@uniformdev/mesh-sdk 20.50.2-alpha.39 → 20.50.2-alpha.77

package/dist/index.esm.js

@@ -8,6 +8,48 @@ var __privateSet = (obj, member, value, setter) => (__accessCheck(obj, member, "
 var __privateMethod = (obj, member, method) => (__accessCheck(obj, member, "access private method"), method);
 
 // src/clients/DelegationTokenClient.ts
+var DelegationTokenError = class extends Error {
+  constructor(status, kind, publicMessage) {
+    super(publicMessage);
+    this.name = "DelegationTokenError";
+    this.status = status;
+    this.kind = kind;
+  }
+};
+var PUBLIC_MESSAGES = {
+  bad_request: "Token exchange request was rejected as invalid",
+  unauthenticated: "Token exchange authentication failed",
+  forbidden: "Token exchange forbidden by server",
+  not_found: "Token exchange target was not found",
+  rate_limited: "Token exchange rate limit exceeded",
+  server_error: "Token exchange server error",
+  unknown: "Token exchange failed"
+};
+function classifyDelegationTokenStatus(status) {
+  if (status === 400) {
+    return "bad_request";
+  }
+  if (status === 401) {
+    return "unauthenticated";
+  }
+  if (status === 403) {
+    return "forbidden";
+  }
+  if (status === 404) {
+    return "not_found";
+  }
+  if (status === 429) {
+    return "rate_limited";
+  }
+  if (status >= 500) {
+    return "server_error";
+  }
+  return "unknown";
+}
+function buildDelegationTokenError(status) {
+  const kind = classifyDelegationTokenStatus(status);
+  return new DelegationTokenError(status, kind, PUBLIC_MESSAGES[kind]);
+}
 var _options, _DelegationTokenClient_instances, post_fn;
 var DelegationTokenClient = class {
   constructor(options) {
@@ -18,6 +60,8 @@ var DelegationTokenClient = class {
   /**
    * Exchanges a short-lived session token for a delegation token and refresh token.
    * The session token is obtained by the integration's frontend via `sdk.getSessionToken()`.
+   *
+   * @deprecated This beta identity delegation API may change with breaking changes.
    */
   async exchangeSessionToken(sessionToken) {
     return __privateMethod(this, _DelegationTokenClient_instances, post_fn).call(this, {
@@ -28,8 +72,15 @@ var DelegationTokenClient = class {
     });
   }
   /**
-   * Exchanges a refresh token for a new delegation token and refresh token.
-   * Implements rolling refresh — each refresh token can only be used once.
+   * Exchanges a refresh token for a new delegation token and a new refresh token.
+   *
+   * Replay posture: refresh tokens are bearer credentials that are valid until
+   * their server-side expiry. They are NOT single-use — a captured refresh token can be
+   * replayed by an attacker that also has the integration secret until it expires.
+   * Single-use enforcement (refresh-token storage, family/jti tracking, replay revocation)
+   * is tracked in `UNI-9279`.
+   *
+   * @deprecated This beta identity delegation API may change with breaking changes.
    */
   async refreshDelegationToken(refreshToken) {
     return __privateMethod(this, _DelegationTokenClient_instances, post_fn).call(this, {
@@ -43,7 +94,6 @@ var DelegationTokenClient = class {
 _options = new WeakMap();
 _DelegationTokenClient_instances = new WeakSet();
 post_fn = async function(body) {
-  var _a;
   const url = `${__privateGet(this, _options).apiHost}/api/v1/token`;
   const response = await fetch(url, {
     method: "POST",
@@ -51,32 +101,15 @@ post_fn = async function(body) {
     body: JSON.stringify(body)
   });
   if (!response.ok) {
-    const text = await response.text().catch(() => "");
-    const detail = (_a = extractErrorMessage(text)) != null ? _a : text;
-    throw new Error(`Token exchange failed (${response.status}): ${detail}`);
+    await response.text().catch(() => "");
+    throw buildDelegationTokenError(response.status);
   }
   return await response.json();
 };
-function extractErrorMessage(text) {
-  try {
-    const parsed = JSON.parse(text);
-    if (typeof parsed.errorMessage === "string") {
-      return parsed.errorMessage;
-    }
-    if (typeof parsed.error === "string") {
-      return parsed.error;
-    }
-    if (typeof parsed.message === "string") {
-      return parsed.message;
-    }
-  } catch (e) {
-  }
-  return void 0;
-}
 
 // src/clients/IntegrationDefinitionClient.ts
 import { ApiClient } from "@uniformdev/context/api";
-var _url;
+var _url, _credentialsUrl;
 var _IntegrationDefinitionClient = class _IntegrationDefinitionClient extends ApiClient {
   constructor(options) {
     super(options);
@@ -87,7 +120,7 @@ var _IntegrationDefinitionClient = class _IntegrationDefinitionClient extends Ap
     const fetchUri = this.createUrl(__privateGet(_IntegrationDefinitionClient, _url), { ...options, teamId });
     return await this.apiClient(fetchUri);
   }
-  /** Creates or updates a mesh app definition on a team */
+  /** Creates or updates a mesh app definition on a team. Identity-delegation credentials must be minted separately via {@link rotateCredential}. */
   async upsert(body) {
     const fetchUri = this.createUrl(__privateGet(_IntegrationDefinitionClient, _url));
     return await this.apiClient(fetchUri, {
@@ -104,9 +137,37 @@ var _IntegrationDefinitionClient = class _IntegrationDefinitionClient extends Ap
       expectNoContent: true
     });
   }
+  /**
+   * Mints or rotates an identity-delegation credential for an integration definition. The plaintext
+   * `appSecret` is returned exactly once and is not retrievable afterwards — Uniform stores only
+   * the hash. A successful response invalidates any previously-issued secret of the same kind.
+   * Caller must be a team admin.
+   */
+  async rotateCredential(body) {
+    const fetchUri = this.createUrl(__privateGet(_IntegrationDefinitionClient, _credentialsUrl));
+    return await this.apiClient(fetchUri, {
+      method: "POST",
+      body: JSON.stringify({ ...body, teamId: this.options.teamId })
+    });
+  }
+  /**
+   * Revokes an identity-delegation credential. Future delegation grants and refreshes will fail
+   * until a new credential is minted; in-flight delegation tokens remain valid until natural
+   * expiry (up to ~15 minutes). Caller must be a team admin.
+   */
+  async revokeCredential(body) {
+    const fetchUri = this.createUrl(__privateGet(_IntegrationDefinitionClient, _credentialsUrl));
+    await this.apiClient(fetchUri, {
+      method: "DELETE",
+      body: JSON.stringify({ ...body, teamId: this.options.teamId }),
+      expectNoContent: true
+    });
+  }
 };
 _url = new WeakMap();
+_credentialsUrl = new WeakMap();
 __privateAdd(_IntegrationDefinitionClient, _url, "/api/v1/integration-definitions");
+__privateAdd(_IntegrationDefinitionClient, _credentialsUrl, "/api/v1/integration-credentials");
 var IntegrationDefinitionClient = _IntegrationDefinitionClient;
 
 // src/clients/IntegrationInstallationClient.ts
@@ -200,7 +261,7 @@ var getLogger = (prefix, debug) => {
 };
 
 // src/temp/version.ts
-var UNIFORM_MESH_SDK_VERSION = "20.60.0";
+var UNIFORM_MESH_SDK_VERSION = "20.61.1";
 
 // src/framepost/constants.ts
 var DEFAULT_REQUEST_TIMEOUT = 5e3;
@@ -916,6 +977,7 @@ var hasRole = (role, user) => {
 };
 export {
   DelegationTokenClient,
+  DelegationTokenError,
   IntegrationDefinitionClient,
   IntegrationInstallationClient,
   functionCallSystemParameters,

package/dist/index.js

@@ -39,6 +39,7 @@ var __privateMethod = (obj, member, method) => (__accessCheck(obj, member, "acce
 var src_exports = {};
 __export(src_exports, {
   DelegationTokenClient: () => DelegationTokenClient,
+  DelegationTokenError: () => DelegationTokenError,
   IntegrationDefinitionClient: () => IntegrationDefinitionClient,
   IntegrationInstallationClient: () => IntegrationInstallationClient,
   functionCallSystemParameters: () => functionCallSystemParameters,
@@ -50,6 +51,48 @@ __export(src_exports, {
 module.exports = __toCommonJS(src_exports);
 
 // src/clients/DelegationTokenClient.ts
+var DelegationTokenError = class extends Error {
+  constructor(status, kind, publicMessage) {
+    super(publicMessage);
+    this.name = "DelegationTokenError";
+    this.status = status;
+    this.kind = kind;
+  }
+};
+var PUBLIC_MESSAGES = {
+  bad_request: "Token exchange request was rejected as invalid",
+  unauthenticated: "Token exchange authentication failed",
+  forbidden: "Token exchange forbidden by server",
+  not_found: "Token exchange target was not found",
+  rate_limited: "Token exchange rate limit exceeded",
+  server_error: "Token exchange server error",
+  unknown: "Token exchange failed"
+};
+function classifyDelegationTokenStatus(status) {
+  if (status === 400) {
+    return "bad_request";
+  }
+  if (status === 401) {
+    return "unauthenticated";
+  }
+  if (status === 403) {
+    return "forbidden";
+  }
+  if (status === 404) {
+    return "not_found";
+  }
+  if (status === 429) {
+    return "rate_limited";
+  }
+  if (status >= 500) {
+    return "server_error";
+  }
+  return "unknown";
+}
+function buildDelegationTokenError(status) {
+  const kind = classifyDelegationTokenStatus(status);
+  return new DelegationTokenError(status, kind, PUBLIC_MESSAGES[kind]);
+}
 var _options, _DelegationTokenClient_instances, post_fn;
 var DelegationTokenClient = class {
   constructor(options) {
@@ -60,6 +103,8 @@ var DelegationTokenClient = class {
   /**
    * Exchanges a short-lived session token for a delegation token and refresh token.
    * The session token is obtained by the integration's frontend via `sdk.getSessionToken()`.
+   *
+   * @deprecated This beta identity delegation API may change with breaking changes.
    */
   async exchangeSessionToken(sessionToken) {
     return __privateMethod(this, _DelegationTokenClient_instances, post_fn).call(this, {
@@ -70,8 +115,15 @@ var DelegationTokenClient = class {
     });
   }
   /**
-   * Exchanges a refresh token for a new delegation token and refresh token.
-   * Implements rolling refresh — each refresh token can only be used once.
+   * Exchanges a refresh token for a new delegation token and a new refresh token.
+   *
+   * Replay posture: refresh tokens are bearer credentials that are valid until
+   * their server-side expiry. They are NOT single-use — a captured refresh token can be
+   * replayed by an attacker that also has the integration secret until it expires.
+   * Single-use enforcement (refresh-token storage, family/jti tracking, replay revocation)
+   * is tracked in `UNI-9279`.
+   *
+   * @deprecated This beta identity delegation API may change with breaking changes.
    */
   async refreshDelegationToken(refreshToken) {
     return __privateMethod(this, _DelegationTokenClient_instances, post_fn).call(this, {
@@ -85,7 +137,6 @@ var DelegationTokenClient = class {
 _options = new WeakMap();
 _DelegationTokenClient_instances = new WeakSet();
 post_fn = async function(body) {
-  var _a;
   const url = `${__privateGet(this, _options).apiHost}/api/v1/token`;
   const response = await fetch(url, {
     method: "POST",
@@ -93,32 +144,15 @@ post_fn = async function(body) {
     body: JSON.stringify(body)
   });
   if (!response.ok) {
-    const text = await response.text().catch(() => "");
-    const detail = (_a = extractErrorMessage(text)) != null ? _a : text;
-    throw new Error(`Token exchange failed (${response.status}): ${detail}`);
+    await response.text().catch(() => "");
+    throw buildDelegationTokenError(response.status);
   }
   return await response.json();
 };
-function extractErrorMessage(text) {
-  try {
-    const parsed = JSON.parse(text);
-    if (typeof parsed.errorMessage === "string") {
-      return parsed.errorMessage;
-    }
-    if (typeof parsed.error === "string") {
-      return parsed.error;
-    }
-    if (typeof parsed.message === "string") {
-      return parsed.message;
-    }
-  } catch (e) {
-  }
-  return void 0;
-}
 
 // src/clients/IntegrationDefinitionClient.ts
 var import_api = require("@uniformdev/context/api");
-var _url;
+var _url, _credentialsUrl;
 var _IntegrationDefinitionClient = class _IntegrationDefinitionClient extends import_api.ApiClient {
   constructor(options) {
     super(options);
@@ -129,7 +163,7 @@ var _IntegrationDefinitionClient = class _IntegrationDefinitionClient extends im
     const fetchUri = this.createUrl(__privateGet(_IntegrationDefinitionClient, _url), { ...options, teamId });
     return await this.apiClient(fetchUri);
   }
-  /** Creates or updates a mesh app definition on a team */
+  /** Creates or updates a mesh app definition on a team. Identity-delegation credentials must be minted separately via {@link rotateCredential}. */
   async upsert(body) {
     const fetchUri = this.createUrl(__privateGet(_IntegrationDefinitionClient, _url));
     return await this.apiClient(fetchUri, {
@@ -146,9 +180,37 @@ var _IntegrationDefinitionClient = class _IntegrationDefinitionClient extends im
       expectNoContent: true
     });
   }
+  /**
+   * Mints or rotates an identity-delegation credential for an integration definition. The plaintext
+   * `appSecret` is returned exactly once and is not retrievable afterwards — Uniform stores only
+   * the hash. A successful response invalidates any previously-issued secret of the same kind.
+   * Caller must be a team admin.
+   */
+  async rotateCredential(body) {
+    const fetchUri = this.createUrl(__privateGet(_IntegrationDefinitionClient, _credentialsUrl));
+    return await this.apiClient(fetchUri, {
+      method: "POST",
+      body: JSON.stringify({ ...body, teamId: this.options.teamId })
+    });
+  }
+  /**
+   * Revokes an identity-delegation credential. Future delegation grants and refreshes will fail
+   * until a new credential is minted; in-flight delegation tokens remain valid until natural
+   * expiry (up to ~15 minutes). Caller must be a team admin.
+   */
+  async revokeCredential(body) {
+    const fetchUri = this.createUrl(__privateGet(_IntegrationDefinitionClient, _credentialsUrl));
+    await this.apiClient(fetchUri, {
+      method: "DELETE",
+      body: JSON.stringify({ ...body, teamId: this.options.teamId }),
+      expectNoContent: true
+    });
+  }
 };
 _url = new WeakMap();
+_credentialsUrl = new WeakMap();
 __privateAdd(_IntegrationDefinitionClient, _url, "/api/v1/integration-definitions");
+__privateAdd(_IntegrationDefinitionClient, _credentialsUrl, "/api/v1/integration-credentials");
 var IntegrationDefinitionClient = _IntegrationDefinitionClient;
 
 // src/clients/IntegrationInstallationClient.ts
@@ -242,7 +304,7 @@ var getLogger = (prefix, debug) => {
 };
 
 // src/temp/version.ts
-var UNIFORM_MESH_SDK_VERSION = "20.60.0";
+var UNIFORM_MESH_SDK_VERSION = "20.61.1";
 
 // src/framepost/constants.ts
 var DEFAULT_REQUEST_TIMEOUT = 5e3;
@@ -959,6 +1021,7 @@ var hasRole = (role, user) => {
 // Annotate the CommonJS export names for ESM import in node:
 0 && (module.exports = {
   DelegationTokenClient,
+  DelegationTokenError,
   IntegrationDefinitionClient,
   IntegrationInstallationClient,
   functionCallSystemParameters,

package/dist/index.mjs

@@ -8,6 +8,48 @@ var __privateSet = (obj, member, value, setter) => (__accessCheck(obj, member, "
 var __privateMethod = (obj, member, method) => (__accessCheck(obj, member, "access private method"), method);
 
 // src/clients/DelegationTokenClient.ts
+var DelegationTokenError = class extends Error {
+  constructor(status, kind, publicMessage) {
+    super(publicMessage);
+    this.name = "DelegationTokenError";
+    this.status = status;
+    this.kind = kind;
+  }
+};
+var PUBLIC_MESSAGES = {
+  bad_request: "Token exchange request was rejected as invalid",
+  unauthenticated: "Token exchange authentication failed",
+  forbidden: "Token exchange forbidden by server",
+  not_found: "Token exchange target was not found",
+  rate_limited: "Token exchange rate limit exceeded",
+  server_error: "Token exchange server error",
+  unknown: "Token exchange failed"
+};
+function classifyDelegationTokenStatus(status) {
+  if (status === 400) {
+    return "bad_request";
+  }
+  if (status === 401) {
+    return "unauthenticated";
+  }
+  if (status === 403) {
+    return "forbidden";
+  }
+  if (status === 404) {
+    return "not_found";
+  }
+  if (status === 429) {
+    return "rate_limited";
+  }
+  if (status >= 500) {
+    return "server_error";
+  }
+  return "unknown";
+}
+function buildDelegationTokenError(status) {
+  const kind = classifyDelegationTokenStatus(status);
+  return new DelegationTokenError(status, kind, PUBLIC_MESSAGES[kind]);
+}
 var _options, _DelegationTokenClient_instances, post_fn;
 var DelegationTokenClient = class {
   constructor(options) {
@@ -18,6 +60,8 @@ var DelegationTokenClient = class {
   /**
    * Exchanges a short-lived session token for a delegation token and refresh token.
    * The session token is obtained by the integration's frontend via `sdk.getSessionToken()`.
+   *
+   * @deprecated This beta identity delegation API may change with breaking changes.
    */
   async exchangeSessionToken(sessionToken) {
     return __privateMethod(this, _DelegationTokenClient_instances, post_fn).call(this, {
@@ -28,8 +72,15 @@ var DelegationTokenClient = class {
     });
   }
   /**
-   * Exchanges a refresh token for a new delegation token and refresh token.
-   * Implements rolling refresh — each refresh token can only be used once.
+   * Exchanges a refresh token for a new delegation token and a new refresh token.
+   *
+   * Replay posture: refresh tokens are bearer credentials that are valid until
+   * their server-side expiry. They are NOT single-use — a captured refresh token can be
+   * replayed by an attacker that also has the integration secret until it expires.
+   * Single-use enforcement (refresh-token storage, family/jti tracking, replay revocation)
+   * is tracked in `UNI-9279`.
+   *
+   * @deprecated This beta identity delegation API may change with breaking changes.
    */
   async refreshDelegationToken(refreshToken) {
     return __privateMethod(this, _DelegationTokenClient_instances, post_fn).call(this, {
@@ -43,7 +94,6 @@ var DelegationTokenClient = class {
 _options = new WeakMap();
 _DelegationTokenClient_instances = new WeakSet();
 post_fn = async function(body) {
-  var _a;
   const url = `${__privateGet(this, _options).apiHost}/api/v1/token`;
   const response = await fetch(url, {
     method: "POST",
@@ -51,32 +101,15 @@ post_fn = async function(body) {
     body: JSON.stringify(body)
   });
   if (!response.ok) {
-    const text = await response.text().catch(() => "");
-    const detail = (_a = extractErrorMessage(text)) != null ? _a : text;
-    throw new Error(`Token exchange failed (${response.status}): ${detail}`);
+    await response.text().catch(() => "");
+    throw buildDelegationTokenError(response.status);
   }
   return await response.json();
 };
-function extractErrorMessage(text) {
-  try {
-    const parsed = JSON.parse(text);
-    if (typeof parsed.errorMessage === "string") {
-      return parsed.errorMessage;
-    }
-    if (typeof parsed.error === "string") {
-      return parsed.error;
-    }
-    if (typeof parsed.message === "string") {
-      return parsed.message;
-    }
-  } catch (e) {
-  }
-  return void 0;
-}
 
 // src/clients/IntegrationDefinitionClient.ts
 import { ApiClient } from "@uniformdev/context/api";
-var _url;
+var _url, _credentialsUrl;
 var _IntegrationDefinitionClient = class _IntegrationDefinitionClient extends ApiClient {
   constructor(options) {
     super(options);
@@ -87,7 +120,7 @@ var _IntegrationDefinitionClient = class _IntegrationDefinitionClient extends Ap
     const fetchUri = this.createUrl(__privateGet(_IntegrationDefinitionClient, _url), { ...options, teamId });
     return await this.apiClient(fetchUri);
   }
-  /** Creates or updates a mesh app definition on a team */
+  /** Creates or updates a mesh app definition on a team. Identity-delegation credentials must be minted separately via {@link rotateCredential}. */
   async upsert(body) {
     const fetchUri = this.createUrl(__privateGet(_IntegrationDefinitionClient, _url));
     return await this.apiClient(fetchUri, {
@@ -104,9 +137,37 @@ var _IntegrationDefinitionClient = class _IntegrationDefinitionClient extends Ap
       expectNoContent: true
     });
   }
+  /**
+   * Mints or rotates an identity-delegation credential for an integration definition. The plaintext
+   * `appSecret` is returned exactly once and is not retrievable afterwards — Uniform stores only
+   * the hash. A successful response invalidates any previously-issued secret of the same kind.
+   * Caller must be a team admin.
+   */
+  async rotateCredential(body) {
+    const fetchUri = this.createUrl(__privateGet(_IntegrationDefinitionClient, _credentialsUrl));
+    return await this.apiClient(fetchUri, {
+      method: "POST",
+      body: JSON.stringify({ ...body, teamId: this.options.teamId })
+    });
+  }
+  /**
+   * Revokes an identity-delegation credential. Future delegation grants and refreshes will fail
+   * until a new credential is minted; in-flight delegation tokens remain valid until natural
+   * expiry (up to ~15 minutes). Caller must be a team admin.
+   */
+  async revokeCredential(body) {
+    const fetchUri = this.createUrl(__privateGet(_IntegrationDefinitionClient, _credentialsUrl));
+    await this.apiClient(fetchUri, {
+      method: "DELETE",
+      body: JSON.stringify({ ...body, teamId: this.options.teamId }),
+      expectNoContent: true
+    });
+  }
 };
 _url = new WeakMap();
+_credentialsUrl = new WeakMap();
 __privateAdd(_IntegrationDefinitionClient, _url, "/api/v1/integration-definitions");
+__privateAdd(_IntegrationDefinitionClient, _credentialsUrl, "/api/v1/integration-credentials");
 var IntegrationDefinitionClient = _IntegrationDefinitionClient;
 
 // src/clients/IntegrationInstallationClient.ts
@@ -200,7 +261,7 @@ var getLogger = (prefix, debug) => {
 };
 
 // src/temp/version.ts
-var UNIFORM_MESH_SDK_VERSION = "20.60.0";
+var UNIFORM_MESH_SDK_VERSION = "20.61.1";
 
 // src/framepost/constants.ts
 var DEFAULT_REQUEST_TIMEOUT = 5e3;
@@ -916,6 +977,7 @@ var hasRole = (role, user) => {
 };
 export {
   DelegationTokenClient,
+  DelegationTokenError,
   IntegrationDefinitionClient,
   IntegrationInstallationClient,
   functionCallSystemParameters,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@uniformdev/mesh-sdk",
-  "version": "20.50.2-alpha.39+83d081969c",
+  "version": "20.50.2-alpha.77+51415ad3dd",
   "description": "Uniform Mesh Framework SDK",
   "license": "SEE LICENSE IN LICENSE.txt",
   "main": "./dist/index.js",
@@ -21,10 +21,10 @@
     "build:setversion": "tsx ./scripts/set-version.ts",
     "dev": "pnpm update-openapi && pnpm build:setversion && tsup --watch",
     "clean": "rimraf dist",
-    "lint": "eslint \"src/**/*.{js,ts,tsx}\"",
     "format": "prettier --write \"src/**/*.{js,ts,tsx}\"",
+    "test": "vitest run",
     "update-openapi": "tsx ./scripts/update-openapi.cts",
-    "document:prebuild": "api-extractor run --local"
+    "apidocs-extract": "api-extractor run --local"
   },
   "files": [
     "/dist"
@@ -33,10 +33,10 @@
     "access": "public"
   },
   "dependencies": {
-    "@uniformdev/assets": "20.50.2-alpha.39+83d081969c",
-    "@uniformdev/canvas": "20.50.2-alpha.39+83d081969c",
-    "@uniformdev/context": "20.50.2-alpha.39+83d081969c",
-    "@uniformdev/project-map": "20.50.2-alpha.39+83d081969c",
+    "@uniformdev/assets": "20.50.2-alpha.77+51415ad3dd",
+    "@uniformdev/canvas": "20.50.2-alpha.77+51415ad3dd",
+    "@uniformdev/context": "20.50.2-alpha.77+51415ad3dd",
+    "@uniformdev/project-map": "20.50.2-alpha.77+51415ad3dd",
     "imagesloaded": "^5.0.0",
     "mitt": "^3.0.1"
   },
@@ -44,5 +44,5 @@
     "@types/imagesloaded": "^4.1.2",
     "openai": "4.94.0"
   },
-  "gitHead": "83d081969cac03a901e60d5c78bad66eef78de80"
+  "gitHead": "51415ad3ddc2e973a8c52fc4116df82182f9c44b"
 }