@w6w/sdk 0.6.0 → 0.9.8

package/README.md

@@ -10,7 +10,9 @@ The package is authored as runtime-neutral TypeScript against Web standards (`fe
 `URL`, `AbortController`), so the same build runs under Node 18+, Deno and Bun.
 
 - **License:** MIT (see [LICENSE](./LICENSE)).
-- **Version:** `0.2.1`.
+- **Version:** `0.9.8`.
+- **Guides:** [docs.w6w.io/clients/node](https://docs.w6w.io/clients/node/), with a
+  [full reference](https://docs.w6w.io/clients/node/reference/).
 
 ## Install
 
@@ -26,9 +28,9 @@ JSR (the TypeScript source, published verbatim):
 deno add jsr:@w6w/sdk
 ```
 
-Both registries publish the **same version at the same time** — `@w6w/sdk`, `@w6w/cli` and the
-Python `w6w` package share one version number and are released together. A given version means the
-same set of operations in every language.
+Both registries publish the **same version at the same time** — `@w6w/sdk`, `@w6w/cli`, `@w6w/react`
+and the Python `w6w` package share one version number and are released together. A given version
+means the same set of operations in every language.
 
 ## Quick start
 
@@ -37,7 +39,7 @@ import { isActionRun, isFunctionRun, isWorkflowRun, W6WClient } from "@w6w/sdk";
 
 const client = new W6WClient(); // reads W6W_BASE_URL and W6W_TOKEN
 
-// Who am I, and what versions am I talking to?
+// Who am I? (`me.versions.wrapper` is this SDK's version.)
 const me = await client.me();
 
 // What can I run? `run` is addressed by a `conn_…` / `fn_…` / `ep_…` / `wf_…`
@@ -50,7 +52,7 @@ const workflows = await client.workflows.list();
 
 A `conn_…` id resolves to an app action. `run` returns a `kind`-tagged envelope — narrow it with
 `isActionRun` / `isFunctionRun` / `isWorkflowRun` before reading a field, since the three arms use
-different field names on purpose (`value` vs `output` vs `runId`+`status`):
+different fields (`output` for an action or a function, `runId`+`status` for a workflow):
 
 ```ts
 const env = await client.run({
@@ -59,7 +61,7 @@ const env = await client.run({
   payload: { channel: "#general", text: "Hello from @w6w/sdk" },
 });
 
-if (isActionRun(env)) console.log(env.value); // the action's return value
+if (isActionRun(env)) console.log(env.output); // the action's return value
 ```
 
 ### Run a function or an endpoint
@@ -109,6 +111,57 @@ const v = await client.vars.create({ name: "sender_email", type: "string", value
 await client.vars.update(v.id, { value: "c@d.e" });
 ```
 
+Documents belong to a project: pass `{ project: "prj_…" }` as the last argument, or set `project` on
+the client. Without either, your account's default project is used. Vars belong to the account.
+
+### Functions, Endpoints and workflow definitions
+
+```ts
+// Run by key or id. `functions.run` returns the Function's output directly.
+const out = await client.functions.run("send-welcome-email", { payload: { to: "a@example.com" } });
+const res = await client.endpoints.run("signup", { payload: { email: "a@example.com" } });
+
+// Cancel a run. The answer is the run's status at that moment.
+await client.workflows.cancel("run_01H…");
+
+// Read, edit and save a definition, refusing to overwrite someone else's save.
+const { workflow, updatedAt } = await client.workflows.get("wf_01H…");
+await client.workflows.update("wf_01H…", { ...workflow, description: "Sends the welcome email" }, {
+  ifUnmodifiedSince: updatedAt,
+});
+```
+
+`functions.list/get/create/update/delete` and `workflows.create/archive/delete` complete the
+lifecycle. A Function or workflow must be archived before it can be deleted
+(`409 function_not_archived` / `409 workflow_not_archived`).
+
+### Team
+
+```ts
+const members = await client.team.members();
+const { redemptionLink } = await client.team.invite({ email: "dev@example.com", role: "member" });
+```
+
+Reading the roster and open invites works for any member. `invite`, `revokeInvite`, `setRole` and
+`removeMember` need the `owner` or `admin` role.
+
+### A route the SDK doesn't wrap
+
+`client.request()` sends any request with the client's own base URL, token and headers, and raises
+the same `ApiError`. Build the path with the `path` tag, which percent-encodes each value:
+
+```ts
+import { path } from "@w6w/sdk";
+
+const { status, body } = await client.request<{ run: { status: string } }>({
+  method: "GET",
+  path: path`/runs/${runId}`,
+});
+```
+
+Every call also takes an `AbortSignal` as `signal`; an aborted call raises `ApiError` with `status`
+`0` and code `cancelled`.
+
 ## Configuration
 
 Two environment variables, both read only at client construction:
@@ -133,6 +186,51 @@ const client = new W6WClient();
 const other = new W6WClient({ baseUrl: "https://api.example.com", token: "…" });
 ```
 
+### The four options a host embedding w6w needs
+
+Both variables stay plain strings. These four constructor options cover the cases a host — a partner
+embedding w6w inside its own product, a backend juggling tenants — actually runs into, and none of
+them has an environment-variable spelling:
+
+| Option                  | Meaning                                                                                            |
+| ----------------------- | -------------------------------------------------------------------------------------------------- |
+| `token`                 | A bearer token, **or a supplier function** called per request (see below).                         |
+| `refreshOnUnauthorized` | Opt in to a single recovery retry when a request fails `401` / `unauthorized`. `false` by default. |
+| `onUnauthorized`        | Called with the terminal `401` `ApiError`, at most once per call.                                  |
+| `headers`               | Default headers sent with every request.                                                           |
+
+```ts
+const client = new W6WClient({
+  baseUrl: "https://api.example.com",
+  // Called (and awaited) per request — never cached from construction.
+  token: () => readTenantToken(),
+  refreshOnUnauthorized: true, // one retry when the server answers 401
+  onUnauthorized: (err) => redirectToLogin(err), // …and what to do when that did not help
+  headers: { "X-W6W-Tenant": tenantId }, // your own gateway/authorizer header
+});
+```
+
+**A token supplier is how a host mints or rotates a credential out of band.** `token` takes a
+`string` — sent verbatim on every call, exactly as before — or a `TokenProvider` function returning
+one, which is called **per request** rather than resolved once at construction, so a token that
+changes between calls is picked up without rebuilding the client. Requests in flight
+**concurrently** on one client share ONE supplier call (and its result); nothing is cached once it
+settles, so memoize the supplier yourself if minting is expensive. A nullish or blank result is
+treated exactly like a missing static token: a `ConfigError` naming `W6W_TOKEN`, never a request
+sent with no credential.
+
+**`refreshOnUnauthorized` opts in to one recovery.** Off by default, and the behaviour before the
+option existed. When a request fails `401` with `{code: "unauthorized"}` and `token` is a function,
+the supplier is called once more with `{forceRefresh: true}` and, if that yields a usable value, the
+**same** request is re-sent once. Nothing else is ever retried — not a second time, not another
+status, and never a `requireAuth: false` request. `onUnauthorized` receives the terminal `401` error
+— after a failed recovery, or immediately when recovery is off or the token is a plain string — at
+most once per call, and never on success.
+
+**`headers` is the base every per-request `headers` option builds on.** A per-request header with
+the same name wins, and neither can displace the `authorization` bearer or the `content-type` the
+client sets for a JSON body.
+
 ### `W6W_BASE_URL` is an origin
 
 The API is served at the **root** of its own host — `https://api.example.com/vars`, not `…/api/vars`
@@ -163,6 +261,10 @@ Sent as `Authorization: Bearer <token>` on **every** request — there are no an
 this API. A client with no token can still be constructed (so tools that only print help or a
 version work offline); the configuration error naming `W6W_TOKEN` surfaces on the first request.
 
+The variable is a plain string only. A credential that has to change between requests is spelled in
+the constructor — `token: () => …`, [above](#the-four-options-a-host-embedding-w6w-needs) — never in
+the environment.
+
 ## Errors
 
 Two error types, and the difference between them is diagnostic:
@@ -178,23 +280,71 @@ Classify by `status`, and by a **prefix** of `code` (`unknown_*`, `invalid_*`, `
 by an exhaustive list of codes, which the server extends freely. Note that a `424` means the target
 app or its upstream vendor failed, not that w6w did; it is passed through untouched.
 
-Nothing is retried, no token is refreshed, and a `401` has no side effect beyond the raised error.
+Nothing is retried, no token is refreshed, and a `401` has no side effect beyond the raised error —
+unless you opted in with `refreshOnUnauthorized`, which retries the failed request exactly once (see
+[the four options a host embedding w6w needs](#the-four-options-a-host-embedding-w6w-needs)).
+
+## Embedding for enterprise tenants
+
+If you are a partner embedding w6w inside your OWN product, your backend mints a short-lived,
+per-user w6w token with one call — `exchangeToken`, from a **separate** entry point,
+`@w6w/sdk/server`, never from `@w6w/sdk` itself:
+
+```ts
+import { exchangeToken } from "@w6w/sdk/server";
+```
+
+This is a backend-only function: it takes your tenant's `clientId`/`clientSecret`, which must never
+reach a browser or a mobile client. A typical route on your OWN backend — never called directly from
+your frontend — looks like this:
+
+```ts
+// Your backend, e.g. POST /api/w6w-token
+app.post("/api/w6w-token", async (req, res) => {
+  const session = await readPartnerSession(req); // YOUR auth, not w6w's
+
+  // Exchange trusts whatever `account` it is given — w6w has no way to verify
+  // it against your own data, so YOU derive it from YOUR OWN membership data,
+  // never from an unauthenticated client input (a query param, a request body
+  // field a browser could set).
+  const account = await yourOwnMembershipLookup(session.userId);
+
+  const { token, expiresIn } = await exchangeToken({
+    baseUrl: process.env.W6W_BASE_URL!,
+    clientId: process.env.W6W_TENANT_CLIENT_ID!,
+    clientSecret: process.env.W6W_TENANT_CLIENT_SECRET!, // never sent to the browser
+    subject: session.userId,
+    account,
+  });
+
+  res.json({ token, expiresAt: Date.now() + expiresIn * 1000 });
+});
+```
+
+Your frontend calls `/api/w6w-token`, gets `{ token, expiresAt }`, and uses `token` as `W6W_TOKEN`/a
+bearer for the rest of the session — the tenant secret itself never leaves your backend. Credentials
+travel only as an HTTP `Authorization: Basic base64(clientId:clientSecret)` header — never in the
+request body, the URL or a query string — and every malformed input (a blank
+`clientId`/`clientSecret`/`subject`, a `clientId` containing `:`, a non-latin-1
+`clientId`/`clientSecret`) raises a local `ConfigError` before any network call. The
+[embedding guide](https://docs.w6w.io/clients/node/embedding/) walks through token caching and
+refresh end to end; [`../docs/sdk-surface.md`](../docs/sdk-surface.md) "Server-only subpath —
+`@w6w/sdk/server`" pins the contract in both languages.
 
 ## The surface
 
 What operations exist is not decided in this repo. It is defined by the shared machine-readable
-contract **`endpoints.json`**, which all three w6w wrappers implement and which each one's
-conformance test reads directly — the same file, never a vendored copy. An operation missing from a
-wrapper is a failing test, not a preference.
+contract **`endpoints.json`**, which every contract lane (this SDK, the CLI and the Python client)
+implements and which each one's conformance test reads directly — the same file, never a vendored
+copy. An operation missing from a wrapper is a failing test, not a preference.
 
-Some operations are marked `planned` in that contract: they are implemented and unit-tested here,
-but the corresponding server route is not live yet, so calling them against a server today returns
-`404`. The marker records **server** readiness, not wrapper completeness.
+An operation marked `planned` in that contract is implemented and unit-tested here ahead of its
+server route. The marker records **server** readiness, not wrapper completeness.
 
 ## Versioning
 
-The version is a shared fact across all three wrappers, so a release may go out for this package
-even when nothing in it changed — a divergent version is far more expensive than an empty release.
+The version is a shared fact across all four packages, so a release may go out for this package even
+when nothing in it changed — a divergent version is far more expensive than an empty release.
 
 Below `1.0.0`, **breaking changes may land in a minor bump.** That grace ends at `1.0.0`; do not
 plan around it.

package/dist/mod.d.ts

@@ -17,8 +17,8 @@
 export { VERSION } from "./src/version.ts";
 export { W6WClient } from "./src/client.ts";
 export { ApiError, ConfigError } from "./src/errors.ts";
-export { BASE_PATH, type FetchLike, joinBaseUrl, type ResolvedConfig, type W6WClientOptions, } from "./src/config.ts";
-export type { HttpMethod, HttpResponse, QueryParams, RequestOptions } from "./src/http.ts";
+export { BASE_PATH, type FetchLike, joinBaseUrl, type ResolvedConfig, type TokenProvider, type W6WClientOptions, } from "./src/config.ts";
+export type { CallOptions, HttpMethod, HttpResponse, QueryParams, RequestOptions, } from "./src/http.ts";
 export { path } from "./src/http.ts";
 export { DocumentsApi } from "./src/documents.ts";
 export type { DocumentCreateInput, DocumentOptions, DocumentPatch, DocumentsHost, } from "./src/documents.ts";
@@ -30,12 +30,14 @@ export { ConnectionsApi } from "./src/connections.ts";
 export type { ConnectionsHost } from "./src/connections.ts";
 export { WorkflowsApi } from "./src/workflows.ts";
 export { FunctionsApi } from "./src/functions.ts";
-export type { FunctionRunOptions, FunctionsHost } from "./src/functions.ts";
+export type { FunctionDefinition, FunctionDetail, FunctionRunOptions, FunctionsHost, } from "./src/functions.ts";
 export { EndpointsApi } from "./src/endpoints.ts";
 export type { EndpointRunOptions, EndpointsHost } from "./src/endpoints.ts";
-export type { WorkflowListOptions, WorkflowRunOptions, WorkflowRunResult, WorkflowsHost, } from "./src/workflows.ts";
+export { TeamApi } from "./src/team.ts";
+export type { TeamHost, TeamInvite, TeamInviteInput, TeamInviteWithLink, TeamMember, } from "./src/team.ts";
+export type { WorkflowDefinition, WorkflowDetail, WorkflowListOptions, WorkflowRunOptions, WorkflowRunResult, WorkflowSaveResult, WorkflowsHost, WorkflowWriteOptions, } from "./src/workflows.ts";
 export { runUrn } from "./src/run.ts";
 export type { RunHost, RunInput } from "./src/run.ts";
 export { isActionRun, isFunctionRun, isTerminalRunStatus, isWorkflowRun } from "./src/types.ts";
-export type { ActionRunEnvelope, ConnectionState, ConnectionSummary, Doc, DocFormat, FunctionRunEnvelope, Me, RunEnvelope, RunResult, RunStatus, StepError, UnknownRunEnvelope, Var, VarType, WorkflowRunEnvelope, WorkflowStatus, WorkflowSummary, } from "./src/types.ts";
+export type { ActionRunEnvelope, ConnectionAppMeta, ConnectionState, ConnectionSummary, Doc, DocFormat, FunctionRunEnvelope, FunctionSummary, InvocationFrame, Me, RunEnvelope, RunResult, RunStatus, StepError, UnknownRunEnvelope, Var, VarType, WorkflowRunEnvelope, WorkflowStatus, WorkflowSummary, } from "./src/types.ts";
 //# sourceMappingURL=mod.d.ts.map

package/dist/mod.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"mod.d.ts","sourceRoot":"","sources":["../mod.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAG3C,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAC5C,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AACxD,OAAO,EACL,SAAS,EACT,KAAK,SAAS,EACd,WAAW,EACX,KAAK,cAAc,EACnB,KAAK,gBAAgB,GACtB,MAAM,iBAAiB,CAAC;AACzB,YAAY,EAAE,UAAU,EAAE,YAAY,EAAE,WAAW,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAK3F,OAAO,EAAE,IAAI,EAAE,MAAM,eAAe,CAAC;AAMrC,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,YAAY,EACV,mBAAmB,EACnB,eAAe,EACf,aAAa,EACb,aAAa,GACd,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AACxC,YAAY,EAAE,cAAc,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAOxE,OAAO,EAAE,OAAO,EAAE,MAAM,aAAa,CAAC;AACtC,YAAY,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AACtD,YAAY,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AAC5D,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,YAAY,EAAE,kBAAkB,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAC5E,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,YAAY,EAAE,kBAAkB,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAC5E,YAAY,EACV,mBAAmB,EACnB,kBAAkB,EAClB,iBAAiB,EACjB,aAAa,GACd,MAAM,oBAAoB,CAAC;AAK5B,OAAO,EAAE,MAAM,EAAE,MAAM,cAAc,CAAC;AACtC,YAAY,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,cAAc,CAAC;AAOtD,OAAO,EAAE,WAAW,EAAE,aAAa,EAAE,mBAAmB,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAEhG,YAAY,EACV,iBAAiB,EACjB,eAAe,EACf,iBAAiB,EACjB,GAAG,EACH,SAAS,EACT,mBAAmB,EACnB,EAAE,EACF,WAAW,EACX,SAAS,EACT,SAAS,EACT,SAAS,EACT,kBAAkB,EAClB,GAAG,EACH,OAAO,EACP,mBAAmB,EACnB,cAAc,EACd,eAAe,GAChB,MAAM,gBAAgB,CAAC"}
+{"version":3,"file":"mod.d.ts","sourceRoot":"","sources":["../mod.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAG3C,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAC5C,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AACxD,OAAO,EACL,SAAS,EACT,KAAK,SAAS,EACd,WAAW,EACX,KAAK,cAAc,EACnB,KAAK,aAAa,EAClB,KAAK,gBAAgB,GACtB,MAAM,iBAAiB,CAAC;AACzB,YAAY,EACV,WAAW,EACX,UAAU,EACV,YAAY,EACZ,WAAW,EACX,cAAc,GACf,MAAM,eAAe,CAAC;AAKvB,OAAO,EAAE,IAAI,EAAE,MAAM,eAAe,CAAC;AAMrC,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,YAAY,EACV,mBAAmB,EACnB,eAAe,EACf,aAAa,EACb,aAAa,GACd,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AACxC,YAAY,EAAE,cAAc,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAOxE,OAAO,EAAE,OAAO,EAAE,MAAM,aAAa,CAAC;AACtC,YAAY,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AACtD,YAAY,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AAC5D,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,YAAY,EACV,kBAAkB,EAClB,cAAc,EACd,kBAAkB,EAClB,aAAa,GACd,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,YAAY,EAAE,kBAAkB,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAC5E,OAAO,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AACxC,YAAY,EACV,QAAQ,EACR,UAAU,EACV,eAAe,EACf,kBAAkB,EAClB,UAAU,GACX,MAAM,eAAe,CAAC;AACvB,YAAY,EACV,kBAAkB,EAClB,cAAc,EACd,mBAAmB,EACnB,kBAAkB,EAClB,iBAAiB,EACjB,kBAAkB,EAClB,aAAa,EACb,oBAAoB,GACrB,MAAM,oBAAoB,CAAC;AAK5B,OAAO,EAAE,MAAM,EAAE,MAAM,cAAc,CAAC;AACtC,YAAY,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,cAAc,CAAC;AAOtD,OAAO,EAAE,WAAW,EAAE,aAAa,EAAE,mBAAmB,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAEhG,YAAY,EACV,iBAAiB,EACjB,iBAAiB,EACjB,eAAe,EACf,iBAAiB,EACjB,GAAG,EACH,SAAS,EACT,mBAAmB,EACnB,eAAe,EACf,eAAe,EACf,EAAE,EACF,WAAW,EACX,SAAS,EACT,SAAS,EACT,SAAS,EACT,kBAAkB,EAClB,GAAG,EACH,OAAO,EACP,mBAAmB,EACnB,cAAc,EACd,eAAe,GAChB,MAAM,gBAAgB,CAAC"}

package/dist/mod.js

@@ -40,6 +40,7 @@ export { ConnectionsApi } from "./src/connections.js";
 export { WorkflowsApi } from "./src/workflows.js";
 export { FunctionsApi } from "./src/functions.js";
 export { EndpointsApi } from "./src/endpoints.js";
+export { TeamApi } from "./src/team.js";
 // Execution (T2.1.5): the URN-addressed `run`. `client.run(input)` is a method
 // on the client, so what is exported is its host interface, its input type and
 // the standalone function the client delegates to.

package/dist/mod.js.map

@@ -1 +1 @@
-{"version":3,"file":"mod.js","sourceRoot":"","sources":["../mod.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAE3C,8EAA8E;AAC9E,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAC5C,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AACxD,OAAO,EACL,SAAS,EAET,WAAW,GAGZ,MAAM,iBAAiB,CAAC;AAEzB,8EAA8E;AAC9E,+EAA+E;AAC/E,8EAA8E;AAC9E,iEAAiE;AACjE,OAAO,EAAE,IAAI,EAAE,MAAM,eAAe,CAAC;AAErC,2EAA2E;AAC3E,0EAA0E;AAC1E,2EAA2E;AAC3E,sCAAsC;AACtC,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAOlD,OAAO,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AAGxC,gFAAgF;AAChF,gFAAgF;AAChF,wEAAwE;AACxE,gFAAgF;AAChF,6CAA6C;AAC7C,OAAO,EAAE,OAAO,EAAE,MAAM,aAAa,CAAC;AAEtC,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAEtD,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAElD,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AASlD,+EAA+E;AAC/E,+EAA+E;AAC/E,mDAAmD;AACnD,OAAO,EAAE,MAAM,EAAE,MAAM,cAAc,CAAC;AAGtC,+EAA+E;AAC/E,8EAA8E;AAC9E,gFAAgF;AAChF,uEAAuE;AACvE,wEAAwE;AACxE,OAAO,EAAE,WAAW,EAAE,aAAa,EAAE,mBAAmB,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC"}
+{"version":3,"file":"mod.js","sourceRoot":"","sources":["../mod.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAE3C,8EAA8E;AAC9E,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAC5C,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AACxD,OAAO,EACL,SAAS,EAET,WAAW,GAIZ,MAAM,iBAAiB,CAAC;AAQzB,8EAA8E;AAC9E,+EAA+E;AAC/E,8EAA8E;AAC9E,iEAAiE;AACjE,OAAO,EAAE,IAAI,EAAE,MAAM,eAAe,CAAC;AAErC,2EAA2E;AAC3E,0EAA0E;AAC1E,2EAA2E;AAC3E,sCAAsC;AACtC,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAOlD,OAAO,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AAGxC,gFAAgF;AAChF,gFAAgF;AAChF,wEAAwE;AACxE,gFAAgF;AAChF,6CAA6C;AAC7C,OAAO,EAAE,OAAO,EAAE,MAAM,aAAa,CAAC;AAEtC,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAEtD,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAOlD,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAElD,OAAO,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AAmBxC,+EAA+E;AAC/E,+EAA+E;AAC/E,mDAAmD;AACnD,OAAO,EAAE,MAAM,EAAE,MAAM,cAAc,CAAC;AAGtC,+EAA+E;AAC/E,8EAA8E;AAC9E,gFAAgF;AAChF,uEAAuE;AACvE,wEAAwE;AACxE,OAAO,EAAE,WAAW,EAAE,aAAa,EAAE,mBAAmB,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC"}

package/dist/src/client.d.ts

@@ -18,8 +18,9 @@ import { type ResolvedConfig, type W6WClientOptions } from "./config.ts";
 import { ConnectionsApi } from "./connections.ts";
 import { ConsoleApi } from "./console/mod.ts";
 import { DocumentsApi } from "./documents.ts";
-import { type HttpResponse, type RequestOptions } from "./http.ts";
+import { type CallOptions, type HttpResponse, type RequestOptions } from "./http.ts";
 import { type RunInput } from "./run.ts";
+import { TeamApi } from "./team.ts";
 import type { Me, RunEnvelope } from "./types.ts";
 import { VarsApi } from "./vars.ts";
 import { EndpointsApi } from "./endpoints.ts";
@@ -128,6 +129,13 @@ export declare class W6WClient {
      * exactly like `vars` and `connections`.
      */
     readonly console: ConsoleApi;
+    /**
+     * The caller's account team: `members`, `invite`, `invites`, `revokeInvite`,
+     * `setRole`, `removeMember`. Not project-scoped — team membership is
+     * account-wide — and constructed with the transport only, exactly like
+     * `vars` and `connections`.
+     */
+    readonly team: TeamApi;
     /**
      * @param options - Explicit configuration; anything omitted falls back to the environment.
      * @throws {ConfigError} When no base URL is configured, or the host has no `fetch`.
@@ -143,11 +151,12 @@ export declare class W6WClient {
      * `versions.wrapper`, this package's own version, which is filled in and
      * never overwrites a key the server supplied.
      *
+     * @param options - Optional per-call transport options (`signal` to abort).
      * @returns The caller's identity.
      * @throws {ConfigError} When no token is configured.
      * @throws {ApiError} On any non-2xx, e.g. a `401` when the token is rejected.
      */
-    me(): Promise<Me>;
+    me(options?: CallOptions): Promise<Me>;
     /**
      * Run whatever a URN addresses — a connection action, a function, an endpoint
      * or a workflow — and get back the kind-tagged envelope.

package/dist/src/client.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../../src/client.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,EAGL,KAAK,cAAc,EACnB,KAAK,gBAAgB,EACtB,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAClD,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAC9C,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAE9C,OAAO,EAAE,KAAK,YAAY,EAAW,KAAK,cAAc,EAAE,MAAM,WAAW,CAAC;AAE5E,OAAO,EAAE,KAAK,QAAQ,EAAU,MAAM,UAAU,CAAC;AACjD,OAAO,KAAK,EAAE,EAAE,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAClD,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAC9C,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAC9C,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAE9C;;;;;;;;;;;;;;;;;GAiBG;AACH,qBAAa,SAAS;;IACpB;;;;OAIG;IACH,QAAQ,CAAC,MAAM,EAAE,cAAc,CAAC;IAEhC;;;;OAIG;IACH,QAAQ,CAAC,SAAS,EAAE,YAAY,CAAC;IAEjC;;;;;OAKG;IACH,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;IAEvB;;;;OAIG;IACH,QAAQ,CAAC,WAAW,EAAE,cAAc,CAAC;IAErC;;;;;;;;OAQG;IACH,QAAQ,CAAC,SAAS,EAAE,YAAY,CAAC;IAEjC;;;;;;;OAOG;IACH,QAAQ,CAAC,SAAS,EAAE,YAAY,CAAC;IAEjC;;;;;;OAMG;IACH,QAAQ,CAAC,SAAS,EAAE,YAAY,CAAC;IAEjC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OA6BG;IACH,QAAQ,CAAC,OAAO,EAAE,UAAU,CAAC;IAI7B;;;OAGG;gBACS,OAAO,GAAE,gBAAqB;IA+B1C;;;;;;;;;;;;;OAaG;IACH,EAAE,IAAI,OAAO,CAAC,EAAE,CAAC;IAIjB;;;;;;;;;;;;;;;;;;;;OAoBG;IACH,GAAG,CAAC,KAAK,EAAE,QAAQ,GAAG,OAAO,CAAC,WAAW,CAAC;IAI1C;;;;;;;;;;;;;OAaG;IACH,OAAO,CAAC,CAAC,EAAE,OAAO,EAAE,cAAc,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;CAG9D"}
+{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../../src/client.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,EAGL,KAAK,cAAc,EACnB,KAAK,gBAAgB,EACtB,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAClD,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAC9C,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAE9C,OAAO,EAAE,KAAK,WAAW,EAAE,KAAK,YAAY,EAAW,KAAK,cAAc,EAAE,MAAM,WAAW,CAAC;AAE9F,OAAO,EAAE,KAAK,QAAQ,EAAU,MAAM,UAAU,CAAC;AACjD,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,KAAK,EAAE,EAAE,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAClD,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAC9C,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAC9C,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAE9C;;;;;;;;;;;;;;;;;GAiBG;AACH,qBAAa,SAAS;;IACpB;;;;OAIG;IACH,QAAQ,CAAC,MAAM,EAAE,cAAc,CAAC;IAEhC;;;;OAIG;IACH,QAAQ,CAAC,SAAS,EAAE,YAAY,CAAC;IAEjC;;;;;OAKG;IACH,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;IAEvB;;;;OAIG;IACH,QAAQ,CAAC,WAAW,EAAE,cAAc,CAAC;IAErC;;;;;;;;OAQG;IACH,QAAQ,CAAC,SAAS,EAAE,YAAY,CAAC;IAEjC;;;;;;;OAOG;IACH,QAAQ,CAAC,SAAS,EAAE,YAAY,CAAC;IAEjC;;;;;;OAMG;IACH,QAAQ,CAAC,SAAS,EAAE,YAAY,CAAC;IAEjC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OA6BG;IACH,QAAQ,CAAC,OAAO,EAAE,UAAU,CAAC;IAE7B;;;;;OAKG;IACH,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;IAIvB;;;OAGG;gBACS,OAAO,GAAE,gBAAqB;IAgC1C;;;;;;;;;;;;;;OAcG;IACH,EAAE,CAAC,OAAO,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,EAAE,CAAC;IAItC;;;;;;;;;;;;;;;;;;;;OAoBG;IACH,GAAG,CAAC,KAAK,EAAE,QAAQ,GAAG,OAAO,CAAC,WAAW,CAAC;IAI1C;;;;;;;;;;;;;OAaG;IACH,OAAO,CAAC,CAAC,EAAE,OAAO,EAAE,cAAc,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;CAG9D"}

package/dist/src/client.js

@@ -22,6 +22,7 @@ import { ConfigError } from "./errors.js";
 import { request } from "./http.js";
 import { fetchMe } from "./me.js";
 import { runUrn } from "./run.js";
+import { TeamApi } from "./team.js";
 import { VarsApi } from "./vars.js";
 import { EndpointsApi } from "./endpoints.js";
 import { FunctionsApi } from "./functions.js";
@@ -128,6 +129,13 @@ export class W6WClient {
      * exactly like `vars` and `connections`.
      */
     console;
+    /**
+     * The caller's account team: `members`, `invite`, `invites`, `revokeInvite`,
+     * `setRole`, `removeMember`. Not project-scoped — team membership is
+     * account-wide — and constructed with the transport only, exactly like
+     * `vars` and `connections`.
+     */
+    team;
     #fetch;
     /**
      * @param options - Explicit configuration; anything omitted falls back to the environment.
@@ -160,6 +168,7 @@ export class W6WClient {
         this.functions = new FunctionsApi(this);
         this.endpoints = new EndpointsApi(this);
         this.console = new ConsoleApi(this);
+        this.team = new TeamApi(this);
     }
     /**
      * Who this client's credential says you are, plus the versions of the
@@ -171,12 +180,13 @@ export class W6WClient {
      * `versions.wrapper`, this package's own version, which is filled in and
      * never overwrites a key the server supplied.
      *
+     * @param options - Optional per-call transport options (`signal` to abort).
      * @returns The caller's identity.
      * @throws {ConfigError} When no token is configured.
      * @throws {ApiError} On any non-2xx, e.g. a `401` when the token is rejected.
      */
-    me() {
-        return fetchMe(this);
+    me(options) {
+        return fetchMe(this, options);
     }
     /**
      * Run whatever a URN addresses — a connection action, a function, an endpoint

package/dist/src/client.js.map

@@ -1 +1 @@
-{"version":3,"file":"client.js","sourceRoot":"","sources":["../../src/client.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,EAEL,aAAa,GAGd,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAClD,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAC9C,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAC9C,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAqB,OAAO,EAAuB,MAAM,WAAW,CAAC;AAC5E,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAiB,MAAM,EAAE,MAAM,UAAU,CAAC;AAEjD,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAC9C,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAC9C,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAE9C;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,OAAO,SAAS;IACpB;;;;OAIG;IACM,MAAM,CAAiB;IAEhC;;;;OAIG;IACM,SAAS,CAAe;IAEjC;;;;;OAKG;IACM,IAAI,CAAU;IAEvB;;;;OAIG;IACM,WAAW,CAAiB;IAErC;;;;;;;;OAQG;IACM,SAAS,CAAe;IAEjC;;;;;;;OAOG;IACM,SAAS,CAAe;IAEjC;;;;;;OAMG;IACM,SAAS,CAAe;IAEjC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OA6BG;IACM,OAAO,CAAa;IAEpB,MAAM,CAAY;IAE3B;;;OAGG;IACH,YAAY,UAA4B,EAAE;QACxC,IAAI,CAAC,MAAM,GAAG,aAAa,CAAC,OAAO,CAAC,CAAC;QACrC,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;YAClB,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC;QAC9B,CAAC;aAAM,CAAC;YACN,MAAM,MAAM,GAAG,UAAU,CAAC,KAAK,CAAC;YAChC,IAAI,OAAO,MAAM,KAAK,UAAU,EAAE,CAAC;gBACjC,MAAM,IAAI,WAAW,CACnB,2DAA2D;oBACzD,6DAA6D,CAChE,CAAC;YACJ,CAAC;YACD,kEAAkE;YAClE,mEAAmE;YACnE,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACxC,CAAC;QAED,wEAAwE;QACxE,iEAAiE;QACjE,2EAA2E;QAC3E,0EAA0E;QAC1E,2DAA2D;QAC3D,IAAI,CAAC,SAAS,GAAG,IAAI,YAAY,CAAC,IAAI,CAAC,CAAC;QACxC,IAAI,CAAC,IAAI,GAAG,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;QAC9B,IAAI,CAAC,WAAW,GAAG,IAAI,cAAc,CAAC,IAAI,CAAC,CAAC;QAC5C,IAAI,CAAC,SAAS,GAAG,IAAI,YAAY,CAAC,IAAI,CAAC,CAAC;QACxC,IAAI,CAAC,SAAS,GAAG,IAAI,YAAY,CAAC,IAAI,CAAC,CAAC;QACxC,IAAI,CAAC,SAAS,GAAG,IAAI,YAAY,CAAC,IAAI,CAAC,CAAC;QACxC,IAAI,CAAC,OAAO,GAAG,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC;IACtC,CAAC;IAED;;;;;;;;;;;;;OAaG;IACH,EAAE;QACA,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC;IACvB,CAAC;IAED;;;;;;;;;;;;;;;;;;;;OAoBG;IACH,GAAG,CAAC,KAAe;QACjB,OAAO,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IAC7B,CAAC;IAED;;;;;;;;;;;;;OAaG;IACH,OAAO,CAAI,OAAuB;QAChC,OAAO,OAAO,CAAI,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACvD,CAAC;CACF"}
+{"version":3,"file":"client.js","sourceRoot":"","sources":["../../src/client.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,EAEL,aAAa,GAGd,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAClD,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAC9C,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAC9C,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAuC,OAAO,EAAuB,MAAM,WAAW,CAAC;AAC9F,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAiB,MAAM,EAAE,MAAM,UAAU,CAAC;AACjD,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEpC,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAC9C,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAC9C,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAE9C;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,OAAO,SAAS;IACpB;;;;OAIG;IACM,MAAM,CAAiB;IAEhC;;;;OAIG;IACM,SAAS,CAAe;IAEjC;;;;;OAKG;IACM,IAAI,CAAU;IAEvB;;;;OAIG;IACM,WAAW,CAAiB;IAErC;;;;;;;;OAQG;IACM,SAAS,CAAe;IAEjC;;;;;;;OAOG;IACM,SAAS,CAAe;IAEjC;;;;;;OAMG;IACM,SAAS,CAAe;IAEjC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OA6BG;IACM,OAAO,CAAa;IAE7B;;;;;OAKG;IACM,IAAI,CAAU;IAEd,MAAM,CAAY;IAE3B;;;OAGG;IACH,YAAY,UAA4B,EAAE;QACxC,IAAI,CAAC,MAAM,GAAG,aAAa,CAAC,OAAO,CAAC,CAAC;QACrC,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;YAClB,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC;QAC9B,CAAC;aAAM,CAAC;YACN,MAAM,MAAM,GAAG,UAAU,CAAC,KAAK,CAAC;YAChC,IAAI,OAAO,MAAM,KAAK,UAAU,EAAE,CAAC;gBACjC,MAAM,IAAI,WAAW,CACnB,2DAA2D;oBACzD,6DAA6D,CAChE,CAAC;YACJ,CAAC;YACD,kEAAkE;YAClE,mEAAmE;YACnE,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACxC,CAAC;QAED,wEAAwE;QACxE,iEAAiE;QACjE,2EAA2E;QAC3E,0EAA0E;QAC1E,2DAA2D;QAC3D,IAAI,CAAC,SAAS,GAAG,IAAI,YAAY,CAAC,IAAI,CAAC,CAAC;QACxC,IAAI,CAAC,IAAI,GAAG,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;QAC9B,IAAI,CAAC,WAAW,GAAG,IAAI,cAAc,CAAC,IAAI,CAAC,CAAC;QAC5C,IAAI,CAAC,SAAS,GAAG,IAAI,YAAY,CAAC,IAAI,CAAC,CAAC;QACxC,IAAI,CAAC,SAAS,GAAG,IAAI,YAAY,CAAC,IAAI,CAAC,CAAC;QACxC,IAAI,CAAC,SAAS,GAAG,IAAI,YAAY,CAAC,IAAI,CAAC,CAAC;QACxC,IAAI,CAAC,OAAO,GAAG,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC;QACpC,IAAI,CAAC,IAAI,GAAG,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IAChC,CAAC;IAED;;;;;;;;;;;;;;OAcG;IACH,EAAE,CAAC,OAAqB;QACtB,OAAO,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IAChC,CAAC;IAED;;;;;;;;;;;;;;;;;;;;OAoBG;IACH,GAAG,CAAC,KAAe;QACjB,OAAO,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IAC7B,CAAC;IAED;;;;;;;;;;;;;OAaG;IACH,OAAO,CAAI,OAAuB;QAChC,OAAO,OAAO,CAAI,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACvD,CAAC;CACF"}

package/dist/src/config.d.ts

@@ -8,6 +8,7 @@
  *
  * @module
  */
+import { type ApiError } from "./errors.ts";
 /**
  * The API's base path, from the shared contract's `basePath`
  * (`packages/wrappers/endpoints.json`).
@@ -31,6 +32,28 @@ export declare const BASE_PATH = "";
  * narrower one), while a fake only has to accept a URL string.
  */
 export type FetchLike = (input: string, init?: RequestInit) => Promise<Response>;
+/**
+ * A per-request token supplier.
+ *
+ * Called **per request** — never cached after it settles, never resolved once
+ * at construction — so a host can rotate or mint a token out-of-band (a tenant
+ * exchange, a short-lived partner credential) and have the very next call pick
+ * it up. Requests that are in flight **concurrently** on one client share ONE
+ * supplier call (and its result); a request that starts after it settled calls
+ * the supplier again. Memoize the supplier yourself if minting is expensive.
+ * `ctx.forceRefresh` is set to `true` exactly once, on the single
+ * recovery retry a `401`/`unauthorized` triggers (`docs/implementation.md`
+ * §3); every ordinary per-request resolution omits it. A `string` `token` is
+ * the degenerate case of this shape — it behaves exactly as before.
+ *
+ * May return synchronously or return a `Promise`; either is awaited before the
+ * bearer is attached. A nullish or blank (after trimming) result is treated
+ * exactly like a nullish/blank static token — a {@linkcode ConfigError}, never
+ * a request sent with no credential.
+ */
+export type TokenProvider = (ctx?: {
+    forceRefresh?: boolean;
+}) => string | null | undefined | Promise<string | null | undefined>;
 /** Constructor options for a client. Every field is optional. */
 export interface W6WClientOptions {
     /**
@@ -42,8 +65,40 @@ export interface W6WClientOptions {
      * Overrides `W6W_BASE_URL`.
      */
     baseUrl?: string;
-    /** Bearer token, sent on every request. Overrides `W6W_TOKEN`. */
-    token?: string;
+    /**
+     * Bearer token, resolved on **every** request — not just once at
+     * construction. A plain `string` is sent verbatim on every call, exactly as
+     * before; a {@linkcode TokenProvider} function is called (and awaited)
+     * per request (concurrent requests share one in-flight call), so a host can hand back a token minted or rotated after
+     * this client was constructed. Overrides `W6W_TOKEN`, which stays a plain
+     * string (there is no environment-variable spelling of a supplier).
+     */
+    token?: string | TokenProvider;
+    /**
+     * Opt in to a single, one-shot recovery when a request fails with
+     * `401`/`unauthorized`: `token` (which must be a function for this to do
+     * anything) is called once more with `{forceRefresh: true}`, and if that
+     * yields a usable value the SAME request is re-sent once with it. Off
+     * (`false`) by default — the behaviour before this option existed. Never
+     * retries a second time, never retries any other status or code, and never
+     * applies to a `requireAuth: false` request.
+     */
+    refreshOnUnauthorized?: boolean;
+    /**
+     * Called with the terminal `401`/`unauthorized` {@linkcode ApiError} of a
+     * bearer request — after a failed recovery retry, or immediately when
+     * recovery is off or not possible (a static `token`) — at most once per
+     * call. Never called on success, never called twice, and never called for a
+     * `requireAuth: false` request.
+     */
+    onUnauthorized?: (error: ApiError) => void;
+    /**
+     * Default headers sent with every request. This is the **base** every
+     * per-request `headers` option builds on: a per-request header with the
+     * same name wins, and neither can ever displace the bearer this transport
+     * attaches (`authorization`) or the `content-type` it sets for a JSON body.
+     */
+    headers?: Record<string, string>;
     /**
      * Default project id for the project-scoped operations — `documents.*` and
      * `workflows.list`, which read it too.
@@ -69,8 +124,14 @@ export interface ResolvedConfig {
      * value that is not an absolute `http(s)` URL with a host.
      */
     readonly baseUrl: string;
-    /** The bearer token, or `null` when none was configured. */
-    readonly token: string | null;
+    /** The bearer token or supplier, or `null` when none was configured. */
+    readonly token: string | TokenProvider | null;
+    /** Opt-in one-shot 401 recovery. Defaults to `false`. */
+    readonly refreshOnUnauthorized: boolean;
+    /** Terminal-401 callback, or `null` when none was configured. */
+    readonly onUnauthorized: ((error: ApiError) => void) | null;
+    /** Default headers sent with every request. Defaults to `{}`. */
+    readonly headers: Record<string, string>;
     /** Default project id, or `null`. */
     readonly project: string | null;
 }
@@ -146,14 +207,30 @@ export declare function resolveConfig(options?: W6WClientOptions): ResolvedConfi
  * There are no anonymous operations in this surface
  * (`docs/implementation.md` §2).
  *
+ * **Resolved per call, never cached after it settles.** When `config.token` is
+ * a {@linkcode TokenProvider} it is called (and its result awaited) right here —
+ * a plain string is the degenerate case that needs no call at all. Ordinary
+ * calls (`ctx?.forceRefresh` not `true`) that overlap on one `config` share ONE
+ * in-flight supplier call; the slot is dropped when it settles, on success or
+ * failure, so nothing is cached. A forced refresh neither joins nor fills that
+ * slot. `ctx` is
+ * forwarded verbatim to the provider; passing `{forceRefresh: true}` is the
+ * one and only seam `request()`'s recovery retry uses (`docs/implementation.md`
+ * §3) — ordinary resolution never passes it.
+ *
  * A blank token counts as no token, for the same reason a blank base URL does:
  * `W6W_TOKEN=` is how a shell or a Dockerfile spells "I meant to set this and
  * did not", and `Authorization: Bearer ` would turn that into an opaque 401
- * instead of the one message that explains it.
+ * instead of the one message that explains it. The same rule applies to
+ * whatever a provider returns: nullish or blank is treated exactly like a
+ * nullish/blank static token — the error never echoes the value either way.
  *
  * @param config - The resolved configuration.
+ * @param ctx - Forwarded to a function-typed `token`; unused for a string one.
  * @returns The configured token, verbatim.
  * @throws {ConfigError} When no non-blank token is configured.
  */
-export declare function requireToken(config: ResolvedConfig): string;
+export declare function requireToken(config: ResolvedConfig, ctx?: {
+    forceRefresh?: boolean;
+}): Promise<string>;
 //# sourceMappingURL=config.d.ts.map

package/dist/src/config.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../../src/config.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAKH;;;;;;;;;GASG;AACH,eAAO,MAAM,SAAS,KAAK,CAAC;AAE5B;;;;;;;;;;GAUG;AACH,MAAM,MAAM,SAAS,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,WAAW,KAAK,OAAO,CAAC,QAAQ,CAAC,CAAC;AAEjF,iEAAiE;AACjE,MAAM,WAAW,gBAAgB;IAC/B;;;;;;;OAOG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,kEAAkE;IAClE,KAAK,CAAC,EAAE,MAAM,CAAC;IACf;;;;;;OAMG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,0DAA0D;IAC1D,KAAK,CAAC,EAAE,SAAS,CAAC;CACnB;AAED;;;;;;GAMG;AACH,MAAM,WAAW,cAAc;IAC7B;;;;OAIG;IACH,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,4DAA4D;IAC5D,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,qCAAqC;IACrC,QAAQ,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;CACjC;AAeD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2CG;AACH,wBAAgB,WAAW,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAuBlD;AAkBD;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,aAAa,CAAC,OAAO,GAAE,gBAAqB,GAAG,cAAc,CAS5E;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,YAAY,CAAC,MAAM,EAAE,cAAc,GAAG,MAAM,CAS3D"}
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../../src/config.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAGH,OAAO,EAAE,KAAK,QAAQ,EAAe,MAAM,aAAa,CAAC;AAEzD;;;;;;;;;GASG;AACH,eAAO,MAAM,SAAS,KAAK,CAAC;AAE5B;;;;;;;;;;GAUG;AACH,MAAM,MAAM,SAAS,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,WAAW,KAAK,OAAO,CAAC,QAAQ,CAAC,CAAC;AAEjF;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,MAAM,aAAa,GAAG,CAC1B,GAAG,CAAC,EAAE;IAAE,YAAY,CAAC,EAAE,OAAO,CAAA;CAAE,KAC7B,MAAM,GAAG,IAAI,GAAG,SAAS,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,GAAG,SAAS,CAAC,CAAC;AAEpE,iEAAiE;AACjE,MAAM,WAAW,gBAAgB;IAC/B;;;;;;;OAOG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB;;;;;;;OAOG;IACH,KAAK,CAAC,EAAE,MAAM,GAAG,aAAa,CAAC;IAC/B;;;;;;;;OAQG;IACH,qBAAqB,CAAC,EAAE,OAAO,CAAC;IAChC;;;;;;OAMG;IACH,cAAc,CAAC,EAAE,CAAC,KAAK,EAAE,QAAQ,KAAK,IAAI,CAAC;IAC3C;;;;;OAKG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACjC;;;;;;OAMG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,0DAA0D;IAC1D,KAAK,CAAC,EAAE,SAAS,CAAC;CACnB;AAED;;;;;;GAMG;AACH,MAAM,WAAW,cAAc;IAC7B;;;;OAIG;IACH,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,wEAAwE;IACxE,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,aAAa,GAAG,IAAI,CAAC;IAC9C,yDAAyD;IACzD,QAAQ,CAAC,qBAAqB,EAAE,OAAO,CAAC;IACxC,iEAAiE;IACjE,QAAQ,CAAC,cAAc,EAAE,CAAC,CAAC,KAAK,EAAE,QAAQ,KAAK,IAAI,CAAC,GAAG,IAAI,CAAC;IAC5D,iEAAiE;IACjE,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACzC,qCAAqC;IACrC,QAAQ,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;CACjC;AAeD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2CG;AACH,wBAAgB,WAAW,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAuBlD;AAkBD;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,aAAa,CAAC,OAAO,GAAE,gBAAqB,GAAG,cAAc,CAY5E;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AACH,wBAAgB,YAAY,CAC1B,MAAM,EAAE,cAAc,EACtB,GAAG,CAAC,EAAE;IAAE,YAAY,CAAC,EAAE,OAAO,CAAA;CAAE,GAC/B,OAAO,CAAC,MAAM,CAAC,CAajB"}

package/dist/src/config.js

@@ -138,6 +138,9 @@ export function resolveConfig(options = {}) {
         // never answer differently for the same input.
         baseUrl: joinBaseUrl(options.baseUrl ?? readEnv(ENV_BASE_URL) ?? ""),
         token: options.token ?? readEnv(ENV_TOKEN) ?? null,
+        refreshOnUnauthorized: options.refreshOnUnauthorized ?? false,
+        onUnauthorized: options.onUnauthorized ?? null,
+        headers: options.headers ?? {},
         project: options.project ?? null,
     };
 }
@@ -149,21 +152,54 @@ export function resolveConfig(options = {}) {
  * There are no anonymous operations in this surface
  * (`docs/implementation.md` §2).
  *
+ * **Resolved per call, never cached after it settles.** When `config.token` is
+ * a {@linkcode TokenProvider} it is called (and its result awaited) right here —
+ * a plain string is the degenerate case that needs no call at all. Ordinary
+ * calls (`ctx?.forceRefresh` not `true`) that overlap on one `config` share ONE
+ * in-flight supplier call; the slot is dropped when it settles, on success or
+ * failure, so nothing is cached. A forced refresh neither joins nor fills that
+ * slot. `ctx` is
+ * forwarded verbatim to the provider; passing `{forceRefresh: true}` is the
+ * one and only seam `request()`'s recovery retry uses (`docs/implementation.md`
+ * §3) — ordinary resolution never passes it.
+ *
  * A blank token counts as no token, for the same reason a blank base URL does:
  * `W6W_TOKEN=` is how a shell or a Dockerfile spells "I meant to set this and
  * did not", and `Authorization: Bearer ` would turn that into an opaque 401
- * instead of the one message that explains it.
+ * instead of the one message that explains it. The same rule applies to
+ * whatever a provider returns: nullish or blank is treated exactly like a
+ * nullish/blank static token — the error never echoes the value either way.
  *
  * @param config - The resolved configuration.
+ * @param ctx - Forwarded to a function-typed `token`; unused for a string one.
  * @returns The configured token, verbatim.
  * @throws {ConfigError} When no non-blank token is configured.
  */
-export function requireToken(config) {
-    if (config.token === null || config.token.trim().length === 0) {
+export function requireToken(config, ctx) {
+    if (typeof config.token !== "function" || ctx?.forceRefresh === true) {
+        return resolveToken(config, ctx);
+    }
+    const pending = inflightTokens.get(config);
+    if (pending)
+        return pending;
+    const flight = resolveToken(config, ctx);
+    inflightTokens.set(config, flight);
+    const clear = () => {
+        if (inflightTokens.get(config) === flight)
+            inflightTokens.delete(config);
+    };
+    flight.then(clear, clear);
+    return flight;
+}
+/** One in-flight ordinary supplier call per config (never a module-level slot). */
+const inflightTokens = new WeakMap();
+async function resolveToken(config, ctx) {
+    const raw = typeof config.token === "function" ? await config.token(ctx) : config.token;
+    if (raw === null || raw === undefined || raw.trim().length === 0) {
         throw new ConfigError("No w6w API token is configured. Pass one to the client " +
             '(new W6WClient({ token: "…" })) or set the ' +
             `${ENV_TOKEN} environment variable. Every w6w API operation is authenticated.`);
     }
-    return config.token;
+    return raw;
 }
 //# sourceMappingURL=config.js.map

package/dist/src/config.js.map

@@ -1 +1 @@
-{"version":3,"file":"config.js","sourceRoot":"","sources":["../../src/config.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAAE,YAAY,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,UAAU,CAAC;AAC5D,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAE1C;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,SAAS,GAAG,EAAE,CAAC;AA4D5B;;;;;;;;;;GAUG;AACH,MAAM,oBAAoB,GAAG,uBAAuB,CAAC;AAErD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2CG;AACH,MAAM,UAAU,WAAW,CAAC,MAAc;IACxC,0EAA0E;IAC1E,8EAA8E;IAC9E,4DAA4D;IAC5D,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IAClD,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,MAAM,IAAI,WAAW,CACnB,wDAAwD;YACtD,qEAAqE;YACrE,GAAG,YAAY,uDAAuD;YACtE,wEAAwE;YACxE,mBAAmB,CACtB,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;QAC5D,MAAM,IAAI,WAAW,CACnB,qBAAqB,OAAO,oCAAoC;YAC9D,GAAG,YAAY,sEAAsE;YACrF,6EAA6E;YAC7E,oEAAoE,CACvE,CAAC;IACJ,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;;;;GAMG;AACH,SAAS,MAAM,CAAC,MAAc;IAC5B,IAAI,CAAC;QACH,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC;QAChB,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,UAAU,aAAa,CAAC,UAA4B,EAAE;IAC1D,OAAO;QACL,6EAA6E;QAC7E,2EAA2E;QAC3E,+CAA+C;QAC/C,OAAO,EAAE,WAAW,CAAC,OAAO,CAAC,OAAO,IAAI,OAAO,CAAC,YAAY,CAAC,IAAI,EAAE,CAAC;QACpE,KAAK,EAAE,OAAO,CAAC,KAAK,IAAI,OAAO,CAAC,SAAS,CAAC,IAAI,IAAI;QAClD,OAAO,EAAE,OAAO,CAAC,OAAO,IAAI,IAAI;KACjC,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,UAAU,YAAY,CAAC,MAAsB;IACjD,IAAI,MAAM,CAAC,KAAK,KAAK,IAAI,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC9D,MAAM,IAAI,WAAW,CACnB,yDAAyD;YACvD,6CAA6C;YAC7C,GAAG,SAAS,kEAAkE,CACjF,CAAC;IACJ,CAAC;IACD,OAAO,MAAM,CAAC,KAAK,CAAC;AACtB,CAAC"}
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../../src/config.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAAE,YAAY,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,UAAU,CAAC;AAC5D,OAAO,EAAiB,WAAW,EAAE,MAAM,aAAa,CAAC;AAEzD;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,SAAS,GAAG,EAAE,CAAC;AAyH5B;;;;;;;;;;GAUG;AACH,MAAM,oBAAoB,GAAG,uBAAuB,CAAC;AAErD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2CG;AACH,MAAM,UAAU,WAAW,CAAC,MAAc;IACxC,0EAA0E;IAC1E,8EAA8E;IAC9E,4DAA4D;IAC5D,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IAClD,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,MAAM,IAAI,WAAW,CACnB,wDAAwD;YACtD,qEAAqE;YACrE,GAAG,YAAY,uDAAuD;YACtE,wEAAwE;YACxE,mBAAmB,CACtB,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;QAC5D,MAAM,IAAI,WAAW,CACnB,qBAAqB,OAAO,oCAAoC;YAC9D,GAAG,YAAY,sEAAsE;YACrF,6EAA6E;YAC7E,oEAAoE,CACvE,CAAC;IACJ,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;;;;GAMG;AACH,SAAS,MAAM,CAAC,MAAc;IAC5B,IAAI,CAAC;QACH,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC;QAChB,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,UAAU,aAAa,CAAC,UAA4B,EAAE;IAC1D,OAAO;QACL,6EAA6E;QAC7E,2EAA2E;QAC3E,+CAA+C;QAC/C,OAAO,EAAE,WAAW,CAAC,OAAO,CAAC,OAAO,IAAI,OAAO,CAAC,YAAY,CAAC,IAAI,EAAE,CAAC;QACpE,KAAK,EAAE,OAAO,CAAC,KAAK,IAAI,OAAO,CAAC,SAAS,CAAC,IAAI,IAAI;QAClD,qBAAqB,EAAE,OAAO,CAAC,qBAAqB,IAAI,KAAK;QAC7D,cAAc,EAAE,OAAO,CAAC,cAAc,IAAI,IAAI;QAC9C,OAAO,EAAE,OAAO,CAAC,OAAO,IAAI,EAAE;QAC9B,OAAO,EAAE,OAAO,CAAC,OAAO,IAAI,IAAI;KACjC,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AACH,MAAM,UAAU,YAAY,CAC1B,MAAsB,EACtB,GAAgC;IAEhC,IAAI,OAAO,MAAM,CAAC,KAAK,KAAK,UAAU,IAAI,GAAG,EAAE,YAAY,KAAK,IAAI,EAAE,CAAC;QACrE,OAAO,YAAY,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IACnC,CAAC;IACD,MAAM,OAAO,GAAG,cAAc,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IAC3C,IAAI,OAAO;QAAE,OAAO,OAAO,CAAC;IAC5B,MAAM,MAAM,GAAG,YAAY,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IACzC,cAAc,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACnC,MAAM,KAAK,GAAG,GAAG,EAAE;QACjB,IAAI,cAAc,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,MAAM;YAAE,cAAc,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAC3E,CAAC,CAAC;IACF,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IAC1B,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,mFAAmF;AACnF,MAAM,cAAc,GAAG,IAAI,OAAO,EAAmC,CAAC;AAEtE,KAAK,UAAU,YAAY,CACzB,MAAsB,EACtB,GAAgC;IAEhC,MAAM,GAAG,GAAG,OAAO,MAAM,CAAC,KAAK,KAAK,UAAU,CAAC,CAAC,CAAC,MAAM,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;IACxF,IAAI,GAAG,KAAK,IAAI,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACjE,MAAM,IAAI,WAAW,CACnB,yDAAyD;YACvD,6CAA6C;YAC7C,GAAG,SAAS,kEAAkE,CACjF,CAAC;IACJ,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC"}