    }\n\n    private async __refreshSession(\n        request: SpareApi.RefreshSessionAuthRequest = {},\n        requestOptions?: AuthClient.RequestOptions,\n    ): Promise<core.WithRawResponse<SpareApi.RefreshSessionAuthResponse>> {\n        const { \"refresh-token\": refreshToken, ..._body } = request;\n        const _authHeaders = await this.__getAuthHeaders();\n\n        const _headers: core.Fetcher.Args[\"headers\"] = mergeHeaders(\n\n            _authHeaders,\n\n            \n            this._options?.headers,\n            mergeOnlyDefinedHeaders({\n                \"refresh-token\": refreshToken,\n                \"x-tenant\": requestOptions?.tenant ?? this._options?.tenant,\n                \"x-real-ip\": requestOptions?.realIp ?? this._options?.realIp,\n            }),\n            requestOptions?.headers,\n        );\n        const _response = await core.fetcher({\n            url: core.url.join(\n                (await core.Supplier.get(this._options.baseUrl)) ??\n                    (await core.Supplier.get(this._options.environment)) ??\n                    environments.SpareApiEnvironment.Sandbox,\n                \"auth/api-keys/sessions/refresh\",\n            ),\n            method: \"POST\",\n            headers: _headers,\n            contentType: \"application/json\",\n            queryString: core.url.queryBuilder().mergeAdditional(requestOptions?.queryParams).build(),\n            requestType: \"json\",\n            body: _body,\n            timeoutMs: (requestOptions?.timeoutInSeconds ?? this._options?.timeoutInSeconds ?? 60) * 1000,\n            maxRetries: requestOptions?.maxRetries ?? this._options?.maxRetries,\n            abortSignal: requestOptions?.abortSignal,\n            fetchFn: this._options?.fetch,\n            logging: this._options.logging,\n        });\n        if (_response.ok) {\n            return { data: _response.body as SpareApi.RefreshSessionAuthResponse, rawResponse: _response.rawResponse };\n        }\n\n        if (_response.error.reason === \"status-code\") {\n            throw new errors.SpareApiError({\n                statusCode: _response.error.statusCode,\n                body: _response.error.body,\n                rawResponse: _response.rawResponse,\n            });\n        }\n\n        return handleNonStatusCodeError(\n            _response.error,\n            _response.rawResponse,\n            \"POST\",\n            \"/auth/api-keys/sessions/refresh\",\n        );\n    }\n}\n"]}

package/dist/api/resources/auth/client/index.d.ts

@@ -0,0 +1,2 @@
+export * from "./requests/index.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/api/resources/auth/client/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../api/resources/auth/client/index.ts"],"names":[],"mappings":"AAAA,cAAc,qBAAqB,CAAC"}

package/dist/api/resources/auth/client/index.js

@@ -0,0 +1,2 @@
+export * from "./requests/index.js";
+//# sourceMappingURL=index.js.map

package/dist/api/resources/auth/client/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../api/resources/auth/client/index.ts"],"names":[],"mappings":"AAAA,cAAc,qBAAqB,CAAC","sourcesContent":["export * from \"./requests/index.js\";\n"]}

package/dist/api/resources/auth/client/requests/AuthenticateAuthRequest.d.ts

@@ -0,0 +1,14 @@
+/**
+ * @example
+ *     {
+ *         "app-id": "app-id",
+ *         "x-api-key": "x-api-key"
+ *     }
+ */
+export interface AuthenticateAuthRequest {
+    /** Unique application identifier (Base64-encoded). */
+    "app-id": string;
+    /** Secret API key associated with the application (Base64-encoded). */
+    "x-api-key": string;
+}
+//# sourceMappingURL=AuthenticateAuthRequest.d.ts.map

package/dist/api/resources/auth/client/requests/AuthenticateAuthRequest.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"AuthenticateAuthRequest.d.ts","sourceRoot":"","sources":["../../../../../../api/resources/auth/client/requests/AuthenticateAuthRequest.ts"],"names":[],"mappings":"AAEA;;;;;;GAMG;AACH,MAAM,WAAW,uBAAuB;IACpC,sDAAsD;IACtD,QAAQ,EAAE,MAAM,CAAC;IACjB,uEAAuE;IACvE,WAAW,EAAE,MAAM,CAAC;CACvB"}

package/dist/api/resources/auth/client/requests/AuthenticateAuthRequest.js

@@ -0,0 +1,3 @@
+// This file was auto-generated by Fern from our API Definition.
+export {};
+//# sourceMappingURL=AuthenticateAuthRequest.js.map

package/dist/api/resources/auth/client/requests/AuthenticateAuthRequest.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"AuthenticateAuthRequest.js","sourceRoot":"","sources":["../../../../../../api/resources/auth/client/requests/AuthenticateAuthRequest.ts"],"names":[],"mappings":"AAAA,gEAAgE","sourcesContent":["// This file was auto-generated by Fern from our API Definition.\n\n/**\n * @example\n *     {\n *         \"app-id\": \"app-id\",\n *         \"x-api-key\": \"x-api-key\"\n *     }\n */\nexport interface AuthenticateAuthRequest {\n    /** Unique application identifier (Base64-encoded). */\n    \"app-id\": string;\n    /** Secret API key associated with the application (Base64-encoded). */\n    \"x-api-key\": string;\n}\n"]}

package/dist/api/resources/auth/client/requests/GetProviderJwksAuthRequest.d.ts

@@ -0,0 +1,10 @@
+/**
+ * @example
+ *     {
+ *         provider: "provider"
+ *     }
+ */
+export interface GetProviderJwksAuthRequest {
+    provider: string;
+}
+//# sourceMappingURL=GetProviderJwksAuthRequest.d.ts.map

package/dist/api/resources/auth/client/requests/GetProviderJwksAuthRequest.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"GetProviderJwksAuthRequest.d.ts","sourceRoot":"","sources":["../../../../../../api/resources/auth/client/requests/GetProviderJwksAuthRequest.ts"],"names":[],"mappings":"AAEA;;;;;GAKG;AACH,MAAM,WAAW,0BAA0B;IACvC,QAAQ,EAAE,MAAM,CAAC;CACpB"}

package/dist/api/resources/auth/client/requests/GetProviderJwksAuthRequest.js

@@ -0,0 +1,3 @@
+// This file was auto-generated by Fern from our API Definition.
+export {};
+//# sourceMappingURL=GetProviderJwksAuthRequest.js.map

package/dist/api/resources/auth/client/requests/GetProviderJwksAuthRequest.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"GetProviderJwksAuthRequest.js","sourceRoot":"","sources":["../../../../../../api/resources/auth/client/requests/GetProviderJwksAuthRequest.ts"],"names":[],"mappings":"AAAA,gEAAgE","sourcesContent":["// This file was auto-generated by Fern from our API Definition.\n\n/**\n * @example\n *     {\n *         provider: \"provider\"\n *     }\n */\nexport interface GetProviderJwksAuthRequest {\n    provider: string;\n}\n"]}

package/dist/api/resources/auth/client/requests/RefreshSessionAuthRequest.d.ts

@@ -0,0 +1,10 @@
+/**
+ * @example
+ *     {}
+ */
+export interface RefreshSessionAuthRequest {
+    /** Refresh JWT supplied in the \`refresh-token\` header (preferred for non-browser clients). */
+    "refresh-token"?: string;
+    refreshToken?: string;
+}
+//# sourceMappingURL=RefreshSessionAuthRequest.d.ts.map

package/dist/api/resources/auth/client/requests/RefreshSessionAuthRequest.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"RefreshSessionAuthRequest.d.ts","sourceRoot":"","sources":["../../../../../../api/resources/auth/client/requests/RefreshSessionAuthRequest.ts"],"names":[],"mappings":"AAEA;;;GAGG;AACH,MAAM,WAAW,yBAAyB;IACtC,gGAAgG;IAChG,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,YAAY,CAAC,EAAE,MAAM,CAAC;CACzB"}

package/dist/api/resources/auth/client/requests/RefreshSessionAuthRequest.js

@@ -0,0 +1,3 @@
+// This file was auto-generated by Fern from our API Definition.
+export {};
+//# sourceMappingURL=RefreshSessionAuthRequest.js.map

package/dist/api/resources/auth/client/requests/RefreshSessionAuthRequest.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"RefreshSessionAuthRequest.js","sourceRoot":"","sources":["../../../../../../api/resources/auth/client/requests/RefreshSessionAuthRequest.ts"],"names":[],"mappings":"AAAA,gEAAgE","sourcesContent":["// This file was auto-generated by Fern from our API Definition.\n\n/**\n * @example\n *     {}\n */\nexport interface RefreshSessionAuthRequest {\n    /** Refresh JWT supplied in the \\`refresh-token\\` header (preferred for non-browser clients). */\n    \"refresh-token\"?: string;\n    refreshToken?: string;\n}\n"]}

package/dist/api/resources/auth/client/requests/index.d.ts

@@ -0,0 +1,4 @@
+export type { AuthenticateAuthRequest } from "./AuthenticateAuthRequest.js";
+export type { GetProviderJwksAuthRequest } from "./GetProviderJwksAuthRequest.js";
+export type { RefreshSessionAuthRequest } from "./RefreshSessionAuthRequest.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/api/resources/auth/client/requests/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../../api/resources/auth/client/requests/index.ts"],"names":[],"mappings":"AAAA,YAAY,EAAE,uBAAuB,EAAE,MAAM,8BAA8B,CAAC;AAC5E,YAAY,EAAE,0BAA0B,EAAE,MAAM,iCAAiC,CAAC;AAClF,YAAY,EAAE,yBAAyB,EAAE,MAAM,gCAAgC,CAAC"}

package/dist/api/resources/auth/client/requests/index.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=index.js.map

package/dist/api/resources/auth/client/requests/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../../api/resources/auth/client/requests/index.ts"],"names":[],"mappings":"","sourcesContent":["export type { AuthenticateAuthRequest } from \"./AuthenticateAuthRequest.js\";\nexport type { GetProviderJwksAuthRequest } from \"./GetProviderJwksAuthRequest.js\";\nexport type { RefreshSessionAuthRequest } from \"./RefreshSessionAuthRequest.js\";\n"]}

package/dist/api/resources/auth/exports.d.ts

@@ -0,0 +1,3 @@
+export { AuthClient } from "./client/Client.js";
+export * from "./client/index.js";
+//# sourceMappingURL=exports.d.ts.map

package/dist/api/resources/auth/exports.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"exports.d.ts","sourceRoot":"","sources":["../../../../api/resources/auth/exports.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAChD,cAAc,mBAAmB,CAAC"}

package/dist/api/resources/auth/exports.js

@@ -0,0 +1,4 @@
+// This file was auto-generated by Fern from our API Definition.
+export { AuthClient } from "./client/Client.js";
+export * from "./client/index.js";
+//# sourceMappingURL=exports.js.map

package/dist/api/resources/auth/exports.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"exports.js","sourceRoot":"","sources":["../../../../api/resources/auth/exports.ts"],"names":[],"mappings":"AAAA,gEAAgE;AAEhE,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAChD,cAAc,mBAAmB,CAAC","sourcesContent":["// This file was auto-generated by Fern from our API Definition.\n\nexport { AuthClient } from \"./client/Client.js\";\nexport * from \"./client/index.js\";\n"]}

package/dist/api/resources/auth/index.d.ts

@@ -0,0 +1,3 @@
+export * from "./client/index.js";
+export * from "./types/index.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/api/resources/auth/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../api/resources/auth/index.ts"],"names":[],"mappings":"AAAA,cAAc,mBAAmB,CAAC;AAClC,cAAc,kBAAkB,CAAC"}

package/dist/api/resources/auth/index.js

@@ -0,0 +1,3 @@
+export * from "./client/index.js";
+export * from "./types/index.js";
+//# sourceMappingURL=index.js.map