@uveysservetoglu/kobil-core 2.0.0 → 3.0.0

package/README.md

@@ -1,48 +1,106 @@
 # @uveysservetoglu/kobil-core
 
-Shared foundation for the KOBIL SDK family (`@uveysservetoglu/kobil-payment`, `@uveysservetoglu/kobil-chat`, `@uveysservetoglu/kobil-sign`, …).
+Shared foundation for the KOBIL SDK family (`@uveysservetoglu/kobil-payment`, `@uveysservetoglu/kobil-chat`, `@uveysservetoglu/kobil-sign`, `@uveysservetoglu/kobil-tms`, …).
 
 You normally don't use this directly — the module packages depend on it. It provides:
 
+- **API mode** — `resolveApiMode`, `KobilApiOptions`: which KOBIL backend every client talks to (below).
 - **`DefaultTokenProvider`** — OAuth2 `client_credentials` token acquisition with in-memory
   caching (single in-flight request, honours `expires_in`). Modes: `post` (form body,
   default) or `basic` (HTTP Basic header).
-- **`KobilError`** — base error all module errors extend (`statusCode`, `responseBody`).
+- **`StaticTokenProvider`** — hands a token you already have (e.g. a signed-in user's) to any client.
+- **`KobilError`** — base error all module errors extend (`statusCode`, `responseBody`, and the
+  MiniApp API's `errorCode`, `subsystem`, `traceId`).
 - **`KobilServiceClient`** — HTTP base for typed clients (bearer + send + error wrapping,
-  JSON / arbitrary-body / binary-download helpers).
+  JSON / multipart / binary-download / redirect-download helpers).
 - **`credentialsFromEnv`** — builds credentials from the environment (below).
-- **Endpoint helpers** — `tokenEndpointFor`, `authorizationEndpointFor`, `mpowerUserEndpoint`,
-  `mpowerMediaDownloadEndpoint`, `paymentTransactionEndpoint`: the fixed paths each service sits at
-  under its base URL, so the environment names a base and the SDK builds the rest.
+- **Endpoint helpers** — `tokenEndpointFor`, `authorizationEndpointFor`, `defaultTokenEndpoint`,
+  `miniappApiBase`, `miniappTokenEndpoint`, `mpowerUserEndpoint`, `mpowerMediaDownloadEndpoint`,
+  `paymentTransactionEndpoint`, `tmsEndpoint`: the fixed paths each service sits at under its base
+  URL, so the environment names a base and the SDK builds the rest.
+- **Push types** — `PushContent`, `PushResponse`, shared by chat and sign.
 
 Works from both TypeScript and JavaScript (ships compiled JS + `.d.ts`). Requires Node 18+
 (global `fetch`).
 
+## API mode
+
+KOBIL exposes the same services through two APIs, and every client can talk to either:
+
+| Mode | Backend | Notes |
+|---|---|---|
+| `"miniapp"` (**default**) | The unified [MiniApp API](https://documentation.cloud.kobil.com/api/miniapp-api/#/): one host, one token, `/v1/...` | Tenant comes from the token; one error envelope; push notifications. |
+| `"legacy"` | The per-service [Legacy API](https://documentation.cloud.kobil.com/api/legacy/#/): Keycloak, mPower, mpay-merchant, TMS | Deprecated by KOBIL. Wire format identical to 2.x. |
+
+Choose it per client with the `apiMode` option, or for the whole process with `KOBIL_API_MODE`.
+Leaving both unset means `"miniapp"`. Method names and inputs are the same in both modes — amounts in
+minor units, signature boxes in either coordinate style — and each client converts them to the
+selected API's shape.
+
+```ts
+new ChatClient();                        // MiniApp API
+new ChatClient({ apiMode: "legacy" });   // Legacy API
+```
+
 ## Environment
 
 These are the names the SuperApp emulator publishes at `/__superapp/control/env`, so an app
 configured for the emulator needs no separate mapping — only the values change between the emulator
 and production.
 
-| Variable | Used by | Meaning |
-|---|---|---|
-| `OIDC_ISSUER` | all | Realm issuer URL. The token and authorization endpoints are derived from it. |
-| `OIDC_CLIENT_ID` | all | MiniApp client id (also the default `serviceUuid`). |
-| `OIDC_CLIENT_SECRET` | all | MiniApp client secret. |
-| `OIDC_TOKEN_AUTH_MODE` | all | `post` (default) or `basic`. |
-| `MPOWER_BASE` | chat, sign | mPower origin. The per-user and media paths are derived from it. |
-| `MPOWER_TENANT` | chat, sign | Tenant/realm substituted for `{TENANT}`. |
-| `PAYMENT_BASE` | payment | Payment origin. The transaction path is derived from it. |
-| `PAYMENT_MERCHANT_ID` | payment | Merchant **client id** — payment authenticates as its own client. |
-| `PAYMENT_MERCHANT_SECRET` | payment | Merchant client secret. |
-| `PAYMENT_TENANT_ID` | payment | Payment tenant — a different tenant from mPower's. |
-| `PAYMENT_MERCHANT_NAME` | payment | Merchant name shown to the payer. |
+| Variable | Mode | Used by | Meaning |
+|---|---|---|---|
+| `KOBIL_API_MODE` | both | all | `miniapp` (default) or `legacy`. |
+| `MINIAPP_API_BASE` | miniapp | all | MiniApp API origin. Default `https://miniapp-api.cloud.kobil.com`; set `https://miniapp-api.cloud.test.kobil.com` for the test environment. |
+| `OIDC_ISSUER` | both | all | Realm issuer URL. The login page and the token endpoint are derived from it — in miniapp mode, `{MINIAPP_API_BASE}/v1/auth/tokens/{realm}` with the realm read from the issuer. |
+| `OIDC_CLIENT_ID` | both | all | MiniApp client id (also the legacy default `serviceUuid`). |
+| `OIDC_CLIENT_SECRET` | both | all | MiniApp client secret. |
+| `OIDC_TOKEN_AUTH_MODE` | both | all | `post` (default) or `basic`. The MiniApp API documents `post` only. |
+| `MPOWER_BASE` | legacy | chat, sign | mPower origin. The per-user and media paths are derived from it. |
+| `MPOWER_TENANT` | legacy | chat, sign | Tenant/realm substituted for `{TENANT}` (also the realm fallback when the issuer names none). |
+| `PAYMENT_BASE` | legacy | payment | Payment origin. The transaction path is derived from it. |
+| `PAYMENT_MERCHANT_ID` | both | payment | The `merchantId` on the wire. Legacy: also the client the payment token is fetched for. |
+| `PAYMENT_MERCHANT_SECRET` | legacy | payment | Merchant client secret. |
+| `PAYMENT_TENANT_ID` | legacy | payment | Payment tenant — a different tenant from mPower's. |
+| `PAYMENT_MERCHANT_NAME` | legacy | payment | Merchant name shown to the payer. |
+| `TMS_BASE` | legacy | tms | TMS origin (e.g. `https://asts.cloud.kobil.com`). |
 
 Endpoints are derived rather than configured because the issuer is the one fact a deployment
 actually has: the previous scheme asked for a full token URL here and a second one in the auth
 module, which is the same server described twice under two names. `OIDC_TOKEN_ENDPOINT` and
 `OIDC_AUTHORIZATION_ENDPOINT` remain as explicit overrides for deployments whose paths are not the
-standard ones.
+standard ones; `OIDC_TOKEN_ENDPOINT` wins in both modes.
+
+## Which token?
+
+By default each client fetches a `client_credentials` token for the MiniApp. The MiniApp API
+recommends a **user** token (from the authorization-code login) for calls that target a specific
+`userId` — messages, payments, transactions. To act as the signed-in user, hand that token over:
+
+```ts
+import { StaticTokenProvider } from "@uveysservetoglu/kobil-core";
+
+const chat = new ChatClient({ tokenProvider: new StaticTokenProvider(session.accessToken) });
+```
+
+## Errors
+
+Every MiniApp API failure carries `{code, subsystem, message, traceId}`. `KobilError` exposes them as
+`errorCode` (KOBIL's application code, not the HTTP status), `subsystem` (790 is the MiniApp API
+itself) and `traceId` — quote the trace id when reporting a problem to KOBIL. Legacy services answer
+with other shapes; those fields are then `undefined` and `responseBody` holds the raw text.
+
+## Upgrading from 2.x
+
+3.0 changes the default backend. Everything else is additive.
+
+- **Nothing set → MiniApp API.** 2.x always called the legacy services. To keep that, set
+  `KOBIL_API_MODE=legacy` (or pass `apiMode: "legacy"`): legacy mode sends byte-for-byte the requests
+  2.x sent.
+- In miniapp mode `MPOWER_BASE`, `PAYMENT_BASE`, `PAYMENT_MERCHANT_SECRET`, `PAYMENT_TENANT_ID` and
+  `PAYMENT_MERCHANT_NAME` are not needed; `OIDC_*` (and `MINIAPP_API_BASE` outside production) are.
+- Client methods now always return a rejected promise on invalid input instead of throwing
+  synchronously — `await` code is unaffected.
 
 ## License
 

package/dist/api.d.ts

@@ -0,0 +1,43 @@
+/**
+ * Which KOBIL backend a client talks to.
+ *
+ * - `"miniapp"` — the unified MiniApp API: one host, one token, `/v1/...` paths. The default.
+ * - `"legacy"` — the original per-service APIs (Keycloak, mPower, mpay-merchant, TMS), which KOBIL has
+ *   deprecated. Choose it explicitly for a deployment that still runs against them.
+ */
+export type ApiMode = "miniapp" | "legacy";
+/** Where the MiniApp API lives in production. */
+export declare const DEFAULT_MINIAPP_API_BASE = "https://miniapp-api.cloud.kobil.com";
+/** Options every module client accepts for choosing and locating the backend. */
+export interface KobilApiOptions {
+    /** Backend to call. Falls back to `KOBIL_API_MODE`, then `"miniapp"`. */
+    apiMode?: ApiMode;
+    /**
+     * MiniApp API base URL. Falls back to `MINIAPP_API_BASE`, then {@link DEFAULT_MINIAPP_API_BASE}.
+     * Only used in `"miniapp"` mode.
+     */
+    apiBaseUrl?: string;
+    /**
+     * Realm (tenant) the MiniApp API mints tokens for — the `{tenantId}` of `/v1/auth/tokens/{tenantId}`.
+     * Falls back to the realm in `OIDC_ISSUER`, then `MPOWER_TENANT`. Only used in `"miniapp"` mode, and
+     * only when the token endpoint is not given some other way.
+     */
+    realm?: string;
+}
+/**
+ * The mode to use: the explicit value, else `KOBIL_API_MODE`, else `"miniapp"`. An unknown value is an
+ * error rather than a silent fallback — a typo would otherwise send traffic to the other backend.
+ */
+export declare function resolveApiMode(mode?: string): ApiMode;
+/**
+ * The realm named in a Keycloak issuer URL (`…/realms/{realm}`), or `""` when there is none. Works for
+ * both a full URL and the path-only issuers the emulator hands out.
+ */
+export declare function realmFromIssuer(issuer: string | undefined): string;
+/**
+ * The realm for the MiniApp token endpoint: the explicit value, else the one in the issuer (default
+ * `OIDC_ISSUER` — the issuer is the one fact every deployment configures), else `MPOWER_TENANT`, which
+ * names the same realm.
+ */
+export declare function resolveRealm(realm?: string, issuer?: string | undefined): string;
+//# sourceMappingURL=api.d.ts.map

package/dist/api.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"api.d.ts","sourceRoot":"","sources":["../src/api.ts"],"names":[],"mappings":"AAEA;;;;;;GAMG;AACH,MAAM,MAAM,OAAO,GAAG,SAAS,GAAG,QAAQ,CAAC;AAE3C,iDAAiD;AACjD,eAAO,MAAM,wBAAwB,wCAAwC,CAAC;AAE9E,iFAAiF;AACjF,MAAM,WAAW,eAAe;IAC9B,yEAAyE;IACzE,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB;;;OAGG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB;;;;OAIG;IACH,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED;;;GAGG;AACH,wBAAgB,cAAc,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,OAAO,CAKrD;AAED;;;GAGG;AACH,wBAAgB,eAAe,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,CAGlE;AAED;;;;GAIG;AACH,wBAAgB,YAAY,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,MAAM,GAAE,MAAM,GAAG,SAAmC,GAAG,MAAM,CAEzG"}

package/dist/api.js

@@ -0,0 +1,38 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.DEFAULT_MINIAPP_API_BASE = void 0;
+exports.resolveApiMode = resolveApiMode;
+exports.realmFromIssuer = realmFromIssuer;
+exports.resolveRealm = resolveRealm;
+const error_1 = require("./error");
+/** Where the MiniApp API lives in production. */
+exports.DEFAULT_MINIAPP_API_BASE = "https://miniapp-api.cloud.kobil.com";
+/**
+ * The mode to use: the explicit value, else `KOBIL_API_MODE`, else `"miniapp"`. An unknown value is an
+ * error rather than a silent fallback — a typo would otherwise send traffic to the other backend.
+ */
+function resolveApiMode(mode) {
+    const raw = (mode || process.env.KOBIL_API_MODE || "").trim().toLowerCase();
+    if (raw === "" || raw === "miniapp")
+        return "miniapp";
+    if (raw === "legacy")
+        return "legacy";
+    throw new error_1.KobilError(`Unknown API mode "${mode || process.env.KOBIL_API_MODE}": use "miniapp" or "legacy".`);
+}
+/**
+ * The realm named in a Keycloak issuer URL (`…/realms/{realm}`), or `""` when there is none. Works for
+ * both a full URL and the path-only issuers the emulator hands out.
+ */
+function realmFromIssuer(issuer) {
+    const match = /\/realms\/([^/?#]+)\/*$/.exec((issuer ?? "").trim());
+    return match ? decodeURIComponent(match[1]) : "";
+}
+/**
+ * The realm for the MiniApp token endpoint: the explicit value, else the one in the issuer (default
+ * `OIDC_ISSUER` — the issuer is the one fact every deployment configures), else `MPOWER_TENANT`, which
+ * names the same realm.
+ */
+function resolveRealm(realm, issuer = process.env.OIDC_ISSUER) {
+    return realm || realmFromIssuer(issuer) || process.env.MPOWER_TENANT || "";
+}
+//# sourceMappingURL=api.js.map

package/dist/api.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"api.js","sourceRoot":"","sources":["../src/api.ts"],"names":[],"mappings":";;;AAmCA,wCAKC;AAMD,0CAGC;AAOD,oCAEC;AA1DD,mCAAqC;AAWrC,iDAAiD;AACpC,QAAA,wBAAwB,GAAG,qCAAqC,CAAC;AAmB9E;;;GAGG;AACH,SAAgB,cAAc,CAAC,IAAa;IAC1C,MAAM,GAAG,GAAG,CAAC,IAAI,IAAI,OAAO,CAAC,GAAG,CAAC,cAAc,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC5E,IAAI,GAAG,KAAK,EAAE,IAAI,GAAG,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IACtD,IAAI,GAAG,KAAK,QAAQ;QAAE,OAAO,QAAQ,CAAC;IACtC,MAAM,IAAI,kBAAU,CAAC,qBAAqB,IAAI,IAAI,OAAO,CAAC,GAAG,CAAC,cAAc,+BAA+B,CAAC,CAAC;AAC/G,CAAC;AAED;;;GAGG;AACH,SAAgB,eAAe,CAAC,MAA0B;IACxD,MAAM,KAAK,GAAG,yBAAyB,CAAC,IAAI,CAAC,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;IACpE,OAAO,KAAK,CAAC,CAAC,CAAC,kBAAkB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;AACnD,CAAC;AAED;;;;GAIG;AACH,SAAgB,YAAY,CAAC,KAAc,EAAE,SAA6B,OAAO,CAAC,GAAG,CAAC,WAAW;IAC/F,OAAO,KAAK,IAAI,eAAe,CAAC,MAAM,CAAC,IAAI,OAAO,CAAC,GAAG,CAAC,aAAa,IAAI,EAAE,CAAC;AAC7E,CAAC"}

package/dist/credentials.d.ts

@@ -1,3 +1,4 @@
+import { KobilApiOptions } from "./api";
 /** How client credentials are presented to the OAuth2 token endpoint. */
 export type TokenAuthMode = "post" | "basic";
 /**
@@ -19,17 +20,23 @@ export interface KobilCredentials {
 export declare function tokenEndpointFor(issuer: string): string;
 /** The authorization endpoint of an OIDC issuer — where a person is sent to log in. */
 export declare function authorizationEndpointFor(issuer: string): string;
+/**
+ * The token endpoint a client uses when none is given explicitly: `OIDC_TOKEN_ENDPOINT` if set, else
+ * — in `"miniapp"` mode — the MiniApp API's `/v1/auth/tokens/{realm}`, or — in `"legacy"` mode — the
+ * issuer's standard Keycloak path. `issuer` defaults to `OIDC_ISSUER`.
+ */
+export declare function defaultTokenEndpoint(api?: KobilApiOptions, issuer?: string): string;
 /**
  * Builds credentials from the environment, with optional overrides (undefined/empty override values
  * are ignored, so the environment still supplies those).
  *
  * | Variable | Meaning |
  * |---|---|
- * | `OIDC_ISSUER` | Realm issuer URL. The token endpoint is derived from it. |
+ * | `OIDC_ISSUER` | Realm issuer URL. The token endpoint (and, in miniapp mode, the realm) is derived from it. |
  * | `OIDC_CLIENT_ID` | Client id. |
  * | `OIDC_CLIENT_SECRET` | Client secret. |
  * | `OIDC_TOKEN_AUTH_MODE` | `post` (default) or `basic`. |
- * | `OIDC_TOKEN_ENDPOINT` | Full token URL. Only needed when it is not at the standard path. |
+ * | `OIDC_TOKEN_ENDPOINT` | Full token URL. Overrides the derived one in both modes. |
  *
  * These are the names the SuperApp emulator publishes at `/__superapp/control/env`, so an app
  * configured for the emulator needs no separate mapping — and the values are the only thing that
@@ -38,7 +45,7 @@ export declare function authorizationEndpointFor(issuer: string): string;
  * The endpoint is derived rather than configured because the issuer is the one fact a deployment
  * actually has: the previous scheme asked for `KOBIL_TOKEN_ENDPOINT` here and `OTOKEN_URL` in the auth
  * module, which is the same server described twice under two names, and they could disagree.
- * `OIDC_TOKEN_ENDPOINT` remains for deployments whose paths are not Keycloak's standard ones.
+ * `api` selects which derivation applies — see {@link defaultTokenEndpoint}.
  */
-export declare function credentialsFromEnv(overrides?: Partial<KobilCredentials>): KobilCredentials;
+export declare function credentialsFromEnv(overrides?: Partial<KobilCredentials>, api?: KobilApiOptions): KobilCredentials;
 //# sourceMappingURL=credentials.d.ts.map

package/dist/credentials.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"credentials.d.ts","sourceRoot":"","sources":["../src/credentials.ts"],"names":[],"mappings":"AAAA,yEAAyE;AACzE,MAAM,MAAM,aAAa,GAAG,MAAM,GAAG,OAAO,CAAC;AAE7C;;;GAGG;AACH,MAAM,WAAW,gBAAgB;IAC/B,aAAa,EAAE,MAAM,CAAC;IACtB,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,EAAE,MAAM,CAAC;IACrB,uEAAuE;IACvE,aAAa,CAAC,EAAE,aAAa,CAAC;IAC9B,8FAA8F;IAC9F,sBAAsB,CAAC,EAAE,MAAM,CAAC;IAChC,0FAA0F;IAC1F,sBAAsB,CAAC,EAAE,MAAM,CAAC;CACjC;AAkBD,mDAAmD;AACnD,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAEvD;AAED,uFAAuF;AACvF,wBAAgB,wBAAwB,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAE/D;AAED;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,wBAAgB,kBAAkB,CAAC,SAAS,GAAE,OAAO,CAAC,gBAAgB,CAAM,GAAG,gBAAgB,CAc9F"}
+{"version":3,"file":"credentials.d.ts","sourceRoot":"","sources":["../src/credentials.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAgC,MAAM,OAAO,CAAC;AAGtE,yEAAyE;AACzE,MAAM,MAAM,aAAa,GAAG,MAAM,GAAG,OAAO,CAAC;AAE7C;;;GAGG;AACH,MAAM,WAAW,gBAAgB;IAC/B,aAAa,EAAE,MAAM,CAAC;IACtB,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,EAAE,MAAM,CAAC;IACrB,uEAAuE;IACvE,aAAa,CAAC,EAAE,aAAa,CAAC;IAC9B,8FAA8F;IAC9F,sBAAsB,CAAC,EAAE,MAAM,CAAC;IAChC,0FAA0F;IAC1F,sBAAsB,CAAC,EAAE,MAAM,CAAC;CACjC;AAkBD,mDAAmD;AACnD,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAEvD;AAED,uFAAuF;AACvF,wBAAgB,wBAAwB,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAE/D;AAED;;;;GAIG;AACH,wBAAgB,oBAAoB,CAClC,GAAG,GAAE,eAAoB,EACzB,MAAM,GAAE,MAAsC,GAC7C,MAAM,CAKR;AAED;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,wBAAgB,kBAAkB,CAChC,SAAS,GAAE,OAAO,CAAC,gBAAgB,CAAM,EACzC,GAAG,GAAE,eAAoB,GACxB,gBAAgB,CAclB"}

package/dist/credentials.js

@@ -2,7 +2,10 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.tokenEndpointFor = tokenEndpointFor;
 exports.authorizationEndpointFor = authorizationEndpointFor;
+exports.defaultTokenEndpoint = defaultTokenEndpoint;
 exports.credentialsFromEnv = credentialsFromEnv;
+const api_1 = require("./api");
+const endpoints_1 = require("./endpoints");
 /**
  * Keycloak's standard endpoint paths under a realm issuer.
  *
@@ -25,17 +28,29 @@ function tokenEndpointFor(issuer) {
 function authorizationEndpointFor(issuer) {
     return underIssuer(issuer, AUTHORIZE_PATH);
 }
+/**
+ * The token endpoint a client uses when none is given explicitly: `OIDC_TOKEN_ENDPOINT` if set, else
+ * — in `"miniapp"` mode — the MiniApp API's `/v1/auth/tokens/{realm}`, or — in `"legacy"` mode — the
+ * issuer's standard Keycloak path. `issuer` defaults to `OIDC_ISSUER`.
+ */
+function defaultTokenEndpoint(api = {}, issuer = process.env.OIDC_ISSUER ?? "") {
+    if (process.env.OIDC_TOKEN_ENDPOINT)
+        return process.env.OIDC_TOKEN_ENDPOINT;
+    return (0, api_1.resolveApiMode)(api.apiMode) === "legacy"
+        ? tokenEndpointFor(issuer)
+        : (0, endpoints_1.miniappTokenEndpoint)(api.apiBaseUrl, (0, api_1.resolveRealm)(api.realm, issuer));
+}
 /**
  * Builds credentials from the environment, with optional overrides (undefined/empty override values
  * are ignored, so the environment still supplies those).
  *
  * | Variable | Meaning |
  * |---|---|
- * | `OIDC_ISSUER` | Realm issuer URL. The token endpoint is derived from it. |
+ * | `OIDC_ISSUER` | Realm issuer URL. The token endpoint (and, in miniapp mode, the realm) is derived from it. |
  * | `OIDC_CLIENT_ID` | Client id. |
  * | `OIDC_CLIENT_SECRET` | Client secret. |
  * | `OIDC_TOKEN_AUTH_MODE` | `post` (default) or `basic`. |
- * | `OIDC_TOKEN_ENDPOINT` | Full token URL. Only needed when it is not at the standard path. |
+ * | `OIDC_TOKEN_ENDPOINT` | Full token URL. Overrides the derived one in both modes. |
  *
  * These are the names the SuperApp emulator publishes at `/__superapp/control/env`, so an app
  * configured for the emulator needs no separate mapping — and the values are the only thing that
@@ -44,12 +59,12 @@ function authorizationEndpointFor(issuer) {
  * The endpoint is derived rather than configured because the issuer is the one fact a deployment
  * actually has: the previous scheme asked for `KOBIL_TOKEN_ENDPOINT` here and `OTOKEN_URL` in the auth
  * module, which is the same server described twice under two names, and they could disagree.
- * `OIDC_TOKEN_ENDPOINT` remains for deployments whose paths are not Keycloak's standard ones.
+ * `api` selects which derivation applies — see {@link defaultTokenEndpoint}.
  */
-function credentialsFromEnv(overrides = {}) {
+function credentialsFromEnv(overrides = {}, api = {}) {
     const mode = process.env.OIDC_TOKEN_AUTH_MODE?.toLowerCase();
     const base = {
-        tokenEndpoint: process.env.OIDC_TOKEN_ENDPOINT || tokenEndpointFor(process.env.OIDC_ISSUER ?? ""),
+        tokenEndpoint: defaultTokenEndpoint(api),
         clientId: process.env.OIDC_CLIENT_ID ?? "",
         clientSecret: process.env.OIDC_CLIENT_SECRET ?? "",
         tokenAuthMode: mode === "basic" || mode === "client_secret_basic" ? "basic" : "post",

package/dist/credentials.js.map

@@ -1 +1 @@
-{"version":3,"file":"credentials.js","sourceRoot":"","sources":["../src/credentials.ts"],"names":[],"mappings":";;AAoCA,4CAEC;AAGD,4DAEC;AAuBD,gDAcC;AA7DD;;;;;;GAMG;AACH,MAAM,UAAU,GAAG,gCAAgC,CAAC;AACpD,MAAM,cAAc,GAAG,+BAA+B,CAAC;AAEvD,mEAAmE;AACnE,SAAS,WAAW,CAAC,MAA0B,EAAE,IAAY;IAC3D,MAAM,IAAI,GAAG,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IACvD,OAAO,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,IAAI,GAAG,IAAI,EAAE,CAAC;AAC7C,CAAC;AAED,mDAAmD;AACnD,SAAgB,gBAAgB,CAAC,MAAc;IAC7C,OAAO,WAAW,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;AACzC,CAAC;AAED,uFAAuF;AACvF,SAAgB,wBAAwB,CAAC,MAAc;IACrD,OAAO,WAAW,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;AAC7C,CAAC;AAED;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,SAAgB,kBAAkB,CAAC,YAAuC,EAAE;IAC1E,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,oBAAoB,EAAE,WAAW,EAAE,CAAC;IAC7D,MAAM,IAAI,GAAqB;QAC7B,aAAa,EAAE,OAAO,CAAC,GAAG,CAAC,mBAAmB,IAAI,gBAAgB,CAAC,OAAO,CAAC,GAAG,CAAC,WAAW,IAAI,EAAE,CAAC;QACjG,QAAQ,EAAE,OAAO,CAAC,GAAG,CAAC,cAAc,IAAI,EAAE;QAC1C,YAAY,EAAE,OAAO,CAAC,GAAG,CAAC,kBAAkB,IAAI,EAAE;QAClD,aAAa,EAAE,IAAI,KAAK,OAAO,IAAI,IAAI,KAAK,qBAAqB,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM;KACrF,CAAC;IACF,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,SAAS,CAAwC,EAAE,CAAC;QAC5F,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,EAAE,EAAE,CAAC;YACvC,IAA2C,CAAC,GAAa,CAAC,GAAG,KAAK,CAAC;QACtE,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC"}
+{"version":3,"file":"credentials.js","sourceRoot":"","sources":["../src/credentials.ts"],"names":[],"mappings":";;AAuCA,4CAEC;AAGD,4DAEC;AAOD,oDAQC;AAuBD,gDAiBC;AArGD,+BAAsE;AACtE,2CAAmD;AAqBnD;;;;;;GAMG;AACH,MAAM,UAAU,GAAG,gCAAgC,CAAC;AACpD,MAAM,cAAc,GAAG,+BAA+B,CAAC;AAEvD,mEAAmE;AACnE,SAAS,WAAW,CAAC,MAA0B,EAAE,IAAY;IAC3D,MAAM,IAAI,GAAG,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IACvD,OAAO,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,IAAI,GAAG,IAAI,EAAE,CAAC;AAC7C,CAAC;AAED,mDAAmD;AACnD,SAAgB,gBAAgB,CAAC,MAAc;IAC7C,OAAO,WAAW,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;AACzC,CAAC;AAED,uFAAuF;AACvF,SAAgB,wBAAwB,CAAC,MAAc;IACrD,OAAO,WAAW,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;AAC7C,CAAC;AAED;;;;GAIG;AACH,SAAgB,oBAAoB,CAClC,MAAuB,EAAE,EACzB,SAAiB,OAAO,CAAC,GAAG,CAAC,WAAW,IAAI,EAAE;IAE9C,IAAI,OAAO,CAAC,GAAG,CAAC,mBAAmB;QAAE,OAAO,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC;IAC5E,OAAO,IAAA,oBAAc,EAAC,GAAG,CAAC,OAAO,CAAC,KAAK,QAAQ;QAC7C,CAAC,CAAC,gBAAgB,CAAC,MAAM,CAAC;QAC1B,CAAC,CAAC,IAAA,gCAAoB,EAAC,GAAG,CAAC,UAAU,EAAE,IAAA,kBAAY,EAAC,GAAG,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC;AAC5E,CAAC;AAED;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,SAAgB,kBAAkB,CAChC,YAAuC,EAAE,EACzC,MAAuB,EAAE;IAEzB,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,oBAAoB,EAAE,WAAW,EAAE,CAAC;IAC7D,MAAM,IAAI,GAAqB;QAC7B,aAAa,EAAE,oBAAoB,CAAC,GAAG,CAAC;QACxC,QAAQ,EAAE,OAAO,CAAC,GAAG,CAAC,cAAc,IAAI,EAAE;QAC1C,YAAY,EAAE,OAAO,CAAC,GAAG,CAAC,kBAAkB,IAAI,EAAE;QAClD,aAAa,EAAE,IAAI,KAAK,OAAO,IAAI,IAAI,KAAK,qBAAqB,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM;KACrF,CAAC;IACF,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,SAAS,CAAwC,EAAE,CAAC;QAC5F,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,EAAE,EAAE,CAAC;YACvC,IAA2C,CAAC,GAAa,CAAC,GAAG,KAAK,CAAC;QACtE,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/endpoints.d.ts

@@ -1,15 +1,7 @@
-/**
- * Where each service sits under its base URL.
- *
- * A deployment gives you two origins — one for mPower (chat and signing, on the identity host) and one
- * for payment — and the paths beneath them are fixed. So the environment names a base and these build
- * the rest, which is why `MPOWER_BASE` and `PAYMENT_BASE` are enough to configure every module.
- *
- * The SuperApp emulator mounts the same paths under its own origin on purpose, so the only thing that
- * changes between the emulator and production is the base.
- *
- * `{TENANT}`, `{USER_ID}` and `{MEDIA_ID}` are left in place: each client substitutes them per call.
- */
+/** The MiniApp API base: the explicit value, else `MINIAPP_API_BASE`, else production. No trailing slash. */
+export declare function miniappApiBase(base?: string): string;
+/** The MiniApp API's token endpoint for a realm, or `""` when the realm is unknown. */
+export declare function miniappTokenEndpoint(base: string | undefined, realm: string | undefined): string;
 /**
  * The per-user mPower endpoint, which both chat and signing hang off — chat appends `/message` or
  * `/media`, signing appends `/signature`.
@@ -22,4 +14,9 @@ export declare function mpowerMediaDownloadEndpoint(mpowerBase: string | undefin
  * payment client.
  */
 export declare function paymentTransactionEndpoint(paymentBase: string | undefined): string;
+/**
+ * Legacy TMS: the per-tenant transaction endpoint under the TMS host (`TMS_BASE`); `/{id}/status` and
+ * `/{id}/result` are derived from it by the TMS client.
+ */
+export declare function tmsEndpoint(tmsBase: string | undefined): string;
 //# sourceMappingURL=endpoints.d.ts.map

package/dist/endpoints.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"endpoints.d.ts","sourceRoot":"","sources":["../src/endpoints.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAOH;;;GAGG;AACH,wBAAgB,kBAAkB,CAAC,UAAU,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,CAGzE;AAED,iEAAiE;AACjE,wBAAgB,2BAA2B,CAAC,UAAU,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,CAGlF;AAED;;;GAGG;AACH,wBAAgB,0BAA0B,CAAC,WAAW,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,CAGlF"}
+{"version":3,"file":"endpoints.d.ts","sourceRoot":"","sources":["../src/endpoints.ts"],"names":[],"mappings":"AAqBA,6GAA6G;AAC7G,wBAAgB,cAAc,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,MAAM,CAEpD;AAED,uFAAuF;AACvF,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,MAAM,GAAG,SAAS,EAAE,KAAK,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,CAEhG;AAED;;;GAGG;AACH,wBAAgB,kBAAkB,CAAC,UAAU,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,CAGzE;AAED,iEAAiE;AACjE,wBAAgB,2BAA2B,CAAC,UAAU,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,CAGlF;AAED;;;GAGG;AACH,wBAAgB,0BAA0B,CAAC,WAAW,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,CAGlF;AAED;;;GAGG;AACH,wBAAgB,WAAW,CAAC,OAAO,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,CAG/D"}

package/dist/endpoints.js

@@ -1,24 +1,37 @@
 "use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.miniappApiBase = miniappApiBase;
+exports.miniappTokenEndpoint = miniappTokenEndpoint;
+exports.mpowerUserEndpoint = mpowerUserEndpoint;
+exports.mpowerMediaDownloadEndpoint = mpowerMediaDownloadEndpoint;
+exports.paymentTransactionEndpoint = paymentTransactionEndpoint;
+exports.tmsEndpoint = tmsEndpoint;
+const api_1 = require("./api");
 /**
  * Where each service sits under its base URL.
  *
- * A deployment gives you two origins — one for mPower (chat and signing, on the identity host) and one
- * for payment — and the paths beneath them are fixed. So the environment names a base and these build
- * the rest, which is why `MPOWER_BASE` and `PAYMENT_BASE` are enough to configure every module.
+ * Legacy mode: a deployment gives you two origins — one for mPower (chat and signing, on the identity
+ * host) and one for payment — and the paths beneath them are fixed. So the environment names a base and
+ * these build the rest, which is why `MPOWER_BASE` and `PAYMENT_BASE` are enough to configure every
+ * module. The SuperApp emulator mounts the same paths under its own origin on purpose, so the only thing
+ * that changes between the emulator and production is the base.
  *
- * The SuperApp emulator mounts the same paths under its own origin on purpose, so the only thing that
- * changes between the emulator and production is the base.
+ * MiniApp mode: one origin for everything (`MINIAPP_API_BASE`), with `/v1/...` paths beneath it.
  *
  * `{TENANT}`, `{USER_ID}` and `{MEDIA_ID}` are left in place: each client substitutes them per call.
  */
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.mpowerUserEndpoint = mpowerUserEndpoint;
-exports.mpowerMediaDownloadEndpoint = mpowerMediaDownloadEndpoint;
-exports.paymentTransactionEndpoint = paymentTransactionEndpoint;
 /** `{base}` with any trailing slashes removed; empty stays empty. */
 function origin(base) {
     return (base ?? "").trim().replace(/\/+$/, "");
 }
+/** The MiniApp API base: the explicit value, else `MINIAPP_API_BASE`, else production. No trailing slash. */
+function miniappApiBase(base) {
+    return origin(base || process.env.MINIAPP_API_BASE || api_1.DEFAULT_MINIAPP_API_BASE);
+}
+/** The MiniApp API's token endpoint for a realm, or `""` when the realm is unknown. */
+function miniappTokenEndpoint(base, realm) {
+    return realm ? `${miniappApiBase(base)}/v1/auth/tokens/${encodeURIComponent(realm)}` : "";
+}
 /**
  * The per-user mPower endpoint, which both chat and signing hang off — chat appends `/message` or
  * `/media`, signing appends `/signature`.
@@ -40,4 +53,12 @@ function paymentTransactionEndpoint(paymentBase) {
     const base = origin(paymentBase);
     return base === "" ? "" : `${base}/mpay-merchant/create/transaction`;
 }
+/**
+ * Legacy TMS: the per-tenant transaction endpoint under the TMS host (`TMS_BASE`); `/{id}/status` and
+ * `/{id}/result` are derived from it by the TMS client.
+ */
+function tmsEndpoint(tmsBase) {
+    const base = origin(tmsBase);
+    return base === "" ? "" : `${base}/v1/tenants/{TENANT}/tms`;
+}
 //# sourceMappingURL=endpoints.js.map

package/dist/endpoints.js.map

@@ -1 +1 @@
-{"version":3,"file":"endpoints.js","sourceRoot":"","sources":["../src/endpoints.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;GAWG;;AAWH,gDAGC;AAGD,kEAGC;AAMD,gEAGC;AA3BD,qEAAqE;AACrE,SAAS,MAAM,CAAC,IAAwB;IACtC,OAAO,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;AACjD,CAAC;AAED;;;GAGG;AACH,SAAgB,kBAAkB,CAAC,UAA8B;IAC/D,MAAM,IAAI,GAAG,MAAM,CAAC,UAAU,CAAC,CAAC;IAChC,OAAO,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,IAAI,iDAAiD,CAAC;AACrF,CAAC;AAED,iEAAiE;AACjE,SAAgB,2BAA2B,CAAC,UAA8B;IACxE,MAAM,IAAI,GAAG,MAAM,CAAC,UAAU,CAAC,CAAC;IAChC,OAAO,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,IAAI,uDAAuD,CAAC;AAC3F,CAAC;AAED;;;GAGG;AACH,SAAgB,0BAA0B,CAAC,WAA+B;IACxE,MAAM,IAAI,GAAG,MAAM,CAAC,WAAW,CAAC,CAAC;IACjC,OAAO,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,IAAI,mCAAmC,CAAC;AACvE,CAAC"}
+{"version":3,"file":"endpoints.js","sourceRoot":"","sources":["../src/endpoints.ts"],"names":[],"mappings":";;AAsBA,wCAEC;AAGD,oDAEC;AAMD,gDAGC;AAGD,kEAGC;AAMD,gEAGC;AAMD,kCAGC;AA9DD,+BAAiD;AAEjD;;;;;;;;;;;;GAYG;AAEH,qEAAqE;AACrE,SAAS,MAAM,CAAC,IAAwB;IACtC,OAAO,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;AACjD,CAAC;AAED,6GAA6G;AAC7G,SAAgB,cAAc,CAAC,IAAa;IAC1C,OAAO,MAAM,CAAC,IAAI,IAAI,OAAO,CAAC,GAAG,CAAC,gBAAgB,IAAI,8BAAwB,CAAC,CAAC;AAClF,CAAC;AAED,uFAAuF;AACvF,SAAgB,oBAAoB,CAAC,IAAwB,EAAE,KAAyB;IACtF,OAAO,KAAK,CAAC,CAAC,CAAC,GAAG,cAAc,CAAC,IAAI,CAAC,mBAAmB,kBAAkB,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;AAC5F,CAAC;AAED;;;GAGG;AACH,SAAgB,kBAAkB,CAAC,UAA8B;IAC/D,MAAM,IAAI,GAAG,MAAM,CAAC,UAAU,CAAC,CAAC;IAChC,OAAO,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,IAAI,iDAAiD,CAAC;AACrF,CAAC;AAED,iEAAiE;AACjE,SAAgB,2BAA2B,CAAC,UAA8B;IACxE,MAAM,IAAI,GAAG,MAAM,CAAC,UAAU,CAAC,CAAC;IAChC,OAAO,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,IAAI,uDAAuD,CAAC;AAC3F,CAAC;AAED;;;GAGG;AACH,SAAgB,0BAA0B,CAAC,WAA+B;IACxE,MAAM,IAAI,GAAG,MAAM,CAAC,WAAW,CAAC,CAAC;IACjC,OAAO,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,IAAI,mCAAmC,CAAC;AACvE,CAAC;AAED;;;GAGG;AACH,SAAgB,WAAW,CAAC,OAA2B;IACrD,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC;IAC7B,OAAO,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,IAAI,0BAA0B,CAAC;AAC9D,CAAC"}

package/dist/error.d.ts

@@ -3,14 +3,35 @@ export interface KobilErrorOptions {
     responseBody?: string;
     cause?: unknown;
 }
+/** The MiniApp API's error body: `{code, subsystem, message, traceId}` on every non-2xx response. */
+export interface KobilErrorEnvelope {
+    code: number;
+    subsystem: number;
+    message: string;
+    traceId?: string;
+}
+/**
+ * The envelope in a response body, or `undefined` when the body is not one. Legacy services answer with
+ * other shapes (`{error}`, a string array, …), which simply yield nothing here.
+ */
+export declare function parseErrorEnvelope(body: string | undefined): KobilErrorEnvelope | undefined;
 /**
  * Base error for all KOBIL SDK modules. Module-specific errors
  * (KobilPaymentError, KobilChatError, …) extend this, so callers can catch
  * `KobilError` to handle any KOBIL failure uniformly.
+ *
+ * When the response body is a MiniApp API error envelope, its fields are exposed as `errorCode`,
+ * `subsystem` and `traceId` — `errorCode` is KOBIL's application code, distinct from `statusCode`.
  */
 export declare class KobilError extends Error {
     readonly statusCode?: number;
     readonly responseBody?: string;
+    /** KOBIL application error code from the MiniApp API envelope (not the HTTP status). */
+    readonly errorCode?: number;
+    /** Subsystem that raised the error (790 is the MiniApp API itself). */
+    readonly subsystem?: number;
+    /** Trace id to quote when reporting the failure to KOBIL. */
+    readonly traceId?: string;
     constructor(message: string, options?: KobilErrorOptions);
 }
 //# sourceMappingURL=error.d.ts.map

package/dist/error.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"error.d.ts","sourceRoot":"","sources":["../src/error.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,iBAAiB;IAChC,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,KAAK,CAAC,EAAE,OAAO,CAAC;CACjB;AAED;;;;GAIG;AACH,qBAAa,UAAW,SAAQ,KAAK;IACnC,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;gBAEnB,OAAO,EAAE,MAAM,EAAE,OAAO,GAAE,iBAAsB;CAO7D"}
+{"version":3,"file":"error.d.ts","sourceRoot":"","sources":["../src/error.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,iBAAiB;IAChC,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,KAAK,CAAC,EAAE,OAAO,CAAC;CACjB;AAED,qGAAqG;AACrG,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED;;;GAGG;AACH,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,GAAG,SAAS,GAAG,kBAAkB,GAAG,SAAS,CAiB3F;AAED;;;;;;;GAOG;AACH,qBAAa,UAAW,SAAQ,KAAK;IACnC,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAC/B,wFAAwF;IACxF,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,uEAAuE;IACvE,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,6DAA6D;IAC7D,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;gBAEd,OAAO,EAAE,MAAM,EAAE,OAAO,GAAE,iBAAsB;CAa7D"}

package/dist/error.js

@@ -1,19 +1,61 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.KobilError = void 0;
+exports.parseErrorEnvelope = parseErrorEnvelope;
+/**
+ * The envelope in a response body, or `undefined` when the body is not one. Legacy services answer with
+ * other shapes (`{error}`, a string array, …), which simply yield nothing here.
+ */
+function parseErrorEnvelope(body) {
+    if (!body)
+        return undefined;
+    let json;
+    try {
+        json = JSON.parse(body);
+    }
+    catch {
+        return undefined;
+    }
+    if (typeof json !== "object" || json === null)
+        return undefined;
+    const e = json;
+    if (typeof e.code !== "number" || typeof e.subsystem !== "number")
+        return undefined;
+    return {
+        code: e.code,
+        subsystem: e.subsystem,
+        message: typeof e.message === "string" ? e.message : "",
+        traceId: typeof e.traceId === "string" ? e.traceId : undefined,
+    };
+}
 /**
  * Base error for all KOBIL SDK modules. Module-specific errors
  * (KobilPaymentError, KobilChatError, …) extend this, so callers can catch
  * `KobilError` to handle any KOBIL failure uniformly.
+ *
+ * When the response body is a MiniApp API error envelope, its fields are exposed as `errorCode`,
+ * `subsystem` and `traceId` — `errorCode` is KOBIL's application code, distinct from `statusCode`.
  */
 class KobilError extends Error {
     statusCode;
     responseBody;
+    /** KOBIL application error code from the MiniApp API envelope (not the HTTP status). */
+    errorCode;
+    /** Subsystem that raised the error (790 is the MiniApp API itself). */
+    subsystem;
+    /** Trace id to quote when reporting the failure to KOBIL. */
+    traceId;
     constructor(message, options = {}) {
         super(message, options.cause !== undefined ? { cause: options.cause } : undefined);
         this.name = new.target.name;
         this.statusCode = options.statusCode;
         this.responseBody = options.responseBody;
+        const envelope = parseErrorEnvelope(options.responseBody);
+        if (envelope) {
+            this.errorCode = envelope.code;
+            this.subsystem = envelope.subsystem;
+            this.traceId = envelope.traceId;
+        }
         Object.setPrototypeOf(this, new.target.prototype);
     }
 }

package/dist/error.js.map

@@ -1 +1 @@
-{"version":3,"file":"error.js","sourceRoot":"","sources":["../src/error.ts"],"names":[],"mappings":";;;AAMA;;;;GAIG;AACH,MAAa,UAAW,SAAQ,KAAK;IAC1B,UAAU,CAAU;IACpB,YAAY,CAAU;IAE/B,YAAY,OAAe,EAAE,UAA6B,EAAE;QAC1D,KAAK,CAAC,OAAO,EAAE,OAAO,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;QACnF,IAAI,CAAC,IAAI,GAAG,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC;QAC5B,IAAI,CAAC,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC;QACrC,IAAI,CAAC,YAAY,GAAG,OAAO,CAAC,YAAY,CAAC;QACzC,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IACpD,CAAC;CACF;AAXD,gCAWC"}
+{"version":3,"file":"error.js","sourceRoot":"","sources":["../src/error.ts"],"names":[],"mappings":";;;AAkBA,gDAiBC;AArBD;;;GAGG;AACH,SAAgB,kBAAkB,CAAC,IAAwB;IACzD,IAAI,CAAC,IAAI;QAAE,OAAO,SAAS,CAAC;IAC5B,IAAI,IAAa,CAAC;IAClB,IAAI,CAAC;QACH,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC1B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,IAAI;QAAE,OAAO,SAAS,CAAC;IAChE,MAAM,CAAC,GAAG,IAA+B,CAAC;IAC1C,IAAI,OAAO,CAAC,CAAC,IAAI,KAAK,QAAQ,IAAI,OAAO,CAAC,CAAC,SAAS,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC;IACpF,OAAO;QACL,IAAI,EAAE,CAAC,CAAC,IAAI;QACZ,SAAS,EAAE,CAAC,CAAC,SAAS;QACtB,OAAO,EAAE,OAAO,CAAC,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE;QACvD,OAAO,EAAE,OAAO,CAAC,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS;KAC/D,CAAC;AACJ,CAAC;AAED;;;;;;;GAOG;AACH,MAAa,UAAW,SAAQ,KAAK;IAC1B,UAAU,CAAU;IACpB,YAAY,CAAU;IAC/B,wFAAwF;IAC/E,SAAS,CAAU;IAC5B,uEAAuE;IAC9D,SAAS,CAAU;IAC5B,6DAA6D;IACpD,OAAO,CAAU;IAE1B,YAAY,OAAe,EAAE,UAA6B,EAAE;QAC1D,KAAK,CAAC,OAAO,EAAE,OAAO,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;QACnF,IAAI,CAAC,IAAI,GAAG,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC;QAC5B,IAAI,CAAC,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC;QACrC,IAAI,CAAC,YAAY,GAAG,OAAO,CAAC,YAAY,CAAC;QACzC,MAAM,QAAQ,GAAG,kBAAkB,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;QAC1D,IAAI,QAAQ,EAAE,CAAC;YACb,IAAI,CAAC,SAAS,GAAG,QAAQ,CAAC,IAAI,CAAC;YAC/B,IAAI,CAAC,SAAS,GAAG,QAAQ,CAAC,SAAS,CAAC;YACpC,IAAI,CAAC,OAAO,GAAG,QAAQ,CAAC,OAAO,CAAC;QAClC,CAAC;QACD,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IACpD,CAAC;CACF;AAvBD,gCAuBC"}

package/dist/index.d.ts

@@ -1,9 +1,14 @@
-export { KobilError } from "./error";
-export type { KobilErrorOptions } from "./error";
-export { authorizationEndpointFor, credentialsFromEnv, tokenEndpointFor } from "./credentials";
+export { KobilError, parseErrorEnvelope } from "./error";
+export type { KobilErrorEnvelope, KobilErrorOptions } from "./error";
+export { DEFAULT_MINIAPP_API_BASE, realmFromIssuer, resolveApiMode, resolveRealm } from "./api";
+export type { ApiMode, KobilApiOptions } from "./api";
+export { authorizationEndpointFor, credentialsFromEnv, defaultTokenEndpoint, tokenEndpointFor, } from "./credentials";
 export type { KobilCredentials, TokenAuthMode } from "./credentials";
-export { mpowerMediaDownloadEndpoint, mpowerUserEndpoint, paymentTransactionEndpoint, } from "./endpoints";
-export { DefaultTokenProvider } from "./token-provider";
+export { miniappApiBase, miniappTokenEndpoint, mpowerMediaDownloadEndpoint, mpowerUserEndpoint, paymentTransactionEndpoint, tmsEndpoint, } from "./endpoints";
+export { buildMultipart } from "./multipart";
+export type { MultipartPart } from "./multipart";
+export type { PushContent, PushDeviceResult, PushResponse } from "./push";
+export { DefaultTokenProvider, StaticTokenProvider } from "./token-provider";
 export type { TokenProvider } from "./token-provider";
 export { KobilServiceClient } from "./service-client";
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,YAAY,EAAE,iBAAiB,EAAE,MAAM,SAAS,CAAC;AACjD,OAAO,EAAE,wBAAwB,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AAC/F,YAAY,EAAE,gBAAgB,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AACrE,OAAO,EACL,2BAA2B,EAC3B,kBAAkB,EAClB,0BAA0B,GAC3B,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,oBAAoB,EAAE,MAAM,kBAAkB,CAAC;AACxD,YAAY,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AACtD,OAAO,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,kBAAkB,EAAE,MAAM,SAAS,CAAC;AACzD,YAAY,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,MAAM,SAAS,CAAC;AACrE,OAAO,EAAE,wBAAwB,EAAE,eAAe,EAAE,cAAc,EAAE,YAAY,EAAE,MAAM,OAAO,CAAC;AAChG,YAAY,EAAE,OAAO,EAAE,eAAe,EAAE,MAAM,OAAO,CAAC;AACtD,OAAO,EACL,wBAAwB,EACxB,kBAAkB,EAClB,oBAAoB,EACpB,gBAAgB,GACjB,MAAM,eAAe,CAAC;AACvB,YAAY,EAAE,gBAAgB,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AACrE,OAAO,EACL,cAAc,EACd,oBAAoB,EACpB,2BAA2B,EAC3B,kBAAkB,EAClB,0BAA0B,EAC1B,WAAW,GACZ,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAC7C,YAAY,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AACjD,YAAY,EAAE,WAAW,EAAE,gBAAgB,EAAE,YAAY,EAAE,MAAM,QAAQ,CAAC;AAC1E,OAAO,EAAE,oBAAoB,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAC;AAC7E,YAAY,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AACtD,OAAO,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC"}

package/dist/index.js

@@ -1,18 +1,31 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.KobilServiceClient = exports.DefaultTokenProvider = exports.paymentTransactionEndpoint = exports.mpowerUserEndpoint = exports.mpowerMediaDownloadEndpoint = exports.tokenEndpointFor = exports.credentialsFromEnv = exports.authorizationEndpointFor = exports.KobilError = void 0;
+exports.KobilServiceClient = exports.StaticTokenProvider = exports.DefaultTokenProvider = exports.buildMultipart = exports.tmsEndpoint = exports.paymentTransactionEndpoint = exports.mpowerUserEndpoint = exports.mpowerMediaDownloadEndpoint = exports.miniappTokenEndpoint = exports.miniappApiBase = exports.tokenEndpointFor = exports.defaultTokenEndpoint = exports.credentialsFromEnv = exports.authorizationEndpointFor = exports.resolveRealm = exports.resolveApiMode = exports.realmFromIssuer = exports.DEFAULT_MINIAPP_API_BASE = exports.parseErrorEnvelope = exports.KobilError = void 0;
 var error_1 = require("./error");
 Object.defineProperty(exports, "KobilError", { enumerable: true, get: function () { return error_1.KobilError; } });
+Object.defineProperty(exports, "parseErrorEnvelope", { enumerable: true, get: function () { return error_1.parseErrorEnvelope; } });
+var api_1 = require("./api");
+Object.defineProperty(exports, "DEFAULT_MINIAPP_API_BASE", { enumerable: true, get: function () { return api_1.DEFAULT_MINIAPP_API_BASE; } });
+Object.defineProperty(exports, "realmFromIssuer", { enumerable: true, get: function () { return api_1.realmFromIssuer; } });
+Object.defineProperty(exports, "resolveApiMode", { enumerable: true, get: function () { return api_1.resolveApiMode; } });
+Object.defineProperty(exports, "resolveRealm", { enumerable: true, get: function () { return api_1.resolveRealm; } });
 var credentials_1 = require("./credentials");
 Object.defineProperty(exports, "authorizationEndpointFor", { enumerable: true, get: function () { return credentials_1.authorizationEndpointFor; } });
 Object.defineProperty(exports, "credentialsFromEnv", { enumerable: true, get: function () { return credentials_1.credentialsFromEnv; } });
+Object.defineProperty(exports, "defaultTokenEndpoint", { enumerable: true, get: function () { return credentials_1.defaultTokenEndpoint; } });
 Object.defineProperty(exports, "tokenEndpointFor", { enumerable: true, get: function () { return credentials_1.tokenEndpointFor; } });
 var endpoints_1 = require("./endpoints");
+Object.defineProperty(exports, "miniappApiBase", { enumerable: true, get: function () { return endpoints_1.miniappApiBase; } });
+Object.defineProperty(exports, "miniappTokenEndpoint", { enumerable: true, get: function () { return endpoints_1.miniappTokenEndpoint; } });
 Object.defineProperty(exports, "mpowerMediaDownloadEndpoint", { enumerable: true, get: function () { return endpoints_1.mpowerMediaDownloadEndpoint; } });
 Object.defineProperty(exports, "mpowerUserEndpoint", { enumerable: true, get: function () { return endpoints_1.mpowerUserEndpoint; } });
 Object.defineProperty(exports, "paymentTransactionEndpoint", { enumerable: true, get: function () { return endpoints_1.paymentTransactionEndpoint; } });
+Object.defineProperty(exports, "tmsEndpoint", { enumerable: true, get: function () { return endpoints_1.tmsEndpoint; } });
+var multipart_1 = require("./multipart");
+Object.defineProperty(exports, "buildMultipart", { enumerable: true, get: function () { return multipart_1.buildMultipart; } });
 var token_provider_1 = require("./token-provider");
 Object.defineProperty(exports, "DefaultTokenProvider", { enumerable: true, get: function () { return token_provider_1.DefaultTokenProvider; } });
+Object.defineProperty(exports, "StaticTokenProvider", { enumerable: true, get: function () { return token_provider_1.StaticTokenProvider; } });
 var service_client_1 = require("./service-client");
 Object.defineProperty(exports, "KobilServiceClient", { enumerable: true, get: function () { return service_client_1.KobilServiceClient; } });
 //# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";;;AAAA,iCAAqC;AAA5B,mGAAA,UAAU,OAAA;AAEnB,6CAA+F;AAAtF,uHAAA,wBAAwB,OAAA;AAAE,iHAAA,kBAAkB,OAAA;AAAE,+GAAA,gBAAgB,OAAA;AAEvE,yCAIqB;AAHnB,wHAAA,2BAA2B,OAAA;AAC3B,+GAAA,kBAAkB,OAAA;AAClB,uHAAA,0BAA0B,OAAA;AAE5B,mDAAwD;AAA/C,sHAAA,oBAAoB,OAAA;AAE7B,mDAAsD;AAA7C,oHAAA,kBAAkB,OAAA"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";;;AAAA,iCAAyD;AAAhD,mGAAA,UAAU,OAAA;AAAE,2GAAA,kBAAkB,OAAA;AAEvC,6BAAgG;AAAvF,+GAAA,wBAAwB,OAAA;AAAE,sGAAA,eAAe,OAAA;AAAE,qGAAA,cAAc,OAAA;AAAE,mGAAA,YAAY,OAAA;AAEhF,6CAKuB;AAJrB,uHAAA,wBAAwB,OAAA;AACxB,iHAAA,kBAAkB,OAAA;AAClB,mHAAA,oBAAoB,OAAA;AACpB,+GAAA,gBAAgB,OAAA;AAGlB,yCAOqB;AANnB,2GAAA,cAAc,OAAA;AACd,iHAAA,oBAAoB,OAAA;AACpB,wHAAA,2BAA2B,OAAA;AAC3B,+GAAA,kBAAkB,OAAA;AAClB,uHAAA,0BAA0B,OAAA;AAC1B,wGAAA,WAAW,OAAA;AAEb,yCAA6C;AAApC,2GAAA,cAAc,OAAA;AAGvB,mDAA6E;AAApE,sHAAA,oBAAoB,OAAA;AAAE,qHAAA,mBAAmB,OAAA;AAElD,mDAAsD;AAA7C,oHAAA,kBAAkB,OAAA"}

package/dist/multipart.d.ts

@@ -0,0 +1,22 @@
+/** One part of a `multipart/form-data` body. */
+export interface MultipartPart {
+    name: string;
+    value: string | Uint8Array;
+    /** Sent as the part's `Content-Type`. Omitted when not given. */
+    contentType?: string;
+    /** Makes the part a file upload. */
+    fileName?: string;
+}
+/**
+ * Encodes a `multipart/form-data` body by hand.
+ *
+ * `FormData` cannot give a text field its own `Content-Type`, and the MiniApp API declares its `message`
+ * part as `application/json`. Wrapping the JSON in a `Blob` would set the type but also turn the field
+ * into a file upload named "blob", which servers then file under uploads instead of fields. So the body
+ * is built here, with names escaped the way the WHATWG `FormData` serialiser escapes them.
+ */
+export declare function buildMultipart(parts: MultipartPart[]): {
+    body: Uint8Array;
+    contentType: string;
+};
+//# sourceMappingURL=multipart.d.ts.map

package/dist/multipart.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"multipart.d.ts","sourceRoot":"","sources":["../src/multipart.ts"],"names":[],"mappings":"AAEA,gDAAgD;AAChD,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,GAAG,UAAU,CAAC;IAC3B,iEAAiE;IACjE,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,oCAAoC;IACpC,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED;;;;;;;GAOG;AACH,wBAAgB,cAAc,CAAC,KAAK,EAAE,aAAa,EAAE,GAAG;IAAE,IAAI,EAAE,UAAU,CAAC;IAAC,WAAW,EAAE,MAAM,CAAA;CAAE,CAkBhG"}

package/dist/multipart.js

@@ -0,0 +1,37 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.buildMultipart = buildMultipart;
+const crypto_1 = require("crypto");
+/**
+ * Encodes a `multipart/form-data` body by hand.
+ *
+ * `FormData` cannot give a text field its own `Content-Type`, and the MiniApp API declares its `message`
+ * part as `application/json`. Wrapping the JSON in a `Blob` would set the type but also turn the field
+ * into a file upload named "blob", which servers then file under uploads instead of fields. So the body
+ * is built here, with names escaped the way the WHATWG `FormData` serialiser escapes them.
+ */
+function buildMultipart(parts) {
+    const boundary = `----KobilFormBoundary${(0, crypto_1.randomBytes)(12).toString("hex")}`;
+    const chunks = [];
+    for (const part of parts) {
+        let head = `--${boundary}\r\nContent-Disposition: form-data; name="${escapeName(part.name)}"`;
+        if (part.fileName !== undefined)
+            head += `; filename="${escapeName(part.fileName)}"`;
+        head += "\r\n";
+        if (part.contentType)
+            head += `Content-Type: ${part.contentType}\r\n`;
+        head += "\r\n";
+        chunks.push(Buffer.from(head, "utf8"));
+        chunks.push(typeof part.value === "string" ? Buffer.from(part.value, "utf8") : Buffer.from(part.value));
+        chunks.push(Buffer.from("\r\n", "utf8"));
+    }
+    chunks.push(Buffer.from(`--${boundary}--\r\n`, "utf8"));
+    return {
+        body: new Uint8Array(Buffer.concat(chunks)),
+        contentType: `multipart/form-data; boundary=${boundary}`,
+    };
+}
+function escapeName(value) {
+    return value.replace(/"/g, "%22").replace(/\r/g, "%0D").replace(/\n/g, "%0A");
+}
+//# sourceMappingURL=multipart.js.map

package/dist/multipart.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"multipart.js","sourceRoot":"","sources":["../src/multipart.ts"],"names":[],"mappings":";;AAoBA,wCAkBC;AAtCD,mCAAqC;AAYrC;;;;;;;GAOG;AACH,SAAgB,cAAc,CAAC,KAAsB;IACnD,MAAM,QAAQ,GAAG,wBAAwB,IAAA,oBAAW,EAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;IAC3E,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,IAAI,GAAG,KAAK,QAAQ,6CAA6C,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC;QAC9F,IAAI,IAAI,CAAC,QAAQ,KAAK,SAAS;YAAE,IAAI,IAAI,eAAe,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC;QACrF,IAAI,IAAI,MAAM,CAAC;QACf,IAAI,IAAI,CAAC,WAAW;YAAE,IAAI,IAAI,iBAAiB,IAAI,CAAC,WAAW,MAAM,CAAC;QACtE,IAAI,IAAI,MAAM,CAAC;QACf,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;QACvC,MAAM,CAAC,IAAI,CAAC,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;QACxG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IAC3C,CAAC;IACD,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,QAAQ,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC;IACxD,OAAO;QACL,IAAI,EAAE,IAAI,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAC3C,WAAW,EAAE,iCAAiC,QAAQ,EAAE;KACzD,CAAC;AACJ,CAAC;AAED,SAAS,UAAU,CAAC,KAAa;IAC/B,OAAO,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;AAChF,CAAC"}

package/dist/push.d.ts

@@ -0,0 +1,37 @@
+/**
+ * Push notification content (MiniApp API). The same shape is bundled as `push` on any message and sent
+ * on its own through `ChatClient.sendPush`; the recipient is the message's or request's `userId`.
+ */
+export interface PushContent {
+    /** Max 256 characters. */
+    title: string;
+    /** Max 1024 characters. */
+    body: string;
+    /** Custom payload forwarded to the devices as-is. */
+    data?: Record<string, unknown>;
+    priority?: "high" | "normal" | "low";
+    /** Deliver without alerting the user. */
+    silent?: boolean;
+    /** Seconds the provider keeps the push for an offline device. */
+    ttl?: number;
+    /** Pushes with the same key replace each other on the device. Max 128 characters. */
+    collapseKey?: string;
+}
+/** Per-device outcome of a push. */
+export interface PushDeviceResult {
+    deviceId?: string;
+    success: boolean;
+    error?: {
+        code: number;
+        subsystem: number;
+        message: string;
+        traceId?: string;
+    };
+}
+/** Gateway acceptance of a push — returned by `sendPush`, and as `push` on a message that bundled one. */
+export interface PushResponse {
+    status: "accepted" | "failed";
+    notificationId?: string;
+    devices: PushDeviceResult[];
+}
+//# sourceMappingURL=push.d.ts.map

package/dist/push.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"push.d.ts","sourceRoot":"","sources":["../src/push.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,MAAM,WAAW,WAAW;IAC1B,0BAA0B;IAC1B,KAAK,EAAE,MAAM,CAAC;IACd,2BAA2B;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,qDAAqD;IACrD,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC/B,QAAQ,CAAC,EAAE,MAAM,GAAG,QAAQ,GAAG,KAAK,CAAC;IACrC,yCAAyC;IACzC,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,iEAAiE;IACjE,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,qFAAqF;IACrF,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,oCAAoC;AACpC,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,OAAO,CAAC;IACjB,KAAK,CAAC,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;CAChF;AAED,0GAA0G;AAC1G,MAAM,WAAW,YAAY;IAC3B,MAAM,EAAE,UAAU,GAAG,QAAQ,CAAC;IAC9B,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,OAAO,EAAE,gBAAgB,EAAE,CAAC;CAC7B"}

package/dist/push.js

@@ -0,0 +1,3 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=push.js.map

package/dist/push.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"push.js","sourceRoot":"","sources":["../src/push.ts"],"names":[],"mappings":""}

package/dist/service-client.d.ts

@@ -1,5 +1,7 @@
 import { KobilError } from "./error";
+import { MultipartPart } from "./multipart";
 import { TokenProvider } from "./token-provider";
+type RequestBody = string | FormData | Uint8Array;
 /**
  * Base class for typed KOBIL service clients. Attaches the shared bearer token,
  * sends the request, and turns non-2xx/transport failures into an error (override
@@ -11,11 +13,22 @@ export declare abstract class KobilServiceClient {
     /** Override to wrap failures in a module-specific error type. */
     protected makeError(message: string, statusCode?: number, responseBody?: string, cause?: unknown): KobilError;
     /** Sends a request with a JSON body (or none) and parses the JSON response. */
-    protected sendJson<T>(method: string, url: string, body?: unknown, signal?: AbortSignal): Promise<T>;
+    protected sendJson<T>(method: string, url: string, body?: unknown, signal?: AbortSignal, extraHeaders?: Record<string, string>): Promise<T>;
     /** Sends a request with an arbitrary body (e.g. FormData) and parses the JSON response. */
-    protected send<T>(method: string, url: string, body: string | FormData, signal?: AbortSignal): Promise<T>;
+    protected send<T>(method: string, url: string, body: RequestBody, signal?: AbortSignal, extraHeaders?: Record<string, string>): Promise<T>;
+    /** Sends a hand-built `multipart/form-data` body (see {@link buildMultipart}) and parses the JSON response. */
+    protected sendMultipart<T>(method: string, url: string, parts: MultipartPart[], signal?: AbortSignal): Promise<T>;
     /** Sends a request and returns the raw response bytes (e.g. a file download). */
     protected sendForBytes(method: string, url: string, signal?: AbortSignal): Promise<Uint8Array>;
+    /**
+     * GETs a resource that answers with a redirect to a presigned URL, and returns the bytes behind it.
+     *
+     * The redirect is followed by hand so the bearer token is never sent to the presigned host: the
+     * MiniApp API says not to forward it, and storage services reject a request carrying two credentials.
+     * A server that answers 200 directly (no redirect) is accepted as well.
+     */
+    protected downloadViaRedirect(url: string, signal?: AbortSignal): Promise<Uint8Array>;
     private request;
 }
+export {};
 //# sourceMappingURL=service-client.d.ts.map

package/dist/service-client.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"service-client.d.ts","sourceRoot":"","sources":["../src/service-client.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAEjD;;;;GAIG;AACH,8BAAsB,kBAAkB;IAChB,SAAS,CAAC,QAAQ,CAAC,MAAM,EAAE,aAAa;IAA9D,SAAS,aAAgC,MAAM,EAAE,aAAa;IAE9D,iEAAiE;IACjE,SAAS,CAAC,SAAS,CAAC,OAAO,EAAE,MAAM,EAAE,UAAU,CAAC,EAAE,MAAM,EAAE,YAAY,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,OAAO,GAAG,UAAU;IAI7G,+EAA+E;IAC/E,SAAS,CAAC,QAAQ,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,CAAC,CAAC;IAUpG,2FAA2F;IAC3F,SAAS,CAAC,IAAI,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,QAAQ,EAAE,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,CAAC,CAAC;IAIzG,iFAAiF;cACjE,YAAY,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,UAAU,CAAC;YAetF,OAAO;CAiCtB"}
+{"version":3,"file":"service-client.d.ts","sourceRoot":"","sources":["../src/service-client.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAsB,MAAM,SAAS,CAAC;AACzD,OAAO,EAAE,aAAa,EAAkB,MAAM,aAAa,CAAC;AAC5D,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAEjD,KAAK,WAAW,GAAG,MAAM,GAAG,QAAQ,GAAG,UAAU,CAAC;AAElD;;;;GAIG;AACH,8BAAsB,kBAAkB;IAChB,SAAS,CAAC,QAAQ,CAAC,MAAM,EAAE,aAAa;IAA9D,SAAS,aAAgC,MAAM,EAAE,aAAa;IAE9D,iEAAiE;IACjE,SAAS,CAAC,SAAS,CAAC,OAAO,EAAE,MAAM,EAAE,UAAU,CAAC,EAAE,MAAM,EAAE,YAAY,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,OAAO,GAAG,UAAU;IAI7G,+EAA+E;IAC/E,SAAS,CAAC,QAAQ,CAAC,CAAC,EAClB,MAAM,EAAE,MAAM,EACd,GAAG,EAAE,MAAM,EACX,IAAI,CAAC,EAAE,OAAO,EACd,MAAM,CAAC,EAAE,WAAW,EACpB,YAAY,GAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAM,GACxC,OAAO,CAAC,CAAC,CAAC;IAUb,2FAA2F;IAC3F,SAAS,CAAC,IAAI,CAAC,CAAC,EACd,MAAM,EAAE,MAAM,EACd,GAAG,EAAE,MAAM,EACX,IAAI,EAAE,WAAW,EACjB,MAAM,CAAC,EAAE,WAAW,EACpB,YAAY,GAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAM,GACxC,OAAO,CAAC,CAAC,CAAC;IAIb,+GAA+G;IAC/G,SAAS,CAAC,aAAa,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,aAAa,EAAE,EAAE,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,CAAC,CAAC;IAKjH,iFAAiF;cACjE,YAAY,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,UAAU,CAAC;IAepG;;;;;;OAMG;cACa,mBAAmB,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,UAAU,CAAC;YA6B7E,OAAO;CAiCtB"}

package/dist/service-client.js

@@ -2,6 +2,7 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.KobilServiceClient = void 0;
 const error_1 = require("./error");
+const multipart_1 = require("./multipart");
 /**
  * Base class for typed KOBIL service clients. Attaches the shared bearer token,
  * sends the request, and turns non-2xx/transport failures into an error (override
@@ -17,8 +18,8 @@ class KobilServiceClient {
         return new error_1.KobilError(message, { statusCode, responseBody, cause });
     }
     /** Sends a request with a JSON body (or none) and parses the JSON response. */
-    sendJson(method, url, body, signal) {
-        const headers = { accept: "application/json" };
+    sendJson(method, url, body, signal, extraHeaders = {}) {
+        const headers = { ...extraHeaders, accept: "application/json" };
         let payload;
         if (body !== undefined && body !== null) {
             headers["content-type"] = "application/json";
@@ -27,8 +28,13 @@ class KobilServiceClient {
         return this.request(method, url, headers, payload, signal);
     }
     /** Sends a request with an arbitrary body (e.g. FormData) and parses the JSON response. */
-    send(method, url, body, signal) {
-        return this.request(method, url, { accept: "application/json" }, body, signal);
+    send(method, url, body, signal, extraHeaders = {}) {
+        return this.request(method, url, { ...extraHeaders, accept: "application/json" }, body, signal);
+    }
+    /** Sends a hand-built `multipart/form-data` body (see {@link buildMultipart}) and parses the JSON response. */
+    sendMultipart(method, url, parts, signal) {
+        const { body, contentType } = (0, multipart_1.buildMultipart)(parts);
+        return this.send(method, url, body, signal, { "content-type": contentType });
     }
     /** Sends a request and returns the raw response bytes (e.g. a file download). */
     async sendForBytes(method, url, signal) {
@@ -42,7 +48,42 @@ class KobilServiceClient {
         }
         if (!response.ok) {
             const text = await response.text().catch(() => undefined);
-            throw this.makeError(`KOBIL API returned ${response.status} for ${method} ${url}.`, response.status, text);
+            throw this.makeError(failureMessage(method, url, response.status, text), response.status, text);
+        }
+        return new Uint8Array(await response.arrayBuffer());
+    }
+    /**
+     * GETs a resource that answers with a redirect to a presigned URL, and returns the bytes behind it.
+     *
+     * The redirect is followed by hand so the bearer token is never sent to the presigned host: the
+     * MiniApp API says not to forward it, and storage services reject a request carrying two credentials.
+     * A server that answers 200 directly (no redirect) is accepted as well.
+     */
+    async downloadViaRedirect(url, signal) {
+        const token = await this.tokens.getToken(signal);
+        let response;
+        try {
+            response = await fetch(url, { method: "GET", headers: { authorization: `Bearer ${token}` }, redirect: "manual", signal });
+        }
+        catch (cause) {
+            throw this.makeError(`An error occurred while calling GET ${url}.`, undefined, undefined, cause);
+        }
+        if (response.status >= 300 && response.status < 400) {
+            const location = response.headers.get("location");
+            if (!location) {
+                throw this.makeError(`KOBIL API redirected GET ${url} without a Location header.`, response.status);
+            }
+            const target = new URL(location, url).toString();
+            try {
+                response = await fetch(target, { method: "GET", signal });
+            }
+            catch (cause) {
+                throw this.makeError(`An error occurred while downloading ${target}.`, undefined, undefined, cause);
+            }
+        }
+        if (!response.ok) {
+            const text = await response.text().catch(() => undefined);
+            throw this.makeError(failureMessage("GET", url, response.status, text), response.status, text);
         }
         return new Uint8Array(await response.arrayBuffer());
     }
@@ -62,7 +103,7 @@ class KobilServiceClient {
         }
         const text = await response.text();
         if (!response.ok) {
-            throw this.makeError(`KOBIL API returned ${response.status} for ${method} ${url}.`, response.status, text);
+            throw this.makeError(failureMessage(method, url, response.status, text), response.status, text);
         }
         if (!text) {
             return {};
@@ -76,4 +117,10 @@ class KobilServiceClient {
     }
 }
 exports.KobilServiceClient = KobilServiceClient;
+/** The error message for a non-2xx response, carrying the MiniApp API's own message when there is one. */
+function failureMessage(method, url, status, body) {
+    const envelope = (0, error_1.parseErrorEnvelope)(body);
+    const detail = envelope?.message ? `: ${envelope.message}` : "";
+    return `KOBIL API returned ${status} for ${method} ${url}${detail}.`;
+}
 //# sourceMappingURL=service-client.js.map

package/dist/service-client.js.map

@@ -1 +1 @@
-{"version":3,"file":"service-client.js","sourceRoot":"","sources":["../src/service-client.ts"],"names":[],"mappings":";;;AAAA,mCAAqC;AAGrC;;;;GAIG;AACH,MAAsB,kBAAkB;IACG;IAAzC,YAAyC,MAAqB;QAArB,WAAM,GAAN,MAAM,CAAe;IAAG,CAAC;IAElE,iEAAiE;IACvD,SAAS,CAAC,OAAe,EAAE,UAAmB,EAAE,YAAqB,EAAE,KAAe;QAC9F,OAAO,IAAI,kBAAU,CAAC,OAAO,EAAE,EAAE,UAAU,EAAE,YAAY,EAAE,KAAK,EAAE,CAAC,CAAC;IACtE,CAAC;IAED,+EAA+E;IACrE,QAAQ,CAAI,MAAc,EAAE,GAAW,EAAE,IAAc,EAAE,MAAoB;QACrF,MAAM,OAAO,GAA2B,EAAE,MAAM,EAAE,kBAAkB,EAAE,CAAC;QACvE,IAAI,OAAsC,CAAC;QAC3C,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;YACxC,OAAO,CAAC,cAAc,CAAC,GAAG,kBAAkB,CAAC;YAC7C,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QACjC,CAAC;QACD,OAAO,IAAI,CAAC,OAAO,CAAI,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;IAChE,CAAC;IAED,2FAA2F;IACjF,IAAI,CAAI,MAAc,EAAE,GAAW,EAAE,IAAuB,EAAE,MAAoB;QAC1F,OAAO,IAAI,CAAC,OAAO,CAAI,MAAM,EAAE,GAAG,EAAE,EAAE,MAAM,EAAE,kBAAkB,EAAE,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;IACpF,CAAC;IAED,iFAAiF;IACvE,KAAK,CAAC,YAAY,CAAC,MAAc,EAAE,GAAW,EAAE,MAAoB;QAC5E,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QACjD,IAAI,QAAkB,CAAC;QACvB,IAAI,CAAC;YACH,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,KAAK,EAAE,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;QACjG,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,CAAC,SAAS,CAAC,mCAAmC,MAAM,IAAI,GAAG,GAAG,EAAE,SAAS,EAAE,SAAS,EAAE,KAAK,CAAC,CAAC;QACzG,CAAC;QACD,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;YAC1D,MAAM,IAAI,CAAC,SAAS,CAAC,sBAAsB,QAAQ,CAAC,MAAM,QAAQ,MAAM,IAAI,GAAG,GAAG,EAAE,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QAC7G,CAAC;QACD,OAAO,IAAI,UAAU,CAAC,MAAM,QAAQ,CAAC,WAAW,EAAE,CAAC,CAAC;IACtD,CAAC;IAEO,KAAK,CAAC,OAAO,CACnB,MAAc,EACd,GAAW,EACX,OAA+B,EAC/B,IAAmC,EACnC,MAAoB;QAEpB,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QACjD,IAAI,QAAkB,CAAC;QACvB,IAAI,CAAC;YACH,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;gBAC1B,MAAM;gBACN,OAAO,EAAE,EAAE,GAAG,OAAO,EAAE,aAAa,EAAE,UAAU,KAAK,EAAE,EAAE;gBACzD,IAAI;gBACJ,MAAM;aACP,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,CAAC,SAAS,CAAC,mCAAmC,MAAM,IAAI,GAAG,GAAG,EAAE,SAAS,EAAE,SAAS,EAAE,KAAK,CAAC,CAAC;QACzG,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;QACnC,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,IAAI,CAAC,SAAS,CAAC,sBAAsB,QAAQ,CAAC,MAAM,QAAQ,MAAM,IAAI,GAAG,GAAG,EAAE,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QAC7G,CAAC;QACD,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,OAAO,EAAO,CAAC;QACjB,CAAC;QACD,IAAI,CAAC;YACH,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAM,CAAC;QAC/B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,CAAC,SAAS,CAAC,iCAAiC,MAAM,IAAI,GAAG,GAAG,EAAE,QAAQ,CAAC,MAAM,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;QACxG,CAAC;IACH,CAAC;CACF;AAzED,gDAyEC"}
+{"version":3,"file":"service-client.js","sourceRoot":"","sources":["../src/service-client.ts"],"names":[],"mappings":";;;AAAA,mCAAyD;AACzD,2CAA4D;AAK5D;;;;GAIG;AACH,MAAsB,kBAAkB;IACG;IAAzC,YAAyC,MAAqB;QAArB,WAAM,GAAN,MAAM,CAAe;IAAG,CAAC;IAElE,iEAAiE;IACvD,SAAS,CAAC,OAAe,EAAE,UAAmB,EAAE,YAAqB,EAAE,KAAe;QAC9F,OAAO,IAAI,kBAAU,CAAC,OAAO,EAAE,EAAE,UAAU,EAAE,YAAY,EAAE,KAAK,EAAE,CAAC,CAAC;IACtE,CAAC;IAED,+EAA+E;IACrE,QAAQ,CAChB,MAAc,EACd,GAAW,EACX,IAAc,EACd,MAAoB,EACpB,eAAuC,EAAE;QAEzC,MAAM,OAAO,GAA2B,EAAE,GAAG,YAAY,EAAE,MAAM,EAAE,kBAAkB,EAAE,CAAC;QACxF,IAAI,OAA2B,CAAC;QAChC,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;YACxC,OAAO,CAAC,cAAc,CAAC,GAAG,kBAAkB,CAAC;YAC7C,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QACjC,CAAC;QACD,OAAO,IAAI,CAAC,OAAO,CAAI,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;IAChE,CAAC;IAED,2FAA2F;IACjF,IAAI,CACZ,MAAc,EACd,GAAW,EACX,IAAiB,EACjB,MAAoB,EACpB,eAAuC,EAAE;QAEzC,OAAO,IAAI,CAAC,OAAO,CAAI,MAAM,EAAE,GAAG,EAAE,EAAE,GAAG,YAAY,EAAE,MAAM,EAAE,kBAAkB,EAAE,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;IACrG,CAAC;IAED,+GAA+G;IACrG,aAAa,CAAI,MAAc,EAAE,GAAW,EAAE,KAAsB,EAAE,MAAoB;QAClG,MAAM,EAAE,IAAI,EAAE,WAAW,EAAE,GAAG,IAAA,0BAAc,EAAC,KAAK,CAAC,CAAC;QACpD,OAAO,IAAI,CAAC,IAAI,CAAI,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,cAAc,EAAE,WAAW,EAAE,CAAC,CAAC;IAClF,CAAC;IAED,iFAAiF;IACvE,KAAK,CAAC,YAAY,CAAC,MAAc,EAAE,GAAW,EAAE,MAAoB;QAC5E,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QACjD,IAAI,QAAkB,CAAC;QACvB,IAAI,CAAC;YACH,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,KAAK,EAAE,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;QACjG,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,CAAC,SAAS,CAAC,mCAAmC,MAAM,IAAI,GAAG,GAAG,EAAE,SAAS,EAAE,SAAS,EAAE,KAAK,CAAC,CAAC;QACzG,CAAC;QACD,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;YAC1D,MAAM,IAAI,CAAC,SAAS,CAAC,cAAc,CAAC,MAAM,EAAE,GAAG,EAAE,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAC,EAAE,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QAClG,CAAC;QACD,OAAO,IAAI,UAAU,CAAC,MAAM,QAAQ,CAAC,WAAW,EAAE,CAAC,CAAC;IACtD,CAAC;IAED;;;;;;OAMG;IACO,KAAK,CAAC,mBAAmB,CAAC,GAAW,EAAE,MAAoB;QACnE,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QACjD,IAAI,QAAkB,CAAC;QACvB,IAAI,CAAC;YACH,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,KAAK,EAAE,EAAE,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC;QAC5H,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,CAAC,SAAS,CAAC,uCAAuC,GAAG,GAAG,EAAE,SAAS,EAAE,SAAS,EAAE,KAAK,CAAC,CAAC;QACnG,CAAC;QAED,IAAI,QAAQ,CAAC,MAAM,IAAI,GAAG,IAAI,QAAQ,CAAC,MAAM,GAAG,GAAG,EAAE,CAAC;YACpD,MAAM,QAAQ,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;YAClD,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACd,MAAM,IAAI,CAAC,SAAS,CAAC,4BAA4B,GAAG,6BAA6B,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;YACtG,CAAC;YACD,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC,QAAQ,EAAE,CAAC;YACjD,IAAI,CAAC;gBACH,QAAQ,GAAG,MAAM,KAAK,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;YAC5D,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,IAAI,CAAC,SAAS,CAAC,uCAAuC,MAAM,GAAG,EAAE,SAAS,EAAE,SAAS,EAAE,KAAK,CAAC,CAAC;YACtG,CAAC;QACH,CAAC;QAED,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;YAC1D,MAAM,IAAI,CAAC,SAAS,CAAC,cAAc,CAAC,KAAK,EAAE,GAAG,EAAE,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAC,EAAE,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QACjG,CAAC;QACD,OAAO,IAAI,UAAU,CAAC,MAAM,QAAQ,CAAC,WAAW,EAAE,CAAC,CAAC;IACtD,CAAC;IAEO,KAAK,CAAC,OAAO,CACnB,MAAc,EACd,GAAW,EACX,OAA+B,EAC/B,IAA6B,EAC7B,MAAoB;QAEpB,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QACjD,IAAI,QAAkB,CAAC;QACvB,IAAI,CAAC;YACH,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;gBAC1B,MAAM;gBACN,OAAO,EAAE,EAAE,GAAG,OAAO,EAAE,aAAa,EAAE,UAAU,KAAK,EAAE,EAAE;gBACzD,IAAI;gBACJ,MAAM;aACP,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,CAAC,SAAS,CAAC,mCAAmC,MAAM,IAAI,GAAG,GAAG,EAAE,SAAS,EAAE,SAAS,EAAE,KAAK,CAAC,CAAC;QACzG,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;QACnC,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,IAAI,CAAC,SAAS,CAAC,cAAc,CAAC,MAAM,EAAE,GAAG,EAAE,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAC,EAAE,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QAClG,CAAC;QACD,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,OAAO,EAAO,CAAC;QACjB,CAAC;QACD,IAAI,CAAC;YACH,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAM,CAAC;QAC/B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,CAAC,SAAS,CAAC,iCAAiC,MAAM,IAAI,GAAG,GAAG,EAAE,QAAQ,CAAC,MAAM,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;QACxG,CAAC;IACH,CAAC;CACF;AA/HD,gDA+HC;AAED,0GAA0G;AAC1G,SAAS,cAAc,CAAC,MAAc,EAAE,GAAW,EAAE,MAAc,EAAE,IAAwB;IAC3F,MAAM,QAAQ,GAAG,IAAA,0BAAkB,EAAC,IAAI,CAAC,CAAC;IAC1C,MAAM,MAAM,GAAG,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC,KAAK,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IAChE,OAAO,sBAAsB,MAAM,QAAQ,MAAM,IAAI,GAAG,GAAG,MAAM,GAAG,CAAC;AACvE,CAAC"}

package/dist/token-provider.d.ts

@@ -3,6 +3,22 @@ import { KobilCredentials } from "./credentials";
 export interface TokenProvider {
     getToken(signal?: AbortSignal): Promise<string>;
 }
+/**
+ * Hands out a token obtained elsewhere — typically a signed-in user's access token from
+ * `AuthClient.exchangeCodeForToken`. The MiniApp API recommends a user token for calls that target that
+ * user (messages, payments, transactions); pass one per request:
+ *
+ * ```ts
+ * new ChatClient({ tokenProvider: new StaticTokenProvider(session.accessToken) })
+ * ```
+ *
+ * It never refreshes: an expired token fails with 401, and refreshing it is the caller's job.
+ */
+export declare class StaticTokenProvider implements TokenProvider {
+    private readonly token;
+    constructor(token: string);
+    getToken(): Promise<string>;
+}
 /**
  * Acquires OAuth2 tokens via the `client_credentials` grant — using either the form
  * body (`post`) or an HTTP Basic header (`basic`) — and caches them in memory until

package/dist/token-provider.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"token-provider.d.ts","sourceRoot":"","sources":["../src/token-provider.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AAGjD,kFAAkF;AAClF,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;CACjD;AAOD;;;;GAIG;AACH,qBAAa,oBAAqB,YAAW,aAAa;IAI5C,OAAO,CAAC,QAAQ,CAAC,WAAW;IAHxC,OAAO,CAAC,KAAK,CAAC,CAAc;IAC5B,OAAO,CAAC,QAAQ,CAAC,CAAkB;gBAEN,WAAW,EAAE,gBAAgB;IAEpD,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,MAAM,CAAC;YAavC,OAAO;CAqDtB"}
+{"version":3,"file":"token-provider.d.ts","sourceRoot":"","sources":["../src/token-provider.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AAGjD,kFAAkF;AAClF,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;CACjD;AAED;;;;;;;;;;GAUG;AACH,qBAAa,mBAAoB,YAAW,aAAa;IAC3C,OAAO,CAAC,QAAQ,CAAC,KAAK;gBAAL,KAAK,EAAE,MAAM;IAI1C,QAAQ,IAAI,OAAO,CAAC,MAAM,CAAC;CAG5B;AAOD;;;;GAIG;AACH,qBAAa,oBAAqB,YAAW,aAAa;IAI5C,OAAO,CAAC,QAAQ,CAAC,WAAW;IAHxC,OAAO,CAAC,KAAK,CAAC,CAAc;IAC5B,OAAO,CAAC,QAAQ,CAAC,CAAkB;gBAEN,WAAW,EAAE,gBAAgB;IAEpD,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,MAAM,CAAC;YAavC,OAAO;CA4DtB"}

package/dist/token-provider.js

@@ -1,7 +1,30 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.DefaultTokenProvider = void 0;
+exports.DefaultTokenProvider = exports.StaticTokenProvider = void 0;
 const error_1 = require("./error");
+/**
+ * Hands out a token obtained elsewhere — typically a signed-in user's access token from
+ * `AuthClient.exchangeCodeForToken`. The MiniApp API recommends a user token for calls that target that
+ * user (messages, payments, transactions); pass one per request:
+ *
+ * ```ts
+ * new ChatClient({ tokenProvider: new StaticTokenProvider(session.accessToken) })
+ * ```
+ *
+ * It never refreshes: an expired token fails with 401, and refreshing it is the caller's job.
+ */
+class StaticTokenProvider {
+    token;
+    constructor(token) {
+        this.token = token;
+        if (!token)
+            throw new error_1.KobilError("StaticTokenProvider needs a non-empty token.");
+    }
+    getToken() {
+        return Promise.resolve(this.token);
+    }
+}
+exports.StaticTokenProvider = StaticTokenProvider;
 /**
  * Acquires OAuth2 tokens via the `client_credentials` grant — using either the form
  * body (`post`) or an HTTP Basic header (`basic`) — and caches them in memory until
@@ -28,12 +51,14 @@ class DefaultTokenProvider {
     }
     async request(signal) {
         const c = this.credentials;
+        // Named after the environment variables, because the environment is how this is configured in
+        // practice. In miniapp mode the endpoint needs a realm, which OIDC_ISSUER also supplies.
         if (!c.tokenEndpoint)
-            throw new error_1.KobilError("credentials.tokenEndpoint is required.");
+            throw new error_1.KobilError("No token endpoint: set OIDC_ISSUER (or pass tokenEndpoint, or realm in miniapp mode).");
         if (!c.clientId)
-            throw new error_1.KobilError("credentials.clientId is required.");
+            throw new error_1.KobilError("No client id: set OIDC_CLIENT_ID (PAYMENT_MERCHANT_ID for legacy payment), or pass clientId.");
         if (!c.clientSecret)
-            throw new error_1.KobilError("credentials.clientSecret is required.");
+            throw new error_1.KobilError("No client secret: set OIDC_CLIENT_SECRET (PAYMENT_MERCHANT_SECRET for legacy payment), or pass clientSecret.");
         const body = new URLSearchParams({ grant_type: "client_credentials" });
         const headers = {
             "content-type": "application/x-www-form-urlencoded",

package/dist/token-provider.js.map

@@ -1 +1 @@
-{"version":3,"file":"token-provider.js","sourceRoot":"","sources":["../src/token-provider.ts"],"names":[],"mappings":";;;AACA,mCAAqC;AAYrC;;;;GAIG;AACH,MAAa,oBAAoB;IAIF;IAHrB,KAAK,CAAe;IACpB,QAAQ,CAAmB;IAEnC,YAA6B,WAA6B;QAA7B,gBAAW,GAAX,WAAW,CAAkB;IAAG,CAAC;IAE9D,KAAK,CAAC,QAAQ,CAAC,MAAoB;QACjC,IAAI,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;YACpD,OAAO,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC;QAC1B,CAAC;QACD,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YAClB,OAAO,IAAI,CAAC,QAAQ,CAAC;QACvB,CAAC;QACD,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE;YAChD,IAAI,CAAC,QAAQ,GAAG,SAAS,CAAC;QAC5B,CAAC,CAAC,CAAC;QACH,OAAO,IAAI,CAAC,QAAQ,CAAC;IACvB,CAAC;IAEO,KAAK,CAAC,OAAO,CAAC,MAAoB;QACxC,MAAM,CAAC,GAAG,IAAI,CAAC,WAAW,CAAC;QAC3B,IAAI,CAAC,CAAC,CAAC,aAAa;YAAE,MAAM,IAAI,kBAAU,CAAC,wCAAwC,CAAC,CAAC;QACrF,IAAI,CAAC,CAAC,CAAC,QAAQ;YAAE,MAAM,IAAI,kBAAU,CAAC,mCAAmC,CAAC,CAAC;QAC3E,IAAI,CAAC,CAAC,CAAC,YAAY;YAAE,MAAM,IAAI,kBAAU,CAAC,uCAAuC,CAAC,CAAC;QAEnF,MAAM,IAAI,GAAG,IAAI,eAAe,CAAC,EAAE,UAAU,EAAE,oBAAoB,EAAE,CAAC,CAAC;QACvE,MAAM,OAAO,GAA2B;YACtC,cAAc,EAAE,mCAAmC;SACpD,CAAC;QAEF,IAAI,CAAC,CAAC,CAAC,aAAa,IAAI,MAAM,CAAC,KAAK,OAAO,EAAE,CAAC;YAC5C,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,YAAY,EAAE,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;YAChF,OAAO,CAAC,eAAe,CAAC,GAAG,SAAS,KAAK,EAAE,CAAC;QAC9C,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC;YAClC,IAAI,CAAC,GAAG,CAAC,eAAe,EAAE,CAAC,CAAC,YAAY,CAAC,CAAC;QAC5C,CAAC;QAED,IAAI,QAAkB,CAAC;QACvB,IAAI,CAAC;YACH,QAAQ,GAAG,MAAM,KAAK,CAAC,CAAC,CAAC,aAAa,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;QACrF,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,kBAAU,CAAC,oDAAoD,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;QACxF,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;QACnC,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,IAAI,kBAAU,CAAC,2BAA2B,QAAQ,CAAC,MAAM,GAAG,EAAE;gBAClE,UAAU,EAAE,QAAQ,CAAC,MAAM;gBAC3B,YAAY,EAAE,IAAI;aACnB,CAAC,CAAC;QACL,CAAC;QAED,IAAI,IAAoD,CAAC;QACzD,IAAI,CAAC;YACH,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC1B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,kBAAU,CAAC,uCAAuC,EAAE,EAAE,KAAK,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC;QAC/F,CAAC;QAED,MAAM,KAAK,GAAG,IAAI,CAAC,YAAY,CAAC;QAChC,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,MAAM,IAAI,kBAAU,CAAC,0DAA0D,EAAE;gBAC/E,YAAY,EAAE,IAAI;aACnB,CAAC,CAAC;QACL,CAAC;QAED,MAAM,UAAU,GACd,CAAC,IAAI,CAAC,UAAU,IAAI,CAAC,CAAC,sBAAsB,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,sBAAsB,IAAI,EAAE,CAAC,CAAC;QAC1F,IAAI,CAAC,KAAK,GAAG,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,UAAU,CAAC,GAAG,IAAI,EAAE,CAAC;QAC/E,OAAO,KAAK,CAAC;IACf,CAAC;CACF;AAxED,oDAwEC"}
+{"version":3,"file":"token-provider.js","sourceRoot":"","sources":["../src/token-provider.ts"],"names":[],"mappings":";;;AACA,mCAAqC;AAOrC;;;;;;;;;;GAUG;AACH,MAAa,mBAAmB;IACD;IAA7B,YAA6B,KAAa;QAAb,UAAK,GAAL,KAAK,CAAQ;QACxC,IAAI,CAAC,KAAK;YAAE,MAAM,IAAI,kBAAU,CAAC,8CAA8C,CAAC,CAAC;IACnF,CAAC;IAED,QAAQ;QACN,OAAO,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACrC,CAAC;CACF;AARD,kDAQC;AAOD;;;;GAIG;AACH,MAAa,oBAAoB;IAIF;IAHrB,KAAK,CAAe;IACpB,QAAQ,CAAmB;IAEnC,YAA6B,WAA6B;QAA7B,gBAAW,GAAX,WAAW,CAAkB;IAAG,CAAC;IAE9D,KAAK,CAAC,QAAQ,CAAC,MAAoB;QACjC,IAAI,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;YACpD,OAAO,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC;QAC1B,CAAC;QACD,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YAClB,OAAO,IAAI,CAAC,QAAQ,CAAC;QACvB,CAAC;QACD,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE;YAChD,IAAI,CAAC,QAAQ,GAAG,SAAS,CAAC;QAC5B,CAAC,CAAC,CAAC;QACH,OAAO,IAAI,CAAC,QAAQ,CAAC;IACvB,CAAC;IAEO,KAAK,CAAC,OAAO,CAAC,MAAoB;QACxC,MAAM,CAAC,GAAG,IAAI,CAAC,WAAW,CAAC;QAC3B,8FAA8F;QAC9F,yFAAyF;QACzF,IAAI,CAAC,CAAC,CAAC,aAAa;YAClB,MAAM,IAAI,kBAAU,CAAC,uFAAuF,CAAC,CAAC;QAChH,IAAI,CAAC,CAAC,CAAC,QAAQ;YACb,MAAM,IAAI,kBAAU,CAAC,8FAA8F,CAAC,CAAC;QACvH,IAAI,CAAC,CAAC,CAAC,YAAY;YACjB,MAAM,IAAI,kBAAU,CAClB,8GAA8G,CAC/G,CAAC;QAEJ,MAAM,IAAI,GAAG,IAAI,eAAe,CAAC,EAAE,UAAU,EAAE,oBAAoB,EAAE,CAAC,CAAC;QACvE,MAAM,OAAO,GAA2B;YACtC,cAAc,EAAE,mCAAmC;SACpD,CAAC;QAEF,IAAI,CAAC,CAAC,CAAC,aAAa,IAAI,MAAM,CAAC,KAAK,OAAO,EAAE,CAAC;YAC5C,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,YAAY,EAAE,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;YAChF,OAAO,CAAC,eAAe,CAAC,GAAG,SAAS,KAAK,EAAE,CAAC;QAC9C,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC;YAClC,IAAI,CAAC,GAAG,CAAC,eAAe,EAAE,CAAC,CAAC,YAAY,CAAC,CAAC;QAC5C,CAAC;QAED,IAAI,QAAkB,CAAC;QACvB,IAAI,CAAC;YACH,QAAQ,GAAG,MAAM,KAAK,CAAC,CAAC,CAAC,aAAa,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;QACrF,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,kBAAU,CAAC,oDAAoD,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;QACxF,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;QACnC,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,IAAI,kBAAU,CAAC,2BAA2B,QAAQ,CAAC,MAAM,GAAG,EAAE;gBAClE,UAAU,EAAE,QAAQ,CAAC,MAAM;gBAC3B,YAAY,EAAE,IAAI;aACnB,CAAC,CAAC;QACL,CAAC;QAED,IAAI,IAAoD,CAAC;QACzD,IAAI,CAAC;YACH,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC1B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,kBAAU,CAAC,uCAAuC,EAAE,EAAE,KAAK,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC;QAC/F,CAAC;QAED,MAAM,KAAK,GAAG,IAAI,CAAC,YAAY,CAAC;QAChC,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,MAAM,IAAI,kBAAU,CAAC,0DAA0D,EAAE;gBAC/E,YAAY,EAAE,IAAI;aACnB,CAAC,CAAC;QACL,CAAC;QAED,MAAM,UAAU,GACd,CAAC,IAAI,CAAC,UAAU,IAAI,CAAC,CAAC,sBAAsB,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,sBAAsB,IAAI,EAAE,CAAC,CAAC;QAC1F,IAAI,CAAC,KAAK,GAAG,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,UAAU,CAAC,GAAG,IAAI,EAAE,CAAC;QAC/E,OAAO,KAAK,CAAC;IACf,CAAC;CACF;AA/ED,oDA+EC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@uveysservetoglu/kobil-core",
-  "version": "2.0.0",
+  "version": "3.0.0",
   "description": "Shared foundation for the KOBIL SDK family: OAuth token acquisition/caching (post & basic), a common error type, and an HTTP base for typed clients.",
   "license": "MIT",
   "main": "dist/index.js",