@viu/emporix-sdk 4.6.7 → 4.7.0

package/dist/{chunk-4VRUMCS2.js → chunk-PK4DQHJO.js}

@@ -1,5 +1,5 @@
-import { requireCustomer } from './chunk-3BDDYX3V.js';
-import { EmporixAuthError, EmporixTimeoutError, EmporixNetworkError } from './chunk-UWGGF4MC.js';
+import { requireCustomer } from './chunk-ZVIEFW3X.js';
+import { EmporixAuthError, EmporixTimeoutError, EmporixNetworkError } from './chunk-4Q76UV4J.js';
 
 // src/core/auth.ts
 var auth = {
@@ -403,5 +403,5 @@ var PaymentGatewayService = class {
 };
 
 export { CustomerRefreshRegistry, DefaultTokenProvider, PaymentGatewayService, auth, resolveToken };
-//# sourceMappingURL=chunk-4VRUMCS2.js.map
-//# sourceMappingURL=chunk-4VRUMCS2.js.map
+//# sourceMappingURL=chunk-PK4DQHJO.js.map
+//# sourceMappingURL=chunk-PK4DQHJO.js.map

package/dist/{chunk-4VRUMCS2.js.map → chunk-PK4DQHJO.js.map}

@@ -1 +1 @@
-{"version":3,"sources":["../src/core/auth.ts","../src/services/payment.ts"],"names":[],"mappings":";;;;AAkHO,IAAM,IAAA,GAAO;AAAA;AAAA,EAElB,OAAA,EAAS,CAAC,WAAA,KACR,WAAA,KAAgB,MAAA,GAAY,EAAE,IAAA,EAAM,SAAA,EAAU,GAAI,EAAE,IAAA,EAAM,SAAA,EAAW,WAAA,EAAY;AAAA;AAAA,EAEnF,SAAA,EAAW,OAAoB,EAAE,IAAA,EAAM,WAAA,EAAY,CAAA;AAAA;AAAA,EAEnD,UAAU,CAAC,KAAA,MAAgC,EAAE,IAAA,EAAM,YAAY,KAAA,EAAM,CAAA;AAAA;AAAA,EAErE,KAAK,CAAC,KAAA,MAAgC,EAAE,IAAA,EAAM,OAAO,KAAA,EAAM;AAC7D;AAGA,eAAsB,YAAA,CAAa,KAAkB,QAAA,EAA0C;AAC7F,EAAA,QAAQ,IAAI,IAAA;AAAM,IAChB,KAAK,SAAA;AACH,MAAA,OAAO,QAAA,CAAS,QAAA,CAAS,GAAA,CAAI,WAAA,IAAe,SAAS,CAAA;AAAA,IACvD,KAAK,WAAA;AACH,MAAA,OAAA,CAAQ,MAAM,QAAA,CAAS,iBAAA,EAAkB,EAAG,WAAA;AAAA,IAC9C,KAAK,UAAA;AAAA,IACL,KAAK,KAAA;AACH,MAAA,OAAO,GAAA,CAAI,KAAA;AAAA;AAEjB;AAQO,IAAM,0BAAN,MAA8B;AAAA,EAC3B,SAAA,GAA2C,IAAA;AAAA,EAC3C,QAAA,GAA0C,IAAA;AAAA,EAElD,IAAI,SAAA,EAAgD;AAClD,IAAA,IAAA,CAAK,SAAA,GAAY,SAAA;AAAA,EACnB;AAAA,EAEA,IAAI,OAAA,GAAmB;AACrB,IAAA,OAAO,KAAK,SAAA,KAAc,IAAA;AAAA,EAC5B;AAAA;AAAA,EAGA,QAAQ,YAAA,EAA8C;AACpD,IAAA,IAAI,CAAC,IAAA,CAAK,SAAA,EAAW,OAAO,OAAA,CAAQ,QAAQ,IAAI,CAAA;AAChD,IAAA,IAAI,IAAA,CAAK,QAAA,EAAU,OAAO,IAAA,CAAK,QAAA;AAC/B,IAAA,MAAM,CAAA,GAAI,OAAA,CAAQ,OAAA,CAAQ,IAAA,CAAK,SAAA,CAAU,QAAQ,YAAY,CAAC,CAAA,CAAE,OAAA,CAAQ,MAAM;AAC5E,MAAA,IAAA,CAAK,QAAA,GAAW,IAAA;AAAA,IAClB,CAAC,CAAA;AACD,IAAA,IAAA,CAAK,QAAA,GAAW,CAAA;AAChB,IAAA,OAAO,CAAA;AAAA,EACT;AACF;AASO,IAAM,uBAAN,MAAoD;AAAA,EAazD,YAA6B,GAAA,EAAqB;AAArB,IAAA,IAAA,CAAA,GAAA,GAAA,GAAA;AAAA,EAAsB;AAAA,EAAtB,GAAA;AAAA,EAZZ,YAAA,uBAAmB,GAAA,EAAwB;AAAA,EAC3C,YAAA,uBAAmB,GAAA,EAA6B;AAAA,EACzD,IAAA;AAAA,EACA,QAAA;AAAA,EACA,SAAA;AAAA,EACA,eAAA;AAAA,EAGS,gBAAA,uBAAuB,GAAA,EAEtC;AAAA,EAIF,UACE,QAAA,EACY;AACZ,IAAA,IAAA,CAAK,gBAAA,CAAiB,IAAI,QAAQ,CAAA;AAClC,IAAA,OAAO,MAAM;AACX,MAAA,IAAA,CAAK,gBAAA,CAAiB,OAAO,QAAQ,CAAA;AAAA,IACvC,CAAA;AAAA,EACF;AAAA,EAEQ,aAAA,CAAc,MAAgC,OAAA,EAAwB;AAC5E,IAAA,KAAA,MAAW,CAAA,IAAK,KAAK,gBAAA,EAAkB;AACrC,MAAA,IAAI;AACF,QAAA,CAAA,CAAE,EAAE,IAAA,EAAM,OAAA,EAAS,CAAA;AAAA,MACrB,CAAA,CAAA,MAAQ;AAAA,MAER;AAAA,IACF;AAAA,EACF;AAAA,EAEA,qBAAqB,KAAA,EAAoC;AACvD,IAAA,IAAA,CAAK,SAAA,GAAY,KAAA;AAkBjB,IAAA,IAAI,CAAC,KAAK,IAAA,EAAM;AACd,MAAA,MAAM,SAAA,GAAY,MAAM,IAAA,EAAK;AAC7B,MAAA,IAAI,SAAA,EAAW;AACb,QAAA,MAAM,KAAA,GAAQ,UAAU,WAAA,IAAe,EAAA;AACvC,QAAA,IAAA,CAAK,IAAA,GAAO;AAAA,UACV,WAAA,EAAa,KAAA;AAAA,UACb,cAAc,SAAA,CAAU,YAAA;AAAA,UACxB,WAAW,SAAA,CAAU,SAAA;AAAA,UACrB,SAAA,EAAW,CAAA;AAAA,UACX,SAAA,EAAW,KAAA,KAAU,EAAA,GAAK,CAAA,GAAK,UAAU,SAAA,IAAa;AAAA,SACxD;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAAA,EAEQ,MAAM,GAAA,EAAiC;AAC7C,IAAA,IAAI,QAAQ,SAAA,EAAW;AACrB,MAAA,MAAM,CAAA,GAAI,IAAA,CAAK,GAAA,CAAI,WAAA,CAAY,OAAA;AAC/B,MAAA,IAAI,CAAC,CAAA,EAAG,QAAA,IAAY,CAAC,EAAE,MAAA,EAAQ;AAC7B,QAAA,MAAM,IAAI,gBAAA;AAAA,UACR;AAAA,SACF;AAAA,MACF;AACA,MAAA,OAAO,CAAA;AAAA,IACT;AACA,IAAA,MAAM,CAAA,GAAI,IAAA,CAAK,GAAA,CAAI,WAAA,CAAY,SAAS,GAAG,CAAA;AAC3C,IAAA,IAAI,CAAC,CAAA,EAAG,MAAM,IAAI,KAAA,CAAM,CAAA,wBAAA,EAA2B,GAAG,CAAA,CAAA,CAAG,CAAA;AACzD,IAAA,OAAO,CAAA;AAAA,EACT;AAAA,EAEQ,MAAM,CAAA,EAAoC;AAChD,IAAA,IAAI,CAAC,GAAG,OAAO,KAAA;AACf,IAAA,MAAM,GAAA,GAAM,KAAK,GAAA,EAAI;AACrB,IAAA,IAAI,GAAA,GAAM,EAAE,UAAA,IAAc,IAAA,CAAK,IAAI,KAAA,CAAM,kBAAA,GAAqB,KAAM,OAAO,KAAA;AAC3E,IAAA,OAAO,MAAM,CAAA,CAAE,SAAA;AAAA,EACjB;AAAA,EAEA,MAAM,SAAS,GAAA,EAA8B;AAE3C,IAAA,IAAA,CAAK,MAAM,GAAG,CAAA;AACd,IAAA,MAAM,MAAA,GAAS,IAAA,CAAK,YAAA,CAAa,GAAA,CAAI,GAAG,CAAA;AACxC,IAAA,IAAI,IAAA,CAAK,KAAA,CAAM,MAAM,CAAA,SAAU,MAAA,CAAQ,KAAA;AACvC,IAAA,MAAM,QAAA,GAAW,IAAA,CAAK,YAAA,CAAa,GAAA,CAAI,GAAG,CAAA;AAC1C,IAAA,IAAI,UAAU,OAAO,QAAA;AACrB,IAAA,MAAM,CAAA,GAAI,IAAA,CAAK,mBAAA,CAAoB,GAAG,CAAA,CAAE,OAAA,CAAQ,MAAM,IAAA,CAAK,YAAA,CAAa,MAAA,CAAO,GAAG,CAAC,CAAA;AACnF,IAAA,IAAA,CAAK,YAAA,CAAa,GAAA,CAAI,GAAA,EAAK,CAAC,CAAA;AAC5B,IAAA,OAAO,CAAA;AAAA,EACT;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,MAAc,YAAA,CAAa,GAAA,EAAmB,IAAA,GAAoB,EAAC,EAAsB;AACvF,IAAA,MAAM,EAAA,GAAK,IAAA,CAAK,GAAA,CAAI,QAAA,EAAU,MAAA,IAAU,GAAA;AACxC,IAAA,MAAM,UAAA,GAAa,IAAI,eAAA,EAAgB;AACvC,IAAA,MAAM,QAAQ,UAAA,CAAW,MAAM,UAAA,CAAW,KAAA,IAAS,EAAE,CAAA;AACrD,IAAA,IAAI;AACF,MAAA,OAAO,MAAM,MAAM,GAAA,EAAK,EAAE,GAAG,IAAA,EAAM,MAAA,EAAQ,UAAA,CAAW,MAAA,EAAQ,CAAA;AAAA,IAChE,SAAS,GAAA,EAAK;AACZ,MAAA,IAAK,GAAA,CAAc,SAAS,YAAA,EAAc;AACxC,QAAA,MAAM,IAAI,mBAAA,CAAoB,CAAA,8BAAA,EAAiC,EAAE,CAAA,EAAA,CAAI,CAAA;AAAA,MACvE;AACA,MAAA,MAAM,IAAI,mBAAA,CAAoB,CAAA,+BAAA,EAAmC,GAAA,CAAc,OAAO,CAAA,CAAE,CAAA;AAAA,IAC1F,CAAA,SAAE;AACA,MAAA,YAAA,CAAa,KAAK,CAAA;AAAA,IACpB;AAAA,EACF;AAAA,EAEA,MAAc,oBAAoB,GAAA,EAA8B;AAC9D,IAAA,MAAM,CAAA,GAAI,IAAA,CAAK,KAAA,CAAM,GAAG,CAAA;AACxB,IAAA,MAAM,IAAA,GAAO,IAAI,eAAA,CAAgB;AAAA,MAC/B,UAAA,EAAY,oBAAA;AAAA,MACZ,WAAW,CAAA,CAAE,QAAA;AAAA,MACb,eAAe,CAAA,CAAE;AAAA,KAClB,CAAA;AACD,IAAA,IAAI,EAAE,KAAA,EAAO,IAAA,CAAK,GAAA,CAAI,OAAA,EAAS,EAAE,KAAK,CAAA;AACtC,IAAA,MAAM,GAAA,GAAM,MAAM,IAAA,CAAK,YAAA,CAAa,GAAG,IAAA,CAAK,GAAA,CAAI,IAAI,CAAA,YAAA,CAAA,EAAgB;AAAA,MAClE,MAAA,EAAQ,MAAA;AAAA,MACR,OAAA,EAAS,EAAE,cAAA,EAAgB,mCAAA,EAAoC;AAAA,MAC/D;AAAA,KACD,CAAA;AACD,IAAA,MAAM,IAAA,GAAQ,MAAM,GAAA,CAAI,IAAA,GAAO,KAAA,CAAM,OAAO,EAAC,CAAE,CAAA;AAC/C,IAAA,IAAI,CAAC,IAAI,EAAA,EAAI;AACX,MAAA,MAAM,IAAI,gBAAA,CAAiB,CAAA,0BAAA,EAA6B,GAAG,CAAA,CAAA,CAAA,EAAK,GAAA,CAAI,QAAQ,IAAI,CAAA;AAAA,IAClF;AACA,IAAA,MAAM,UAAA,GAAa,KAAK,GAAA,EAAI;AAC5B,IAAA,MAAM,GAAA,GAAM,MAAA,CAAQ,IAAA,CAAK,UAAA,IAAqC,IAAI,CAAA;AAClE,IAAA,IAAA,CAAK,YAAA,CAAa,IAAI,GAAA,EAAK;AAAA,MACzB,OAAO,IAAA,CAAK,YAAA;AAAA,MACZ,UAAA;AAAA,MACA,WAAW,UAAA,GAAA,CAAc,GAAA,GAAM,IAAA,CAAK,GAAA,CAAI,MAAM,uBAAA,IAA2B;AAAA,KAC1E,CAAA;AACD,IAAA,OAAO,IAAA,CAAK,YAAA,CAAa,GAAA,CAAI,GAAG,CAAA,CAAG,KAAA;AAAA,EACrC;AAAA,EAEA,WAAW,GAAA,EAAmB;AAC5B,IAAA,IAAA,CAAK,YAAA,CAAa,OAAO,GAAG,CAAA;AAAA,EAC9B;AAAA,EAEQ,SAAA,GAAqB;AAC3B,IAAA,OAAO,CAAC,CAAC,IAAA,CAAK,IAAA,IAAQ,KAAK,GAAA,EAAI,GAAI,KAAK,IAAA,CAAK,SAAA;AAAA,EAC/C;AAAA,EAEA,MAAM,iBAAA,GAA+C;AACnD,IAAA,IAAI,KAAK,SAAA,EAAU,SAAU,IAAA,CAAK,WAAA,CAAY,KAAK,IAAK,CAAA;AACxD,IAAA,IAAI,IAAA,CAAK,QAAA,EAAU,OAAO,IAAA,CAAK,QAAA;AAG/B,IAAA,MAAM,UAAA,GAAa,CAAC,CAAC,IAAA,CAAK,IAAA,EAAM,YAAA;AAChC,IAAA,MAAM,MAAA,GAAS,UAAA,GACX,IAAA,CAAK,cAAA,CAAe,SAAS,CAAA,CAAE,KAAA,CAAM,MAAM,IAAA,CAAK,eAAe,OAAO,CAAC,CAAA,GACvE,IAAA,CAAK,eAAe,OAAO,CAAA;AAC/B,IAAA,MAAM,CAAA,GAAI,MAAA,CAAO,OAAA,CAAQ,MAAM;AAC7B,MAAA,IAAA,CAAK,QAAA,GAAW,MAAA;AAAA,IAClB,CAAC,CAAA;AACD,IAAA,IAAA,CAAK,QAAA,GAAW,CAAA;AAChB,IAAA,OAAO,CAAA;AAAA,EACT;AAAA;AAAA,EAGA,MAAM,gBAAA,GAA8C;AAClD,IAAA,IAAI,CAAC,IAAA,CAAK,IAAA,EAAM,OAAO,KAAK,iBAAA,EAAkB;AAC9C,IAAA,OAAO,IAAA,CAAK,eAAe,SAAS,CAAA;AAAA,EACtC;AAAA,EAEA,mBAAA,GAA4B;AAC1B,IAAA,IAAA,CAAK,IAAA,GAAO,MAAA;AACZ,IAAA,IAAA,CAAK,SAAA,EAAW,MAAM,IAAI,CAAA;AAAA,EAC5B;AAAA,EAEA,oBAAoB,GAAA,EAIX;AACP,IAAA,MAAM,IAAA,GAAO,KAAK,eAAA,IAAmB,IAAA,CAAK,IAAI,WAAA,CAAY,UAAA,EAAY,WAAW,EAAC;AAClF,IAAA,IAAA,CAAK,eAAA,GAAkB,EAAE,GAAG,IAAA,EAAM,GAAG,GAAA,EAAI;AACzC,IAAA,IAAA,CAAK,mBAAA,EAAoB;AAAA,EAC3B;AAAA;AAAA,EAGA,eAAA,GAAwB;AACtB,IAAA,IAAI,IAAA,CAAK,MAAM,IAAA,CAAK,IAAA,GAAO,EAAE,GAAG,IAAA,CAAK,IAAA,EAAM,SAAA,EAAW,CAAA,EAAE;AAAA,EAC1D;AAAA,EAEQ,YAAY,CAAA,EAA+D;AACjF,IAAA,MAAM,EAAE,SAAA,EAAW,UAAA,EAAY,GAAG,MAAK,GAAI,CAAA;AAC3C,IAAA,OAAO,IAAA;AAAA,EACT;AAAA,EAEA,MAAc,eAAe,IAAA,EAAsD;AACjF,IAAA,MAAM,EAAA,GAAK,IAAA,CAAK,GAAA,CAAI,WAAA,CAAY,UAAA;AAChC,IAAA,IAAI,CAAC,IAAI,QAAA,EAAU;AACjB,MAAA,MAAM,IAAI,MAAM,kEAAkE,CAAA;AAAA,IACpF;AACA,IAAA,MAAM,GAAA,GAAM,IAAI,GAAA,CAAI,CAAA,EAAG,KAAK,GAAA,CAAI,IAAI,CAAA,8BAAA,EAAiC,IAAI,CAAA,CAAE,CAAA;AAC3E,IAAA,GAAA,CAAI,YAAA,CAAa,GAAA,CAAI,QAAA,EAAU,IAAA,CAAK,IAAI,MAAM,CAAA;AAC9C,IAAA,GAAA,CAAI,YAAA,CAAa,GAAA,CAAI,WAAA,EAAa,EAAA,CAAG,QAAQ,CAAA;AAG7C,IAAA,MAAM,CAAA,GAAI,IAAA,CAAK,eAAA,IAAmB,EAAA,CAAG,OAAA;AACrC,IAAA,IAAI,GAAG,QAAA,EAAU,GAAA,CAAI,aAAa,GAAA,CAAI,UAAA,EAAY,EAAE,QAAQ,CAAA;AAC5D,IAAA,IAAI,GAAG,QAAA,EAAU,GAAA,CAAI,aAAa,GAAA,CAAI,UAAA,EAAY,EAAE,QAAQ,CAAA;AAC5D,IAAA,IAAI,GAAG,cAAA,EAAgB,GAAA,CAAI,aAAa,GAAA,CAAI,gBAAA,EAAkB,EAAE,cAAc,CAAA;AAC9E,IAAA,IAAI,IAAA,KAAS,SAAA,IAAa,IAAA,CAAK,IAAA,EAAM;AACnC,MAAA,GAAA,CAAI,YAAA,CAAa,GAAA,CAAI,eAAA,EAAiB,IAAA,CAAK,KAAK,YAAY,CAAA;AAAA,IAC9D;AACA,IAAA,IAAI;AACF,MAAA,MAAM,GAAA,GAAM,MAAM,IAAA,CAAK,YAAA,CAAa,KAAK,EAAE,MAAA,EAAQ,OAAO,CAAA;AAC1D,MAAA,MAAM,IAAA,GAAQ,MAAM,GAAA,CAAI,IAAA,GAAO,KAAA,CAAM,OAAO,EAAC,CAAE,CAAA;AAC/C,MAAA,IAAI,CAAC,IAAI,EAAA,EAAI;AACX,QAAA,IAAA,CAAK,aAAA,CAAc,aAAa,KAAK,CAAA;AACrC,QAAA,MAAM,IAAI,gBAAA,CAAiB,CAAA,gBAAA,EAAmB,IAAI,CAAA,OAAA,CAAA,EAAW,GAAA,CAAI,QAAQ,IAAI,CAAA;AAAA,MAC/E;AACA,MAAA,MAAM,UAAA,GAAa,KAAK,GAAA,EAAI;AAC5B,MAAA,IAAA,CAAK,IAAA,GAAO;AAAA,QACV,aAAa,IAAA,CAAK,YAAA;AAAA,QAClB,cAAc,IAAA,CAAK,aAAA;AAAA,QACnB,WAAW,IAAA,CAAK,SAAA;AAAA,QAChB,WAAW,IAAA,CAAK,UAAA;AAAA,QAChB,WACE,UAAA,GAAA,CACE,IAAA,CAAK,aAAwB,IAAA,CAAK,GAAA,CAAI,MAAM,uBAAA,IAA2B;AAAA,OAC7E;AAIA,MAAA,IAAA,CAAK,WAAW,KAAA,CAAM;AAAA,QACpB,YAAA,EAAc,KAAK,IAAA,CAAK,YAAA;AAAA,QACxB,SAAA,EAAW,KAAK,IAAA,CAAK,SAAA;AAAA,QACrB,WAAA,EAAa,KAAK,IAAA,CAAK,WAAA;AAAA,QACvB,SAAA,EAAW,KAAK,IAAA,CAAK;AAAA,OACtB,CAAA;AACD,MAAA,IAAA,CAAK,aAAA,CAAc,aAAa,IAAI,CAAA;AACpC,MAAA,OAAO,IAAA,CAAK,WAAA,CAAY,IAAA,CAAK,IAAI,CAAA;AAAA,IACnC,SAAS,GAAA,EAAK;AAEZ,MAAA,IAAI,EAAE,eAAe,gBAAA,CAAA,EAAmB;AACtC,QAAA,IAAA,CAAK,aAAA,CAAc,aAAa,KAAK,CAAA;AAAA,MACvC;AACA,MAAA,MAAM,GAAA;AAAA,IACR;AAAA,EACF;AACF;;;AChaA,IAAM,IAAA,GAAoB,KAAK,SAAA,EAAU;AACzC,IAAM,OAAA,GAAuB,KAAK,OAAA,EAAQ;AA4DnC,IAAM,wBAAN,MAA4B;AAAA,EAEjC,YAA6B,GAAA,EAAoB;AAApB,IAAA,IAAA,CAAA,GAAA,GAAA,GAAA;AAAA,EAAqB;AAAA,EAArB,GAAA;AAAA,EAD7B,OAAgB,OAAA,GAAU,SAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQ1B,MAAM,gBAAA,CAAiB,OAAA,GAAuB,IAAA,EAA8B;AAC1E,IAAA,OAAO,IAAA,CAAK,GAAA,CAAI,IAAA,CAAK,OAAA,CAAuB;AAAA,MAC1C,MAAA,EAAQ,KAAA;AAAA,MACR,IAAA,EAAM,CAAA,iBAAA,EAAoB,IAAA,CAAK,GAAA,CAAI,MAAM,CAAA,sBAAA,CAAA;AAAA,MACzC,IAAA,EAAM;AAAA,KACP,CAAA;AAAA,EACH;AAAA;AAAA,EAGA,MAAM,SAAA,CACJ,KAAA,EACA,OAAA,EACiC;AACjC,IAAA,OAAO,IAAA,CAAK,GAAA,CAAI,IAAA,CAAK,OAAA,CAAgC;AAAA,MACnD,MAAA,EAAQ,MAAA;AAAA,MACR,IAAA,EAAM,CAAA,iBAAA,EAAoB,IAAA,CAAK,GAAA,CAAI,MAAM,CAAA,2BAAA,CAAA;AAAA,MACzC,IAAA,EAAM,gBAAgB,OAAO,CAAA;AAAA,MAC7B,IAAA,EAAM;AAAA,KACP,CAAA;AAAA,EACH;AAAA;AAAA,EAGA,MAAM,OAAA,CAAQ,EAAA,EAAY,OAAA,GAAuB,IAAA,EAA4B;AAC3E,IAAA,OAAO,IAAA,CAAK,GAAA,CAAI,IAAA,CAAK,OAAA,CAAqB;AAAA,MACxC,MAAA,EAAQ,KAAA;AAAA,MACR,MAAM,CAAA,iBAAA,EAAoB,IAAA,CAAK,GAAA,CAAI,MAAM,0BAA0B,EAAE,CAAA,CAAA;AAAA,MACrE,IAAA,EAAM;AAAA,KACP,CAAA;AAAA,EACH;AAAA;AAAA,EAGA,MAAM,UAAA,CACJ,KAAA,EACA,OAAA,GAAuB,IAAA,EACW;AAClC,IAAA,OAAO,IAAA,CAAK,GAAA,CAAI,IAAA,CAAK,OAAA,CAAiC;AAAA,MACpD,MAAA,EAAQ,MAAA;AAAA,MACR,IAAA,EAAM,CAAA,iBAAA,EAAoB,IAAA,CAAK,GAAA,CAAI,MAAM,CAAA,4BAAA,CAAA;AAAA,MACzC,IAAA,EAAM,OAAA;AAAA,MACN,IAAA,EAAM;AAAA,KACP,CAAA;AAAA,EACH;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOS,KAAA,GAAQ;AAAA;AAAA,IAEf,MAAM,OAAO,OAAA,GAAuB,YAClC,IAAA,CAAK,GAAA,CAAI,KAAK,OAAA,CAA6B;AAAA,MACzC,MAAA,EAAQ,KAAA;AAAA,MACR,IAAA,EAAM,CAAA,iBAAA,EAAoB,IAAA,CAAK,GAAA,CAAI,MAAM,CAAA,oBAAA,CAAA;AAAA,MACzC,IAAA,EAAM;AAAA,KACP,CAAA;AAAA;AAAA,IAGH,GAAA,EAAK,OAAO,EAAA,EAAY,OAAA,GAAuB,YAC7C,IAAA,CAAK,GAAA,CAAI,KAAK,OAAA,CAA2B;AAAA,MACvC,MAAA,EAAQ,KAAA;AAAA,MACR,MAAM,CAAA,iBAAA,EAAoB,IAAA,CAAK,GAAA,CAAI,MAAM,wBAAwB,EAAE,CAAA,CAAA;AAAA,MACnE,IAAA,EAAM;AAAA,KACP,CAAA;AAAA;AAAA,IAGH,MAAA,EAAQ,OACN,KAAA,EACA,OAAA,GAAuB,YAEvB,IAAA,CAAK,GAAA,CAAI,KAAK,OAAA,CAA2B;AAAA,MACvC,MAAA,EAAQ,MAAA;AAAA,MACR,IAAA,EAAM,CAAA,iBAAA,EAAoB,IAAA,CAAK,GAAA,CAAI,MAAM,CAAA,oBAAA,CAAA;AAAA,MACzC,IAAA,EAAM,KAAA;AAAA,MACN,IAAA,EAAM;AAAA,KACP,CAAA;AAAA;AAAA,IAGH,MAAA,EAAQ,OACN,EAAA,EACA,KAAA,EACA,UAAuB,OAAA,KAEvB,IAAA,CAAK,GAAA,CAAI,IAAA,CAAK,OAAA,CAA2B;AAAA,MACvC,MAAA,EAAQ,KAAA;AAAA,MACR,MAAM,CAAA,iBAAA,EAAoB,IAAA,CAAK,GAAA,CAAI,MAAM,wBAAwB,EAAE,CAAA,CAAA;AAAA,MACnE,IAAA,EAAM,KAAA;AAAA,MACN,IAAA,EAAM;AAAA,KACP,CAAA;AAAA;AAAA,IAGH,MAAA,EAAQ,OAAO,EAAA,EAAY,OAAA,GAAuB,OAAA,KAA2B;AAC3E,MAAA,MAAM,IAAA,CAAK,GAAA,CAAI,IAAA,CAAK,OAAA,CAAc;AAAA,QAChC,MAAA,EAAQ,QAAA;AAAA,QACR,MAAM,CAAA,iBAAA,EAAoB,IAAA,CAAK,GAAA,CAAI,MAAM,wBAAwB,EAAE,CAAA,CAAA;AAAA,QACnE,IAAA,EAAM;AAAA,OACP,CAAA;AAAA,IACH;AAAA,GACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQS,YAAA,GAAe;AAAA;AAAA,IAEtB,MAAM,OACJ,MAAA,GAAoE,EAAC,EACrE,UAAuB,OAAA,KACW;AAClC,MAAA,MAAM,KAAA,GAAQ;AAAA,QACZ,GAAI,OAAO,UAAA,KAAe,MAAA,GAAY,EAAC,GAAI,EAAE,UAAA,EAAY,MAAA,CAAO,UAAA,EAAW;AAAA,QAC3E,GAAI,OAAO,QAAA,KAAa,MAAA,GAAY,EAAC,GAAI,EAAE,QAAA,EAAU,MAAA,CAAO,QAAA,EAAS;AAAA,QACrE,GAAI,OAAO,IAAA,KAAS,MAAA,GAAY,EAAC,GAAI,EAAE,IAAA,EAAM,MAAA,CAAO,IAAA;AAAK,OAC3D;AACA,MAAA,OAAO,IAAA,CAAK,GAAA,CAAI,IAAA,CAAK,OAAA,CAA8B;AAAA,QACjD,MAAA,EAAQ,KAAA;AAAA,QACR,IAAA,EAAM,CAAA,iBAAA,EAAoB,IAAA,CAAK,GAAA,CAAI,MAAM,CAAA,aAAA,CAAA;AAAA,QACzC,GAAI,MAAA,CAAO,IAAA,CAAK,KAAK,CAAA,CAAE,SAAS,CAAA,GAAI,EAAE,KAAA,EAAM,GAAI,EAAC;AAAA,QACjD,IAAA,EAAM;AAAA,OACP,CAAA;AAAA,IACH,CAAA;AAAA;AAAA,IAGA,GAAA,EAAK,OAAO,aAAA,EAAuB,OAAA,GAAuB,YACxD,IAAA,CAAK,GAAA,CAAI,KAAK,OAAA,CAA4B;AAAA,MACxC,MAAA,EAAQ,KAAA;AAAA,MACR,MAAM,CAAA,iBAAA,EAAoB,IAAA,CAAK,GAAA,CAAI,MAAM,iBAAiB,aAAa,CAAA,CAAA;AAAA,MACvE,IAAA,EAAM;AAAA,KACP,CAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAOH,SAAA,EAAW,OACT,KAAA,EACA,OAAA,GAAuB,YAEvB,IAAA,CAAK,GAAA,CAAI,KAAK,OAAA,CAAgC;AAAA,MAC5C,MAAA,EAAQ,MAAA;AAAA,MACR,IAAA,EAAM,CAAA,iBAAA,EAAoB,IAAA,CAAK,GAAA,CAAI,MAAM,CAAA,kBAAA,CAAA;AAAA,MACzC,IAAA,EAAM,KAAA;AAAA,MACN,IAAA,EAAM;AAAA,KACP,CAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAMH,OAAA,EAAS,OACP,aAAA,EACA,KAAA,EACA,UAAuB,OAAA,KAEvB,IAAA,CAAK,GAAA,CAAI,IAAA,CAAK,OAAA,CAA8B;AAAA,MAC1C,MAAA,EAAQ,MAAA;AAAA,MACR,MAAM,CAAA,iBAAA,EAAoB,IAAA,CAAK,GAAA,CAAI,MAAM,YAAY,aAAa,CAAA,QAAA,CAAA;AAAA,MAClE,GAAI,KAAA,KAAU,MAAA,GAAY,EAAC,GAAI,EAAE,MAAM,KAAA,EAAM;AAAA,MAC7C,IAAA,EAAM;AAAA,KACP,CAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAMH,MAAA,EAAQ,OACN,aAAA,EACA,KAAA,EACA,UAAuB,OAAA,KAEvB,IAAA,CAAK,GAAA,CAAI,IAAA,CAAK,OAAA,CAA6B;AAAA,MACzC,MAAA,EAAQ,MAAA;AAAA,MACR,MAAM,CAAA,iBAAA,EAAoB,IAAA,CAAK,GAAA,CAAI,MAAM,YAAY,aAAa,CAAA,OAAA,CAAA;AAAA,MAClE,GAAI,KAAA,KAAU,MAAA,GAAY,EAAC,GAAI,EAAE,MAAM,KAAA,EAAM;AAAA,MAC7C,IAAA,EAAM;AAAA,KACP,CAAA;AAAA;AAAA,IAGH,MAAA,EAAQ,OAAO,aAAA,EAAuB,OAAA,GAAuB,YAC3D,IAAA,CAAK,GAAA,CAAI,KAAK,OAAA,CAA6B;AAAA,MACzC,MAAA,EAAQ,MAAA;AAAA,MACR,MAAM,CAAA,iBAAA,EAAoB,IAAA,CAAK,GAAA,CAAI,MAAM,YAAY,aAAa,CAAA,OAAA,CAAA;AAAA,MAClE,IAAA,EAAM;AAAA,KACP;AAAA,GACL;AACF","file":"chunk-4VRUMCS2.js","sourcesContent":["import type { ResolvedConfig, ServiceCredentials } from \"./config\";\nimport { EmporixAuthError, EmporixTimeoutError, EmporixNetworkError } from \"./errors\";\n\n/** Which token a call should use. */\nexport type AuthKind = \"service\" | \"customer\" | \"anonymous\" | \"raw\";\n\n/** Caller-supplied, per-call auth selector. Never stored on the client. */\nexport type AuthContext =\n  | { kind: \"service\"; credentials?: string }\n  | { kind: \"anonymous\" }\n  | { kind: \"customer\"; token: string }\n  | { kind: \"raw\"; token: string };\n\n/**\n * Supplies a fresh customer token when a `customer`-kind request 401s. The host\n * (e.g. EmporixProvider) implements this; the SDK never refreshes the\n * caller-owned customer token unless a refresher is registered.\n */\nexport interface CustomerTokenRefresher {\n  /**\n   * Called on a `customer`-kind 401. Receives the token that just failed;\n   * returns a fresh customer token to retry with, or `null` to give up (the\n   * 401 then propagates as EmporixAuthError).\n   */\n  refresh(expiredToken: string): Promise<string | null>;\n}\n\n/** An obtained anonymous storefront session. */\nexport interface AnonymousSession {\n  accessToken: string;\n  refreshToken: string;\n  sessionId: string;\n  expiresIn: number;\n}\n\n/**\n * An anonymous session as it survives outside the client instance.\n *\n * `accessToken` and `expiresAt` are optional, and a store is free to drop them:\n * they turn a *server* round trip into zero token calls, because a server client\n * lives for one request and would otherwise refresh on every single one. A\n * long-lived browser client keeps the token in memory anyway, so the React\n * storage adapters deliberately persist only the two required fields — a token\n * readable by JavaScript buys nothing there.\n *\n * A store that returns `accessToken` without a future `expiresAt` gets treated as\n * having no token at all; see {@link DefaultTokenProvider.attachAnonymousStore}.\n */\nexport interface StoredAnonymousSession {\n  refreshToken: string;\n  sessionId: string;\n  /** The access token itself, so a fresh client need not spend a refresh call for it. */\n  accessToken?: string;\n  /** Epoch ms after which `accessToken` is stale. The expiry buffer is already applied. */\n  expiresAt?: number;\n}\n\n/**\n * Persistence callback for anonymous sessions. `read` is called once on the\n * first need for an anonymous token to bootstrap a possibly-existing session;\n * `write` is called after every successful login or refresh. `write(null)`\n * means the SDK is invalidating the stored session.\n */\nexport interface AnonymousSessionStore {\n  read(): StoredAnonymousSession | null;\n  write(session: StoredAnonymousSession | null): void;\n}\n\n/** Supplies SDK-managed tokens (service/custom + anonymous). May be user-injected. */\nexport interface TokenProvider {\n  /** Service/custom client-credentials token for the named credential set. */\n  getToken(credentialSet: string): Promise<string>;\n  /** Cached anonymous storefront session (preserves sessionId across refreshes). */\n  getAnonymousToken(): Promise<AnonymousSession>;\n  /** Refresh the anonymous session, preserving sessionId. */\n  refreshAnonymous?(): Promise<AnonymousSession>;\n  /** Invalidate a cached SDK-managed token so the next call re-auths. */\n  invalidate?(credentialSet: string): void;\n  /** Invalidate the cached anonymous session entirely (next call re-logs in). */\n  invalidateAnonymous?(): void;\n  /**\n   * Mark the anonymous access token stale but keep the refresh token, so the\n   * next {@link getAnonymousToken} refreshes (preserving sessionId) rather\n   * than starting a brand-new session.\n   */\n  expireAnonymous?(): void;\n  /**\n   * Install a persistence adapter for the anonymous session. The host (e.g.\n   * `EmporixProvider`) calls this at construction so the SDK can bootstrap\n   * an existing session and persist refreshes. Idempotent: a later call\n   * replaces the previous adapter.\n   */\n  attachAnonymousStore?(store: AnonymousSessionStore): void;\n  /**\n   * Override the storefront context (currency/site/country) used for the next\n   * anonymous login, then invalidate the current anonymous session so it\n   * re-mints with the new context. No-op for providers without anon support.\n   */\n  setAnonymousContext?(ctx: {\n    currency?: string;\n    siteCode?: string;\n    targetLocation?: string;\n  }): void;\n  /**\n   * Subscribe to token-refresh events. Optional — implementations may no-op.\n   * Returns an unsubscribe function. `DefaultTokenProvider` emits for the\n   * anonymous-login / anonymous-refresh paths.\n   */\n  onRefresh?(\n    listener: (event: { kind: \"anonymous\" | \"customer\"; success: boolean }) => void,\n  ): () => void;\n}\n\n/** Tiny constructors for {@link AuthContext}. */\nexport const auth = {\n  /** Service/custom credential set (default `backend`). */\n  service: (credentials?: string): AuthContext =>\n    credentials === undefined ? { kind: \"service\" } : { kind: \"service\", credentials },\n  /** Cached anonymous storefront token. */\n  anonymous: (): AuthContext => ({ kind: \"anonymous\" }),\n  /** Caller-owned customer bearer token. */\n  customer: (token: string): AuthContext => ({ kind: \"customer\", token }),\n  /** Exact token, no transformation (SSO / token-exchange). */\n  raw: (token: string): AuthContext => ({ kind: \"raw\", token }),\n};\n\n/** Resolves an {@link AuthContext} to a concrete bearer token. */\nexport async function resolveToken(ctx: AuthContext, provider: TokenProvider): Promise<string> {\n  switch (ctx.kind) {\n    case \"service\":\n      return provider.getToken(ctx.credentials ?? \"backend\");\n    case \"anonymous\":\n      return (await provider.getAnonymousToken()).accessToken;\n    case \"customer\":\n    case \"raw\":\n      return ctx.token;\n  }\n}\n\n/**\n * Late-bindable, single-flight holder for an optional\n * {@link CustomerTokenRefresher}. Single-flight is required because Emporix\n * rotates the refresh token on each refresh — concurrent refreshes would\n * invalidate each other. Off (returns `null`) until a refresher is set.\n */\nexport class CustomerRefreshRegistry {\n  private refresher: CustomerTokenRefresher | null = null;\n  private inflight: Promise<string | null> | null = null;\n\n  set(refresher: CustomerTokenRefresher | null): void {\n    this.refresher = refresher;\n  }\n\n  get enabled(): boolean {\n    return this.refresher !== null;\n  }\n\n  /** Concurrent callers share one in-flight refresh. */\n  refresh(expiredToken: string): Promise<string | null> {\n    if (!this.refresher) return Promise.resolve(null);\n    if (this.inflight) return this.inflight;\n    const p = Promise.resolve(this.refresher.refresh(expiredToken)).finally(() => {\n      this.inflight = null;\n    });\n    this.inflight = p;\n    return p;\n  }\n}\n\ninterface CacheEntry {\n  token: string;\n  expiresAt: number;\n  obtainedAt: number;\n}\n\n/** SDK-owned token provider: client-credentials service tokens + anonymous session. */\nexport class DefaultTokenProvider implements TokenProvider {\n  private readonly serviceCache = new Map<string, CacheEntry>();\n  private readonly serviceLocks = new Map<string, Promise<string>>();\n  private anon: (AnonymousSession & { expiresAt: number }) | undefined;\n  private anonLock: Promise<AnonymousSession> | undefined;\n  private anonStore?: AnonymousSessionStore;\n  private contextOverride:\n    | { currency?: string; siteCode?: string; targetLocation?: string }\n    | undefined;\n  private readonly refreshListeners = new Set<\n    (event: { kind: \"anonymous\" | \"customer\"; success: boolean }) => void\n  >();\n\n  constructor(private readonly cfg: ResolvedConfig) {}\n\n  onRefresh(\n    listener: (event: { kind: \"anonymous\" | \"customer\"; success: boolean }) => void,\n  ): () => void {\n    this.refreshListeners.add(listener);\n    return () => {\n      this.refreshListeners.delete(listener);\n    };\n  }\n\n  private notifyRefresh(kind: \"anonymous\" | \"customer\", success: boolean): void {\n    for (const l of this.refreshListeners) {\n      try {\n        l({ kind, success });\n      } catch {\n        // Never let a telemetry listener break the auth path.\n      }\n    }\n  }\n\n  attachAnonymousStore(store: AnonymousSessionStore): void {\n    this.anonStore = store;\n    // Bootstrap `this.anon` from the store if we don't have it yet.\n    //\n    // A persisted access token that is still inside its lifetime is adopted as\n    // is, and that is the point on a server: a client that lives for one request\n    // would otherwise spend one `/anonymous/refresh` per request for a token it\n    // already holds. Without a token — or past its expiry — `expiresAt` stays 0\n    // and the next getAnonymousToken refreshes, which preserves the sessionId,\n    // so the guest's cart survives either way.\n    //\n    // `expiresAt` counts only when there is a token to go with it. A store that\n    // returns one without the other would otherwise make `anonFresh()` true and\n    // hand out an empty bearer token.\n    //\n    // Trusting a stored expiry means trusting the writer's clock. A token\n    // revoked early, or an expiry that a skewed clock made look valid, comes\n    // back as a 401 — which `HttpClient` answers with `expireAnonymous()` plus\n    // one retry, so the failure mode is a refresh, not an error.\n    if (!this.anon) {\n      const persisted = store.read();\n      if (persisted) {\n        const token = persisted.accessToken ?? \"\";\n        this.anon = {\n          accessToken: token,\n          refreshToken: persisted.refreshToken,\n          sessionId: persisted.sessionId,\n          expiresIn: 0,\n          expiresAt: token === \"\" ? 0 : (persisted.expiresAt ?? 0),\n        };\n      }\n    }\n  }\n\n  private creds(set: string): ServiceCredentials {\n    if (set === \"backend\") {\n      const b = this.cfg.credentials.backend;\n      if (!b?.clientId || !b.secret) {\n        throw new EmporixAuthError(\n          \"A 'service' AuthContext was used but credentials.backend is not configured\",\n        );\n      }\n      return b;\n    }\n    const c = this.cfg.credentials.custom?.[set];\n    if (!c) throw new Error(`Unknown credential set \"${set}\"`);\n    return c;\n  }\n\n  private fresh(e: CacheEntry | undefined): boolean {\n    if (!e) return false;\n    const now = Date.now();\n    if (now - e.obtainedAt >= this.cfg.cache.maxLifetimeSeconds * 1000) return false;\n    return now < e.expiresAt;\n  }\n\n  async getToken(set: string): Promise<string> {\n    // Surface an unknown credential set before entering the cache/lock path.\n    this.creds(set);\n    const cached = this.serviceCache.get(set);\n    if (this.fresh(cached)) return cached!.token;\n    const inflight = this.serviceLocks.get(set);\n    if (inflight) return inflight;\n    const p = this.requestServiceToken(set).finally(() => this.serviceLocks.delete(set));\n    this.serviceLocks.set(set, p);\n    return p;\n  }\n\n  /**\n   * fetch with the configured read timeout. Token endpoints sit in front of\n   * single-flight locks — one hung call would otherwise block every request\n   * on this credential set forever.\n   */\n  private async boundedFetch(url: string | URL, init: RequestInit = {}): Promise<Response> {\n    const ms = this.cfg.timeouts?.readMs ?? 60_000;\n    const controller = new AbortController();\n    const timer = setTimeout(() => controller.abort(), ms);\n    try {\n      return await fetch(url, { ...init, signal: controller.signal });\n    } catch (err) {\n      if ((err as Error).name === \"AbortError\") {\n        throw new EmporixTimeoutError(`token request timed out after ${ms}ms`);\n      }\n      throw new EmporixNetworkError(`token request network failure: ${(err as Error).message}`);\n    } finally {\n      clearTimeout(timer);\n    }\n  }\n\n  private async requestServiceToken(set: string): Promise<string> {\n    const c = this.creds(set);\n    const body = new URLSearchParams({\n      grant_type: \"client_credentials\",\n      client_id: c.clientId,\n      client_secret: c.secret,\n    });\n    if (c.scope) body.set(\"scope\", c.scope);\n    const res = await this.boundedFetch(`${this.cfg.host}/oauth/token`, {\n      method: \"POST\",\n      headers: { \"Content-Type\": \"application/x-www-form-urlencoded\" },\n      body,\n    });\n    const json = (await res.json().catch(() => ({}))) as Record<string, unknown>;\n    if (!res.ok) {\n      throw new EmporixAuthError(`Token request failed for \"${set}\"`, res.status, json);\n    }\n    const obtainedAt = Date.now();\n    const ttl = Number((json.expires_in as number | undefined) ?? 3600);\n    this.serviceCache.set(set, {\n      token: json.access_token as string,\n      obtainedAt,\n      expiresAt: obtainedAt + (ttl - this.cfg.cache.expirationBufferSeconds) * 1000,\n    });\n    return this.serviceCache.get(set)!.token;\n  }\n\n  invalidate(set: string): void {\n    this.serviceCache.delete(set);\n  }\n\n  private anonFresh(): boolean {\n    return !!this.anon && Date.now() < this.anon.expiresAt;\n  }\n\n  async getAnonymousToken(): Promise<AnonymousSession> {\n    if (this.anonFresh()) return this.stripExpiry(this.anon!);\n    if (this.anonLock) return this.anonLock;\n    // Token expired but a refresh token survives → refresh to keep the same\n    // sessionId; only fall back to a brand-new login if the refresh fails.\n    const canRefresh = !!this.anon?.refreshToken;\n    const obtain = canRefresh\n      ? this.fetchAnonymous(\"refresh\").catch(() => this.fetchAnonymous(\"login\"))\n      : this.fetchAnonymous(\"login\");\n    const p = obtain.finally(() => {\n      this.anonLock = undefined;\n    });\n    this.anonLock = p;\n    return p;\n  }\n\n  /** Refreshes the anonymous session, preserving its sessionId. */\n  async refreshAnonymous(): Promise<AnonymousSession> {\n    if (!this.anon) return this.getAnonymousToken();\n    return this.fetchAnonymous(\"refresh\");\n  }\n\n  invalidateAnonymous(): void {\n    this.anon = undefined;\n    this.anonStore?.write(null);\n  }\n\n  setAnonymousContext(ctx: {\n    currency?: string;\n    siteCode?: string;\n    targetLocation?: string;\n  }): void {\n    const base = this.contextOverride ?? this.cfg.credentials.storefront?.context ?? {};\n    this.contextOverride = { ...base, ...ctx };\n    this.invalidateAnonymous();\n  }\n\n  /** Force a stale access token while keeping the refresh token + sessionId. */\n  expireAnonymous(): void {\n    if (this.anon) this.anon = { ...this.anon, expiresAt: 0 };\n  }\n\n  private stripExpiry(s: AnonymousSession & { expiresAt: number }): AnonymousSession {\n    const { expiresAt: _expiresAt, ...rest } = s;\n    return rest;\n  }\n\n  private async fetchAnonymous(mode: \"login\" | \"refresh\"): Promise<AnonymousSession> {\n    const sf = this.cfg.credentials.storefront;\n    if (!sf?.clientId) {\n      throw new Error(\"credentials.storefront.clientId is required for anonymous tokens\");\n    }\n    const url = new URL(`${this.cfg.host}/customerlogin/auth/anonymous/${mode}`);\n    url.searchParams.set(\"tenant\", this.cfg.tenant);\n    url.searchParams.set(\"client_id\", sf.clientId);\n    // Context is the runtime override (set via setAnonymousContext) if present,\n    // else the config-fixed context.\n    const c = this.contextOverride ?? sf.context;\n    if (c?.currency) url.searchParams.set(\"currency\", c.currency);\n    if (c?.siteCode) url.searchParams.set(\"siteCode\", c.siteCode);\n    if (c?.targetLocation) url.searchParams.set(\"targetLocation\", c.targetLocation);\n    if (mode === \"refresh\" && this.anon) {\n      url.searchParams.set(\"refresh_token\", this.anon.refreshToken);\n    }\n    try {\n      const res = await this.boundedFetch(url, { method: \"GET\" });\n      const json = (await res.json().catch(() => ({}))) as Record<string, unknown>;\n      if (!res.ok) {\n        this.notifyRefresh(\"anonymous\", false);\n        throw new EmporixAuthError(`Anonymous token ${mode} failed`, res.status, json);\n      }\n      const obtainedAt = Date.now();\n      this.anon = {\n        accessToken: json.access_token as string,\n        refreshToken: json.refresh_token as string,\n        sessionId: json.sessionId as string,\n        expiresIn: json.expires_in as number,\n        expiresAt:\n          obtainedAt +\n          ((json.expires_in as number) - this.cfg.cache.expirationBufferSeconds) * 1000,\n      };\n      // The access token and its expiry go out too, so a store that keeps them\n      // (a server one) can hand the next request a usable token instead of\n      // another refresh. A store that only wants the refresh token drops them.\n      this.anonStore?.write({\n        refreshToken: this.anon.refreshToken,\n        sessionId: this.anon.sessionId,\n        accessToken: this.anon.accessToken,\n        expiresAt: this.anon.expiresAt,\n      });\n      this.notifyRefresh(\"anonymous\", true);\n      return this.stripExpiry(this.anon);\n    } catch (err) {\n      // Re-throw EmporixAuthError as-is; for non-Emporix errors (network), also notify.\n      if (!(err instanceof EmporixAuthError)) {\n        this.notifyRefresh(\"anonymous\", false);\n      }\n      throw err;\n    }\n  }\n}\n// Customer-token refreshes happen via client.customers.refresh() and don't\n// route through this TokenProvider — only the anonymous flow notifies.\n// React-side useCustomerSession.refresh emits its own telemetry event in a\n// follow-up if needed.\n","import type { ClientContext } from \"../core/context\";\nimport { auth, type AuthContext } from \"../core/auth\";\nimport { requireCustomer } from \"../core/require-customer\";\nimport type {\n  PaymentModeFrontendResponse,\n  AuthorizePaymentRequest,\n  InitializePaymentRequest,\n  InitializePaymentResponse,\n  PaymentModeResponse,\n  PaymentModeRequest,\n  PaymentMethodUpdateRequest,\n  PaymentTransactionResponse,\n  AuthorizePaymentResponse,\n  CaptureRequest,\n  RefundRequest,\n  CommonPaymentResponse,\n} from \"../generated/payment\";\n\nconst ANON: AuthContext = auth.anonymous();\nconst SERVICE: AuthContext = auth.service();\n\n/** A frontend payment mode (generated). */\nexport type PaymentMode = PaymentModeFrontendResponse;\n\n/** Post-checkout authorize request (generated; caller sends the exact wire shape). */\nexport type AuthorizePaymentInput = AuthorizePaymentRequest;\n\n/** Frontend payment-initialize request (generated). */\nexport type InitializePaymentInput = InitializePaymentRequest;\n\n/** Frontend payment-initialize response (generated). */\nexport type InitializePaymentResult = InitializePaymentResponse;\n\n/** Post-checkout authorize result. */\nexport interface AuthorizePaymentResult {\n  successful: boolean;\n  paymentTransactionId?: string;\n  authorizationToken?: string;\n  requiresExternalPayment?: boolean;\n  externalPaymentRedirectURL?: string;\n  externalPaymentHttpMethod?: string;\n  [k: string]: unknown;\n}\n\n/** A configured payment mode (admin view, `/paymentmodes/config`). */\nexport type PaymentModeConfig = PaymentModeResponse;\n\n/** Body for creating a payment-mode configuration. */\nexport type PaymentModeCreateInput = PaymentModeRequest;\n\n/** Body for updating a payment-mode configuration. */\nexport type PaymentModeUpdateInput = PaymentMethodUpdateRequest;\n\n/** A payment transaction (generated). */\nexport type PaymentTransaction = PaymentTransactionResponse;\n\n/** Result of a backend payment authorization. */\nexport type PaymentAuthorizeResult = AuthorizePaymentResponse;\n\n/** Body for capturing an authorized payment. */\nexport type PaymentCaptureInput = CaptureRequest;\n\n/** Body for refunding a captured payment. */\nexport type PaymentRefundInput = RefundRequest;\n\n/**\n * Result of a refund/cancel operation. Business failures are reported in the\n * body (`successful: false` + `message`), not via HTTP status.\n */\nexport type PaymentActionResult = CommonPaymentResponse;\n\n/** Result of a capture — like {@link PaymentActionResult} plus the provider's capture id. */\nexport type PaymentCaptureResult = {\n  successful?: boolean;\n  message?: string;\n  captureId?: string;\n};\n\n/** Payment-Gateway: list frontend payment modes, authorize deferred payments. */\nexport class PaymentGatewayService {\n  static readonly channel = \"payment\" as const;\n  constructor(private readonly ctx: ClientContext) {}\n\n  /**\n   * Lists configured frontend payment modes. The endpoint requires a bearer\n   * token but no customer scope (\"No scope required\"), so it defaults to an\n   * anonymous context and works for guests and logged-in customers alike.\n   */\n  async listPaymentModes(authCtx: AuthContext = ANON): Promise<PaymentMode[]> {\n    return this.ctx.http.request<PaymentMode[]>({\n      method: \"GET\",\n      path: `/payment-gateway/${this.ctx.tenant}/paymentmodes/frontend`,\n      auth: authCtx,\n    });\n  }\n\n  /** Authorizes a post-checkout (deferred) payment for an existing order. */\n  async authorize(\n    input: AuthorizePaymentInput,\n    authCtx?: AuthContext,\n  ): Promise<AuthorizePaymentResult> {\n    return this.ctx.http.request<AuthorizePaymentResult>({\n      method: \"POST\",\n      path: `/payment-gateway/${this.ctx.tenant}/payment/frontend/authorize`,\n      auth: requireCustomer(authCtx),\n      body: input,\n    });\n  }\n\n  /** Retrieves a single frontend payment mode by id. Defaults to anonymous (no scope required). */\n  async getMode(id: string, authCtx: AuthContext = ANON): Promise<PaymentMode> {\n    return this.ctx.http.request<PaymentMode>({\n      method: \"GET\",\n      path: `/payment-gateway/${this.ctx.tenant}/paymentmodes/frontend/${id}`,\n      auth: authCtx,\n    });\n  }\n\n  /** Initializes a payment from the frontend. Defaults to anonymous (no scope required). */\n  async initialize(\n    input: InitializePaymentInput,\n    authCtx: AuthContext = ANON,\n  ): Promise<InitializePaymentResult> {\n    return this.ctx.http.request<InitializePaymentResult>({\n      method: \"POST\",\n      path: `/payment-gateway/${this.ctx.tenant}/payment/frontend/initialize`,\n      auth: authCtx,\n      body: input,\n    });\n  }\n\n  /**\n   * Payment-mode **configuration** (`/paymentmodes/config`) — the admin view.\n   * For the storefront view use {@link listPaymentModes} / {@link getMode}.\n   * Defaults to service auth.\n   */\n  readonly modes = {\n    /** Lists all configured payment modes. The endpoint takes no query parameters. */\n    list: async (authCtx: AuthContext = SERVICE): Promise<PaymentModeConfig[]> =>\n      this.ctx.http.request<PaymentModeConfig[]>({\n        method: \"GET\",\n        path: `/payment-gateway/${this.ctx.tenant}/paymentmodes/config`,\n        auth: authCtx,\n      }),\n\n    /** Retrieves one payment-mode configuration by id. */\n    get: async (id: string, authCtx: AuthContext = SERVICE): Promise<PaymentModeConfig> =>\n      this.ctx.http.request<PaymentModeConfig>({\n        method: \"GET\",\n        path: `/payment-gateway/${this.ctx.tenant}/paymentmodes/config/${id}`,\n        auth: authCtx,\n      }),\n\n    /** Creates a payment-mode configuration. Responds 200 with the created mode. */\n    create: async (\n      input: PaymentModeCreateInput,\n      authCtx: AuthContext = SERVICE,\n    ): Promise<PaymentModeConfig> =>\n      this.ctx.http.request<PaymentModeConfig>({\n        method: \"POST\",\n        path: `/payment-gateway/${this.ctx.tenant}/paymentmodes/config`,\n        body: input,\n        auth: authCtx,\n      }),\n\n    /** Updates a payment-mode configuration (PUT). Responds 200 with the updated mode. */\n    update: async (\n      id: string,\n      input: PaymentModeUpdateInput,\n      authCtx: AuthContext = SERVICE,\n    ): Promise<PaymentModeConfig> =>\n      this.ctx.http.request<PaymentModeConfig>({\n        method: \"PUT\",\n        path: `/payment-gateway/${this.ctx.tenant}/paymentmodes/config/${id}`,\n        body: input,\n        auth: authCtx,\n      }),\n\n    /** Deletes a payment-mode configuration. */\n    delete: async (id: string, authCtx: AuthContext = SERVICE): Promise<void> => {\n      await this.ctx.http.request<void>({\n        method: \"DELETE\",\n        path: `/payment-gateway/${this.ctx.tenant}/paymentmodes/config/${id}`,\n        auth: authCtx,\n      });\n    },\n  };\n\n  /**\n   * Backend transaction lifecycle and reads. `authorize` creates the transaction\n   * that `capture`/`refund`/`cancel` then act on. Business failures are reported\n   * in the response body (`successful: false`), not as HTTP errors — always check\n   * `successful`. Defaults to service auth.\n   */\n  readonly transactions = {\n    /** One page of payment transactions. */\n    list: async (\n      params: { pageNumber?: number; pageSize?: number; sort?: string } = {},\n      authCtx: AuthContext = SERVICE,\n    ): Promise<PaymentTransaction[]> => {\n      const query = {\n        ...(params.pageNumber === undefined ? {} : { pageNumber: params.pageNumber }),\n        ...(params.pageSize === undefined ? {} : { pageSize: params.pageSize }),\n        ...(params.sort === undefined ? {} : { sort: params.sort }),\n      };\n      return this.ctx.http.request<PaymentTransaction[]>({\n        method: \"GET\",\n        path: `/payment-gateway/${this.ctx.tenant}/transactions`,\n        ...(Object.keys(query).length > 0 ? { query } : {}),\n        auth: authCtx,\n      });\n    },\n\n    /** Retrieves one payment transaction by id. */\n    get: async (transactionId: string, authCtx: AuthContext = SERVICE): Promise<PaymentTransaction> =>\n      this.ctx.http.request<PaymentTransaction>({\n        method: \"GET\",\n        path: `/payment-gateway/${this.ctx.tenant}/transactions/${transactionId}`,\n        auth: authCtx,\n      }),\n\n    /**\n     * Authorizes a payment as a backend caller (`POST /payment/authorize`). The\n     * storefront equivalent is {@link PaymentGatewayService.authorize}, which\n     * targets `/payment/frontend/authorize` with a customer token.\n     */\n    authorize: async (\n      input: AuthorizePaymentInput,\n      authCtx: AuthContext = SERVICE,\n    ): Promise<PaymentAuthorizeResult> =>\n      this.ctx.http.request<PaymentAuthorizeResult>({\n        method: \"POST\",\n        path: `/payment-gateway/${this.ctx.tenant}/payment/authorize`,\n        body: input,\n        auth: authCtx,\n      }),\n\n    /**\n     * Captures an authorized payment. Omit `input` to capture the full\n     * authorized amount. Returns the provider's `captureId` on success.\n     */\n    capture: async (\n      transactionId: string,\n      input?: PaymentCaptureInput,\n      authCtx: AuthContext = SERVICE,\n    ): Promise<PaymentCaptureResult> =>\n      this.ctx.http.request<PaymentCaptureResult>({\n        method: \"POST\",\n        path: `/payment-gateway/${this.ctx.tenant}/payment/${transactionId}/capture`,\n        ...(input === undefined ? {} : { body: input }),\n        auth: authCtx,\n      }),\n\n    /**\n     * Refunds a captured payment. Omit `input` to refund the full captured\n     * amount; pass `captureId` when several captures exist for the payment.\n     */\n    refund: async (\n      transactionId: string,\n      input?: PaymentRefundInput,\n      authCtx: AuthContext = SERVICE,\n    ): Promise<PaymentActionResult> =>\n      this.ctx.http.request<PaymentActionResult>({\n        method: \"POST\",\n        path: `/payment-gateway/${this.ctx.tenant}/payment/${transactionId}/refund`,\n        ...(input === undefined ? {} : { body: input }),\n        auth: authCtx,\n      }),\n\n    /** Cancels an authorized payment. Takes no body. */\n    cancel: async (transactionId: string, authCtx: AuthContext = SERVICE): Promise<PaymentActionResult> =>\n      this.ctx.http.request<PaymentActionResult>({\n        method: \"POST\",\n        path: `/payment-gateway/${this.ctx.tenant}/payment/${transactionId}/cancel`,\n        auth: authCtx,\n      }),\n  };\n}\n"]}
+{"version":3,"sources":["../src/core/auth.ts","../src/services/payment.ts"],"names":[],"mappings":";;;;AAkHO,IAAM,IAAA,GAAO;AAAA;AAAA,EAElB,OAAA,EAAS,CAAC,WAAA,KACR,WAAA,KAAgB,MAAA,GAAY,EAAE,IAAA,EAAM,SAAA,EAAU,GAAI,EAAE,IAAA,EAAM,SAAA,EAAW,WAAA,EAAY;AAAA;AAAA,EAEnF,SAAA,EAAW,OAAoB,EAAE,IAAA,EAAM,WAAA,EAAY,CAAA;AAAA;AAAA,EAEnD,UAAU,CAAC,KAAA,MAAgC,EAAE,IAAA,EAAM,YAAY,KAAA,EAAM,CAAA;AAAA;AAAA,EAErE,KAAK,CAAC,KAAA,MAAgC,EAAE,IAAA,EAAM,OAAO,KAAA,EAAM;AAC7D;AAGA,eAAsB,YAAA,CAAa,KAAkB,QAAA,EAA0C;AAC7F,EAAA,QAAQ,IAAI,IAAA;AAAM,IAChB,KAAK,SAAA;AACH,MAAA,OAAO,QAAA,CAAS,QAAA,CAAS,GAAA,CAAI,WAAA,IAAe,SAAS,CAAA;AAAA,IACvD,KAAK,WAAA;AACH,MAAA,OAAA,CAAQ,MAAM,QAAA,CAAS,iBAAA,EAAkB,EAAG,WAAA;AAAA,IAC9C,KAAK,UAAA;AAAA,IACL,KAAK,KAAA;AACH,MAAA,OAAO,GAAA,CAAI,KAAA;AAAA;AAEjB;AAQO,IAAM,0BAAN,MAA8B;AAAA,EAC3B,SAAA,GAA2C,IAAA;AAAA,EAC3C,QAAA,GAA0C,IAAA;AAAA,EAElD,IAAI,SAAA,EAAgD;AAClD,IAAA,IAAA,CAAK,SAAA,GAAY,SAAA;AAAA,EACnB;AAAA,EAEA,IAAI,OAAA,GAAmB;AACrB,IAAA,OAAO,KAAK,SAAA,KAAc,IAAA;AAAA,EAC5B;AAAA;AAAA,EAGA,QAAQ,YAAA,EAA8C;AACpD,IAAA,IAAI,CAAC,IAAA,CAAK,SAAA,EAAW,OAAO,OAAA,CAAQ,QAAQ,IAAI,CAAA;AAChD,IAAA,IAAI,IAAA,CAAK,QAAA,EAAU,OAAO,IAAA,CAAK,QAAA;AAC/B,IAAA,MAAM,CAAA,GAAI,OAAA,CAAQ,OAAA,CAAQ,IAAA,CAAK,SAAA,CAAU,QAAQ,YAAY,CAAC,CAAA,CAAE,OAAA,CAAQ,MAAM;AAC5E,MAAA,IAAA,CAAK,QAAA,GAAW,IAAA;AAAA,IAClB,CAAC,CAAA;AACD,IAAA,IAAA,CAAK,QAAA,GAAW,CAAA;AAChB,IAAA,OAAO,CAAA;AAAA,EACT;AACF;AASO,IAAM,uBAAN,MAAoD;AAAA,EAazD,YAA6B,GAAA,EAAqB;AAArB,IAAA,IAAA,CAAA,GAAA,GAAA,GAAA;AAAA,EAAsB;AAAA,EAAtB,GAAA;AAAA,EAZZ,YAAA,uBAAmB,GAAA,EAAwB;AAAA,EAC3C,YAAA,uBAAmB,GAAA,EAA6B;AAAA,EACzD,IAAA;AAAA,EACA,QAAA;AAAA,EACA,SAAA;AAAA,EACA,eAAA;AAAA,EAGS,gBAAA,uBAAuB,GAAA,EAEtC;AAAA,EAIF,UACE,QAAA,EACY;AACZ,IAAA,IAAA,CAAK,gBAAA,CAAiB,IAAI,QAAQ,CAAA;AAClC,IAAA,OAAO,MAAM;AACX,MAAA,IAAA,CAAK,gBAAA,CAAiB,OAAO,QAAQ,CAAA;AAAA,IACvC,CAAA;AAAA,EACF;AAAA,EAEQ,aAAA,CAAc,MAAgC,OAAA,EAAwB;AAC5E,IAAA,KAAA,MAAW,CAAA,IAAK,KAAK,gBAAA,EAAkB;AACrC,MAAA,IAAI;AACF,QAAA,CAAA,CAAE,EAAE,IAAA,EAAM,OAAA,EAAS,CAAA;AAAA,MACrB,CAAA,CAAA,MAAQ;AAAA,MAER;AAAA,IACF;AAAA,EACF;AAAA,EAEA,qBAAqB,KAAA,EAAoC;AACvD,IAAA,IAAA,CAAK,SAAA,GAAY,KAAA;AAkBjB,IAAA,IAAI,CAAC,KAAK,IAAA,EAAM;AACd,MAAA,MAAM,SAAA,GAAY,MAAM,IAAA,EAAK;AAC7B,MAAA,IAAI,SAAA,EAAW;AACb,QAAA,MAAM,KAAA,GAAQ,UAAU,WAAA,IAAe,EAAA;AACvC,QAAA,IAAA,CAAK,IAAA,GAAO;AAAA,UACV,WAAA,EAAa,KAAA;AAAA,UACb,cAAc,SAAA,CAAU,YAAA;AAAA,UACxB,WAAW,SAAA,CAAU,SAAA;AAAA,UACrB,SAAA,EAAW,CAAA;AAAA,UACX,SAAA,EAAW,KAAA,KAAU,EAAA,GAAK,CAAA,GAAK,UAAU,SAAA,IAAa;AAAA,SACxD;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAAA,EAEQ,MAAM,GAAA,EAAiC;AAC7C,IAAA,IAAI,QAAQ,SAAA,EAAW;AACrB,MAAA,MAAM,CAAA,GAAI,IAAA,CAAK,GAAA,CAAI,WAAA,CAAY,OAAA;AAC/B,MAAA,IAAI,CAAC,CAAA,EAAG,QAAA,IAAY,CAAC,EAAE,MAAA,EAAQ;AAC7B,QAAA,MAAM,IAAI,gBAAA;AAAA,UACR;AAAA,SACF;AAAA,MACF;AACA,MAAA,OAAO,CAAA;AAAA,IACT;AACA,IAAA,MAAM,CAAA,GAAI,IAAA,CAAK,GAAA,CAAI,WAAA,CAAY,SAAS,GAAG,CAAA;AAC3C,IAAA,IAAI,CAAC,CAAA,EAAG,MAAM,IAAI,KAAA,CAAM,CAAA,wBAAA,EAA2B,GAAG,CAAA,CAAA,CAAG,CAAA;AACzD,IAAA,OAAO,CAAA;AAAA,EACT;AAAA,EAEQ,MAAM,CAAA,EAAoC;AAChD,IAAA,IAAI,CAAC,GAAG,OAAO,KAAA;AACf,IAAA,MAAM,GAAA,GAAM,KAAK,GAAA,EAAI;AACrB,IAAA,IAAI,GAAA,GAAM,EAAE,UAAA,IAAc,IAAA,CAAK,IAAI,KAAA,CAAM,kBAAA,GAAqB,KAAM,OAAO,KAAA;AAC3E,IAAA,OAAO,MAAM,CAAA,CAAE,SAAA;AAAA,EACjB;AAAA,EAEA,MAAM,SAAS,GAAA,EAA8B;AAE3C,IAAA,IAAA,CAAK,MAAM,GAAG,CAAA;AACd,IAAA,MAAM,MAAA,GAAS,IAAA,CAAK,YAAA,CAAa,GAAA,CAAI,GAAG,CAAA;AACxC,IAAA,IAAI,IAAA,CAAK,KAAA,CAAM,MAAM,CAAA,SAAU,MAAA,CAAQ,KAAA;AACvC,IAAA,MAAM,QAAA,GAAW,IAAA,CAAK,YAAA,CAAa,GAAA,CAAI,GAAG,CAAA;AAC1C,IAAA,IAAI,UAAU,OAAO,QAAA;AACrB,IAAA,MAAM,CAAA,GAAI,IAAA,CAAK,mBAAA,CAAoB,GAAG,CAAA,CAAE,OAAA,CAAQ,MAAM,IAAA,CAAK,YAAA,CAAa,MAAA,CAAO,GAAG,CAAC,CAAA;AACnF,IAAA,IAAA,CAAK,YAAA,CAAa,GAAA,CAAI,GAAA,EAAK,CAAC,CAAA;AAC5B,IAAA,OAAO,CAAA;AAAA,EACT;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,MAAc,YAAA,CAAa,GAAA,EAAmB,IAAA,GAAoB,EAAC,EAAsB;AACvF,IAAA,MAAM,EAAA,GAAK,IAAA,CAAK,GAAA,CAAI,QAAA,EAAU,MAAA,IAAU,GAAA;AACxC,IAAA,MAAM,UAAA,GAAa,IAAI,eAAA,EAAgB;AACvC,IAAA,MAAM,QAAQ,UAAA,CAAW,MAAM,UAAA,CAAW,KAAA,IAAS,EAAE,CAAA;AACrD,IAAA,IAAI;AACF,MAAA,OAAO,MAAM,MAAM,GAAA,EAAK,EAAE,GAAG,IAAA,EAAM,MAAA,EAAQ,UAAA,CAAW,MAAA,EAAQ,CAAA;AAAA,IAChE,SAAS,GAAA,EAAK;AACZ,MAAA,IAAK,GAAA,CAAc,SAAS,YAAA,EAAc;AACxC,QAAA,MAAM,IAAI,mBAAA,CAAoB,CAAA,8BAAA,EAAiC,EAAE,CAAA,EAAA,CAAI,CAAA;AAAA,MACvE;AACA,MAAA,MAAM,IAAI,mBAAA,CAAoB,CAAA,+BAAA,EAAmC,GAAA,CAAc,OAAO,CAAA,CAAE,CAAA;AAAA,IAC1F,CAAA,SAAE;AACA,MAAA,YAAA,CAAa,KAAK,CAAA;AAAA,IACpB;AAAA,EACF;AAAA,EAEA,MAAc,oBAAoB,GAAA,EAA8B;AAC9D,IAAA,MAAM,CAAA,GAAI,IAAA,CAAK,KAAA,CAAM,GAAG,CAAA;AACxB,IAAA,MAAM,IAAA,GAAO,IAAI,eAAA,CAAgB;AAAA,MAC/B,UAAA,EAAY,oBAAA;AAAA,MACZ,WAAW,CAAA,CAAE,QAAA;AAAA,MACb,eAAe,CAAA,CAAE;AAAA,KAClB,CAAA;AACD,IAAA,IAAI,EAAE,KAAA,EAAO,IAAA,CAAK,GAAA,CAAI,OAAA,EAAS,EAAE,KAAK,CAAA;AACtC,IAAA,MAAM,GAAA,GAAM,MAAM,IAAA,CAAK,YAAA,CAAa,GAAG,IAAA,CAAK,GAAA,CAAI,IAAI,CAAA,YAAA,CAAA,EAAgB;AAAA,MAClE,MAAA,EAAQ,MAAA;AAAA,MACR,OAAA,EAAS,EAAE,cAAA,EAAgB,mCAAA,EAAoC;AAAA,MAC/D;AAAA,KACD,CAAA;AACD,IAAA,MAAM,IAAA,GAAQ,MAAM,GAAA,CAAI,IAAA,GAAO,KAAA,CAAM,OAAO,EAAC,CAAE,CAAA;AAC/C,IAAA,IAAI,CAAC,IAAI,EAAA,EAAI;AACX,MAAA,MAAM,IAAI,gBAAA,CAAiB,CAAA,0BAAA,EAA6B,GAAG,CAAA,CAAA,CAAA,EAAK,GAAA,CAAI,QAAQ,IAAI,CAAA;AAAA,IAClF;AACA,IAAA,MAAM,UAAA,GAAa,KAAK,GAAA,EAAI;AAC5B,IAAA,MAAM,GAAA,GAAM,MAAA,CAAQ,IAAA,CAAK,UAAA,IAAqC,IAAI,CAAA;AAClE,IAAA,IAAA,CAAK,YAAA,CAAa,IAAI,GAAA,EAAK;AAAA,MACzB,OAAO,IAAA,CAAK,YAAA;AAAA,MACZ,UAAA;AAAA,MACA,WAAW,UAAA,GAAA,CAAc,GAAA,GAAM,IAAA,CAAK,GAAA,CAAI,MAAM,uBAAA,IAA2B;AAAA,KAC1E,CAAA;AACD,IAAA,OAAO,IAAA,CAAK,YAAA,CAAa,GAAA,CAAI,GAAG,CAAA,CAAG,KAAA;AAAA,EACrC;AAAA,EAEA,WAAW,GAAA,EAAmB;AAC5B,IAAA,IAAA,CAAK,YAAA,CAAa,OAAO,GAAG,CAAA;AAAA,EAC9B;AAAA,EAEQ,SAAA,GAAqB;AAC3B,IAAA,OAAO,CAAC,CAAC,IAAA,CAAK,IAAA,IAAQ,KAAK,GAAA,EAAI,GAAI,KAAK,IAAA,CAAK,SAAA;AAAA,EAC/C;AAAA,EAEA,MAAM,iBAAA,GAA+C;AACnD,IAAA,IAAI,KAAK,SAAA,EAAU,SAAU,IAAA,CAAK,WAAA,CAAY,KAAK,IAAK,CAAA;AACxD,IAAA,IAAI,IAAA,CAAK,QAAA,EAAU,OAAO,IAAA,CAAK,QAAA;AAG/B,IAAA,MAAM,UAAA,GAAa,CAAC,CAAC,IAAA,CAAK,IAAA,EAAM,YAAA;AAChC,IAAA,MAAM,MAAA,GAAS,UAAA,GACX,IAAA,CAAK,cAAA,CAAe,SAAS,CAAA,CAAE,KAAA,CAAM,MAAM,IAAA,CAAK,eAAe,OAAO,CAAC,CAAA,GACvE,IAAA,CAAK,eAAe,OAAO,CAAA;AAC/B,IAAA,MAAM,CAAA,GAAI,MAAA,CAAO,OAAA,CAAQ,MAAM;AAC7B,MAAA,IAAA,CAAK,QAAA,GAAW,MAAA;AAAA,IAClB,CAAC,CAAA;AACD,IAAA,IAAA,CAAK,QAAA,GAAW,CAAA;AAChB,IAAA,OAAO,CAAA;AAAA,EACT;AAAA;AAAA,EAGA,MAAM,gBAAA,GAA8C;AAClD,IAAA,IAAI,CAAC,IAAA,CAAK,IAAA,EAAM,OAAO,KAAK,iBAAA,EAAkB;AAC9C,IAAA,OAAO,IAAA,CAAK,eAAe,SAAS,CAAA;AAAA,EACtC;AAAA,EAEA,mBAAA,GAA4B;AAC1B,IAAA,IAAA,CAAK,IAAA,GAAO,MAAA;AACZ,IAAA,IAAA,CAAK,SAAA,EAAW,MAAM,IAAI,CAAA;AAAA,EAC5B;AAAA,EAEA,oBAAoB,GAAA,EAIX;AACP,IAAA,MAAM,IAAA,GAAO,KAAK,eAAA,IAAmB,IAAA,CAAK,IAAI,WAAA,CAAY,UAAA,EAAY,WAAW,EAAC;AAClF,IAAA,IAAA,CAAK,eAAA,GAAkB,EAAE,GAAG,IAAA,EAAM,GAAG,GAAA,EAAI;AACzC,IAAA,IAAA,CAAK,mBAAA,EAAoB;AAAA,EAC3B;AAAA;AAAA,EAGA,eAAA,GAAwB;AACtB,IAAA,IAAI,IAAA,CAAK,MAAM,IAAA,CAAK,IAAA,GAAO,EAAE,GAAG,IAAA,CAAK,IAAA,EAAM,SAAA,EAAW,CAAA,EAAE;AAAA,EAC1D;AAAA,EAEQ,YAAY,CAAA,EAA+D;AACjF,IAAA,MAAM,EAAE,SAAA,EAAW,UAAA,EAAY,GAAG,MAAK,GAAI,CAAA;AAC3C,IAAA,OAAO,IAAA;AAAA,EACT;AAAA,EAEA,MAAc,eAAe,IAAA,EAAsD;AACjF,IAAA,MAAM,EAAA,GAAK,IAAA,CAAK,GAAA,CAAI,WAAA,CAAY,UAAA;AAChC,IAAA,IAAI,CAAC,IAAI,QAAA,EAAU;AACjB,MAAA,MAAM,IAAI,MAAM,kEAAkE,CAAA;AAAA,IACpF;AACA,IAAA,MAAM,GAAA,GAAM,IAAI,GAAA,CAAI,CAAA,EAAG,KAAK,GAAA,CAAI,IAAI,CAAA,8BAAA,EAAiC,IAAI,CAAA,CAAE,CAAA;AAC3E,IAAA,GAAA,CAAI,YAAA,CAAa,GAAA,CAAI,QAAA,EAAU,IAAA,CAAK,IAAI,MAAM,CAAA;AAC9C,IAAA,GAAA,CAAI,YAAA,CAAa,GAAA,CAAI,WAAA,EAAa,EAAA,CAAG,QAAQ,CAAA;AAG7C,IAAA,MAAM,CAAA,GAAI,IAAA,CAAK,eAAA,IAAmB,EAAA,CAAG,OAAA;AACrC,IAAA,IAAI,GAAG,QAAA,EAAU,GAAA,CAAI,aAAa,GAAA,CAAI,UAAA,EAAY,EAAE,QAAQ,CAAA;AAC5D,IAAA,IAAI,GAAG,QAAA,EAAU,GAAA,CAAI,aAAa,GAAA,CAAI,UAAA,EAAY,EAAE,QAAQ,CAAA;AAC5D,IAAA,IAAI,GAAG,cAAA,EAAgB,GAAA,CAAI,aAAa,GAAA,CAAI,gBAAA,EAAkB,EAAE,cAAc,CAAA;AAC9E,IAAA,IAAI,IAAA,KAAS,SAAA,IAAa,IAAA,CAAK,IAAA,EAAM;AACnC,MAAA,GAAA,CAAI,YAAA,CAAa,GAAA,CAAI,eAAA,EAAiB,IAAA,CAAK,KAAK,YAAY,CAAA;AAAA,IAC9D;AACA,IAAA,IAAI;AACF,MAAA,MAAM,GAAA,GAAM,MAAM,IAAA,CAAK,YAAA,CAAa,KAAK,EAAE,MAAA,EAAQ,OAAO,CAAA;AAC1D,MAAA,MAAM,IAAA,GAAQ,MAAM,GAAA,CAAI,IAAA,GAAO,KAAA,CAAM,OAAO,EAAC,CAAE,CAAA;AAC/C,MAAA,IAAI,CAAC,IAAI,EAAA,EAAI;AACX,QAAA,IAAA,CAAK,aAAA,CAAc,aAAa,KAAK,CAAA;AACrC,QAAA,MAAM,IAAI,gBAAA,CAAiB,CAAA,gBAAA,EAAmB,IAAI,CAAA,OAAA,CAAA,EAAW,GAAA,CAAI,QAAQ,IAAI,CAAA;AAAA,MAC/E;AACA,MAAA,MAAM,UAAA,GAAa,KAAK,GAAA,EAAI;AAC5B,MAAA,IAAA,CAAK,IAAA,GAAO;AAAA,QACV,aAAa,IAAA,CAAK,YAAA;AAAA,QAClB,cAAc,IAAA,CAAK,aAAA;AAAA,QACnB,WAAW,IAAA,CAAK,SAAA;AAAA,QAChB,WAAW,IAAA,CAAK,UAAA;AAAA,QAChB,WACE,UAAA,GAAA,CACE,IAAA,CAAK,aAAwB,IAAA,CAAK,GAAA,CAAI,MAAM,uBAAA,IAA2B;AAAA,OAC7E;AAIA,MAAA,IAAA,CAAK,WAAW,KAAA,CAAM;AAAA,QACpB,YAAA,EAAc,KAAK,IAAA,CAAK,YAAA;AAAA,QACxB,SAAA,EAAW,KAAK,IAAA,CAAK,SAAA;AAAA,QACrB,WAAA,EAAa,KAAK,IAAA,CAAK,WAAA;AAAA,QACvB,SAAA,EAAW,KAAK,IAAA,CAAK;AAAA,OACtB,CAAA;AACD,MAAA,IAAA,CAAK,aAAA,CAAc,aAAa,IAAI,CAAA;AACpC,MAAA,OAAO,IAAA,CAAK,WAAA,CAAY,IAAA,CAAK,IAAI,CAAA;AAAA,IACnC,SAAS,GAAA,EAAK;AAEZ,MAAA,IAAI,EAAE,eAAe,gBAAA,CAAA,EAAmB;AACtC,QAAA,IAAA,CAAK,aAAA,CAAc,aAAa,KAAK,CAAA;AAAA,MACvC;AACA,MAAA,MAAM,GAAA;AAAA,IACR;AAAA,EACF;AACF;;;AChaA,IAAM,IAAA,GAAoB,KAAK,SAAA,EAAU;AACzC,IAAM,OAAA,GAAuB,KAAK,OAAA,EAAQ;AA4DnC,IAAM,wBAAN,MAA4B;AAAA,EAEjC,YAA6B,GAAA,EAAoB;AAApB,IAAA,IAAA,CAAA,GAAA,GAAA,GAAA;AAAA,EAAqB;AAAA,EAArB,GAAA;AAAA,EAD7B,OAAgB,OAAA,GAAU,SAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQ1B,MAAM,gBAAA,CAAiB,OAAA,GAAuB,IAAA,EAA8B;AAC1E,IAAA,OAAO,IAAA,CAAK,GAAA,CAAI,IAAA,CAAK,OAAA,CAAuB;AAAA,MAC1C,MAAA,EAAQ,KAAA;AAAA,MACR,IAAA,EAAM,CAAA,iBAAA,EAAoB,IAAA,CAAK,GAAA,CAAI,MAAM,CAAA,sBAAA,CAAA;AAAA,MACzC,IAAA,EAAM;AAAA,KACP,CAAA;AAAA,EACH;AAAA;AAAA,EAGA,MAAM,SAAA,CACJ,KAAA,EACA,OAAA,EACiC;AACjC,IAAA,OAAO,IAAA,CAAK,GAAA,CAAI,IAAA,CAAK,OAAA,CAAgC;AAAA,MACnD,MAAA,EAAQ,MAAA;AAAA,MACR,IAAA,EAAM,CAAA,iBAAA,EAAoB,IAAA,CAAK,GAAA,CAAI,MAAM,CAAA,2BAAA,CAAA;AAAA,MACzC,IAAA,EAAM,gBAAgB,OAAO,CAAA;AAAA,MAC7B,IAAA,EAAM;AAAA,KACP,CAAA;AAAA,EACH;AAAA;AAAA,EAGA,MAAM,OAAA,CAAQ,EAAA,EAAY,OAAA,GAAuB,IAAA,EAA4B;AAC3E,IAAA,OAAO,IAAA,CAAK,GAAA,CAAI,IAAA,CAAK,OAAA,CAAqB;AAAA,MACxC,MAAA,EAAQ,KAAA;AAAA,MACR,MAAM,CAAA,iBAAA,EAAoB,IAAA,CAAK,GAAA,CAAI,MAAM,0BAA0B,EAAE,CAAA,CAAA;AAAA,MACrE,IAAA,EAAM;AAAA,KACP,CAAA;AAAA,EACH;AAAA;AAAA,EAGA,MAAM,UAAA,CACJ,KAAA,EACA,OAAA,GAAuB,IAAA,EACW;AAClC,IAAA,OAAO,IAAA,CAAK,GAAA,CAAI,IAAA,CAAK,OAAA,CAAiC;AAAA,MACpD,MAAA,EAAQ,MAAA;AAAA,MACR,IAAA,EAAM,CAAA,iBAAA,EAAoB,IAAA,CAAK,GAAA,CAAI,MAAM,CAAA,4BAAA,CAAA;AAAA,MACzC,IAAA,EAAM,OAAA;AAAA,MACN,IAAA,EAAM;AAAA,KACP,CAAA;AAAA,EACH;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOS,KAAA,GAAQ;AAAA;AAAA,IAEf,MAAM,OAAO,OAAA,GAAuB,YAClC,IAAA,CAAK,GAAA,CAAI,KAAK,OAAA,CAA6B;AAAA,MACzC,MAAA,EAAQ,KAAA;AAAA,MACR,IAAA,EAAM,CAAA,iBAAA,EAAoB,IAAA,CAAK,GAAA,CAAI,MAAM,CAAA,oBAAA,CAAA;AAAA,MACzC,IAAA,EAAM;AAAA,KACP,CAAA;AAAA;AAAA,IAGH,GAAA,EAAK,OAAO,EAAA,EAAY,OAAA,GAAuB,YAC7C,IAAA,CAAK,GAAA,CAAI,KAAK,OAAA,CAA2B;AAAA,MACvC,MAAA,EAAQ,KAAA;AAAA,MACR,MAAM,CAAA,iBAAA,EAAoB,IAAA,CAAK,GAAA,CAAI,MAAM,wBAAwB,EAAE,CAAA,CAAA;AAAA,MACnE,IAAA,EAAM;AAAA,KACP,CAAA;AAAA;AAAA,IAGH,MAAA,EAAQ,OACN,KAAA,EACA,OAAA,GAAuB,YAEvB,IAAA,CAAK,GAAA,CAAI,KAAK,OAAA,CAA2B;AAAA,MACvC,MAAA,EAAQ,MAAA;AAAA,MACR,IAAA,EAAM,CAAA,iBAAA,EAAoB,IAAA,CAAK,GAAA,CAAI,MAAM,CAAA,oBAAA,CAAA;AAAA,MACzC,IAAA,EAAM,KAAA;AAAA,MACN,IAAA,EAAM;AAAA,KACP,CAAA;AAAA;AAAA,IAGH,MAAA,EAAQ,OACN,EAAA,EACA,KAAA,EACA,UAAuB,OAAA,KAEvB,IAAA,CAAK,GAAA,CAAI,IAAA,CAAK,OAAA,CAA2B;AAAA,MACvC,MAAA,EAAQ,KAAA;AAAA,MACR,MAAM,CAAA,iBAAA,EAAoB,IAAA,CAAK,GAAA,CAAI,MAAM,wBAAwB,EAAE,CAAA,CAAA;AAAA,MACnE,IAAA,EAAM,KAAA;AAAA,MACN,IAAA,EAAM;AAAA,KACP,CAAA;AAAA;AAAA,IAGH,MAAA,EAAQ,OAAO,EAAA,EAAY,OAAA,GAAuB,OAAA,KAA2B;AAC3E,MAAA,MAAM,IAAA,CAAK,GAAA,CAAI,IAAA,CAAK,OAAA,CAAc;AAAA,QAChC,MAAA,EAAQ,QAAA;AAAA,QACR,MAAM,CAAA,iBAAA,EAAoB,IAAA,CAAK,GAAA,CAAI,MAAM,wBAAwB,EAAE,CAAA,CAAA;AAAA,QACnE,IAAA,EAAM;AAAA,OACP,CAAA;AAAA,IACH;AAAA,GACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQS,YAAA,GAAe;AAAA;AAAA,IAEtB,MAAM,OACJ,MAAA,GAAoE,EAAC,EACrE,UAAuB,OAAA,KACW;AAClC,MAAA,MAAM,KAAA,GAAQ;AAAA,QACZ,GAAI,OAAO,UAAA,KAAe,MAAA,GAAY,EAAC,GAAI,EAAE,UAAA,EAAY,MAAA,CAAO,UAAA,EAAW;AAAA,QAC3E,GAAI,OAAO,QAAA,KAAa,MAAA,GAAY,EAAC,GAAI,EAAE,QAAA,EAAU,MAAA,CAAO,QAAA,EAAS;AAAA,QACrE,GAAI,OAAO,IAAA,KAAS,MAAA,GAAY,EAAC,GAAI,EAAE,IAAA,EAAM,MAAA,CAAO,IAAA;AAAK,OAC3D;AACA,MAAA,OAAO,IAAA,CAAK,GAAA,CAAI,IAAA,CAAK,OAAA,CAA8B;AAAA,QACjD,MAAA,EAAQ,KAAA;AAAA,QACR,IAAA,EAAM,CAAA,iBAAA,EAAoB,IAAA,CAAK,GAAA,CAAI,MAAM,CAAA,aAAA,CAAA;AAAA,QACzC,GAAI,MAAA,CAAO,IAAA,CAAK,KAAK,CAAA,CAAE,SAAS,CAAA,GAAI,EAAE,KAAA,EAAM,GAAI,EAAC;AAAA,QACjD,IAAA,EAAM;AAAA,OACP,CAAA;AAAA,IACH,CAAA;AAAA;AAAA,IAGA,GAAA,EAAK,OAAO,aAAA,EAAuB,OAAA,GAAuB,YACxD,IAAA,CAAK,GAAA,CAAI,KAAK,OAAA,CAA4B;AAAA,MACxC,MAAA,EAAQ,KAAA;AAAA,MACR,MAAM,CAAA,iBAAA,EAAoB,IAAA,CAAK,GAAA,CAAI,MAAM,iBAAiB,aAAa,CAAA,CAAA;AAAA,MACvE,IAAA,EAAM;AAAA,KACP,CAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAOH,SAAA,EAAW,OACT,KAAA,EACA,OAAA,GAAuB,YAEvB,IAAA,CAAK,GAAA,CAAI,KAAK,OAAA,CAAgC;AAAA,MAC5C,MAAA,EAAQ,MAAA;AAAA,MACR,IAAA,EAAM,CAAA,iBAAA,EAAoB,IAAA,CAAK,GAAA,CAAI,MAAM,CAAA,kBAAA,CAAA;AAAA,MACzC,IAAA,EAAM,KAAA;AAAA,MACN,IAAA,EAAM;AAAA,KACP,CAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAMH,OAAA,EAAS,OACP,aAAA,EACA,KAAA,EACA,UAAuB,OAAA,KAEvB,IAAA,CAAK,GAAA,CAAI,IAAA,CAAK,OAAA,CAA8B;AAAA,MAC1C,MAAA,EAAQ,MAAA;AAAA,MACR,MAAM,CAAA,iBAAA,EAAoB,IAAA,CAAK,GAAA,CAAI,MAAM,YAAY,aAAa,CAAA,QAAA,CAAA;AAAA,MAClE,GAAI,KAAA,KAAU,MAAA,GAAY,EAAC,GAAI,EAAE,MAAM,KAAA,EAAM;AAAA,MAC7C,IAAA,EAAM;AAAA,KACP,CAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAMH,MAAA,EAAQ,OACN,aAAA,EACA,KAAA,EACA,UAAuB,OAAA,KAEvB,IAAA,CAAK,GAAA,CAAI,IAAA,CAAK,OAAA,CAA6B;AAAA,MACzC,MAAA,EAAQ,MAAA;AAAA,MACR,MAAM,CAAA,iBAAA,EAAoB,IAAA,CAAK,GAAA,CAAI,MAAM,YAAY,aAAa,CAAA,OAAA,CAAA;AAAA,MAClE,GAAI,KAAA,KAAU,MAAA,GAAY,EAAC,GAAI,EAAE,MAAM,KAAA,EAAM;AAAA,MAC7C,IAAA,EAAM;AAAA,KACP,CAAA;AAAA;AAAA,IAGH,MAAA,EAAQ,OAAO,aAAA,EAAuB,OAAA,GAAuB,YAC3D,IAAA,CAAK,GAAA,CAAI,KAAK,OAAA,CAA6B;AAAA,MACzC,MAAA,EAAQ,MAAA;AAAA,MACR,MAAM,CAAA,iBAAA,EAAoB,IAAA,CAAK,GAAA,CAAI,MAAM,YAAY,aAAa,CAAA,OAAA,CAAA;AAAA,MAClE,IAAA,EAAM;AAAA,KACP;AAAA,GACL;AACF","file":"chunk-PK4DQHJO.js","sourcesContent":["import type { ResolvedConfig, ServiceCredentials } from \"./config\";\nimport { EmporixAuthError, EmporixTimeoutError, EmporixNetworkError } from \"./errors\";\n\n/** Which token a call should use. */\nexport type AuthKind = \"service\" | \"customer\" | \"anonymous\" | \"raw\";\n\n/** Caller-supplied, per-call auth selector. Never stored on the client. */\nexport type AuthContext =\n  | { kind: \"service\"; credentials?: string }\n  | { kind: \"anonymous\" }\n  | { kind: \"customer\"; token: string }\n  | { kind: \"raw\"; token: string };\n\n/**\n * Supplies a fresh customer token when a `customer`-kind request 401s. The host\n * (e.g. EmporixProvider) implements this; the SDK never refreshes the\n * caller-owned customer token unless a refresher is registered.\n */\nexport interface CustomerTokenRefresher {\n  /**\n   * Called on a `customer`-kind 401. Receives the token that just failed;\n   * returns a fresh customer token to retry with, or `null` to give up (the\n   * 401 then propagates as EmporixAuthError).\n   */\n  refresh(expiredToken: string): Promise<string | null>;\n}\n\n/** An obtained anonymous storefront session. */\nexport interface AnonymousSession {\n  accessToken: string;\n  refreshToken: string;\n  sessionId: string;\n  expiresIn: number;\n}\n\n/**\n * An anonymous session as it survives outside the client instance.\n *\n * `accessToken` and `expiresAt` are optional, and a store is free to drop them:\n * they turn a *server* round trip into zero token calls, because a server client\n * lives for one request and would otherwise refresh on every single one. A\n * long-lived browser client keeps the token in memory anyway, so the React\n * storage adapters deliberately persist only the two required fields — a token\n * readable by JavaScript buys nothing there.\n *\n * A store that returns `accessToken` without a future `expiresAt` gets treated as\n * having no token at all; see {@link DefaultTokenProvider.attachAnonymousStore}.\n */\nexport interface StoredAnonymousSession {\n  refreshToken: string;\n  sessionId: string;\n  /** The access token itself, so a fresh client need not spend a refresh call for it. */\n  accessToken?: string;\n  /** Epoch ms after which `accessToken` is stale. The expiry buffer is already applied. */\n  expiresAt?: number;\n}\n\n/**\n * Persistence callback for anonymous sessions. `read` is called once on the\n * first need for an anonymous token to bootstrap a possibly-existing session;\n * `write` is called after every successful login or refresh. `write(null)`\n * means the SDK is invalidating the stored session.\n */\nexport interface AnonymousSessionStore {\n  read(): StoredAnonymousSession | null;\n  write(session: StoredAnonymousSession | null): void;\n}\n\n/** Supplies SDK-managed tokens (service/custom + anonymous). May be user-injected. */\nexport interface TokenProvider {\n  /** Service/custom client-credentials token for the named credential set. */\n  getToken(credentialSet: string): Promise<string>;\n  /** Cached anonymous storefront session (preserves sessionId across refreshes). */\n  getAnonymousToken(): Promise<AnonymousSession>;\n  /** Refresh the anonymous session, preserving sessionId. */\n  refreshAnonymous?(): Promise<AnonymousSession>;\n  /** Invalidate a cached SDK-managed token so the next call re-auths. */\n  invalidate?(credentialSet: string): void;\n  /** Invalidate the cached anonymous session entirely (next call re-logs in). */\n  invalidateAnonymous?(): void;\n  /**\n   * Mark the anonymous access token stale but keep the refresh token, so the\n   * next {@link getAnonymousToken} refreshes (preserving sessionId) rather\n   * than starting a brand-new session.\n   */\n  expireAnonymous?(): void;\n  /**\n   * Install a persistence adapter for the anonymous session. The host (e.g.\n   * `EmporixProvider`) calls this at construction so the SDK can bootstrap\n   * an existing session and persist refreshes. Idempotent: a later call\n   * replaces the previous adapter.\n   */\n  attachAnonymousStore?(store: AnonymousSessionStore): void;\n  /**\n   * Override the storefront context (currency/site/country) used for the next\n   * anonymous login, then invalidate the current anonymous session so it\n   * re-mints with the new context. No-op for providers without anon support.\n   */\n  setAnonymousContext?(ctx: {\n    currency?: string;\n    siteCode?: string;\n    targetLocation?: string;\n  }): void;\n  /**\n   * Subscribe to token-refresh events. Optional — implementations may no-op.\n   * Returns an unsubscribe function. `DefaultTokenProvider` emits for the\n   * anonymous-login / anonymous-refresh paths.\n   */\n  onRefresh?(\n    listener: (event: { kind: \"anonymous\" | \"customer\"; success: boolean }) => void,\n  ): () => void;\n}\n\n/** Tiny constructors for {@link AuthContext}. */\nexport const auth = {\n  /** Service/custom credential set (default `backend`). */\n  service: (credentials?: string): AuthContext =>\n    credentials === undefined ? { kind: \"service\" } : { kind: \"service\", credentials },\n  /** Cached anonymous storefront token. */\n  anonymous: (): AuthContext => ({ kind: \"anonymous\" }),\n  /** Caller-owned customer bearer token. */\n  customer: (token: string): AuthContext => ({ kind: \"customer\", token }),\n  /** Exact token, no transformation (SSO / token-exchange). */\n  raw: (token: string): AuthContext => ({ kind: \"raw\", token }),\n};\n\n/** Resolves an {@link AuthContext} to a concrete bearer token. */\nexport async function resolveToken(ctx: AuthContext, provider: TokenProvider): Promise<string> {\n  switch (ctx.kind) {\n    case \"service\":\n      return provider.getToken(ctx.credentials ?? \"backend\");\n    case \"anonymous\":\n      return (await provider.getAnonymousToken()).accessToken;\n    case \"customer\":\n    case \"raw\":\n      return ctx.token;\n  }\n}\n\n/**\n * Late-bindable, single-flight holder for an optional\n * {@link CustomerTokenRefresher}. Single-flight is required because Emporix\n * rotates the refresh token on each refresh — concurrent refreshes would\n * invalidate each other. Off (returns `null`) until a refresher is set.\n */\nexport class CustomerRefreshRegistry {\n  private refresher: CustomerTokenRefresher | null = null;\n  private inflight: Promise<string | null> | null = null;\n\n  set(refresher: CustomerTokenRefresher | null): void {\n    this.refresher = refresher;\n  }\n\n  get enabled(): boolean {\n    return this.refresher !== null;\n  }\n\n  /** Concurrent callers share one in-flight refresh. */\n  refresh(expiredToken: string): Promise<string | null> {\n    if (!this.refresher) return Promise.resolve(null);\n    if (this.inflight) return this.inflight;\n    const p = Promise.resolve(this.refresher.refresh(expiredToken)).finally(() => {\n      this.inflight = null;\n    });\n    this.inflight = p;\n    return p;\n  }\n}\n\ninterface CacheEntry {\n  token: string;\n  expiresAt: number;\n  obtainedAt: number;\n}\n\n/** SDK-owned token provider: client-credentials service tokens + anonymous session. */\nexport class DefaultTokenProvider implements TokenProvider {\n  private readonly serviceCache = new Map<string, CacheEntry>();\n  private readonly serviceLocks = new Map<string, Promise<string>>();\n  private anon: (AnonymousSession & { expiresAt: number }) | undefined;\n  private anonLock: Promise<AnonymousSession> | undefined;\n  private anonStore?: AnonymousSessionStore;\n  private contextOverride:\n    | { currency?: string; siteCode?: string; targetLocation?: string }\n    | undefined;\n  private readonly refreshListeners = new Set<\n    (event: { kind: \"anonymous\" | \"customer\"; success: boolean }) => void\n  >();\n\n  constructor(private readonly cfg: ResolvedConfig) {}\n\n  onRefresh(\n    listener: (event: { kind: \"anonymous\" | \"customer\"; success: boolean }) => void,\n  ): () => void {\n    this.refreshListeners.add(listener);\n    return () => {\n      this.refreshListeners.delete(listener);\n    };\n  }\n\n  private notifyRefresh(kind: \"anonymous\" | \"customer\", success: boolean): void {\n    for (const l of this.refreshListeners) {\n      try {\n        l({ kind, success });\n      } catch {\n        // Never let a telemetry listener break the auth path.\n      }\n    }\n  }\n\n  attachAnonymousStore(store: AnonymousSessionStore): void {\n    this.anonStore = store;\n    // Bootstrap `this.anon` from the store if we don't have it yet.\n    //\n    // A persisted access token that is still inside its lifetime is adopted as\n    // is, and that is the point on a server: a client that lives for one request\n    // would otherwise spend one `/anonymous/refresh` per request for a token it\n    // already holds. Without a token — or past its expiry — `expiresAt` stays 0\n    // and the next getAnonymousToken refreshes, which preserves the sessionId,\n    // so the guest's cart survives either way.\n    //\n    // `expiresAt` counts only when there is a token to go with it. A store that\n    // returns one without the other would otherwise make `anonFresh()` true and\n    // hand out an empty bearer token.\n    //\n    // Trusting a stored expiry means trusting the writer's clock. A token\n    // revoked early, or an expiry that a skewed clock made look valid, comes\n    // back as a 401 — which `HttpClient` answers with `expireAnonymous()` plus\n    // one retry, so the failure mode is a refresh, not an error.\n    if (!this.anon) {\n      const persisted = store.read();\n      if (persisted) {\n        const token = persisted.accessToken ?? \"\";\n        this.anon = {\n          accessToken: token,\n          refreshToken: persisted.refreshToken,\n          sessionId: persisted.sessionId,\n          expiresIn: 0,\n          expiresAt: token === \"\" ? 0 : (persisted.expiresAt ?? 0),\n        };\n      }\n    }\n  }\n\n  private creds(set: string): ServiceCredentials {\n    if (set === \"backend\") {\n      const b = this.cfg.credentials.backend;\n      if (!b?.clientId || !b.secret) {\n        throw new EmporixAuthError(\n          \"A 'service' AuthContext was used but credentials.backend is not configured\",\n        );\n      }\n      return b;\n    }\n    const c = this.cfg.credentials.custom?.[set];\n    if (!c) throw new Error(`Unknown credential set \"${set}\"`);\n    return c;\n  }\n\n  private fresh(e: CacheEntry | undefined): boolean {\n    if (!e) return false;\n    const now = Date.now();\n    if (now - e.obtainedAt >= this.cfg.cache.maxLifetimeSeconds * 1000) return false;\n    return now < e.expiresAt;\n  }\n\n  async getToken(set: string): Promise<string> {\n    // Surface an unknown credential set before entering the cache/lock path.\n    this.creds(set);\n    const cached = this.serviceCache.get(set);\n    if (this.fresh(cached)) return cached!.token;\n    const inflight = this.serviceLocks.get(set);\n    if (inflight) return inflight;\n    const p = this.requestServiceToken(set).finally(() => this.serviceLocks.delete(set));\n    this.serviceLocks.set(set, p);\n    return p;\n  }\n\n  /**\n   * fetch with the configured read timeout. Token endpoints sit in front of\n   * single-flight locks — one hung call would otherwise block every request\n   * on this credential set forever.\n   */\n  private async boundedFetch(url: string | URL, init: RequestInit = {}): Promise<Response> {\n    const ms = this.cfg.timeouts?.readMs ?? 60_000;\n    const controller = new AbortController();\n    const timer = setTimeout(() => controller.abort(), ms);\n    try {\n      return await fetch(url, { ...init, signal: controller.signal });\n    } catch (err) {\n      if ((err as Error).name === \"AbortError\") {\n        throw new EmporixTimeoutError(`token request timed out after ${ms}ms`);\n      }\n      throw new EmporixNetworkError(`token request network failure: ${(err as Error).message}`);\n    } finally {\n      clearTimeout(timer);\n    }\n  }\n\n  private async requestServiceToken(set: string): Promise<string> {\n    const c = this.creds(set);\n    const body = new URLSearchParams({\n      grant_type: \"client_credentials\",\n      client_id: c.clientId,\n      client_secret: c.secret,\n    });\n    if (c.scope) body.set(\"scope\", c.scope);\n    const res = await this.boundedFetch(`${this.cfg.host}/oauth/token`, {\n      method: \"POST\",\n      headers: { \"Content-Type\": \"application/x-www-form-urlencoded\" },\n      body,\n    });\n    const json = (await res.json().catch(() => ({}))) as Record<string, unknown>;\n    if (!res.ok) {\n      throw new EmporixAuthError(`Token request failed for \"${set}\"`, res.status, json);\n    }\n    const obtainedAt = Date.now();\n    const ttl = Number((json.expires_in as number | undefined) ?? 3600);\n    this.serviceCache.set(set, {\n      token: json.access_token as string,\n      obtainedAt,\n      expiresAt: obtainedAt + (ttl - this.cfg.cache.expirationBufferSeconds) * 1000,\n    });\n    return this.serviceCache.get(set)!.token;\n  }\n\n  invalidate(set: string): void {\n    this.serviceCache.delete(set);\n  }\n\n  private anonFresh(): boolean {\n    return !!this.anon && Date.now() < this.anon.expiresAt;\n  }\n\n  async getAnonymousToken(): Promise<AnonymousSession> {\n    if (this.anonFresh()) return this.stripExpiry(this.anon!);\n    if (this.anonLock) return this.anonLock;\n    // Token expired but a refresh token survives → refresh to keep the same\n    // sessionId; only fall back to a brand-new login if the refresh fails.\n    const canRefresh = !!this.anon?.refreshToken;\n    const obtain = canRefresh\n      ? this.fetchAnonymous(\"refresh\").catch(() => this.fetchAnonymous(\"login\"))\n      : this.fetchAnonymous(\"login\");\n    const p = obtain.finally(() => {\n      this.anonLock = undefined;\n    });\n    this.anonLock = p;\n    return p;\n  }\n\n  /** Refreshes the anonymous session, preserving its sessionId. */\n  async refreshAnonymous(): Promise<AnonymousSession> {\n    if (!this.anon) return this.getAnonymousToken();\n    return this.fetchAnonymous(\"refresh\");\n  }\n\n  invalidateAnonymous(): void {\n    this.anon = undefined;\n    this.anonStore?.write(null);\n  }\n\n  setAnonymousContext(ctx: {\n    currency?: string;\n    siteCode?: string;\n    targetLocation?: string;\n  }): void {\n    const base = this.contextOverride ?? this.cfg.credentials.storefront?.context ?? {};\n    this.contextOverride = { ...base, ...ctx };\n    this.invalidateAnonymous();\n  }\n\n  /** Force a stale access token while keeping the refresh token + sessionId. */\n  expireAnonymous(): void {\n    if (this.anon) this.anon = { ...this.anon, expiresAt: 0 };\n  }\n\n  private stripExpiry(s: AnonymousSession & { expiresAt: number }): AnonymousSession {\n    const { expiresAt: _expiresAt, ...rest } = s;\n    return rest;\n  }\n\n  private async fetchAnonymous(mode: \"login\" | \"refresh\"): Promise<AnonymousSession> {\n    const sf = this.cfg.credentials.storefront;\n    if (!sf?.clientId) {\n      throw new Error(\"credentials.storefront.clientId is required for anonymous tokens\");\n    }\n    const url = new URL(`${this.cfg.host}/customerlogin/auth/anonymous/${mode}`);\n    url.searchParams.set(\"tenant\", this.cfg.tenant);\n    url.searchParams.set(\"client_id\", sf.clientId);\n    // Context is the runtime override (set via setAnonymousContext) if present,\n    // else the config-fixed context.\n    const c = this.contextOverride ?? sf.context;\n    if (c?.currency) url.searchParams.set(\"currency\", c.currency);\n    if (c?.siteCode) url.searchParams.set(\"siteCode\", c.siteCode);\n    if (c?.targetLocation) url.searchParams.set(\"targetLocation\", c.targetLocation);\n    if (mode === \"refresh\" && this.anon) {\n      url.searchParams.set(\"refresh_token\", this.anon.refreshToken);\n    }\n    try {\n      const res = await this.boundedFetch(url, { method: \"GET\" });\n      const json = (await res.json().catch(() => ({}))) as Record<string, unknown>;\n      if (!res.ok) {\n        this.notifyRefresh(\"anonymous\", false);\n        throw new EmporixAuthError(`Anonymous token ${mode} failed`, res.status, json);\n      }\n      const obtainedAt = Date.now();\n      this.anon = {\n        accessToken: json.access_token as string,\n        refreshToken: json.refresh_token as string,\n        sessionId: json.sessionId as string,\n        expiresIn: json.expires_in as number,\n        expiresAt:\n          obtainedAt +\n          ((json.expires_in as number) - this.cfg.cache.expirationBufferSeconds) * 1000,\n      };\n      // The access token and its expiry go out too, so a store that keeps them\n      // (a server one) can hand the next request a usable token instead of\n      // another refresh. A store that only wants the refresh token drops them.\n      this.anonStore?.write({\n        refreshToken: this.anon.refreshToken,\n        sessionId: this.anon.sessionId,\n        accessToken: this.anon.accessToken,\n        expiresAt: this.anon.expiresAt,\n      });\n      this.notifyRefresh(\"anonymous\", true);\n      return this.stripExpiry(this.anon);\n    } catch (err) {\n      // Re-throw EmporixAuthError as-is; for non-Emporix errors (network), also notify.\n      if (!(err instanceof EmporixAuthError)) {\n        this.notifyRefresh(\"anonymous\", false);\n      }\n      throw err;\n    }\n  }\n}\n// Customer-token refreshes happen via client.customers.refresh() and don't\n// route through this TokenProvider — only the anonymous flow notifies.\n// React-side useCustomerSession.refresh emits its own telemetry event in a\n// follow-up if needed.\n","import type { ClientContext } from \"../core/context\";\nimport { auth, type AuthContext } from \"../core/auth\";\nimport { requireCustomer } from \"../core/require-customer\";\nimport type {\n  PaymentModeFrontendResponse,\n  AuthorizePaymentRequest,\n  InitializePaymentRequest,\n  InitializePaymentResponse,\n  PaymentModeResponse,\n  PaymentModeRequest,\n  PaymentMethodUpdateRequest,\n  PaymentTransactionResponse,\n  AuthorizePaymentResponse,\n  CaptureRequest,\n  RefundRequest,\n  CommonPaymentResponse,\n} from \"../generated/payment\";\n\nconst ANON: AuthContext = auth.anonymous();\nconst SERVICE: AuthContext = auth.service();\n\n/** A frontend payment mode (generated). */\nexport type PaymentMode = PaymentModeFrontendResponse;\n\n/** Post-checkout authorize request (generated; caller sends the exact wire shape). */\nexport type AuthorizePaymentInput = AuthorizePaymentRequest;\n\n/** Frontend payment-initialize request (generated). */\nexport type InitializePaymentInput = InitializePaymentRequest;\n\n/** Frontend payment-initialize response (generated). */\nexport type InitializePaymentResult = InitializePaymentResponse;\n\n/** Post-checkout authorize result. */\nexport interface AuthorizePaymentResult {\n  successful: boolean;\n  paymentTransactionId?: string;\n  authorizationToken?: string;\n  requiresExternalPayment?: boolean;\n  externalPaymentRedirectURL?: string;\n  externalPaymentHttpMethod?: string;\n  [k: string]: unknown;\n}\n\n/** A configured payment mode (admin view, `/paymentmodes/config`). */\nexport type PaymentModeConfig = PaymentModeResponse;\n\n/** Body for creating a payment-mode configuration. */\nexport type PaymentModeCreateInput = PaymentModeRequest;\n\n/** Body for updating a payment-mode configuration. */\nexport type PaymentModeUpdateInput = PaymentMethodUpdateRequest;\n\n/** A payment transaction (generated). */\nexport type PaymentTransaction = PaymentTransactionResponse;\n\n/** Result of a backend payment authorization. */\nexport type PaymentAuthorizeResult = AuthorizePaymentResponse;\n\n/** Body for capturing an authorized payment. */\nexport type PaymentCaptureInput = CaptureRequest;\n\n/** Body for refunding a captured payment. */\nexport type PaymentRefundInput = RefundRequest;\n\n/**\n * Result of a refund/cancel operation. Business failures are reported in the\n * body (`successful: false` + `message`), not via HTTP status.\n */\nexport type PaymentActionResult = CommonPaymentResponse;\n\n/** Result of a capture — like {@link PaymentActionResult} plus the provider's capture id. */\nexport type PaymentCaptureResult = {\n  successful?: boolean;\n  message?: string;\n  captureId?: string;\n};\n\n/** Payment-Gateway: list frontend payment modes, authorize deferred payments. */\nexport class PaymentGatewayService {\n  static readonly channel = \"payment\" as const;\n  constructor(private readonly ctx: ClientContext) {}\n\n  /**\n   * Lists configured frontend payment modes. The endpoint requires a bearer\n   * token but no customer scope (\"No scope required\"), so it defaults to an\n   * anonymous context and works for guests and logged-in customers alike.\n   */\n  async listPaymentModes(authCtx: AuthContext = ANON): Promise<PaymentMode[]> {\n    return this.ctx.http.request<PaymentMode[]>({\n      method: \"GET\",\n      path: `/payment-gateway/${this.ctx.tenant}/paymentmodes/frontend`,\n      auth: authCtx,\n    });\n  }\n\n  /** Authorizes a post-checkout (deferred) payment for an existing order. */\n  async authorize(\n    input: AuthorizePaymentInput,\n    authCtx?: AuthContext,\n  ): Promise<AuthorizePaymentResult> {\n    return this.ctx.http.request<AuthorizePaymentResult>({\n      method: \"POST\",\n      path: `/payment-gateway/${this.ctx.tenant}/payment/frontend/authorize`,\n      auth: requireCustomer(authCtx),\n      body: input,\n    });\n  }\n\n  /** Retrieves a single frontend payment mode by id. Defaults to anonymous (no scope required). */\n  async getMode(id: string, authCtx: AuthContext = ANON): Promise<PaymentMode> {\n    return this.ctx.http.request<PaymentMode>({\n      method: \"GET\",\n      path: `/payment-gateway/${this.ctx.tenant}/paymentmodes/frontend/${id}`,\n      auth: authCtx,\n    });\n  }\n\n  /** Initializes a payment from the frontend. Defaults to anonymous (no scope required). */\n  async initialize(\n    input: InitializePaymentInput,\n    authCtx: AuthContext = ANON,\n  ): Promise<InitializePaymentResult> {\n    return this.ctx.http.request<InitializePaymentResult>({\n      method: \"POST\",\n      path: `/payment-gateway/${this.ctx.tenant}/payment/frontend/initialize`,\n      auth: authCtx,\n      body: input,\n    });\n  }\n\n  /**\n   * Payment-mode **configuration** (`/paymentmodes/config`) — the admin view.\n   * For the storefront view use {@link listPaymentModes} / {@link getMode}.\n   * Defaults to service auth.\n   */\n  readonly modes = {\n    /** Lists all configured payment modes. The endpoint takes no query parameters. */\n    list: async (authCtx: AuthContext = SERVICE): Promise<PaymentModeConfig[]> =>\n      this.ctx.http.request<PaymentModeConfig[]>({\n        method: \"GET\",\n        path: `/payment-gateway/${this.ctx.tenant}/paymentmodes/config`,\n        auth: authCtx,\n      }),\n\n    /** Retrieves one payment-mode configuration by id. */\n    get: async (id: string, authCtx: AuthContext = SERVICE): Promise<PaymentModeConfig> =>\n      this.ctx.http.request<PaymentModeConfig>({\n        method: \"GET\",\n        path: `/payment-gateway/${this.ctx.tenant}/paymentmodes/config/${id}`,\n        auth: authCtx,\n      }),\n\n    /** Creates a payment-mode configuration. Responds 200 with the created mode. */\n    create: async (\n      input: PaymentModeCreateInput,\n      authCtx: AuthContext = SERVICE,\n    ): Promise<PaymentModeConfig> =>\n      this.ctx.http.request<PaymentModeConfig>({\n        method: \"POST\",\n        path: `/payment-gateway/${this.ctx.tenant}/paymentmodes/config`,\n        body: input,\n        auth: authCtx,\n      }),\n\n    /** Updates a payment-mode configuration (PUT). Responds 200 with the updated mode. */\n    update: async (\n      id: string,\n      input: PaymentModeUpdateInput,\n      authCtx: AuthContext = SERVICE,\n    ): Promise<PaymentModeConfig> =>\n      this.ctx.http.request<PaymentModeConfig>({\n        method: \"PUT\",\n        path: `/payment-gateway/${this.ctx.tenant}/paymentmodes/config/${id}`,\n        body: input,\n        auth: authCtx,\n      }),\n\n    /** Deletes a payment-mode configuration. */\n    delete: async (id: string, authCtx: AuthContext = SERVICE): Promise<void> => {\n      await this.ctx.http.request<void>({\n        method: \"DELETE\",\n        path: `/payment-gateway/${this.ctx.tenant}/paymentmodes/config/${id}`,\n        auth: authCtx,\n      });\n    },\n  };\n\n  /**\n   * Backend transaction lifecycle and reads. `authorize` creates the transaction\n   * that `capture`/`refund`/`cancel` then act on. Business failures are reported\n   * in the response body (`successful: false`), not as HTTP errors — always check\n   * `successful`. Defaults to service auth.\n   */\n  readonly transactions = {\n    /** One page of payment transactions. */\n    list: async (\n      params: { pageNumber?: number; pageSize?: number; sort?: string } = {},\n      authCtx: AuthContext = SERVICE,\n    ): Promise<PaymentTransaction[]> => {\n      const query = {\n        ...(params.pageNumber === undefined ? {} : { pageNumber: params.pageNumber }),\n        ...(params.pageSize === undefined ? {} : { pageSize: params.pageSize }),\n        ...(params.sort === undefined ? {} : { sort: params.sort }),\n      };\n      return this.ctx.http.request<PaymentTransaction[]>({\n        method: \"GET\",\n        path: `/payment-gateway/${this.ctx.tenant}/transactions`,\n        ...(Object.keys(query).length > 0 ? { query } : {}),\n        auth: authCtx,\n      });\n    },\n\n    /** Retrieves one payment transaction by id. */\n    get: async (transactionId: string, authCtx: AuthContext = SERVICE): Promise<PaymentTransaction> =>\n      this.ctx.http.request<PaymentTransaction>({\n        method: \"GET\",\n        path: `/payment-gateway/${this.ctx.tenant}/transactions/${transactionId}`,\n        auth: authCtx,\n      }),\n\n    /**\n     * Authorizes a payment as a backend caller (`POST /payment/authorize`). The\n     * storefront equivalent is {@link PaymentGatewayService.authorize}, which\n     * targets `/payment/frontend/authorize` with a customer token.\n     */\n    authorize: async (\n      input: AuthorizePaymentInput,\n      authCtx: AuthContext = SERVICE,\n    ): Promise<PaymentAuthorizeResult> =>\n      this.ctx.http.request<PaymentAuthorizeResult>({\n        method: \"POST\",\n        path: `/payment-gateway/${this.ctx.tenant}/payment/authorize`,\n        body: input,\n        auth: authCtx,\n      }),\n\n    /**\n     * Captures an authorized payment. Omit `input` to capture the full\n     * authorized amount. Returns the provider's `captureId` on success.\n     */\n    capture: async (\n      transactionId: string,\n      input?: PaymentCaptureInput,\n      authCtx: AuthContext = SERVICE,\n    ): Promise<PaymentCaptureResult> =>\n      this.ctx.http.request<PaymentCaptureResult>({\n        method: \"POST\",\n        path: `/payment-gateway/${this.ctx.tenant}/payment/${transactionId}/capture`,\n        ...(input === undefined ? {} : { body: input }),\n        auth: authCtx,\n      }),\n\n    /**\n     * Refunds a captured payment. Omit `input` to refund the full captured\n     * amount; pass `captureId` when several captures exist for the payment.\n     */\n    refund: async (\n      transactionId: string,\n      input?: PaymentRefundInput,\n      authCtx: AuthContext = SERVICE,\n    ): Promise<PaymentActionResult> =>\n      this.ctx.http.request<PaymentActionResult>({\n        method: \"POST\",\n        path: `/payment-gateway/${this.ctx.tenant}/payment/${transactionId}/refund`,\n        ...(input === undefined ? {} : { body: input }),\n        auth: authCtx,\n      }),\n\n    /** Cancels an authorized payment. Takes no body. */\n    cancel: async (transactionId: string, authCtx: AuthContext = SERVICE): Promise<PaymentActionResult> =>\n      this.ctx.http.request<PaymentActionResult>({\n        method: \"POST\",\n        path: `/payment-gateway/${this.ctx.tenant}/payment/${transactionId}/cancel`,\n        auth: authCtx,\n      }),\n  };\n}\n"]}

package/dist/{chunk-NFSO7WUA.js → chunk-SIGXBN4F.js}

@@ -1,5 +1,5 @@
 import { requestPage } from './chunk-LKHKFF7B.js';
-import { EmporixError, errorFromResponse } from './chunk-UWGGF4MC.js';
+import { EmporixError, errorFromResponse } from './chunk-4Q76UV4J.js';
 
 // src/services/media.ts
 var SERVICE = { kind: "service" };
@@ -356,5 +356,5 @@ var MediaService = class {
 var _internalMedia = { isProductRef };
 
 export { MediaService, _internalMedia };
-//# sourceMappingURL=chunk-NFSO7WUA.js.map
-//# sourceMappingURL=chunk-NFSO7WUA.js.map
+//# sourceMappingURL=chunk-SIGXBN4F.js.map
+//# sourceMappingURL=chunk-SIGXBN4F.js.map

package/dist/{chunk-NFSO7WUA.js.map → chunk-SIGXBN4F.js.map}

@@ -1 +1 @@
-{"version":3,"sources":["../src/services/media.ts"],"names":["text"],"mappings":";;;;AA0FA,IAAM,OAAA,GAAuB,EAAE,IAAA,EAAM,SAAA,EAAU;AAE/C,SAAS,YAAA,CAAa,GAAe,SAAA,EAA4B;AAC/D,EAAA,OAAO,CAAA,CAAE,IAAA,KAAS,SAAA,IAAa,CAAA,CAAE,EAAA,KAAO,SAAA;AAC1C;AAMO,IAAM,eAAN,MAAmB;AAAA,EAExB,YAA6B,GAAA,EAAoB;AAApB,IAAA,IAAA,CAAA,GAAA,GAAA,GAAA;AAAA,EAAqB;AAAA,EAArB,GAAA;AAAA,EAD7B,OAAgB,OAAA,GAAU,OAAA;AAAA,EAGlB,IAAA,GAAe;AACrB,IAAA,OAAO,CAAA,OAAA,EAAU,IAAA,CAAK,GAAA,CAAI,MAAM,CAAA,OAAA,CAAA;AAAA,EAClC;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,MAAM,MAAA,CACJ,KAAA,EAGA,IAAA,GAAoB,OAAA,EACK;AACzB,IAAA,IAAI,KAAA,CAAM,SAAS,MAAA,EAAQ;AACzB,MAAA,MAAM,EAAA,GAAK,IAAI,QAAA,EAAS;AACxB,MAAA,EAAA,CAAG,GAAA,CAAI,MAAA,EAAQ,KAAA,CAAM,IAAI,CAAA;AACzB,MAAA,EAAA,CAAG,IAAI,MAAA,EAAQ,IAAA,CAAK,SAAA,CAAU,KAAA,CAAM,IAAI,CAAC,CAAA;AACzC,MAAA,OAAO,IAAA,CAAK,GAAA,CAAI,IAAA,CAAK,OAAA,CAAwB;AAAA,QAC3C,MAAA,EAAQ,MAAA;AAAA,QACR,IAAA,EAAM,KAAK,IAAA,EAAK;AAAA,QAChB,IAAA;AAAA,QACA,IAAA,EAAM;AAAA,OACP,CAAA;AAAA,IACH;AACA,IAAA,OAAO,IAAA,CAAK,GAAA,CAAI,IAAA,CAAK,OAAA,CAAwB;AAAA,MAC3C,MAAA,EAAQ,MAAA;AAAA,MACR,IAAA,EAAM,KAAK,IAAA,EAAK;AAAA,MAChB,IAAA;AAAA,MACA,MAAM,KAAA,CAAM;AAAA,KACb,CAAA;AAAA,EACH;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAUA,MAAM,IAAA,CACJ,KAAA,GAAyB,EAAC,EAC1B,OAAoB,OAAA,EACY;AAChC,IAAA,MAAM,UAAA,GAAa,MAAM,UAAA,IAAc,CAAA;AACvC,IAAA,MAAM,QAAA,GAAW,MAAM,QAAA,IAAY,EAAA;AAInC,IAAA,MAAM,EAAE,UAAA,EAAY,GAAG,IAAA,EAAK,GAAI,KAAA;AAChC,IAAA,OAAO,WAAA;AAAA,MACL,KAAK,GAAA,CAAI,IAAA;AAAA,MACT;AAAA,QACE,MAAA,EAAQ,KAAA;AAAA,QACR,IAAA,EAAM,KAAK,IAAA,EAAK;AAAA,QAChB,IAAA;AAAA,QACA,KAAA,EAAO,EAAE,GAAG,IAAA,EAAM,YAAY,QAAA;AAAS,OACzC;AAAA,MACA,EAAE,UAAA,EAAY,QAAA,EAAU,GAAI,UAAA,KAAe,SAAY,EAAC,GAAI,EAAE,UAAA,EAAW;AAAG,KAC9E;AAAA,EACF;AAAA;AAAA,EAGA,MAAM,GAAA,CAAI,OAAA,EAAiB,IAAA,GAAoB,OAAA,EAAyB;AACtE,IAAA,OAAO,IAAA,CAAK,GAAA,CAAI,IAAA,CAAK,OAAA,CAAe;AAAA,MAClC,MAAA,EAAQ,KAAA;AAAA,MACR,MAAM,CAAA,EAAG,IAAA,CAAK,IAAA,EAAM,IAAI,OAAO,CAAA,CAAA;AAAA,MAC/B;AAAA,KACD,CAAA;AAAA,EACH;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAkBA,MAAM,MAAA,CACJ,OAAA,EACA,KAAA,EAGA,OAAoB,OAAA,EACL;AACf,IAAA,MAAM,IAAA,GAAO,GAAG,IAAA,CAAK,IAAA,EAAM,CAAA,CAAA,EAAI,kBAAA,CAAmB,OAAO,CAAC,CAAA,CAAA;AAC1D,IAAA,IAAI,KAAA,CAAM,SAAS,MAAA,EAAQ;AACzB,MAAA,MAAM,EAAA,GAAK,IAAI,QAAA,EAAS;AACxB,MAAA,EAAA,CAAG,GAAA,CAAI,MAAA,EAAQ,KAAA,CAAM,IAAI,CAAA;AACzB,MAAA,EAAA,CAAG,IAAI,MAAA,EAAQ,IAAA,CAAK,SAAA,CAAU,KAAA,CAAM,IAAI,CAAC,CAAA;AACzC,MAAA,MAAM,IAAA,CAAK,GAAA,CAAI,IAAA,CAAK,OAAA,CAAc,EAAE,MAAA,EAAQ,KAAA,EAAO,IAAA,EAAM,IAAA,EAAM,IAAA,EAAM,EAAA,EAAI,CAAA;AACzE,MAAA;AAAA,IACF;AACA,IAAA,MAAM,IAAA,CAAK,GAAA,CAAI,IAAA,CAAK,OAAA,CAAc,EAAE,MAAA,EAAQ,KAAA,EAAO,IAAA,EAAM,IAAA,EAAM,IAAA,EAAM,KAAA,CAAM,IAAA,EAAM,CAAA;AAAA,EACnF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAuBA,MAAM,KAAA,CAAM,OAAA,EAAiB,GAAA,EAAiB,OAAoB,OAAA,EAAwB;AACxF,IAAA,MAAM,IAAA,CAAK,GAAA,CAAI,IAAA,CAAK,OAAA,CAAc;AAAA,MAChC,MAAA,EAAQ,OAAA;AAAA,MACR,IAAA,EAAM,GAAG,IAAA,CAAK,IAAA,EAAM,CAAA,CAAA,EAAI,kBAAA,CAAmB,OAAO,CAAC,CAAA,CAAA;AAAA,MACnD,IAAA;AAAA,MACA,IAAA,EAAM;AAAA,KACP,CAAA;AAAA,EACH;AAAA;AAAA,EAGA,MAAM,MAAA,CAAO,OAAA,EAAiB,IAAA,GAAoB,OAAA,EAAwB;AACxE,IAAA,MAAM,IAAA,CAAK,GAAA,CAAI,IAAA,CAAK,OAAA,CAAc;AAAA,MAChC,MAAA,EAAQ,QAAA;AAAA,MACR,MAAM,CAAA,EAAG,IAAA,CAAK,IAAA,EAAM,IAAI,OAAO,CAAA,CAAA;AAAA,MAC/B;AAAA,KACD,CAAA;AAAA,EACH;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EA2BA,MAAM,QAAA,CACJ,OAAA,EACA,IAAA,GAAoB,OAAA,EACK;AACzB,IAAA,MAAM,OAAO,CAAA,EAAG,IAAA,CAAK,IAAA,EAAM,IAAI,OAAO,CAAA,SAAA,CAAA;AACtC,IAAA,MAAM,GAAA,GAAM,MAAM,IAAA,CAAK,GAAA,CAAI,IAAA,CAAK,UAAA;AAAA,MAC9B,EAAE,MAAA,EAAQ,KAAA,EAAO,IAAA,EAAM,IAAA,EAAK;AAAA,MAC5B,EAAE,UAAU,QAAA;AAAS,KACvB;AAGA,IAAA,IAAI,GAAA,CAAI,MAAA,IAAU,GAAA,IAAO,GAAA,CAAI,SAAS,GAAA,EAAK;AACzC,MAAA,MAAM,GAAA,GAAM,GAAA,CAAI,OAAA,CAAQ,GAAA,CAAI,UAAU,CAAA;AACtC,MAAA,IAAI,CAAC,GAAA,EAAK;AACR,QAAA,MAAM,IAAI,YAAA;AAAA,UACR,CAAA,gBAAA,EAAmB,IAAI,MAAM,CAAA,mCAAA,CAAA;AAAA,UAC7B,GAAA,CAAI;AAAA,SACN;AAAA,MACF;AACA,MAAA,OAAO,EAAE,IAAA,EAAM,UAAA,EAAY,GAAA,EAAI;AAAA,IACjC;AAGA,IAAA,IAAI,IAAI,EAAA,EAAI;AACV,MAAA,MAAM,IAAA,GAAO,GAAA,CAAI,OAAA,CAAQ,GAAA,CAAI,MAAM,CAAA,IAAK,MAAA;AACxC,MAAA,MAAM,WAAA,GAAc,GAAA,CAAI,OAAA,CAAQ,GAAA,CAAI,cAAc,CAAA,IAAK,MAAA;AACvD,MAAA,IAAI,IAAA;AACJ,MAAA,IAAI,WAAA,EAAa,UAAA,CAAW,YAAY,CAAA,EAAG;AAIzC,QAAA,MAAMA,KAAAA,GAAO,MAAM,GAAA,CAAI,IAAA,EAAK;AAC5B,QAAA,MAAM,GAAA,GAAM,KAAKA,KAAI,CAAA;AACrB,QAAA,MAAM,GAAA,GAAM,IAAI,UAAA,CAAW,GAAA,CAAI,MAAM,CAAA;AACrC,QAAA,KAAA,IAAS,CAAA,GAAI,CAAA,EAAG,CAAA,GAAI,GAAA,CAAI,MAAA,EAAQ,CAAA,EAAA,EAAK,GAAA,CAAI,CAAC,CAAA,GAAI,GAAA,CAAI,UAAA,CAAW,CAAC,CAAA;AAC9D,QAAA,IAAA,GAAO,GAAA,CAAI,MAAA;AAAA,MACb,CAAA,MAAO;AACL,QAAA,IAAA,GAAO,MAAM,IAAI,WAAA,EAAY;AAAA,MAC/B;AACA,MAAA,OAAO;AAAA,QACL,IAAA,EAAM,OAAA;AAAA,QACN,IAAA;AAAA,QACA,GAAI,IAAA,KAAS,MAAA,GAAY,EAAE,IAAA,KAAS,EAAC;AAAA,QACrC,GAAI,WAAA,KAAgB,MAAA,GAAY,EAAE,WAAA,KAAgB;AAAC,OACrD;AAAA,IACF;AAGA,IAAA,MAAM,IAAA,GAAO,MAAM,GAAA,CAAI,IAAA,EAAK;AAC5B,IAAA,IAAI,MAAA,GAAkB,MAAA;AACtB,IAAA,IAAI,IAAA,EAAM;AACR,MAAA,IAAI;AACF,QAAA,MAAA,GAAS,IAAA,CAAK,MAAM,IAAI,CAAA;AAAA,MAC1B,CAAA,CAAA,MAAQ;AACN,QAAA,MAAA,GAAS,IAAA;AAAA,MACX;AAAA,IACF;AACA,IAAA,MAAM,iBAAA,CAAkB,IAAI,MAAA,EAAQ,CAAA,IAAA,EAAO,IAAI,CAAA,QAAA,EAAM,GAAA,CAAI,MAAM,CAAA,CAAA,EAAI,MAAM,CAAA;AAAA,EAC3E;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAmBA,MAAM,cAAA,CACJ,OAAA,EACA,QAA+B,EAAC,EAChC,OAAoB,OAAA,EACO;AAC3B,IAAA,OAAO,IAAA,CAAK,GAAA,CAAI,IAAA,CAAK,OAAA,CAA0B;AAAA,MAC7C,MAAA,EAAQ,KAAA;AAAA,MACR,IAAA,EAAM,GAAG,IAAA,CAAK,IAAA,EAAM,CAAA,CAAA,EAAI,kBAAA,CAAmB,OAAO,CAAC,CAAA,aAAA,CAAA;AAAA,MACnD,IAAA;AAAA,MACA,KAAA,EAAO,EAAE,GAAG,KAAA;AAAM,KACnB,CAAA;AAAA,EACH;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAwBA,MAAM,kBAAA,CACJ,KAAA,EACA,IAAA,GAAoB,OAAA,EACS;AAC7B,IAAA,OAAO,IAAA,CAAK,GAAA,CAAI,IAAA,CAAK,OAAA,CAA4B;AAAA,MAC/C,MAAA,EAAQ,MAAA;AAAA,MACR,IAAA,EAAM,CAAA,EAAG,IAAA,CAAK,IAAA,EAAM,CAAA,eAAA,CAAA;AAAA,MACpB,IAAA;AAAA,MACA,IAAA,EAAM;AAAA,KACP,CAAA;AAAA,EACH;AAAA;AAAA,EAGA,MAAM,UAAA,CACJ,KAAA,EAOA,IAAA,GAAoB,OAAA,EACK;AACzB,IAAA,MAAM,IAAA,GAA6B;AAAA,MACjC,IAAA,EAAM,MAAA;AAAA,MACN,MAAA,EAAQ,MAAM,MAAA,IAAU,QAAA;AAAA,MACxB,GAAI,KAAA,CAAM,SAAA,GACN,EAAE,QAAQ,CAAC,EAAE,IAAA,EAAM,SAAA,EAAW,IAAI,KAAA,CAAM,SAAA,EAAW,CAAA,KACnD,EAAC;AAAA,MACL,GAAI,KAAA,CAAM,QAAA,IAAY,KAAA,CAAM,QAAA,GACxB;AAAA,QACE,OAAA,EAAS;AAAA,UACP,GAAI,MAAM,QAAA,GAAW,EAAE,UAAU,KAAA,CAAM,QAAA,KAAa,EAAC;AAAA,UACrD,GAAI,MAAM,QAAA,GAAW,EAAE,UAAU,KAAA,CAAM,QAAA,KAAa;AAAC;AACvD,UAEF;AAAC,KACP;AACA,IAAA,OAAO,IAAA,CAAK,MAAA,CAAO,EAAE,IAAA,EAAM,MAAA,EAAQ,MAAM,KAAA,CAAM,IAAA,EAAM,IAAA,EAAK,EAAG,IAAI,CAAA;AAAA,EACnE;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAaA,MAAM,WAAA,CACJ,OAAA,EACA,KAAA,EAOA,OAAoB,OAAA,EACL;AACf,IAAA,MAAM,OAAA,GACJ,KAAA,CAAM,OAAA,IAAA,CAAY,MAAM,IAAA,CAAK,IAAI,OAAA,EAAS,IAAI,CAAA,EAAG,QAAA,EAAU,OAAA,IAAW,CAAA;AACxE,IAAA,MAAM,IAAA,GAA6B;AAAA,MACjC,IAAA,EAAM,MAAA;AAAA,MACN,QAAQ,KAAA,CAAM,MAAA;AAAA,MACd,GAAI,KAAA,CAAM,QAAA,IAAY,KAAA,CAAM,QAAA,GACxB;AAAA,QACE,OAAA,EAAS;AAAA,UACP,GAAI,MAAM,QAAA,GAAW,EAAE,UAAU,KAAA,CAAM,QAAA,KAAa,EAAC;AAAA,UACrD,GAAI,MAAM,QAAA,GAAW,EAAE,UAAU,KAAA,CAAM,QAAA,KAAa;AAAC;AACvD,UAEF,EAAC;AAAA,MACL,QAAA,EAAU,EAAE,OAAA;AAAQ,KACtB;AACA,IAAA,OAAO,IAAA,CAAK,MAAA,CAAO,OAAA,EAAS,EAAE,IAAA,EAAM,MAAA,EAAQ,IAAA,EAAM,KAAA,CAAM,IAAA,EAAM,IAAA,EAAK,EAAG,IAAI,CAAA;AAAA,EAC5E;AAAA;AAAA,EAGA,MAAM,IAAA,CACJ,KAAA,EACA,IAAA,GAAoB,OAAA,EACK;AACzB,IAAA,MAAM,IAAA,GAA6B;AAAA,MACjC,IAAA,EAAM,MAAA;AAAA,MACN,MAAA,EAAQ,MAAM,MAAA,IAAU,QAAA;AAAA,MACxB,KAAK,KAAA,CAAM,GAAA;AAAA,MACX,GAAI,KAAA,CAAM,SAAA,GACN,EAAE,QAAQ,CAAC,EAAE,IAAA,EAAM,SAAA,EAAW,IAAI,KAAA,CAAM,SAAA,EAAW,CAAA,KACnD;AAAC,KACP;AACA,IAAA,OAAO,KAAK,MAAA,CAAO,EAAE,MAAM,MAAA,EAAQ,IAAA,IAAQ,IAAI,CAAA;AAAA,EACjD;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAgBA,MAAM,eAAA,CACJ,OAAA,EACA,SAAA,EACA,OAAoB,OAAA,EACJ;AAChB,IAAA,MAAM,CAAA,GAAI,MAAM,IAAA,CAAK,GAAA,CAAI,SAAS,IAAI,CAAA;AACtC,IAAA,MAAM,MAAA,GAAuB,CAAA,CAAE,MAAA,IAAU,EAAC;AAC1C,IAAA,IAAI,MAAA,CAAO,KAAK,CAAC,CAAA,KAAM,aAAa,CAAA,EAAG,SAAS,CAAC,CAAA,EAAG,OAAO,CAAA;AAC3D,IAAA,MAAM,GAAA,GAAkB,EAAE,IAAA,EAAM,SAAA,EAAW,IAAI,SAAA,EAAU;AAEzD,IAAA,MAAM,EAAA,GACJ,EAAE,MAAA,KAAW,MAAA,GACT,EAAE,EAAA,EAAI,KAAA,EAAgB,MAAM,SAAA,EAAW,KAAA,EAAO,CAAC,GAAG,CAAA,KAClD,EAAE,EAAA,EAAI,OAAgB,IAAA,EAAM,WAAA,EAAa,OAAO,GAAA,EAAI;AAC1D,IAAA,MAAM,KAAK,KAAA,CAAM,OAAA,EAAS,CAAC,EAAE,GAAG,IAAI,CAAA;AACpC,IAAA,OAAO,IAAA,CAAK,GAAA,CAAI,OAAA,EAAS,IAAI,CAAA;AAAA,EAC/B;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,MAAM,iBAAA,CACJ,OAAA,EACA,SAAA,EACA,OAAoB,OAAA,EACJ;AAChB,IAAA,MAAM,CAAA,GAAI,MAAM,IAAA,CAAK,GAAA,CAAI,SAAS,IAAI,CAAA;AACtC,IAAA,MAAM,MAAA,GAAuB,CAAA,CAAE,MAAA,IAAU,EAAC;AAC1C,IAAA,MAAM,IAAA,GAAO,OAAO,MAAA,CAAO,CAAC,MAAM,CAAC,YAAA,CAAa,CAAA,EAAG,SAAS,CAAC,CAAA;AAC7D,IAAA,IAAI,IAAA,CAAK,MAAA,KAAW,MAAA,CAAO,MAAA,EAAQ,OAAO,CAAA;AAC1C,IAAA,MAAM,IAAA,CAAK,KAAA,CAAM,OAAA,EAAS,CAAC,EAAE,EAAA,EAAI,SAAA,EAAW,IAAA,EAAM,SAAA,EAAW,KAAA,EAAO,IAAA,EAAM,GAAG,IAAI,CAAA;AACjF,IAAA,OAAO,IAAA,CAAK,GAAA,CAAI,OAAA,EAAS,IAAI,CAAA;AAAA,EAC/B;AAAA;AAAA,EAGA,MAAM,cAAA,CACJ,SAAA,EACA,IAAA,GAAoB,OAAA,EACY;AAChC,IAAA,OAAO,KAAK,IAAA,CAAK,EAAE,WAAA,EAAa,SAAA,IAAa,IAAI,CAAA;AAAA,EACnD;AACF;AAIO,IAAM,cAAA,GAAiB,EAAE,YAAA","file":"chunk-NFSO7WUA.js","sourcesContent":["import type { ClientContext, PaginatedItems } from \"../core/context\";\nimport { requestPage } from \"../core/paged\";\nimport type { AuthContext } from \"../core/auth\";\nimport { EmporixError, errorFromResponse } from \"../core/errors\";\nimport type {\n  AssetCreateBlob,\n  AssetCreateLink,\n  AssetUpdateBlob,\n  AssetUpdateLink,\n  DownloadUrl,\n  GetAsset,\n  GetMediaRetrieveDownloadUrlData,\n  MetadataUpdate,\n  PatchOperation,\n  RefId,\n  UploadSession,\n  UploadSessionRequest,\n} from \"../generated/media\";\n\n/**\n * The spec marks `metadata` optional on both update bodies; the live API rejects\n * an update without it — «`metadata.version` is required for update» (measured\n * 2026-10-06 on BLOB and LINK assets). Required here, so leaving it out is a\n * compile error rather than a 400.\n */\ntype Versioned<T> = Omit<T, \"metadata\"> & { metadata: MetadataUpdate };\n\n/** Generated media types (caller sends the exact wire shape). */\nexport type AssetCreateBlobInput = AssetCreateBlob;\nexport type AssetCreateLinkInput = AssetCreateLink;\nexport type AssetUpdateBlobInput = Versioned<AssetUpdateBlob>;\nexport type AssetUpdateLinkInput = Versioned<AssetUpdateLink>;\n/**\n * @deprecated `update()` takes {@link AssetUpdateLinkInput} as its JSON body and\n * {@link AssetUpdateBlobInput} next to a file; a BLOB is never sent as JSON.\n */\nexport type AssetUpdateInput = AssetUpdateBlob | AssetUpdateLink;\nexport type Asset = GetAsset;\nexport type AssetRefId = RefId;\n/** Partial-update body (`PATCH /assets/{id}`) — an RFC-6902 JSON-Patch op-array. */\nexport type AssetPatch = PatchOperation[];\n/** Result of {@link MediaService.getDownloadUrl} — `{ provider, url, expiresAt? }`. */\nexport type AssetDownloadUrl = DownloadUrl;\n/** Query for {@link MediaService.getDownloadUrl} — `{ disposition? }`. */\nexport type AssetDownloadUrlQuery = NonNullable<GetMediaRetrieveDownloadUrlData[\"query\"]>;\n/** Body for {@link MediaService.startUploadSession}: a BLOB create payload plus `uploadType`. */\nexport type AssetUploadSessionInput = UploadSessionRequest;\n/** The storage instruction {@link MediaService.startUploadSession} returns. */\nexport type AssetUploadSession = UploadSession;\n\n/**\n * Filter / pagination options for {@link MediaService.list}. The explicit\n * fields are typed for autocomplete; the index signature stays open so\n * Emporix `q`-syntax filters like `\"refIds.id\"` can be passed verbatim.\n */\nexport interface ListAssetsQuery {\n  pageNumber?: number;\n  pageSize?: number;\n  /** Emporix sort syntax, e.g. `\"name,metadata.createdAt:desc\"`. */\n  sort?: string;\n  /** Emporix `q`-syntax filter, e.g. `\"name:hero\"`. */\n  q?: string;\n  /**\n   * Ask for `X-Total-Count`. An SDK-side flag, not an Emporix query parameter:\n   * it becomes a request header.\n   */\n  totalCount?: boolean;\n  [key: string]: string | number | boolean | undefined;\n}\n\n/**\n * Result of {@link MediaService.download}. The endpoint's behaviour depends\n * on the asset's `access`:\n * - `PUBLIC` assets respond with a 30x redirect whose `Location` header\n *   carries the externally-cacheable storage URL — useful when the\n *   storefront wants to send the user there directly.\n * - `PRIVATE` assets respond with the raw bytes (plus an `ETag` header\n *   for caching). The file lives in Google Cloud Storage and is reachable\n *   without the service token only through a signed URL from\n *   {@link MediaService.getDownloadUrl}.\n */\nexport type DownloadResult =\n  | { kind: \"redirect\"; url: string }\n  | {\n      kind: \"bytes\";\n      data: ArrayBuffer;\n      etag?: string;\n      contentType?: string;\n    };\n\nconst SERVICE: AuthContext = { kind: \"service\" };\n\nfunction isProductRef(r: AssetRefId, productId: string): boolean {\n  return r.type === \"PRODUCT\" && r.id === productId;\n}\n\n/**\n * Media assets (BLOB/LINK). All endpoints require a backend-only scope\n * (`media.asset_manage` / `media.asset_read`) — default auth: service.\n */\nexport class MediaService {\n  static readonly channel = \"media\" as const;\n  constructor(private readonly ctx: ClientContext) {}\n\n  private base(): string {\n    return `/media/${this.ctx.tenant}/assets`;\n  }\n\n  /**\n   * Create an asset. BLOB uploads via multipart (max 30 MB); LINK via JSON.\n   * {@link startUploadSession} sends the file straight to storage instead.\n   */\n  async create(\n    input:\n      | { kind: \"blob\"; file: Blob; body: AssetCreateBlobInput }\n      | { kind: \"link\"; body: AssetCreateLinkInput },\n    auth: AuthContext = SERVICE,\n  ): Promise<{ id: string }> {\n    if (input.kind === \"blob\") {\n      const fd = new FormData();\n      fd.set(\"file\", input.file);\n      fd.set(\"body\", JSON.stringify(input.body));\n      return this.ctx.http.request<{ id: string }>({\n        method: \"POST\",\n        path: this.base(),\n        auth,\n        body: fd,\n      });\n    }\n    return this.ctx.http.request<{ id: string }>({\n      method: \"POST\",\n      path: this.base(),\n      auth,\n      body: input.body,\n    });\n  }\n\n  /**\n   * List assets, wrapped in the shared {@link PaginatedItems} envelope so\n   * callers can iterate over pages consistently with the rest of the SDK.\n   * `hasNextPage` is the standard SDK heuristic: `true` when the returned\n   * page is full (`items.length === requested pageSize`). Pagination\n   * defaults match Emporix's server defaults (`pageNumber: 1`,\n   * `pageSize: 60`) so an empty `query` produces stable expectations.\n   */\n  async list(\n    query: ListAssetsQuery = {},\n    auth: AuthContext = SERVICE,\n  ): Promise<PaginatedItems<Asset>> {\n    const pageNumber = query.pageNumber ?? 1;\n    const pageSize = query.pageSize ?? 60;\n    // Destructured out because the rest of `query` is spread into the query\n    // string: `totalCount` is an SDK-side flag that becomes a request header,\n    // and would otherwise ride along as a stray `?totalCount=true`.\n    const { totalCount, ...rest } = query;\n    return requestPage<Asset>(\n      this.ctx.http,\n      {\n        method: \"GET\",\n        path: this.base(),\n        auth,\n        query: { ...rest, pageNumber, pageSize },\n      },\n      { pageNumber, pageSize, ...(totalCount === undefined ? {} : { totalCount }) },\n    );\n  }\n\n  /** Fetch an asset by id. */\n  async get(assetId: string, auth: AuthContext = SERVICE): Promise<Asset> {\n    return this.ctx.http.request<Asset>({\n      method: \"GET\",\n      path: `${this.base()}/${assetId}`,\n      auth,\n    });\n  }\n\n  /**\n   * Replace an asset (`PUT`, HTTP 204 — nothing is returned). The spec takes one\n   * body per asset type, mirrored by the discriminated input:\n   * - `{ kind: \"json\", body }` — a LINK asset, sent as `application/json`. The\n   *   body is the whole asset: `type: \"LINK\"`, `access` and `url` are required.\n   * - `{ kind: \"blob\", file, body }` — a BLOB asset, sent as\n   *   `multipart/form-data`: the file (max 30 MB) and the asset body, both\n   *   required, so this always replaces the bytes.\n   *\n   * A BLOB's metadata alone — `refIds`, `details`, mixins — goes through\n   * {@link patch}. Earlier versions also took a BLOB as the JSON body and\n   * promised the updated asset in return; the spec allows neither.\n   *\n   * `type` and `access` are immutable. Optimistic locking is via\n   * `body.metadata.version`; a stale one gets a 409.\n   */\n  async update(\n    assetId: string,\n    input:\n      | { kind: \"json\"; body: AssetUpdateLinkInput }\n      | { kind: \"blob\"; file: Blob; body: AssetUpdateBlobInput },\n    auth: AuthContext = SERVICE,\n  ): Promise<void> {\n    const path = `${this.base()}/${encodeURIComponent(assetId)}`;\n    if (input.kind === \"blob\") {\n      const fd = new FormData();\n      fd.set(\"file\", input.file);\n      fd.set(\"body\", JSON.stringify(input.body));\n      await this.ctx.http.request<void>({ method: \"PUT\", path, auth, body: fd });\n      return;\n    }\n    await this.ctx.http.request<void>({ method: \"PUT\", path, auth, body: input.body });\n  }\n\n  /**\n   * Partially update an asset with an RFC-6902 JSON-Patch op-array\n   * (`PATCH /assets/{id}`, HTTP 204 — nothing is returned).\n   *\n   * This is the way to change one field without resending the whole asset, and\n   * the only way to touch a `BLOB` asset's metadata **without re-uploading the\n   * file** — {@link update} in `blob` mode always replaces the bytes.\n   *\n   * Append to an array with a path ending in `/-`, which preserves the existing\n   * entries:\n   *\n   * ```ts\n   * await client.media.patch(assetId, [\n   *   { op: \"add\", path: \"/refIds/-\", value: { id: \"product1\", type: \"PRODUCT\" } },\n   * ]);\n   * ```\n   *\n   * `type` and `access` are immutable here too, as with {@link update}. Only\n   * `add`, `remove` and `replace` are accepted, and optimistic locking still\n   * applies — a stale `metadata.version` gets a 409.\n   */\n  async patch(assetId: string, ops: AssetPatch, auth: AuthContext = SERVICE): Promise<void> {\n    await this.ctx.http.request<void>({\n      method: \"PATCH\",\n      path: `${this.base()}/${encodeURIComponent(assetId)}`,\n      auth,\n      body: ops,\n    });\n  }\n\n  /** Remove an asset. */\n  async remove(assetId: string, auth: AuthContext = SERVICE): Promise<void> {\n    await this.ctx.http.request<void>({\n      method: \"DELETE\",\n      path: `${this.base()}/${assetId}`,\n      auth,\n    });\n  }\n\n  /**\n   * Download an asset by id. Returns a discriminated union:\n   * - `{ kind: \"redirect\", url }` for `PUBLIC` assets (server-side 30x with\n   *   the storage URL in `Location`).\n   * - `{ kind: \"bytes\", data }` for `PRIVATE` assets (server-side 200 with\n   *   the asset bytes; `etag` + `contentType` headers are exposed for\n   *   caching). When the server reports `text/plain` Content-Type (the\n   *   OpenAPI-documented format), the SDK decodes the base64 stream into\n   *   an `ArrayBuffer` transparently; binary Content-Types are passed\n   *   through verbatim.\n   *\n   * Emporix recommends {@link getDownloadUrl} for every download: here the file\n   * passes through the Media API. A `413` means the asset's known size exceeds\n   * the streaming limit (30 MB by default) — only {@link getDownloadUrl} can\n   * serve it. A `409` means the asset is still `PENDING` from a direct upload\n   * whose file has not reached storage.\n   *\n   * Implementation note: uses `redirect: \"manual\"` so the redirect-location\n   * is observable. In Node.js this works; in a browser the redirect Location\n   * is intentionally hidden by fetch — there, `PUBLIC` downloads will\n   * surface as an opaque-redirect and the SDK throws. Browser code should\n   * use the asset's `url` field from `get()` for `LINK` assets, or the\n   * direct storage URL for `PUBLIC` `BLOB` assets (typically delivered via\n   * an `<img>` tag rather than `download()`).\n   */\n  async download(\n    assetId: string,\n    auth: AuthContext = SERVICE,\n  ): Promise<DownloadResult> {\n    const path = `${this.base()}/${assetId}/download`;\n    const res = await this.ctx.http.requestRaw(\n      { method: \"GET\", path, auth },\n      { redirect: \"manual\" },\n    );\n\n    // PUBLIC: server-side redirect — capture Location.\n    if (res.status >= 300 && res.status < 400) {\n      const url = res.headers.get(\"location\");\n      if (!url) {\n        throw new EmporixError(\n          `media.download: ${res.status} response without a Location header`,\n          res.status,\n        );\n      }\n      return { kind: \"redirect\", url };\n    }\n\n    // PRIVATE: bytes.\n    if (res.ok) {\n      const etag = res.headers.get(\"etag\") ?? undefined;\n      const contentType = res.headers.get(\"content-type\") ?? undefined;\n      let data: ArrayBuffer;\n      if (contentType?.startsWith(\"text/plain\")) {\n        // Per OpenAPI spec the server returns the byte stream as a\n        // base64-encoded text/plain body. Decode once into raw bytes\n        // so callers always see an ArrayBuffer.\n        const text = await res.text();\n        const bin = atob(text);\n        const arr = new Uint8Array(bin.length);\n        for (let i = 0; i < bin.length; i++) arr[i] = bin.charCodeAt(i);\n        data = arr.buffer;\n      } else {\n        data = await res.arrayBuffer();\n      }\n      return {\n        kind: \"bytes\",\n        data,\n        ...(etag !== undefined ? { etag } : {}),\n        ...(contentType !== undefined ? { contentType } : {}),\n      };\n    }\n\n    // Error: surface via the standard EmporixError hierarchy.\n    const text = await res.text();\n    let parsed: unknown = undefined;\n    if (text) {\n      try {\n        parsed = JSON.parse(text);\n      } catch {\n        parsed = text;\n      }\n    }\n    throw errorFromResponse(res.status, `GET ${path} → ${res.status}`, parsed);\n  }\n\n  /**\n   * Get a URL that serves the stored file straight from storage\n   * (`GET /assets/{assetId}/download-url`). Emporix recommends it for every\n   * download: the file never passes through the Media API, there is no size\n   * limit, and the URL can be handed to a browser as it is.\n   *\n   * - `PRIVATE` BLOB → `provider: \"GCS\"`, a signed Google Cloud Storage URL that\n   *   works without an Emporix token until `expiresAt` (15 minutes by default).\n   * - `PUBLIC` BLOB → `provider: \"CLOUDINARY\"`, the permanent URL.\n   * - `LINK` → `provider: \"LINK\"`, the stored URL.\n   *\n   * `disposition` (`attachment` by default, or `inline`) affects private URLs\n   * only. Unlike {@link startUploadSession}, this works whether or not direct\n   * upload is enabled for the tenant. A `409` means a direct upload is still\n   * `PENDING` and its file has not reached storage; once it has, this call\n   * completes the asset before answering.\n   */\n  async getDownloadUrl(\n    assetId: string,\n    query: AssetDownloadUrlQuery = {},\n    auth: AuthContext = SERVICE,\n  ): Promise<AssetDownloadUrl> {\n    return this.ctx.http.request<AssetDownloadUrl>({\n      method: \"GET\",\n      path: `${this.base()}/${encodeURIComponent(assetId)}/download-url`,\n      auth,\n      query: { ...query },\n    });\n  }\n\n  /**\n   * Start a direct upload of a `BLOB` asset (`POST /assets/upload-session`,\n   * `201`). Emporix creates the asset as `PENDING` — `id` is its id — and\n   * returns where to send the file. **This method does not send it**:\n   *\n   * - `upload.method === \"PUT\"` (a `PRIVATE` asset, `uploadType: \"put\"` or\n   *   omitted): `PUT` the file to `upload.url` with every `upload.headers` entry.\n   * - `upload.method === \"POST\"` (every `PUBLIC` asset, or `uploadType: \"form\"`):\n   *   a multipart `POST` to `upload.url` with every `upload.fields` entry\n   *   unchanged and the file part last.\n   *\n   * That request goes to Google Cloud Storage or Cloudinary, not to Emporix, so\n   * it must not carry the Emporix token — which is also why a browser can make\n   * it. The asset turns `READY` once storage confirms; until then, calls that\n   * need the file answer `409`. The instruction is valid for 15 minutes (GCS) or\n   * an hour (Cloudinary), and an unused session expires at `expiresAt`.\n   *\n   * Direct upload is enabled per tenant by Emporix Support. Without it the call\n   * throws an `EmporixForbiddenError` whose `body.message` is `direct upload is\n   * not enabled for this tenant`, and nothing is created — the same status as a\n   * missing scope, so read the message.\n   */\n  async startUploadSession(\n    input: AssetUploadSessionInput,\n    auth: AuthContext = SERVICE,\n  ): Promise<AssetUploadSession> {\n    return this.ctx.http.request<AssetUploadSession>({\n      method: \"POST\",\n      path: `${this.base()}/upload-session`,\n      auth,\n      body: input,\n    });\n  }\n\n  /** Multipart upload sugar: builds `AssetCreateBlob` from input. */\n  async uploadFile(\n    input: {\n      file: Blob;\n      productId?: string;\n      filename?: string;\n      mimeType?: string;\n      access?: \"PUBLIC\" | \"PRIVATE\";\n    },\n    auth: AuthContext = SERVICE,\n  ): Promise<{ id: string }> {\n    const body: AssetCreateBlobInput = {\n      type: \"BLOB\",\n      access: input.access ?? \"PUBLIC\",\n      ...(input.productId\n        ? { refIds: [{ type: \"PRODUCT\", id: input.productId }] }\n        : {}),\n      ...(input.filename || input.mimeType\n        ? {\n            details: {\n              ...(input.filename ? { filename: input.filename } : {}),\n              ...(input.mimeType ? { mimeType: input.mimeType } : {}),\n            },\n          }\n        : {}),\n    };\n    return this.create({ kind: \"blob\", file: input.file, body }, auth);\n  }\n\n  /**\n   * Replace the file content of an existing BLOB asset. Sugar over\n   * {@link update} with `kind: \"blob\"`, and like it resolves to nothing — the\n   * PUT answers 204. `access` is required because the field is immutable and\n   * the server validates that the body matches.\n   *\n   * Pass `version` from `asset.metadata.version` for optimistic locking\n   * (recommended when concurrent writers are possible) — a stale one gets a 409.\n   * Without it the current version is read first, because the live API rejects\n   * an update that carries none; the write then wins over any in between.\n   */\n  async replaceFile(\n    assetId: string,\n    input: {\n      file: Blob;\n      access: \"PUBLIC\" | \"PRIVATE\";\n      filename?: string;\n      mimeType?: string;\n      version?: number;\n    },\n    auth: AuthContext = SERVICE,\n  ): Promise<void> {\n    const version =\n      input.version ?? (await this.get(assetId, auth)).metadata?.version ?? 1;\n    const body: AssetUpdateBlobInput = {\n      type: \"BLOB\",\n      access: input.access,\n      ...(input.filename || input.mimeType\n        ? {\n            details: {\n              ...(input.filename ? { filename: input.filename } : {}),\n              ...(input.mimeType ? { mimeType: input.mimeType } : {}),\n            },\n          }\n        : {}),\n      metadata: { version },\n    };\n    return this.update(assetId, { kind: \"blob\", file: input.file, body }, auth);\n  }\n\n  /** External-URL sugar: builds `AssetCreateLink`. */\n  async link(\n    input: { url: string; productId?: string; access?: \"PUBLIC\" | \"PRIVATE\" },\n    auth: AuthContext = SERVICE,\n  ): Promise<{ id: string }> {\n    const body: AssetCreateLinkInput = {\n      type: \"LINK\",\n      access: input.access ?? \"PUBLIC\",\n      url: input.url,\n      ...(input.productId\n        ? { refIds: [{ type: \"PRODUCT\", id: input.productId }] }\n        : {}),\n    };\n    return this.create({ kind: \"link\", body }, auth);\n  }\n\n  /**\n   * Idempotently add a PRODUCT refId to an asset, through a JSON Patch that\n   * appends the one reference, so it works for BLOB and LINK alike and leaves\n   * the rest of the asset alone.\n   *\n   * Resolves to the asset as read back after the patch, because Emporix answers\n   * 204 to a reference to a product that does not exist and drops it — check\n   * `refIds` rather than trusting the call. Only a PUBLIC asset takes a product\n   * reference; a PRIVATE one answers 400.\n   *\n   * Earlier versions sent a JSON PUT of `{ type, refIds }`, which the spec\n   * rejects for both types: a BLOB takes no JSON PUT, and a LINK's requires\n   * `access` and `url`.\n   */\n  async attachToProduct(\n    assetId: string,\n    productId: string,\n    auth: AuthContext = SERVICE,\n  ): Promise<Asset> {\n    const a = await this.get(assetId, auth);\n    const refIds: AssetRefId[] = a.refIds ?? [];\n    if (refIds.some((r) => isProductRef(r, productId))) return a;\n    const ref: AssetRefId = { type: \"PRODUCT\", id: productId };\n    // `/refIds/-` appends to an existing array only (RFC 6902).\n    const op =\n      a.refIds === undefined\n        ? { op: \"add\" as const, path: \"/refIds\", value: [ref] }\n        : { op: \"add\" as const, path: \"/refIds/-\", value: ref };\n    await this.patch(assetId, [op], auth);\n    return this.get(assetId, auth);\n  }\n\n  /**\n   * Remove a PRODUCT refId from an asset (no-op if absent), through a JSON Patch\n   * that replaces the references and nothing else. Resolves to the asset as\n   * read back after the patch, like {@link attachToProduct}. Earlier versions\n   * sent a spec-invalid JSON PUT, as that one did.\n   */\n  async detachFromProduct(\n    assetId: string,\n    productId: string,\n    auth: AuthContext = SERVICE,\n  ): Promise<Asset> {\n    const a = await this.get(assetId, auth);\n    const refIds: AssetRefId[] = a.refIds ?? [];\n    const next = refIds.filter((r) => !isProductRef(r, productId));\n    if (next.length === refIds.length) return a;\n    await this.patch(assetId, [{ op: \"replace\", path: \"/refIds\", value: next }], auth);\n    return this.get(assetId, auth);\n  }\n\n  /** Convenience: list assets attached to a product (server-side filter). */\n  async listForProduct(\n    productId: string,\n    auth: AuthContext = SERVICE,\n  ): Promise<PaginatedItems<Asset>> {\n    return this.list({ \"refIds.id\": productId }, auth);\n  }\n}\n\n// Re-export so consumers can `import { isProductRef } from \"@viu/emporix-sdk/media\"`?\n// Internal helper — kept module-private; convenience methods in Task 4 use it.\nexport const _internalMedia = { isProductRef };\n"]}
+{"version":3,"sources":["../src/services/media.ts"],"names":["text"],"mappings":";;;;AA0FA,IAAM,OAAA,GAAuB,EAAE,IAAA,EAAM,SAAA,EAAU;AAE/C,SAAS,YAAA,CAAa,GAAe,SAAA,EAA4B;AAC/D,EAAA,OAAO,CAAA,CAAE,IAAA,KAAS,SAAA,IAAa,CAAA,CAAE,EAAA,KAAO,SAAA;AAC1C;AAMO,IAAM,eAAN,MAAmB;AAAA,EAExB,YAA6B,GAAA,EAAoB;AAApB,IAAA,IAAA,CAAA,GAAA,GAAA,GAAA;AAAA,EAAqB;AAAA,EAArB,GAAA;AAAA,EAD7B,OAAgB,OAAA,GAAU,OAAA;AAAA,EAGlB,IAAA,GAAe;AACrB,IAAA,OAAO,CAAA,OAAA,EAAU,IAAA,CAAK,GAAA,CAAI,MAAM,CAAA,OAAA,CAAA;AAAA,EAClC;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,MAAM,MAAA,CACJ,KAAA,EAGA,IAAA,GAAoB,OAAA,EACK;AACzB,IAAA,IAAI,KAAA,CAAM,SAAS,MAAA,EAAQ;AACzB,MAAA,MAAM,EAAA,GAAK,IAAI,QAAA,EAAS;AACxB,MAAA,EAAA,CAAG,GAAA,CAAI,MAAA,EAAQ,KAAA,CAAM,IAAI,CAAA;AACzB,MAAA,EAAA,CAAG,IAAI,MAAA,EAAQ,IAAA,CAAK,SAAA,CAAU,KAAA,CAAM,IAAI,CAAC,CAAA;AACzC,MAAA,OAAO,IAAA,CAAK,GAAA,CAAI,IAAA,CAAK,OAAA,CAAwB;AAAA,QAC3C,MAAA,EAAQ,MAAA;AAAA,QACR,IAAA,EAAM,KAAK,IAAA,EAAK;AAAA,QAChB,IAAA;AAAA,QACA,IAAA,EAAM;AAAA,OACP,CAAA;AAAA,IACH;AACA,IAAA,OAAO,IAAA,CAAK,GAAA,CAAI,IAAA,CAAK,OAAA,CAAwB;AAAA,MAC3C,MAAA,EAAQ,MAAA;AAAA,MACR,IAAA,EAAM,KAAK,IAAA,EAAK;AAAA,MAChB,IAAA;AAAA,MACA,MAAM,KAAA,CAAM;AAAA,KACb,CAAA;AAAA,EACH;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAUA,MAAM,IAAA,CACJ,KAAA,GAAyB,EAAC,EAC1B,OAAoB,OAAA,EACY;AAChC,IAAA,MAAM,UAAA,GAAa,MAAM,UAAA,IAAc,CAAA;AACvC,IAAA,MAAM,QAAA,GAAW,MAAM,QAAA,IAAY,EAAA;AAInC,IAAA,MAAM,EAAE,UAAA,EAAY,GAAG,IAAA,EAAK,GAAI,KAAA;AAChC,IAAA,OAAO,WAAA;AAAA,MACL,KAAK,GAAA,CAAI,IAAA;AAAA,MACT;AAAA,QACE,MAAA,EAAQ,KAAA;AAAA,QACR,IAAA,EAAM,KAAK,IAAA,EAAK;AAAA,QAChB,IAAA;AAAA,QACA,KAAA,EAAO,EAAE,GAAG,IAAA,EAAM,YAAY,QAAA;AAAS,OACzC;AAAA,MACA,EAAE,UAAA,EAAY,QAAA,EAAU,GAAI,UAAA,KAAe,SAAY,EAAC,GAAI,EAAE,UAAA,EAAW;AAAG,KAC9E;AAAA,EACF;AAAA;AAAA,EAGA,MAAM,GAAA,CAAI,OAAA,EAAiB,IAAA,GAAoB,OAAA,EAAyB;AACtE,IAAA,OAAO,IAAA,CAAK,GAAA,CAAI,IAAA,CAAK,OAAA,CAAe;AAAA,MAClC,MAAA,EAAQ,KAAA;AAAA,MACR,MAAM,CAAA,EAAG,IAAA,CAAK,IAAA,EAAM,IAAI,OAAO,CAAA,CAAA;AAAA,MAC/B;AAAA,KACD,CAAA;AAAA,EACH;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAkBA,MAAM,MAAA,CACJ,OAAA,EACA,KAAA,EAGA,OAAoB,OAAA,EACL;AACf,IAAA,MAAM,IAAA,GAAO,GAAG,IAAA,CAAK,IAAA,EAAM,CAAA,CAAA,EAAI,kBAAA,CAAmB,OAAO,CAAC,CAAA,CAAA;AAC1D,IAAA,IAAI,KAAA,CAAM,SAAS,MAAA,EAAQ;AACzB,MAAA,MAAM,EAAA,GAAK,IAAI,QAAA,EAAS;AACxB,MAAA,EAAA,CAAG,GAAA,CAAI,MAAA,EAAQ,KAAA,CAAM,IAAI,CAAA;AACzB,MAAA,EAAA,CAAG,IAAI,MAAA,EAAQ,IAAA,CAAK,SAAA,CAAU,KAAA,CAAM,IAAI,CAAC,CAAA;AACzC,MAAA,MAAM,IAAA,CAAK,GAAA,CAAI,IAAA,CAAK,OAAA,CAAc,EAAE,MAAA,EAAQ,KAAA,EAAO,IAAA,EAAM,IAAA,EAAM,IAAA,EAAM,EAAA,EAAI,CAAA;AACzE,MAAA;AAAA,IACF;AACA,IAAA,MAAM,IAAA,CAAK,GAAA,CAAI,IAAA,CAAK,OAAA,CAAc,EAAE,MAAA,EAAQ,KAAA,EAAO,IAAA,EAAM,IAAA,EAAM,IAAA,EAAM,KAAA,CAAM,IAAA,EAAM,CAAA;AAAA,EACnF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAuBA,MAAM,KAAA,CAAM,OAAA,EAAiB,GAAA,EAAiB,OAAoB,OAAA,EAAwB;AACxF,IAAA,MAAM,IAAA,CAAK,GAAA,CAAI,IAAA,CAAK,OAAA,CAAc;AAAA,MAChC,MAAA,EAAQ,OAAA;AAAA,MACR,IAAA,EAAM,GAAG,IAAA,CAAK,IAAA,EAAM,CAAA,CAAA,EAAI,kBAAA,CAAmB,OAAO,CAAC,CAAA,CAAA;AAAA,MACnD,IAAA;AAAA,MACA,IAAA,EAAM;AAAA,KACP,CAAA;AAAA,EACH;AAAA;AAAA,EAGA,MAAM,MAAA,CAAO,OAAA,EAAiB,IAAA,GAAoB,OAAA,EAAwB;AACxE,IAAA,MAAM,IAAA,CAAK,GAAA,CAAI,IAAA,CAAK,OAAA,CAAc;AAAA,MAChC,MAAA,EAAQ,QAAA;AAAA,MACR,MAAM,CAAA,EAAG,IAAA,CAAK,IAAA,EAAM,IAAI,OAAO,CAAA,CAAA;AAAA,MAC/B;AAAA,KACD,CAAA;AAAA,EACH;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EA2BA,MAAM,QAAA,CACJ,OAAA,EACA,IAAA,GAAoB,OAAA,EACK;AACzB,IAAA,MAAM,OAAO,CAAA,EAAG,IAAA,CAAK,IAAA,EAAM,IAAI,OAAO,CAAA,SAAA,CAAA;AACtC,IAAA,MAAM,GAAA,GAAM,MAAM,IAAA,CAAK,GAAA,CAAI,IAAA,CAAK,UAAA;AAAA,MAC9B,EAAE,MAAA,EAAQ,KAAA,EAAO,IAAA,EAAM,IAAA,EAAK;AAAA,MAC5B,EAAE,UAAU,QAAA;AAAS,KACvB;AAGA,IAAA,IAAI,GAAA,CAAI,MAAA,IAAU,GAAA,IAAO,GAAA,CAAI,SAAS,GAAA,EAAK;AACzC,MAAA,MAAM,GAAA,GAAM,GAAA,CAAI,OAAA,CAAQ,GAAA,CAAI,UAAU,CAAA;AACtC,MAAA,IAAI,CAAC,GAAA,EAAK;AACR,QAAA,MAAM,IAAI,YAAA;AAAA,UACR,CAAA,gBAAA,EAAmB,IAAI,MAAM,CAAA,mCAAA,CAAA;AAAA,UAC7B,GAAA,CAAI;AAAA,SACN;AAAA,MACF;AACA,MAAA,OAAO,EAAE,IAAA,EAAM,UAAA,EAAY,GAAA,EAAI;AAAA,IACjC;AAGA,IAAA,IAAI,IAAI,EAAA,EAAI;AACV,MAAA,MAAM,IAAA,GAAO,GAAA,CAAI,OAAA,CAAQ,GAAA,CAAI,MAAM,CAAA,IAAK,MAAA;AACxC,MAAA,MAAM,WAAA,GAAc,GAAA,CAAI,OAAA,CAAQ,GAAA,CAAI,cAAc,CAAA,IAAK,MAAA;AACvD,MAAA,IAAI,IAAA;AACJ,MAAA,IAAI,WAAA,EAAa,UAAA,CAAW,YAAY,CAAA,EAAG;AAIzC,QAAA,MAAMA,KAAAA,GAAO,MAAM,GAAA,CAAI,IAAA,EAAK;AAC5B,QAAA,MAAM,GAAA,GAAM,KAAKA,KAAI,CAAA;AACrB,QAAA,MAAM,GAAA,GAAM,IAAI,UAAA,CAAW,GAAA,CAAI,MAAM,CAAA;AACrC,QAAA,KAAA,IAAS,CAAA,GAAI,CAAA,EAAG,CAAA,GAAI,GAAA,CAAI,MAAA,EAAQ,CAAA,EAAA,EAAK,GAAA,CAAI,CAAC,CAAA,GAAI,GAAA,CAAI,UAAA,CAAW,CAAC,CAAA;AAC9D,QAAA,IAAA,GAAO,GAAA,CAAI,MAAA;AAAA,MACb,CAAA,MAAO;AACL,QAAA,IAAA,GAAO,MAAM,IAAI,WAAA,EAAY;AAAA,MAC/B;AACA,MAAA,OAAO;AAAA,QACL,IAAA,EAAM,OAAA;AAAA,QACN,IAAA;AAAA,QACA,GAAI,IAAA,KAAS,MAAA,GAAY,EAAE,IAAA,KAAS,EAAC;AAAA,QACrC,GAAI,WAAA,KAAgB,MAAA,GAAY,EAAE,WAAA,KAAgB;AAAC,OACrD;AAAA,IACF;AAGA,IAAA,MAAM,IAAA,GAAO,MAAM,GAAA,CAAI,IAAA,EAAK;AAC5B,IAAA,IAAI,MAAA,GAAkB,MAAA;AACtB,IAAA,IAAI,IAAA,EAAM;AACR,MAAA,IAAI;AACF,QAAA,MAAA,GAAS,IAAA,CAAK,MAAM,IAAI,CAAA;AAAA,MAC1B,CAAA,CAAA,MAAQ;AACN,QAAA,MAAA,GAAS,IAAA;AAAA,MACX;AAAA,IACF;AACA,IAAA,MAAM,iBAAA,CAAkB,IAAI,MAAA,EAAQ,CAAA,IAAA,EAAO,IAAI,CAAA,QAAA,EAAM,GAAA,CAAI,MAAM,CAAA,CAAA,EAAI,MAAM,CAAA;AAAA,EAC3E;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAmBA,MAAM,cAAA,CACJ,OAAA,EACA,QAA+B,EAAC,EAChC,OAAoB,OAAA,EACO;AAC3B,IAAA,OAAO,IAAA,CAAK,GAAA,CAAI,IAAA,CAAK,OAAA,CAA0B;AAAA,MAC7C,MAAA,EAAQ,KAAA;AAAA,MACR,IAAA,EAAM,GAAG,IAAA,CAAK,IAAA,EAAM,CAAA,CAAA,EAAI,kBAAA,CAAmB,OAAO,CAAC,CAAA,aAAA,CAAA;AAAA,MACnD,IAAA;AAAA,MACA,KAAA,EAAO,EAAE,GAAG,KAAA;AAAM,KACnB,CAAA;AAAA,EACH;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAwBA,MAAM,kBAAA,CACJ,KAAA,EACA,IAAA,GAAoB,OAAA,EACS;AAC7B,IAAA,OAAO,IAAA,CAAK,GAAA,CAAI,IAAA,CAAK,OAAA,CAA4B;AAAA,MAC/C,MAAA,EAAQ,MAAA;AAAA,MACR,IAAA,EAAM,CAAA,EAAG,IAAA,CAAK,IAAA,EAAM,CAAA,eAAA,CAAA;AAAA,MACpB,IAAA;AAAA,MACA,IAAA,EAAM;AAAA,KACP,CAAA;AAAA,EACH;AAAA;AAAA,EAGA,MAAM,UAAA,CACJ,KAAA,EAOA,IAAA,GAAoB,OAAA,EACK;AACzB,IAAA,MAAM,IAAA,GAA6B;AAAA,MACjC,IAAA,EAAM,MAAA;AAAA,MACN,MAAA,EAAQ,MAAM,MAAA,IAAU,QAAA;AAAA,MACxB,GAAI,KAAA,CAAM,SAAA,GACN,EAAE,QAAQ,CAAC,EAAE,IAAA,EAAM,SAAA,EAAW,IAAI,KAAA,CAAM,SAAA,EAAW,CAAA,KACnD,EAAC;AAAA,MACL,GAAI,KAAA,CAAM,QAAA,IAAY,KAAA,CAAM,QAAA,GACxB;AAAA,QACE,OAAA,EAAS;AAAA,UACP,GAAI,MAAM,QAAA,GAAW,EAAE,UAAU,KAAA,CAAM,QAAA,KAAa,EAAC;AAAA,UACrD,GAAI,MAAM,QAAA,GAAW,EAAE,UAAU,KAAA,CAAM,QAAA,KAAa;AAAC;AACvD,UAEF;AAAC,KACP;AACA,IAAA,OAAO,IAAA,CAAK,MAAA,CAAO,EAAE,IAAA,EAAM,MAAA,EAAQ,MAAM,KAAA,CAAM,IAAA,EAAM,IAAA,EAAK,EAAG,IAAI,CAAA;AAAA,EACnE;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAaA,MAAM,WAAA,CACJ,OAAA,EACA,KAAA,EAOA,OAAoB,OAAA,EACL;AACf,IAAA,MAAM,OAAA,GACJ,KAAA,CAAM,OAAA,IAAA,CAAY,MAAM,IAAA,CAAK,IAAI,OAAA,EAAS,IAAI,CAAA,EAAG,QAAA,EAAU,OAAA,IAAW,CAAA;AACxE,IAAA,MAAM,IAAA,GAA6B;AAAA,MACjC,IAAA,EAAM,MAAA;AAAA,MACN,QAAQ,KAAA,CAAM,MAAA;AAAA,MACd,GAAI,KAAA,CAAM,QAAA,IAAY,KAAA,CAAM,QAAA,GACxB;AAAA,QACE,OAAA,EAAS;AAAA,UACP,GAAI,MAAM,QAAA,GAAW,EAAE,UAAU,KAAA,CAAM,QAAA,KAAa,EAAC;AAAA,UACrD,GAAI,MAAM,QAAA,GAAW,EAAE,UAAU,KAAA,CAAM,QAAA,KAAa;AAAC;AACvD,UAEF,EAAC;AAAA,MACL,QAAA,EAAU,EAAE,OAAA;AAAQ,KACtB;AACA,IAAA,OAAO,IAAA,CAAK,MAAA,CAAO,OAAA,EAAS,EAAE,IAAA,EAAM,MAAA,EAAQ,IAAA,EAAM,KAAA,CAAM,IAAA,EAAM,IAAA,EAAK,EAAG,IAAI,CAAA;AAAA,EAC5E;AAAA;AAAA,EAGA,MAAM,IAAA,CACJ,KAAA,EACA,IAAA,GAAoB,OAAA,EACK;AACzB,IAAA,MAAM,IAAA,GAA6B;AAAA,MACjC,IAAA,EAAM,MAAA;AAAA,MACN,MAAA,EAAQ,MAAM,MAAA,IAAU,QAAA;AAAA,MACxB,KAAK,KAAA,CAAM,GAAA;AAAA,MACX,GAAI,KAAA,CAAM,SAAA,GACN,EAAE,QAAQ,CAAC,EAAE,IAAA,EAAM,SAAA,EAAW,IAAI,KAAA,CAAM,SAAA,EAAW,CAAA,KACnD;AAAC,KACP;AACA,IAAA,OAAO,KAAK,MAAA,CAAO,EAAE,MAAM,MAAA,EAAQ,IAAA,IAAQ,IAAI,CAAA;AAAA,EACjD;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAgBA,MAAM,eAAA,CACJ,OAAA,EACA,SAAA,EACA,OAAoB,OAAA,EACJ;AAChB,IAAA,MAAM,CAAA,GAAI,MAAM,IAAA,CAAK,GAAA,CAAI,SAAS,IAAI,CAAA;AACtC,IAAA,MAAM,MAAA,GAAuB,CAAA,CAAE,MAAA,IAAU,EAAC;AAC1C,IAAA,IAAI,MAAA,CAAO,KAAK,CAAC,CAAA,KAAM,aAAa,CAAA,EAAG,SAAS,CAAC,CAAA,EAAG,OAAO,CAAA;AAC3D,IAAA,MAAM,GAAA,GAAkB,EAAE,IAAA,EAAM,SAAA,EAAW,IAAI,SAAA,EAAU;AAEzD,IAAA,MAAM,EAAA,GACJ,EAAE,MAAA,KAAW,MAAA,GACT,EAAE,EAAA,EAAI,KAAA,EAAgB,MAAM,SAAA,EAAW,KAAA,EAAO,CAAC,GAAG,CAAA,KAClD,EAAE,EAAA,EAAI,OAAgB,IAAA,EAAM,WAAA,EAAa,OAAO,GAAA,EAAI;AAC1D,IAAA,MAAM,KAAK,KAAA,CAAM,OAAA,EAAS,CAAC,EAAE,GAAG,IAAI,CAAA;AACpC,IAAA,OAAO,IAAA,CAAK,GAAA,CAAI,OAAA,EAAS,IAAI,CAAA;AAAA,EAC/B;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,MAAM,iBAAA,CACJ,OAAA,EACA,SAAA,EACA,OAAoB,OAAA,EACJ;AAChB,IAAA,MAAM,CAAA,GAAI,MAAM,IAAA,CAAK,GAAA,CAAI,SAAS,IAAI,CAAA;AACtC,IAAA,MAAM,MAAA,GAAuB,CAAA,CAAE,MAAA,IAAU,EAAC;AAC1C,IAAA,MAAM,IAAA,GAAO,OAAO,MAAA,CAAO,CAAC,MAAM,CAAC,YAAA,CAAa,CAAA,EAAG,SAAS,CAAC,CAAA;AAC7D,IAAA,IAAI,IAAA,CAAK,MAAA,KAAW,MAAA,CAAO,MAAA,EAAQ,OAAO,CAAA;AAC1C,IAAA,MAAM,IAAA,CAAK,KAAA,CAAM,OAAA,EAAS,CAAC,EAAE,EAAA,EAAI,SAAA,EAAW,IAAA,EAAM,SAAA,EAAW,KAAA,EAAO,IAAA,EAAM,GAAG,IAAI,CAAA;AACjF,IAAA,OAAO,IAAA,CAAK,GAAA,CAAI,OAAA,EAAS,IAAI,CAAA;AAAA,EAC/B;AAAA;AAAA,EAGA,MAAM,cAAA,CACJ,SAAA,EACA,IAAA,GAAoB,OAAA,EACY;AAChC,IAAA,OAAO,KAAK,IAAA,CAAK,EAAE,WAAA,EAAa,SAAA,IAAa,IAAI,CAAA;AAAA,EACnD;AACF;AAIO,IAAM,cAAA,GAAiB,EAAE,YAAA","file":"chunk-SIGXBN4F.js","sourcesContent":["import type { ClientContext, PaginatedItems } from \"../core/context\";\nimport { requestPage } from \"../core/paged\";\nimport type { AuthContext } from \"../core/auth\";\nimport { EmporixError, errorFromResponse } from \"../core/errors\";\nimport type {\n  AssetCreateBlob,\n  AssetCreateLink,\n  AssetUpdateBlob,\n  AssetUpdateLink,\n  DownloadUrl,\n  GetAsset,\n  GetMediaRetrieveDownloadUrlData,\n  MetadataUpdate,\n  PatchOperation,\n  RefId,\n  UploadSession,\n  UploadSessionRequest,\n} from \"../generated/media\";\n\n/**\n * The spec marks `metadata` optional on both update bodies; the live API rejects\n * an update without it — «`metadata.version` is required for update» (measured\n * 2026-10-06 on BLOB and LINK assets). Required here, so leaving it out is a\n * compile error rather than a 400.\n */\ntype Versioned<T> = Omit<T, \"metadata\"> & { metadata: MetadataUpdate };\n\n/** Generated media types (caller sends the exact wire shape). */\nexport type AssetCreateBlobInput = AssetCreateBlob;\nexport type AssetCreateLinkInput = AssetCreateLink;\nexport type AssetUpdateBlobInput = Versioned<AssetUpdateBlob>;\nexport type AssetUpdateLinkInput = Versioned<AssetUpdateLink>;\n/**\n * @deprecated `update()` takes {@link AssetUpdateLinkInput} as its JSON body and\n * {@link AssetUpdateBlobInput} next to a file; a BLOB is never sent as JSON.\n */\nexport type AssetUpdateInput = AssetUpdateBlob | AssetUpdateLink;\nexport type Asset = GetAsset;\nexport type AssetRefId = RefId;\n/** Partial-update body (`PATCH /assets/{id}`) — an RFC-6902 JSON-Patch op-array. */\nexport type AssetPatch = PatchOperation[];\n/** Result of {@link MediaService.getDownloadUrl} — `{ provider, url, expiresAt? }`. */\nexport type AssetDownloadUrl = DownloadUrl;\n/** Query for {@link MediaService.getDownloadUrl} — `{ disposition? }`. */\nexport type AssetDownloadUrlQuery = NonNullable<GetMediaRetrieveDownloadUrlData[\"query\"]>;\n/** Body for {@link MediaService.startUploadSession}: a BLOB create payload plus `uploadType`. */\nexport type AssetUploadSessionInput = UploadSessionRequest;\n/** The storage instruction {@link MediaService.startUploadSession} returns. */\nexport type AssetUploadSession = UploadSession;\n\n/**\n * Filter / pagination options for {@link MediaService.list}. The explicit\n * fields are typed for autocomplete; the index signature stays open so\n * Emporix `q`-syntax filters like `\"refIds.id\"` can be passed verbatim.\n */\nexport interface ListAssetsQuery {\n  pageNumber?: number;\n  pageSize?: number;\n  /** Emporix sort syntax, e.g. `\"name,metadata.createdAt:desc\"`. */\n  sort?: string;\n  /** Emporix `q`-syntax filter, e.g. `\"name:hero\"`. */\n  q?: string;\n  /**\n   * Ask for `X-Total-Count`. An SDK-side flag, not an Emporix query parameter:\n   * it becomes a request header.\n   */\n  totalCount?: boolean;\n  [key: string]: string | number | boolean | undefined;\n}\n\n/**\n * Result of {@link MediaService.download}. The endpoint's behaviour depends\n * on the asset's `access`:\n * - `PUBLIC` assets respond with a 30x redirect whose `Location` header\n *   carries the externally-cacheable storage URL — useful when the\n *   storefront wants to send the user there directly.\n * - `PRIVATE` assets respond with the raw bytes (plus an `ETag` header\n *   for caching). The file lives in Google Cloud Storage and is reachable\n *   without the service token only through a signed URL from\n *   {@link MediaService.getDownloadUrl}.\n */\nexport type DownloadResult =\n  | { kind: \"redirect\"; url: string }\n  | {\n      kind: \"bytes\";\n      data: ArrayBuffer;\n      etag?: string;\n      contentType?: string;\n    };\n\nconst SERVICE: AuthContext = { kind: \"service\" };\n\nfunction isProductRef(r: AssetRefId, productId: string): boolean {\n  return r.type === \"PRODUCT\" && r.id === productId;\n}\n\n/**\n * Media assets (BLOB/LINK). All endpoints require a backend-only scope\n * (`media.asset_manage` / `media.asset_read`) — default auth: service.\n */\nexport class MediaService {\n  static readonly channel = \"media\" as const;\n  constructor(private readonly ctx: ClientContext) {}\n\n  private base(): string {\n    return `/media/${this.ctx.tenant}/assets`;\n  }\n\n  /**\n   * Create an asset. BLOB uploads via multipart (max 30 MB); LINK via JSON.\n   * {@link startUploadSession} sends the file straight to storage instead.\n   */\n  async create(\n    input:\n      | { kind: \"blob\"; file: Blob; body: AssetCreateBlobInput }\n      | { kind: \"link\"; body: AssetCreateLinkInput },\n    auth: AuthContext = SERVICE,\n  ): Promise<{ id: string }> {\n    if (input.kind === \"blob\") {\n      const fd = new FormData();\n      fd.set(\"file\", input.file);\n      fd.set(\"body\", JSON.stringify(input.body));\n      return this.ctx.http.request<{ id: string }>({\n        method: \"POST\",\n        path: this.base(),\n        auth,\n        body: fd,\n      });\n    }\n    return this.ctx.http.request<{ id: string }>({\n      method: \"POST\",\n      path: this.base(),\n      auth,\n      body: input.body,\n    });\n  }\n\n  /**\n   * List assets, wrapped in the shared {@link PaginatedItems} envelope so\n   * callers can iterate over pages consistently with the rest of the SDK.\n   * `hasNextPage` is the standard SDK heuristic: `true` when the returned\n   * page is full (`items.length === requested pageSize`). Pagination\n   * defaults match Emporix's server defaults (`pageNumber: 1`,\n   * `pageSize: 60`) so an empty `query` produces stable expectations.\n   */\n  async list(\n    query: ListAssetsQuery = {},\n    auth: AuthContext = SERVICE,\n  ): Promise<PaginatedItems<Asset>> {\n    const pageNumber = query.pageNumber ?? 1;\n    const pageSize = query.pageSize ?? 60;\n    // Destructured out because the rest of `query` is spread into the query\n    // string: `totalCount` is an SDK-side flag that becomes a request header,\n    // and would otherwise ride along as a stray `?totalCount=true`.\n    const { totalCount, ...rest } = query;\n    return requestPage<Asset>(\n      this.ctx.http,\n      {\n        method: \"GET\",\n        path: this.base(),\n        auth,\n        query: { ...rest, pageNumber, pageSize },\n      },\n      { pageNumber, pageSize, ...(totalCount === undefined ? {} : { totalCount }) },\n    );\n  }\n\n  /** Fetch an asset by id. */\n  async get(assetId: string, auth: AuthContext = SERVICE): Promise<Asset> {\n    return this.ctx.http.request<Asset>({\n      method: \"GET\",\n      path: `${this.base()}/${assetId}`,\n      auth,\n    });\n  }\n\n  /**\n   * Replace an asset (`PUT`, HTTP 204 — nothing is returned). The spec takes one\n   * body per asset type, mirrored by the discriminated input:\n   * - `{ kind: \"json\", body }` — a LINK asset, sent as `application/json`. The\n   *   body is the whole asset: `type: \"LINK\"`, `access` and `url` are required.\n   * - `{ kind: \"blob\", file, body }` — a BLOB asset, sent as\n   *   `multipart/form-data`: the file (max 30 MB) and the asset body, both\n   *   required, so this always replaces the bytes.\n   *\n   * A BLOB's metadata alone — `refIds`, `details`, mixins — goes through\n   * {@link patch}. Earlier versions also took a BLOB as the JSON body and\n   * promised the updated asset in return; the spec allows neither.\n   *\n   * `type` and `access` are immutable. Optimistic locking is via\n   * `body.metadata.version`; a stale one gets a 409.\n   */\n  async update(\n    assetId: string,\n    input:\n      | { kind: \"json\"; body: AssetUpdateLinkInput }\n      | { kind: \"blob\"; file: Blob; body: AssetUpdateBlobInput },\n    auth: AuthContext = SERVICE,\n  ): Promise<void> {\n    const path = `${this.base()}/${encodeURIComponent(assetId)}`;\n    if (input.kind === \"blob\") {\n      const fd = new FormData();\n      fd.set(\"file\", input.file);\n      fd.set(\"body\", JSON.stringify(input.body));\n      await this.ctx.http.request<void>({ method: \"PUT\", path, auth, body: fd });\n      return;\n    }\n    await this.ctx.http.request<void>({ method: \"PUT\", path, auth, body: input.body });\n  }\n\n  /**\n   * Partially update an asset with an RFC-6902 JSON-Patch op-array\n   * (`PATCH /assets/{id}`, HTTP 204 — nothing is returned).\n   *\n   * This is the way to change one field without resending the whole asset, and\n   * the only way to touch a `BLOB` asset's metadata **without re-uploading the\n   * file** — {@link update} in `blob` mode always replaces the bytes.\n   *\n   * Append to an array with a path ending in `/-`, which preserves the existing\n   * entries:\n   *\n   * ```ts\n   * await client.media.patch(assetId, [\n   *   { op: \"add\", path: \"/refIds/-\", value: { id: \"product1\", type: \"PRODUCT\" } },\n   * ]);\n   * ```\n   *\n   * `type` and `access` are immutable here too, as with {@link update}. Only\n   * `add`, `remove` and `replace` are accepted, and optimistic locking still\n   * applies — a stale `metadata.version` gets a 409.\n   */\n  async patch(assetId: string, ops: AssetPatch, auth: AuthContext = SERVICE): Promise<void> {\n    await this.ctx.http.request<void>({\n      method: \"PATCH\",\n      path: `${this.base()}/${encodeURIComponent(assetId)}`,\n      auth,\n      body: ops,\n    });\n  }\n\n  /** Remove an asset. */\n  async remove(assetId: string, auth: AuthContext = SERVICE): Promise<void> {\n    await this.ctx.http.request<void>({\n      method: \"DELETE\",\n      path: `${this.base()}/${assetId}`,\n      auth,\n    });\n  }\n\n  /**\n   * Download an asset by id. Returns a discriminated union:\n   * - `{ kind: \"redirect\", url }` for `PUBLIC` assets (server-side 30x with\n   *   the storage URL in `Location`).\n   * - `{ kind: \"bytes\", data }` for `PRIVATE` assets (server-side 200 with\n   *   the asset bytes; `etag` + `contentType` headers are exposed for\n   *   caching). When the server reports `text/plain` Content-Type (the\n   *   OpenAPI-documented format), the SDK decodes the base64 stream into\n   *   an `ArrayBuffer` transparently; binary Content-Types are passed\n   *   through verbatim.\n   *\n   * Emporix recommends {@link getDownloadUrl} for every download: here the file\n   * passes through the Media API. A `413` means the asset's known size exceeds\n   * the streaming limit (30 MB by default) — only {@link getDownloadUrl} can\n   * serve it. A `409` means the asset is still `PENDING` from a direct upload\n   * whose file has not reached storage.\n   *\n   * Implementation note: uses `redirect: \"manual\"` so the redirect-location\n   * is observable. In Node.js this works; in a browser the redirect Location\n   * is intentionally hidden by fetch — there, `PUBLIC` downloads will\n   * surface as an opaque-redirect and the SDK throws. Browser code should\n   * use the asset's `url` field from `get()` for `LINK` assets, or the\n   * direct storage URL for `PUBLIC` `BLOB` assets (typically delivered via\n   * an `<img>` tag rather than `download()`).\n   */\n  async download(\n    assetId: string,\n    auth: AuthContext = SERVICE,\n  ): Promise<DownloadResult> {\n    const path = `${this.base()}/${assetId}/download`;\n    const res = await this.ctx.http.requestRaw(\n      { method: \"GET\", path, auth },\n      { redirect: \"manual\" },\n    );\n\n    // PUBLIC: server-side redirect — capture Location.\n    if (res.status >= 300 && res.status < 400) {\n      const url = res.headers.get(\"location\");\n      if (!url) {\n        throw new EmporixError(\n          `media.download: ${res.status} response without a Location header`,\n          res.status,\n        );\n      }\n      return { kind: \"redirect\", url };\n    }\n\n    // PRIVATE: bytes.\n    if (res.ok) {\n      const etag = res.headers.get(\"etag\") ?? undefined;\n      const contentType = res.headers.get(\"content-type\") ?? undefined;\n      let data: ArrayBuffer;\n      if (contentType?.startsWith(\"text/plain\")) {\n        // Per OpenAPI spec the server returns the byte stream as a\n        // base64-encoded text/plain body. Decode once into raw bytes\n        // so callers always see an ArrayBuffer.\n        const text = await res.text();\n        const bin = atob(text);\n        const arr = new Uint8Array(bin.length);\n        for (let i = 0; i < bin.length; i++) arr[i] = bin.charCodeAt(i);\n        data = arr.buffer;\n      } else {\n        data = await res.arrayBuffer();\n      }\n      return {\n        kind: \"bytes\",\n        data,\n        ...(etag !== undefined ? { etag } : {}),\n        ...(contentType !== undefined ? { contentType } : {}),\n      };\n    }\n\n    // Error: surface via the standard EmporixError hierarchy.\n    const text = await res.text();\n    let parsed: unknown = undefined;\n    if (text) {\n      try {\n        parsed = JSON.parse(text);\n      } catch {\n        parsed = text;\n      }\n    }\n    throw errorFromResponse(res.status, `GET ${path} → ${res.status}`, parsed);\n  }\n\n  /**\n   * Get a URL that serves the stored file straight from storage\n   * (`GET /assets/{assetId}/download-url`). Emporix recommends it for every\n   * download: the file never passes through the Media API, there is no size\n   * limit, and the URL can be handed to a browser as it is.\n   *\n   * - `PRIVATE` BLOB → `provider: \"GCS\"`, a signed Google Cloud Storage URL that\n   *   works without an Emporix token until `expiresAt` (15 minutes by default).\n   * - `PUBLIC` BLOB → `provider: \"CLOUDINARY\"`, the permanent URL.\n   * - `LINK` → `provider: \"LINK\"`, the stored URL.\n   *\n   * `disposition` (`attachment` by default, or `inline`) affects private URLs\n   * only. Unlike {@link startUploadSession}, this works whether or not direct\n   * upload is enabled for the tenant. A `409` means a direct upload is still\n   * `PENDING` and its file has not reached storage; once it has, this call\n   * completes the asset before answering.\n   */\n  async getDownloadUrl(\n    assetId: string,\n    query: AssetDownloadUrlQuery = {},\n    auth: AuthContext = SERVICE,\n  ): Promise<AssetDownloadUrl> {\n    return this.ctx.http.request<AssetDownloadUrl>({\n      method: \"GET\",\n      path: `${this.base()}/${encodeURIComponent(assetId)}/download-url`,\n      auth,\n      query: { ...query },\n    });\n  }\n\n  /**\n   * Start a direct upload of a `BLOB` asset (`POST /assets/upload-session`,\n   * `201`). Emporix creates the asset as `PENDING` — `id` is its id — and\n   * returns where to send the file. **This method does not send it**:\n   *\n   * - `upload.method === \"PUT\"` (a `PRIVATE` asset, `uploadType: \"put\"` or\n   *   omitted): `PUT` the file to `upload.url` with every `upload.headers` entry.\n   * - `upload.method === \"POST\"` (every `PUBLIC` asset, or `uploadType: \"form\"`):\n   *   a multipart `POST` to `upload.url` with every `upload.fields` entry\n   *   unchanged and the file part last.\n   *\n   * That request goes to Google Cloud Storage or Cloudinary, not to Emporix, so\n   * it must not carry the Emporix token — which is also why a browser can make\n   * it. The asset turns `READY` once storage confirms; until then, calls that\n   * need the file answer `409`. The instruction is valid for 15 minutes (GCS) or\n   * an hour (Cloudinary), and an unused session expires at `expiresAt`.\n   *\n   * Direct upload is enabled per tenant by Emporix Support. Without it the call\n   * throws an `EmporixForbiddenError` whose `body.message` is `direct upload is\n   * not enabled for this tenant`, and nothing is created — the same status as a\n   * missing scope, so read the message.\n   */\n  async startUploadSession(\n    input: AssetUploadSessionInput,\n    auth: AuthContext = SERVICE,\n  ): Promise<AssetUploadSession> {\n    return this.ctx.http.request<AssetUploadSession>({\n      method: \"POST\",\n      path: `${this.base()}/upload-session`,\n      auth,\n      body: input,\n    });\n  }\n\n  /** Multipart upload sugar: builds `AssetCreateBlob` from input. */\n  async uploadFile(\n    input: {\n      file: Blob;\n      productId?: string;\n      filename?: string;\n      mimeType?: string;\n      access?: \"PUBLIC\" | \"PRIVATE\";\n    },\n    auth: AuthContext = SERVICE,\n  ): Promise<{ id: string }> {\n    const body: AssetCreateBlobInput = {\n      type: \"BLOB\",\n      access: input.access ?? \"PUBLIC\",\n      ...(input.productId\n        ? { refIds: [{ type: \"PRODUCT\", id: input.productId }] }\n        : {}),\n      ...(input.filename || input.mimeType\n        ? {\n            details: {\n              ...(input.filename ? { filename: input.filename } : {}),\n              ...(input.mimeType ? { mimeType: input.mimeType } : {}),\n            },\n          }\n        : {}),\n    };\n    return this.create({ kind: \"blob\", file: input.file, body }, auth);\n  }\n\n  /**\n   * Replace the file content of an existing BLOB asset. Sugar over\n   * {@link update} with `kind: \"blob\"`, and like it resolves to nothing — the\n   * PUT answers 204. `access` is required because the field is immutable and\n   * the server validates that the body matches.\n   *\n   * Pass `version` from `asset.metadata.version` for optimistic locking\n   * (recommended when concurrent writers are possible) — a stale one gets a 409.\n   * Without it the current version is read first, because the live API rejects\n   * an update that carries none; the write then wins over any in between.\n   */\n  async replaceFile(\n    assetId: string,\n    input: {\n      file: Blob;\n      access: \"PUBLIC\" | \"PRIVATE\";\n      filename?: string;\n      mimeType?: string;\n      version?: number;\n    },\n    auth: AuthContext = SERVICE,\n  ): Promise<void> {\n    const version =\n      input.version ?? (await this.get(assetId, auth)).metadata?.version ?? 1;\n    const body: AssetUpdateBlobInput = {\n      type: \"BLOB\",\n      access: input.access,\n      ...(input.filename || input.mimeType\n        ? {\n            details: {\n              ...(input.filename ? { filename: input.filename } : {}),\n              ...(input.mimeType ? { mimeType: input.mimeType } : {}),\n            },\n          }\n        : {}),\n      metadata: { version },\n    };\n    return this.update(assetId, { kind: \"blob\", file: input.file, body }, auth);\n  }\n\n  /** External-URL sugar: builds `AssetCreateLink`. */\n  async link(\n    input: { url: string; productId?: string; access?: \"PUBLIC\" | \"PRIVATE\" },\n    auth: AuthContext = SERVICE,\n  ): Promise<{ id: string }> {\n    const body: AssetCreateLinkInput = {\n      type: \"LINK\",\n      access: input.access ?? \"PUBLIC\",\n      url: input.url,\n      ...(input.productId\n        ? { refIds: [{ type: \"PRODUCT\", id: input.productId }] }\n        : {}),\n    };\n    return this.create({ kind: \"link\", body }, auth);\n  }\n\n  /**\n   * Idempotently add a PRODUCT refId to an asset, through a JSON Patch that\n   * appends the one reference, so it works for BLOB and LINK alike and leaves\n   * the rest of the asset alone.\n   *\n   * Resolves to the asset as read back after the patch, because Emporix answers\n   * 204 to a reference to a product that does not exist and drops it — check\n   * `refIds` rather than trusting the call. Only a PUBLIC asset takes a product\n   * reference; a PRIVATE one answers 400.\n   *\n   * Earlier versions sent a JSON PUT of `{ type, refIds }`, which the spec\n   * rejects for both types: a BLOB takes no JSON PUT, and a LINK's requires\n   * `access` and `url`.\n   */\n  async attachToProduct(\n    assetId: string,\n    productId: string,\n    auth: AuthContext = SERVICE,\n  ): Promise<Asset> {\n    const a = await this.get(assetId, auth);\n    const refIds: AssetRefId[] = a.refIds ?? [];\n    if (refIds.some((r) => isProductRef(r, productId))) return a;\n    const ref: AssetRefId = { type: \"PRODUCT\", id: productId };\n    // `/refIds/-` appends to an existing array only (RFC 6902).\n    const op =\n      a.refIds === undefined\n        ? { op: \"add\" as const, path: \"/refIds\", value: [ref] }\n        : { op: \"add\" as const, path: \"/refIds/-\", value: ref };\n    await this.patch(assetId, [op], auth);\n    return this.get(assetId, auth);\n  }\n\n  /**\n   * Remove a PRODUCT refId from an asset (no-op if absent), through a JSON Patch\n   * that replaces the references and nothing else. Resolves to the asset as\n   * read back after the patch, like {@link attachToProduct}. Earlier versions\n   * sent a spec-invalid JSON PUT, as that one did.\n   */\n  async detachFromProduct(\n    assetId: string,\n    productId: string,\n    auth: AuthContext = SERVICE,\n  ): Promise<Asset> {\n    const a = await this.get(assetId, auth);\n    const refIds: AssetRefId[] = a.refIds ?? [];\n    const next = refIds.filter((r) => !isProductRef(r, productId));\n    if (next.length === refIds.length) return a;\n    await this.patch(assetId, [{ op: \"replace\", path: \"/refIds\", value: next }], auth);\n    return this.get(assetId, auth);\n  }\n\n  /** Convenience: list assets attached to a product (server-side filter). */\n  async listForProduct(\n    productId: string,\n    auth: AuthContext = SERVICE,\n  ): Promise<PaginatedItems<Asset>> {\n    return this.list({ \"refIds.id\": productId }, auth);\n  }\n}\n\n// Re-export so consumers can `import { isProductRef } from \"@viu/emporix-sdk/media\"`?\n// Internal helper — kept module-private; convenience methods in Task 4 use it.\nexport const _internalMedia = { isProductRef };\n"]}

package/dist/{chunk-N2CE3J4M.js → chunk-U3ZIJZYH.js}

@@ -1,5 +1,5 @@
 import { splitQuery, SEARCH_PAGING } from './chunk-ZWJUDXTK.js';
-import { requireCustomer } from './chunk-3BDDYX3V.js';
+import { requireCustomer } from './chunk-ZVIEFW3X.js';
 
 // src/services/segment.ts
 function setIfDefined(q, key, value) {
@@ -407,5 +407,5 @@ var SegmentService = class {
 };
 
 export { SegmentService };
-//# sourceMappingURL=chunk-N2CE3J4M.js.map
-//# sourceMappingURL=chunk-N2CE3J4M.js.map
+//# sourceMappingURL=chunk-U3ZIJZYH.js.map
+//# sourceMappingURL=chunk-U3ZIJZYH.js.map