@zeitvu97/cms-sdk 0.1.0

package/dist/common/constants/storage.constant.d.ts

@@ -0,0 +1,74 @@
+/**
+ * Token storage constants — the single source for the storage key so the
+ * memory/localStorage/cookie adapters never drift apart.
+ */
+export declare const TOKEN_STORAGE_KEY: "cms_access_token";
+/**
+ * Refresh-token cookie key. Stored as an httpOnly cookie (parallel to the access
+ * token) so the SDK can silently rotate the access token when it expires.
+ */
+export declare const REFRESH_TOKEN_STORAGE_KEY: "cms_refresh_token";
+/** Cookie adapter defaults (overridable via `credentials.cookie`). */
+export declare const COOKIE_DEFAULTS: {
+    readonly MAX_AGE_SECONDS: number;
+    readonly PATH: "/";
+    readonly SECURE: true;
+    readonly SAME_SITE: "Lax";
+    readonly HTTP_ONLY: true;
+};
+/** Pinia persistence keys (versioned for schema migration). */
+export declare const STORE_PERSIST_KEY: {
+    readonly AUTH: "cms-auth-v1";
+    readonly CONTENT: "cms-content-v1";
+    readonly RULES: "cms-rules-v1";
+    readonly EXECUTIONS: "cms-executions-v1";
+    readonly SETTINGS: "cms-settings-v1";
+    readonly LLM: "cms-llm-v1";
+    readonly LLM_PROVIDERS: "cms-llm-providers-v1";
+    readonly BARS: "cms-bars-v1";
+    readonly HISTORY: "cms-history-v1";
+    readonly KALSHI: "cms-kalshi-v1";
+    readonly GOV: "cms-gov-v1";
+    readonly PEOPLE: "cms-people-v1";
+};
+/**
+ * Internal cookie persistence (replaces pinia-plugin-persistedstate).
+ *
+ * Each persisted state → its own cookie `${PERSIST_KEY.<store>}.${field}`.
+ * The common `/api/cms-sdk/persist` endpoint may only set keys in
+ * `PERSIST_ALLOWED_KEYS` (single source of truth, shared by the plugin + the
+ * endpoint). The token key is always excluded as a belt-and-suspenders guard.
+ */
+export declare const PERSIST_PREFIX: "cms-persist-";
+export declare const PERSIST_KEY: {
+    readonly AUTH: "cms-persist-auth";
+};
+/** Max bytes per persisted cookie value (~4KB cookie cap, with headroom). */
+export declare const PERSIST_MAX_BYTES = 3500;
+/** Allowlist of cookie keys the persist endpoint may set. */
+export declare const PERSIST_ALLOWED_KEYS: readonly ["cms-persist-auth.authUser"];
+/**
+ * Storage backend names accepted by `TokenManager`. Kept in sync with
+ * `IStorageName` in `core/credentials/credential.type.ts`. The
+ * `httpOnlyBridge` value is the recommended production backend (delegates
+ * to a Nuxt server route).
+ */
+export declare const STORAGE_NAME: {
+    readonly MEMORY: "memory";
+    readonly LOCAL_STORAGE: "localStorage";
+    readonly COOKIE: "cookie";
+    readonly HTTP_ONLY_BRIDGE: "httpOnlyBridge";
+};
+export type StorageName = (typeof STORAGE_NAME)[keyof typeof STORAGE_NAME];
+/**
+ * `Cookie SameSite` values (RFC 6265). Used by `cookieStorage` and the
+ * SDK Nuxt module when setting the httpOnly access-token cookie. Mirrors
+ * the `CookieSameSite` type in `core/credentials/storages/cookieStorage.ts`.
+ */
+export declare const COOKIE_SAME_SITE: {
+    readonly STRICT: "Strict";
+    readonly LAX: "Lax";
+    readonly NONE: "None";
+};
+export type CookieSameSite = (typeof COOKIE_SAME_SITE)[keyof typeof COOKIE_SAME_SITE];
+//# sourceMappingURL=storage.constant.d.ts.map

package/dist/common/constants/storage.constant.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"storage.constant.d.ts","sourceRoot":"","sources":["../../../src/common/constants/storage.constant.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,eAAO,MAAM,iBAAiB,EAAG,kBAA2B,CAAC;AAE7D;;;GAGG;AACH,eAAO,MAAM,yBAAyB,EAAG,mBAA4B,CAAC;AAEtE,sEAAsE;AACtE,eAAO,MAAM,eAAe;;;;;;CAMlB,CAAC;AAEX,+DAA+D;AAC/D,eAAO,MAAM,iBAAiB;;;;;;;;;;;;;CAapB,CAAC;AAEX;;;;;;;GAOG;AACH,eAAO,MAAM,cAAc,EAAG,cAAuB,CAAC;AAEtD,eAAO,MAAM,WAAW;;CAEd,CAAC;AAEX,6EAA6E;AAC7E,eAAO,MAAM,iBAAiB,OAAO,CAAC;AAEtC,6DAA6D;AAC7D,eAAO,MAAM,oBAAoB,wCAA4C,CAAC;AAE9E;;;;;GAKG;AACH,eAAO,MAAM,YAAY;;;;;CAKf,CAAC;AACX,MAAM,MAAM,WAAW,GAAG,CAAC,OAAO,YAAY,CAAC,CAAC,MAAM,OAAO,YAAY,CAAC,CAAC;AAE3E;;;;GAIG;AACH,eAAO,MAAM,gBAAgB;;;;CAInB,CAAC;AACX,MAAM,MAAM,cAAc,GAAG,CAAC,OAAO,gBAAgB,CAAC,CAAC,MAAM,OAAO,gBAAgB,CAAC,CAAC"}

package/dist/common/helpers/format.d.ts

@@ -0,0 +1,7 @@
+/** Format a price to a symbol's digit precision. */
+export declare function formatPrice(value: number, digits?: number): string;
+/** Compute spread from bid/ask at a given precision. */
+export declare function computeSpread(bid: number, ask: number, digits?: number): number;
+/** Human label for a symbol category. */
+export declare function categoryLabel(category: string): string;
+//# sourceMappingURL=format.d.ts.map

package/dist/common/helpers/format.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"format.d.ts","sourceRoot":"","sources":["../../../src/common/helpers/format.ts"],"names":[],"mappings":"AAAA,oDAAoD;AACpD,wBAAgB,WAAW,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,SAAI,GAAG,MAAM,CAE7D;AAED,wDAAwD;AACxD,wBAAgB,aAAa,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,SAAI,GAAG,MAAM,CAE1E;AAED,yCAAyC;AACzC,wBAAgB,aAAa,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAUtD"}

package/dist/common/helpers/format.js

@@ -0,0 +1,20 @@
+function formatPrice(value, digits = 5) {
+  return value.toFixed(digits);
+}
+function computeSpread(bid, ask, digits = 5) {
+  return Number((ask - bid).toFixed(digits));
+}
+function categoryLabel(category) {
+  const map = {
+    fx: "Forex",
+    metal: "Metals",
+    crypto: "Crypto",
+    index: "Indices",
+    stock: "Stocks",
+    energy: "Energy"
+  };
+  return map[category] ?? category;
+}
+
+export { categoryLabel, computeSpread, formatPrice };
+//# sourceMappingURL=format.js.map

package/dist/common/helpers/format.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"format.js","sources":["../../../src/common/helpers/format.ts"],"sourcesContent":["/** Format a price to a symbol's digit precision. */\nexport function formatPrice(value: number, digits = 5): string {\n  return value.toFixed(digits);\n}\n\n/** Compute spread from bid/ask at a given precision. */\nexport function computeSpread(bid: number, ask: number, digits = 5): number {\n  return Number((ask - bid).toFixed(digits));\n}\n\n/** Human label for a symbol category. */\nexport function categoryLabel(category: string): string {\n  const map: Record<string, string> = {\n    fx: 'Forex',\n    metal: 'Metals',\n    crypto: 'Crypto',\n    index: 'Indices',\n    stock: 'Stocks',\n    energy: 'Energy',\n  };\n  return map[category] ?? category;\n}\n"],"names":[],"mappings":"AACO,SAAS,WAAA,CAAY,KAAA,EAAe,MAAA,GAAS,CAAA,EAAW;AAC7D,EAAA,OAAO,KAAA,CAAM,QAAQ,MAAM,CAAA;AAC7B;AAGO,SAAS,aAAA,CAAc,GAAA,EAAa,GAAA,EAAa,MAAA,GAAS,CAAA,EAAW;AAC1E,EAAA,OAAO,MAAA,CAAA,CAAQ,GAAA,GAAM,GAAA,EAAK,OAAA,CAAQ,MAAM,CAAC,CAAA;AAC3C;AAGO,SAAS,cAAc,QAAA,EAA0B;AACtD,EAAA,MAAM,GAAA,GAA8B;AAAA,IAClC,EAAA,EAAI,OAAA;AAAA,IACJ,KAAA,EAAO,QAAA;AAAA,IACP,MAAA,EAAQ,QAAA;AAAA,IACR,KAAA,EAAO,SAAA;AAAA,IACP,KAAA,EAAO,QAAA;AAAA,IACP,MAAA,EAAQ;AAAA,GACV;AACA,EAAA,OAAO,GAAA,CAAI,QAAQ,CAAA,IAAK,QAAA;AAC1B;;;;"}

package/dist/common/helpers/mt5Retcode.d.ts

@@ -0,0 +1,18 @@
+export interface IMt5RetcodeView {
+    /** Stable machine code (one of the MT5_RETCODE values). */
+    code: number;
+    /** Short human label, e.g. `PRICE_OFF_QUOTES`. */
+    label: string;
+    /** One-line FE-facing message. */
+    message: string;
+    /** What the FE should do — surface a toast, re-quote, retry, etc. */
+    suggestion: 'show-as-rejected' | 'show-as-cancelled' | 're-quote-and-retry' | 'show-new-params' | 'show-no-quotes' | 'retry-shortly';
+}
+/**
+ * Look up an MT5 broker retcode. Returns `null` if the code is unknown —
+ * FE should fall back to `error.message` from `action_result.error`.
+ *
+ * @param retcode  — the integer from `action_result.output.data.retcode`
+ */
+export declare function viewMt5Retcode(retcode: number | null | undefined): IMt5RetcodeView | null;
+//# sourceMappingURL=mt5Retcode.d.ts.map

package/dist/common/helpers/mt5Retcode.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mt5Retcode.d.ts","sourceRoot":"","sources":["../../../src/common/helpers/mt5Retcode.ts"],"names":[],"mappings":"AAWA,MAAM,WAAW,eAAe;IAC9B,2DAA2D;IAC3D,IAAI,EAAE,MAAM,CAAC;IACb,kDAAkD;IAClD,KAAK,EAAE,MAAM,CAAC;IACd,kCAAkC;IAClC,OAAO,EAAE,MAAM,CAAC;IAChB,qEAAqE;IACrE,UAAU,EACN,kBAAkB,GAClB,mBAAmB,GACnB,oBAAoB,GACpB,iBAAiB,GACjB,gBAAgB,GAChB,eAAe,CAAC;CACrB;AAED;;;;;GAKG;AACH,wBAAgB,cAAc,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAAG,eAAe,GAAG,IAAI,CAiDzF"}

package/dist/common/helpers/mt5Retcode.js

@@ -0,0 +1,2 @@
+export { A as viewMt5Retcode } from '../../chunks/mt5Retcode-DlZLQOLA.js';
+//# sourceMappingURL=mt5Retcode.js.map

package/dist/common/helpers/mt5Retcode.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mt5Retcode.js","sources":[],"sourcesContent":[],"names":[],"mappings":""}

package/dist/common/utils/case.d.ts

@@ -0,0 +1,12 @@
+/**
+ * Deep-transform an object's own keys to snake_case. Values are left untouched
+ * unless they are plain objects/arrays (recursed). Used by `createApi` when the
+ * consumer opts into `requestCasing: 'snake'` so request bodies match a backend
+ * expecting snake_case keys.
+ *
+ * Non-plain objects (URLSearchParams, FormData, Blob, Date, …) pass through.
+ */
+export declare function toSnakeCaseKeys<T>(value: T): T;
+/** Convert a single camelCase / PascalCase key to snake_case. */
+export declare function toSnake(key: string): string;
+//# sourceMappingURL=case.d.ts.map

package/dist/common/utils/case.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"case.d.ts","sourceRoot":"","sources":["../../../src/common/utils/case.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,wBAAgB,eAAe,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,GAAG,CAAC,CAY9C;AAQD,iEAAiE;AACjE,wBAAgB,OAAO,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAM3C"}

package/dist/common/utils/clone.d.ts

@@ -0,0 +1,9 @@
+/**
+ * Structured deep clone for JSON-safe values.
+ *
+ * Used internally by mock resolvers so returned data can be mutated by the
+ * caller without affecting the shared fake dataset. Not exported publicly —
+ * it serves the SDK only.
+ */
+export declare function deepClone<T>(value: T): T;
+//# sourceMappingURL=clone.d.ts.map

package/dist/common/utils/clone.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"clone.d.ts","sourceRoot":"","sources":["../../../src/common/utils/clone.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,wBAAgB,SAAS,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,GAAG,CAAC,CAExC"}

package/dist/composables/cbsStateKey.d.ts

@@ -0,0 +1,27 @@
+/**
+ * CBS silent-login shared constants + state-key helpers (direct-fetch variant).
+ *
+ * Used by the webtrade iframe receiver (`eaera-webtrade` →
+ * `composables/useSilentLoginReceiver.ts`) when running embedded inside the
+ * super-app parent. The iframe persists the `stateKey` returned by
+ * `authStore.cbsStart()` here and reads it back when the parent posts the
+ * `eaera:silent-login:callback` message.
+ */
+/** localStorage key holding the CBS `stateKey`. */
+export declare const CBS_STATE_KEY_STORAGE = "cms_sdk_cbs_state_key";
+/** postMessage `type` discriminators for the silent-login handshake. */
+export declare const SILENT_LOGIN_MESSAGE: {
+    /** parent → iframe: kick off the handshake. */
+    readonly START: "eaera:silent-login:start";
+    /** iframe → parent: CBS `authorizeUrl` ready for the parent to fetch. */
+    readonly AUTHORIZE_READY: "eaera:silent-login:authorize-ready";
+    /** parent → iframe: handshake failed (`code`). */
+    readonly ERROR: "eaera:silent-login:error";
+    /** parent → iframe: user logged out of the parent; tear down the session. */
+    readonly LOGOUT: "eaera:logout";
+};
+/** Read the persisted CBS `stateKey` (empty string when absent / non-browser). */
+export declare function readCbsStateKey(): string;
+/** Clear the persisted CBS `stateKey` (call after `/cbs/callback` settles). */
+export declare function clearCbsStateKey(): void;
+//# sourceMappingURL=cbsStateKey.d.ts.map

package/dist/composables/cbsStateKey.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cbsStateKey.d.ts","sourceRoot":"","sources":["../../src/composables/cbsStateKey.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,mDAAmD;AACnD,eAAO,MAAM,qBAAqB,0BAA0B,CAAC;AAE7D,wEAAwE;AACxE,eAAO,MAAM,oBAAoB;IAC/B,+CAA+C;;IAE/C,yEAAyE;;IAEzE,kDAAkD;;IAElD,6EAA6E;;CAErE,CAAC;AAEX,kFAAkF;AAClF,wBAAgB,eAAe,IAAI,MAAM,CAIxC;AAED,+EAA+E;AAC/E,wBAAgB,gBAAgB,IAAI,IAAI,CAEvC"}

package/dist/core/createApi.d.ts

@@ -0,0 +1,69 @@
+import { $Fetch, FetchOptions } from 'ofetch';
+import { RequestCasing, ResponseCasing } from '../common/constants/http.constant';
+import { TokenManager } from './credentials/TokenManager';
+import { CmsError } from './errors';
+export interface IDeviceContext {
+    deviceId?: string | (() => string | null);
+    deviceIp?: string | (() => string | null);
+}
+export interface ICreateApiOptions {
+    baseURL: string;
+    tokenManager: TokenManager;
+    clientId?: string;
+    device?: IDeviceContext;
+    /** Default request timeout in ms. */
+    timeout?: number;
+    /** Retry count for transient failures. */
+    retry?: number;
+    /** Global handler invoked for every error AFTER normalisation. */
+    onError?: (error: CmsError) => void;
+    /** Invoked when a 401 is observed (e.g. force logout / redirect). */
+    onUnauthorized?: (error: CmsError) => void;
+    /**
+     * Async hook called whenever the access token changes (login, refresh, 401).
+     * When provided, the hook fully owns token storage updates (including the
+     * underlying TokenManager). When omitted, createApi falls back to updating
+     * TokenManager directly.
+     */
+    onToken?: (token: string | null) => void | Promise<void>;
+    /**
+     * Silent token refresh. When provided, a 401 triggers ONE refresh attempt:
+     * the returned token replaces the access token and the request is replayed
+     * (via ofetch's native retry). Return `null` to signal "refresh failed"
+     * (the SDK then clears the session + fires `onUnauthorized`).
+     */
+    refresh?: () => Promise<string | null>;
+    /**
+     * Response casing to request from the backend. `'camel'` (default) sends no
+     * header (matches the backend default + the SDK's DTOs); `'snake'` sends
+     * `x-response-casing: snake`.
+     */
+    responseCasing?: ResponseCasing;
+    /**
+     * Request casing, declared to the backend via the `x-request-casing` header.
+     * Default `'camel'` (no header; bodies keep the SDK's camelCase keys). `'snake'`
+     * deep-converts request body keys to snake_case and sends the header.
+     */
+    requestCasing?: RequestCasing;
+    /** Extra per-request middlewares (the "dynamic interceptor" escape hatch). */
+    requestMiddlewares?: RequestMiddleware[];
+}
+export interface IRequestContext {
+    tokenManager: TokenManager;
+}
+/** Single request middleware. Return value is ignored; mutate `options`. */
+export type RequestMiddleware = (options: FetchOptions, ctx: IRequestContext) => void;
+/**
+ * Build a typed `$Fetch` instance for one endpoint (CMS, report, …).
+ *
+ * Hooks:
+ *  - `onRequest`       → inject Authorization / DeviceID / DeviceIP / client_id
+ *  - `onResponse`      → sliding-session token refresh from response header
+ *  - `onResponseError` → normalise to `CmsError`; on 401, silently refresh +
+ *    replay once (when `refresh` is provided), else trigger `onUnauthorized`
+ *
+ * Multiple endpoints share the same `tokenManager` so a refresh from one
+ * backend is visible to all.
+ */
+export declare function createApi(opts: ICreateApiOptions): $Fetch;
+//# sourceMappingURL=createApi.d.ts.map

package/dist/core/createApi.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"createApi.d.ts","sourceRoot":"","sources":["../../src/core/createApi.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAgB,YAAY,EAAiB,MAAM,QAAQ,CAAC;AAEhF,OAAO,EAKL,KAAK,aAAa,EAClB,KAAK,cAAc,EACpB,MAAM,mCAAmC,CAAC;AAE3C,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,4BAA4B,CAAC;AAC/D,OAAO,EAAE,QAAQ,EAAE,MAAM,UAAU,CAAC;AAEpC,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,EAAE,MAAM,GAAG,CAAC,MAAM,MAAM,GAAG,IAAI,CAAC,CAAC;IAC1C,QAAQ,CAAC,EAAE,MAAM,GAAG,CAAC,MAAM,MAAM,GAAG,IAAI,CAAC,CAAC;CAC3C;AAED,MAAM,WAAW,iBAAiB;IAChC,OAAO,EAAE,MAAM,CAAC;IAChB,YAAY,EAAE,YAAY,CAAC;IAC3B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,cAAc,CAAC;IACxB,qCAAqC;IACrC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,0CAA0C;IAC1C,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,kEAAkE;IAClE,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,QAAQ,KAAK,IAAI,CAAC;IACpC,qEAAqE;IACrE,cAAc,CAAC,EAAE,CAAC,KAAK,EAAE,QAAQ,KAAK,IAAI,CAAC;IAC3C;;;;;OAKG;IACH,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACzD;;;;;OAKG;IACH,OAAO,CAAC,EAAE,MAAM,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IACvC;;;;OAIG;IACH,cAAc,CAAC,EAAE,cAAc,CAAC;IAChC;;;;OAIG;IACH,aAAa,CAAC,EAAE,aAAa,CAAC;IAC9B,8EAA8E;IAC9E,kBAAkB,CAAC,EAAE,iBAAiB,EAAE,CAAC;CAC1C;AAED,MAAM,WAAW,eAAe;IAC9B,YAAY,EAAE,YAAY,CAAC;CAC5B;AAED,4EAA4E;AAC5E,MAAM,MAAM,iBAAiB,GAAG,CAAC,OAAO,EAAE,YAAY,EAAE,GAAG,EAAE,eAAe,KAAK,IAAI,CAAC;AAEtF;;;;;;;;;;;GAWG;AACH,wBAAgB,SAAS,CAAC,IAAI,EAAE,iBAAiB,GAAG,MAAM,CAiIzD"}

package/dist/core/createCmsSDK.d.ts

@@ -0,0 +1,19 @@
+import { ICmsSDK, ICmsSDKOptions } from './sdk.type';
+/**
+ * Build the CMS SDK facade.
+ *
+ * One call wires up: token storage → per-endpoint `$Fetch` instances
+ * (sharing one token + hooks) → domain services → mock toggle.
+ *
+ * @example
+ * ```ts
+ * const sdk = createCmsSDK({
+ *   endpoints: { cms: 'https://cms.example.com', report: 'https://r.example.com' },
+ *   clientId: 'web',
+ *   credentials: { storage: 'cookie' },
+ *   mock: true,
+ * })
+ * ```
+ */
+export declare function createCmsSDK(options: ICmsSDKOptions): ICmsSDK;
+//# sourceMappingURL=createCmsSDK.d.ts.map

package/dist/core/createCmsSDK.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"createCmsSDK.d.ts","sourceRoot":"","sources":["../../src/core/createCmsSDK.ts"],"names":[],"mappings":"AAkBA,OAAO,KAAK,EAAU,OAAO,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAGlE;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,YAAY,CAAC,OAAO,EAAE,cAAc,GAAG,OAAO,CAuO7D"}

package/dist/core/credentials/TokenManager.d.ts

@@ -0,0 +1,38 @@
+import { ITokenStorage } from './credential.type';
+export interface ITokenManagerOptions {
+    /** Called after every (re)set with the new token — e.g. to sync realtime socket. */
+    onRefreshed?: (token: string) => void;
+    /** Header name carrying the token. Default `Authorization`. */
+    headerName?: string;
+    /** Prefix prepended to the header value. Default `Bearer `. Pass `''` for raw. */
+    prefix?: string;
+}
+/**
+ * Single source of truth for the access token.
+ *
+ * The HTTP layer (createApi) reads via `getHeader()` in its `onRequest` hook
+ * and refreshes via `set()` in `onResponse` (sliding-session pattern). Pinia
+ * stores MUST NOT store the token — they read `currentToken` (a reactive Vue
+ * ref) for reactive access (e.g. `isLoggedIn`), or call `has()` for a
+ * one-shot check.
+ */
+export declare class TokenManager {
+    readonly headerName: string;
+    readonly prefix: string;
+    private readonly onRefreshed?;
+    private storage;
+    /** Reactive mirror of the stored token — the only reactive way to observe it. */
+    private readonly tokenRef;
+    constructor(storage: ITokenStorage, opts?: ITokenManagerOptions);
+    /** Reactive current token. Read this inside `computed` to track changes. */
+    get currentToken(): string | null;
+    get(): string | null;
+    /** Full header value ready to drop into a request (prefix + token). */
+    getHeader(): string | null;
+    has(): boolean;
+    set(token: string): void;
+    clear(): void;
+    /** Replace the underlying storage (e.g. upgrade memory → cookie after first login). */
+    swapStorage(storage: ITokenStorage): void;
+}
+//# sourceMappingURL=TokenManager.d.ts.map

package/dist/core/credentials/TokenManager.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"TokenManager.d.ts","sourceRoot":"","sources":["../../../src/core/credentials/TokenManager.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAEvD,MAAM,WAAW,oBAAoB;IACnC,oFAAoF;IACpF,WAAW,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,IAAI,CAAC;IACtC,+DAA+D;IAC/D,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,kFAAkF;IAClF,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED;;;;;;;;GAQG;AACH,qBAAa,YAAY;IACvB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAC,CAA0B;IACvD,OAAO,CAAC,OAAO,CAAgB;IAC/B,iFAAiF;IACjF,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAqB;gBAElC,OAAO,EAAE,aAAa,EAAE,IAAI,GAAE,oBAAyB;IAQnE,4EAA4E;IAC5E,IAAI,YAAY,IAAI,MAAM,GAAG,IAAI,CAEhC;IAED,GAAG,IAAI,MAAM,GAAG,IAAI;IAIpB,uEAAuE;IACvE,SAAS,IAAI,MAAM,GAAG,IAAI;IAK1B,GAAG,IAAI,OAAO;IAId,GAAG,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI;IAOxB,KAAK,IAAI,IAAI;IAKb,uFAAuF;IACvF,WAAW,CAAC,OAAO,EAAE,aAAa,GAAG,IAAI;CAO1C"}

package/dist/core/credentials/credential.type.d.ts

@@ -0,0 +1,16 @@
+import { StorageName } from '../../common/constants/storage.constant';
+export type { StorageName };
+export interface ITokenStorage {
+    get(): string | null;
+    set(token: string): void;
+    clear(): void;
+}
+/** Secondary device identifiers (DeviceID / DeviceIP) follow the same contract. */
+export interface IDeviceStorage {
+    getDeviceId(): string | null;
+    setDeviceId(id: string): void;
+    getDeviceIp(): string | null;
+    setDeviceIp(ip: string): void;
+    clearDevice(): void;
+}
+//# sourceMappingURL=credential.type.d.ts.map

package/dist/core/credentials/credential.type.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"credential.type.d.ts","sourceRoot":"","sources":["../../../src/core/credentials/credential.type.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,yCAAyC,CAAC;AAE3E,YAAY,EAAE,WAAW,EAAE,CAAC;AAE5B,MAAM,WAAW,aAAa;IAC5B,GAAG,IAAI,MAAM,GAAG,IAAI,CAAC;IACrB,GAAG,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,KAAK,IAAI,IAAI,CAAC;CACf;AAED,mFAAmF;AACnF,MAAM,WAAW,cAAc;IAC7B,WAAW,IAAI,MAAM,GAAG,IAAI,CAAC;IAC7B,WAAW,CAAC,EAAE,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,WAAW,IAAI,MAAM,GAAG,IAAI,CAAC;IAC7B,WAAW,CAAC,EAAE,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,WAAW,IAAI,IAAI,CAAC;CACrB"}

package/dist/core/credentials/resolveStorage.d.ts

@@ -0,0 +1,6 @@
+import { ICookieStorageOptions } from './storages/cookieStorage';
+import { StorageName, ITokenStorage } from './credential.type';
+/** Pick a built-in storage by name. Pass options for the `cookie` backend. */
+export declare function resolveStorage(name: StorageName, cookieOpts?: ICookieStorageOptions): ITokenStorage;
+export type { ICookieStorageOptions } from './storages/cookieStorage';
+//# sourceMappingURL=resolveStorage.d.ts.map

package/dist/core/credentials/resolveStorage.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"resolveStorage.d.ts","sourceRoot":"","sources":["../../../src/core/credentials/resolveStorage.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,qBAAqB,EAAiB,MAAM,0BAA0B,CAAC;AAGrF,OAAO,KAAK,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAEpE,8EAA8E;AAC9E,wBAAgB,cAAc,CAC5B,IAAI,EAAE,WAAW,EACjB,UAAU,CAAC,EAAE,qBAAqB,GACjC,aAAa,CAgBf;AAED,YAAY,EAAE,qBAAqB,EAAE,MAAM,0BAA0B,CAAC"}

package/dist/core/credentials/storages/cookieStorage.d.ts

@@ -0,0 +1,18 @@
+import { CookieSameSite } from '../../../common/constants/storage.constant';
+import { ITokenStorage } from '../credential.type';
+export interface ICookieStorageOptions {
+    key?: string;
+    /** Seconds. Default = 30 days (see COOKIE_DEFAULTS). */
+    maxAge?: number;
+    domain?: string;
+    path?: string;
+    secure?: boolean;
+    sameSite?: CookieSameSite;
+}
+/**
+ * Cookie-backed token storage. Client-side only: it reads/writes
+ * `document.cookie`, so it no-ops during SSR. For Nuxt SSR token sharing,
+ * the `httpOnlyBridge` storage (delegating to a Nuxt server route) is planned.
+ */
+export declare function cookieStorage(opts?: ICookieStorageOptions): ITokenStorage;
+//# sourceMappingURL=cookieStorage.d.ts.map

package/dist/core/credentials/storages/cookieStorage.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cookieStorage.d.ts","sourceRoot":"","sources":["../../../../src/core/credentials/storages/cookieStorage.ts"],"names":[],"mappings":"AAAA,OAAO,EAIL,KAAK,cAAc,EACpB,MAAM,4CAA4C,CAAC;AACpD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAExD,MAAM,WAAW,qBAAqB;IACpC,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,wDAAwD;IACxD,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,QAAQ,CAAC,EAAE,cAAc,CAAC;CAC3B;AAgBD;;;;GAIG;AACH,wBAAgB,aAAa,CAAC,IAAI,GAAE,qBAA0B,GAAG,aAAa,CAqB7E"}

package/dist/core/credentials/storages/localStorageAdapter.d.ts

@@ -0,0 +1,8 @@
+import { ITokenStorage } from '../credential.type';
+/**
+ * localStorage-backed token storage. XSS-readable, so prefer `cookieStorage`
+ * or an httpOnly bridge for production. Falls back to memory when `window`
+ * is undefined (SSR).
+ */
+export declare function localStorageAdapter(): ITokenStorage;
+//# sourceMappingURL=localStorageAdapter.d.ts.map

package/dist/core/credentials/storages/localStorageAdapter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"localStorageAdapter.d.ts","sourceRoot":"","sources":["../../../../src/core/credentials/storages/localStorageAdapter.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAIxD;;;;GAIG;AACH,wBAAgB,mBAAmB,IAAI,aAAa,CAWnD"}

package/dist/core/credentials/storages/memoryStorage.d.ts

@@ -0,0 +1,7 @@
+import { ITokenStorage } from '../credential.type';
+/**
+ * In-memory storage. Token vanishes on page reload — the safest default
+ * and a guaranteed-safe fallback for SSR where no window exists.
+ */
+export declare function memoryStorage(): ITokenStorage;
+//# sourceMappingURL=memoryStorage.d.ts.map

package/dist/core/credentials/storages/memoryStorage.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"memoryStorage.d.ts","sourceRoot":"","sources":["../../../../src/core/credentials/storages/memoryStorage.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAExD;;;GAGG;AACH,wBAAgB,aAAa,IAAI,aAAa,CAW7C"}

package/dist/core/errors.d.ts

@@ -0,0 +1,26 @@
+/**
+ * Normalised SDK error. The `onResponseError` hook inspects the raw ofetch
+ * error and converts it into this shape so consumers deal with ONE type.
+ */
+export declare class CmsError extends Error {
+    readonly statusCode: number;
+    readonly code: string;
+    readonly fieldErrors?: Record<string, string>;
+    readonly requestId?: string;
+    readonly traceId?: string;
+    constructor(input: {
+        message: string;
+        statusCode?: number;
+        code?: string;
+        fieldErrors?: Record<string, string>;
+        requestId?: string;
+        traceId?: string;
+        cause?: unknown;
+    });
+    get isUnauthorized(): boolean;
+    get isForbidden(): boolean;
+    get isNotFound(): boolean;
+    get isValidation(): boolean;
+    get isNetwork(): boolean;
+}
+//# sourceMappingURL=errors.d.ts.map

package/dist/core/errors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../../src/core/errors.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,qBAAa,QAAS,SAAQ,KAAK;IACjC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC9C,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;gBAEd,KAAK,EAAE;QACjB,OAAO,EAAE,MAAM,CAAC;QAChB,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QACrC,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,KAAK,CAAC,EAAE,OAAO,CAAC;KACjB;IAUD,IAAI,cAAc,IAAI,OAAO,CAE5B;IACD,IAAI,WAAW,IAAI,OAAO,CAEzB;IACD,IAAI,UAAU,IAAI,OAAO,CAExB;IACD,IAAI,YAAY,IAAI,OAAO,CAE1B;IACD,IAAI,SAAS,IAAI,OAAO,CAEvB;CACF"}

package/dist/core/sdk.type.d.ts

@@ -0,0 +1,115 @@
+import { $Fetch } from 'ofetch';
+import { IDeviceContext, RequestMiddleware } from './createApi';
+import { ICookieStorageOptions } from './credentials/resolveStorage';
+import { StorageName } from './credentials/credential.type';
+import { CmsError } from './errors';
+import { IWsClient } from './ws/ws.type';
+import { RequestCasing, ResponseCasing } from '../common/constants/http.constant';
+export interface IEndpointMap {
+    /** Primary CMS API. Required. */
+    cms: string;
+    /** Optional secondary backends, each gets its own $Fetch sharing the token. */
+    report?: string;
+    poolTrading?: string;
+    /**
+     * Optional CMS WebSocket endpoint (`wss://host/ws`). When omitted the SDK
+     * exposes `sdk.ws === null` and the consumer stays REST-only.
+     */
+    ws?: string;
+    [key: string]: string | undefined;
+}
+export interface ICredentialsConfig {
+    storage?: StorageName;
+    cookie?: ICookieStorageOptions;
+    headerName?: string;
+    prefix?: string;
+    onRefreshed?: (token: string) => void;
+}
+export interface ICmsSDKOptions {
+    endpoints: IEndpointMap;
+    clientId?: string;
+    credentials?: ICredentialsConfig;
+    device?: IDeviceContext;
+    timeout?: number;
+    retry?: number;
+    /**
+     * When true, domain services return fake data instead of hitting the
+     * backend. Intended for development until real endpoints exist.
+     */
+    mock?: boolean;
+    /**
+     * Response casing to request from the backend via the `x-response-casing`
+     * header. Default `'camel'` (the backend default — no header is sent, which
+     * matches the SDK's camelCase DTOs). Set `'snake'` to receive snake_case.
+     */
+    responseCasing?: ResponseCasing;
+    /**
+     * Request casing, declared to the backend via the `x-request-casing` header.
+     * Default `'camel'` (no header; request bodies use the SDK's camelCase keys).
+     * Set `'snake'` to send snake_case request bodies (keys are deep-converted).
+     */
+    requestCasing?: RequestCasing;
+    onError?: (error: CmsError) => void;
+    onUnauthorized?: (error: CmsError) => void;
+    /**
+     * Async hook called whenever the access token changes (refresh, 401).
+     * Used by the Nuxt module to sync an httpOnly cookie. When omitted,
+     * TokenManager is updated directly.
+     */
+    onToken?: (token: string | null) => void | Promise<void>;
+    /**
+     * Silent access-token refresh on 401. The Nuxt module wires this to the
+     * `/api/cms/refresh` proxy (which reads the httpOnly refresh-token cookie,
+     * rotates both tokens, and returns the new access token). Return `null` to
+     * signal a failed refresh (the session is then cleared). When omitted, a 401
+     * just clears the session + fires `onUnauthorized`.
+     */
+    refresh?: () => Promise<string | null>;
+    /**
+     * Optional `$Fetch` used by the auth service for token-lifecycle flows
+     * (login/register/verifyOtp/logout). The Nuxt module points this at the
+     * `/api/cms/*` server routes so those flows set the httpOnly cookie
+     * atomically. When omitted, token-lifecycle flows call the backend directly.
+     */
+    authRoute?: $Fetch;
+}
+/** Map of backend name → typed fetcher, built from `endpoints`. */
+export type ApiMap = Record<string, $Fetch>;
+/** Concrete SDK instance returned by `createCmsSDK()`. */
+export interface ICmsSDK {
+    readonly apis: ApiMap;
+    readonly tokenManager: import('./credentials/TokenManager').TokenManager;
+    readonly auth: import('../services/auth').IAuthService;
+    readonly content: import('../services/content').IContentService;
+    readonly rules: import('../services/rules').IRulesService;
+    readonly executions: import('../services/executions').IExecutionsService;
+    readonly settings: import('../services/settings').ISettingsService;
+    readonly llm: import('../services/llm').ILlmService;
+    readonly bars: import('../services/bars').IBarsService;
+    readonly history: import('../services/history').IHistoryService;
+    readonly kalshi: import('../services/kalshi').IKalshiService;
+    readonly gov: import('../services/gov').IGovService;
+    readonly people: import('../services/people').IPeopleService;
+    /** Read-only CT metadata (`/api/v1/content-types`) — renders forms/badges. */
+    readonly contentTypes: import('../services/content-types').IContentTypesService;
+    /** FEAT-012 — notification/report template lifecycle (engine-owned APIs). */
+    readonly notifications: import('../services/notifications').INotificationsService;
+    /**
+     * Lazily-constructed WebSocket client. `null` when `endpoints.ws` is omitted.
+     * Consumers should treat this as the source of real-time events; the
+     * `createEaeraWebSocket` instance shares the SDK's `TokenManager` and
+     * `refresh()` so token rotation is transparent.
+     */
+    readonly ws: IWsClient | null;
+    /** Runtime middleware escape hatch (the "dynamic interceptor" path). */
+    addRequestMiddleware: (target: string | 'all', mw: RequestMiddleware) => () => void;
+    /** Flip mock mode at runtime (e.g. switch off after a feature-flag rollout). */
+    setMock: (enabled: boolean) => void;
+    /**
+     * Sync the access token (login/restore/logout). When an `onToken` hook is
+     * configured (e.g. Nuxt httpOnly cookie) it is awaited; otherwise the token
+     * is written directly to TokenManager.
+     */
+    syncToken: (token: string | null) => Promise<void>;
+}
+//# sourceMappingURL=sdk.type.d.ts.map

package/dist/core/sdk.type.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sdk.type.d.ts","sourceRoot":"","sources":["../../src/core/sdk.type.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AACrC,OAAO,KAAK,EAAE,cAAc,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AACrE,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,8BAA8B,CAAC;AAC1E,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,+BAA+B,CAAC;AACjE,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AAC9C,OAAO,KAAK,EAAE,aAAa,EAAE,cAAc,EAAE,MAAM,mCAAmC,CAAC;AAEvF,MAAM,WAAW,YAAY;IAC3B,iCAAiC;IACjC,GAAG,EAAE,MAAM,CAAC;IACZ,+EAA+E;IAC/E,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB;;;OAGG;IACH,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAAC;CACnC;AAED,MAAM,WAAW,kBAAkB;IACjC,OAAO,CAAC,EAAE,WAAW,CAAC;IACtB,MAAM,CAAC,EAAE,qBAAqB,CAAC;IAC/B,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,WAAW,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,IAAI,CAAC;CACvC;AAED,MAAM,WAAW,cAAc;IAC7B,SAAS,EAAE,YAAY,CAAC;IACxB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,WAAW,CAAC,EAAE,kBAAkB,CAAC;IACjC,MAAM,CAAC,EAAE,cAAc,CAAC;IACxB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf;;;OAGG;IACH,IAAI,CAAC,EAAE,OAAO,CAAC;IACf;;;;OAIG;IACH,cAAc,CAAC,EAAE,cAAc,CAAC;IAChC;;;;OAIG;IACH,aAAa,CAAC,EAAE,aAAa,CAAC;IAC9B,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,QAAQ,KAAK,IAAI,CAAC;IACpC,cAAc,CAAC,EAAE,CAAC,KAAK,EAAE,QAAQ,KAAK,IAAI,CAAC;IAC3C;;;;OAIG;IACH,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACzD;;;;;;OAMG;IACH,OAAO,CAAC,EAAE,MAAM,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IACvC;;;;;OAKG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,mEAAmE;AACnE,MAAM,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;AAE5C,0DAA0D;AAC1D,MAAM,WAAW,OAAO;IACtB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,YAAY,EAAE,OAAO,4BAA4B,EAAE,YAAY,CAAC;IACzE,QAAQ,CAAC,IAAI,EAAE,OAAO,kBAAkB,EAAE,YAAY,CAAC;IACvD,QAAQ,CAAC,OAAO,EAAE,OAAO,qBAAqB,EAAE,eAAe,CAAC;IAChE,QAAQ,CAAC,KAAK,EAAE,OAAO,mBAAmB,EAAE,aAAa,CAAC;IAC1D,QAAQ,CAAC,UAAU,EAAE,OAAO,wBAAwB,EAAE,kBAAkB,CAAC;IACzE,QAAQ,CAAC,QAAQ,EAAE,OAAO,sBAAsB,EAAE,gBAAgB,CAAC;IACnE,QAAQ,CAAC,GAAG,EAAE,OAAO,iBAAiB,EAAE,WAAW,CAAC;IACpD,QAAQ,CAAC,IAAI,EAAE,OAAO,kBAAkB,EAAE,YAAY,CAAC;IACvD,QAAQ,CAAC,OAAO,EAAE,OAAO,qBAAqB,EAAE,eAAe,CAAC;IAChE,QAAQ,CAAC,MAAM,EAAE,OAAO,oBAAoB,EAAE,cAAc,CAAC;IAC7D,QAAQ,CAAC,GAAG,EAAE,OAAO,iBAAiB,EAAE,WAAW,CAAC;IACpD,QAAQ,CAAC,MAAM,EAAE,OAAO,oBAAoB,EAAE,cAAc,CAAC;IAC7D,8EAA8E;IAC9E,QAAQ,CAAC,YAAY,EAAE,OAAO,2BAA2B,EAAE,oBAAoB,CAAC;IAChF,6EAA6E;IAC7E,QAAQ,CAAC,aAAa,EAAE,OAAO,2BAA2B,EAAE,qBAAqB,CAAC;IAClF;;;;;OAKG;IACH,QAAQ,CAAC,EAAE,EAAE,SAAS,GAAG,IAAI,CAAC;IAC9B,wEAAwE;IACxE,oBAAoB,EAAE,CAAC,MAAM,EAAE,MAAM,GAAG,KAAK,EAAE,EAAE,EAAE,iBAAiB,KAAK,MAAM,IAAI,CAAC;IACpF,gFAAgF;IAChF,OAAO,EAAE,CAAC,OAAO,EAAE,OAAO,KAAK,IAAI,CAAC;IACpC;;;;OAIG;IACH,SAAS,EAAE,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;CACpD"}

package/dist/core/ws/createEaeraWebSocket.d.ts

@@ -0,0 +1,21 @@
+import { IWsClient, IWsClientOptions } from './ws.type';
+/**
+ * Framework-agnostic EAERA CMS WebSocket client.
+ *
+ * Implements the protocol documented in
+ * `eaera-docs/cbs/eaera-cms/docs/eaera-cms-websocket-integration-guide.md`:
+ * open → auth → subscribe → events/heartbeats/action invocation/reconnect.
+ *
+ * Token source is intentionally pluggable. The SDK's Nuxt module wires this
+ * to {@link TokenManager} + the silent `refresh()` flow, so sliding session
+ * refreshes and 401-driven cookie syncs are transparent.
+ *
+ * Reconnect schedule: exponential backoff with jitter (0…WS_RECONNECT_JITTER_MS),
+ * capped at `WS_RECONNECT_MAX_MS`. On `token_expired` / `auth_fail` mid-session
+ * the injected `refresh()` is awaited once before reconnecting.
+ *
+ * SSR safety: pass `WebSocketCtor: undefined` (or skip `open()`); the
+ * module's plugin only calls `open()` inside `if (import.meta.client)`.
+ */
+export declare function createEaeraWebSocket(options: IWsClientOptions): IWsClient;
+//# sourceMappingURL=createEaeraWebSocket.d.ts.map

package/dist/core/ws/createEaeraWebSocket.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"createEaeraWebSocket.d.ts","sourceRoot":"","sources":["../../../src/core/ws/createEaeraWebSocket.ts"],"names":[],"mappings":"AAeA,OAAO,KAAK,EAIV,SAAS,EACT,gBAAgB,EAajB,MAAM,WAAW,CAAC;AAEnB;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,gBAAgB,GAAG,SAAS,CAshBzE"}

package/dist/core/ws/index.d.ts

@@ -0,0 +1,4 @@
+export * from './ws.constants';
+export * from './ws.type';
+export { createEaeraWebSocket } from './createEaeraWebSocket';
+//# sourceMappingURL=index.d.ts.map

package/dist/core/ws/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/core/ws/index.ts"],"names":[],"mappings":"AAAA,cAAc,gBAAgB,CAAC;AAC/B,cAAc,WAAW,CAAC;AAC1B,OAAO,EAAE,oBAAoB,EAAE,MAAM,wBAAwB,CAAC"}