@torrow/sdk-auth 0.9.1 → 0.10.0

package/dist/index.js

@@ -9,13 +9,16 @@ function resolveAppCredentials(input) {
 function appCredentialsToAuthIdentityBasic(appCredentials) {
   const clientId = appCredentials?.clientId?.trim();
   const clientSecret = appCredentials?.clientSecret?.trim();
-  if (!clientId || !clientSecret) return void 0;
+  if (!clientId || !clientSecret) {
+    return void 0;
+  }
   return { username: clientId, password: clientSecret };
 }
 
 // ../../src/auth-session/otp-errors.ts
 import {
   OtpErrorReason,
+  ApiErrorNameValues,
   TorrowSdkError,
   TorrowSdkErrorCategory,
   TorrowSdkErrorDomain,
@@ -44,32 +47,54 @@ function otpFailure(kind, cleanup, cause) {
     default:
       category = kind;
   }
-  return new TorrowSdkError({ category, detail: { domain: TorrowSdkErrorDomain.Otp, ...reason ? { reason } : {} }, sensitive: { cleanup, cause } });
+  return new TorrowSdkError({
+    category,
+    detail: { domain: TorrowSdkErrorDomain.Otp, ...reason ? { reason } : {} },
+    sensitive: { cleanup, cause }
+  });
 }
 function otpHttpFailure(error) {
-  if (!(error instanceof TorrowSdkError)) return error;
+  if (!(error instanceof TorrowSdkError)) {
+    return error;
+  }
   const body = error.getSensitiveDetails().body;
-  if (body === null || typeof body !== "object") return error;
+  if (body === null || typeof body !== "object") {
+    return error;
+  }
   const value = body;
-  if (value.name === "AUTH_HEADER_MISSING" /* AuthHeaderMissing */) {
-    return error.withContext({ category: TorrowSdkErrorCategory.AuthenticationRequired, detail: { domain: TorrowSdkErrorDomain.Otp, reason: OtpErrorReason.AuthHeaderMissing } });
+  if (value.name === ApiErrorNameValues.AuthHeaderMissing) {
+    return error.withContext({
+      category: TorrowSdkErrorCategory.AuthenticationRequired,
+      detail: { domain: TorrowSdkErrorDomain.Otp, reason: OtpErrorReason.AuthHeaderMissing }
+    });
+  }
+  if (value.name !== ApiErrorNameValues.CodeRequestLimit) {
+    return error;
   }
-  if (value.name !== "CODE_REQUEST_LIMIT_EXCEEDED" /* CodeRequestLimitExceeded */) return error;
   const minutes = duration(value.parameters?.minutes);
   const seconds = duration(value.parameters?.seconds);
   const wait = minutes === void 0 && seconds === void 0 ? void 0 : (minutes ?? 0) * 60 + (seconds ?? 0);
-  return error.withContext({ category: TorrowSdkErrorCategory.RateLimited, detail: {
-    domain: TorrowSdkErrorDomain.Otp,
-    reason: OtpErrorReason.CodeRequestLimitExceeded,
-    ...wait !== void 0 && Number.isFinite(wait) ? { retryAfterSeconds: wait } : {}
-  } });
+  return error.withContext({
+    category: TorrowSdkErrorCategory.RateLimited,
+    detail: {
+      domain: TorrowSdkErrorDomain.Otp,
+      reason: OtpErrorReason.CodeRequestLimitExceeded,
+      ...wait !== void 0 && Number.isFinite(wait) ? { retryAfterSeconds: wait } : {}
+    }
+  });
 }
 function duration(value) {
   const number = typeof value === "number" ? value : typeof value === "string" && /^\d+(?:\.\d+)?$/.test(value) ? Number(value) : void 0;
   return number !== void 0 && Number.isFinite(number) && number >= 0 ? number : void 0;
 }
 function throwIfOtpAborted(signal) {
-  if (signal?.aborted) throw new TorrowSdkError({ category: TorrowSdkErrorCategory.Cancelled, request: TorrowSdkRequestState.NotStarted, sensitive: { cause: signal.reason } });
+  if (signal?.aborted) {
+    throw new TorrowSdkError({
+      category: TorrowSdkErrorCategory.Cancelled,
+      request: TorrowSdkRequestState.NotStarted,
+      sensitive: { cause: signal.reason }
+    });
+  }
 }
 
 // ../../src/auth-session/otp-flow.ts
@@ -87,9 +112,7 @@ import {
 // ../../src/auth-session/identity-client.ts
 import { TorrowClient } from "@torrow/sdk-client";
 function createIdentityClient(options) {
-  const authIdentityBasic = appCredentialsToAuthIdentityBasic(
-    resolveAppCredentials(options.appCredentials)
-  );
+  const authIdentityBasic = appCredentialsToAuthIdentityBasic(resolveAppCredentials(options.appCredentials));
   if (!authIdentityBasic) {
     throw new Error(
       "TokenSession: \u043D\u0435\u043F\u043E\u043B\u043D\u0430\u044F appCredentials (\u043D\u0443\u0436\u043D\u044B \u043D\u0435\u043F\u0443\u0441\u0442\u044B\u0435 clientId \u0438 clientSecret). \u0411\u0435\u0437 \u043E\u043F\u0446\u0438\u0438 \u0438\u0441\u043F\u043E\u043B\u044C\u0437\u0443\u0435\u0442\u0441\u044F DEFAULT_APP_CREDENTIALS."
@@ -112,7 +135,9 @@ import {
 } from "@torrow/sdk-client";
 function buildOtpSendRequest(input) {
   const accountName = input.accountName.trim();
-  if (!accountName) throw new Error("runOtpLogin: accountName is empty");
+  if (!accountName) {
+    throw new Error("runOtpLogin: accountName is empty");
+  }
   return {
     accountName,
     type: input.type,
@@ -141,7 +166,9 @@ function requestAuthToken(client, input, signal) {
   );
 }
 function tokenTransition(status, legacy = false) {
-  if (legacy && status == null) return TokenStatusValues.TokenReady;
+  if (legacy && status == null) {
+    return TokenStatusValues.TokenReady;
+  }
   return typeof status === "string" && isTokenStatus(status) ? status : void 0;
 }
 function tokenResponseFields(o) {
@@ -160,10 +187,9 @@ var OtpPhaseValues = /* @__PURE__ */ ((OtpPhaseValues2) => {
   return OtpPhaseValues2;
 })(OtpPhaseValues || {});
 function createOtpFlow(options) {
-  if (!isRecord(options) || !isRecord(options.deviceInfo) || typeof options.deviceInfo.deviceId !== "string" || !options.deviceInfo.deviceId.trim() || typeof options.deviceInfo.deviceType !== "string" || !isDeviceType(options.deviceInfo.deviceType) || options.scopes !== void 0 && (!Array.isArray(options.scopes) || !options.scopes.every(
-    (scope) => typeof scope === "string" && scope.trim()
-  )) || options.splitTokens !== void 0 && typeof options.splitTokens !== "boolean")
+  if (!isRecord(options) || !isRecord(options.deviceInfo) || typeof options.deviceInfo.deviceId !== "string" || !options.deviceInfo.deviceId.trim() || typeof options.deviceInfo.deviceType !== "string" || !isDeviceType(options.deviceInfo.deviceType) || options.scopes !== void 0 && (!Array.isArray(options.scopes) || !options.scopes.every((scope) => typeof scope === "string" && scope.trim())) || options.splitTokens !== void 0 && typeof options.splitTokens !== "boolean") {
     throw otpFailure(TorrowSdkErrorCategory2.InvalidInput);
+  }
   let client;
   try {
     client = createIdentityClient(options);
@@ -189,15 +215,20 @@ function createOtpFlow(options) {
       ).catch((error) => {
         throw otpHttpFailure(error);
       });
-      if (!isRecord(response) || typeof response.sessionId !== "string" || !response.sessionId.trim())
+      if (!isRecord(response) || typeof response.sessionId !== "string" || !response.sessionId.trim()) {
         throw otpFailure(TorrowSdkErrorCategory2.InvalidResponse);
-      if (!supportedMethod(response.usedMethod, input.account.accountType))
+      }
+      if (!supportedMethod(response.usedMethod, input.account.accountType)) {
         throw otpFailure(OtpErrorReason2.UnsupportedMethod);
+      }
       const ttl = response.sessionLifeTimeInSeconds ?? 180;
-      if (!positive(ttl)) throw otpFailure(TorrowSdkErrorCategory2.InvalidResponse);
+      if (!positive(ttl)) {
+        throw otpFailure(TorrowSdkErrorCategory2.InvalidResponse);
+      }
       const expiresAtMs = startedAt + ttl * 1e3;
-      if (!timestamp(expiresAtMs) || expiresAtMs <= Date.now())
+      if (!timestamp(expiresAtMs) || expiresAtMs <= Date.now()) {
         throw otpFailure(TorrowSdkErrorCategory2.InvalidResponse);
+      }
       const mobile = response.usedMethod === VerificationMethodValues.MtsMobileId;
       const nextSendAtMs = response.nextAvailableUsageTime instanceof Date ? response.nextAvailableUsageTime.getTime() : typeof response.nextAvailableUsageTime === "string" ? Date.parse(response.nextAvailableUsageTime) : void 0;
       return {
@@ -216,11 +247,14 @@ function createOtpFlow(options) {
       };
     },
     async complete(input, requestOptions) {
-      if (!isRecord(input)) throw otpFailure(TorrowSdkErrorCategory2.InvalidInput);
+      if (!isRecord(input)) {
+        throw otpFailure(TorrowSdkErrorCategory2.InvalidInput);
+      }
       throwIfOtpAborted(requestOptions?.signal);
       const continuation = validateChallenge(input.challenge);
-      if (continuation.phase === "Pending" /* Pending */ && input.code !== void 0 || continuation.phase === "AwaitingCode" /* AwaitingCode */ && (typeof input.code !== "string" || !input.code.trim()))
+      if (continuation.phase === "Pending" /* Pending */ && input.code !== void 0 || continuation.phase === "AwaitingCode" /* AwaitingCode */ && (typeof input.code !== "string" || !input.code.trim())) {
         throw otpFailure(TorrowSdkErrorCategory2.InvalidInput);
+      }
       const raw = await requestAuthToken(
         client,
         {
@@ -234,16 +268,17 @@ function createOtpFlow(options) {
       ).catch((error) => {
         throw otpHttpFailure(error);
       });
-      if (!isRecord(raw)) throw otpFailure(TorrowSdkErrorCategory2.InvalidResponse);
+      if (!isRecord(raw)) {
+        throw otpFailure(TorrowSdkErrorCategory2.InvalidResponse);
+      }
       const fields = tokenResponseFields(raw);
       const refreshToken = typeof fields.refresh === "string" && fields.refresh.trim() ? fields.refresh.trim() : void 0;
       const cleanup = refreshToken ? { refreshToken } : void 0;
-      const status = tokenTransition(
-        typeof fields.status === "string" ? fields.status.trim() : fields.status
-      );
-      if (!status || fields.access != null && typeof fields.access !== "string" || fields.refresh != null && typeof fields.refresh !== "string" || fields.expiration != null && (typeof fields.expiration !== "number" || !Number.isFinite(fields.expiration) || fields.expiration < 0))
+      const status = tokenTransition(typeof fields.status === "string" ? fields.status.trim() : fields.status);
+      if (!status || fields.access != null && typeof fields.access !== "string" || fields.refresh != null && typeof fields.refresh !== "string" || fields.expiration != null && (typeof fields.expiration !== "number" || !Number.isFinite(fields.expiration) || fields.expiration < 0)) {
         throw otpFailure(TorrowSdkErrorCategory2.InvalidResponse, cleanup);
-      if (status === TokenStatusValues2.Pending)
+      }
+      if (status === TokenStatusValues2.Pending) {
         return {
           status,
           cleanup,
@@ -254,6 +289,7 @@ function createOtpFlow(options) {
             pollIntervalSeconds: continuation.pollIntervalSeconds ?? 3
           }
         };
+      }
       if (status === TokenStatusValues2.AwaitingSmsCode) {
         const { pollIntervalSeconds: _interval, ...challenge } = continuation;
         return {
@@ -267,9 +303,12 @@ function createOtpFlow(options) {
           }
         };
       }
-      if (status === TokenStatusValues2.Failed) return { status, cleanup };
-      if (typeof fields.access !== "string" || !fields.access.trim())
+      if (status === TokenStatusValues2.Failed) {
+        return { status, cleanup };
+      }
+      if (typeof fields.access !== "string" || !fields.access.trim()) {
         throw otpFailure(TorrowSdkErrorCategory2.InvalidResponse, cleanup);
+      }
       return {
         status,
         tokens: {
@@ -298,28 +337,31 @@ function timestamp(value) {
   return typeof value === "number" && Number.isSafeInteger(value) && value >= 0 && value <= 864e13;
 }
 function methods(value) {
-  return Array.isArray(value) && value.every(
-    (method) => typeof method === "string" && isVerificationMethod(method)
-  );
+  return Array.isArray(value) && value.every((method) => typeof method === "string" && isVerificationMethod(method));
 }
 function supportedMethod(value, accountType) {
   return typeof value === "string" && isVerificationMethod(value) && (value !== VerificationMethodValues.UnknownMethod || accountType === "Email");
 }
 function validateStartInput(input) {
-  if (!isRecord(input) || !isRecord(input.account) || typeof input.account.accountType !== "string" || !isSendCodeAccountType(input.account.accountType) || typeof input.account.accountName !== "string" || !input.account.accountName.trim())
+  if (!isRecord(input) || !isRecord(input.account) || typeof input.account.accountType !== "string" || !isSendCodeAccountType(input.account.accountType) || typeof input.account.accountName !== "string" || !input.account.accountName.trim()) {
     throw otpFailure(TorrowSdkErrorCategory2.InvalidInput);
+  }
   for (const field of ["language", "captcha", "inviteSessionId"]) {
-    if (input[field] !== void 0 && typeof input[field] !== "string")
+    if (input[field] !== void 0 && typeof input[field] !== "string") {
       throw otpFailure(TorrowSdkErrorCategory2.InvalidInput);
+    }
   }
-  if (input.regionStorageId !== void 0 && !attempts(input.regionStorageId) || input.captchaType !== void 0 && (typeof input.captchaType !== "string" || !isAuthCaptchaType(input.captchaType)) || input.preferredMethod !== void 0 && (typeof input.preferredMethod !== "string" || !isVerificationMethod(input.preferredMethod)) || input.supportedMethods !== void 0 && !methods(input.supportedMethods))
+  if (input.regionStorageId !== void 0 && !attempts(input.regionStorageId) || input.captchaType !== void 0 && (typeof input.captchaType !== "string" || !isAuthCaptchaType(input.captchaType)) || input.preferredMethod !== void 0 && (typeof input.preferredMethod !== "string" || !isVerificationMethod(input.preferredMethod)) || input.supportedMethods !== void 0 && !methods(input.supportedMethods)) {
     throw otpFailure(TorrowSdkErrorCategory2.InvalidInput);
+  }
 }
 function validateChallenge(value) {
-  if (!isRecord(value) || typeof value.sessionId !== "string" || !value.sessionId.trim() || typeof value.accountType !== "string" || !isSendCodeAccountType(value.accountType) || !supportedMethod(value.usedMethod, value.accountType) || value.phase !== "Pending" /* Pending */ && value.phase !== "AwaitingCode" /* AwaitingCode */ || !timestamp(value.expiresAtMs) || value.expiresAtMs <= Date.now() || value.phase === "Pending" /* Pending */ !== (value.usedMethod === VerificationMethodValues.MtsMobileId))
+  if (!isRecord(value) || typeof value.sessionId !== "string" || !value.sessionId.trim() || typeof value.accountType !== "string" || !isSendCodeAccountType(value.accountType) || !supportedMethod(value.usedMethod, value.accountType) || value.phase !== "Pending" /* Pending */ && value.phase !== "AwaitingCode" /* AwaitingCode */ || !timestamp(value.expiresAtMs) || value.expiresAtMs <= Date.now() || value.phase === "Pending" /* Pending */ !== (value.usedMethod === VerificationMethodValues.MtsMobileId)) {
     throw otpFailure(OtpErrorReason2.InvalidChallenge);
-  if (value.codeLength !== void 0 && !codeLength(value.codeLength) || value.pollIntervalSeconds !== void 0 && !positive(value.pollIntervalSeconds) || value.attemptsRemaining !== void 0 && !attempts(value.attemptsRemaining) || value.nextSendAtMs !== void 0 && !timestamp(value.nextSendAtMs) || value.availableMethods !== void 0 && !methods(value.availableMethods))
+  }
+  if (value.codeLength !== void 0 && !codeLength(value.codeLength) || value.pollIntervalSeconds !== void 0 && !positive(value.pollIntervalSeconds) || value.attemptsRemaining !== void 0 && !attempts(value.attemptsRemaining) || value.nextSendAtMs !== void 0 && !timestamp(value.nextSendAtMs) || value.availableMethods !== void 0 && !methods(value.availableMethods)) {
     throw otpFailure(OtpErrorReason2.InvalidChallenge);
+  }
   return {
     sessionId: value.sessionId.trim(),
     accountType: value.accountType,
@@ -357,9 +399,7 @@ var MemoryTokenStorage = class {
 function resolveLocalStorage() {
   const g = globalThis;
   if (!g.localStorage || typeof g.localStorage.getItem !== "function") {
-    throw new Error(
-      "LocalStorageTokenStorage: globalThis.localStorage is not available in this environment"
-    );
+    throw new Error("LocalStorageTokenStorage: globalThis.localStorage is not available in this environment");
   }
   return g.localStorage;
 }
@@ -378,9 +418,13 @@ var LocalStorageTokenStorage = class {
   async load() {
     try {
       const raw = this.store.getItem(this.key);
-      if (!raw?.trim()) return {};
+      if (!raw?.trim()) {
+        return {};
+      }
       const parsed = JSON.parse(raw);
-      if (parsed === null || typeof parsed !== "object") return {};
+      if (parsed === null || typeof parsed !== "object") {
+        return {};
+      }
       const o = parsed;
       return {
         accessToken: typeof o.accessToken === "string" ? o.accessToken : void 0,
@@ -421,9 +465,15 @@ import {
 // ../../src/auth-session/auth-session-not-ready.ts
 import { AuthSessionErrorReason, TorrowSdkError as TorrowSdkError2, TorrowSdkErrorDomain as TorrowSdkErrorDomain2 } from "@torrow/sdk-client";
 function isAuthSessionNotReadyYet(error) {
-  if (!(error instanceof TorrowSdkError2)) return false;
-  if (error.detail?.domain === TorrowSdkErrorDomain2.AuthSession && error.detail.reason === AuthSessionErrorReason.SessionNotReady) return true;
-  if (!error.http) return false;
+  if (!(error instanceof TorrowSdkError2)) {
+    return false;
+  }
+  if (error.detail?.domain === TorrowSdkErrorDomain2.AuthSession && error.detail.reason === AuthSessionErrorReason.SessionNotReady) {
+    return true;
+  }
+  if (!error.http) {
+    return false;
+  }
   const body = error.getSensitiveDetails().body;
   const text = [error.http.apiErrorName, typeof body === "string" ? body : JSON.stringify(body ?? "")].join(" ").toLowerCase();
   return text.includes("session is not ready") || text.includes("unauthorized_client");
@@ -462,14 +512,12 @@ var SessionFailureStage = /* @__PURE__ */ ((SessionFailureStage2) => {
   return SessionFailureStage2;
 })(SessionFailureStage || {});
 function sessionFailure(error, context) {
-  const detail = { domain: TorrowSdkErrorDomain3.AuthSession, ...context.reason ? { reason: context.reason } : {} };
+  const detail = {
+    domain: TorrowSdkErrorDomain3.AuthSession,
+    ...context.reason ? { reason: context.reason } : {}
+  };
   if (context.category !== void 0) {
-    return new TorrowSdkError3({
-      ...context,
-      category: context.category,
-      detail,
-      sensitive: { cause: error }
-    });
+    return new TorrowSdkError3({ ...context, category: context.category, detail, sensitive: { cause: error } });
   }
   if (error instanceof TorrowSdkError3) {
     return error.withContext({
@@ -491,8 +539,12 @@ function sessionFailure(error, context) {
 
 // ../../src/auth-session/fetch-with-401-retry.ts
 function requestUrl(input) {
-  if (typeof input === "string") return input;
-  if (input instanceof URL) return input.href;
+  if (typeof input === "string") {
+    return input;
+  }
+  if (input instanceof URL) {
+    return input.href;
+  }
   return input.url;
 }
 function isAuthIdentityUrl(url) {
@@ -502,9 +554,13 @@ function createFetchWith401Retry(options) {
   const baseFetch = options.fetch ?? globalThis.fetch.bind(globalThis);
   const wrapped = async (input, init) => {
     const first = await baseFetch(input, init);
-    if (first.status !== 401) return first;
+    if (first.status !== 401) {
+      return first;
+    }
     const url = requestUrl(input);
-    if (isAuthIdentityUrl(url)) return first;
+    if (isAuthIdentityUrl(url)) {
+      return first;
+    }
     await options.refresh();
     const token = await options.getAccessToken();
     const headers = new Headers(init?.headers);
@@ -521,18 +577,28 @@ function createFetchWith401Retry(options) {
 // ../../src/auth-session/merge-tokens.ts
 import { isTokenRespReadyStatus } from "@torrow/sdk-client";
 function normalizeTokenResp(raw) {
-  if (raw === null || raw === void 0) return {};
+  if (raw === null || raw === void 0) {
+    return {};
+  }
   if (typeof raw === "string") {
     const t = raw.trim();
     return t ? { accessToken: t } : {};
   }
-  if (typeof raw !== "object") return {};
+  if (typeof raw !== "object") {
+    return {};
+  }
   const o = raw;
   const { access, refresh, expiration: expRaw, status: statusRaw } = tokenResponseFields(o);
   const out = {};
-  if (typeof access === "string" && access.trim()) out.accessToken = access.trim();
-  if (typeof refresh === "string" && refresh.trim()) out.refreshToken = refresh.trim();
-  if (typeof expRaw === "number" && Number.isFinite(expRaw)) out.expiration = expRaw;
+  if (typeof access === "string" && access.trim()) {
+    out.accessToken = access.trim();
+  }
+  if (typeof refresh === "string" && refresh.trim()) {
+    out.refreshToken = refresh.trim();
+  }
+  if (typeof expRaw === "number" && Number.isFinite(expRaw)) {
+    out.expiration = expRaw;
+  }
   if (typeof statusRaw === "string" && statusRaw.trim()) {
     out.status = statusRaw.trim();
   }
@@ -551,12 +617,20 @@ function decodeJwtJsonSegment(segment) {
 }
 function accessExpiresAtMsFromJwt(accessToken) {
   const parts = accessToken.split(".");
-  if (parts.length < 2) return void 0;
-  if (decodeJwtJsonSegment(parts[0]) === void 0) return void 0;
+  if (parts.length < 2) {
+    return void 0;
+  }
+  if (decodeJwtJsonSegment(parts[0]) === void 0) {
+    return void 0;
+  }
   const payload = decodeJwtJsonSegment(parts[1]);
-  if (payload === null || typeof payload !== "object") return void 0;
+  if (payload === null || typeof payload !== "object") {
+    return void 0;
+  }
   const exp = payload.exp;
-  if (typeof exp !== "number" || !Number.isFinite(exp)) return void 0;
+  if (typeof exp !== "number" || !Number.isFinite(exp)) {
+    return void 0;
+  }
   return exp * 1e3;
 }
 function accessTokenLooksLikeJwt(accessToken) {
@@ -591,9 +665,7 @@ function mergeAuthTokens(prev, tokens, opts) {
 function assertTokenRespReadyForStorage(tokens, context) {
   const status = tokens.status;
   if (!isTokenRespReadyStatus(status)) {
-    throw new Error(
-      `${context}: TokenResp.status=${status} (\u043E\u0436\u0438\u0434\u0430\u043B\u0441\u044F TokenReady). \u0422\u043E\u043A\u0435\u043D\u044B \u043D\u0435 \u0441\u043E\u0445\u0440\u0430\u043D\u044F\u0435\u043C.`
-    );
+    throw new Error(`${context}: TokenResp.status=${status} (\u043E\u0436\u0438\u0434\u0430\u043B\u0441\u044F TokenReady). \u0422\u043E\u043A\u0435\u043D\u044B \u043D\u0435 \u0441\u043E\u0445\u0440\u0430\u043D\u044F\u0435\u043C.`);
   }
   if (!tokens.accessToken?.trim() && !tokens.refreshToken?.trim()) {
     throw new Error(`${context}: TokenResp \u0431\u0435\u0437 accessToken \u0438 refreshToken.`);
@@ -605,9 +677,13 @@ function assertTokenRespReadyForStorage(tokens, context) {
 var DEFAULT_SKEW_MS = 3e4;
 var SESSION_CLOSED_MESSAGE = "TokenSession: session closed (logout)";
 function defaultOnRefreshFailure(err) {
-  if (!(err instanceof TorrowSdkError4) || !err.http) return "keep";
+  if (!(err instanceof TorrowSdkError4) || !err.http) {
+    return "keep";
+  }
   const s = err.http?.status;
-  if (s === 429 || s === 502 || s === 503 || s === 504) return "keep";
+  if (s === 429 || s === 502 || s === 503 || s === 504) {
+    return "keep";
+  }
   return "clear";
 }
 var TokenSession = class _TokenSession {
@@ -645,7 +721,11 @@ var TokenSession = class _TokenSession {
           category: TorrowSdkErrorCategory4.StorageFailure
         });
       }
-      effects.push({ area: TorrowSdkEffectArea.SessionMemory, step: AuthSessionEffectStep.SetTokens, state: TorrowSdkEffectState.Applied });
+      effects.push({
+        area: TorrowSdkEffectArea.SessionMemory,
+        step: AuthSessionEffectStep.SetTokens,
+        state: TorrowSdkEffectState.Applied
+      });
       failureAt = "InitializeDevice" /* InitializeDevice */;
       if (!session.tokenSnapshot.deviceId?.trim()) {
         const id = session.resolveDeviceInfo().deviceId?.trim();
@@ -700,7 +780,9 @@ var TokenSession = class _TokenSession {
   }
   /** Получить access после проактивного refresh; closed возвращает undefined без записи. */
   async getAccessToken() {
-    if (this.closed) return void 0;
+    if (this.closed) {
+      return void 0;
+    }
     try {
       await this.ensureFresh();
     } catch (error) {
@@ -723,7 +805,11 @@ var TokenSession = class _TokenSession {
       try {
         await this.applyTokenRespUnlocked(tokens, opts, effects);
       } catch (error) {
-        throw sessionFailure(error, { operation: "TokenSession.applyTokenResp", failureAt: "ApplyTokens" /* ApplyTokens */, effects });
+        throw sessionFailure(error, {
+          operation: "TokenSession.applyTokenResp",
+          failureAt: "ApplyTokens" /* ApplyTokens */,
+          effects
+        });
       }
     });
   }
@@ -734,7 +820,11 @@ var TokenSession = class _TokenSession {
       try {
         await this.clearTokensUnlocked(effects);
       } catch (error) {
-        throw sessionFailure(error, { operation: "TokenSession.clearTokens", failureAt: "ClearTokens" /* ClearTokens */, effects });
+        throw sessionFailure(error, {
+          operation: "TokenSession.clearTokens",
+          failureAt: "ClearTokens" /* ClearTokens */,
+          effects
+        });
       }
     });
   }
@@ -746,7 +836,11 @@ var TokenSession = class _TokenSession {
     const effects = [];
     await this.runExclusive(async () => {
       this.closed = true;
-      effects.push({ area: TorrowSdkEffectArea.SessionMemory, step: AuthSessionEffectStep.CloseSession, state: TorrowSdkEffectState.Applied });
+      effects.push({
+        area: TorrowSdkEffectArea.SessionMemory,
+        step: AuthSessionEffectStep.CloseSession,
+        state: TorrowSdkEffectState.Applied
+      });
       const refresh = this.tokenSnapshot.refreshToken?.trim();
       if (refresh) {
         let state = TorrowSdkEffectState.Applied;
@@ -763,7 +857,11 @@ var TokenSession = class _TokenSession {
       try {
         await this.clearTokensUnlocked(effects);
       } catch (error) {
-        throw sessionFailure(error, { operation: "TokenSession.logout", failureAt: "ClearTokens" /* ClearTokens */, effects });
+        throw sessionFailure(error, {
+          operation: "TokenSession.logout",
+          failureAt: "ClearTokens" /* ClearTokens */,
+          effects
+        });
       }
     });
   }
@@ -799,7 +897,9 @@ var TokenSession = class _TokenSession {
       const identity = this.identityClient();
       let resp;
       try {
-        resp = normalizeTokenResp(await requestAuthToken(identity, { sessionId, code, scopes, deviceInfo }, args.signal));
+        resp = normalizeTokenResp(
+          await requestAuthToken(identity, { sessionId, code, scopes, deviceInfo }, args.signal)
+        );
       } catch (error) {
         effects.push({
           area: TorrowSdkEffectArea.Remote,
@@ -818,7 +918,11 @@ var TokenSession = class _TokenSession {
       }
       failureAt = "ValidateTokens" /* ValidateTokens */;
       if (tokenTransition(resp.status, true) !== TokenStatusValues3.TokenReady) {
-        effects.push({ area: TorrowSdkEffectArea.Remote, step: AuthSessionEffectStep.IssueTokens, state: TorrowSdkEffectState.Unknown });
+        effects.push({
+          area: TorrowSdkEffectArea.Remote,
+          step: AuthSessionEffectStep.IssueTokens,
+          state: TorrowSdkEffectState.Unknown
+        });
         throw sessionFailure(void 0, {
           operation: "TokenSession.requestTokenWithCode",
           failureAt,
@@ -831,7 +935,11 @@ var TokenSession = class _TokenSession {
       try {
         ready = assertTokenRespReadyForStorage(resp, "TokenSession.requestTokenWithCode");
       } catch (error) {
-        effects.push({ area: TorrowSdkEffectArea.Remote, step: AuthSessionEffectStep.IssueTokens, state: TorrowSdkEffectState.Unknown });
+        effects.push({
+          area: TorrowSdkEffectArea.Remote,
+          step: AuthSessionEffectStep.IssueTokens,
+          state: TorrowSdkEffectState.Unknown
+        });
         throw sessionFailure(error, {
           operation: "TokenSession.requestTokenWithCode",
           failureAt,
@@ -839,7 +947,11 @@ var TokenSession = class _TokenSession {
           category: TorrowSdkErrorCategory4.InvalidResponse
         });
       }
-      effects.push({ area: TorrowSdkEffectArea.Remote, step: AuthSessionEffectStep.IssueTokens, state: TorrowSdkEffectState.Applied });
+      effects.push({
+        area: TorrowSdkEffectArea.Remote,
+        step: AuthSessionEffectStep.IssueTokens,
+        state: TorrowSdkEffectState.Applied
+      });
       failureAt = "ApplyTokens" /* ApplyTokens */;
       await this.runExclusive(() => this.applyTokenRespUnlocked(ready, { replace: true }, effects));
       return ready;
@@ -867,10 +979,16 @@ var TokenSession = class _TokenSession {
           });
         }
         const result = await this.refreshWithFailurePolicy(effects);
-        if (result.outcome === "refreshed") return result.resp;
+        if (result.outcome === "refreshed") {
+          return result.resp;
+        }
         throw result.error ?? this.lastRefreshError;
       } catch (error) {
-        throw sessionFailure(error, { operation: "TokenSession.refresh", failureAt: "RefreshTokens" /* RefreshTokens */, effects });
+        throw sessionFailure(error, {
+          operation: "TokenSession.refresh",
+          failureAt: "RefreshTokens" /* RefreshTokens */,
+          effects
+        });
       }
     });
   }
@@ -881,7 +999,11 @@ var TokenSession = class _TokenSession {
       try {
         await this.ensureFreshImpl(effects);
       } catch (error) {
-        throw sessionFailure(error, { operation: "TokenSession.ensureFresh", failureAt: "RefreshTokens" /* RefreshTokens */, effects });
+        throw sessionFailure(error, {
+          operation: "TokenSession.ensureFresh",
+          failureAt: "RefreshTokens" /* RefreshTokens */,
+          effects
+        });
       }
     });
   }
@@ -914,7 +1036,11 @@ var TokenSession = class _TokenSession {
       // Host TTL survives refresh without expiration only while still fresh (incl. skew); else cleared → opaque until 401.
       keepPrevTtlIfExpiresAfterMs: Date.now() + (this.opts.accessTokenSkewMs ?? DEFAULT_SKEW_MS)
     });
-    effects.push({ area: TorrowSdkEffectArea.SessionMemory, step: AuthSessionEffectStep.SetTokens, state: TorrowSdkEffectState.Applied });
+    effects.push({
+      area: TorrowSdkEffectArea.SessionMemory,
+      step: AuthSessionEffectStep.SetTokens,
+      state: TorrowSdkEffectState.Applied
+    });
     await this.persist(true, effects);
   }
   async clearTokensUnlocked(effects = []) {
@@ -924,7 +1050,11 @@ var TokenSession = class _TokenSession {
       refreshToken: void 0,
       accessExpiresAtMs: void 0
     };
-    effects.push({ area: TorrowSdkEffectArea.SessionMemory, step: AuthSessionEffectStep.ClearTokens, state: TorrowSdkEffectState.Applied });
+    effects.push({
+      area: TorrowSdkEffectArea.SessionMemory,
+      step: AuthSessionEffectStep.ClearTokens,
+      state: TorrowSdkEffectState.Applied
+    });
     await this.persist(true, effects, true);
   }
   /** Caller must hold `runExclusive`. `refreshWithFailurePolicy` skips when no refreshToken; guard here is intentional defense-in-depth. */
@@ -955,7 +1085,11 @@ var TokenSession = class _TokenSession {
     try {
       assertTokenRespReadyForStorage(normalized, "TokenSession.refresh");
     } catch (error) {
-      effects.push({ area: TorrowSdkEffectArea.Remote, step: AuthSessionEffectStep.RefreshTokens, state: TorrowSdkEffectState.Unknown });
+      effects.push({
+        area: TorrowSdkEffectArea.Remote,
+        step: AuthSessionEffectStep.RefreshTokens,
+        state: TorrowSdkEffectState.Unknown
+      });
       throw sessionFailure(error, {
         operation: "TokenSession",
         failureAt: "ValidateTokens" /* ValidateTokens */,
@@ -963,19 +1097,29 @@ var TokenSession = class _TokenSession {
         category: TorrowSdkErrorCategory4.InvalidResponse
       });
     }
-    effects.push({ area: TorrowSdkEffectArea.Remote, step: AuthSessionEffectStep.RefreshTokens, state: TorrowSdkEffectState.Applied });
+    effects.push({
+      area: TorrowSdkEffectArea.Remote,
+      step: AuthSessionEffectStep.RefreshTokens,
+      state: TorrowSdkEffectState.Applied
+    });
     await this.applyTokenRespUnlocked(resp, void 0, effects);
     return resp;
   }
   /** Caller must hold `runExclusive`; сведения принадлежат только текущей операции. */
   async refreshWithFailurePolicy(effects = []) {
-    if (this.closed || !this.tokenSnapshot.refreshToken?.trim()) return { outcome: "unchanged" };
+    if (this.closed || !this.tokenSnapshot.refreshToken?.trim()) {
+      return { outcome: "unchanged" };
+    }
     try {
       const resp = await this.refreshUnlocked(effects);
       this.lastRefreshError = void 0;
       return { outcome: "refreshed", resp };
     } catch (cause) {
-      const error = sessionFailure(cause, { operation: "TokenSession", failureAt: "RefreshTokens" /* RefreshTokens */, effects });
+      const error = sessionFailure(cause, {
+        operation: "TokenSession",
+        failureAt: "RefreshTokens" /* RefreshTokens */,
+        effects
+      });
       this.lastRefreshError = error.withContext({ effects: void 0, operation: void 0, failureAt: void 0 });
       let action;
       try {
@@ -989,8 +1133,12 @@ var TokenSession = class _TokenSession {
           reason: AuthSessionErrorReason2.CallbackFailed
         });
       }
-      if (action === "throw") throw error;
-      if (action === "keep") return { outcome: "unchanged", error };
+      if (action === "throw") {
+        throw error;
+      }
+      if (action === "keep") {
+        return { outcome: "unchanged", error };
+      }
       await this.clearTokensUnlocked(effects);
       return { outcome: "cleared", error: error.withContext({ effects }) };
     }
@@ -1009,7 +1157,9 @@ var TokenSession = class _TokenSession {
     }
   }
   async ensureFreshImpl(effects = []) {
-    if (this.closed) return;
+    if (this.closed) {
+      return;
+    }
     const skew = this.opts.accessTokenSkewMs ?? DEFAULT_SKEW_MS;
     const access = this.tokenSnapshot.accessToken?.trim() ?? "";
     const expires = this.tokenSnapshot.accessExpiresAtMs ?? 0;
@@ -1045,7 +1195,9 @@ var TokenSession = class _TokenSession {
       return "authenticated";
     }
     const hasAny = Boolean(access) || Boolean(this.tokenSnapshot.refreshToken?.trim()) || typeof expires === "number" && expires > 0;
-    if (!hasAny) return "unauthenticated";
+    if (!hasAny) {
+      return "unauthenticated";
+    }
     return "expired";
   }
   emitStatusChange() {
@@ -1077,7 +1229,9 @@ var TokenSession = class _TokenSession {
       fetchImpl = createFetchWith401Retry({
         fetch: this.opts.fetch,
         getAccessToken: async () => {
-          if (this.closed) return void 0;
+          if (this.closed) {
+            return void 0;
+          }
           return this.tokenSnapshot.accessToken?.trim() || void 0;
         },
         refresh: async () => {
@@ -1098,9 +1252,7 @@ var TokenSession = class _TokenSession {
       fetch: fetchImpl,
       defaultHeaders: this.opts.defaultHeaders,
       userAgent: this.opts.userAgent,
-      authIdentityBasic: appCredentialsToAuthIdentityBasic(
-        resolveAppCredentials(this.opts.appCredentials)
-      ),
+      authIdentityBasic: appCredentialsToAuthIdentityBasic(resolveAppCredentials(this.opts.appCredentials)),
       getAccessToken: async () => this.getAccessToken()
     });
   }
@@ -1122,7 +1274,9 @@ var TokenSession = class _TokenSession {
       });
     }
     effects[effects.length - 1] = { ...effect, state: TorrowSdkEffectState.Applied };
-    if (emitStatus) this.emitStatusChange();
+    if (emitStatus) {
+      this.emitStatusChange();
+    }
   }
 };
 
@@ -1200,15 +1354,28 @@ async function runLinkLogin(session, options) {
       });
       throw error;
     }
-    effects.push({ area: TorrowSdkEffectArea2.Remote, step: AuthSessionEffectStep2.CreateAuthSession, state: TorrowSdkEffectState2.Unknown });
+    effects.push({
+      area: TorrowSdkEffectArea2.Remote,
+      step: AuthSessionEffectStep2.CreateAuthSession,
+      state: TorrowSdkEffectState2.Unknown
+    });
     failureAt = "ValidateResponse" /* ValidateResponse */;
     const sessionId = createResp.sessionId?.trim();
     const code = createResp.code?.trim();
     const authUrl = createResp.authUrl?.trim();
     if (!sessionId || !code || !authUrl) {
-      throw sessionFailure(void 0, { operation: "TorrowAuth.loginWithLink", failureAt, effects: [], category: TorrowSdkErrorCategory5.InvalidResponse });
+      throw sessionFailure(void 0, {
+        operation: "TorrowAuth.loginWithLink",
+        failureAt,
+        effects: [],
+        category: TorrowSdkErrorCategory5.InvalidResponse
+      });
     }
-    effects[effects.length - 1] = { area: TorrowSdkEffectArea2.Remote, step: AuthSessionEffectStep2.CreateAuthSession, state: TorrowSdkEffectState2.Applied };
+    effects[effects.length - 1] = {
+      area: TorrowSdkEffectArea2.Remote,
+      step: AuthSessionEffectStep2.CreateAuthSession,
+      state: TorrowSdkEffectState2.Applied
+    };
     failureAt = "OnLink" /* OnLink */;
     await options.onLink(authUrl);
     const scopes = options.scopes && options.scopes.length > 0 ? options.scopes : [...DefaultAuthScopes3];
@@ -1226,9 +1393,17 @@ async function runLinkLogin(session, options) {
           signal: options.signal
         });
       } catch (e) {
-        if (!isAuthSessionNotReadyYet(e)) throw e;
+        if (!isAuthSessionNotReadyYet(e)) {
+          throw e;
+        }
         if (Date.now() >= deadline) {
-          throw sessionFailure(e, { operation: "TorrowAuth.loginWithLink", failureAt, effects: [], category: TorrowSdkErrorCategory5.InvalidState, reason: AuthSessionErrorReason3.SessionNotReady });
+          throw sessionFailure(e, {
+            operation: "TorrowAuth.loginWithLink",
+            failureAt,
+            effects: [],
+            category: TorrowSdkErrorCategory5.InvalidState,
+            reason: AuthSessionErrorReason3.SessionNotReady
+          });
         }
         await sleepMs(intervalMs, options.signal);
       }
@@ -1239,7 +1414,10 @@ async function runLinkLogin(session, options) {
     throw sessionFailure(error, {
       operation: "TorrowAuth.loginWithLink",
       failureAt,
-      effects: [...effects, ...failureAt === "PollTokens" /* PollTokens */ && error instanceof TorrowSdkError5 ? error.effects ?? [] : []],
+      effects: [
+        ...effects,
+        ...failureAt === "PollTokens" /* PollTokens */ && error instanceof TorrowSdkError5 ? error.effects ?? [] : []
+      ],
       ...callback ? { category: TorrowSdkErrorCategory5.Unknown, reason: AuthSessionErrorReason3.CallbackFailed } : {}
     });
   }
@@ -1377,7 +1555,9 @@ function scopesOrDefault2(scopes) {
   return scopes && scopes.length > 0 ? scopes : [...DefaultAuthScopes5];
 }
 function effectiveCodeLength(raw, fallback) {
-  if (typeof raw === "number" && raw > 0) return raw;
+  if (typeof raw === "number" && raw > 0) {
+    return raw;
+  }
   return fallback > 0 ? fallback : void 0;
 }
 async function requestTokenOrThrow(client, body, signal) {
@@ -1413,13 +1593,21 @@ async function runOtpLoginWithEffects(client, options) {
       });
       throw otpHttpFailure(error);
     }
-    effects.push({ area: TorrowSdkEffectArea3.Remote, step: AuthSessionEffectStep3.SendCode, state: TorrowSdkEffectState3.Unknown });
+    effects.push({
+      area: TorrowSdkEffectArea3.Remote,
+      step: AuthSessionEffectStep3.SendCode,
+      state: TorrowSdkEffectState3.Unknown
+    });
     failureAt = "ValidateResponse" /* ValidateResponse */;
     const sessionId = sendResp.sessionId?.trim();
     if (!sessionId) {
       throw otpFailure(TorrowSdkErrorCategory7.InvalidResponse);
     }
-    effects[effects.length - 1] = { area: TorrowSdkEffectArea3.Remote, step: AuthSessionEffectStep3.SendCode, state: TorrowSdkEffectState3.Applied };
+    effects[effects.length - 1] = {
+      area: TorrowSdkEffectArea3.Remote,
+      step: AuthSessionEffectStep3.SendCode,
+      state: TorrowSdkEffectState3.Applied
+    };
     const result = {
       accountName,
       accountType,
@@ -1456,7 +1644,11 @@ async function runOtpLoginWithEffects(client, options) {
             return code2;
           }
         });
-        effects.push({ area: TorrowSdkEffectArea3.Remote, step: AuthSessionEffectStep3.IssueTokens, state: TorrowSdkEffectState3.Applied });
+        effects.push({
+          area: TorrowSdkEffectArea3.Remote,
+          step: AuthSessionEffectStep3.IssueTokens,
+          state: TorrowSdkEffectState3.Applied
+        });
         return { tokens, effects };
       } catch (error) {
         throw otpHttpFailure(error);
@@ -1496,11 +1688,18 @@ async function runOtpLoginWithEffects(client, options) {
     } catch (cause) {
       throw otpFailure(TorrowSdkErrorCategory7.InvalidResponse, void 0, cause);
     }
-    effects.push({ area: TorrowSdkEffectArea3.Remote, step: AuthSessionEffectStep3.IssueTokens, state: TorrowSdkEffectState3.Applied });
+    effects.push({
+      area: TorrowSdkEffectArea3.Remote,
+      step: AuthSessionEffectStep3.IssueTokens,
+      state: TorrowSdkEffectState3.Applied
+    });
     return { tokens: ready, effects };
   } catch (cause) {
     const error = options.signal?.aborted && !(cause instanceof TorrowSdkError7) ? new TorrowSdkError7({ category: TorrowSdkErrorCategory7.Cancelled, sensitive: { cause } }) : cause;
-    const tokenStages = ["IssueTokens" /* IssueTokens */, "PollTokens" /* PollTokens */];
+    const tokenStages = [
+      "IssueTokens" /* IssueTokens */,
+      "PollTokens" /* PollTokens */
+    ];
     if (tokenStages.includes(failureAt)) {
       effects.push({
         area: TorrowSdkEffectArea3.Remote,
@@ -1560,12 +1759,14 @@ var TorrowAuth = {
     let failureAt = "ValidateInput" /* ValidateInput */;
     try {
       const accountName = options.account.accountName.trim();
-      if (!accountName) throw sessionFailure(void 0, {
-        operation: "TorrowAuth.loginWithOtp",
-        failureAt,
-        effects,
-        category: TorrowSdkErrorCategory8.InvalidInput
-      });
+      if (!accountName) {
+        throw sessionFailure(void 0, {
+          operation: "TorrowAuth.loginWithOtp",
+          failureAt,
+          effects,
+          category: TorrowSdkErrorCategory8.InvalidInput
+        });
+      }
       failureAt = "OpenSession" /* OpenSession */;
       const opened = await TokenSession.openWithEffects(sessionOpenOptsForLogin(options));
       const session = opened.session;
@@ -1660,7 +1861,11 @@ var TorrowAuth = {
       const explicitTtl = options.accessExpiresAtMs;
       const accessExpiresAtMs = typeof explicitTtl === "number" && Number.isFinite(explicitTtl) && explicitTtl > 0 ? explicitTtl : accessExpiresAtMsFromJwt(accessToken);
       failureAt = "SeedStorage" /* SeedStorage */;
-      effects.push({ area: TorrowSdkEffectArea4.Storage, step: AuthSessionEffectStep4.SaveTokens, state: TorrowSdkEffectState4.Unknown });
+      effects.push({
+        area: TorrowSdkEffectArea4.Storage,
+        step: AuthSessionEffectStep4.SaveTokens,
+        state: TorrowSdkEffectState4.Unknown
+      });
       try {
         await options.tokenStorage.save({
           accessToken,
@@ -1681,7 +1886,9 @@ var TorrowAuth = {
       try {
         return await TorrowAuth.connect(options);
       } catch (error) {
-        if (error instanceof TorrowSdkError8) effects.push(...error.effects ?? []);
+        if (error instanceof TorrowSdkError8) {
+          effects.push(...error.effects ?? []);
+        }
         throw error;
       }
     } catch (error) {